last executing test programs:

1.611251457s ago: executing program 1 (id=423):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=<r2=>0x0)
prlimit64(r2, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x2, 0x7, 0x2)
r4 = socket(0x10, 0x2, 0x0)
timerfd_create(0x8, 0x0)
clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000})
write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x402, 0x0)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1e0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x10, "8f7fd8cc9d9eb7c9573d1c1445921556cce3905cf2d794de0891f7841de8"}}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001400)={'pcl816\x00', [0x100, 0xd, 0xd0, 0x2, 0x1, 0x100, 0x2001, 0x20000000, 0x8, 0x9, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x0, 0x0, 0x8, 0xee9, 0x401, 0x7, 0x2, 0x4, 0x9, 0x3, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8]})

1.010230356s ago: executing program 2 (id=434):
r0 = socket(0x10, 0x803, 0x0)
getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000280)=""/48, &(0x7f00000002c0)=0x30)

891.334688ms ago: executing program 2 (id=435):
capset(&(0x7f0000000340)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x5f22, 0x0, 0x0, 0x3})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="050000000300"/17], 0x50)

891.132004ms ago: executing program 2 (id=436):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]})

840.788339ms ago: executing program 2 (id=437):
r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
r3 = eventfd2(0xbd49, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1)
io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0)
io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0)
io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0)

640.711791ms ago: executing program 2 (id=438):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
statfs(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)=""/221)
syz_create_resource$binfmt(0x0)

604.9275ms ago: executing program 1 (id=439):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x1)

430.785171ms ago: executing program 1 (id=440):
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001180)={[{@fat=@errors_remount}, {@shortname_winnt}, {@uni_xlate}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@utf8no}, {@fat=@uid}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_mixed}, {@rodir}, {@rodir}, {@numtail}, {@shortname_mixed}, {@shortname_mixed}, {@numtail}]}, 0x1, 0x28e, &(0x7f0000001500)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

303.027241ms ago: executing program 1 (id=442):
set_mempolicy(0x4005, &(0x7f00000000c0)=0x8000, 0x78)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

232.158332ms ago: executing program 0 (id=443):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0)

171.937219ms ago: executing program 1 (id=444):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)=""/164})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

171.710637ms ago: executing program 0 (id=445):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x7, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x5}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0x85, 0x0, 0x0, 0x0, 0x3d}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20)
sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0)

150.82028ms ago: executing program 1 (id=446):
syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000480)=ANY=[@ANYBLOB="12015002000000086307012040000102030109026000030108c0040904000000010100000a2401bd000a000201020904010000010200000904010101010200000905019c5ccd23820908000580080725010ce5bebdecfb117d"], &(0x7f00000008c0)={0x0, 0x0, 0xc, &(0x7f0000000400)=ANY=[]})

90.359238ms ago: executing program 0 (id=447):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001540)=0x12)

89.866663ms ago: executing program 2 (id=448):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000980)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x1009]}})

89.576107ms ago: executing program 0 (id=449):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6e4e9a1d78ad62ceef1884308000000000000008180ca8395ccfda2e4993c8cf581", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)

170.482µs ago: executing program 0 (id=450):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x100000000})

0s ago: executing program 0 (id=451):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x63293d8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @ldst={0x1, 0x3, 0x4, 0x6, 0x6, 0xfffffffffffffffe, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58184' (ED25519) to the list of known hosts.
syzkaller login: [   47.637897][ T5555] cgroup: Unknown subsys name 'net'
[   47.757775][ T5555] cgroup: Unknown subsys name 'cpuset'
[   47.761842][ T5555] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.020515][ T5555] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.083486][ T5691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.084963][ T5691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.085595][ T5691] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.086491][ T5691] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.087269][ T5691] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.087544][ T5693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.089256][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.091867][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.100026][   T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.106280][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.114764][ T5687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.118721][ T5687] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.122455][ T5687] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.126053][ T5687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.128386][ T5687] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.749590][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.750199][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.750496][ T5684] bridge_slave_0: entered allmulticast mode
[   61.751951][ T5684] bridge_slave_0: entered promiscuous mode
[   61.794663][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.794808][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.794905][ T5684] bridge_slave_1: entered allmulticast mode
[   61.797831][ T5684] bridge_slave_1: entered promiscuous mode
[   61.839402][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.842452][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.844926][ T5685] bridge_slave_0: entered allmulticast mode
[   61.848223][ T5685] bridge_slave_0: entered promiscuous mode
[   61.855580][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.858203][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.876940][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.877272][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.877336][ T5685] bridge_slave_1: entered allmulticast mode
[   61.878099][ T5685] bridge_slave_1: entered promiscuous mode
[   61.912059][ T5684] team0: Port device team_slave_0 added
[   61.932457][ T5684] team0: Port device team_slave_1 added
[   61.950042][ T5685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.969958][ T5685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.984518][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.984582][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.984637][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.987458][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.987468][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.987481][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.014435][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.016360][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.016478][ T5689] bridge_slave_0: entered allmulticast mode
[   62.017850][ T5689] bridge_slave_0: entered promiscuous mode
[   62.035033][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.035184][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.035251][ T5689] bridge_slave_1: entered allmulticast mode
[   62.036325][ T5689] bridge_slave_1: entered promiscuous mode
[   62.038834][ T5685] team0: Port device team_slave_0 added
[   62.057574][ T5684] hsr_slave_0: entered promiscuous mode
[   62.058458][ T5684] hsr_slave_1: entered promiscuous mode
[   62.061524][ T5685] team0: Port device team_slave_1 added
[   62.092706][ T5689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.095850][ T5689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.115069][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.115115][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.115196][ T5685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.116269][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.116276][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.116285][ T5685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.133209][ T5689] team0: Port device team_slave_0 added
[   62.147257][ T5689] team0: Port device team_slave_1 added
[   62.192904][ T5685] hsr_slave_0: entered promiscuous mode
[   62.193628][ T5685] hsr_slave_1: entered promiscuous mode
[   62.194062][ T5685] debugfs: 'hsr0' already exists in 'hsr'
[   62.194118][ T5685] Cannot create hsr debugfs directory
[   62.194697][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.194705][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.194719][ T5689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.224378][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.224436][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.224485][ T5689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.318907][ T5689] hsr_slave_0: entered promiscuous mode
[   62.320369][ T5689] hsr_slave_1: entered promiscuous mode
[   62.321057][ T5689] debugfs: 'hsr0' already exists in 'hsr'
[   62.321070][ T5689] Cannot create hsr debugfs directory
[   62.509213][ T5684] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.521000][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.525062][ T5684] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.529880][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.533167][ T5684] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.541082][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.551583][ T5684] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.556181][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   62.607754][ T5689] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.612520][ T5689] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.616985][ T5689] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.622725][ T5689] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.624931][ T5689] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.631186][ T5689] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.633760][ T5689] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.638359][ T5689] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   62.705835][ T5685] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.712339][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.719590][ T5685] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.723744][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.727244][ T5685] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.734739][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.738981][ T5685] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.746744][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   62.803787][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.832633][ T5684] 8021q: adding VLAN 0 to HW filter on device team0
[   62.847698][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.848030][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.868979][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.869096][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.893464][ T5689] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.905065][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.930386][ T5689] 8021q: adding VLAN 0 to HW filter on device team0
[   62.941678][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.941770][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.957565][ T5685] 8021q: adding VLAN 0 to HW filter on device team0
[   62.962394][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.962495][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.980658][ T3927] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.980735][ T3927] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.007071][ T3927] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.007212][ T3927] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.136108][ T4994] Bluetooth: hci0: command tx timeout
[   63.136372][ T5687] Bluetooth: hci1: command tx timeout
[   63.216229][ T5687] Bluetooth: hci2: command tx timeout
[   63.320153][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.327668][ T5689] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.389997][ T5689] veth0_vlan: entered promiscuous mode
[   63.411966][ T5685] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.418309][ T5684] veth0_vlan: entered promiscuous mode
[   63.419058][ T5689] veth1_vlan: entered promiscuous mode
[   63.434051][ T5684] veth1_vlan: entered promiscuous mode
[   63.478424][ T5685] veth0_vlan: entered promiscuous mode
[   63.486325][ T5684] veth0_macvtap: entered promiscuous mode
[   63.492682][ T5689] veth0_macvtap: entered promiscuous mode
[   63.494807][ T5689] veth1_macvtap: entered promiscuous mode
[   63.502059][ T5684] veth1_macvtap: entered promiscuous mode
[   63.514993][ T5685] veth1_vlan: entered promiscuous mode
[   63.535149][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.539872][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.556916][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.565840][ T5454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.571512][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.598515][ T5685] veth0_macvtap: entered promiscuous mode
[   63.605913][ T5454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.606062][ T5454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.606096][ T5454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.606152][ T5454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.606184][ T5454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.606216][ T5454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.606248][ T5454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.654773][ T5685] veth1_macvtap: entered promiscuous mode
[   63.664457][ T3927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.664520][ T3927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.706615][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.746907][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.761841][ T3927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.761907][ T3927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.798442][ T3927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.798504][ T3927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.827402][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.873480][ T5689] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.882282][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.882349][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.933819][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.933855][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.949091][ T5721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.949325][ T5721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.949673][ T5721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.972059][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.975032][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.094262][ T5805] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   64.137659][ T5807] netlink: 72 bytes leftover after parsing attributes in process `syz.2.81'.
[   64.574779][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'.
[   64.882883][ T5864] loop2: detected capacity change from 0 to 512
[   64.913033][ T5864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   64.914012][ T5864] System zones: 1-12
[   64.920052][ T5864] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.106: missing EA_INODE flag
[   64.920741][ T5864] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   64.921378][ T5864] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.106: error while reading EA inode 12 err=-117
[   64.921433][ T5864] loop2: lost filesystem error report for type 5 error -117
[   64.921578][ T5864] EXT4-fs (loop2): 1 orphan inode deleted
[   64.922583][ T5864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.983202][ T5685] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.218485][ T4994] Bluetooth: hci0: command tx timeout
[   65.218595][ T5687] Bluetooth: hci1: command tx timeout
[   65.295577][ T5687] Bluetooth: hci2: command tx timeout
[   65.349405][ T5898] loop2: detected capacity change from 0 to 512
[   65.363889][ T5898] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.122: iget: bad i_size value: 38620345925642
[   65.363941][ T5898] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   65.369303][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   65.369349][    C1] EXT4-fs (loop2): initial error at time 1791713150: ext4_orphan_get:1403: inode 15
[   65.369456][    C1] EXT4-fs (loop2): last error at time 1791713150: ext4_orphan_get:1403: inode 15
[   65.387583][ T5898] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.122: couldn't read orphan inode 15 (err -117)
[   65.387623][ T5898] loop2: lost filesystem error report for type 5 error -117
[   65.393557][ T5898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.405565][ T5898] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 7: comm syz.2.122: lblock 4 mapped to illegal pblock 7 (length 1)
[   65.421620][ T5685] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.585850][    T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   65.664656][ T5920] loop2: detected capacity change from 0 to 512
[   65.671952][ T5920] =======================================================
[   65.671952][ T5920] WARNING: The mand mount option has been deprecated and
[   65.671952][ T5920]          and is ignored by this kernel. Remove the mand
[   65.671952][ T5920]          option from the mount to silence this warning.
[   65.671952][ T5920] =======================================================
[   65.741063][ T5925] loop2: detected capacity change from 0 to 256
[   65.743884][ T5925] exfat: Deprecated parameter 'utf8'
[   65.744633][    T9] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[   65.751746][ T5925] exfat: Deprecated parameter 'utf8'
[   65.753660][ T5925] exfat: Deprecated parameter 'namecase'
[   65.755695][ T5925] exfat: Deprecated parameter 'namecase'
[   65.757654][ T5925] exfat: Deprecated parameter 'namecase'
[   65.761110][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   65.761181][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.781477][ T5925] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d)
[   65.801336][ T5896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   65.824730][    T9] mdc800 1-1:1.0: probe fails -> Wrong Endpoints.
[   65.893134][ T5932] loop2: detected capacity change from 0 to 512
[   66.013874][   T25] usb 1-1: USB disconnect, device number 2
[   66.116406][  T808] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   66.253606][ T5952] loop2: detected capacity change from 0 to 512
[   66.265220][ T5952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   66.266205][  T808] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[   66.266349][ T5952] System zones: 1-12
[   66.267455][  T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[   66.267471][  T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   66.267874][ T5952] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.148: missing EA_INODE flag
[   66.267890][ T5952] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   66.268846][ T5952] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.148: error while reading EA inode 12 err=-117
[   66.268863][ T5952] loop2: lost filesystem error report for type 5 error -117
[   66.269901][  T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.269915][  T808] usb 2-1: Product: syz
[   66.269923][  T808] usb 2-1: Manufacturer: syz
[   66.269931][  T808] usb 2-1: SerialNumber: syz
[   66.271704][ T5952] EXT4-fs (loop2): 1 orphan inode deleted
[   66.273409][ T5952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.274329][  T808] usb 2-1: config 0 descriptor??
[   66.274970][ T5930] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   66.283378][  T808] port100 2-1:0.0: NFC: Could not get supported command types
[   66.324521][ T5952] syz.2.148 (pid 5952) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   66.331835][ T5952] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[   66.331946][ T5952] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[   66.361914][ T5685] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.487456][ T5750] usb 2-1: USB disconnect, device number 2
[   66.545276][   T34] audit: type=1326 audit(1791713151.729:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.153" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa76a39e1d9 code=0x0
[   66.716418][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   66.866015][   T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=5c.d8
[   66.871049][   T25] usb 3-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[   66.875438][   T25] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   66.880779][   T25] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   66.892246][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.895676][   T25] usb 3-1: Product: syz
[   66.897469][   T25] usb 3-1: Manufacturer: syz
[   66.899510][   T25] usb 3-1: SerialNumber: syz
[   67.162442][   T25] usb 3-1: USB disconnect, device number 2
[   67.191369][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   67.296188][ T4994] Bluetooth: hci0: command tx timeout
[   67.296272][ T5687] Bluetooth: hci1: command tx timeout
[   67.375459][ T5687] Bluetooth: hci2: command tx timeout
[   67.789277][ T5990] syzkaller0: entered promiscuous mode
[   67.789318][ T5990] syzkaller0: entered allmulticast mode
[   67.797493][ T5990] tipc: Started in network mode
[   67.797559][ T5990] tipc: Node identity be10cfed607c, cluster identity 4711
[   67.800487][ T5990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.806197][ T5989] tipc: Resetting bearer <eth:syzkaller0>
[   67.818418][ T5989] tipc: Disabling bearer <eth:syzkaller0>
[   68.039155][ T6008] warning: `syz.2.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.103634][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   68.129616][ T6016] FAULT_INJECTION: forcing a failure.
[   68.129616][ T6016] name failslab, interval 1, probability 0, space 0, times 1
[   68.132743][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT(full) 
[   68.132758][ T6016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.132763][ T6016] Call Trace:
[   68.132767][ T6016]  <TASK>
[   68.132772][ T6016]  dump_stack_lvl+0xe8/0x150
[   68.132790][ T6016]  should_fail_ex+0x410/0x560
[   68.132807][ T6016]  ? __pfx_proc_alloc_inode+0x10/0x10
[   68.132817][ T6016]  should_failslab+0xa8/0x100
[   68.132829][ T6016]  ? __pfx_proc_alloc_inode+0x10/0x10
[   68.132836][ T6016]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[   68.132851][ T6016]  ? proc_alloc_inode+0x2a/0xc0
[   68.132859][ T6016]  ? proc_alloc_inode+0x2a/0xc0
[   68.132875][ T6016]  ? __pfx_proc_alloc_inode+0x10/0x10
[   68.132883][ T6016]  proc_alloc_inode+0x2a/0xc0
[   68.132891][ T6016]  alloc_inode+0x6a/0x1b0
[   68.132904][ T6016]  new_inode+0x1f/0x170
[   68.132913][ T6016]  ? proc_pid_make_inode+0x19/0x130
[   68.132925][ T6016]  proc_pid_make_inode+0x21/0x130
[   68.132935][ T6016]  proc_pident_instantiate+0x6d/0x2a0
[   68.132947][ T6016]  proc_pident_lookup+0x1b7/0x270
[   68.132960][ T6016]  __lookup_slow+0x1fb/0x2f0
[   68.132974][ T6016]  lookup_slow+0x53/0x70
[   68.132986][ T6016]  link_path_walk+0xd2a/0x1910
[   68.133005][ T6016]  path_openat+0x1c9/0x1d60
[   68.133019][ T6016]  do_file_open+0x23e/0x4a0
[   68.133028][ T6016]  ? __pfx_do_file_open+0x10/0x10
[   68.133068][ T6016]  ? __pfx_kfree_link+0x10/0x10
[   68.133091][ T6016]  ? _raw_spin_unlock+0x28/0x50
[   68.133101][ T6016]  ? alloc_fd+0x651/0x6c0
[   68.133115][ T6016]  do_sys_openat2+0x115/0x200
[   68.133126][ T6016]  ? __se_sys_futex+0x3a8/0x450
[   68.133136][ T6016]  ? __pfx_do_sys_openat2+0x10/0x10
[   68.133148][ T6016]  ? rcu_is_watching+0x16/0xb0
[   68.133160][ T6016]  __x64_sys_openat+0x138/0x170
[   68.133172][ T6016]  do_syscall_64+0x166/0x520
[   68.133183][ T6016]  ? trace_irq_disable+0x3b/0x140
[   68.133191][ T6016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.133201][ T6016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.133208][ T6016] RIP: 0033:0x7f368655ea0e
[   68.133217][ T6016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   68.133223][ T6016] RSP: 002b:00007f368743eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   68.133234][ T6016] RAX: ffffffffffffffda RBX: 00007f368743f6c0 RCX: 00007f368655ea0e
[   68.133239][ T6016] RDX: 0000000000000002 RSI: 00007f368743ef90 RDI: ffffffffffffff9c
[   68.133244][ T6016] RBP: 00007f3686635888 R08: 0000000000000000 R09: 0000000000000000
[   68.133248][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.133253][ T6016] R13: 00007f3686826038 R14: 00007f3686825fa0 R15: 00007ffd701fd328
[   68.133264][ T6016]  </TASK>
[   68.171533][ T6020] loop0: detected capacity change from 0 to 128
[   68.186808][ T6020] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   68.191077][ T6020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.237222][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   69.456530][ T5687] Bluetooth: hci1: command tx timeout
[   69.458265][ T5687] Bluetooth: hci0: command tx timeout
[   69.465677][ T5687] Bluetooth: hci2: command tx timeout
[   69.954039][ T6045] openvswitch: netlink: IPv4 tunnel dst address is zero
[   70.185424][ T6041] syz.1.186 (6041) used greatest stack depth: 19776 bytes left
[   70.387676][ T6052] xt_CT: You must specify a L4 protocol and not use inversions on it
[   70.531759][ T6057] loop0: detected capacity change from 0 to 4096
[   70.568530][ T6059] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.629563][ T6058] capability: warning: `syz.2.194' uses deprecated v2 capabilities in a way that may be insecure
[   70.785713][ T6071] loop2: detected capacity change from 0 to 128
[   70.823982][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.824800][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.884674][ T6077] syz.2.202 uses obsolete (PF_INET,SOCK_PACKET)
[   70.916718][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.920605][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.038930][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.039720][ T6072] 8021q: adding VLAN 0 to HW filter on device team0
[   71.042048][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.068956][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.069071][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.074231][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.074319][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.082885][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.085143][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.093866][ T6072] veth1_vlan: left promiscuous mode
[   71.094354][ T6072] veth0_vlan: left promiscuous mode
[   71.095214][ T6072] veth0_vlan: entered promiscuous mode
[   71.098036][ T6072] veth1_vlan: entered promiscuous mode
[   71.100599][ T6072] veth1_macvtap: left promiscuous mode
[   71.100984][ T6072] veth0_macvtap: left promiscuous mode
[   71.101705][ T6072] veth0_macvtap: entered promiscuous mode
[   71.102461][ T6072] veth1_macvtap: entered promiscuous mode
[   71.107843][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.108406][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.108808][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.109225][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.305733][   T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.458555][   T25] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[   71.462951][   T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.465903][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   71.465921][   T25] usb 2-1: Product: syz
[   71.465930][   T25] usb 2-1: Manufacturer: syz
[   71.483766][   T25] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected
[   71.486036][   T25] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[   71.486078][   T25] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[   71.494940][ T6098] loop2: detected capacity change from 0 to 8
[   71.540128][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   71.540204][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   71.624557][ T6102] ip_tables: iptables: counters copy to user failed while replacing table
[   71.686633][  T808] usb 2-1: USB disconnect, device number 3
[   71.693669][  T808] garmin_gps 2-1:1.0: device disconnected
[   71.764024][ T6111] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   71.764261][ T6111] CIFS: Attempting to mount //127.0.0.1/share
[   71.768687][ T6111] CIFS: VFS: Error connecting to socket. Aborting operation.
[   71.768750][ T6111] CIFS: VFS: cifs_mount failed w/return code = -111
[   71.850142][ T6115] loop2: detected capacity change from 0 to 8192
[   72.035011][ T6129] <
[   72.041554][ T6131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'.
[   72.075943][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'.
[   72.298158][ T6144] process 'syz.0.232' launched './file1' with NULL argv: empty string added
[   72.916635][ T6157] loop0: detected capacity change from 0 to 2048
[   72.928594][ T6157] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   72.938579][ T6157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.973241][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[   73.090533][ T6161] loop1: detected capacity change from 0 to 1024
[   73.093290][ T6161] EXT4-fs: Ignoring removed oldalloc option
[   73.093299][ T6161] EXT4-fs: Ignoring removed orlov option
[   73.130343][ T6161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   73.134788][ T6161] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.189465][ T5689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   73.311570][ T6174] loop2: detected capacity change from 0 to 512
[   73.314124][ T6174] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   73.329280][ T6174] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.247: iget: bogus i_mode (2)
[   73.329334][ T6174] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   73.330652][ T6174] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.247: couldn't read orphan inode 15 (err -117)
[   73.330693][ T6174] loop2: lost filesystem error report for type 5 error -117
[   73.333074][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.368548][ T5685] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.437638][ T6186] netlink: 'syz.1.251': attribute type 27 has an invalid length.
[   73.437688][ T6186] netlink: 'syz.1.251': attribute type 3 has an invalid length.
[   73.437890][ T6186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.251'.
[   73.442171][ T6187] bond0: (slave macvlan2): Error -98 calling set_mac_address
[   73.815407][  T808] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   73.865461][ T6232] loop1: detected capacity change from 0 to 512
[   73.874579][ T6232] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   73.874641][ T6232] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   73.891070][ T6232] EXT4-fs (loop1): 1 truncate cleaned up
[   73.898358][ T6232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.907816][ T6232] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.271: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   73.909738][ T6232] EXT4-fs error (device loop1) in ext4_delete_entry:2746: Corrupt filesystem
[   73.910012][ T6232] EXT4-fs warning (device loop1): ext4_rename_delete:3741: inode #2: comm syz.1.271: Deleting old file: nlink 65535, error=-117
[   73.941292][ T5689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.967096][  T808] usb 3-1: not running at top speed; connect to a high speed hub
[   73.970458][  T808] usb 3-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=8a.45
[   73.976331][  T808] usb 3-1: config 8 has an invalid interface number: 190 but max is 0
[   73.980248][  T808] usb 3-1: config 8 has no interface number 0
[   73.982997][  T808] usb 3-1: config 8 interface 190 has no altsetting 0
[   73.989402][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.992877][  T808] usb 3-1: Product: syz
[   73.994770][  T808] usb 3-1: Manufacturer: syz
[   73.999119][  T808] usb 3-1: SerialNumber: syz
[   74.223380][  T808] usb 3-1: USB disconnect, device number 3
[   74.235968][   T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   74.385417][   T25] usb 2-1: Using ep0 maxpacket: 16
[   74.387986][   T25] usb 2-1: unable to get BOS descriptor or descriptor too short
[   74.388065][   T25] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[   74.391630][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.391647][   T25] usb 2-1: Product: syz
[   74.391655][   T25] usb 2-1: Manufacturer: syz
[   74.391663][   T25] usb 2-1: SerialNumber: syz
[   74.608269][   T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   74.631902][   T25] usb 2-1: USB disconnect, device number 4
[   74.663713][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   74.815706][  T808] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   74.966137][  T808] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[   74.971068][  T808] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[   74.974150][  T808] usb 1-1: config 0 has no interface number 0
[   74.974181][  T808] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   74.974198][  T808] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   74.989043][  T808] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   74.992414][  T808] usb 1-1: Product: syz
[   74.992436][  T808] usb 1-1: SerialNumber: syz
[   74.996267][  T808] usb 1-1: config 0 descriptor??
[   75.007232][  T808] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input4
[   75.222448][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[   75.222488][   T25] usb 1-1: USB disconnect, device number 3
[   75.222514][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   75.252210][   T25] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   75.642954][ T6259] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[   75.643877][ T6259] netlink: 'syz.2.281': attribute type 268 has an invalid length.
[   75.643898][ T6259] netlink: 224 bytes leftover after parsing attributes in process `syz.2.281'.
[   75.706577][ T6261] FAULT_INJECTION: forcing a failure.
[   75.706577][ T6261] name failslab, interval 1, probability 0, space 0, times 0
[   75.710584][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.2.282 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   75.710611][ T6261] Tainted: [L]=SOFTLOCKUP
[   75.710616][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.710626][ T6261] Call Trace:
[   75.710633][ T6261]  <TASK>
[   75.710640][ T6261]  dump_stack_lvl+0xe8/0x150
[   75.710670][ T6261]  should_fail_ex+0x410/0x560
[   75.710698][ T6261]  should_failslab+0xa8/0x100
[   75.710719][ T6261]  __kmalloc_cache_node_noprof+0xaa/0x620
[   75.710737][ T6261]  ? sbitmap_queue_init_node+0x1dc/0x4d0
[   75.710754][ T6261]  ? sbitmap_queue_init_node+0x1dc/0x4d0
[   75.710787][ T6261]  sbitmap_queue_init_node+0x1dc/0x4d0
[   75.710809][ T6261]  blk_mq_init_tags+0x15c/0x2d0
[   75.710832][ T6261]  blk_mq_alloc_map_and_rqs+0xbc/0x980
[   75.710850][ T6261]  ? __kmalloc_noprof+0x38c/0x720
[   75.710863][ T6261]  ? __kmalloc_noprof+0x1ab/0x720
[   75.710873][ T6261]  ? blk_mq_alloc_sched_tags+0x6e/0x380
[   75.710886][ T6261]  ? blk_mq_alloc_sched_tags+0x6e/0x380
[   75.710905][ T6261]  blk_mq_alloc_sched_tags+0x14d/0x380
[   75.710951][ T6261]  blk_mq_alloc_sched_res+0x92/0x360
[   75.710973][ T6261]  elevator_change+0x122/0x480
[   75.710995][ T6261]  ? do_raw_spin_unlock+0x4d/0x200
[   75.711018][ T6261]  elv_iosched_store+0x504/0x630
[   75.711043][ T6261]  ? __pfx_elv_iosched_store+0x10/0x10
[   75.711074][ T6261]  ? __lock_acquire+0x6df/0x2e50
[   75.711093][ T6261]  queue_attr_store+0x207/0x2b0
[   75.711116][ T6261]  ? __pfx_queue_attr_store+0x10/0x10
[   75.711134][ T6261]  ? lock_acquire+0x115/0x350
[   75.711149][ T6261]  ? sysfs_file_kobj+0x1a/0x230
[   75.711174][ T6261]  ? sysfs_file_kobj+0x1a/0x230
[   75.711189][ T6261]  ? sysfs_file_kobj+0x1a/0x230
[   75.711204][ T6261]  ? sysfs_file_kobj+0x1a/0x230
[   75.711222][ T6261]  ? sysfs_file_kobj+0x1e4/0x230
[   75.711239][ T6261]  ? sysfs_kf_write+0x166/0x260
[   75.711260][ T6261]  ? __pfx_sysfs_kf_write+0x10/0x10
[   75.711275][ T6261]  kernfs_fop_write_iter+0x3a4/0x540
[   75.711295][ T6261]  vfs_write+0x612/0xba0
[   75.711321][ T6261]  ? __pfx_vfs_write+0x10/0x10
[   75.711348][ T6261]  ? __fget_files+0x2a/0x420
[   75.711372][ T6261]  ksys_write+0x150/0x270
[   75.711393][ T6261]  ? __pfx_ksys_write+0x10/0x10
[   75.711421][ T6261]  do_syscall_64+0x166/0x520
[   75.711437][ T6261]  ? trace_irq_disable+0x3b/0x140
[   75.711450][ T6261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.711468][ T6261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.711484][ T6261] RIP: 0033:0x7f1498f9e1d9
[   75.711499][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.711509][ T6261] RSP: 002b:00007f1499f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   75.711525][ T6261] RAX: ffffffffffffffda RBX: 00007f1499225fa0 RCX: 00007f1498f9e1d9
[   75.711534][ T6261] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004
[   75.711542][ T6261] RBP: 00007f1499035888 R08: 0000000000000000 R09: 0000000000000000
[   75.711550][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.711557][ T6261] R13: 00007f1499226038 R14: 00007f1499225fa0 R15: 00007ffdc0ad8e78
[   75.711580][ T6261]  </TASK>
[   75.850772][ T6267] loop0: detected capacity change from 0 to 512
[   75.854509][ T6267] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   75.868877][ T6267] EXT4-fs (loop0): orphan cleanup on readonly fs
[   75.882542][ T6267] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.286: Allocating blocks 41-42 which overlap fs metadata
[   75.886885][ T6267] loop0: lost filesystem error report for type 5 error -117
[   75.889514][ T6267] Quota error (device loop0): write_blk: dquota write failed
[   75.891243][ T6267] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   75.891275][ T6267] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.286: Failed to acquire dquot type 0
[   75.891290][ T6267] loop0: lost filesystem error report for type 5 error -117
[   75.891634][ T6267] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   75.895385][    C0] EXT4-fs (loop0): error count since last fsck: 3
[   75.895399][    C0] EXT4-fs (loop0): initial error at time 1791713161: ext4_mb_mark_diskspace_used:4223
[   75.895414][    C0] EXT4-fs (loop0): last error at time 1791713161: mb_free_blocks:2049: inode 12: block 14
[   75.898285][ T6267] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.286: corrupted inode contents
[   75.898306][ T6267] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   75.899679][ T6267] EXT4-fs error (device loop0): ext4_dirty_inode:6731: inode #12: comm syz.0.286: mark_inode_dirty error
[   75.899702][ T6267] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   75.899901][ T6267] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.286: corrupted inode contents
[   75.899945][ T6267] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   75.900099][ T6267] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.286: mark_inode_dirty error
[   75.900117][ T6267] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   75.900311][ T6267] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.286: corrupted inode contents
[   75.900328][ T6267] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   75.902048][ T6267] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem
[   75.902065][ T6267] loop0: lost filesystem error report for type 5 error -117
[   75.902714][ T6267] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.286: corrupted inode contents
[   75.902733][ T6267] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   75.902885][ T6267] EXT4-fs error (device loop0): ext4_truncate:4721: inode #12: comm syz.0.286: mark_inode_dirty error
[   75.902901][ T6267] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   75.903138][ T6267] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem
[   75.903152][ T6267] loop0: lost filesystem error report for type 5 error -117
[   75.903473][ T6267] EXT4-fs (loop0): 1 truncate cleaned up
[   75.910868][ T6267] EXT4-fs (loop0): pa ffff8881bcfd9e80: logic 1, phys. 41, len 23
[   75.910891][ T6267] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23
[   75.913647][ T6267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   75.928770][ T6267] EXT4-fs error (device loop0): __ext4_remount:6872: comm syz.0.286: Abort forced by user
[   75.929110][ T6267] EXT4-fs (loop0): Remounting filesystem read-only
[   75.929122][ T6267] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   75.959359][ T5684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.158507][ T6281] loop1: detected capacity change from 0 to 8
[   76.229476][ T1302] kernel write not supported for file /uinput (pid: 1302 comm: kworker/0:3)
[   76.305626][ T6285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.305687][ T6285] IPv6: NLM_F_CREATE should be set when creating new route
[   76.305773][ T6285] IPv6: NLM_F_CREATE should be set when creating new route
[   76.305814][ T6285] IPv6: NLM_F_CREATE should be set when creating new route
[   76.490061][ T6297] kernel read not supported for file /eth0 (pid: 6297 comm: syz.1.298)
[   76.493505][   T34] audit: type=1800 audit(1791713161.679:3): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.298" name="eth0" dev="mqueue" ino=9035 res=0 errno=0
[   77.883425][ T1302] kernel write not supported for file /dsp1 (pid: 1302 comm: kworker/0:3)
[   77.956413][ T6354] loop0: detected capacity change from 0 to 512
[   77.959436][ T6354] EXT4-fs: Ignoring removed i_version option
[   77.961278][ T6354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   77.991144][ T6354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.991267][ T6354] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.036527][ T5684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.100443][ T6366] loop0: detected capacity change from 0 to 1024
[   78.211129][ T6368] netlink: 'syz.0.329': attribute type 2 has an invalid length.
[   78.315876][ T1302] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   78.465467][ T1302] usb 3-1: Using ep0 maxpacket: 8
[   78.471038][ T1302] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   78.476565][ T1302] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   78.480084][ T1302] usb 3-1: config 179 has no interface number 0
[   78.482760][ T1302] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   78.487908][ T1302] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   78.492403][ T1302] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   78.492425][ T1302] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[   78.492441][ T1302] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   78.492459][ T1302] usb 3-1: config 179 interface 65 has no altsetting 0
[   78.492491][ T1302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.529466][ T1302] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5
[   78.645366][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   78.732543][ T6388] Cannot find add_set index 0 as target
[   78.743765][ T1302] usb 3-1: USB disconnect, device number 4
[   78.801516][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   78.803231][   T10] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   78.810989][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.811026][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   78.811086][   T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   78.811120][   T10] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   78.811154][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   78.811182][   T10] usb 1-1: config 1 interface 1 has no altsetting 0
[   78.821456][ T6392] loop1: detected capacity change from 0 to 1024
[   78.821920][ T6392] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.822992][ T6392] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[   78.845501][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.845548][   T10] usb 1-1: Product: syz
[   78.845600][   T10] usb 1-1: Manufacturer: syz
[   78.845629][   T10] usb 1-1: SerialNumber: syz
[   79.074381][   T10] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[   79.083916][   T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[   79.087089][   T10] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[   79.090543][   T10] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[   79.103633][   T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[   79.112310][   T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[   79.119331][   T10] usb 1-1: USB disconnect, device number 4
[   79.130201][ T6241] udevd[6241]: setting owner of /dev/bus/usb/001/004 to uid=0, gid=0 failed: No such file or directory
[   79.166645][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.841465][ T6417] loop5: detected capacity change from 0 to 4095
[   79.884521][ T6417] support for cryptoloop has been removed.  Use dm-crypt instead.
[   79.904038][ T5970] Buffer I/O error on dev loop5, logical block 511, async page read
[   80.162652][ T6440] netlink: 'syz.2.363': attribute type 9 has an invalid length.
[   80.233239][ T6446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.364'.
[   80.318670][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.367'.
[   80.391640][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'.
[   80.427134][ T6462] loop0: detected capacity change from 0 to 4096
[   80.436311][ T6462] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   80.440909][ T6462] ntfs3(loop0): Failed to load $LogFile (-22).
[   80.918595][ T6486] loop1: detected capacity change from 0 to 1764
[   80.932687][ T6486] ISOFS: Bad logical zone size 4096
[   81.434676][ T6504] FAULT_INJECTION: forcing a failure.
[   81.434676][ T6504] name failslab, interval 1, probability 0, space 0, times 0
[   81.439155][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.0.389 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   81.439185][ T6504] Tainted: [L]=SOFTLOCKUP
[   81.439189][ T6504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.439194][ T6504] Call Trace:
[   81.439198][ T6504]  <TASK>
[   81.439202][ T6504]  dump_stack_lvl+0xe8/0x150
[   81.439219][ T6504]  should_fail_ex+0x410/0x560
[   81.439235][ T6504]  should_failslab+0xa8/0x100
[   81.439248][ T6504]  __kvmalloc_node_noprof+0x176/0x820
[   81.439259][ T6504]  ? sbitmap_init_node+0x2bc/0x630
[   81.439269][ T6504]  ? sbitmap_init_node+0x2bc/0x630
[   81.439282][ T6504]  sbitmap_init_node+0x2bc/0x630
[   81.439294][ T6504]  sbitmap_queue_init_node+0x3e/0x4d0
[   81.439306][ T6504]  kyber_alloc_sched_data+0x25d/0x540
[   81.439316][ T6504]  blk_mq_alloc_sched_res+0x103/0x360
[   81.439329][ T6504]  elevator_change+0x122/0x480
[   81.439340][ T6504]  ? do_raw_spin_unlock+0x4d/0x200
[   81.439354][ T6504]  elv_iosched_store+0x504/0x630
[   81.439367][ T6504]  ? __pfx_elv_iosched_store+0x10/0x10
[   81.439384][ T6504]  ? __lock_acquire+0x6df/0x2e50
[   81.439393][ T6504]  queue_attr_store+0x207/0x2b0
[   81.439404][ T6504]  ? __pfx_queue_attr_store+0x10/0x10
[   81.439413][ T6504]  ? lock_acquire+0x115/0x350
[   81.439421][ T6504]  ? sysfs_file_kobj+0x1a/0x230
[   81.439433][ T6504]  ? sysfs_file_kobj+0x1a/0x230
[   81.439442][ T6504]  ? sysfs_file_kobj+0x1a/0x230
[   81.439450][ T6504]  ? sysfs_file_kobj+0x1a/0x230
[   81.439460][ T6504]  ? sysfs_file_kobj+0x1e4/0x230
[   81.439469][ T6504]  ? sysfs_kf_write+0x166/0x260
[   81.439480][ T6504]  ? __pfx_sysfs_kf_write+0x10/0x10
[   81.439489][ T6504]  kernfs_fop_write_iter+0x3a4/0x540
[   81.439500][ T6504]  vfs_write+0x612/0xba0
[   81.439514][ T6504]  ? __pfx_vfs_write+0x10/0x10
[   81.439529][ T6504]  ? __fget_files+0x2a/0x420
[   81.439542][ T6504]  ksys_write+0x150/0x270
[   81.439556][ T6504]  ? __pfx_ksys_write+0x10/0x10
[   81.439574][ T6504]  do_syscall_64+0x166/0x520
[   81.439588][ T6504]  ? trace_irq_disable+0x3b/0x140
[   81.439600][ T6504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.439615][ T6504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.439627][ T6504] RIP: 0033:0x7fa76a39e1d9
[   81.439640][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.439650][ T6504] RSP: 002b:00007fa76b247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   81.439664][ T6504] RAX: ffffffffffffffda RBX: 00007fa76a625fa0 RCX: 00007fa76a39e1d9
[   81.439671][ T6504] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[   81.439676][ T6504] RBP: 00007fa76a435888 R08: 0000000000000000 R09: 0000000000000000
[   81.439681][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.439687][ T6504] R13: 00007fa76a626038 R14: 00007fa76a625fa0 R15: 00007ffe0c913408
[   81.439700][ T6504]  </TASK>
[   81.461413][ T6505] netlink: 'syz.1.388': attribute type 4 has an invalid length.
[   81.496172][   T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   81.645504][   T25] usb 3-1: Using ep0 maxpacket: 32
[   81.648614][   T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=1871, bcdDevice=82.84
[   81.649635][   T25] usb 3-1: config 7 has an invalid interface number: 2 but max is 0
[   81.649649][   T25] usb 3-1: config 7 has no interface number 0
[   81.649665][   T25] usb 3-1: config 7 interface 2 has no altsetting 0
[   81.659272][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.659287][   T25] usb 3-1: Product: syz
[   81.659295][   T25] usb 3-1: Manufacturer: syz
[   81.659304][   T25] usb 3-1: SerialNumber: syz
[   81.751873][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   81.751933][ T6513] bond0: Unable to set up delay as MII monitoring is disabled
[   81.781196][   T33] cfg80211: failed to load regulatory.db
[   81.802811][ T6515] loop0: detected capacity change from 0 to 128
[   81.806565][ T6515] msdos: Unknown parameter 'dos1xfl'
[   81.885672][   T25] usb 3-1: USB disconnect, device number 5
[   81.912891][ T6519] netlink: 'syz.0.396': attribute type 2 has an invalid length.
[   82.266393][ T6536] loop1: detected capacity change from 0 to 256
[   82.268719][ T6536] exfat: Deprecated parameter 'namecase'
[   82.268753][ T6536] exfat: Deprecated parameter 'namecase'
[   82.268797][ T6536] exfat: Deprecated parameter 'namecase'
[   82.279216][ T6536] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   82.401287][ T6541] FAULT_INJECTION: forcing a failure.
[   82.401287][ T6541] name failslab, interval 1, probability 0, space 0, times 0
[   82.407207][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.1.406 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   82.407249][ T6541] Tainted: [L]=SOFTLOCKUP
[   82.407256][ T6541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.407263][ T6541] Call Trace:
[   82.407269][ T6541]  <TASK>
[   82.407278][ T6541]  dump_stack_lvl+0xe8/0x150
[   82.407304][ T6541]  should_fail_ex+0x410/0x560
[   82.407329][ T6541]  ? __pfx_sock_alloc_inode+0x10/0x10
[   82.407348][ T6541]  should_failslab+0xa8/0x100
[   82.407367][ T6541]  ? __pfx_sock_alloc_inode+0x10/0x10
[   82.407383][ T6541]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[   82.407405][ T6541]  ? create_new_namespaces+0x3f0/0x6b0
[   82.407422][ T6541]  ? sock_alloc_inode+0x2c/0x1a0
[   82.407437][ T6541]  ? sock_alloc_inode+0x2c/0x1a0
[   82.407460][ T6541]  ? __pfx_sock_alloc_inode+0x10/0x10
[   82.407479][ T6541]  sock_alloc_inode+0x2c/0x1a0
[   82.407497][ T6541]  ? __pfx_sock_alloc_inode+0x10/0x10
[   82.407513][ T6541]  alloc_inode+0x6a/0x1b0
[   82.407530][ T6541]  sock_create_lite+0x8b/0x510
[   82.407551][ T6541]  ? lock_acquire+0x115/0x350
[   82.407567][ T6541]  __netlink_kernel_create+0xc8/0x720
[   82.407586][ T6541]  ? __pfx___netlink_kernel_create+0x10/0x10
[   82.407601][ T6541]  ? net_generic+0x1e/0x240
[   82.407624][ T6541]  audit_net_init+0xc8/0x200
[   82.407641][ T6541]  ? __pfx_audit_net_init+0x10/0x10
[   82.407657][ T6541]  ? __pfx_audit_receive+0x10/0x10
[   82.407674][ T6541]  ? __pfx_audit_multicast_bind+0x10/0x10
[   82.407690][ T6541]  ? __pfx_audit_multicast_unbind+0x10/0x10
[   82.407707][ T6541]  ? __kmalloc_noprof+0x38c/0x720
[   82.407718][ T6541]  ? __kmalloc_noprof+0x1ab/0x720
[   82.407729][ T6541]  ? ops_init+0x7b/0x5d0
[   82.407747][ T6541]  ops_init+0x35d/0x5d0
[   82.407767][ T6541]  setup_net+0x118/0x350
[   82.407781][ T6541]  ? __pfx_setup_net+0x10/0x10
[   82.407795][ T6541]  ? down_read_killable+0x1bb/0x3b0
[   82.407810][ T6541]  ? __ns_common_init+0x2fc/0x4a0
[   82.407859][ T6541]  copy_net_ns+0x53b/0x780
[   82.407877][ T6541]  create_new_namespaces+0x3f0/0x6b0
[   82.407895][ T6541]  ? security_capable+0x7e/0x2c0
[   82.407914][ T6541]  unshare_nsproxy_namespaces+0x149/0x190
[   82.407934][ T6541]  ksys_unshare+0x5a7/0x950
[   82.407960][ T6541]  ? __pfx_ksys_unshare+0x10/0x10
[   82.407978][ T6541]  ? rcu_is_watching+0x16/0xb0
[   82.408001][ T6541]  __x64_sys_unshare+0x38/0x50
[   82.408019][ T6541]  do_syscall_64+0x166/0x520
[   82.408032][ T6541]  ? trace_irq_disable+0x3b/0x140
[   82.408045][ T6541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.408061][ T6541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.408074][ T6541] RIP: 0033:0x7f368659e1d9
[   82.408086][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.408098][ T6541] RSP: 002b:00007f368743f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   82.408122][ T6541] RAX: ffffffffffffffda RBX: 00007f3686825fa0 RCX: 00007f368659e1d9
[   82.408131][ T6541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680
[   82.408139][ T6541] RBP: 00007f3686635888 R08: 0000000000000000 R09: 0000000000000000
[   82.408147][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.408157][ T6541] R13: 00007f3686826038 R14: 00007f3686825fa0 R15: 00007ffd701fd328
[   82.408176][ T6541]  </TASK>
[   82.418451][ T6541] audit: cannot initialize netlink socket in namespace
[   82.553951][   T84] IPVS: starting estimator thread 0...
[   82.675741][ T6549] IPVS: using max 84 ests per chain, 201600 per kthread
[   82.918042][ T6563] netlink: 'syz.1.416': attribute type 1 has an invalid length.
[   82.918650][ T6563] netlink: 224 bytes leftover after parsing attributes in process `syz.1.416'.
[   83.279380][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'.
[   83.393126][ T6592] tipc: Can't bind to reserved service type 0
[   83.645009][ T6599] loop0: detected capacity change from 0 to 128
[   83.668094][ T6599] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.683550][ T6599] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   83.809645][ T5684] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.351263][ T6622] loop1: detected capacity change from 0 to 256
[   84.619673][ T6632] binder_alloc: 6631: binder_alloc_buf, no vma
[   84.800223][ T6646] ----------
** replaying previous printk message **
[   84.800223][ T6646] ------------[ cut here ]------------
[   84.800283][ T6646] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6
[   84.800338][ T6646] index 3 is out of range for type 'const char *const[3]'
[   84.800375][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.0.451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   84.800408][ T6646] Tainted: [L]=SOFTLOCKUP
[   84.800414][ T6646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.800422][ T6646] Call Trace:
[   84.800428][ T6646]  <TASK>
[   84.800433][ T6646]  dump_stack_lvl+0xe8/0x150
[   84.800476][ T6646]  ubsan_epilogue+0xa/0x30
[   84.800492][ T6646]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[   84.800512][ T6646]  print_bpf_insn+0x21f1/0x2910
[   84.800529][ T6646]  ? __pfx_disasm_print+0x10/0x10
[   84.800550][ T6646]  ? __pfx_print_bpf_insn+0x10/0x10
[   84.800572][ T6646]  ? vscnprintf+0x5c/0x90
[   84.800590][ T6646]  ? bpf_verifier_vlog+0x3c7/0x900
[   84.800614][ T6646]  diag_print_insn_context+0x433/0xd00
[   84.800638][ T6646]  ? __pfx_diag_print_insn_context+0x10/0x10
[   84.800659][ T6646]  ? __pfx_diag_write+0x10/0x10
[   84.800676][ T6646]  ? __pfx_disasm_print+0x10/0x10
[   84.800692][ T6646]  ? __pfx_disasm_kfunc_name+0x10/0x10
[   84.800710][ T6646]  ? diag_print_wrapped_prefixed+0x207/0x240
[   84.800730][ T6646]  bpf_diag_source+0x639/0x18d0
[   84.800745][ T6646]  ? vsnprintf+0xe42/0xef0
[   84.800767][ T6646]  ? vscnprintf+0x5c/0x90
[   84.800811][ T6646]  ? bpf_verifier_vlog+0x3c7/0x900
[   84.800831][ T6646]  ? __pfx_bpf_diag_source+0x10/0x10
[   84.800858][ T6646]  ? __pfx_diag_write+0x10/0x10
[   84.800877][ T6646]  ? kfree+0x1c5/0x650
[   84.800893][ T6646]  ? bpf_diag_program_structure+0x28a/0x430
[   84.800910][ T6646]  bpf_diag_program_structure+0x31c/0x430
[   84.800927][ T6646]  ? verbose+0x11d/0x1a0
[   84.800939][ T6646]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[   84.800954][ T6646]  ? bpf_prepare_btf_info+0x639/0x1200
[   84.800967][ T6646]  ? rcu_is_watching+0x16/0xb0
[   84.800987][ T6646]  check_subprogs+0x66b/0x740
[   84.801007][ T6646]  bpf_check+0x17b8/0x2e10
[   84.801029][ T6646]  ? ktime_get_with_offset+0x93/0x2d0
[   84.801044][ T6646]  ? __pfx_bpf_check+0x10/0x10
[   84.801057][ T6646]  ? bpf_obj_name_cpy+0x194/0x1e0
[   84.801075][ T6646]  bpf_prog_load+0x14d6/0x1c20
[   84.801095][ T6646]  ? __pfx_bpf_prog_load+0x10/0x10
[   84.801119][ T6646]  ? do_raw_spin_lock+0x70/0x2f0
[   84.801136][ T6646]  __sys_bpf+0xd0d/0xd90
[   84.801151][ T6646]  ? do_raw_spin_lock+0x70/0x2f0
[   84.801168][ T6646]  ? __pfx___sys_bpf+0x10/0x10
[   84.801185][ T6646]  ? hook_file_ioctl+0x1f2/0x600
[   84.801199][ T6646]  ? do_raw_spin_lock+0x70/0x2f0
[   84.801226][ T6646]  ? kfree+0x4d/0x650
[   84.801241][ T6646]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   84.801256][ T6646]  ? __pfx_kcov_ioctl+0x10/0x10
[   84.801269][ T6646]  __x64_sys_bpf+0xba/0xd0
[   84.801282][ T6646]  do_syscall_64+0x166/0x520
[   84.801294][ T6646]  ? trace_irq_disable+0x3b/0x140
[   84.801304][ T6646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.801319][ T6646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.801332][ T6646] RIP: 0033:0x7fa76a39e1d9
[   84.801344][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.801356][ T6646] RSP: 002b:00007fa76b247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   84.801378][ T6646] RAX: ffffffffffffffda RBX: 00007fa76a625fa0 RCX: 00007fa76a39e1d9
[   84.801387][ T6646] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[   84.801395][ T6646] RBP: 00007fa76a435888 R08: 0000000000000000 R09: 0000000000000000
[   84.801402][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.801410][ T6646] R13: 00007fa76a626038 R14: 00007fa76a625fa0 R15: 00007ffe0c913408
[   84.801429][ T6646]  </TASK>
[   84.801587][ T6646] ---[ end trace ]---
[   84.801596][ T6646] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[   84.951654][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.0.451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   84.955670][ T6646] Tainted: [L]=SOFTLOCKUP
[   84.957373][ T6646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.961485][ T6646] Call Trace:
[   84.962839][ T6646]  <TASK>
[   84.963959][ T6646]  vpanic+0x56d/0xa60
[   84.965547][ T6646]  ? __pfx_vpanic+0x10/0x10
[   84.967408][ T6646]  ? irqentry_exit+0x218/0x910
[   84.969298][ T6646]  panic+0xc5/0xd0
[   84.970728][ T6646]  ? __pfx_panic+0x10/0x10
[   84.972462][ T6646]  ? __pfx__printk+0x10/0x10
[   84.974322][ T6646]  check_panic_on_warn+0x89/0xb0
[   84.976310][ T6646]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[   84.978532][ T6646]  print_bpf_insn+0x21f1/0x2910
[   84.980408][ T6646]  ? __pfx_disasm_print+0x10/0x10
[   84.982489][ T6646]  ? __pfx_print_bpf_insn+0x10/0x10
[   84.984523][ T6646]  ? vscnprintf+0x5c/0x90
[   84.986120][ T6646]  ? bpf_verifier_vlog+0x3c7/0x900
[   84.988153][ T6646]  diag_print_insn_context+0x433/0xd00
[   84.990406][ T6646]  ? __pfx_diag_print_insn_context+0x10/0x10
[   84.992674][ T6646]  ? __pfx_diag_write+0x10/0x10
[   84.994618][ T6646]  ? __pfx_disasm_print+0x10/0x10
[   84.996662][ T6646]  ? __pfx_disasm_kfunc_name+0x10/0x10
[   84.998605][ T6646]  ? diag_print_wrapped_prefixed+0x207/0x240
[   85.000981][ T6646]  bpf_diag_source+0x639/0x18d0
[   85.002857][ T6646]  ? vsnprintf+0xe42/0xef0
[   85.004459][ T6646]  ? vscnprintf+0x5c/0x90
[   85.006127][ T6646]  ? bpf_verifier_vlog+0x3c7/0x900
[   85.008165][ T6646]  ? __pfx_bpf_diag_source+0x10/0x10
[   85.010134][ T6646]  ? __pfx_diag_write+0x10/0x10
[   85.012000][ T6646]  ? kfree+0x1c5/0x650
[   85.013541][ T6646]  ? bpf_diag_program_structure+0x28a/0x430
[   85.015845][ T6646]  bpf_diag_program_structure+0x31c/0x430
[   85.018073][ T6646]  ? verbose+0x11d/0x1a0
[   85.019694][ T6646]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[   85.022159][ T6646]  ? bpf_prepare_btf_info+0x639/0x1200
[   85.024319][ T6646]  ? rcu_is_watching+0x16/0xb0
[   85.026205][ T6646]  check_subprogs+0x66b/0x740
[   85.028049][ T6646]  bpf_check+0x17b8/0x2e10
[   85.029768][ T6646]  ? ktime_get_with_offset+0x93/0x2d0
[   85.031884][ T6646]  ? __pfx_bpf_check+0x10/0x10
[   85.033809][ T6646]  ? bpf_obj_name_cpy+0x194/0x1e0
[   85.035693][ T6646]  bpf_prog_load+0x14d6/0x1c20
[   85.037456][ T6646]  ? __pfx_bpf_prog_load+0x10/0x10
[   85.039469][ T6646]  ? do_raw_spin_lock+0x70/0x2f0
[   85.041335][ T6646]  __sys_bpf+0xd0d/0xd90
[   85.043021][ T6646]  ? do_raw_spin_lock+0x70/0x2f0
[   85.044943][ T6646]  ? __pfx___sys_bpf+0x10/0x10
[   85.046746][ T6646]  ? hook_file_ioctl+0x1f2/0x600
[   85.048606][ T6646]  ? do_raw_spin_lock+0x70/0x2f0
[   85.050584][ T6646]  ? kfree+0x4d/0x650
[   85.052164][ T6646]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   85.054438][ T6646]  ? __pfx_kcov_ioctl+0x10/0x10
[   85.056380][ T6646]  __x64_sys_bpf+0xba/0xd0
[   85.058079][ T6646]  do_syscall_64+0x166/0x520
[   85.059816][ T6646]  ? trace_irq_disable+0x3b/0x140
[   85.061757][ T6646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.064141][ T6646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.066460][ T6646] RIP: 0033:0x7fa76a39e1d9
[   85.068286][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.075636][ T6646] RSP: 002b:00007fa76b247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   85.078916][ T6646] RAX: ffffffffffffffda RBX: 00007fa76a625fa0 RCX: 00007fa76a39e1d9
[   85.081938][ T6646] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[   85.085050][ T6646] RBP: 00007fa76a435888 R08: 0000000000000000 R09: 0000000000000000
[   85.088114][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.091125][ T6646] R13: 00007fa76a626038 R14: 00007fa76a625fa0 R15: 00007ffe0c913408
[   85.094219][ T6646]  </TASK>
[   85.096206][ T6646] Kernel Offset: disabled
[   85.097922][ T6646] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:06:10  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff818740df RBX=0000000000000001 RCX=ffff888102ee0000 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000157848
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffffbfff1f7ce84
R12=dffffc0000000000 R13=ffffffff9068ed80 R14=ffffc90000157d60 R15=0000000000000000
RIP=ffffffff818740df RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818c4d4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30123ffc CR3=0000000116954000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000013278 RDI=0000000000013279 RBP=00000000000003f8 RSP=ffffc90003d7e860
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8572b110
R12=dffffc0000000000 R13=000000000000005b R14=ffffffff9bd36c00 R15=0000000000000000
RIP=ffffffff8572b18c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa76b2476c0 ffffffff 00c00000
GS =0000 ffff8882a7cd4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa76b246ff8 CR3=00000001bea8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
