last executing test programs:

405.884846ms ago: executing program 0 (id=224):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0x80, 0x1524, &(0x7f0000001b80)="$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")
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r0, r0, 0x0, 0x80000000)

348.474419ms ago: executing program 0 (id=227):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r0, 0x80000003)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x5}}}}}}, 0x0)

280.63067ms ago: executing program 0 (id=232):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f000000d240)={&(0x7f000000d080)=[&(0x7f0000000380)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000003c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008b00)=@features={{0x4f32494e, 0x6, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})

196.937958ms ago: executing program 1 (id=234):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f00000008c0)={[{@volume={'volume', 0x3d, 0xe}}, {@volume={'volume', 0x3d, 0x4}}, {@gid_ignore}, {@partition}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortad}, {@gid}, {@uid_forget}, {@partition}, {@volume={'volume', 0x3d, 0x7}}]}, 0x1, 0xc57, &(0x7f0000001640)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

196.76763ms ago: executing program 2 (id=235):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c)
connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc)
syz_emit_ethernet(0x46, &(0x7f0000000540)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x3, 0x100}}}}}}}}, 0x0)

196.454683ms ago: executing program 0 (id=236):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0})

195.442195ms ago: executing program 2 (id=237):
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)

138.764685ms ago: executing program 2 (id=238):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x5e}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)

138.507362ms ago: executing program 1 (id=239):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x2, 0x40)
read$FUSE(r0, 0x0, 0x0)

138.317964ms ago: executing program 2 (id=240):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000680)={0x18, 0x0, {0x103, @remote, 'sit0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1)

137.611892ms ago: executing program 0 (id=241):
r0 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000040)="c6a5", 0x2, 0x2604c011, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x4, 0x9)

133.780955ms ago: executing program 1 (id=242):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000060800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000400), 0x1000, 0x1)

59.750776ms ago: executing program 2 (id=243):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90)

59.511377ms ago: executing program 0 (id=244):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x5, 0x4}, {0x5, 0x100}}}}, 0x11)

59.306151ms ago: executing program 1 (id=245):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

59.166926ms ago: executing program 2 (id=246):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x40000030, r0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x3ff)
sendfile(r2, r3, 0x0, 0x10ffff)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x483aa011, 0x8, 0xfffff801, 0x15, "000000000000f00a00"})

187.012µs ago: executing program 1 (id=247):
mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x100000e, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)

0s ago: executing program 1 (id=248):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51938' (ED25519) to the list of known hosts.
syzkaller login: [   41.374169][ T5579] cgroup: Unknown subsys name 'net'
[   41.478412][ T5579] cgroup: Unknown subsys name 'cpuset'
[   41.482460][ T5579] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.716527][ T5579] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.332067][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.335680][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.340207][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.340447][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.343606][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.346336][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.358290][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.359609][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.360294][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.361460][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.385567][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.389603][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.392765][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.396495][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.399741][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.831339][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.835720][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.838663][ T5596] bridge_slave_0: entered allmulticast mode
[   46.841779][ T5596] bridge_slave_0: entered promiscuous mode
[   46.860081][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.862637][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.865334][ T5596] bridge_slave_1: entered allmulticast mode
[   46.866098][ T5596] bridge_slave_1: entered promiscuous mode
[   46.889466][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.901206][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.942233][ T5596] team0: Port device team_slave_0 added
[   46.964499][ T5596] team0: Port device team_slave_1 added
[   46.977922][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.978047][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.978135][ T5592] bridge_slave_0: entered allmulticast mode
[   46.979782][ T5592] bridge_slave_0: entered promiscuous mode
[   46.981897][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.981974][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.982225][ T5592] bridge_slave_1: entered allmulticast mode
[   46.983962][ T5592] bridge_slave_1: entered promiscuous mode
[   47.005709][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.005773][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.005824][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.037116][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.037176][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.037528][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.073297][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.076691][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.076897][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.076967][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.077057][ T5600] bridge_slave_0: entered allmulticast mode
[   47.078789][ T5600] bridge_slave_0: entered promiscuous mode
[   47.115790][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.115919][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.116037][ T5600] bridge_slave_1: entered allmulticast mode
[   47.117623][ T5600] bridge_slave_1: entered promiscuous mode
[   47.122793][ T5592] team0: Port device team_slave_0 added
[   47.156661][ T5592] team0: Port device team_slave_1 added
[   47.165860][ T5596] hsr_slave_0: entered promiscuous mode
[   47.169387][ T5596] hsr_slave_1: entered promiscuous mode
[   47.173804][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.181902][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.181947][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.182148][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.183486][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.192930][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.192944][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.192959][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.213518][ T5600] team0: Port device team_slave_0 added
[   47.222615][ T5600] team0: Port device team_slave_1 added
[   47.260110][ T5592] hsr_slave_0: entered promiscuous mode
[   47.260605][ T5592] hsr_slave_1: entered promiscuous mode
[   47.261010][ T5592] debugfs: 'hsr0' already exists in 'hsr'
[   47.261055][ T5592] Cannot create hsr debugfs directory
[   47.261443][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.261448][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.261458][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.262524][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.262530][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.262539][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.356152][ T5600] hsr_slave_0: entered promiscuous mode
[   47.356625][ T5600] hsr_slave_1: entered promiscuous mode
[   47.356891][ T5600] debugfs: 'hsr0' already exists in 'hsr'
[   47.356901][ T5600] Cannot create hsr debugfs directory
[   47.529634][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.535914][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.536436][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.542517][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.544050][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.549597][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.550114][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.554368][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.603997][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.604139][ T5596] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.604606][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.604682][ T5596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.618274][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.624377][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.631887][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.637588][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.640532][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.645900][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.648996][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.655637][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.702234][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.702361][ T5592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.702468][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.702549][ T5592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.704220][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.708439][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.708921][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.714650][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.720887][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.726399][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.732626][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.737524][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.753096][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.756762][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.761104][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.764848][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.786375][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.812861][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   47.829030][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.829116][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.839651][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.839730][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.854179][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.871839][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   47.887800][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.887908][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.896620][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.896700][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.899425][ T5596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.908820][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.943627][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[   47.954521][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.954602][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.960921][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.961003][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.174078][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.200528][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.219545][ T5596] veth0_vlan: entered promiscuous mode
[   48.226919][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.232260][ T5596] veth1_vlan: entered promiscuous mode
[   48.256027][ T5600] veth0_vlan: entered promiscuous mode
[   48.259614][ T5600] veth1_vlan: entered promiscuous mode
[   48.290146][ T5592] veth0_vlan: entered promiscuous mode
[   48.300690][ T5596] veth0_macvtap: entered promiscuous mode
[   48.309838][ T5600] veth0_macvtap: entered promiscuous mode
[   48.312405][ T5592] veth1_vlan: entered promiscuous mode
[   48.319494][ T5600] veth1_macvtap: entered promiscuous mode
[   48.324520][ T5596] veth1_macvtap: entered promiscuous mode
[   48.341756][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.350064][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.353487][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.361754][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.362786][ T5592] veth0_macvtap: entered promiscuous mode
[   48.376138][ T5592] veth1_macvtap: entered promiscuous mode
[   48.385957][ T5594] Bluetooth: hci1: command tx timeout
[   48.386117][ T5594] Bluetooth: hci0: command tx timeout
[   48.422207][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.439656][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.465673][ T5598] Bluetooth: hci2: command tx timeout
[   48.480659][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.480714][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.523282][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.523347][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.539526][ T1524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.539575][ T1524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.571700][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.574907][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.587675][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.591016][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.596886][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.597326][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.597556][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.597571][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.597583][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.597595][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.597607][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.597619][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.620008][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.620021][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.627520][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.635692][ T5454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.639579][ T5454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.639598][ T5454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.642802][ T5600] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.808119][ T5706] Cannot find set identified by id 0 to match
[   48.827345][ T5710] netlink: 'syz.2.4': attribute type 2 has an invalid length.
[   48.862866][ T5713] xt_cgroup: invalid path, errno=-2
[   48.942077][ T5725] loop0: detected capacity change from 0 to 512
[   48.949850][ T5725] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   48.956568][ T5725] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   48.977008][ T5725] EXT4-fs (loop0): 1 truncate cleaned up
[   48.984618][ T5725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.003768][ T5725] EXT4-fs (loop0): shut down requested (1)
[   49.022475][ T5600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.056520][   T33] audit: type=1326 audit(1791714735.493:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.0.15" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb2e79e1d9 code=0x0
[   49.140387][ T5743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'.
[   49.284900][ T5745] loop2: detected capacity change from 0 to 32768
[   49.288801][ T5745] xfs: Deprecated parameter 'ikeep'
[   49.288858][ T5745] XFS: ikeep mount option is deprecated.
[   49.290588][ T5745] XFS (loop2): invalid logbufs value: 1 [not 2-8]
[   49.321368][ T5754] loop2: detected capacity change from 0 to 128
[   49.327887][ T5754] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   49.381154][ T5755] loop1: detected capacity change from 0 to 512
[   49.397575][ T5755] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   49.397624][ T5755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[   49.397742][ T5755] EXT4-fs (loop1): orphan cleanup on readonly fs
[   49.399030][ T5755] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.22: iget: bad i_size value: 12154761577498
[   49.399169][ T5755] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   49.401674][ T5755] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.22: couldn't read orphan inode 13 (err -117)
[   49.401792][ T5755] loop1: lost filesystem error report for type 5 error -117
[   49.409108][ T5755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   49.447172][ T5755] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.22: dx entry: limit 65535 != root limit 120
[   49.447249][ T5755] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.22: Corrupt directory, running e2fsck is recommended
[   49.693655][ T5763] syzkaller0: entered promiscuous mode
[   49.698450][ T5763] syzkaller0: entered allmulticast mode
[   49.703601][ T5763] tipc: Started in network mode
[   49.706742][ T5763] tipc: Node identity 4a1fd387be52, cluster identity 4711
[   49.708384][ T5763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.715845][ T5762] tipc: Resetting bearer <eth:syzkaller0>
[   49.729910][ T5762] tipc: Disabling bearer <eth:syzkaller0>
[   49.800535][ T5765] Zero length message leads to an empty skb
[   49.835904][ T5767] jffs2: notice: (5767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   50.057027][ T5592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.072102][ T5778] FAULT_INJECTION: forcing a failure.
[   50.072102][ T5778] name failslab, interval 1, probability 0, space 0, times 1
[   50.072163][ T5778] CPU: 0 UID: 0 PID: 5778 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(full) 
[   50.072187][ T5778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   50.072194][ T5778] Call Trace:
[   50.072198][ T5778]  <TASK>
[   50.072202][ T5778]  dump_stack_lvl+0xe8/0x150
[   50.072252][ T5778]  should_fail_ex+0x410/0x560
[   50.072275][ T5778]  should_failslab+0xa8/0x100
[   50.072288][ T5778]  ? prepare_creds+0x30/0x820
[   50.072298][ T5778]  kmem_cache_alloc_noprof+0xa1/0x600
[   50.072313][ T5778]  ? prepare_creds+0x30/0x820
[   50.072323][ T5778]  prepare_creds+0x30/0x820
[   50.072333][ T5778]  lookup_user_key+0x316/0x1150
[   50.072351][ T5778]  ? __pfx_lookup_user_key+0x10/0x10
[   50.072360][ T5778]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   50.072371][ T5778]  ? _copy_from_user+0x94/0xb0
[   50.072381][ T5778]  ? memdup_user+0x99/0xd0
[   50.072393][ T5778]  __se_sys_request_key+0x22b/0x350
[   50.072405][ T5778]  ? __pfx___se_sys_request_key+0x10/0x10
[   50.072421][ T5778]  do_syscall_64+0x166/0x520
[   50.072431][ T5778]  ? trace_irq_disable+0x3b/0x140
[   50.072439][ T5778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.072448][ T5778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.072455][ T5778] RIP: 0033:0x7f79aad9e1d9
[   50.072463][ T5778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.072471][ T5778] RSP: 002b:00007f79abb9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[   50.072482][ T5778] RAX: ffffffffffffffda RBX: 00007f79ab025fa0 RCX: 00007f79aad9e1d9
[   50.072488][ T5778] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[   50.072493][ T5778] RBP: 00007f79aae35888 R08: 0000000000000000 R09: 0000000000000000
[   50.072498][ T5778] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[   50.072504][ T5778] R13: 00007f79ab026038 R14: 00007f79ab025fa0 R15: 00007ffcc4c496c8
[   50.072516][ T5778]  </TASK>
[   50.117950][ T5780] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   50.117962][ T5780] netlink: 224 bytes leftover after parsing attributes in process `syz.0.35'.
[   50.220712][ T5788] FAULT_INJECTION: forcing a failure.
[   50.220712][ T5788] name failslab, interval 1, probability 0, space 0, times 0
[   50.222058][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'.
[   50.227729][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: syz.2.38 Not tainted syzkaller #0 PREEMPT(full) 
[   50.227756][ T5788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   50.227762][ T5788] Call Trace:
[   50.227767][ T5788]  <TASK>
[   50.227772][ T5788]  dump_stack_lvl+0xe8/0x150
[   50.227795][ T5788]  should_fail_ex+0x410/0x560
[   50.227812][ T5788]  should_failslab+0xa8/0x100
[   50.227823][ T5788]  __kmalloc_noprof+0xfe/0x720
[   50.227831][ T5788]  ? prepare_creds+0x30/0x820
[   50.227841][ T5788]  ? security_prepare_creds+0x52/0x360
[   50.227852][ T5788]  ? security_prepare_creds+0x52/0x360
[   50.227862][ T5788]  ? kmem_cache_alloc_noprof+0x156/0x600
[   50.227875][ T5788]  security_prepare_creds+0x52/0x360
[   50.227888][ T5788]  prepare_creds+0x57d/0x820
[   50.227898][ T5788]  join_session_keyring+0x1b/0x440
[   50.227908][ T5788]  lookup_user_key+0x4e6/0x1150
[   50.227917][ T5788]  ? __pfx_lookup_user_key+0x10/0x10
[   50.227925][ T5788]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   50.227937][ T5788]  __se_sys_add_key+0x315/0x420
[   50.227949][ T5788]  ? __pfx___se_sys_add_key+0x10/0x10
[   50.227961][ T5788]  ? __x64_sys_add_key+0x20/0xc0
[   50.227971][ T5788]  do_syscall_64+0x166/0x520
[   50.227981][ T5788]  ? trace_irq_disable+0x3b/0x140
[   50.227988][ T5788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.227998][ T5788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.228005][ T5788] RIP: 0033:0x7f79aad9e1d9
[   50.228014][ T5788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.228021][ T5788] RSP: 002b:00007f79abb9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   50.228031][ T5788] RAX: ffffffffffffffda RBX: 00007f79ab025fa0 RCX: 00007f79aad9e1d9
[   50.228037][ T5788] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[   50.228042][ T5788] RBP: 00007f79aae35888 R08: fffffffffffffffd R09: 0000000000000000
[   50.228048][ T5788] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[   50.228052][ T5788] R13: 00007f79ab026038 R14: 00007f79ab025fa0 R15: 00007ffcc4c496c8
[   50.228063][ T5788]  </TASK>
[   50.290612][ T1524] IPVS: starting estimator thread 0...
[   50.298067][ T5794] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[   50.350695][ T5798] : renamed from vlan0 (while UP)
[   50.395409][ T5795] IPVS: using max 86 ests per chain, 206400 per kthread
[   50.434513][ T5803] FAULT_INJECTION: forcing a failure.
[   50.434513][ T5803] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   50.434565][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(full) 
[   50.434590][ T5803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   50.434597][ T5803] Call Trace:
[   50.434601][ T5803]  <TASK>
[   50.434605][ T5803]  dump_stack_lvl+0xe8/0x150
[   50.434624][ T5803]  should_fail_ex+0x410/0x560
[   50.434641][ T5803]  prepare_alloc_pages+0x223/0x600
[   50.434653][ T5803]  __alloc_frozen_pages_noprof+0x185/0x5a0
[   50.434663][ T5803]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   50.434670][ T5803]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[   50.434679][ T5803]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   50.434688][ T5803]  ? __pfx_policy_nodemask+0x10/0x10
[   50.434700][ T5803]  __alloc_pages_noprof+0x10/0x100
[   50.434708][ T5803]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[   50.434719][ T5803]  ? alloc_pages_noprof+0x140/0x2b0
[   50.434732][ T5803]  __kasan_populate_vmalloc+0xb7/0x1c0
[   50.434743][ T5803]  alloc_vmap_area+0xd1a/0x1420
[   50.434766][ T5803]  ? __pfx_alloc_vmap_area+0x10/0x10
[   50.434779][ T5803]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[   50.434791][ T5803]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[   50.434799][ T5803]  ? __get_vm_area_node+0x155/0x2f0
[   50.434814][ T5803]  __get_vm_area_node+0x200/0x2f0
[   50.434832][ T5803]  __vmalloc_node_range_noprof+0x343/0x1540
[   50.434848][ T5803]  ? vb2_vmalloc_alloc+0xef/0x360
[   50.434873][ T5803]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   50.434883][ T5803]  ? __kasan_kmalloc+0x93/0xb0
[   50.434892][ T5803]  ? __kmalloc_cache_noprof+0x321/0x600
[   50.434903][ T5803]  vmalloc_user_noprof+0xad/0xe0
[   50.434920][ T5803]  ? vb2_vmalloc_alloc+0xef/0x360
[   50.434936][ T5803]  vb2_vmalloc_alloc+0xef/0x360
[   50.434952][ T5803]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[   50.434966][ T5803]  __vb2_queue_alloc+0xa0b/0x1660
[   50.434986][ T5803]  vb2_core_reqbufs+0xc3f/0x1470
[   50.435001][ T5803]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[   50.435010][ T5803]  ? vb2_verify_memory_type+0x1fc/0x570
[   50.435021][ T5803]  ? vb2_reqbufs+0x399/0x630
[   50.435033][ T5803]  v4l2_m2m_ioctl_reqbufs+0x10d/0x200
[   50.435043][ T5803]  __video_do_ioctl+0x8af/0xc70
[   50.435075][ T5803]  ? __pfx___video_do_ioctl+0x10/0x10
[   50.435092][ T5803]  video_usercopy+0x860/0x1430
[   50.435107][ T5803]  ? __pfx___video_do_ioctl+0x10/0x10
[   50.435118][ T5803]  ? __pfx_video_usercopy+0x10/0x10
[   50.435134][ T5803]  ? __fget_files+0x2a/0x420
[   50.435147][ T5803]  ? __fget_files+0x2a/0x420
[   50.435156][ T5803]  ? __fget_files+0x3a2/0x420
[   50.435168][ T5803]  v4l2_ioctl+0x18d/0x1e0
[   50.435179][ T5803]  ? __pfx_v4l2_ioctl+0x10/0x10
[   50.435190][ T5803]  __se_sys_ioctl+0xfc/0x170
[   50.435220][ T5803]  do_syscall_64+0x166/0x520
[   50.435232][ T5803]  ? trace_irq_disable+0x3b/0x140
[   50.435241][ T5803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.435252][ T5803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.435260][ T5803] RIP: 0033:0x7fbb2e79e1d9
[   50.435270][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.435292][ T5803] RSP: 002b:00007fbb2f65f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   50.435303][ T5803] RAX: ffffffffffffffda RBX: 00007fbb2ea25fa0 RCX: 00007fbb2e79e1d9
[   50.435309][ T5803] RDX: 0000200000000100 RSI: 00000000c0145608 RDI: 0000000000000003
[   50.435314][ T5803] RBP: 00007fbb2e835888 R08: 0000000000000000 R09: 0000000000000000
[   50.435318][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.435322][ T5803] R13: 00007fbb2ea26038 R14: 00007fbb2ea25fa0 R15: 00007ffcf8102988
[   50.435334][ T5803]  </TASK>
[   50.469500][ T5598] Bluetooth: hci0: command tx timeout
[   50.469523][ T5598] Bluetooth: hci1: command tx timeout
[   50.507725][ T5799] loop2: detected capacity change from 0 to 32768
[   50.548994][ T5594] Bluetooth: hci2: command tx timeout
[   50.552775][ T5799] (syz.2.42,5799,0):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it
[   50.562918][ T5799] (syz.2.42,5799,0):ocfs2_fill_super:1177 ERROR: status = -22
[   50.583650][ T5803] syz.0.45: vmalloc error: size 1384448, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   50.589337][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(full) 
[   50.589363][ T5803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   50.589370][ T5803] Call Trace:
[   50.589374][ T5803]  <TASK>
[   50.589384][ T5803]  dump_stack_lvl+0xe8/0x150
[   50.589403][ T5803]  warn_alloc+0x24d/0x270
[   50.589413][ T5803]  ? lockdep_hardirqs_on+0x7b/0x110
[   50.589425][ T5803]  ? __pfx_warn_alloc+0x10/0x10
[   50.589432][ T5803]  ? kfree+0x1c5/0x650
[   50.589446][ T5803]  ? __get_vm_area_node+0x219/0x2f0
[   50.589461][ T5803]  __vmalloc_node_range_noprof+0x36b/0x1540
[   50.589484][ T5803]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   50.589496][ T5803]  ? __kasan_kmalloc+0x93/0xb0
[   50.589507][ T5803]  ? __kmalloc_cache_noprof+0x321/0x600
[   50.589517][ T5803]  vmalloc_user_noprof+0xad/0xe0
[   50.589528][ T5803]  ? vb2_vmalloc_alloc+0xef/0x360
[   50.589542][ T5803]  vb2_vmalloc_alloc+0xef/0x360
[   50.589552][ T5803]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[   50.589563][ T5803]  __vb2_queue_alloc+0xa0b/0x1660
[   50.589582][ T5803]  vb2_core_reqbufs+0xc3f/0x1470
[   50.589597][ T5803]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[   50.589607][ T5803]  ? vb2_verify_memory_type+0x1fc/0x570
[   50.589618][ T5803]  ? vb2_reqbufs+0x399/0x630
[   50.589630][ T5803]  v4l2_m2m_ioctl_reqbufs+0x10d/0x200
[   50.589639][ T5803]  __video_do_ioctl+0x8af/0xc70
[   50.589653][ T5803]  ? __pfx___video_do_ioctl+0x10/0x10
[   50.589668][ T5803]  video_usercopy+0x860/0x1430
[   50.589682][ T5803]  ? __pfx___video_do_ioctl+0x10/0x10
[   50.589693][ T5803]  ? __pfx_video_usercopy+0x10/0x10
[   50.589707][ T5803]  ? __fget_files+0x2a/0x420
[   50.589718][ T5803]  ? __fget_files+0x2a/0x420
[   50.589727][ T5803]  ? __fget_files+0x3a2/0x420
[   50.589737][ T5803]  v4l2_ioctl+0x18d/0x1e0
[   50.589747][ T5803]  ? __pfx_v4l2_ioctl+0x10/0x10
[   50.589757][ T5803]  __se_sys_ioctl+0xfc/0x170
[   50.589766][ T5803]  do_syscall_64+0x166/0x520
[   50.589775][ T5803]  ? trace_irq_disable+0x3b/0x140
[   50.589783][ T5803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.589792][ T5803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.589799][ T5803] RIP: 0033:0x7fbb2e79e1d9
[   50.589808][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.589814][ T5803] RSP: 002b:00007fbb2f65f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   50.589824][ T5803] RAX: ffffffffffffffda RBX: 00007fbb2ea25fa0 RCX: 00007fbb2e79e1d9
[   50.589830][ T5803] RDX: 0000200000000100 RSI: 00000000c0145608 RDI: 0000000000000003
[   50.589835][ T5803] RBP: 00007fbb2e835888 R08: 0000000000000000 R09: 0000000000000000
[   50.589840][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.589845][ T5803] R13: 00007fbb2ea26038 R14: 00007fbb2ea25fa0 R15: 00007ffcf8102988
[   50.589857][ T5803]  </TASK>
[   50.598612][ T5803] Mem-Info:
[   50.598621][ T5803] active_anon:13518 inactive_anon:0 isolated_anon:0
[   50.598621][ T5803]  active_file:0 inactive_file:49625 isolated_file:0
[   50.598621][ T5803]  unevictable:1000 dirty:53 writeback:46
[   50.598621][ T5803]  slab_reclaimable:9639 slab_unreclaimable:78820
[   50.598621][ T5803]  mapped:18347 shmem:9160 pagetables:920
[   50.598621][ T5803]  sec_pagetables:0 bounce:0
[   50.598621][ T5803]  kernel_misc_reclaimable:0
[   50.598621][ T5803]  free:1131392 free_pcp:13708 free_cma:0
[   50.598641][ T5803] Node 0 active_anon:34808kB inactive_anon:0kB active_file:0kB inactive_file:154584kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:36184kB dirty:60kB writeback:84kB shmem:29812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7312kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   50.611577][ T5801] loop1: detected capacity change from 0 to 32768
[   50.613476][ T5803] Node 1 active_anon:18164kB inactive_anon:0kB active_file:0kB inactive_file:43916kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:37204kB dirty:152kB writeback:100kB shmem:6828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4324kB pagetables:1564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   50.613500][ T5803] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   50.613525][ T5803] lowmem_reserve[]: 0 1564 2092 2092 2092
[   50.613540][ T5803] Node 0 DMA32 free:1440544kB boost:0kB min:24772kB low:30964kB high:37156kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28008kB inactive_anon:0kB active_file:0kB inactive_file:34888kB unevictable:0kB writepending:56kB zspages:0kB present:2080636kB managed:1602232kB mlocked:0kB bounce:0kB free_pcp:7480kB local_pcp:1320kB free_cma:0kB
[   50.613567][ T5803] lowmem_reserve[]: 0 0 527 527 527
[   50.613582][ T5803] Node 0 Normal free:10576kB boost:0kB min:8504kB low:10628kB high:12752kB reserved_highatomic:0kB free_highatomic:0kB active_anon:5372kB inactive_anon:0kB active_file:0kB inactive_file:119696kB unevictable:2000kB writepending:36kB zspages:0kB present:1572868kB managed:540392kB mlocked:0kB bounce:0kB free_pcp:7184kB local_pcp:1884kB free_cma:0kB
[   50.613606][ T5803] lowmem_reserve[]: 0 0 0 0 0
[   50.613620][ T5803] Node 1 Normal free:3066848kB boost:0kB min:56588kB low:70732kB high:84876kB reserved_highatomic:0kB free_highatomic:0kB active_anon:18164kB inactive_anon:0kB active_file:0kB inactive_file:43916kB unevictable:2000kB writepending:152kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:34980kB local_pcp:6832kB free_cma:0kB
[   50.613641][ T5803] lowmem_reserve[]: 0 0 0 0 0
[   50.613654][ T5803] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   50.613697][ T5803] Node 0 DMA32: 6114*4kB (ME) 3*8kB (M) 4*16kB (UME) 6*32kB (ME) 2*64kB (M) 4*128kB (UME) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 343*4096kB (M) = 1440544kB
[   50.613755][ T5803] Node 0 Normal: 124*4kB (U) 184*8kB (U) 1*16kB (U) 13*32kB (U) 89*64kB (U) 15*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10528kB
[   50.613808][ T5803] Node 1 Normal: 82*4kB (M) 203*8kB (UM) 62*16kB (UME) 61*32kB (UM) 24*64kB (UM) 10*128kB (M) 4*256kB (M) 5*512kB (UME) 2*1024kB (ME) 3*2048kB (M) 744*4096kB (M) = 3066912kB
[   50.613868][ T5803] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   50.613874][ T5803] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   50.613882][ T5803] 58365 total pagecache pages
[   50.613885][ T5803] 0 pages in swap cache
[   50.613888][ T5803] Free swap  = 124996kB
[   50.613891][ T5803] Total swap = 124996kB
[   50.613894][ T5803] 1834877 pages RAM
[   50.613896][ T5803] 0 pages HighMem/MovableOnly
[   50.613899][ T5803] 396709 pages reserved
[   50.613901][ T5803] 0 pages cma reserved
[   50.660441][ T5801] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   50.699238][ T5801] XFS (loop1): Ending clean mount
[   50.829445][ T5592] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   50.947050][ T5824] FAULT_INJECTION: forcing a failure.
[   50.947050][ T5824] name failslab, interval 1, probability 0, space 0, times 0
[   50.954710][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) 
[   50.954741][ T5824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   50.954748][ T5824] Call Trace:
[   50.954754][ T5824]  <TASK>
[   50.954758][ T5824]  dump_stack_lvl+0xe8/0x150
[   50.954777][ T5824]  should_fail_ex+0x410/0x560
[   50.954794][ T5824]  should_failslab+0xa8/0x100
[   50.954805][ T5824]  __kvmalloc_node_noprof+0x176/0x820
[   50.954816][ T5824]  ? sbitmap_init_node+0x2bc/0x630
[   50.954827][ T5824]  ? sbitmap_init_node+0x2bc/0x630
[   50.954839][ T5824]  sbitmap_init_node+0x2bc/0x630
[   50.954852][ T5824]  sbitmap_queue_init_node+0x3e/0x4d0
[   50.954864][ T5824]  kyber_alloc_sched_data+0x25d/0x540
[   50.954875][ T5824]  blk_mq_alloc_sched_res+0x103/0x360
[   50.954886][ T5824]  elevator_change+0x122/0x480
[   50.954899][ T5824]  ? do_raw_spin_unlock+0x4d/0x200
[   50.954912][ T5824]  elv_iosched_store+0x504/0x630
[   50.954927][ T5824]  ? __pfx_elv_iosched_store+0x10/0x10
[   50.954944][ T5824]  ? __lock_acquire+0x6df/0x2e50
[   50.954954][ T5824]  queue_attr_store+0x207/0x2b0
[   50.954966][ T5824]  ? __pfx_queue_attr_store+0x10/0x10
[   50.954976][ T5824]  ? lock_acquire+0x115/0x350
[   50.954984][ T5824]  ? sysfs_file_kobj+0x1a/0x230
[   50.954998][ T5824]  ? sysfs_file_kobj+0x1a/0x230
[   50.955008][ T5824]  ? sysfs_file_kobj+0x1a/0x230
[   50.955017][ T5824]  ? sysfs_file_kobj+0x1a/0x230
[   50.955028][ T5824]  ? sysfs_file_kobj+0x1e4/0x230
[   50.955038][ T5824]  ? sysfs_kf_write+0x166/0x260
[   50.955050][ T5824]  ? __pfx_sysfs_kf_write+0x10/0x10
[   50.955060][ T5824]  kernfs_fop_write_iter+0x3a4/0x540
[   50.955071][ T5824]  vfs_write+0x612/0xba0
[   50.955086][ T5824]  ? __pfx_vfs_write+0x10/0x10
[   50.955117][ T5824]  ? __fget_files+0x2a/0x420
[   50.955134][ T5824]  ksys_write+0x150/0x270
[   50.955145][ T5824]  ? __pfx_ksys_write+0x10/0x10
[   50.955160][ T5824]  do_syscall_64+0x166/0x520
[   50.955170][ T5824]  ? trace_irq_disable+0x3b/0x140
[   50.955178][ T5824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.955189][ T5824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.955220][ T5824] RIP: 0033:0x7fbb2e79e1d9
[   50.955230][ T5824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.955238][ T5824] RSP: 002b:00007fbb2f65f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   50.955248][ T5824] RAX: ffffffffffffffda RBX: 00007fbb2ea25fa0 RCX: 00007fbb2e79e1d9
[   50.955254][ T5824] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[   50.955260][ T5824] RBP: 00007fbb2e835888 R08: 0000000000000000 R09: 0000000000000000
[   50.955265][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.955270][ T5824] R13: 00007fbb2ea26038 R14: 00007fbb2ea25fa0 R15: 00007ffcf8102988
[   50.955282][ T5824]  </TASK>
[   51.006779][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52'.
[   51.016679][ T5824] FAULT_INJECTION: forcing a failure.
[   51.016679][ T5824] name failslab, interval 1, probability 0, space 0, times 0
[   51.016696][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) 
[   51.016705][ T5824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   51.016710][ T5824] Call Trace:
[   51.016714][ T5824]  <TASK>
[   51.016717][ T5824]  dump_stack_lvl+0xe8/0x150
[   51.016757][ T5824]  should_fail_ex+0x410/0x560
[   51.016774][ T5824]  should_failslab+0xa8/0x100
[   51.016786][ T5824]  __kmalloc_noprof+0xfe/0x720
[   51.016796][ T5824]  ? tomoyo_encode+0x2ad/0x570
[   51.016805][ T5824]  ? tomoyo_encode+0x2ad/0x570
[   51.016817][ T5824]  tomoyo_encode+0x2ad/0x570
[   51.016828][ T5824]  tomoyo_realpath_from_path+0x5fa/0x640
[   51.016841][ T5824]  tomoyo_check_open_permission+0x229/0x470
[   51.016855][ T5824]  ? tomoyo_check_open_permission+0x1d3/0x470
[   51.016866][ T5824]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[   51.016879][ T5824]  ? __asan_memset+0x22/0x50
[   51.016902][ T5824]  ? tomoyo_file_open+0x163/0x220
[   51.016915][ T5824]  security_file_open+0xa9/0x240
[   51.016926][ T5824]  do_dentry_open+0x4a0/0x1380
[   51.016940][ T5824]  vfs_open+0x3b/0x340
[   51.016947][ T5824]  ? path_openat+0x1428/0x1d60
[   51.016955][ T5824]  path_openat+0x1443/0x1d60
[   51.016969][ T5824]  do_file_open+0x23e/0x4a0
[   51.016979][ T5824]  ? __pfx_do_file_open+0x10/0x10
[   51.016994][ T5824]  ? _raw_spin_unlock+0x28/0x50
[   51.017003][ T5824]  ? alloc_fd+0x651/0x6c0
[   51.017016][ T5824]  do_sys_openat2+0x115/0x200
[   51.017025][ T5824]  ? __se_sys_futex+0x3a8/0x450
[   51.017034][ T5824]  ? __pfx_do_sys_openat2+0x10/0x10
[   51.017043][ T5824]  ? ksys_write+0x242/0x270
[   51.017054][ T5824]  ? rcu_is_watching+0x16/0xb0
[   51.017066][ T5824]  __x64_sys_openat+0x138/0x170
[   51.017077][ T5824]  do_syscall_64+0x166/0x520
[   51.017087][ T5824]  ? trace_irq_disable+0x3b/0x140
[   51.017099][ T5824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.017109][ T5824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.017116][ T5824] RIP: 0033:0x7fbb2e79e1d9
[   51.017124][ T5824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.017131][ T5824] RSP: 002b:00007fbb2f65f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   51.017141][ T5824] RAX: ffffffffffffffda RBX: 00007fbb2ea25fa0 RCX: 00007fbb2e79e1d9
[   51.017146][ T5824] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[   51.017152][ T5824] RBP: 00007fbb2e835888 R08: 0000000000000000 R09: 0000000000000000
[   51.017157][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.017162][ T5824] R13: 00007fbb2ea26038 R14: 00007fbb2ea25fa0 R15: 00007ffcf8102988
[   51.017173][ T5824]  </TASK>
[   51.018911][ T5824] ERROR: Out of memory at tomoyo_realpath_from_path.
[   51.163832][ T5832] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET)
[   51.266372][ T5658] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   51.420595][ T5658] usb 3-1: unable to get BOS descriptor or descriptor too short
[   51.420752][ T5658] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[   51.428827][ T5658] usb 3-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16
[   51.429217][ T5658] usb 3-1: config 66 interface 0 has no altsetting 0
[   51.435086][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.435902][ T5658] usb 3-1: Product: syz
[   51.436655][ T5658] usb 3-1: Manufacturer: syz
[   51.436667][ T5658] usb 3-1: SerialNumber: syz
[   51.446277][ T5826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   51.658293][ T5658] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint
[   51.663687][ T5658] usb 3-1: USB disconnect, device number 2
[   52.217075][ T5853] capability: warning: `syz.2.65' uses deprecated v2 capabilities in a way that may be insecure
[   52.219666][ T5854] netlink: 'syz.0.63': attribute type 30 has an invalid length.
[   52.591995][ T5868] loop2: detected capacity change from 0 to 512
[   52.596505][ T5868] EXT4-fs: quotafile must be on filesystem root
[   52.601291][ T5594] Bluetooth: hci1: command tx timeout
[   52.601314][ T5594] Bluetooth: hci0: command tx timeout
[   52.615362][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[   52.625867][ T5598] Bluetooth: hci2: command tx timeout
[   52.771945][ T5876] loop0: detected capacity change from 0 to 4096
[   52.783132][ T5876] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   52.926286][ T5880] netlink: 64 bytes leftover after parsing attributes in process `syz.0.76'.
[   52.926351][ T5880] netlink: 64 bytes leftover after parsing attributes in process `syz.0.76'.
[   52.926402][ T5880] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[   53.071411][ T5888] loop1: detected capacity change from 0 to 256
[   53.164287][ T5890] loop2: detected capacity change from 0 to 128
[   53.175869][ T5890] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.176151][ T5890] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   53.204854][ T5596] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.255657][ T5899] syz_tun: entered allmulticast mode
[   53.276479][   T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   53.367806][ T5907] NILFS (loop1): invalid segment: Checksum error in segment payload
[   53.367855][ T5907] NILFS (loop1): trying rollback from an earlier position
[   53.379997][ T5907] NILFS (loop1): recovery complete
[   53.382672][ T5909] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   53.392430][ T5907] NILFS (loop1): nilfs_sufile_do_free: segment 11 is already clean
[   53.435867][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   53.438002][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.438026][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[   53.438960][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   53.438970][   T10] usb 1-1: SerialNumber: syz
[   53.442790][   T10] hub 1-1:1.0: bad descriptor, ignoring hub
[   53.442802][   T10] hub 1-1:1.0: probe with driver hub failed with error -5
[   53.520996][ T5915] netlink: 'syz.1.92': attribute type 11 has an invalid length.
[   53.607486][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   53.636828][ T5921] EXT4-fs (loop1): 1 truncate cleaned up
[   53.637575][ T5921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.652696][ T5921] EXT4-fs (loop1): Online resizing not supported with sparse_super2
[   53.668748][ T5592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.755594][   T25] usb 1-1: USB disconnect, device number 2
[   54.189329][ T5947] set_capacity_and_notify: 2 callbacks suppressed
[   54.192106][ T5947] loop1: detected capacity change from 0 to 4096
[   54.199187][ T5947] NILFS (loop1): invalid segment: Checksum error in segment payload
[   54.203128][ T5947] NILFS (loop1): trying rollback from an earlier position
[   54.212905][ T5949] netlink: 104 bytes leftover after parsing attributes in process `syz.0.108'.
[   54.224882][ T5947] NILFS (loop1): recovery complete
[   54.230459][ T5950] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   54.307924][ T5961] warning: `syz.1.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.575322][ T5665] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   54.595257][ T5657] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   54.625490][ T5594] Bluetooth: hci1: command tx timeout
[   54.627393][ T5598] Bluetooth: hci0: command tx timeout
[   54.705421][ T5598] Bluetooth: hci2: command tx timeout
[   54.725246][ T5665] usb 1-1: Using ep0 maxpacket: 16
[   54.727869][ T5665] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[   54.728841][ T5665] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.728855][ T5665] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   54.728865][ T5665] usb 1-1: config 0 interface 0 has no altsetting 0
[   54.728879][ T5665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.731918][ T5665] usb 1-1: config 0 descriptor??
[   54.765945][ T5657] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   54.769800][ T5657] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   54.772428][ T5657] usb 2-1: config 0 has no interface number 0
[   54.774648][ T5657] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   54.778204][ T5657] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.781420][ T5657] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   54.785639][ T5657] usb 2-1: config 0 interface 1 has no altsetting 0
[   54.788952][ T5657] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[   54.792331][ T5657] usb 2-1: Manufacturer: syz
[   54.797590][ T5657] usb 2-1: config 0 descriptor??
[   55.144225][ T5665] uclogic 0003:28BD:0042.0001: interface is invalid, ignoring
[   55.145815][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.118'.
[   55.281694][ T5978] FAULT_INJECTION: forcing a failure.
[   55.281694][ T5978] name failslab, interval 1, probability 0, space 0, times 0
[   55.281750][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) 
[   55.281774][ T5978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   55.281795][ T5978] Call Trace:
[   55.281800][ T5978]  <TASK>
[   55.281804][ T5978]  dump_stack_lvl+0xe8/0x150
[   55.281821][ T5978]  should_fail_ex+0x410/0x560
[   55.281837][ T5978]  should_failslab+0xa8/0x100
[   55.281848][ T5978]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[   55.281858][ T5978]  ? key_alloc+0x35c/0x1020
[   55.281867][ T5978]  ? key_alloc+0x35c/0x1020
[   55.281877][ T5978]  kmemdup_noprof+0x2b/0x70
[   55.281886][ T5978]  key_alloc+0x35c/0x1020
[   55.281899][ T5978]  keyring_alloc+0x45/0xb0
[   55.281911][ T5978]  look_up_user_keyrings+0x461/0x670
[   55.281926][ T5978]  ? __pfx_look_up_user_keyrings+0x10/0x10
[   55.281938][ T5978]  ? __pfx___futex_wait+0x10/0x10
[   55.281950][ T5978]  ? lookup_user_key+0xd0/0x1150
[   55.281959][ T5978]  lookup_user_key+0x361/0x1150
[   55.281968][ T5978]  ? __pfx_lookup_user_key+0x10/0x10
[   55.281977][ T5978]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   55.281986][ T5978]  ? futex_wait+0x2a2/0x390
[   55.281998][ T5978]  ? __pfx_futex_wait+0x10/0x10
[   55.282011][ T5978]  keyctl_session_to_parent+0x28/0xa30
[   55.282025][ T5978]  __se_sys_keyctl+0x780/0x9d0
[   55.282036][ T5978]  ? __pfx___se_sys_keyctl+0x10/0x10
[   55.282047][ T5978]  ? __pfx_do_futex+0x10/0x10
[   55.282060][ T5978]  ? __se_sys_futex+0x3a8/0x450
[   55.282071][ T5978]  ? __pfx___se_sys_futex+0x10/0x10
[   55.282084][ T5978]  ? __x64_sys_keyctl+0x20/0xc0
[   55.282096][ T5978]  do_syscall_64+0x166/0x520
[   55.282105][ T5978]  ? trace_irq_disable+0x3b/0x140
[   55.282113][ T5978]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.282123][ T5978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.282153][ T5978] RIP: 0033:0x7f79aad9e1d9
[   55.282162][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.282169][ T5978] RSP: 002b:00007f79abb9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[   55.282179][ T5978] RAX: ffffffffffffffda RBX: 00007f79ab025fa0 RCX: 00007f79aad9e1d9
[   55.282185][ T5978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[   55.282189][ T5978] RBP: 00007f79aae35888 R08: 0000000000000000 R09: 0000000000000000
[   55.282195][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.282199][ T5978] R13: 00007f79ab026038 R14: 00007f79ab025fa0 R15: 00007ffcc4c496c8
[   55.282211][ T5978]  </TASK>
[   55.360665][   T93] usb 1-1: USB disconnect, device number 3
[   55.421886][ T5657] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0002/input/input4
[   55.489436][ T5657] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0002/input/input5
[   55.502224][ T5657] uclogic 0003:145F:0212.0002: input,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.1-1/input1
[   55.615055][ T5665] usb 2-1: USB disconnect, device number 2
[   55.703444][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'.
[   55.778101][ T6004] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[   56.035284][   T93] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   56.164542][ T6026] loop0: detected capacity change from 0 to 512
[   56.185836][   T93] usb 3-1: Using ep0 maxpacket: 16
[   56.186479][   T93] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[   56.189775][   T93] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[   56.189787][   T93] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[   56.189795][   T93] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[   56.189802][   T93] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[   56.189808][   T93] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[   56.189816][   T93] usb 3-1: config 0 has no interface number 0
[   56.189832][   T93] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[   56.189843][   T93] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[   56.189852][   T93] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[   56.189864][   T93] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   56.189881][   T93] usb 3-1: config 0 interface 125 has no altsetting 0
[   56.189887][   T93] usb 3-1: config 0 interface 125 has no altsetting 2
[   56.194174][   T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.194190][   T93] usb 3-1: Product: syz
[   56.194196][   T93] usb 3-1: Manufacturer: syz
[   56.194201][   T93] usb 3-1: SerialNumber: syz
[   56.196913][   T93] usb 3-1: config 0 descriptor??
[   56.201985][   T93] usb 3-1: selecting invalid altsetting 2
[   56.626983][    C1] usb 3-1: async_complete: urb error -71
[   56.627038][    C1] usb 3-1: async_complete: urb error -71
[   56.627064][    C1] usb 3-1: async_complete: urb error -71
[   56.628131][   T93] get_1284_register: usb error -71
[   56.641892][   T93] usb 3-1: USB disconnect, device number 3
[   56.972601][ T6073] loop0: detected capacity change from 0 to 512
[   56.999143][ T6073] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.164: iget: bad i_size value: 38620345925642
[   57.003059][ T6073] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   57.003646][ T6073] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.164: couldn't read orphan inode 15 (err -117)
[   57.006724][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   57.006732][    C0] EXT4-fs (loop0): initial error at time 1791714743: ext4_orphan_get:1403: inode 15
[   57.006744][    C0] EXT4-fs (loop0): last error at time 1791714743: ext4_orphan_get:1403: inode 15
[   57.019452][ T6073] loop0: lost filesystem error report for type 5 error -117
[   57.021333][ T6073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.058670][ T5600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.179676][ T5598] Bluetooth: hci0: Zero size dump init pkt
[   57.188756][ T5657] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   57.243183][ T6094] loop0: detected capacity change from 0 to 128
[   57.243665][ T6094] =======================================================
[   57.243665][ T6094] WARNING: The mand mount option has been deprecated and
[   57.243665][ T6094]          and is ignored by this kernel. Remove the mand
[   57.243665][ T6094]          option from the mount to silence this warning.
[   57.243665][ T6094] =======================================================
[   57.247648][ T6094] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   57.247931][ T6094] hpfs: filesystem error: improperly stopped
[   57.248051][ T6094] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   57.248163][ T6094] hpfs: You really don't want any checks? You are crazy...
[   57.248289][ T6094] hpfs: Code page index out of array
[   57.248357][ T6094] hpfs: code page support is disabled
[   57.248876][ T6094] hpfs: hpfs_map_4sectors(): unaligned read
[   57.249025][ T6094] hpfs: hpfs_map_4sectors(): unaligned read
[   57.249050][ T6094] hpfs: filesystem error: unable to find root dir
[   57.331805][ T6096] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[   57.331863][ T6096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.340747][ T5657] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   57.344541][ T5657] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.344594][ T5657] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   57.344649][ T5657] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   57.360323][ T5657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.360360][ T5657] usb 2-1: Product: syz
[   57.360400][ T5657] usb 2-1: Manufacturer: syz
[   57.360424][ T5657] usb 2-1: SerialNumber: syz
[   57.378040][ T5657] cdc_mbim 2-1:1.0: skipping garbage
[   57.382266][ T5657] usb 2-1: selecting invalid altsetting 1
[   57.518993][ T6114] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   57.519682][ T6114] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   57.582551][ T5657] cdc_mbim 2-1:1.0: bind() failure
[   57.588869][ T5657] usb 2-1: USB disconnect, device number 3
[   57.670325][ T6130] input: syz0 as /devices/virtual/input/input6
[   57.763402][ T6138] batman_adv: batadv0: Adding interface: syzkaller0
[   57.763512][ T6138] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.763823][ T6138] batman_adv: batadv0: Interface activated: syzkaller0
[   57.773862][ T6137] batman_adv: batadv0: Interface deactivated: syzkaller0
[   57.791680][ T6137] batman_adv: batadv0: Removing interface: syzkaller0
[   57.803203][ T6140] FAULT_INJECTION: forcing a failure.
[   57.803203][ T6140] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   57.803267][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) 
[   57.803292][ T6140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   57.803299][ T6140] Call Trace:
[   57.803303][ T6140]  <TASK>
[   57.803308][ T6140]  dump_stack_lvl+0xe8/0x150
[   57.803326][ T6140]  should_fail_ex+0x410/0x560
[   57.803342][ T6140]  prepare_alloc_pages+0x223/0x600
[   57.803353][ T6140]  __alloc_frozen_pages_noprof+0x185/0x5a0
[   57.803362][ T6140]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   57.803370][ T6140]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[   57.803378][ T6140]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   57.803388][ T6140]  ? __pfx_policy_nodemask+0x10/0x10
[   57.803400][ T6140]  __alloc_pages_noprof+0x10/0x100
[   57.803409][ T6140]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[   57.803420][ T6140]  ? alloc_pages_noprof+0x140/0x2b0
[   57.803431][ T6140]  __kasan_populate_vmalloc+0xb7/0x1c0
[   57.803441][ T6140]  alloc_vmap_area+0xd1a/0x1420
[   57.803459][ T6140]  ? __pfx_alloc_vmap_area+0x10/0x10
[   57.803468][ T6140]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[   57.803477][ T6140]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[   57.803485][ T6140]  ? __get_vm_area_node+0x155/0x2f0
[   57.803496][ T6140]  __get_vm_area_node+0x200/0x2f0
[   57.803508][ T6140]  __vmalloc_node_range_noprof+0x343/0x1540
[   57.803518][ T6140]  ? kernel_read_file+0x3f0/0x680
[   57.803531][ T6140]  ? lapic_next_event+0x11/0x20
[   57.803541][ T6140]  ? __pfx_clockevents_program_event+0x10/0x10
[   57.803551][ T6140]  ? ima_read_file+0x85/0x1c0
[   57.803562][ T6140]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   57.803577][ T6140]  ? irqentry_exit+0x218/0x910
[   57.803587][ T6140]  ? kernel_read_file+0x3f0/0x680
[   57.803595][ T6140]  vmalloc_noprof+0xb2/0xe0
[   57.803605][ T6140]  ? kernel_read_file+0x3f0/0x680
[   57.803614][ T6140]  kernel_read_file+0x3f0/0x680
[   57.803640][ T6140]  ? __pfx_kernel_read_file+0x10/0x10
[   57.803654][ T6140]  __se_sys_finit_module+0x42d/0x720
[   57.803665][ T6140]  ? __pfx___se_sys_finit_module+0x10/0x10
[   57.803685][ T6140]  ? rcu_is_watching+0x16/0xb0
[   57.803698][ T6140]  do_syscall_64+0x166/0x520
[   57.803707][ T6140]  ? trace_irq_disable+0x3b/0x140
[   57.803718][ T6140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.803727][ T6140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.803734][ T6140] RIP: 0033:0x7fbb2e79e1d9
[   57.803743][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.803749][ T6140] RSP: 002b:00007fbb2f65f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[   57.803758][ T6140] RAX: ffffffffffffffda RBX: 00007fbb2ea25fa0 RCX: 00007fbb2e79e1d9
[   57.803764][ T6140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   57.803768][ T6140] RBP: 00007fbb2e835888 R08: 0000000000000000 R09: 0000000000000000
[   57.803772][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.803777][ T6140] R13: 00007fbb2ea26038 R14: 00007fbb2ea25fa0 R15: 00007ffcf8102988
[   57.803788][ T6140]  </TASK>
[   57.852438][ T6142] netlink: 'syz.0.192': attribute type 1 has an invalid length.
[   57.852450][ T6142] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.192'.
[   57.852457][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'.
[   57.902227][ T6144] loop0: detected capacity change from 0 to 128
[   57.939830][   T33] audit: type=1800 audit(1791714744.373:3): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.193" name="file1" dev="loop0" ino=1048626 res=0 errno=0
[   57.951185][ T6144] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[   57.951199][ T6144] FAT-fs (loop0): Filesystem has been set read-only
[   57.952185][ T6144] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[   57.991611][ T6151] loop2: detected capacity change from 0 to 128
[   57.999249][ T6151] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   58.004119][ T6151] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   58.027830][ T5596] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   58.031288][ T6156] loop0: detected capacity change from 0 to 16
[   58.063487][ T6156] erofs (device loop0): mounted with root inode @ nid 36.
[   58.071511][ T6156] erofs (device loop0): invalid de[0].nameoff 0 @ nid 36
[   58.225599][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'.
[   58.335240][   T93] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   58.395944][ T6173] gretap0: entered promiscuous mode
[   58.485191][   T93] usb 1-1: Using ep0 maxpacket: 16
[   58.485718][   T93] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   58.486664][   T93] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[   58.492209][   T93] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.492226][   T93] usb 1-1: Product: syz
[   58.492235][   T93] usb 1-1: Manufacturer: syz
[   58.492243][   T93] usb 1-1: SerialNumber: syz
[   58.501645][   T93] r8152-cfgselector 1-1: Unknown version 0x0000
[   58.501658][   T93] r8152-cfgselector 1-1: config 0 descriptor??
[   58.775228][ T5672] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   58.914056][ T5657] r8152-cfgselector 1-1: USB disconnect, device number 4
[   58.925888][ T5672] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[   58.927115][ T5672] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   58.927126][ T5672] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   58.927142][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.157835][ T5657] usb 3-1: USB disconnect, device number 4
[   59.483605][ T6197] loop1: detected capacity change from 0 to 64
[   59.533719][ T6201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.574222][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'.
[   59.611817][ T6211] loop0: detected capacity change from 0 to 256
[   59.638799][ T6211] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x20200bb1, utbl_chksum : 0xe619d30d)
[   59.652762][ T6211] exFAT-fs (loop0): start_clu is invalid cluster(0x0)
[   59.768310][ T6225] jffs2: notice: (6225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   59.779194][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.231'.
[   59.811309][ T6232] loop1: detected capacity change from 0 to 2048
[   59.831478][ T6232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   59.844586][ T6238] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   59.954581][ T5598] Bluetooth: Wrong link type (-57)
[   60.058476][ T6261] 
[   60.060137][ T6261] =============================
[   60.062079][ T6261] WARNING: suspicious RCU usage
[   60.064008][ T6261] syzkaller #0 Not tainted
[   60.066581][ T6261] -----------------------------
[   60.068795][ T6261] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage!
[   60.072150][ T6261] 
[   60.072150][ T6261] other info that might help us debug this:
[   60.072150][ T6261] 
[   60.075785][ T6261] 
[   60.075785][ T6261] rcu_scheduler_active = 2, debug_locks = 1
[   60.078261][ T6261] locks held by syz.1.248/6261: 1, last CPU#0:
[   60.080168][ T6261]  #0: ffff88811a359c90 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90
[   60.083428][ T6261] 
[   60.083428][ T6261] stack backtrace:
[   60.085946][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(full) 
[   60.088869][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.092014][ T6261] Call Trace:
[   60.093090][ T6261]  <TASK>
[   60.094033][ T6261]  dump_stack_lvl+0xe8/0x150
[   60.095653][ T6261]  lockdep_rcu_suspicious+0x140/0x1d0
[   60.097361][ T6261]  xfrm_nlmsg_multicast+0x1d8/0x1f0
[   60.099006][ T6261]  xfrm_send_migrate_state+0x870/0xae0
[   60.100739][ T6261]  ? __pfx_xfrm_send_migrate_state+0x10/0x10
[   60.102622][ T6261]  ? xfrm_state_migrate_install+0x192/0x630
[   60.104474][ T6261]  xfrm_do_migrate_state+0x1703/0x1e50
[   60.106197][ T6261]  ? __pfx_xfrm_do_migrate_state+0x10/0x10
[   60.108107][ T6261]  ? apparmor_capable+0x126/0x170
[   60.109706][ T6261]  ? __nla_parse+0x40/0x60
[   60.111133][ T6261]  xfrm_user_rcv_msg+0x7a8/0xf30
[   60.112701][ T6261]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   60.114425][ T6261]  ? __mutex_trylock_common+0x15f/0x270
[   60.116183][ T6261]  ? __pfx___mutex_trylock_common+0x10/0x10
[   60.117971][ T6261]  ? rcu_is_watching+0x16/0xb0
[   60.119484][ T6261]  ? trace_contention_end+0x3d/0x140
[   60.121192][ T6261]  netlink_rcv_skb+0x226/0x4a0
[   60.122720][ T6261]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   60.124438][ T6261]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   60.126146][ T6261]  ? netlink_deliver_tap+0x2e/0x1b0
[   60.127796][ T6261]  ? netlink_deliver_tap+0x2e/0x1b0
[   60.129425][ T6261]  xfrm_netlink_rcv+0x79/0x90
[   60.130906][ T6261]  netlink_unicast+0x7bd/0x940
[   60.132426][ T6261]  netlink_sendmsg+0x813/0xb40
[   60.133951][ T6261]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.135628][ T6261]  ? apparmor_socket_sendmsg+0x98/0x360
[   60.137379][ T6261]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.139045][ T6261]  sock_sendmsg_nosec+0x13a/0x180
[   60.140658][ T6261]  ____sys_sendmsg+0x54e/0x850
[   60.142191][ T6261]  ? __pfx_____sys_sendmsg+0x10/0x10
[   60.143866][ T6261]  ? import_iovec+0x73/0xa0
[   60.145350][ T6261]  ___sys_sendmsg+0x2a5/0x360
[   60.146845][ T6261]  ? __lock_acquire+0x6df/0x2e50
[   60.148413][ T6261]  ? __pfx____sys_sendmsg+0x10/0x10
[   60.150074][ T6261]  ? futex_wait+0x2a2/0x390
[   60.151514][ T6261]  ? __fget_files+0x2a/0x420
[   60.152998][ T6261]  ? __fget_files+0x3a2/0x420
[   60.154538][ T6261]  __x64_sys_sendmsg+0x1b1/0x290
[   60.156139][ T6261]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   60.157948][ T6261]  do_syscall_64+0x166/0x520
[   60.159446][ T6261]  ? trace_irq_disable+0x3b/0x140
[   60.161011][ T6261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.162926][ T6261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.164827][ T6261] RIP: 0033:0x7f814899e1d9
[   60.166301][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.172429][ T6261] RSP: 002b:00007f81498ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.175034][ T6261] RAX: ffffffffffffffda RBX: 00007f8148c25fa0 RCX: 00007f814899e1d9
[   60.177440][ T6261] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[   60.179812][ T6261] RBP: 00007f8148a35888 R08: 0000000000000000 R09: 0000000000000000
[   60.182280][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.184754][ T6261] R13: 00007f8148c26038 R14: 00007f8148c25fa0 R15: 00007ffc34d3b488
[   60.187299][ T6261]  </TASK>
