last executing test programs:

9m44.359205144s ago: executing program 32 (id=159):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041c000000000002a1180015000600142603600e1208000f0000810401a800160020000140fefeff7f07391bd06b", 0x41}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0)

9m35.683203731s ago: executing program 2 (id=232):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8162, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40049409, 0x0)

9m35.682174452s ago: executing program 2 (id=234):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x2000, 0x0}, 0x10)

9m35.603114458s ago: executing program 2 (id=235):
recvfrom(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10101, 0x0, 0x0)

9m35.602930099s ago: executing program 2 (id=236):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0)

9m35.548367603s ago: executing program 2 (id=237):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r3, 0xfffe, 0x10, 0x3, 0x4}, &(0x7f00000001c0)=0x18)

9m35.194786459s ago: executing program 2 (id=239):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0xdc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})

9m34.923415403s ago: executing program 33 (id=239):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0xdc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})

9m30.002431822s ago: executing program 3 (id=279):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040))

9m30.002031428s ago: executing program 3 (id=280):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

9m29.913092033s ago: executing program 3 (id=281):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
lchown(&(0x7f0000000080)='./proc/fs/nfsd\x00', 0x0, 0x0)

9m29.912942383s ago: executing program 3 (id=282):
r0 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x153e, &(0x7f00000034c0)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4020, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x1}}]})
read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x939)

9m29.740581981s ago: executing program 3 (id=283):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

9m29.454392019s ago: executing program 3 (id=285):
kexec_load(0x8, 0x0, 0x0, 0x0)

9m29.242215689s ago: executing program 34 (id=285):
kexec_load(0x8, 0x0, 0x0, 0x0)

6m47.341648009s ago: executing program 5 (id=2351):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600dc04037cac00000000000002000600591900007802000038000000d700000001000000fb032000030040000700890e00000000070000000000001c0700000008000000080000000900000009000000feffffff0700000006000000060000000900000009000000ff0700000a0000000080000003"], 0x98)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

6m47.280925183s ago: executing program 5 (id=2353):
r0 = socket$kcm(0x11, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x834)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0)

6m47.221865376s ago: executing program 5 (id=2355):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellinkprop={0x28, 0x6d, 0x1, 0x709d27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000)

6m47.161218042s ago: executing program 5 (id=2357):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(r0, 0x0)

6m47.090286294s ago: executing program 5 (id=2358):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m47.009549898s ago: executing program 5 (id=2360):
syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x1a75, 0x100, 0x0, 0x25c}, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

6m31.658563934s ago: executing program 35 (id=2360):
syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x1a75, 0x100, 0x0, 0x25c}, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

6m2.378670256s ago: executing program 0 (id=2894):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c80000001010203010902200001010080000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400108000000ebaa55"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6m0.986851711s ago: executing program 0 (id=2904):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000240), 0x4)

6m0.986439104s ago: executing program 0 (id=2905):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2000a800, &(0x7f0000000280)={0xa, 0x4c25, 0x0, @remote, 0x8}, 0x1c)

6m0.918403502s ago: executing program 0 (id=2907):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')

6m0.858506793s ago: executing program 0 (id=2909):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000006c0)=[@in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=0xa9)

6m0.356711751s ago: executing program 0 (id=2915):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)

6m0.288202538s ago: executing program 36 (id=2915):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)

5m7.635871353s ago: executing program 6 (id=3542):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1)

5m7.633573162s ago: executing program 6 (id=3544):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000040)='dummy0\x00'/40)
ioctl(r0, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40)
ioctl(r0, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40)

5m7.471421038s ago: executing program 6 (id=3548):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x81, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

5m7.343635246s ago: executing program 6 (id=3551):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

5m7.253019956s ago: executing program 6 (id=3553):
bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x39}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m6.972692017s ago: executing program 6 (id=3558):
syz_emit_ethernet(0x49, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x13, 0x84, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85f"}}}}}, 0x0)

5m6.667252036s ago: executing program 37 (id=3558):
syz_emit_ethernet(0x49, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x13, 0x84, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85f"}}}}}, 0x0)

3m7.135299314s ago: executing program 7 (id=4998):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @local, 0x106}, 0x1c)

3m7.040812393s ago: executing program 7 (id=4999):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

3m6.972313796s ago: executing program 7 (id=5001):
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m5.250039536s ago: executing program 7 (id=5021):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0)={[{@oldalloc}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x400)

3m5.068068638s ago: executing program 7 (id=5024):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)

3m4.392152438s ago: executing program 7 (id=5028):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

3m4.308657243s ago: executing program 38 (id=5028):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1m19.465096001s ago: executing program 4 (id=6273):
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

1m19.464744374s ago: executing program 4 (id=6275):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25022000ff", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200ac"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1m19.384586319s ago: executing program 4 (id=6277):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)={0x7, 0x0, [{0x30000, 0x6e, &(0x7f0000000040)=""/99}, {0x1, 0x26, &(0x7f00000000c0)=""/38}, {0x5000, 0x64, &(0x7f0000000100)=""/100}, {0x4, 0xfffffffffffffee3, &(0x7f0000000400)=""/207}, {0xdddd0000, 0x6c, &(0x7f0000000280)=""/108}, {0x100000, 0x1000, &(0x7f0000000500)=""/4096}, {0xffffffff, 0xb, &(0x7f00000001c0)=""/11}]})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1})

1m19.361226905s ago: executing program 4 (id=6278):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x7f, 0x100000e, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, 0x0)

1m19.083075518s ago: executing program 4 (id=6279):
r0 = request_key(0x0, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, r0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x23d1)

1m18.71516787s ago: executing program 4 (id=6280):
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x10d)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x6)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0xffffffffc1001081, 0x800, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1, 0x400}}, 0x50)
getresuid(&(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002d40))
read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020)

1m18.616156476s ago: executing program 39 (id=6280):
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x10d)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x6)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0xffffffffc1001081, 0x800, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1, 0x400}}, 0x50)
getresuid(&(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002d40))
read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020)

5.564817165s ago: executing program 8 (id=6846):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)="2a1f2e2f6578706f72745f6469722033320a", 0x12)

5.499117574s ago: executing program 8 (id=6847):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000)

5.498983778s ago: executing program 8 (id=6848):
syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000e2795510d10502200005000203010902120001000000000904"], 0x0)

4.72679999s ago: executing program 9 (id=6855):
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008}, 0x20040004)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x40000, 0x0, 0x9a}, 0x0, 0x0, 0x0)
r1 = getpid()
getpriority(0x1, r1)
syz_usb_connect(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e010000082402010202"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x800)
syz_usb_connect$uac3(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x0, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0x4}, [@feature_unit={0xd, 0x24, 0x7, 0x4, 0x3, [0xff, 0x4]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x304, 0x3, 0x5, 0x4, 0x4, 0xfe00, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3c, 0xd4, 0x86, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x3, 0x0, 0x4, 0x1001, 0xfe, 0x9, 0x2, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0)
exit(0x0)

3.332613631s ago: executing program 1 (id=6857):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0x200c17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))

3.247923027s ago: executing program 1 (id=6858):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0)

3.188183813s ago: executing program 1 (id=6859):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)

3.12816665s ago: executing program 1 (id=6860):
syz_usb_connect(0x2, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x250, 0xe2, 0xe7, 0xc4, 0x8, 0x408, 0x4033, 0x9691, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xf, 0x10, 0x2, "", [{{0x9, 0x4, 0x6a, 0x59, 0x0, 0xe, 0x1, 0x1, 0xb2}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000440)=@string={0x2}}, {0xa, &(0x7f00000001c0)=@string={0xa, 0x3, "0e67ccdcd7dab638"}}]})

2.425454599s ago: executing program 8 (id=6861):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb5, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)

2.425290104s ago: executing program 8 (id=6862):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4)

2.348061357s ago: executing program 8 (id=6863):
syz_usb_connect(0x5, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090566", @ANYRES32], 0x0)

1.668818678s ago: executing program 9 (id=6864):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c900200400000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000404000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

1.498498325s ago: executing program 9 (id=6865):
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
fallocate(r1, 0x0, 0x0, 0x1000f4)
sendfile(r1, r1, 0x0, 0x40000000800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
fallocate(r2, 0x100000000000011, 0x2000, 0x2f93)

799.651092ms ago: executing program 9 (id=6866):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a801800028014000180080014000100000008001a"], 0x44}}, 0x0)

618.423145ms ago: executing program 9 (id=6867):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$NS_GET_OWNER_UID(r0, 0x8004b706, 0x0)

494.107673ms ago: executing program 9 (id=6868):
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c)
ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}}, 0x20004890)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(r0, &(0x7f00000001c0)='net/ip_vs_stats\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20)
r6 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

88.61115ms ago: executing program 1 (id=6869):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x1, 0x2)
write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0'}, 0xb)

0s ago: executing program 1 (id=6870):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x2, 0x20, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x3, 0xb2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

kernel console output (not intermixed with test programs):

b9
[  568.790108][ T5702] usb 9-1: config 220 has an invalid interface number: 0 but max is -1
[  568.790130][ T5702] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  568.790249][ T5702] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 0
[  568.790279][ T5702] usb 9-1: config 220 interface 0 has no altsetting 0
[  568.792351][ T5702] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.792364][ T5702] usb 9-1: Product: syz
[  568.792371][ T5702] usb 9-1: Manufacturer: syz
[  568.792378][ T5702] usb 9-1: SerialNumber: syz
[  569.433443][ T5702] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  569.476573][T20952] fuse: fd is not a fuse device
[  569.604787][ T5702] usb 10-1: Using ep0 maxpacket: 8
[  569.605703][ T5702] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  569.606757][ T5702] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7
[  569.608961][ T5702] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  569.608981][ T5702] usb 10-1: Product: syz
[  569.608994][ T5702] usb 10-1: Manufacturer: syz
[  569.609007][ T5702] usb 10-1: SerialNumber: syz
[  571.381144][  T806] usb 9-1: USB disconnect, device number 29
[  571.672155][T20996] loop8: detected capacity change from 0 to 1024
[  571.696368][T20996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  571.700511][T20996] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  571.713444][T20996] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 2: comm syz.8.6118: lblock 2 mapped to illegal pblock 2 (length 1)
[  571.713520][T20996] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  571.721000][T20996] EXT4-fs (loop8): Remounting filesystem read-only
[  571.721065][T20996] __quota_error: 5 callbacks suppressed
[  571.721140][T20996] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  571.721202][T20996] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  571.721310][T20996] EXT4-fs (loop8): 1 orphan inode deleted
[  571.742979][T20996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.751405][T20996] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.862353][T21004] loop8: detected capacity change from 0 to 512
[  571.873643][T21004] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.6121: bg 0: block 5: invalid block bitmap
[  571.881237][T21004] loop8: lost filesystem error report for type 5 error -117
[  571.882916][T21004] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  571.885990][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  571.886012][    C1] EXT4-fs (loop8): initial error at time 1790524047: ext4_validate_block_bitmap:436
[  571.886032][    C1] EXT4-fs (loop8): last error at time 1790524047: ext4_validate_block_bitmap:436
[  571.907596][T21004] loop8: lost filesystem error report for type 5 error -117
[  571.908183][T21004] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6121: invalid indirect mapped block 3 (level 2)
[  571.918476][T21004] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  571.926467][T21004] EXT4-fs (loop8): 1 orphan inode deleted
[  571.926508][T21004] EXT4-fs (loop8): 1 truncate cleaned up
[  571.927397][T21004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  571.956644][   T34] audit: type=1804 audit(1790524047.348:368): pid=21004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.6121" name="/newroot/753/file0/file0" dev="loop8" ino=11 res=1 errno=0
[  571.960199][T21004] EXT4-fs (loop8): shut down requested (0)
[  572.028437][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.116333][T21011] use of bytesused == 0 is deprecated and will be removed in the future,
[  572.116397][T21011] use the actual size instead.
[  572.209623][  T806] usb 10-1: USB disconnect, device number 14
[  572.401449][T21025] loop8: detected capacity change from 0 to 256
[  572.411056][T21025] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  572.415448][T21025] FAT-fs (loop8): Filesystem has been set read-only
[  572.695260][  T806] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  572.703344][ T5893] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  572.846934][  T806] usb 10-1: Using ep0 maxpacket: 16
[  572.849242][  T806] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  572.851879][  T806] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.851905][  T806] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  572.851924][  T806] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  572.851958][  T806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.875829][ T5893] usb 9-1: Using ep0 maxpacket: 16
[  572.879409][ T5893] usb 9-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  572.885016][ T5893] usb 9-1: config 166 has an invalid interface number: 177 but max is 1
[  572.888452][ T5893] usb 9-1: config 166 has an invalid interface number: 34 but max is 1
[  572.888477][ T5893] usb 9-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config
[  572.888494][ T5893] usb 9-1: config 166 has no interface number 0
[  572.888508][ T5893] usb 9-1: config 166 has no interface number 1
[  572.888548][ T5893] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  572.888566][ T5893] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  572.888621][ T5893] usb 9-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  572.888642][ T5893] usb 9-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  572.888661][ T5893] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0
[  572.888676][ T5893] usb 9-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0
[  572.888693][ T5893] usb 9-1: config 166 interface 177 has no altsetting 0
[  572.888706][ T5893] usb 9-1: config 166 interface 34 has no altsetting 0
[  572.938204][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.941530][ T5893] usb 9-1: Product: syz
[  572.941548][ T5893] usb 9-1: Manufacturer: syz
[  572.941560][ T5893] usb 9-1: SerialNumber: syz
[  573.583577][T21059] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  573.587481][T21059] overlayfs: failed to set xattr on upper
[  573.589890][T21059] overlayfs: ...falling back to redirect_dir=nofollow.
[  573.592847][T21059] overlayfs: ...falling back to index=off.
[  573.596318][T21059] overlayfs: ...falling back to uuid=null.
[  573.609694][T21059] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  573.671648][T21063] 9p: Bad value for 'rfdno'
[  574.699285][T21075] fuse: fd is not a fuse device
[  575.192899][T21088] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6160'.
[  575.296603][   T34] audit: type=1800 audit(1790524050.688:369): pid=21092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6162" name="file1" dev="tmpfs" ino=14635 res=0 errno=0
[  575.377232][  T806] usb 10-1: USB disconnect, device number 15
[  575.474803][ T5702] usb 9-1: USB disconnect, device number 30
[  575.808508][T21114] bond1: option ad_user_port_key: invalid value (7056)
[  575.810979][T21114] bond1: option ad_user_port_key: allowed values 0 - 1023
[  576.474672][T21114] bond1 (unregistering): Released all slaves
[  576.528703][T21116] Bluetooth: ISO socket layer initialized
[  577.024345][ T5702] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  577.184351][ T5702] usb 10-1: Using ep0 maxpacket: 8
[  577.189102][ T5702] usb 10-1: unable to get BOS descriptor or descriptor too short
[  577.189171][ T5702] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40
[  577.197999][ T5702] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1471, setting to 1024
[  577.206440][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.206499][ T5702] usb 10-1: Product: syz
[  577.206554][ T5702] usb 10-1: Manufacturer: syz
[  577.206587][ T5702] usb 10-1: SerialNumber: syz
[  577.411516][T21159] loop8: detected capacity change from 0 to 2048
[  577.418899][T21159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  577.580348][T21165] loop8: detected capacity change from 0 to 2048
[  577.605557][T21165] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  577.610714][T21165] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  577.614730][T21165] UDF-fs: Scanning with blocksize 512 failed
[  577.621767][T21165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  577.782839][T21175] sg_write: data in/out 404444/36 bytes for SCSI command 0x63-- guessing data in;
[  577.782839][T21175]    program syz.8.6199 not setting count and/or reply_len properly
[  578.965651][T21207] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6213'.
[  578.965700][T21207] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6213'.
[  579.110455][T21219] sock: sock_set_timeout: `syz.8.6219' (pid 21219) tries to set negative timeout
[  579.152652][T21221] tun0: tun_chr_ioctl cmd 1074025675
[  579.157178][T21221] tun0: persist enabled
[  579.159384][T21221] tun0: tun_chr_ioctl cmd 1074025675
[  579.161158][T21221] tun0: persist disabled
[  579.691832][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6226'.
[  579.694927][T21235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6226'.
[  579.788251][ T5702] usb 10-1: USB disconnect, device number 16
[  579.802464][T21239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6228'.
[  580.046222][T21245] loop9: detected capacity change from 0 to 4096
[  580.075309][T21245] ntfs3(loop9): Failed to load $Extend (-22).
[  580.077901][T21245] ntfs3(loop9): Failed to initialize $Extend.
[  580.319537][T21251] loop8: detected capacity change from 0 to 2048
[  580.355855][T21251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  580.378647][T21251] syz.8.6234 (pid 21251) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  580.407806][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.415245][ T5702] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  580.542200][T21259] loop8: detected capacity change from 0 to 512
[  580.547448][T21259] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  580.547462][T21259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  580.547633][T21259] EXT4-fs (loop8): orphan cleanup on readonly fs
[  580.547774][T21259] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #13: comm syz.8.6237: iget: bad i_size value: 12154761577498
[  580.547788][T21259] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  580.548046][T21259] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.6237: couldn't read orphan inode 13 (err -117)
[  580.548060][T21259] loop8: lost filesystem error report for type 5 error -117
[  580.549112][T21259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  580.593293][ T5702] usb 10-1: Using ep0 maxpacket: 16
[  580.594316][T21259] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.6237: dx entry: limit 65535 != root limit 120
[  580.594334][T21259] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6237: Corrupt directory, running e2fsck is recommended
[  580.600476][ T5702] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  580.614035][T21259] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.6237: dx entry: limit 65535 != root limit 120
[  580.614092][T21259] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6237: Corrupt directory, running e2fsck is recommended
[  580.614957][T21259] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.6237: dx entry: limit 65535 != root limit 120
[  580.615017][T21259] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6237: Corrupt directory, running e2fsck is recommended
[  580.632325][T21259] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.6237: dx entry: limit 65535 != root limit 120
[  580.632343][T21259] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6237: Corrupt directory, running e2fsck is recommended
[  580.640275][T21259] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.6237: dx entry: limit 65535 != root limit 120
[  580.640296][T21259] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6237: Corrupt directory, running e2fsck is recommended
[  580.654358][ T5702] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.654409][ T5702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  580.654456][ T5702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  580.654483][ T5702] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  580.654510][ T5702] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  580.675295][ T5702] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  580.678554][ T5702] usb 10-1: Manufacturer: syz
[  580.682452][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.911042][T21276] loop8: detected capacity change from 0 to 8192
[  580.914618][T21276] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  580.950404][ T5597] Bluetooth: hci1: unexpected event for opcode 0x041c
[  581.747881][T21300] 9p: Bad value for 'rfdno'
[  581.891291][T21302] loop8: detected capacity change from 0 to 32768
[  581.898738][T21302] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  582.009461][T14644] ocfs2: Unmounting device (7,8) on (node local)
[  582.045305][T21314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6263'.
[  582.045357][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6263'.
[  582.161553][T21324] fuse: fd is not a fuse device
[  582.389456][T21340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6275'.
[  582.411393][T21340] netlink: 67 bytes leftover after parsing attributes in process `syz.4.6275'.
[  583.175560][ T2249] usb 10-1: USB disconnect, device number 17
[  583.365122][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  583.376436][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  583.393743][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  583.397665][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  583.412122][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  583.549721][T21356] loop9: detected capacity change from 0 to 4096
[  583.556003][T21363] loop8: detected capacity change from 0 to 128
[  583.642110][T21356] NILFS error (device loop9): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  583.643234][T21368] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  583.727899][T21353] wlan0 speed is unknown, defaulting to 1000
[  583.749427][T21356] NILFS (loop9): mounting fs with errors
[  583.760663][T21356] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  583.762397][T21356] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  583.762479][T21356] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  583.764312][   T34] audit: type=1800 audit(1790524059.148:370): pid=21356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6283" name="file1" dev="loop9" ino=15 res=0 errno=0
[  583.886609][T21356] NILFS (loop9): DAT doesn't have a block to manage vblocknr = 159744
[  583.886676][T21356] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=15)
[  583.886776][T21356] NILFS (loop9): error -5 truncating bmap (ino=15)
[  584.248191][T21353] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.252043][T21353] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.254841][T21353] bridge_slave_0: entered allmulticast mode
[  584.255312][T21387] ALSA: seq fatal error: cannot create timer (-22)
[  584.261411][T21353] bridge_slave_0: entered promiscuous mode
[  584.267505][T21353] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.270019][T21353] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.273473][T21353] bridge_slave_1: entered allmulticast mode
[  584.277378][T21353] bridge_slave_1: entered promiscuous mode
[  584.288418][T21389] loop9: detected capacity change from 0 to 256
[  584.367847][T21353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.377060][T21353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.429940][T21353] team0: Port device team_slave_0 added
[  584.437293][T21353] team0: Port device team_slave_1 added
[  584.466951][T21353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.470664][T21353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.481221][T21353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.488839][T21353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.491951][T21353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.502302][T21353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.596793][T21353] hsr_slave_0: entered promiscuous mode
[  584.597359][T21353] hsr_slave_1: entered promiscuous mode
[  584.597835][T21353] debugfs: 'hsr0' already exists in 'hsr'
[  584.605045][T21353] Cannot create hsr debugfs directory
[  584.657276][T21397] FAULT_INJECTION: forcing a failure.
[  584.657276][T21397] name failslab, interval 1, probability 0, space 0, times 0
[  584.657339][T21397] CPU: 1 UID: 0 PID: 21397 Comm: syz.9.6295 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  584.657367][T21397] Tainted: [L]=SOFTLOCKUP
[  584.657371][T21397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  584.657378][T21397] Call Trace:
[  584.657382][T21397]  <TASK>
[  584.657387][T21397]  dump_stack_lvl+0xe8/0x150
[  584.657404][T21397]  should_fail_ex+0x410/0x560
[  584.657419][T21397]  should_failslab+0xa8/0x100
[  584.657430][T21397]  __kmalloc_cache_noprof+0xa3/0x600
[  584.657445][T21397]  ? call_usermodehelper_setup+0x8e/0x270
[  584.657456][T21397]  ? call_usermodehelper_setup+0x8e/0x270
[  584.657467][T21397]  ? __request_module+0x2ec/0x630
[  584.657480][T21397]  call_usermodehelper_setup+0x8e/0x270
[  584.657490][T21397]  ? __pfx_free_modprobe_argv+0x10/0x10
[  584.657502][T21397]  __request_module+0x3ba/0x630
[  584.657512][T21397]  ? rcu_is_watching+0x16/0xb0
[  584.657524][T21397]  ? __pfx___request_module+0x10/0x10
[  584.657534][T21397]  ? netlink_create+0xd0/0x590
[  584.657543][T21397]  ? lock_acquire+0x106/0x350
[  584.657557][T21397]  ? _raw_read_unlock_irqrestore+0x30/0x80
[  584.657574][T21397]  netlink_create+0x1b2/0x590
[  584.657585][T21397]  __sock_create+0x4b3/0x9d0
[  584.657599][T21397]  __sys_socket+0xd6/0x1b0
[  584.657610][T21397]  __x64_sys_socket+0x7a/0x90
[  584.657620][T21397]  do_syscall_64+0x166/0x520
[  584.657629][T21397]  ? trace_irq_disable+0x3b/0x140
[  584.657638][T21397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.657649][T21397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.657683][T21397] RIP: 0033:0x7f1dbfd9e159
[  584.657693][T21397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.657702][T21397] RSP: 002b:00007f1dc0c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  584.657714][T21397] RAX: ffffffffffffffda RBX: 00007f1dc0025fa0 RCX: 00007f1dbfd9e159
[  584.657721][T21397] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010
[  584.657727][T21397] RBP: 00007f1dbfe3506b R08: 0000000000000000 R09: 0000000000000000
[  584.657734][T21397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  584.657740][T21397] R13: 00007f1dc0026038 R14: 00007f1dc0025fa0 R15: 00007ffd42bc7488
[  584.657757][T21397]  </TASK>
[  585.037841][T21405] loop8: detected capacity change from 0 to 512
[  585.113524][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  585.113654][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  585.128362][   T55] Bluetooth: hci1: hardware error 0x00
[  585.510016][ T5597] Bluetooth: hci0: command tx timeout
[  585.519888][ T5597] Bluetooth: hci2: link tx timeout
[  585.521944][ T5597] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  587.188666][T21419] loop8: detected capacity change from 0 to 40427
[  587.192803][T21419] F2FS-fs (loop8): invalid crc value
[  587.263622][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  587.400542][T21419] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  587.484922][T21419] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0
[  587.485337][T21419] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  587.485754][T21419] F2FS-fs (loop8): Start checkpoint disabled!
[  587.585943][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  587.586006][   T55] Bluetooth: hci0: command tx timeout
[  587.756725][T21419] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0
[  587.765671][T21419] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  588.488668][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.488668][   T37] loop8: rw=1, sector=77824, nr_sectors = 8 limit=40427
[  588.551674][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.551674][   T37] loop8: rw=1, sector=77832, nr_sectors = 8 limit=40427
[  588.566165][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.566165][   T37] loop8: rw=1, sector=77840, nr_sectors = 8 limit=40427
[  588.571204][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.571204][   T37] loop8: rw=1, sector=77848, nr_sectors = 8 limit=40427
[  588.578893][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.578893][   T37] loop8: rw=1, sector=77856, nr_sectors = 8 limit=40427
[  588.583906][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.583906][   T37] loop8: rw=1, sector=77864, nr_sectors = 8 limit=40427
[  588.584035][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.584035][   T37] loop8: rw=1, sector=77872, nr_sectors = 8 limit=40427
[  588.584139][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.584139][   T37] loop8: rw=1, sector=77880, nr_sectors = 8 limit=40427
[  588.584244][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.584244][   T37] loop8: rw=1, sector=77888, nr_sectors = 8 limit=40427
[  588.584379][   T37] kworker/u10:1: attempt to access beyond end of device
[  588.584379][   T37] loop8: rw=1, sector=77896, nr_sectors = 8 limit=40427
[  588.846258][T21353] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  588.851373][T21353] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  588.856404][T21353] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  588.864185][T21353] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  588.865782][T21353] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  588.876965][T21353] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  588.877944][T21353] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  588.894408][T21353] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  588.931510][T21455] loop9: detected capacity change from 0 to 8192
[  589.096596][T21353] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.134722][T21353] 8021q: adding VLAN 0 to HW filter on device team0
[  589.139867][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.139962][ T9428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.147044][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.147132][ T9428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.239197][   T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u10:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  589.239243][   T37] Tainted: [L]=SOFTLOCKUP
[  589.239247][   T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  589.239254][   T37] Workqueue: writeback wb_workfn (flush-7:8)
[  589.239276][   T37] Call Trace:
[  589.239280][   T37]  <TASK>
[  589.239285][   T37]  dump_stack_lvl+0xe8/0x150
[  589.239334][   T37]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  589.239362][   T37]  f2fs_write_end_io+0x1215/0x16f0
[  589.239375][   T37]  ? blkg_put+0x22/0x240
[  589.239395][   T37]  __submit_merged_bio+0x258/0x6a0
[  589.239405][   T37]  ? _raw_spin_unlock+0x28/0x50
[  589.239420][   T37]  f2fs_submit_page_write+0x21df/0x2360
[  589.239443][   T37]  ? __pfx_f2fs_submit_page_write+0x10/0x10
[  589.239456][   T37]  ? __f2fs_is_valid_blkaddr+0xcd6/0x14f0
[  589.239469][   T37]  do_write_page+0x3e0/0x880
[  589.239486][   T37]  f2fs_outplace_write_data+0x11a/0x220
[  589.239500][   T37]  f2fs_do_write_data_page+0x1150/0x1540
[  589.239518][   T37]  ? __pfx_folios_put_refs+0x10/0x10
[  589.239532][   T37]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  589.239544][   T37]  ? __lock_acquire+0x683/0x2cf0
[  589.239563][   T37]  f2fs_write_single_data_page+0xa2f/0x1840
[  589.239581][   T37]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  589.239605][   T37]  ? folio_clear_dirty_for_io+0x1bf/0x820
[  589.239620][   T37]  ? folio_clear_dirty_for_io+0x1bf/0x820
[  589.239632][   T37]  ? folio_clear_dirty_for_io+0x646/0x820
[  589.239647][   T37]  f2fs_write_data_pages+0x1d2e/0x36f0
[  589.239675][   T37]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  589.239691][   T37]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  589.239728][   T37]  ? __lock_acquire+0x683/0x2cf0
[  589.239749][   T37]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  589.239760][   T37]  do_writepages+0x338/0x560
[  589.239773][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.239783][   T37]  ? locked_inode_to_wb_and_lock_list+0x204/0x310
[  589.239795][   T37]  ? reacquire_held_locks+0x104/0x190
[  589.239804][   T37]  ? writeback_sb_inodes+0x450/0x1b00
[  589.239816][   T37]  __writeback_single_inode+0x136/0x1220
[  589.239846][   T37]  ? do_raw_spin_unlock+0x4d/0x200
[  589.239860][   T37]  writeback_sb_inodes+0x9de/0x1b00
[  589.239882][   T37]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  589.239913][   T37]  ? rcu_is_watching+0x16/0xb0
[  589.239923][   T37]  ? queue_io+0x2d3/0x470
[  589.239935][   T37]  wb_writeback+0x41c/0xad0
[  589.239946][   T37]  ? queue_io+0x2b1/0x470
[  589.239959][   T37]  ? __pfx_wb_writeback+0x10/0x10
[  589.239967][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.239986][   T37]  wb_workfn+0x431/0x10f0
[  589.240008][   T37]  ? __pfx_wb_workfn+0x10/0x10
[  589.240021][   T37]  ? rcu_is_watching+0x16/0xb0
[  589.240031][   T37]  ? trace_hrtimer_start+0x82/0x200
[  589.240047][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.240061][   T37]  ? process_scheduled_works+0x97a/0x1630
[  589.240074][   T37]  ? process_scheduled_works+0x97a/0x1630
[  589.240087][   T37]  ? rcu_is_watching+0x16/0xb0
[  589.240098][   T37]  ? process_scheduled_works+0x97a/0x1630
[  589.240109][   T37]  process_scheduled_works+0xc3d/0x1630
[  589.240135][   T37]  ? __pfx_process_scheduled_works+0x10/0x10
[  589.240149][   T37]  ? assign_work+0x3cf/0x5d0
[  589.240162][   T37]  worker_thread+0xa47/0xfb0
[  589.240186][   T37]  kthread+0x38b/0x480
[  589.240195][   T37]  ? __pfx_worker_thread+0x10/0x10
[  589.240205][   T37]  ? __pfx_kthread+0x10/0x10
[  589.240214][   T37]  ret_from_fork+0x514/0xb70
[  589.240224][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  589.240238][   T37]  ? __switch_to+0xc89/0x1420
[  589.240251][   T37]  ? __pfx_kthread+0x10/0x10
[  589.240260][   T37]  ret_from_fork_asm+0x1a/0x30
[  589.240280][   T37]  </TASK>
[  589.345425][   T37] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  589.354979][ T2249] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  589.564454][ T2249] usb 10-1: Using ep0 maxpacket: 16
[  589.565466][ T2249] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  589.566631][ T2249] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  589.566667][ T2249] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  589.566681][ T2249] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  589.568975][ T2249] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.568993][ T2249] usb 10-1: Product: syz
[  589.569004][ T2249] usb 10-1: Manufacturer: syz
[  589.569013][ T2249] usb 10-1: SerialNumber: syz
[  589.616086][T21353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  589.664690][T21353] veth0_vlan: entered promiscuous mode
[  589.673203][ T5597] Bluetooth: hci0: command tx timeout
[  589.676783][T21353] veth1_vlan: entered promiscuous mode
[  589.705219][T21353] veth0_macvtap: entered promiscuous mode
[  589.709848][T21353] veth1_macvtap: entered promiscuous mode
[  589.719828][T21353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.727635][T21353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.783855][ T5479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.783915][ T5479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  589.783967][ T5479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  589.784001][ T5479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.858854][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.858909][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.945783][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.945844][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.128075][T21511] loop1: detected capacity change from 0 to 1024
[  590.138355][T21511] EXT4-fs: Ignoring removed bh option
[  590.178834][T21511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  590.178928][T21511] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.412187][T21526] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.6281: lblock 3 mapped to illegal pblock 3 (length 3)
[  590.427186][T21526] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  590.427351][T21526] EXT4-fs (loop1): This should not happen!! Data will be lost
[  590.427351][T21526] 
[  590.943462][T21517] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  590.992550][   T28] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:0: lblock 8 mapped to illegal pblock 8 (length 8)
[  590.998969][   T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  590.999028][   T28] EXT4-fs (loop1): This should not happen!! Data will be lost
[  590.999028][   T28] 
[  591.001505][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  591.311722][T21570] loop1: detected capacity change from 0 to 32768
[  591.319742][T21570] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  591.323897][T21570] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6320 (21570)
[  591.336201][T21570] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  591.340247][T21570] BTRFS info (device loop1): using sha256 checksum algorithm
[  591.403727][T21570] BTRFS info (device loop1): rebuilding free space tree
[  591.467961][T21570] BTRFS info (device loop1): disabling free space tree
[  591.470722][T21570] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  591.492282][T21570] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  591.528193][T21570] BTRFS info (device loop1): enabling ssd optimizations
[  591.528238][T21570] BTRFS info (device loop1): force clearing of disk cache
[  591.528280][T21570] BTRFS info (device loop1): max_inline set to 4096
[  591.724767][T21353] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  591.738857][T21601] loop8: detected capacity change from 0 to 512
[  591.743415][ T5597] Bluetooth: hci0: command tx timeout
[  591.750071][T21601] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  591.771504][T12412] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  591.775478][T21601] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  591.779314][T21601] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.6325: bg 0: block 248: padding at end of block bitmap is not set
[  591.779680][T21601] loop8: lost filesystem error report for type 5 error -117
[  591.780005][T21601] Quota error (device loop8): write_blk: dquota write failed
[  591.780313][T21601] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  591.780465][T21601] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.6325: Failed to acquire dquot type 1
[  591.780598][T21601] loop8: lost filesystem error report for type 5 error -28
[  591.784552][    C1] EXT4-fs (loop8): error count since last fsck: 2
[  591.784570][    C1] EXT4-fs (loop8): last error at time 1790524066: ext4_acquire_dquot:7069
[  591.789194][T21601] EXT4-fs (loop8): 1 truncate cleaned up
[  591.790613][T21601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  591.981226][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  591.986322][ T9429] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5
[  591.986372][ T9429] EXT4-fs error (device loop8): ext4_release_dquot:7105: comm kworker/u9:7: Failed to release dquot type 1
[  591.986398][ T9429] loop8: lost filesystem error report for type 5 error -117
[  592.132748][T21608] loop8: detected capacity change from 0 to 4096
[  592.135885][ T2249] usb 10-1: USB disconnect, device number 18
[  592.163914][T21608] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  592.191137][T21608] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[  592.266727][ T5597] Bluetooth: hci0: unknown advertising packet type: 0x65
[  592.266779][ T5597] Bluetooth: hci0: Dropping invalid advertising data
[  592.266811][ T5597] Bluetooth: hci0: Malformed LE Event: 0x02
[  592.563293][T15076] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  592.585308][T21629] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  592.657206][T21631] loop9: detected capacity change from 0 to 1024
[  592.664970][T21631] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  592.719774][T21633] loop9: detected capacity change from 0 to 128
[  592.723781][T15076] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  592.727585][T15076] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  592.731836][T15076] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  592.739286][T15076] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  592.739325][T15076] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  592.742149][T21633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  592.742200][T21633] System zones: 1-3, 19-19, 35-36
[  592.744059][T21633] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  592.744257][T21633] ext4 filesystem being mounted at /281/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  592.768807][T15076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.771506][T15076] usb 9-1: Product: syz
[  592.773310][T15076] usb 9-1: Manufacturer: syz
[  592.775164][T15076] usb 9-1: SerialNumber: syz
[  592.807769][T18366] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  592.869709][T21638] Cannot find add_set index 0 as target
[  593.927406][T21657] FAULT_INJECTION: forcing a failure.
[  593.927406][T21657] name failslab, interval 1, probability 0, space 0, times 0
[  593.927462][T21657] CPU: 1 UID: 0 PID: 21657 Comm: syz.9.6347 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.927505][T21657] Tainted: [L]=SOFTLOCKUP
[  593.927510][T21657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  593.927516][T21657] Call Trace:
[  593.927521][T21657]  <TASK>
[  593.927526][T21657]  dump_stack_lvl+0xe8/0x150
[  593.927544][T21657]  should_fail_ex+0x410/0x560
[  593.927560][T21657]  should_failslab+0xa8/0x100
[  593.927572][T21657]  __kmalloc_cache_noprof+0xa3/0x600
[  593.927586][T21657]  ? jffs2_sum_init+0x72/0x220
[  593.927598][T21657]  ? jffs2_sum_init+0x72/0x220
[  593.927612][T21657]  jffs2_sum_init+0x72/0x220
[  593.927625][T21657]  jffs2_do_mount_fs+0x72b/0x22c0
[  593.927637][T21657]  ? trace_kmalloc+0x2a/0xf0
[  593.927650][T21657]  ? __raw_spin_lock_init+0x45/0x100
[  593.927671][T21657]  jffs2_do_fill_super+0x555/0xc50
[  593.927682][T21657]  ? __pfx_jffs2_fill_super+0x10/0x10
[  593.927691][T21657]  mtd_get_sb+0x18a/0x410
[  593.927700][T21657]  ? __pfx_jffs2_fill_super+0x10/0x10
[  593.927709][T21657]  ? __pfx_jffs2_fill_super+0x10/0x10
[  593.927718][T21657]  get_tree_mtd+0x597/0x7d0
[  593.927727][T21657]  ? __pfx_jffs2_fill_super+0x10/0x10
[  593.927736][T21657]  ? __pfx_get_tree_mtd+0x10/0x10
[  593.927750][T21657]  vfs_get_tree+0x92/0x2a0
[  593.927763][T21657]  do_new_mount+0x319/0xdc0
[  593.927775][T21657]  ? __pfx_do_new_mount+0x10/0x10
[  593.927786][T21657]  ? ns_capable+0x89/0xe0
[  593.927798][T21657]  ? path_mount+0x647/0x1050
[  593.927809][T21657]  ? user_path_at+0xd4/0x160
[  593.927821][T21657]  __se_sys_mount+0x31d/0x420
[  593.927833][T21657]  ? __pfx___se_sys_mount+0x10/0x10
[  593.927846][T21657]  ? __x64_sys_mount+0x20/0xc0
[  593.927857][T21657]  do_syscall_64+0x166/0x520
[  593.927867][T21657]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.927878][T21657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.927886][T21657] RIP: 0033:0x7f1dbfd9e159
[  593.927896][T21657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  593.927904][T21657] RSP: 002b:00007f1dc0c88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  593.927915][T21657] RAX: ffffffffffffffda RBX: 00007f1dc0025fa0 RCX: 00007f1dbfd9e159
[  593.927921][T21657] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200
[  593.927962][T21657] RBP: 00007f1dbfe3506b R08: 0000000000000000 R09: 0000000000000000
[  593.927973][T21657] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[  593.927991][T21657] R13: 00007f1dc0026038 R14: 00007f1dc0025fa0 R15: 00007ffd42bc7488
[  593.928007][T21657]  </TASK>
[  593.931829][T21657] jffs2: warning: (21657) jffs2_sum_init: Can't allocate memory for summary information!
[  594.828796][T21661] loop9: detected capacity change from 0 to 512
[  594.851417][T21661] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.6349: bg 0: block 5: invalid block bitmap
[  594.856347][T21661] loop9: lost filesystem error report for type 5 error -117
[  594.858359][T21661] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  594.858395][T21661] loop9: lost filesystem error report for type 5 error -117
[  594.864948][    C0] EXT4-fs (loop9): error count since last fsck: 2
[  594.864960][    C0] EXT4-fs (loop9): initial error at time 1790524069: ext4_validate_block_bitmap:436
[  594.864973][    C0] EXT4-fs (loop9): last error at time 1790524069: ext4_mb_clear_bb:6680
[  594.876342][T21661] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6349: invalid indirect mapped block 3 (level 2)
[  594.876370][T21661] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  594.884590][T21661] EXT4-fs (loop9): 1 orphan inode deleted
[  594.884637][T21661] EXT4-fs (loop9): 1 truncate cleaned up
[  594.885697][T21661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  594.909968][T21661] CacheFiles: mkdir cache failed with error -105
[  594.912758][T21661] CacheFiles: Failed to register: -105
[  594.931732][T18366] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.986167][T21665] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058)
[  595.084510][T21671] FAULT_INJECTION: forcing a failure.
[  595.084510][T21671] name failslab, interval 1, probability 0, space 0, times 0
[  595.084566][T21671] CPU: 1 UID: 0 PID: 21671 Comm: syz.9.6353 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  595.084593][T21671] Tainted: [L]=SOFTLOCKUP
[  595.084598][T21671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  595.084604][T21671] Call Trace:
[  595.084609][T21671]  <TASK>
[  595.084613][T21671]  dump_stack_lvl+0xe8/0x150
[  595.084631][T21671]  should_fail_ex+0x410/0x560
[  595.084646][T21671]  should_failslab+0xa8/0x100
[  595.084658][T21671]  __kmalloc_cache_noprof+0xa3/0x600
[  595.084672][T21671]  ? tipc_group_create+0x9b/0x4f0
[  595.084682][T21671]  ? tipc_group_create+0x9b/0x4f0
[  595.084696][T21671]  tipc_group_create+0x9b/0x4f0
[  595.084710][T21671]  tipc_sk_join+0x25d/0x6a0
[  595.084722][T21671]  ? __pfx_tipc_sk_join+0x10/0x10
[  595.084730][T21671]  ? tipc_setsockopt+0x731/0x9a0
[  595.084745][T21671]  ? __local_bh_enable_ip+0xd6/0x140
[  595.084758][T21671]  tipc_setsockopt+0x73e/0x9a0
[  595.084774][T21671]  ? __pfx_tipc_setsockopt+0x10/0x10
[  595.084787][T21671]  ? aa_sock_opt_perm+0x105/0x1b0
[  595.084801][T21671]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  595.084812][T21671]  ? __pfx_tipc_setsockopt+0x10/0x10
[  595.084825][T21671]  do_sock_setsockopt+0x17c/0x1b0
[  595.084874][T21671]  __x64_sys_setsockopt+0x13d/0x1b0
[  595.084889][T21671]  do_syscall_64+0x166/0x520
[  595.084899][T21671]  ? trace_irq_disable+0x3b/0x140
[  595.084914][T21671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.084926][T21671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.084935][T21671] RIP: 0033:0x7f1dbfd9e159
[  595.084945][T21671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.084954][T21671] RSP: 002b:00007f1dc0c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  595.084965][T21671] RAX: ffffffffffffffda RBX: 00007f1dc0025fa0 RCX: 00007f1dbfd9e159
[  595.084972][T21671] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  595.084978][T21671] RBP: 00007f1dbfe3506b R08: 0000000000000010 R09: 0000000000000000
[  595.084984][T21671] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  595.084990][T21671] R13: 00007f1dc0026038 R14: 00007f1dc0025fa0 R15: 00007ffd42bc7488
[  595.085005][T21671]  </TASK>
[  595.348211][T21679] loop9: detected capacity change from 0 to 128
[  595.468418][T21679] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  595.472452][T21679] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  595.499122][  T806] usb 9-1: USB disconnect, device number 31
[  596.087131][T18366] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  596.383473][ T5893] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  596.633927][ T5893] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  596.638958][ T5893] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.643590][ T5893] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  596.649286][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  596.652682][ T5893] usb 10-1: SerialNumber: syz
[  597.111128][T21710] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  597.172110][T21712] loop1: detected capacity change from 0 to 64
[  597.409960][T21714] loop1: detected capacity change from 0 to 256
[  597.421852][T21714] exfat: Deprecated parameter 'utf8'
[  597.424612][T21714] exfat: Deprecated parameter 'utf8'
[  597.429948][T21714] exfat: Deprecated parameter 'namecase'
[  597.432067][T21714] exfat: Deprecated parameter 'namecase'
[  597.450465][T21714] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[  597.613658][T21716] loop1: detected capacity change from 0 to 512
[  597.646991][T21716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  597.647168][T21716] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  597.721967][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.138537][T21734] loop8: detected capacity change from 0 to 1024
[  598.184463][T21734] hfsplus: unknown catalog record type 5377
[  598.198523][   T34] audit: type=1800 audit(1790524072.589:371): pid=21736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6380" name="c_chmask" dev="configfs" ino=55657 res=0 errno=0
[  598.407022][T21746] 9p: Could not find request transport: f
[  598.523362][T21751] loop8: detected capacity change from 0 to 8
[  598.531156][T21744] loop1: detected capacity change from 0 to 40427
[  598.533324][T21744] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  598.533339][T21744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  598.652807][T21744] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  598.684124][T21744] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  598.684203][T21744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  598.874356][T21353] bio_check_eod: 1504 callbacks suppressed
[  598.876958][T21353] syz-executor: attempt to access beyond end of device
[  598.876958][T21353] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  598.889411][T21353] CPU: 1 UID: 0 PID: 21353 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  598.889459][T21353] Tainted: [L]=SOFTLOCKUP
[  598.889463][T21353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  598.889470][T21353] Call Trace:
[  598.889474][T21353]  <TASK>
[  598.889479][T21353]  dump_stack_lvl+0xe8/0x150
[  598.889498][T21353]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  598.889516][T21353]  f2fs_write_end_io+0x1215/0x16f0
[  598.889528][T21353]  ? blkg_put+0x22/0x240
[  598.889571][T21353]  __submit_merged_bio+0x258/0x6a0
[  598.889580][T21353]  ? rcu_is_watching+0x16/0xb0
[  598.889593][T21353]  __submit_merged_write_cond+0x3c9/0x4e0
[  598.889611][T21353]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  598.889634][T21353]  f2fs_write_data_pages+0x2a27/0x36f0
[  598.889644][T21353]  ? __lock_acquire+0x683/0x2cf0
[  598.889667][T21353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  598.889696][T21353]  ? __pfx_hlock_conflict+0x10/0x10
[  598.889710][T21353]  ? __bfs+0x153/0x290
[  598.889718][T21353]  ? __pfx_hlock_conflict+0x10/0x10
[  598.889735][T21353]  ? lockdep_unlock+0x5c/0xd0
[  598.889747][T21353]  ? __lock_acquire+0x13e8/0x2cf0
[  598.889766][T21353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  598.889777][T21353]  do_writepages+0x338/0x560
[  598.889795][T21353]  ? do_raw_spin_unlock+0x4d/0x200
[  598.889808][T21353]  filemap_fdatawrite+0x1e9/0x2f0
[  598.889819][T21353]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  598.889846][T21353]  ? do_raw_spin_unlock+0x4d/0x200
[  598.889859][T21353]  f2fs_sync_dirty_inodes+0x30e/0x830
[  598.889876][T21353]  f2fs_write_checkpoint+0xa3d/0x2710
[  598.889887][T21353]  ? __lock_acquire+0x683/0x2cf0
[  598.889908][T21353]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  598.889934][T21353]  ? try_to_wake_up+0x8b6/0x14d0
[  598.889950][T21353]  kill_f2fs_super+0x2dd/0x700
[  598.889965][T21353]  ? __pfx_kill_f2fs_super+0x10/0x10
[  598.889980][T21353]  ? call_rcu+0x64d/0x8b0
[  598.889989][T21353]  ? lockdep_hardirqs_on+0x7b/0x110
[  598.890005][T21353]  deactivate_locked_super+0xbc/0x110
[  598.890018][T21353]  cleanup_mnt+0x3d3/0x460
[  598.890032][T21353]  task_work_run+0x1d9/0x270
[  598.890043][T21353]  ? __pfx_task_work_run+0x10/0x10
[  598.890056][T21353]  exit_to_user_mode_loop+0x204/0x770
[  598.890065][T21353]  ? rcu_is_watching+0x16/0xb0
[  598.890076][T21353]  do_syscall_64+0x328/0x520
[  598.890085][T21353]  ? trace_irq_disable+0x3b/0x140
[  598.890093][T21353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.890105][T21353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.890113][T21353] RIP: 0033:0x7fd6e4f9f397
[  598.890124][T21353] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  598.890132][T21353] RSP: 002b:00007ffeeee71398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  598.890143][T21353] RAX: 0000000000000000 RBX: 00007fd6e50344bb RCX: 00007fd6e4f9f397
[  598.890149][T21353] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeeee71450
[  598.890155][T21353] RBP: 00007ffeeee71450 R08: 00007ffeeee72450 R09: 00000000ffffffff
[  598.890161][T21353] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeeee724e0
[  598.890167][T21353] R13: 00007fd6e50344bb R14: 00000000000923e1 R15: 00007ffeeee72520
[  598.890181][T21353]  </TASK>
[  598.897321][T21353] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  599.150065][ T2249] usb 10-1: USB disconnect, device number 19
[  599.565052][   T34] audit: type=1326 audit(1790524073.959:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.574008][   T34] audit: type=1326 audit(1790524073.959:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.580768][   T34] audit: type=1326 audit(1790524073.969:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.588778][   T34] audit: type=1326 audit(1790524073.969:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.588845][   T34] audit: type=1326 audit(1790524073.979:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.588924][   T34] audit: type=1326 audit(1790524073.979:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.588958][   T34] audit: type=1326 audit(1790524073.979:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.603905][   T34] audit: type=1326 audit(1790524073.989:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.603941][   T34] audit: type=1326 audit(1790524073.989:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.9.6396" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1dbfd9e159 code=0x7ffc0000
[  599.633884][T21777] loop8: detected capacity change from 0 to 512
[  599.653640][T21777] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.6397: inode has both inline data and extents flags
[  599.653710][T21777] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  599.660788][T21777] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.6397: couldn't read orphan inode 15 (err -117)
[  599.660847][T21777] loop8: lost filesystem error report for type 5 error -117
[  599.664112][    C1] EXT4-fs (loop8): error count since last fsck: 2
[  599.664129][    C1] EXT4-fs (loop8): initial error at time 1790524074: ext4_orphan_get:1403: inode 15
[  599.664144][    C1] EXT4-fs (loop8): last error at time 1790524074: ext4_orphan_get:1408
[  599.675103][T21777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  599.737570][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.799161][T21785] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6399'.
[  599.870697][T21790] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  600.295127][T21818] loop8: detected capacity change from 0 to 512
[  600.320853][T21818] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  600.330536][T21818] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.6413: corrupted in-inode xattr: e_value size too large
[  600.335727][T21818] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  600.336038][T21818] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.6413: couldn't read orphan inode 15 (err -117)
[  600.336086][T21818] loop8: lost filesystem error report for type 5 error -117
[  600.343717][T21818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  600.371386][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.442016][T21821] loop8: detected capacity change from 0 to 512
[  600.476136][T21821] EXT4-fs error (device loop8) in ext4_process_orphan:346: Out of memory
[  600.476189][T21821] loop8: lost filesystem error report for type 5 error -12
[  600.476640][T21821] EXT4-fs (loop8): 2 truncates cleaned up
[  600.477562][T21821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  600.486944][T21821] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.6414: bg 0: block 5: invalid block bitmap
[  600.490103][T21821] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  600.490119][T21821] EXT4-fs (loop8): This should not happen!! Data will be lost
[  600.490119][T21821] 
[  600.490126][T21821] EXT4-fs (loop8): Total free blocks count 0
[  600.490132][T21821] EXT4-fs (loop8): Free/Dirty block details
[  600.490139][T21821] EXT4-fs (loop8): free_blocks=0
[  600.490166][T21821] EXT4-fs (loop8): dirty_blocks=66
[  600.490173][T21821] EXT4-fs (loop8): Block reservation details
[  600.490178][T21821] EXT4-fs (loop8): i_reserved_data_blocks=66
[  600.520319][   T29] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  600.814118][T21833] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  601.063250][T18577] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  601.071776][T21841] loop8: detected capacity change from 0 to 32768
[  601.094551][T21841] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  601.119667][T21841] XFS (loop8): Ending clean mount
[  601.151129][T14644] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  601.224469][T18577] usb 10-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  601.248413][T18577] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  601.248477][T18577] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  601.248518][T18577] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  601.248572][T18577] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.053155][  T806] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  602.204128][  T806] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  602.205411][  T806] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  602.205432][  T806] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  602.205466][  T806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.315535][T21869] loop1: detected capacity change from 0 to 32768
[  603.830387][T15076] usb 10-1: USB disconnect, device number 20
[  603.930546][T21883] loop9: detected capacity change from 0 to 1024
[  604.841260][ T5662] usb 9-1: USB disconnect, device number 32
[  605.010161][T21923] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  605.010336][T21923] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  605.030780][T21923] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  605.030881][T21923] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  605.046909][T21923] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  605.717549][T21932] loop9: detected capacity change from 0 to 128
[  605.718754][T21932] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  605.719272][T21932] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  605.915245][T21938] binder_alloc: 21937: pid 21937 spamming oneway? 1 buffers allocated for a total size of 4096
[  606.207562][T21946] loop8: detected capacity change from 0 to 32768
[  606.212199][T21946] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6467 (21946)
[  606.235952][T21946] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  606.236054][T21946] BTRFS info (device loop8): using sha256 checksum algorithm
[  606.285120][T21946] BTRFS info (device loop8): enabling ssd optimizations
[  606.288109][T21946] BTRFS info (device loop8): turning on async discard
[  606.291000][T21946] BTRFS info (device loop8): enabling free space tree
[  606.332910][T14644] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  606.621591][T21968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6470'.
[  607.028291][ T5597] Bluetooth: hci2: command 0x0406 tx timeout
[  607.103506][ T5597] Bluetooth: hci0: command 0x0c1a tx timeout
[  607.141045][ T5893] kernel read not supported for file /vcsa (pid: 5893 comm: kworker/1:5)
[  607.274317][T21999] loop9: detected capacity change from 0 to 256
[  607.435410][T22006] FAULT_INJECTION: forcing a failure.
[  607.435410][T22006] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  607.435470][T22006] CPU: 0 UID: 0 PID: 22006 Comm: syz.9.6488 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  607.435498][T22006] Tainted: [L]=SOFTLOCKUP
[  607.435503][T22006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  607.435509][T22006] Call Trace:
[  607.435514][T22006]  <TASK>
[  607.435519][T22006]  dump_stack_lvl+0xe8/0x150
[  607.435537][T22006]  should_fail_ex+0x410/0x560
[  607.435556][T22006]  prepare_alloc_pages+0x223/0x600
[  607.435574][T22006]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  607.435585][T22006]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  607.435596][T22006]  ? __pfx_policy_nodemask+0x10/0x10
[  607.435611][T22006]  alloc_pages_mpol+0x21e/0x390
[  607.435624][T22006]  folio_alloc_mpol_noprof+0x39/0x160
[  607.435635][T22006]  shmem_alloc_and_add_folio+0x43e/0xf60
[  607.435648][T22006]  ? filemap_get_entry+0xcd/0x3f0
[  607.435663][T22006]  ? __pfx_filemap_get_entry+0x10/0x10
[  607.435673][T22006]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  607.435686][T22006]  ? shmem_allowable_huge_orders+0x325/0x6c0
[  607.435699][T22006]  shmem_get_folio_gfp+0x5da/0x16d0
[  607.435717][T22006]  shmem_write_begin+0x16c/0x330
[  607.435731][T22006]  generic_perform_write+0x2d5/0x8f0
[  607.435748][T22006]  ? __pfx_generic_perform_write+0x10/0x10
[  607.435759][T22006]  ? down_write+0x16b/0x200
[  607.435769][T22006]  ? generic_write_checks_count+0x41a/0x520
[  607.435781][T22006]  ? file_update_time_flags+0x2d5/0x440
[  607.435795][T22006]  shmem_file_write_iter+0xf8/0x120
[  607.435807][T22006]  vfs_write+0x612/0xba0
[  607.435822][T22006]  ? __pfx_vfs_write+0x10/0x10
[  607.435839][T22006]  ? __fget_files+0x2a/0x420
[  607.435853][T22006]  ksys_write+0x150/0x270
[  607.435892][T22006]  ? __pfx_ksys_write+0x10/0x10
[  607.435910][T22006]  do_syscall_64+0x166/0x520
[  607.435919][T22006]  ? trace_irq_disable+0x3b/0x140
[  607.435929][T22006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.435941][T22006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.435950][T22006] RIP: 0033:0x7f1dbfd9e159
[  607.435960][T22006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  607.435968][T22006] RSP: 002b:00007f1dc0c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  607.435979][T22006] RAX: ffffffffffffffda RBX: 00007f1dc0025fa0 RCX: 00007f1dbfd9e159
[  607.435986][T22006] RDX: 000000000001000a RSI: 0000200000000380 RDI: 0000000000000004
[  607.435993][T22006] RBP: 00007f1dbfe3506b R08: 0000000000000000 R09: 0000000000000000
[  607.435999][T22006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  607.436005][T22006] R13: 00007f1dc0026038 R14: 00007f1dc0025fa0 R15: 00007ffd42bc7488
[  607.436034][T22006]  </TASK>
[  607.571347][T22013] loop9: detected capacity change from 0 to 1024
[  607.742560][T22019] loop8: detected capacity change from 0 to 1024
[  607.757279][T22019] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  607.776360][T22019] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  607.781788][T22019] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  607.960033][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.383504][ T5662] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  608.434761][T22054] jffs2: notice: (22054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  608.454469][T22055] loop9: detected capacity change from 0 to 2048
[  608.475265][T22055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  608.533180][ T5662] usb 9-1: Using ep0 maxpacket: 16
[  608.536202][ T5662] usb 9-1: unable to get BOS descriptor or descriptor too short
[  608.536291][ T5662] usb 9-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=4f.77
[  608.538113][ T5662] usb 9-1: config 2 has an invalid interface number: 4 but max is 1
[  608.538134][ T5662] usb 9-1: config 2 has an invalid interface number: 200 but max is 1
[  608.538149][ T5662] usb 9-1: config 2 has no interface number 0
[  608.538161][ T5662] usb 9-1: config 2 has no interface number 1
[  608.538189][ T5662] usb 9-1: config 2 interface 4 altsetting 9 has an endpoint descriptor with address 0xE3, changing to 0x83
[  608.538202][ T5662] usb 9-1: config 2 interface 4 has no altsetting 0
[  608.538214][ T5662] usb 9-1: config 2 interface 200 has no altsetting 0
[  608.540112][ T5662] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.540124][ T5662] usb 9-1: Product: syz
[  608.540131][ T5662] usb 9-1: Manufacturer: syz
[  608.540137][ T5662] usb 9-1: SerialNumber: syz
[  608.565342][T22060] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  608.756006][T22067] loop9: detected capacity change from 0 to 4096
[  608.762529][T22067] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  608.809115][T22067] ntfs3(loop9): Failed to initialize $Extend/$ObjId.
[  608.995141][T22080] FAULT_INJECTION: forcing a failure.
[  608.995141][T22080] name failslab, interval 1, probability 0, space 0, times 0
[  608.995222][T22080] CPU: 0 UID: 0 PID: 22080 Comm: syz.9.6520 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  608.995263][T22080] Tainted: [L]=SOFTLOCKUP
[  608.995271][T22080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  608.995282][T22080] Call Trace:
[  608.995289][T22080]  <TASK>
[  608.995297][T22080]  dump_stack_lvl+0xe8/0x150
[  608.995325][T22080]  should_fail_ex+0x410/0x560
[  608.995350][T22080]  should_failslab+0xa8/0x100
[  608.995371][T22080]  __kmalloc_cache_noprof+0xa3/0x600
[  608.995395][T22080]  ? seq_create_client1+0x56/0x620
[  608.995415][T22080]  ? seq_create_client1+0x56/0x620
[  608.995441][T22080]  seq_create_client1+0x56/0x620
[  608.995465][T22080]  snd_seq_open+0x41/0x4e0
[  608.995492][T22080]  chrdev_open+0x4d9/0x600
[  608.995512][T22080]  ? __pfx_chrdev_open+0x10/0x10
[  608.995528][T22080]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  608.995557][T22080]  ? __pfx_chrdev_open+0x10/0x10
[  608.995572][T22080]  do_dentry_open+0x816/0x1380
[  608.995599][T22080]  vfs_open+0x3b/0x340
[  608.995614][T22080]  ? path_openat+0x1428/0x1d60
[  608.995638][T22080]  path_openat+0x1443/0x1d60
[  608.995675][T22080]  do_file_open+0x23e/0x4a0
[  608.995701][T22080]  ? __pfx_do_file_open+0x10/0x10
[  608.995769][T22080]  ? _raw_spin_unlock+0x28/0x50
[  608.995795][T22080]  ? alloc_fd+0x651/0x6c0
[  608.995828][T22080]  do_sys_openat2+0x115/0x200
[  608.995847][T22080]  ? __se_sys_futex+0x3a8/0x450
[  608.995868][T22080]  ? __pfx_do_sys_openat2+0x10/0x10
[  608.995890][T22080]  ? rcu_is_watching+0x16/0xb0
[  608.995914][T22080]  __x64_sys_openat+0x138/0x170
[  608.995937][T22080]  do_syscall_64+0x166/0x520
[  608.995954][T22080]  ? trace_irq_disable+0x3b/0x140
[  608.995970][T22080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.995990][T22080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.996006][T22080] RIP: 0033:0x7f1dbfd9e159
[  608.996022][T22080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.996036][T22080] RSP: 002b:00007f1dc0c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  608.996054][T22080] RAX: ffffffffffffffda RBX: 00007f1dc0025fa0 RCX: 00007f1dbfd9e159
[  608.996066][T22080] RDX: 0000000000042202 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  608.996078][T22080] RBP: 00007f1dbfe3506b R08: 0000000000000000 R09: 0000000000000000
[  608.996090][T22080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  608.996100][T22080] R13: 00007f1dc0026038 R14: 00007f1dc0025fa0 R15: 00007ffd42bc7488
[  608.996126][T22080]  </TASK>
[  609.106861][ T5597] Bluetooth: hci2: command 0x0406 tx timeout
[  609.185708][ T5597] Bluetooth: hci0: command 0x0c1a tx timeout
[  609.920742][T22103] Bluetooth: MGMT ver 1.23
[  610.285183][T22108] loop1: detected capacity change from 0 to 32768
[  610.394325][T22114] loop9: detected capacity change from 0 to 4096
[  610.399884][T22114] ntfs3(loop9): ino=0, mi_enum_attr
[  610.411918][T22114] ntfs3(loop9): ino=0, mi_enum_attr
[  610.415330][T22114] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  610.419288][T22114] ntfs3(loop9): ino=0, mi_enum_attr
[  611.156003][ T5662] usb 9-1: USB disconnect, device number 33
[  611.263242][ T5597] Bluetooth: hci0: command 0x0c1a tx timeout
[  611.450475][T22132] loop9: detected capacity change from 0 to 2048
[  611.458207][T22132] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  611.458263][T22132] NILFS (loop9): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  611.623662][ T5662] usb 9-1: new full-speed USB device number 34 using dummy_hcd
[  611.654324][T22140] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  611.657340][T22140] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  611.657434][T22140] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  611.657450][T22140] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  611.775318][ T5662] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  611.776417][ T5662] usb 9-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  611.776433][ T5662] usb 9-1: config 0 interface 0 has no altsetting 0
[  611.776448][ T5662] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.800859][T22146] netlink: 'syz.9.6550': attribute type 11 has an invalid length.
[  613.739729][T22159] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96
[  613.822601][T22163] FAULT_INJECTION: forcing a failure.
[  613.822601][T22163] name failslab, interval 1, probability 0, space 0, times 0
[  613.822682][T22163] CPU: 0 UID: 0 PID: 22163 Comm: syz.1.6557 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  613.822725][T22163] Tainted: [L]=SOFTLOCKUP
[  613.822734][T22163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  613.822745][T22163] Call Trace:
[  613.822752][T22163]  <TASK>
[  613.822760][T22163]  dump_stack_lvl+0xe8/0x150
[  613.822789][T22163]  should_fail_ex+0x410/0x560
[  613.822813][T22163]  ? __pfx_sock_alloc_inode+0x10/0x10
[  613.822832][T22163]  should_failslab+0xa8/0x100
[  613.822873][T22163]  ? __pfx_sock_alloc_inode+0x10/0x10
[  613.822891][T22163]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  613.822915][T22163]  ? vfs_get_tree+0x92/0x2a0
[  613.822936][T22163]  ? __se_sys_mount+0x31d/0x420
[  613.822956][T22163]  ? sock_alloc_inode+0x2c/0x1a0
[  613.822972][T22163]  ? sock_alloc_inode+0x2c/0x1a0
[  613.822994][T22163]  ? __pfx_sock_alloc_inode+0x10/0x10
[  613.823011][T22163]  sock_alloc_inode+0x2c/0x1a0
[  613.823029][T22163]  ? __pfx_sock_alloc_inode+0x10/0x10
[  613.823046][T22163]  alloc_inode+0x6a/0x1b0
[  613.823065][T22163]  __sock_create+0x12d/0x9d0
[  613.823090][T22163]  p9_fd_create_unix+0x220/0x4f0
[  613.823113][T22163]  ? __pfx_p9_fd_create_unix+0x10/0x10
[  613.823141][T22163]  ? __kmalloc_cache_noprof+0x321/0x600
[  613.823166][T22163]  ? __kmalloc_cache_noprof+0x14d/0x600
[  613.823197][T22163]  p9_client_create+0x3e5/0xc60
[  613.823223][T22163]  ? __pfx_p9_client_create+0x10/0x10
[  613.823259][T22163]  v9fs_session_init+0x46/0xd40
[  613.823278][T22163]  ? __kmalloc_cache_noprof+0x14d/0x600
[  613.823301][T22163]  ? v9fs_get_tree+0xaa/0xac0
[  613.823322][T22163]  ? v9fs_get_tree+0xaa/0xac0
[  613.823347][T22163]  v9fs_get_tree+0xbd/0xac0
[  613.823396][T22163]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  613.823432][T22163]  ? __pfx_v9fs_get_tree+0x10/0x10
[  613.823463][T22163]  vfs_get_tree+0x92/0x2a0
[  613.823489][T22163]  do_new_mount+0x319/0xdc0
[  613.823513][T22163]  ? __pfx_do_new_mount+0x10/0x10
[  613.823534][T22163]  ? ns_capable+0x89/0xe0
[  613.823556][T22163]  ? path_mount+0x647/0x1050
[  613.823577][T22163]  ? user_path_at+0xd4/0x160
[  613.823601][T22163]  __se_sys_mount+0x31d/0x420
[  613.823624][T22163]  ? __pfx___se_sys_mount+0x10/0x10
[  613.823650][T22163]  ? __x64_sys_mount+0x20/0xc0
[  613.823670][T22163]  do_syscall_64+0x166/0x520
[  613.823688][T22163]  ? trace_irq_disable+0x3b/0x140
[  613.823705][T22163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.823727][T22163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.823744][T22163] RIP: 0033:0x7fd6e4f9e159
[  613.823761][T22163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.823778][T22163] RSP: 002b:00007fd6e5eb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  613.823797][T22163] RAX: ffffffffffffffda RBX: 00007fd6e5225fa0 RCX: 00007fd6e4f9e159
[  613.823811][T22163] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040
[  613.823823][T22163] RBP: 00007fd6e503506b R08: 0000200000000440 R09: 0000000000000000
[  613.823835][T22163] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000
[  613.823847][T22163] R13: 00007fd6e5226038 R14: 00007fd6e5225fa0 R15: 00007ffeeee72128
[  613.823872][T22163]  </TASK>
[  613.841054][T22163] socket: no more sockets
[  613.841069][T22163] 9pnet_fd: p9_fd_create_unix (22163): problem creating socket
[  614.244964][T22173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  614.639281][ T5893] usb 9-1: USB disconnect, device number 34
[  615.035807][T22186] loop9: detected capacity change from 0 to 1024
[  615.048535][T22186] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.096378][T18366] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.145762][ T5893] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  615.207558][T22193] loop9: detected capacity change from 0 to 128
[  615.313208][ T5893] usb 9-1: Using ep0 maxpacket: 16
[  615.316651][ T5893] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  615.326513][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  615.347794][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.347850][ T5893] usb 9-1: Product: syz
[  615.348040][ T5893] usb 9-1: Manufacturer: syz
[  615.348077][ T5893] usb 9-1: SerialNumber: syz
[  615.387171][T22199] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  615.421054][T22197] FAULT_INJECTION: forcing a failure.
[  615.421054][T22197] name failslab, interval 1, probability 0, space 0, times 0
[  615.421134][T22197] CPU: 0 UID: 60928 PID: 22197 Comm: syz.9.6571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  615.421176][T22197] Tainted: [L]=SOFTLOCKUP
[  615.421184][T22197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  615.421193][T22197] Call Trace:
[  615.421200][T22197]  <TASK>
[  615.421208][T22197]  dump_stack_lvl+0xe8/0x150
[  615.421267][T22197]  should_fail_ex+0x410/0x560
[  615.421293][T22197]  should_failslab+0xa8/0x100
[  615.421313][T22197]  ? copy_utsname+0x1f7/0x620
[  615.421337][T22197]  kmem_cache_alloc_noprof+0xa1/0x600
[  615.421363][T22197]  ? copy_utsname+0x1f7/0x620
[  615.421388][T22197]  copy_utsname+0x1f7/0x620
[  615.421411][T22197]  create_new_namespaces+0x178/0x6b0
[  615.421433][T22197]  ? security_capable+0x7e/0x2c0
[  615.421461][T22197]  unshare_nsproxy_namespaces+0x149/0x190
[  615.421485][T22197]  ksys_unshare+0x5a7/0x950
[  615.421514][T22197]  ? __pfx_ksys_unshare+0x10/0x10
[  615.421537][T22197]  ? rcu_is_watching+0x16/0xb0
[  615.421562][T22197]  __x64_sys_unshare+0x38/0x50
[  615.421584][T22197]  do_syscall_64+0x166/0x520
[  615.421600][T22197]  ? trace_irq_disable+0x3b/0x140
[  615.421614][T22197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.421636][T22197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.421653][T22197] RIP: 0033:0x7f1dbfd9e159
[  615.421669][T22197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.421685][T22197] RSP: 002b:00007f1dc0c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  615.421704][T22197] RAX: ffffffffffffffda RBX: 00007f1dc0025fa0 RCX: 00007f1dbfd9e159
[  615.421717][T22197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080
[  615.421727][T22197] RBP: 00007f1dbfe3506b R08: 0000000000000000 R09: 0000000000000000
[  615.421738][T22197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  615.421749][T22197] R13: 00007f1dc0026038 R14: 00007f1dc0025fa0 R15: 00007ffd42bc7488
[  615.421774][T22197]  </TASK>
[  615.588386][T22203] netlink: 'syz.9.6574': attribute type 4 has an invalid length.
[  615.641127][T22203] netlink: 'syz.9.6574': attribute type 4 has an invalid length.
[  615.829871][T22209] loop9: detected capacity change from 0 to 4096
[  615.840656][T22209] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  615.863677][T22209] ntfs3(loop9): Failed to initialize $Extend/$ObjId.
[  615.892895][T22213] loop1: detected capacity change from 0 to 128
[  615.900374][T22213] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  615.904338][T22213] hpfs: filesystem error: improperly stopped
[  615.906675][T22213] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  615.916340][T22213] hpfs: You really don't want any checks? You are crazy...
[  615.918885][T22213] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  615.921927][T22213] hpfs: code page support is disabled
[  615.939599][T22213] hpfs: hpfs_map_4sectors(): unaligned read
[  615.942051][T22213] hpfs: hpfs_map_4sectors(): unaligned read
[  615.946681][T22213] hpfs: filesystem error: unable to find root dir
[  616.299748][T22228] loop1: detected capacity change from 0 to 512
[  616.301389][T22228] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  616.315038][T22228] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.6586: invalid indirect mapped block 4294967295 (level 0)
[  616.315112][T22228] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  616.315803][T22228] EXT4-fs (loop1): Remounting filesystem read-only
[  616.316437][T22228] EXT4-fs (loop1): 1 orphan inode deleted
[  616.316650][T22228] EXT4-fs (loop1): 1 truncate cleaned up
[  616.318204][T22228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  616.354284][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.063352][T15076] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  617.213211][T15076] usb 10-1: Using ep0 maxpacket: 16
[  617.214223][T15076] usb 10-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  617.215469][T15076] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.215490][T15076] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.215506][T15076] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  617.215537][T15076] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.432333][T22260] loop1: detected capacity change from 0 to 512
[  617.473596][T22260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.475446][T22260] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.504371][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.849667][T18577] usb 9-1: USB disconnect, device number 35
[  617.933849][T22271] tmpfs: Bad value for 'mpol'
[  618.357617][T22277] loop1: detected capacity change from 0 to 40427
[  618.368968][T22277] F2FS-fs (loop1): invalid crc value
[  618.410196][T22277] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  618.417848][T22277] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  618.417907][T22277] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  618.418087][T22277] F2FS-fs (loop1): Start checkpoint disabled!
[  618.431843][T22277] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  618.432255][T22277] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  619.839575][ T5662] usb 10-1: USB disconnect, device number 21
[  619.944254][T22285] loop9: detected capacity change from 0 to 128
[  619.949070][T22285] EXT4-fs: Ignoring removed bh option
[  619.969611][T22285] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  619.976020][T22285] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  620.030657][T18366] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  620.143439][T18667] Bluetooth: hci3: command 0x1003 tx timeout
[  620.156999][ T5597] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  620.282639][T22293] loop8: detected capacity change from 0 to 512
[  620.284321][T22293] EXT4-fs (loop8): Test dummy encryption mode enabled
[  620.284339][T22293] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  620.304834][T22293] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.6611: bad orphan inode 131083
[  620.304937][T22293] loop8: lost filesystem error report for type 5 error -117
[  620.306826][T22293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  620.328607][T22293] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 13: comm syz.8.6611: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  620.374677][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.586916][T22304] loop8: detected capacity change from 0 to 256
[  620.606632][T22304] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf3aaca9f, utbl_chksum : 0xe619d30d)
[  620.668063][T22306] loop9: detected capacity change from 0 to 8
[  620.676222][T22306] SQUASHFS error: zlib decompression failed, data probably corrupt
[  620.676292][T22306] SQUASHFS error: Failed to read block 0x9b: -5
[  620.676343][T22306] SQUASHFS error: Unable to read metadata cache entry [99]
[  620.676375][T22306] SQUASHFS error: Unable to read inode 0x127
[  620.847290][T22313] loop8: detected capacity change from 0 to 16
[  620.852048][T22313] erofs (device loop8): mounted with root inode @ nid 36.
[  620.874567][T22313] erofs (device loop8): readahead error at folio 2 @ nid 89
[  620.878099][T22313] erofs (device loop8): bogus lookback distance 1 @ lcn 0 of nid 89
[  620.881951][T22313] erofs (device loop8): readahead error at folio 1 @ nid 89
[  620.886041][T22313] erofs (device loop8): bogus lookback distance 1 @ lcn 0 of nid 89
[  620.889335][T22313] erofs (device loop8): readahead error at folio 0 @ nid 89
[  620.893355][T22313] erofs (device loop8): bogus lookback distance 1 @ lcn 0 of nid 89
[  620.897077][T22313] erofs (device loop8): bogus lookback distance 1 @ lcn 0 of nid 89
[  620.905659][T22313] erofs (device loop8): read error -117 @ 0 of nid 89
[  620.911233][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  620.911312][   T34] audit: type=1800 audit(1790524095.299:382): pid=22313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6621" name="file3" dev="loop8" ino=89 res=0 errno=0
[  621.122257][T22326] loop8: detected capacity change from 0 to 512
[  621.143946][T22326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  621.167585][   T34] audit: type=1804 audit(1790524095.559:383): pid=22326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.6625" name="/newroot/918/file1/mnt/$" dev="loop8" ino=19 res=1 errno=0
[  621.211178][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.529653][T22345] loop9: detected capacity change from 0 to 256
[  621.538684][T22345] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  621.568709][T22345] exFAT-fs (loop9): error, in sector 160, dentry 12 should be unused, but 0x85
[  621.568821][T22345] exFAT-fs (loop9): Filesystem has been set read-only
[  621.678186][T22349] loop9: detected capacity change from 0 to 2048
[  621.687494][T22349] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  621.687715][T22349] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  621.687955][T22349] UDF-fs: Scanning with blocksize 512 failed
[  621.693575][T22349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  622.139334][T22380] IPVS: set_ctl: invalid protocol: 84 224.0.0.1:20004
[  622.224785][T22382] Alternate GPT is invalid, using primary GPT.
[  622.224868][T22382]  loop9: p1 p2 p3
[  622.729568][T22413] netlink: 392 bytes leftover after parsing attributes in process `syz.8.6668'.
[  622.835248][T15076] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  622.983203][T15076] usb 10-1: Using ep0 maxpacket: 32
[  622.986709][T15076] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  622.991779][T15076] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.996685][T15076] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.000925][T15076] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.465890][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  624.467972][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  625.176817][T22419] set_capacity_and_notify: 1 callbacks suppressed
[  625.176920][T22419] loop1: detected capacity change from 0 to 16
[  625.190657][T22419] erofs (device loop1): mounted with root inode @ nid 36.
[  625.199046][T22419] erofs (device loop1): readahead error at folio 2 @ nid 89
[  625.199180][T22419] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89
[  625.199218][T22419] erofs (device loop1): readahead error at folio 1 @ nid 89
[  625.199252][T22419] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89
[  625.199346][T22419] erofs (device loop1): readahead error at folio 0 @ nid 89
[  625.209109][T22419] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89
[  625.209137][T22419] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89
[  625.209154][T22419] erofs (device loop1): read error -117 @ 0 of nid 89
[  625.209586][   T34] audit: type=1800 audit(1790524099.599:384): pid=22419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6663" name="file3" dev="loop1" ino=89 res=0 errno=0
[  625.404131][T18577] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  625.609326][T18577] usb 9-1: Using ep0 maxpacket: 8
[  625.624347][T18577] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  625.708878][T18577] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  625.716551][T18577] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  625.722684][T18577] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  625.728941][T18577] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  625.736695][T18577] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  625.747304][T18577] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.807218][T18577] usb 10-1: USB disconnect, device number 22
[  626.277593][T22436] loop1: detected capacity change from 0 to 256
[  627.268107][T22452] loop9: detected capacity change from 0 to 4096
[  627.269738][T22452] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  627.287191][T22452] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  627.319145][T22452] ntfs3(loop9): ino=5, "/" indx_read_ra
[  627.533019][T22458] ISOFS: Unable to identify CD-ROM format.
[  627.597022][T22460] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6684'.
[  627.601512][T22460] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6684'.
[  628.184918][T18577] usb 9-1: USB disconnect, device number 36
[  628.253665][T22466] loop8: detected capacity change from 0 to 4096
[  628.262414][T22466] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  628.295909][T22466] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  628.321457][T22466] ntfs3(loop8): ino=5, "/" indx_read_ra
[  628.871477][T22481] loop9: detected capacity change from 0 to 32768
[  628.872383][T22481] xfs: Deprecated parameter 'ikeep'
[  628.872399][T22481] XFS: ikeep mount option is deprecated.
[  628.888597][T22481] XFS (loop9): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  628.908800][T22481] XFS (loop9): Ending clean mount
[  628.938717][T18366] XFS (loop9): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  629.037037][T22499] loop8: detected capacity change from 0 to 64
[  629.322349][T22504] input: syz0 as /devices/virtual/input/input41
[  629.609401][T22504] input: failed to attach handler leds to device input41, error: -6
[  630.225236][ T5054] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  630.363294][T15076] usb 9-1: new full-speed USB device number 37 using dummy_hcd
[  630.411657][ T5054] usb 10-1: unable to get BOS descriptor or descriptor too short
[  630.411738][ T5054] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  630.420376][ T5054] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  630.420436][ T5054] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  630.429686][ T5054] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.429747][ T5054] usb 10-1: Product: syz
[  630.429791][ T5054] usb 10-1: Manufacturer: syz
[  630.429804][ T5054] usb 10-1: SerialNumber: syz
[  630.520414][T15076] usb 9-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40
[  630.521533][T15076] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  630.521557][T15076] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  630.521576][T15076] usb 9-1: config 1 interface 0 has no altsetting 0
[  630.525089][T15076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.525109][T15076] usb 9-1: Product: syz
[  630.525121][T15076] usb 9-1: Manufacturer: syz
[  630.525132][T15076] usb 9-1: SerialNumber: syz
[  632.967716][ T2249] usb 10-1: USB disconnect, device number 23
[  633.128582][T22529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6712'.
[  633.128640][T22529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6712'.
[  633.161264][T15076] usb 9-1: USB disconnect, device number 37
[  633.268501][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6711'.
[  633.704181][T22542] loop1: detected capacity change from 0 to 32768
[  633.708609][T22542] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6718 (22542)
[  633.730319][T22542] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  633.735255][T22542] BTRFS info (device loop1): using blake2b checksum algorithm
[  633.738072][T22542] BTRFS error (device loop1): superblock checksum mismatch
[  633.740743][T22542] BTRFS error (device loop1): open_ctree failed: -EINVAL
[  634.007544][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6720'.
[  634.250826][T22547] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.253936][T22547] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.265363][T22554] loop8: detected capacity change from 0 to 256
[  634.270557][T22554] exfat: Deprecated parameter 'namecase'
[  634.313565][T22554] exFAT-fs (loop8): error, invalid access to FAT bad cluster (entry 0x00000005)
[  634.314731][T22554] exFAT-fs (loop8): failed to count the number of clusters in root
[  634.314845][T22554] exFAT-fs (loop8): failed to recognize exfat type
[  634.669620][T22547] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.683874][T22547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.077371][T22550] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.078588][T22550] 8021q: adding VLAN 0 to HW filter on device team0
[  635.081070][T22550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  635.112860][T22550] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.113011][T22550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.117637][T22550] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.117764][T22550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  635.128215][T22550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  635.129468][T22550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  635.135401][T22550] veth1_vlan: left promiscuous mode
[  635.136008][T22550] veth0_vlan: left promiscuous mode
[  635.137007][T22550] veth0_vlan: entered promiscuous mode
[  635.138805][T22550] veth1_vlan: entered promiscuous mode
[  635.141660][T22550] veth1_macvtap: left promiscuous mode
[  635.142153][T22550] veth0_macvtap: left promiscuous mode
[  635.142936][T22550] veth0_macvtap: entered promiscuous mode
[  635.143898][T22550] veth1_macvtap: entered promiscuous mode
[  635.149874][T22550] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  635.150328][T22550] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  635.150809][T22550] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  635.151250][T22550] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  635.152990][T22550] 8021q: adding VLAN 0 to HW filter on device bond1
[  635.155938][T22550] 8021q: adding VLAN 0 to HW filter on device bond2
[  635.759115][T22563] loop8: detected capacity change from 0 to 8
[  635.761600][T22563] SQUASHFS error: Unable to read inode 0x127
[  635.878047][T22569] loop9: detected capacity change from 0 to 64
[  635.967483][T22573] loop9: detected capacity change from 0 to 256
[  635.968275][T22573] exfat: Deprecated parameter 'namecase'
[  635.969752][T22573] exFAT-fs (loop9): error, invalid access to FAT bad cluster (entry 0x00000005)
[  635.969763][T22573] exFAT-fs (loop9): failed to count the number of clusters in root
[  635.969768][T22573] exFAT-fs (loop9): failed to recognize exfat type
[  636.068779][T22577] loop9: detected capacity change from 0 to 8
[  636.070345][T22577] SQUASHFS error: zlib decompression failed, data probably corrupt
[  636.070361][T22577] SQUASHFS error: Failed to read block 0x9b: -5
[  636.070367][T22577] SQUASHFS error: Unable to read metadata cache entry [99]
[  636.070373][T22577] SQUASHFS error: Unable to read inode 0x127
[  636.073284][T18610] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  636.223231][T18610] usb 9-1: Using ep0 maxpacket: 8
[  636.225707][T18610] usb 9-1: unable to get BOS descriptor or descriptor too short
[  636.225777][T18610] usb 9-1: New USB device found, idVendor=19ff, idProduct=0239, bcdDevice=9e.6d
[  636.226864][T18610] usb 9-1: config 3 has an invalid interface number: 161 but max is 0
[  636.226877][T18610] usb 9-1: config 3 has no interface number 0
[  636.228655][T18610] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.228666][T18610] usb 9-1: Product: syz
[  636.228673][T18610] usb 9-1: Manufacturer: syz
[  636.228680][T18610] usb 9-1: SerialNumber: syz
[  636.343213][T22560] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  636.494292][T22560] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  636.495786][T22560] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  636.495805][T22560] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  636.495821][T22560] usb 10-1: config 220 has an invalid descriptor of length 117, skipping remainder of the config
[  636.495834][T22560] usb 10-1: config 220 has no interface number 2
[  636.495874][T22560] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  636.495894][T22560] usb 10-1: config 220 interface 0 has no altsetting 0
[  636.495908][T22560] usb 10-1: config 220 interface 76 has no altsetting 0
[  636.495919][T22560] usb 10-1: config 220 interface 1 has no altsetting 0
[  636.498488][T22560] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.498509][T22560] usb 10-1: Product: syz
[  636.498521][T22560] usb 10-1: Manufacturer: syz
[  636.498532][T22560] usb 10-1: SerialNumber: syz
[  638.819539][T22560] usb 9-1: USB disconnect, device number 38
[  639.079157][T18610] usb 10-1: USB disconnect, device number 24
[  639.136319][T22593] loop1: detected capacity change from 0 to 1024
[  639.168508][T22593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.186071][T22593] EXT4-fs error (device loop1): ext4_get_first_dir_block:3562: inode #11: comm syz.1.6740: directory missing '..'
[  639.192729][T22593] EXT4-fs (loop1): Remounting filesystem read-only
[  639.212929][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.453199][T18610] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  639.507719][T22602] loop8: detected capacity change from 0 to 32768
[  639.522196][   T34] audit: type=1800 audit(1790524113.909:385): pid=22602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6743" name="file1" dev="loop8" ino=4 res=0 errno=0
[  639.608058][T18610] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  639.609941][T18610] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  639.612151][T18610] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.612170][T18610] usb 10-1: Product: syz
[  639.612182][T18610] usb 10-1: Manufacturer: syz
[  639.612193][T18610] usb 10-1: SerialNumber: syz
[  639.768275][T22604] loop8: detected capacity change from 0 to 32768
[  639.778613][T22604] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  639.790061][T22604] XFS (loop8): Ending clean mount
[  639.807929][T14644] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  640.163121][T18610] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  640.314406][T18610] usb 9-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  640.319328][T18610] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  640.319346][T18610] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  640.319356][T18610] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  640.319374][T18610] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.142609][T22559] usb 10-1: USB disconnect, device number 25
[  642.334472][T22620] loop1: detected capacity change from 0 to 8
[  642.345282][T22620] SQUASHFS error: zlib decompression failed, data probably corrupt
[  642.345352][T22620] SQUASHFS error: Failed to read block 0x9b: -5
[  642.345387][T22620] SQUASHFS error: Unable to read metadata cache entry [99]
[  642.345515][T22620] SQUASHFS error: Unable to read inode 0x127
[  642.603308][T22559] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  642.753396][T22559] usb 10-1: Using ep0 maxpacket: 16
[  642.758461][T22559] usb 10-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  642.764282][T22559] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  642.768272][T22559] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  642.773543][T22559] usb 10-1: config 0 interface 0 has no altsetting 0
[  642.776372][T22559] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.947034][T22559] usb 9-1: USB disconnect, device number 39
[  643.072346][T22625] loop8: detected capacity change from 0 to 1024
[  643.089683][T22625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  643.102353][T22625] EXT4-fs error (device loop8): ext4_get_first_dir_block:3562: inode #11: comm syz.8.6749: directory missing '..'
[  643.108513][T22625] EXT4-fs (loop8): Remounting filesystem read-only
[  643.131418][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.298176][ T2249] usb 10-1: USB disconnect, device number 26
[  645.358105][T22632] loop8: detected capacity change from 0 to 2048
[  645.384297][T22632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.447826][T22630] loop9: detected capacity change from 0 to 32768
[  645.470518][   T34] audit: type=1800 audit(1790524119.859:386): pid=22630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6750" name="file1" dev="loop9" ino=4 res=0 errno=0
[  645.539313][T14644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.647208][T22639] FAULT_INJECTION: forcing a failure.
[  645.647208][T22639] name failslab, interval 1, probability 0, space 0, times 0
[  645.647263][T22639] CPU: 1 UID: 0 PID: 22639 Comm: syz.1.6755 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  645.647290][T22639] Tainted: [L]=SOFTLOCKUP
[  645.647295][T22639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  645.647302][T22639] Call Trace:
[  645.647306][T22639]  <TASK>
[  645.647311][T22639]  dump_stack_lvl+0xe8/0x150
[  645.647330][T22639]  should_fail_ex+0x410/0x560
[  645.647344][T22639]  ? __pfx_sock_alloc_inode+0x10/0x10
[  645.647361][T22639]  should_failslab+0xa8/0x100
[  645.647373][T22639]  ? __pfx_sock_alloc_inode+0x10/0x10
[  645.647382][T22639]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  645.647395][T22639]  ? futex_unqueue+0x22/0x240
[  645.647405][T22639]  ? sock_alloc_inode+0x2c/0x1a0
[  645.647413][T22639]  ? sock_alloc_inode+0x2c/0x1a0
[  645.647424][T22639]  ? __pfx_sock_alloc_inode+0x10/0x10
[  645.647432][T22639]  sock_alloc_inode+0x2c/0x1a0
[  645.647441][T22639]  ? __pfx_sock_alloc_inode+0x10/0x10
[  645.647452][T22639]  alloc_inode+0x6a/0x1b0
[  645.647469][T22639]  sock_create_lite+0x8b/0x510
[  645.647485][T22639]  ? __local_bh_enable_ip+0xd6/0x140
[  645.647503][T22639]  sctp_getsockopt_peeloff_common+0x3b0/0x7e0
[  645.647519][T22639]  ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10
[  645.647534][T22639]  sctp_getsockopt_peeloff_flags+0x14b/0x240
[  645.647549][T22639]  ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10
[  645.647560][T22639]  ? sctp_getsockopt+0x12f/0xb90
[  645.647570][T22639]  ? __local_bh_enable_ip+0xd6/0x140
[  645.647591][T22639]  sctp_getsockopt+0x3a5/0xb90
[  645.647607][T22639]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  645.647624][T22639]  do_sock_getsockopt+0x51d/0x7e0
[  645.647649][T22639]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  645.647679][T22639]  ? __fget_files+0x3a2/0x420
[  645.647697][T22639]  ? __fget_files+0x2a/0x420
[  645.647720][T22639]  __x64_sys_getsockopt+0x1a4/0x240
[  645.647747][T22639]  do_syscall_64+0x166/0x520
[  645.647763][T22639]  ? trace_irq_disable+0x3b/0x140
[  645.647778][T22639]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.647798][T22639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.647814][T22639] RIP: 0033:0x7fd6e4f9e159
[  645.647829][T22639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.647841][T22639] RSP: 002b:00007fd6e5eb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  645.647888][T22639] RAX: ffffffffffffffda RBX: 00007fd6e5225fa0 RCX: 00007fd6e4f9e159
[  645.647901][T22639] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003
[  645.647912][T22639] RBP: 00007fd6e503506b R08: 0000200000000040 R09: 0000000000000000
[  645.647923][T22639] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000
[  645.647933][T22639] R13: 00007fd6e5226038 R14: 00007fd6e5225fa0 R15: 00007ffeeee72128
[  645.647948][T22639]  </TASK>
[  645.852991][T22645] loop9: detected capacity change from 0 to 16
[  645.867868][T22647] loop1: detected capacity change from 0 to 1024
[  645.869670][T22647] EXT4-fs: Ignoring removed nomblk_io_submit option
[  645.875112][T22645] erofs (device loop9): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  645.875328][T22645] erofs (device loop9): mounted with root inode @ nid 36.
[  645.894810][T22647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.940059][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.941117][T22645] syz.9.6756: attempt to access beyond end of device
[  645.941117][T22645] loop9: rw=0, sector=301990144, nr_sectors = 257 limit=16
[  645.942775][T22645] syz.9.6756: attempt to access beyond end of device
[  645.942775][T22645] loop9: rw=0, sector=301990400, nr_sectors = 514 limit=16
[  645.986637][T22645] erofs (device loop9): read error -5 @ 0 of nid 36
[  646.004765][T22641] loop8: detected capacity change from 0 to 32768
[  646.019083][T22641] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  646.035770][T22641] XFS (loop8): Ending clean mount
[  646.076771][T14644] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  646.312444][T22668] loop9: detected capacity change from 0 to 2048
[  646.362106][T22668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  646.407181][T22674] FAULT_INJECTION: forcing a failure.
[  646.407181][T22674] name failslab, interval 1, probability 0, space 0, times 0
[  646.415357][T22674] CPU: 0 UID: 0 PID: 22674 Comm: syz.8.6765 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  646.415390][T22674] Tainted: [L]=SOFTLOCKUP
[  646.415395][T22674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  646.415401][T22674] Call Trace:
[  646.415406][T22674]  <TASK>
[  646.415411][T22674]  dump_stack_lvl+0xe8/0x150
[  646.415430][T22674]  should_fail_ex+0x410/0x560
[  646.415445][T22674]  should_failslab+0xa8/0x100
[  646.415455][T22674]  ? sk_prot_alloc+0x57/0x210
[  646.415469][T22674]  kmem_cache_alloc_noprof+0xa1/0x600
[  646.415481][T22674]  ? trace_kmem_cache_alloc+0x29/0xe0
[  646.415493][T22674]  ? security_inode_alloc+0x39/0x310
[  646.415506][T22674]  ? sk_prot_alloc+0x57/0x210
[  646.415517][T22674]  ? security_inode_alloc+0x39/0x310
[  646.415531][T22674]  sk_prot_alloc+0x57/0x210
[  646.415544][T22674]  sk_clone+0x7c/0x1050
[  646.415559][T22674]  sctp_clone_sock+0x31/0x1680
[  646.415570][T22674]  ? bpf_lsm_socket_post_create+0x9/0x20
[  646.415582][T22674]  ? sock_create_lite+0x334/0x510
[  646.415594][T22674]  sctp_getsockopt_peeloff_common+0x3dd/0x7e0
[  646.415607][T22674]  ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10
[  646.415621][T22674]  sctp_getsockopt_peeloff_flags+0x14b/0x240
[  646.415636][T22674]  ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10
[  646.415648][T22674]  ? sctp_getsockopt+0x12f/0xb90
[  646.415658][T22674]  ? __local_bh_enable_ip+0xd6/0x140
[  646.415671][T22674]  sctp_getsockopt+0x3a5/0xb90
[  646.415680][T22674]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  646.415690][T22674]  do_sock_getsockopt+0x51d/0x7e0
[  646.415705][T22674]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  646.415723][T22674]  ? __fget_files+0x3a2/0x420
[  646.415732][T22674]  ? __fget_files+0x2a/0x420
[  646.415746][T22674]  __x64_sys_getsockopt+0x1a4/0x240
[  646.415761][T22674]  do_syscall_64+0x166/0x520
[  646.415770][T22674]  ? trace_irq_disable+0x3b/0x140
[  646.415778][T22674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.415812][T22674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.415823][T22674] RIP: 0033:0x7f687859e159
[  646.415833][T22674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.415841][T22674] RSP: 002b:00007f6879431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  646.415852][T22674] RAX: ffffffffffffffda RBX: 00007f6878825fa0 RCX: 00007f687859e159
[  646.415860][T22674] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003
[  646.415866][T22674] RBP: 00007f687863506b R08: 0000200000000040 R09: 0000000000000000
[  646.415872][T22674] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000
[  646.415879][T22674] R13: 00007f6878826038 R14: 00007f6878825fa0 R15: 00007fff61dd2ed8
[  646.415895][T22674]  </TASK>
[  646.471466][T18366] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.606829][T22680] FAULT_INJECTION: forcing a failure.
[  646.606829][T22680] name failslab, interval 1, probability 0, space 0, times 0
[  646.606881][T22680] CPU: 1 UID: 0 PID: 22680 Comm: syz.8.6768 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  646.606910][T22680] Tainted: [L]=SOFTLOCKUP
[  646.606915][T22680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  646.606921][T22680] Call Trace:
[  646.606926][T22680]  <TASK>
[  646.606930][T22680]  dump_stack_lvl+0xe8/0x150
[  646.606948][T22680]  should_fail_ex+0x410/0x560
[  646.606962][T22680]  should_failslab+0xa8/0x100
[  646.606974][T22680]  __kmalloc_cache_noprof+0xa3/0x600
[  646.606988][T22680]  ? seq_create_client1+0x56/0x620
[  646.607000][T22680]  ? seq_create_client1+0x56/0x620
[  646.607014][T22680]  seq_create_client1+0x56/0x620
[  646.607027][T22680]  snd_seq_open+0x41/0x4e0
[  646.607042][T22680]  chrdev_open+0x4d9/0x600
[  646.607053][T22680]  ? __pfx_chrdev_open+0x10/0x10
[  646.607062][T22680]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  646.607077][T22680]  ? __pfx_chrdev_open+0x10/0x10
[  646.607086][T22680]  do_dentry_open+0x816/0x1380
[  646.607100][T22680]  vfs_open+0x3b/0x340
[  646.607108][T22680]  ? path_openat+0x1428/0x1d60
[  646.607121][T22680]  path_openat+0x1443/0x1d60
[  646.607141][T22680]  do_file_open+0x23e/0x4a0
[  646.607155][T22680]  ? __pfx_do_file_open+0x10/0x10
[  646.607176][T22680]  ? _raw_spin_unlock+0x28/0x50
[  646.607189][T22680]  ? alloc_fd+0x651/0x6c0
[  646.607203][T22680]  do_sys_openat2+0x115/0x200
[  646.607213][T22680]  ? __se_sys_futex+0x3a8/0x450
[  646.607225][T22680]  ? __pfx_do_sys_openat2+0x10/0x10
[  646.607238][T22680]  ? rcu_is_watching+0x16/0xb0
[  646.607250][T22680]  __x64_sys_openat+0x138/0x170
[  646.607262][T22680]  do_syscall_64+0x166/0x520
[  646.607271][T22680]  ? trace_irq_disable+0x3b/0x140
[  646.607279][T22680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.607290][T22680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.607299][T22680] RIP: 0033:0x7f687859e159
[  646.607308][T22680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.607316][T22680] RSP: 002b:00007f6879431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  646.607327][T22680] RAX: ffffffffffffffda RBX: 00007f6878825fa0 RCX: 00007f687859e159
[  646.607334][T22680] RDX: 0000000000042202 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  646.607340][T22680] RBP: 00007f687863506b R08: 0000000000000000 R09: 0000000000000000
[  646.607345][T22680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  646.607357][T22680] R13: 00007f6878826038 R14: 00007f6878825fa0 R15: 00007fff61dd2ed8
[  646.607372][T22680]  </TASK>
[  646.843470][ T2249] usb 10-1: new full-speed USB device number 27 using dummy_hcd
[  646.994617][ T2249] usb 10-1: not running at top speed; connect to a high speed hub
[  646.997281][ T2249] usb 10-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[  647.001061][ T2249] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 162, changing to 4
[  647.009179][ T2249] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.011782][ T2249] usb 10-1: Manufacturer: 쏆汍䄏ǚႉ綐寞余ܻꉚ鏒昴Ȓ⣗崫畚
[  647.011796][ T2249] usb 10-1: SerialNumber: syz
[  647.084468][T18577] usb 9-1: new full-speed USB device number 40 using dummy_hcd
[  647.234041][T18577] usb 9-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  647.239613][T18577] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  647.243978][T18577] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  647.248573][T18577] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.252344][T18577] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  647.257604][T18577] usb 9-1: config 0 interface 0 has no altsetting 0
[  647.257685][T18577] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.601888][T22559] usb 10-1: USB disconnect, device number 27
[  649.634897][T22701] FAULT_INJECTION: forcing a failure.
[  649.634897][T22701] name failslab, interval 1, probability 0, space 0, times 0
[  649.634959][T22701] CPU: 1 UID: 0 PID: 22701 Comm: syz.9.6778 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  649.634997][T22701] Tainted: [L]=SOFTLOCKUP
[  649.635003][T22701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  649.635012][T22701] Call Trace:
[  649.635018][T22701]  <TASK>
[  649.635025][T22701]  dump_stack_lvl+0xe8/0x150
[  649.635050][T22701]  should_fail_ex+0x410/0x560
[  649.635072][T22701]  ? __pfx_sock_alloc_inode+0x10/0x10
[  649.635089][T22701]  should_failslab+0xa8/0x100
[  649.635106][T22701]  ? __pfx_sock_alloc_inode+0x10/0x10
[  649.635120][T22701]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  649.635140][T22701]  ? futex_unqueue+0x22/0x240
[  649.635162][T22701]  ? sock_alloc_inode+0x2c/0x1a0
[  649.635176][T22701]  ? sock_alloc_inode+0x2c/0x1a0
[  649.635194][T22701]  ? __pfx_sock_alloc_inode+0x10/0x10
[  649.635209][T22701]  sock_alloc_inode+0x2c/0x1a0
[  649.635224][T22701]  ? __pfx_sock_alloc_inode+0x10/0x10
[  649.635237][T22701]  alloc_inode+0x6a/0x1b0
[  649.635256][T22701]  sock_create_lite+0x8b/0x510
[  649.635271][T22701]  ? __local_bh_enable_ip+0xd6/0x140
[  649.635293][T22701]  sctp_getsockopt_peeloff_common+0x3b0/0x7e0
[  649.635315][T22701]  ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10
[  649.635339][T22701]  sctp_getsockopt_peeloff_flags+0x14b/0x240
[  649.635364][T22701]  ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10
[  649.635382][T22701]  ? sctp_getsockopt+0x12f/0xb90
[  649.635399][T22701]  ? __local_bh_enable_ip+0xd6/0x140
[  649.635420][T22701]  sctp_getsockopt+0x3a5/0xb90
[  649.635435][T22701]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  649.635452][T22701]  do_sock_getsockopt+0x51d/0x7e0
[  649.635476][T22701]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  649.635506][T22701]  ? __fget_files+0x3a2/0x420
[  649.635522][T22701]  ? __fget_files+0x2a/0x420
[  649.635573][T22701]  __x64_sys_getsockopt+0x1a4/0x240
[  649.635600][T22701]  do_syscall_64+0x166/0x520
[  649.635616][T22701]  ? trace_irq_disable+0x3b/0x140
[  649.635646][T22701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.635667][T22701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.635682][T22701] RIP: 0033:0x7f1dbfd9e159
[  649.635696][T22701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  649.635709][T22701] RSP: 002b:00007f1dc0c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  649.635725][T22701] RAX: ffffffffffffffda RBX: 00007f1dc0025fa0 RCX: 00007f1dbfd9e159
[  649.635737][T22701] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003
[  649.635745][T22701] RBP: 00007f1dbfe3506b R08: 0000200000000040 R09: 0000000000000000
[  649.635756][T22701] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000
[  649.635765][T22701] R13: 00007f1dc0026038 R14: 00007f1dc0025fa0 R15: 00007ffd42bc7488
[  649.635790][T22701]  </TASK>
[  649.853639][T22559] usb 9-1: USB disconnect, device number 40
[  650.019433][T22719] loop1: detected capacity change from 0 to 16
[  650.040300][T22719] erofs (device loop1): unsupported datalayout 7 of nid 36
[  650.159387][T22717] loop8: detected capacity change from 0 to 32768
[  650.191739][T22717] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  650.211394][T22717] XFS (loop8): Ending clean mount
[  650.265844][T22717] XFS (loop8): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  650.304057][T14644] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  650.456175][T22737] netlink: 312 bytes leftover after parsing attributes in process `syz.9.6790'.
[  650.468653][T22737] netlink: 1 bytes leftover after parsing attributes in process `syz.9.6790'.
[  650.509118][T22733] loop1: detected capacity change from 0 to 32768
[  650.550858][T22733] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  650.625114][T22748] loop9: detected capacity change from 0 to 16
[  650.639574][T22733] XFS (loop1): Ending clean mount
[  650.649369][T22748] erofs (device loop9): unsupported datalayout 7 of nid 36
[  650.862755][T21353] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  650.920429][T22757] loop8: detected capacity change from 0 to 2048
[  650.923767][T22757] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  650.927065][T22757] NILFS (loop8): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  651.451654][T22773] loop1: detected capacity change from 0 to 1764
[  651.488283][T22773] iso9660: Corrupted directory entry in block 2 of inode 1920
[  651.660896][T22784] loop1: detected capacity change from 0 to 128
[  651.674477][T22784] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  651.679241][T22784] hpfs: filesystem error: improperly stopped
[  651.679564][T22784] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  651.679800][T22784] hpfs: You really don't want any checks? You are crazy...
[  651.679990][T22784] hpfs: Code page index out of array
[  651.680162][T22784] hpfs: code page support is disabled
[  651.680476][T22784] hpfs: hpfs_map_4sectors(): unaligned read
[  651.680780][T22784] hpfs: hpfs_map_4sectors(): unaligned read
[  651.680972][T22784] hpfs: filesystem error: unable to find root dir
[  651.784597][T18577] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  651.950055][T18577] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  651.955810][T18577] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.955864][T18577] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.955936][T18577] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.145381][T22805] loop1: detected capacity change from 0 to 256
[  652.311967][T22807] xt_hashlimit: size too large, truncated to 1048576
[  652.353205][T18610] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  652.573234][T18610] usb 10-1: Using ep0 maxpacket: 32
[  652.574234][T18610] usb 10-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  652.575700][T18610] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  652.575733][T18610] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  652.578766][T18610] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.578787][T18610] usb 10-1: Product: syz
[  652.578799][T18610] usb 10-1: Manufacturer: syz
[  652.578810][T18610] usb 10-1: SerialNumber: syz
[  654.566799][T18610] usb 9-1: USB disconnect, device number 41
[  655.130398][T18610] usb 10-1: USB disconnect, device number 28
[  655.194897][T22828] netlink: 'syz.9.6825': attribute type 7 has an invalid length.
[  655.197498][T22828] netlink: 'syz.9.6825': attribute type 5 has an invalid length.
[  655.200228][T22828] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6825'.
[  655.427052][T22846] loop9: detected capacity change from 0 to 256
[  655.431542][T22846] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d)
[  655.455056][   T34] audit: type=1800 audit(1790524129.849:387): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6834" name="file0" dev="loop9" ino=1048782 res=0 errno=0
[  655.473656][T22846] Invalid ELF header magic: != ELF
[  656.018313][T22858] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6839'.
[  656.563207][T18610] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  656.713286][T18610] usb 9-1: Using ep0 maxpacket: 16
[  656.716640][T18610] usb 9-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00
[  656.732843][T18610] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  656.732884][T18610] usb 9-1: Product: syz
[  656.732915][T18610] usb 9-1: SerialNumber: syz
[  657.323214][T18610] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  657.473181][T18610] usb 10-1: Using ep0 maxpacket: 16
[  657.476478][T18610] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  657.481588][T18610] usb 10-1: config 0 has an invalid interface number: 105 but max is 0
[  657.484970][T18610] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.489844][T18610] usb 10-1: config 0 has no interface number 0
[  657.494504][T18610] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.497686][T18610] usb 10-1: Product: syz
[  657.499893][T18610] usb 10-1: Manufacturer: syz
[  657.502036][T18610] usb 10-1: SerialNumber: syz
[  659.340736][T18610] usb 9-1: USB disconnect, device number 42
[  659.754414][T18610] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  659.903782][T18610] usb 9-1: Using ep0 maxpacket: 8
[  659.906238][T18610] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  659.910649][T18610] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  659.914035][T18610] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6
[  659.917765][T18610] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 255, changing to 11
[  659.921237][T18610] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59391, setting to 1024
[  659.926963][T18610] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.929755][T18610] usb 9-1: Product: syz
[  659.931603][T18610] usb 9-1: Manufacturer: syz
[  659.933476][T18610] usb 9-1: SerialNumber: syz
[  660.101049][ T2249] usb 10-1: USB disconnect, device number 29
[  660.302465][   T34] audit: type=1800 audit(1790524134.689:388): pid=22910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6865" name=08 dev="sda1" ino=1949 res=0 errno=0
[  660.532633][ T5479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.548083][ T5479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.716208][ T5479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.720961][ T5479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.837316][ T5479] bond0: (slave netdevsim1): Releasing backup interface
[  660.869958][ T5479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.874852][ T5479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.967277][ T5479] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.971789][ T5479] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.395660][ T5479] bridge_slave_1: left promiscuous mode
[  661.395845][ T5479] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.069856][ T5479] bond4 (unregistering): (slave gretap3): Releasing backup interface
[  662.084749][ T5479] batman_adv: batadv0: Removing interface: gretap0
[  662.247757][ T5479] 
[  662.248578][ T5479] ======================================================
[  662.250708][ T5479] WARNING: possible circular locking dependency detected
[  662.252861][ T5479] syzkaller #0 Tainted: G             L     
[  662.254900][ T5479] ------------------------------------------------------
[  662.257024][ T5479] kworker/u8:2/5479 is trying to acquire lock:
[  662.258865][ T5479] ffff88801fc2ce70 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: ipvlan_uninit+0x147/0x290
[  662.261756][ T5479] 
[  662.261756][ T5479] but task is already holding lock:
[  662.263908][ T5479] ffff8881bbb3c8c0 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_device_event+0x489/0xfb0
[  662.266737][ T5479] 
[  662.266737][ T5479] which lock already depends on the new lock.
[  662.266737][ T5479] 
[  662.269779][ T5479] 
[  662.269779][ T5479] the existing dependency chain (in reverse order) is:
[  662.272377][ T5479] 
[  662.272377][ T5479] -> #1 (&port->pnodes_lock){+.+.}-{4:4}:
[  662.274818][ T5479]        __mutex_lock+0x19d/0x1550
[  662.276333][ T5479]        ipvlan_device_event+0x489/0xfb0
[  662.277970][ T5479]        notifier_call_chain+0x1a5/0x3d0
[  662.279619][ T5479]        call_netdevice_notifiers+0x90/0xd0
[  662.281356][ T5479]        xdp_set_features_flag+0x1a0/0x2a0
[  662.283060][ T5479]        bond_xdp_set_features+0x277/0x320
[  662.284762][ T5479]        bond_enslave+0x2c78/0x3b10
[  662.286295][ T5479]        do_set_master+0x563/0x720
[  662.287790][ T5479]        do_setlink+0xe7b/0x4670
[  662.289262][ T5479]        rtnl_newlink+0x15a3/0x1c30
[  662.290812][ T5479]        rtnetlink_rcv_msg+0x802/0xc00
[  662.292387][ T5479]        netlink_rcv_skb+0x226/0x4a0
[  662.293993][ T5479]        netlink_unicast+0x7bd/0x940
[  662.295576][ T5479]        netlink_sendmsg+0x813/0xb40
[  662.297214][ T5479]        sock_sendmsg_nosec+0x13a/0x180
[  662.298981][ T5479]        ____sys_sendmsg+0x54e/0x850
[  662.300829][ T5479]        ___sys_sendmsg+0x2a5/0x360
[  662.302612][ T5479]        __x64_sys_sendmsg+0x1b1/0x290
[  662.304606][ T5479]        do_syscall_64+0x166/0x520
[  662.306599][ T5479]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.308743][ T5479] 
[  662.308743][ T5479] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}:
[  662.311554][ T5479]        __lock_acquire+0x1520/0x2cf0
[  662.313233][ T5479]        lock_acquire+0x106/0x350
[  662.314864][ T5479]        __mutex_lock+0x19d/0x1550
[  662.316780][ T5479]        ipvlan_uninit+0x147/0x290
[  662.318563][ T5479]        unregister_netdevice_many_notify+0x1acd/0x2140
[  662.321254][ T5479]        ipvlan_device_event+0xf1f/0xfb0
[  662.323421][ T5479]        notifier_call_chain+0x1a5/0x3d0
[  662.325667][ T5479]        unregister_netdevice_many_notify+0x17f9/0x2140
[  662.328310][ T5479]        ops_undo_list+0x391/0x8d0
[  662.330298][ T5479]        cleanup_net+0x572/0x810
[  662.332274][ T5479]        process_scheduled_works+0xc3d/0x1630
[  662.334614][ T5479]        worker_thread+0xa47/0xfb0
[  662.336593][ T5479]        kthread+0x38b/0x480
[  662.338379][ T5479]        ret_from_fork+0x514/0xb70
[  662.340361][ T5479]        ret_from_fork_asm+0x1a/0x30
[  662.342403][ T5479] 
[  662.342403][ T5479] other info that might help us debug this:
[  662.342403][ T5479] 
[  662.346298][ T5479]  Possible unsafe locking scenario:
[  662.346298][ T5479] 
[  662.349282][ T5479]        CPU0                    CPU1
[  662.351362][ T5479]        ----                    ----
[  662.353461][ T5479]   lock(&port->pnodes_lock);
[  662.355374][ T5479]                                lock(&dev_instance_lock_key#2);
[  662.358417][ T5479]                                lock(&port->pnodes_lock);
[  662.361212][ T5479]   lock(&dev_instance_lock_key#2);
[  662.363251][ T5479] 
[  662.363251][ T5479]  *** DEADLOCK ***
[  662.363251][ T5479] 
[  662.366317][ T5479] locks held by kworker/u8:2/5479: 5, last CPU#1:
[  662.368850][ T5479]  #0: ffff8881012d5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  662.373031][ T5479]  #1: ffffc9000433fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  662.377136][ T5479]  #2: ffffffff9023e468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  662.380756][ T5479]  #3: ffffffff9024ccc0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0
[  662.384309][ T5479]  #4: ffff8881bbb3c8c0 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_device_event+0x489/0xfb0
[  662.388289][ T5479] 
[  662.388289][ T5479] stack backtrace:
[  662.390600][ T5479] CPU: 1 UID: 0 PID: 5479 Comm: kworker/u8:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  662.394749][ T5479] Tainted: [L]=SOFTLOCKUP
[  662.396417][ T5479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  662.400294][ T5479] Workqueue: netns cleanup_net
[  662.402232][ T5479] Call Trace:
[  662.403599][ T5479]  <TASK>
[  662.404724][ T5479]  dump_stack_lvl+0xe8/0x150
[  662.406467][ T5479]  print_circular_bug+0x2e1/0x300
[  662.408337][ T5479]  check_noncircular+0x12e/0x150
[  662.410264][ T5479]  __lock_acquire+0x1520/0x2cf0
[  662.412101][ T5479]  ? ret_from_fork_asm+0x1a/0x30
[  662.414026][ T5479]  ? unwind_next_frame+0x8f/0x2550
[  662.415955][ T5479]  ? ipvlan_uninit+0x147/0x290
[  662.418042][ T5479]  lock_acquire+0x106/0x350
[  662.419820][ T5479]  ? ipvlan_uninit+0x147/0x290
[  662.421676][ T5479]  __mutex_lock+0x19d/0x1550
[  662.423559][ T5479]  ? ipvlan_uninit+0x147/0x290
[  662.425562][ T5479]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  662.427767][ T5479]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  662.429937][ T5479]  ? ref_tracker_alloc+0x2d7/0x4b0
[  662.431840][ T5479]  ? ipvlan_uninit+0x147/0x290
[  662.433664][ T5479]  ? __pfx___mutex_lock+0x10/0x10
[  662.435645][ T5479]  ? notifier_call_chain+0x1a5/0x3d0
[  662.437702][ T5479]  ? cleanup_net+0x572/0x810
[  662.439487][ T5479]  ? process_scheduled_works+0xc3d/0x1630
[  662.441850][ T5479]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  662.444261][ T5479]  ipvlan_uninit+0x147/0x290
[  662.446044][ T5479]  ? __pfx_ipvlan_uninit+0x10/0x10
[  662.448068][ T5479]  ? notifier_call_chain+0x3aa/0x3d0
[  662.450068][ T5479]  ? __pfx_ipvlan_uninit+0x10/0x10
[  662.451971][ T5479]  unregister_netdevice_many_notify+0x1acd/0x2140
[  662.454357][ T5479]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  662.456880][ T5479]  ? netdev_upper_dev_unlink+0x99/0xe0
[  662.458929][ T5479]  ? __pfx_netdev_upper_dev_unlink+0x10/0x10
[  662.461276][ T5479]  ? __ipvlan_link_delete+0x2eb/0x350
[  662.463303][ T5479]  ipvlan_device_event+0xf1f/0xfb0
[  662.465233][ T5479]  ? __pfx_bond_netdev_event+0x10/0x10
[  662.467294][ T5479]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  662.469699][ T5479]  ? __pfx_ipvlan_device_event+0x10/0x10
[  662.471853][ T5479]  ? __local_bh_enable_ip+0xd6/0x140
[  662.473927][ T5479]  notifier_call_chain+0x1a5/0x3d0
[  662.475994][ T5479]  unregister_netdevice_many_notify+0x17f9/0x2140
[  662.478508][ T5479]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  662.481470][ T5479]  ? nexthop_net_exit_rtnl+0x25f/0x2a0
[  662.483692][ T5479]  ops_undo_list+0x391/0x8d0
[  662.485593][ T5479]  ? __pfx_ops_undo_list+0x10/0x10
[  662.487760][ T5479]  ? idr_destroy+0x227/0x290
[  662.489600][ T5479]  cleanup_net+0x572/0x810
[  662.491602][ T5479]  ? __pfx_cleanup_net+0x10/0x10
[  662.493660][ T5479]  ? rcu_is_watching+0x16/0xb0
[  662.495519][ T5479]  ? process_scheduled_works+0x97a/0x1630
[  662.497818][ T5479]  process_scheduled_works+0xc3d/0x1630
[  662.500198][ T5479]  ? __pfx_process_scheduled_works+0x10/0x10
[  662.502553][ T5479]  ? assign_work+0x3cf/0x5d0
[  662.504343][ T5479]  worker_thread+0xa47/0xfb0
[  662.506291][ T5479]  ? __kthread_parkme+0x71/0x1f0
[  662.508211][ T5479]  kthread+0x38b/0x480
[  662.509555][ T5479]  ? __pfx_worker_thread+0x10/0x10
[  662.511259][ T5479]  ? __pfx_kthread+0x10/0x10
[  662.512848][ T5479]  ret_from_fork+0x514/0xb70
[  662.514456][ T5479]  ? __pfx_ret_from_fork+0x10/0x10
[  662.516304][ T5479]  ? __switch_to+0xc89/0x1420
[  662.517986][ T5479]  ? __pfx_kthread+0x10/0x10
[  662.519502][ T5479]  ret_from_fork_asm+0x1a/0x30
[  662.521117][ T5479]  </TASK>
[  662.529907][ T5479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  662.534222][ T5479] bond0 (unregistering): Released all slaves
[  662.536110][ T5479] bond1 (unregistering): Released all slaves
[  662.538997][ T5479] bond2 (unregistering): Released all slaves
[  662.541904][ T5479] bond3 (unregistering): Released all slaves
[  662.545278][ T5479] bond4 (unregistering): Released all slaves
[  662.548283][ T5479] bond5 (unregistering): Released all slaves
[  662.552327][ T5336] 8021q: adding VLAN 0 to HW filter on device eth1
[  662.557194][T22557] usb 9-1: USB disconnect, device number 43
[  662.575414][T22931] syz_tun: entered allmulticast mode
[  662.598926][T22929] syz_tun: left allmulticast mode
[  662.738762][ T5336] 8021q: adding VLAN 0 to HW filter on device eth2
[  662.835988][ T5336] 8021q: adding VLAN 0 to HW filter on device eth3
[  662.942531][ T5336] 8021q: adding VLAN 0 to HW filter on device eth4
[  663.625105][ T5479] tipc: Disabling bearer <udp:syz0>
[  663.625264][ T5479] tipc: Left network mode
[  663.840012][   T29] smbdirect: ib_dev[syz0] removed
[  663.908970][ T5479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  663.910851][ T5479] batman_adv: batadv0: Removing interface: batadv_slave_0
[  663.917117][ T5479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  663.917178][ T5479] batman_adv: batadv0: Removing interface: batadv_slave_1
[  663.934147][ T5479] veth1_vlan: left promiscuous mode
[  663.934279][ T5479] veth0_vlan: left promiscuous mode
[  664.087853][ T5479] team0 (unregistering): Port device team_slave_1 removed
[  664.091962][ T5479] team0 (unregistering): Port device team_slave_0 removed
[  664.168485][ T5479] team0 (unregistering): Port device dummy0 removed
[  664.540352][ T5479] IPVS: stop unused estimator thread 0...
