last executing test programs:

7m17.34434254s ago: executing program 32 (id=181):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, 0x0)

6m30.441179332s ago: executing program 33 (id=884):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0, 0x0)
capset(&(0x7f00000000c0)={0x20080522}, &(0x7f00000001c0)={0x0, 0x8d1, 0x403, 0x5, 0xf, 0x5})
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0xc)

6m23.753779909s ago: executing program 34 (id=962):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
read$FUSE(r0, &(0x7f0000002e00)={0x2020}, 0x2020)

5m36.162757449s ago: executing program 35 (id=1562):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
io_setup(0x200, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x26, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000040)="1d", 0x1, 0x604000000000000}])

5m29.346613805s ago: executing program 5 (id=1633):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9)

5m29.174200263s ago: executing program 5 (id=1634):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})

5m29.041802767s ago: executing program 5 (id=1635):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4)

5m28.974610226s ago: executing program 5 (id=1636):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5m28.871823033s ago: executing program 5 (id=1637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x33)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
lseek(r0, 0x8, 0x3)

5m28.646076637s ago: executing program 5 (id=1638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x8ed9, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x400, 0x408}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)

5m28.577224369s ago: executing program 36 (id=1638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x8ed9, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x400, 0x408}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)

5m18.46309712s ago: executing program 6 (id=1717):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)

5m18.409195966s ago: executing program 6 (id=1718):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
write$char_usb(r0, &(0x7f0000000400)="09528ea55c3f22994fa8c0e26b", 0xd)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$char_usb(r0, &(0x7f0000000600)="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", 0x253)
write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40)

5m18.335167265s ago: executing program 6 (id=1721):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m18.184453075s ago: executing program 6 (id=1729):
syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000580)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x2}}, {}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@namecase}, {}, {@dmask={'dmask', 0x3d, 0x3}}, {@discard}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)

5m18.065037989s ago: executing program 6 (id=1731):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2})

5m17.800322263s ago: executing program 6 (id=1738):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000076d, &(0x7f00000001c0)={0x2, 0xfeff, @broadcast}, 0x10)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0)

5m17.674430141s ago: executing program 37 (id=1738):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000076d, &(0x7f00000001c0)={0x2, 0xfeff, @broadcast}, 0x10)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0)

5m0.2065727s ago: executing program 7 (id=1905):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000000800))

5m0.2062462s ago: executing program 7 (id=1906):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0xc0189436, &(0x7f00000002c0)={{0x2, 0x4e23, @rand_addr=0x64010100}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x7e, {0x2, 0x4e22, @rand_addr=0x64010102}, 'batadv_slave_1\x00'})

5m0.110648671s ago: executing program 7 (id=1907):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2d4, &(0x7f0000000600)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0, 0x160)
r2 = socket$netlink(0x10, 0x3, 0x4)
open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r', @ANYRES64=r0, @ANYRES32=r2], 0x100)

5m0.052096961s ago: executing program 7 (id=1908):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

4m59.961555663s ago: executing program 7 (id=1909):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c)

4m59.70396156s ago: executing program 7 (id=1910):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, 0x0, 0x20000003)

4m59.548709407s ago: executing program 38 (id=1910):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, 0x0, 0x20000003)

4m18.403217587s ago: executing program 9 (id=2387):
r0 = io_uring_setup(0x52e9, &(0x7f00000003c0)={0x0, 0x8de2, 0x0, 0x20000002, 0x1ce})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2000000, 0x0)

4m18.329894121s ago: executing program 9 (id=2388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r1, 0x1, 0x4070bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048804}, 0x20000018)

4m18.244446385s ago: executing program 9 (id=2389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000006800010428bd7000000000000200000000000000080001000000000004000b00060007"], 0x2c}}, 0x0)

4m18.244277557s ago: executing program 9 (id=2390):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000080)=""/234, 0xea)

4m18.164696022s ago: executing program 9 (id=2391):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r0, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0)

4m17.816033544s ago: executing program 9 (id=2393):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0)

4m17.670491445s ago: executing program 39 (id=2393):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0)

3m58.712676293s ago: executing program 2 (id=2613):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3m58.712347936s ago: executing program 2 (id=2614):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000e7000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m58.603690717s ago: executing program 2 (id=2615):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}, {}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x331b5b44}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000480), 0x3ff, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000140), 0x7, r0}, 0x38)

3m58.442907579s ago: executing program 2 (id=2619):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0)
pwrite64(r0, &(0x7f0000000e80)="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", 0x14c, 0x6)

3m58.232904382s ago: executing program 2 (id=2624):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05033900d3fcba2e0000478886dd", 0x50, 0x4, &(0x7f0000000000)={0x11, 0x86dd, r1, 0x1, 0x10, 0x6, @multicast}, 0x14)

3m57.762192858s ago: executing program 2 (id=2627):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000830000000000000020000000850000002700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000ac95db74841b", 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m57.369787719s ago: executing program 40 (id=2627):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000830000000000000020000000850000002700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000ac95db74841b", 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m9.041610112s ago: executing program 8 (id=3258):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

3m8.870689104s ago: executing program 8 (id=3261):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000940)={0x20, 0x2, 0x0, 0x8, 0x80000000})

3m8.804801878s ago: executing program 8 (id=3263):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket(0x11, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3m8.65722192s ago: executing program 8 (id=3265):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@shortname_mixed}, {@utf8}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlate}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

3m8.345437888s ago: executing program 8 (id=3269):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000190001000000002c54adf0001c140000fe00000100000000140012000a"], 0x30}}, 0x0)

3m8.002509196s ago: executing program 8 (id=3276):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000b000000080000000200000604000000050000009000000002000000ff07000000005f6102d32e2e5f30"], &(0x7f0000000580)=""/249, 0x3f, 0xf9, 0x1}, 0x28)

3m7.956398985s ago: executing program 41 (id=3276):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000b000000080000000200000604000000050000009000000002000000ff07000000005f6102d32e2e5f30"], &(0x7f0000000580)=""/249, 0x3f, 0xf9, 0x1}, 0x28)

2m31.88949583s ago: executing program 0 (id=3720):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f0000000200)=@raw=[@generic={0x7, 0x1, 0x0, 0x0, 0xc}, @generic={0x85, 0x0, 0x0, 0x0, 0x4}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m31.813403257s ago: executing program 0 (id=3721):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
r1 = fanotify_init(0x10, 0x800)
splice(r1, &(0x7f0000000040)=0x10, r0, 0x0, 0x807, 0x0)

2m31.38841651s ago: executing program 0 (id=3726):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)="3030303030303030302030203020ba9542ea50a01665674db5503ca02dd0067cae5e35d91a03a40485727ba156928efcf7aa5b873dfa5bc972708c143c24a391", 0x40)

2m31.143268577s ago: executing program 0 (id=3728):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000030889fffe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

2m30.28895554s ago: executing program 0 (id=3733):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x4080044)
ptrace(0x10, r1)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setsig(0x4203, r1, 0x5, &(0x7f00000000c0)={0x19, 0x40, 0x7})

2m30.069868543s ago: executing program 0 (id=3737):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0)

2m13.888171374s ago: executing program 42 (id=3737):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0)

3.407402459s ago: executing program 3 (id=5407):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x4, 0x2, 0x8, 0x80000001, 0x7, "ea710e00000000f91500ff000200", 0x0, 0xfefeffff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001280)=0xff)

3.309189752s ago: executing program 3 (id=5409):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6)
splice(r0, 0x0, r0, &(0x7f0000000240)=0x87ffffd, 0x2000000, 0x0)

3.214173545s ago: executing program 3 (id=5411):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file0\x00', 0x18880, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4472, &(0x7f000000aa80)="$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")

2.904810369s ago: executing program 3 (id=5412):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0)

2.798316193s ago: executing program 3 (id=5414):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x2, 0x3, 0x4, 0x600, 0x1}, 0x20)

2.732478069s ago: executing program 3 (id=5416):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x2)

500.321041ms ago: executing program 4 (id=5433):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

500.063681ms ago: executing program 1 (id=5434):
syz_emit_ethernet(0x106, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @private=0xa010101, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0)

416.090605ms ago: executing program 4 (id=5435):
r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x4000, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x2, 0x4, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x80, 0x1, 0xfffffff8, 0xd}})

415.95088ms ago: executing program 1 (id=5436):
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
sigaltstack(&(0x7f00000002c0)={0x0, 0x80000006}, 0x0)

307.379114ms ago: executing program 1 (id=5437):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940100, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0xa, 0x1, 0x1}, 0x20)

234.493461ms ago: executing program 1 (id=5438):
r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa)
close(r0)
r1 = timerfd_create(0x9, 0x80000)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
timerfd_settime(r1, 0x1, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, 0x0)

234.004484ms ago: executing program 4 (id=5439):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)

145.559653ms ago: executing program 4 (id=5440):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6000)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2d9})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

145.264674ms ago: executing program 4 (id=5441):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)="653a6d795f67bfca2f5b522a6031206d", 0x10)

64.627189ms ago: executing program 1 (id=5442):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c40c4, &(0x7f0000000080)={0xa, 0x5c20, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

137.444µs ago: executing program 4 (id=5443):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r1 = shmat(r0, &(0x7f0000d62000/0x4000)=nil, 0xa000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
shmdt(r1)

0s ago: executing program 1 (id=5444):
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x40)
r1 = socket(0x10, 0x803, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000004c0)={0x80000004})
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="20000000100001"], 0x20}, 0x1, 0x0, 0x0, 0x815}, 0x800)

kernel console output (not intermixed with test programs):

] loop3: detected capacity change from 0 to 256
[  412.736812][T17128] loop1: detected capacity change from 0 to 128
[  412.741292][T17128] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  412.741701][T17128] hpfs: filesystem error: improperly stopped
[  412.741714][T17128] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  412.741724][T17128] hpfs: You really don't want any checks? You are crazy...
[  412.741732][T17128] hpfs: Code page index out of array
[  412.741737][T17128] hpfs: code page support is disabled
[  412.748004][T17128] hpfs: hpfs_map_4sectors(): unaligned read
[  412.748065][T17128] hpfs: hpfs_map_4sectors(): unaligned read
[  412.748072][T17128] hpfs: filesystem error: unable to find root dir
[  412.781501][T14669] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  412.942363][T14669] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  412.943384][T14669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  412.943398][T14669] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  412.943415][T14669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.944611][T14669] usb 4-1: config 0 descriptor??
[  412.947173][T17118] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  413.090807][T14223] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  413.164897][T14669] usbhid 4-1:0.0: can't add hid device: -71
[  413.164989][T14669] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  413.169360][T14669] usb 4-1: USB disconnect, device number 21
[  413.197769][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  413.275648][T14223] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  413.276867][T14223] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  413.276886][T14223] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  413.276901][T14223] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  413.276917][T14223] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64
[  413.276931][T14223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  413.279336][T14223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.279353][T14223] usb 2-1: Product: syz
[  413.279362][T14223] usb 2-1: Manufacturer: syz
[  413.279371][T14223] usb 2-1: SerialNumber: syz
[  413.288516][T17130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  413.288691][T17130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  413.288844][T17130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  413.288914][T17130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  413.294515][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  413.294634][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  413.298665][T14223] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected
[  413.299219][T14223] keyspan 2-1:1.0: unsupported endpoint type 0
[  413.309633][T14223] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  413.319417][T14223] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  413.343969][T14223] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  413.364228][T14223] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  413.746115][T10900] usb 2-1: USB disconnect, device number 30
[  413.769245][T10900] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  413.779697][T10900] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  413.807327][T10900] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  413.811889][T10900] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  413.817082][T10900] keyspan 2-1:1.0: device disconnected
[  414.244602][   T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  414.371614][T17140] loop1: detected capacity change from 0 to 1024
[  414.376944][T17140] EXT4-fs: Ignoring removed bh option
[  414.392387][T17140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.415693][T17140] FAULT_INJECTION: forcing a failure.
[  414.415693][T17140] name failslab, interval 1, probability 0, space 0, times 0
[  414.415761][T17140] CPU: 1 UID: 0 PID: 17140 Comm: syz.1.4277 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.415780][T17140] Tainted: [L]=SOFTLOCKUP
[  414.415786][T17140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  414.415795][T17140] Call Trace:
[  414.415801][T17140]  <TASK>
[  414.415807][T17140]  dump_stack_lvl+0xe8/0x150
[  414.415830][T17140]  should_fail_ex+0x410/0x560
[  414.415851][T17140]  should_failslab+0xa8/0x100
[  414.415867][T17140]  ? __ext4_journal_start_sb+0x2bf/0x780
[  414.415884][T17140]  kmem_cache_alloc_noprof+0xa1/0x600
[  414.415904][T17140]  ? __ext4_journal_start_sb+0x2bf/0x780
[  414.415926][T17140]  __ext4_journal_start_sb+0x2bf/0x780
[  414.415946][T17140]  ext4_convert_inline_data_to_extent+0x314/0xde0
[  414.415976][T17140]  ? __pfx_ext4_convert_inline_data_to_extent+0x10/0x10
[  414.415997][T17140]  ? ext4_inode_journal_mode+0x18d/0x470
[  414.416011][T17140]  ? ext4_chunk_trans_extent+0x201/0x2a0
[  414.416040][T17140]  ? ext4_try_to_write_inline_data+0x49/0x90
[  414.416060][T17140]  ext4_write_begin+0x3bd/0x1900
[  414.416079][T17140]  ? kasan_save_track+0x4f/0x80
[  414.416093][T17140]  ? __ext4_journal_stop+0x20f/0x330
[  414.416106][T17140]  ? __mark_inode_dirty+0x3a8/0x13b0
[  414.416118][T17140]  ? file_update_time_flags+0x399/0x440
[  414.416134][T17140]  ? ext4_write_checks+0x9f/0x220
[  414.416146][T17140]  ? ext4_buffered_write_iter+0xb0/0x380
[  414.416159][T17140]  ? vfs_write+0x612/0xba0
[  414.416174][T17140]  ? __x64_sys_pwrite64+0x196/0x220
[  414.416189][T17140]  ? do_syscall_64+0x166/0x520
[  414.416202][T17140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.416218][T17140]  ? __lock_acquire+0x683/0x2cf0
[  414.416234][T17140]  ? __pfx_ext4_write_begin+0x10/0x10
[  414.416251][T17140]  ? __lock_acquire+0x683/0x2cf0
[  414.416268][T17140]  ext4_da_write_begin+0x46a/0xd70
[  414.416296][T17140]  ? __pfx_ext4_da_write_begin+0x10/0x10
[  414.416312][T17140]  ? reacquire_held_locks+0x104/0x190
[  414.416328][T17140]  ? balance_dirty_pages_ratelimited_flags+0x8e4/0xd20
[  414.416351][T17140]  generic_perform_write+0x2d5/0x8f0
[  414.416368][T17140]  ? do_raw_spin_unlock+0x4d/0x200
[  414.416392][T17140]  ? __pfx_generic_perform_write+0x10/0x10
[  414.416408][T17140]  ? file_update_time_flags+0x3ab/0x440
[  414.416434][T17140]  ext4_buffered_write_iter+0xd4/0x380
[  414.416446][T17140]  ? __pfx_futex_wake_mark+0x10/0x10
[  414.416467][T17140]  ext4_file_write_iter+0xae4/0x1cd0
[  414.416487][T17140]  ? vfs_write+0x22b/0xba0
[  414.416504][T17140]  ? vfs_write+0x22b/0xba0
[  414.416520][T17140]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  414.416543][T17140]  vfs_write+0x612/0xba0
[  414.416597][T17140]  ? __pfx_vfs_write+0x10/0x10
[  414.416622][T17140]  ? __fget_files+0x2a/0x420
[  414.416650][T17140]  __x64_sys_pwrite64+0x196/0x220
[  414.416671][T17140]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  414.416718][T17140]  do_syscall_64+0x166/0x520
[  414.416732][T17140]  ? trace_irq_disable+0x3b/0x140
[  414.416745][T17140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.416763][T17140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.416776][T17140] RIP: 0033:0x7f2d4bb9e159
[  414.416790][T17140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.416802][T17140] RSP: 002b:00007f2d4ca02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  414.416817][T17140] RAX: ffffffffffffffda RBX: 00007f2d4be25fa0 RCX: 00007f2d4bb9e159
[  414.416827][T17140] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[  414.416835][T17140] RBP: 00007f2d4bc3506b R08: 0000000000000000 R09: 0000000000000000
[  414.416843][T17140] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[  414.416851][T17140] R13: 00007f2d4be26038 R14: 00007f2d4be25fa0 R15: 00007ffd05549958
[  414.416872][T17140]  </TASK>
[  414.437072][   T25] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  414.438229][   T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  414.438277][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.438293][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.438306][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  414.438331][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.442509][   T25] usb 4-1: config 0 descriptor??
[  414.678000][T14452] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /296/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  414.679475][T14452] EXT4-fs (loop1): Remounting filesystem read-only
[  414.691424][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.808346][T17149] loop1: detected capacity change from 0 to 1024
[  414.926399][   T25] holtek_kbd 0003:04D9:A055.000C: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0
[  415.117759][   T25] usb 4-1: USB disconnect, device number 22
[  415.430077][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  415.515183][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  415.515619][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  416.312627][T17180] Trying to write to read-only block-device nullb0
[  416.344273][   T34] kauditd_printk_skb: 20 callbacks suppressed
[  416.344356][   T34] audit: type=1326 audit(1789785119.899:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.344823][   T34] audit: type=1326 audit(1789785119.899:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.346713][   T34] audit: type=1326 audit(1789785119.899:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.346748][   T34] audit: type=1326 audit(1789785119.899:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.347073][   T34] audit: type=1326 audit(1789785119.899:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.347103][   T34] audit: type=1326 audit(1789785119.899:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.347129][   T34] audit: type=1326 audit(1789785119.899:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.382760][   T34] audit: type=1326 audit(1789785119.946:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.382798][   T34] audit: type=1326 audit(1789785119.946:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.384509][   T34] audit: type=1326 audit(1789785119.946:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.3.4294" exe="/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb04579e159 code=0x7ffc0000
[  416.413944][T17184] netlink: 'syz.1.4296': attribute type 21 has an invalid length.
[  416.414013][T17184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4296'.
[  416.414046][T17184] netlink: 'syz.1.4296': attribute type 1 has an invalid length.
[  417.496581][T17198] loop1: detected capacity change from 0 to 2048
[  417.514142][T17198] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  417.522211][T17198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  417.670482][T17202] loop1: detected capacity change from 0 to 128
[  417.672484][T17202] FAT-fs (loop1): Directory bread(block 1048) failed
[  417.672497][T17202] FAT-fs (loop1): Directory bread(block 1049) failed
[  417.672506][T17202] FAT-fs (loop1): Directory bread(block 1050) failed
[  417.672543][T17202] FAT-fs (loop1): Directory bread(block 1051) failed
[  417.672554][T17202] FAT-fs (loop1): Directory bread(block 1052) failed
[  417.672562][T17202] FAT-fs (loop1): Directory bread(block 1053) failed
[  417.672570][T17202] FAT-fs (loop1): Directory bread(block 1054) failed
[  417.672578][T17202] FAT-fs (loop1): Directory bread(block 1055) failed
[  417.737488][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  417.737585][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  419.023792][T17228] netlink: 'syz.1.4316': attribute type 18 has an invalid length.
[  419.720043][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4323'.
[  419.744162][T17244] openvswitch: netlink: IP tunnel dst address not specified
[  420.660275][T17266] loop3: detected capacity change from 0 to 131072
[  420.661154][T17266] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  420.661197][T17266] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  420.661569][T17266] F2FS-fs (loop3): invalid crc value
[  420.705363][T17266] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  420.711593][T17266] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  420.711640][T17266] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  420.726257][T17266] F2FS-fs (loop3): inaccessible inode: 1, run fsck to repair
[  420.771588][   T55] Bluetooth: hci2: unexpected event for opcode 0x2035
[  421.200783][   T55] Bluetooth: hci0: unexpected event for opcode 0x0428
[  422.274591][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4342'.
[  422.274651][T17338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4342'.
[  422.777261][ T6314] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  422.939002][ T6314] usb 2-1: Using ep0 maxpacket: 32
[  422.942895][ T6314] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  422.948370][ T6314] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  422.948421][ T6314] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  422.948508][ T6314] usb 2-1: config 0 interface 0 has no altsetting 0
[  422.961913][ T6314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.961960][ T6314] usb 2-1: Product: syz
[  422.961999][ T6314] usb 2-1: Manufacturer: syz
[  422.962033][ T6314] usb 2-1: SerialNumber: syz
[  422.983253][ T6314] usb 2-1: config 0 descriptor??
[  423.430550][ T6314] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  423.654204][ T6314] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  423.658020][ T6314] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  423.677066][ T6314] usb 2-1: USB disconnect, device number 31
[  424.839349][T17367] evm: overlay not supported
[  425.176880][T17379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4359'.
[  425.199458][T17377] loop3: detected capacity change from 0 to 4096
[  425.205901][T17377] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  425.381730][T17377] ntfs3(loop3): $Secure::$SDH is corrupted.
[  425.382987][T17377] ntfs3(loop3): Failed to initialize $Secure (-22).
[  426.019768][T17404] vxcan1: tx drop: invalid da for name 0xffffffffffffffff
[  426.135094][T17408] loop3: detected capacity change from 0 to 2048
[  426.145265][T17408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  426.169690][T17408] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.4373: bg 0: block 240: padding at end of block bitmap is not set
[  426.192826][T17408] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  426.197750][T17408] EXT4-fs (loop3): This should not happen!! Data will be lost
[  426.197750][T17408] 
[  426.201621][T17408] EXT4-fs (loop3): Total free blocks count 0
[  426.203700][T17408] EXT4-fs (loop3): Free/Dirty block details
[  426.205798][T17408] EXT4-fs (loop3): free_blocks=0
[  426.207800][T17408] EXT4-fs (loop3): dirty_blocks=16
[  426.209817][T17408] EXT4-fs (loop3): Block reservation details
[  426.212096][T17408] EXT4-fs (loop3): i_reserved_data_blocks=1
[  426.258241][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  426.309124][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4377'.
[  426.309187][T17420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4377'.
[  426.309230][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4377'.
[  426.744651][T17434] loop3: detected capacity change from 0 to 1024
[  426.749459][T17434] EXT4-fs: Ignoring removed i_version option
[  426.755036][T17434] EXT4-fs: Ignoring removed nobh option
[  426.755218][T17434] journal_path: Lookup failure for './file1'
[  426.755259][T17434] EXT4-fs: error: could not find journal device path
[  427.064811][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4389'.
[  427.130327][T17449] loop1: detected capacity change from 0 to 128
[  427.133463][T17450] netlink: 'syz.3.4391': attribute type 1 has an invalid length.
[  427.281969][   T34] kauditd_printk_skb: 160 callbacks suppressed
[  427.282053][   T34] audit: type=1326 audit(1789785130.143:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.282108][   T34] audit: type=1326 audit(1789785130.143:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.285640][   T34] audit: type=1326 audit(1789785130.143:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.285675][   T34] audit: type=1326 audit(1789785130.143:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.285702][   T34] audit: type=1326 audit(1789785130.143:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.285729][   T34] audit: type=1326 audit(1789785130.152:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.285756][   T34] audit: type=1326 audit(1789785130.152:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.298099][   T34] audit: type=1326 audit(1789785130.161:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.298137][   T34] audit: type=1326 audit(1789785130.161:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.298164][   T34] audit: type=1326 audit(1789785130.161:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17448 comm="syz.1.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  427.577450][T17463] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  427.877448][T17471] loop1: detected capacity change from 0 to 4096
[  427.882781][T17471] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  427.912306][T17471] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  427.916048][T17471] ntfs3(loop1): Failed to load $Extend (-22).
[  427.919727][T17471] ntfs3(loop1): Failed to initialize $Extend.
[  428.001327][T14223] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  428.163849][T14223] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00
[  428.168803][T14223] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.168878][T14223] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  428.168924][T14223] usb 4-1: config 0 interface 0 has no altsetting 0
[  428.168949][T14223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.175771][T14223] usb 4-1: config 0 descriptor??
[  428.405928][T14669] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  428.593356][T14669] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[  428.595153][T14669] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  428.602254][T14669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.602422][T14669] usb 2-1: Product: syz
[  428.602483][T14669] usb 2-1: Manufacturer: syz
[  428.602560][T14669] usb 2-1: SerialNumber: syz
[  428.623299][T14669] kalmia 2-1:1.0: probe with driver kalmia failed with error -22
[  428.635167][T14223] hid_parser_main: 2 callbacks suppressed
[  428.637737][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637805][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637820][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637834][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637850][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637865][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637879][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637894][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637911][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.637932][T14223] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0
[  428.643443][T14223] cmedia_hs100b 0003:0D8C:0014.000D: hidraw0: USB HID v0.01 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0
[  428.845781][T10898] usb 2-1: USB disconnect, device number 32
[  428.846787][T14223] usb 4-1: USB disconnect, device number 23
[  429.062511][T17507] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  429.168306][T17511] loop4: detected capacity change from 0 to 4096
[  429.172630][T17511] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  429.202531][T17511] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  429.224944][T17511] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  429.341497][T17515] loop4: detected capacity change from 0 to 512
[  429.347754][T17515] EXT4-fs (loop4): invalid inodes per group: 16777248
[  429.598248][T17525] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  429.927888][T17528] loop1: detected capacity change from 0 to 32768
[  429.937282][T17528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4427 (17528)
[  429.999099][T17528] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  429.999170][T17528] BTRFS info (device loop1): using sha256 checksum algorithm
[  430.181516][T17528] BTRFS info (device loop1): enabling ssd optimizations
[  430.184129][T17528] BTRFS info (device loop1): using spread ssd allocation scheme
[  430.186744][T17528] BTRFS info (device loop1): turning on async discard
[  430.189424][T17528] BTRFS info (device loop1): enabling free space tree
[  430.193829][T17528] BTRFS info (device loop1): max_inline set to 0
[  430.267972][T14452] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  430.373122][T17564] vivid-006: disconnect
[  430.375656][T17563] vivid-006: reconnect
[  431.107850][T17594] loop3: detected capacity change from 0 to 4096
[  431.108322][T17594] EXT4-fs: Ignoring removed nobh option
[  431.108431][T17594] EXT4-fs: Ignoring removed bh option
[  431.135557][T17594] EXT4-fs (loop3): Test dummy encryption mode enabled
[  431.196346][T17594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.203844][T17605] loop4: detected capacity change from 0 to 256
[  431.229480][T17602] loop1: detected capacity change from 0 to 4096
[  431.240460][T17602] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  431.295078][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.300461][T17602] ntfs3(loop1): ino=0, attr_set_size_ex
[  431.469151][T17612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  431.864114][T17633] set_capacity_and_notify: 1 callbacks suppressed
[  431.865972][T14670] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  431.870576][T17633] loop4: detected capacity change from 0 to 2048
[  431.883530][T17633] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  431.886446][T17633] UDF-fs: Scanning with blocksize 512 failed
[  431.906994][T17633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.051075][T14670] usb 2-1: unable to get BOS descriptor or descriptor too short
[  432.051876][T14670] usb 2-1: not running at top speed; connect to a high speed hub
[  432.051899][T14670] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  432.053508][T14670] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 4
[  432.053528][T14670] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1552, setting to 1023
[  432.056532][T14670] usb 2-1: string descriptor 0 read error: -22
[  432.056586][T14670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.061387][T14670] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  432.281391][T14670] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  432.367210][T14670] usb 2-1: USB disconnect, device number 33
[  432.628939][   T34] kauditd_printk_skb: 19 callbacks suppressed
[  432.629020][   T34] audit: type=1800 audit(1789785135.152:1080): pid=17653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4477" name="memory_backed" dev="configfs" ino=55805 res=0 errno=0
[  432.743207][T17658] loop3: detected capacity change from 0 to 1024
[  432.744734][T17657] loop4: detected capacity change from 0 to 512
[  432.746965][T17657] EXT4-fs: Ignoring removed nomblk_io_submit option
[  432.748931][T17657] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  432.787779][T17658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  432.787866][T17658] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.826017][T17657] EXT4-fs (loop4): 1 truncate cleaned up
[  432.838517][T17657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.018444][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  433.167743][ T7845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.362701][T14670] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  433.460120][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4491'.
[  433.543883][T14670] usb 2-1: Using ep0 maxpacket: 32
[  433.544474][T14670] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  433.545413][T14670] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  433.545426][T14670] usb 2-1: config 0 interface 0 has no altsetting 0
[  433.545439][T14670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.546839][T14670] usb 2-1: config 0 descriptor??
[  433.710009][T17684] loop3: detected capacity change from 0 to 40427
[  433.717384][T17684] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  433.720279][T17684] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  433.726140][T17684] F2FS-fs (loop3): invalid crc value
[  433.776507][T17694] loop4: detected capacity change from 0 to 512
[  433.804758][T17684] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  433.819203][T17684] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  433.822846][T17684] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  433.838947][T17694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.839081][T17694] ext4 filesystem being mounted at /1246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  433.915919][T16111] syz-executor: attempt to access beyond end of device
[  433.915919][T16111] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  433.923552][T16111] CPU: 1 UID: 0 PID: 16111 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.923583][T16111] Tainted: [L]=SOFTLOCKUP
[  433.923587][T16111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  433.923592][T16111] Call Trace:
[  433.923596][T16111]  <TASK>
[  433.923600][T16111]  dump_stack_lvl+0xe8/0x150
[  433.923616][T16111]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  433.923632][T16111]  f2fs_write_end_io+0x1215/0x16f0
[  433.923657][T16111]  ? blkg_put+0x22/0x240
[  433.923677][T16111]  __submit_merged_bio+0x258/0x6a0
[  433.923685][T16111]  ? rcu_is_watching+0x16/0xb0
[  433.923696][T16111]  f2fs_submit_merged_write+0x27d/0x380
[  433.923710][T16111]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  433.923728][T16111]  f2fs_sync_node_pages+0x1055/0x1210
[  433.923747][T16111]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  433.923774][T16111]  f2fs_write_checkpoint+0xf91/0x2710
[  433.923797][T16111]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  433.923826][T16111]  kill_f2fs_super+0x2dd/0x700
[  433.923839][T16111]  ? __pfx_kill_f2fs_super+0x10/0x10
[  433.923853][T16111]  ? call_rcu+0x64d/0x8b0
[  433.923861][T16111]  ? lockdep_hardirqs_on+0x7b/0x110
[  433.923875][T16111]  deactivate_locked_super+0xbc/0x110
[  433.923885][T16111]  cleanup_mnt+0x3d3/0x460
[  433.923898][T16111]  task_work_run+0x1d9/0x270
[  433.923908][T16111]  ? __pfx_task_work_run+0x10/0x10
[  433.923919][T16111]  exit_to_user_mode_loop+0x204/0x770
[  433.923927][T16111]  ? rcu_is_watching+0x16/0xb0
[  433.923937][T16111]  do_syscall_64+0x328/0x520
[  433.923944][T16111]  ? trace_irq_disable+0x3b/0x140
[  433.923951][T16111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.923961][T16111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.923969][T16111] RIP: 0033:0x7fb04579f397
[  433.923977][T16111] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  433.923984][T16111] RSP: 002b:00007fff24459208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  433.923993][T16111] RAX: 0000000000000000 RBX: 00007fb0458344bb RCX: 00007fb04579f397
[  433.923999][T16111] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff244592c0
[  433.924003][T16111] RBP: 00007fff244592c0 R08: 00007fff2445a2c0 R09: 00000000ffffffff
[  433.924008][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2445a350
[  433.924013][T16111] R13: 00007fb0458344bb R14: 0000000000065362 R15: 00007fff2445a390
[  433.924026][T16111]  </TASK>
[  433.924126][T16111] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  434.077202][T14670] hid_parser_main: 14 callbacks suppressed
[  434.077289][T14670] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0
[  434.077321][T14670] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0
[  434.077369][T14670] corsair-cpro 0003:1B1C:0C10.000E: unexpected long global item
[  434.077697][T14670] corsair-cpro 0003:1B1C:0C10.000E: probe with driver corsair-cpro failed with error -22
[  434.117727][ T7845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.419774][T17712] loop3: detected capacity change from 0 to 256
[  434.553357][T17717] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  434.558875][T17715] syzkaller1: entered promiscuous mode
[  434.560934][T17715] syzkaller1: entered allmulticast mode
[  434.744451][T17728] loop3: detected capacity change from 0 to 1024
[  434.768753][T17728] syz.3.4506: attempt to access beyond end of device
[  434.768753][T17728] loop3: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[  435.200613][T17743] loop3: detected capacity change from 0 to 2048
[  435.224835][T17743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.442395][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.977635][T17748] loop3: detected capacity change from 0 to 131072
[  435.979086][T17748] F2FS-fs (loop3): invalid crc value
[  436.017353][T17748] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  436.024378][T17748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  436.314469][T14669] usb 2-1: USB disconnect, device number 34
[  436.400050][T17756] cgroup: none used incorrectly
[  436.887089][T17781] pimreg3: entered allmulticast mode
[  437.029262][T17789] netlink: 'syz.3.4532': attribute type 61 has an invalid length.
[  437.365812][T14669] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  437.525989][T14669] usb 4-1: Using ep0 maxpacket: 8
[  437.529337][T14669] usb 4-1: unable to get BOS descriptor or descriptor too short
[  437.529434][T14669] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  437.530926][T14669] usb 4-1: config 4 interface 0 has no altsetting 0
[  437.535466][T14669] usb 4-1: string descriptor 0 read error: -22
[  437.535521][T14669] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  437.541570][T14669] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  437.543899][T14669] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  437.544141][T14669] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  437.544171][T14669] usb 4-1: media controller created
[  437.567769][T14669] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  437.764324][T14669] zl10353_read_register: readreg error (reg=127, ret==0)
[  437.779436][T14669] usb 4-1: USB disconnect, device number 24
[  438.438072][T17806] loop4: detected capacity change from 0 to 32768
[  438.448493][T17806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4540 (17806)
[  438.480104][T17806] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  438.480171][T17806] BTRFS info (device loop4): using sha256 checksum algorithm
[  438.489670][T17804] loop1: detected capacity change from 0 to 32768
[  438.521522][T17804] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  438.594338][T17804] syz.1.4539 (17804) used greatest stack depth: 18792 bytes left
[  438.631046][T17806] BTRFS info (device loop4): enabling ssd optimizations
[  438.631099][T17806] BTRFS info (device loop4): turning on async discard
[  438.631132][T17806] BTRFS info (device loop4): enabling free space tree
[  438.686775][T14452] ocfs2: Unmounting device (7,1) on (node local)
[  438.706925][T17827] xt_socket: unknown flags 0xe4
[  438.762661][ T7845] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  438.958628][T17832] loop3: detected capacity change from 0 to 128
[  438.961666][T17832] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  438.961744][T17832] hpfs: filesystem error: improperly stopped
[  438.961785][T17832] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  438.961827][T17832] hpfs: You really don't want any checks? You are crazy...
[  438.961962][T17832] hpfs: hpfs_map_sector(): read error
[  438.961985][T17832] hpfs: code page support is disabled
[  438.978850][T17832] hpfs: hpfs_map_4sectors(): unaligned read
[  438.978899][T17832] hpfs: hpfs_map_4sectors(): unaligned read
[  438.978904][T17832] hpfs: filesystem error: unable to find root dir
[  439.183719][T17838] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4547'.
[  439.567213][T17840] loop3: detected capacity change from 0 to 131072
[  439.568626][T17840] F2FS-fs (loop3): Test dummy encryption mode enabled
[  439.569051][T17840] F2FS-fs (loop3): invalid crc value
[  439.609079][T17840] F2FS-fs (loop3): access invalid blkaddr:0
[  439.609135][T17840] CPU: 1 UID: 0 PID: 17840 Comm: syz.3.4548 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  439.609163][T17840] Tainted: [L]=SOFTLOCKUP
[  439.609168][T17840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.609173][T17840] Call Trace:
[  439.609177][T17840]  <TASK>
[  439.609181][T17840]  dump_stack_lvl+0xe8/0x150
[  439.609198][T17840]  __f2fs_is_valid_blkaddr+0xe62/0x14f0
[  439.609213][T17840]  sanity_check_extent_cache+0x1a3/0x620
[  439.609225][T17840]  ? f2fs_sanity_check_inline_data+0x70/0x740
[  439.609238][T17840]  f2fs_iget+0x41fc/0x6230
[  439.609261][T17840]  f2fs_fill_super+0x4edb/0x77f0
[  439.609330][T17840]  get_tree_bdev_flags+0x430/0x4f0
[  439.609351][T17840]  ? __pfx_f2fs_fill_super+0x10/0x10
[  439.609365][T17840]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  439.609379][T17840]  vfs_get_tree+0x92/0x2a0
[  439.609391][T17840]  do_new_mount+0x319/0xdc0
[  439.609409][T17840]  ? __pfx_do_new_mount+0x10/0x10
[  439.609423][T17840]  ? ns_capable+0x89/0xe0
[  439.609439][T17840]  ? path_mount+0x647/0x1050
[  439.609456][T17840]  ? user_path_at+0xd4/0x160
[  439.609472][T17840]  __se_sys_mount+0x31d/0x420
[  439.609483][T17840]  ? __pfx___se_sys_mount+0x10/0x10
[  439.609494][T17840]  ? __x64_sys_mount+0x20/0xc0
[  439.609504][T17840]  do_syscall_64+0x166/0x520
[  439.609513][T17840]  ? trace_irq_disable+0x3b/0x140
[  439.609520][T17840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.609530][T17840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.609538][T17840] RIP: 0033:0x7fb04579f3ca
[  439.609547][T17840] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.609554][T17840] RSP: 002b:00007fb046602e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  439.609563][T17840] RAX: ffffffffffffffda RBX: 00007fb046602ee0 RCX: 00007fb04579f3ca
[  439.609569][T17840] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007fb046602ea0
[  439.609574][T17840] RBP: 0000200000000100 R08: 00007fb046602ee0 R09: 0000000000000010
[  439.609579][T17840] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600
[  439.609584][T17840] R13: 00007fb046602ea0 R14: 00000000000105d6 R15: 00002000000003c0
[  439.609603][T17840]  </TASK>
[  439.613044][T17840] loop3: lost filesystem error report for type 5 error -117
[  439.613056][T17840] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix
[  439.613070][T17840] loop3: lost filesystem error report for type 5 error -117
[  439.613077][T17840] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  439.613177][T17840] F2FS-fs (loop3): Failed to read root inode
[  439.640663][   T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  439.997339][   T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  440.001404][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.001470][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  440.001490][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.004600][   T25] usb 2-1: config 0 descriptor??
[  440.009309][   T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  440.172943][   T55] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  440.229257][ T6314] usb 2-1: USB disconnect, device number 35
[  440.570322][T10898] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  440.697968][ T6314] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  440.732228][T10898] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  440.736877][T10898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.742316][T10898] usb 4-1: config 0 descriptor??
[  440.748110][T10898] gspca_main: cpia1-2.14.0 probing 0813:0001
[  440.860640][ T6314] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  440.865598][ T6314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.870075][ T6314] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  440.875376][ T6314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.881309][ T6314] usb 2-1: config 0 descriptor??
[  440.885901][ T6314] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1
[  440.891015][ T6314] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  441.104579][T10900] usb 2-1: USB disconnect, device number 36
[  441.176747][T10898] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  441.605829][T10898] gspca_cpia1: usb_control_msg 02, error -71
[  441.609846][T10898] gspca_cpia1: usb_control_msg 05, error -71
[  441.612189][T10898] cpia1 4-1:0.0: unexpected systemstate: 00
[  441.615924][T10898] usb 4-1: USB disconnect, device number 25
[  442.289374][T17876] loop1: detected capacity change from 0 to 131072
[  442.290572][T17876] F2FS-fs (loop1): invalid crc value
[  442.337142][T17876] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  442.346155][T17876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  443.254785][T17910] loop4: detected capacity change from 0 to 16
[  443.263393][T17910] erofs (device loop4): invalid ishare xattr prefix id 0
[  443.571515][T17914] loop1: detected capacity change from 0 to 32768
[  443.582272][T17914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4580 (17914)
[  443.608110][T17917] loop3: detected capacity change from 0 to 32768
[  443.609766][T17914] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  443.609786][T17914] BTRFS info (device loop1): using sha256 checksum algorithm
[  443.632819][   T34] audit: type=1800 audit(1789785145.452:1081): pid=17917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4581" name="file1" dev="loop3" ino=4 res=0 errno=0
[  443.730582][T17914] BTRFS info (device loop1): enabling ssd optimizations
[  443.730647][T17914] BTRFS info (device loop1): turning on async discard
[  443.730684][T17914] BTRFS info (device loop1): enabling free space tree
[  444.421189][   T27] read_mapping_page failed!
[  444.431728][   T27] ERROR: (device loop3): txCommit: 
[  444.431728][   T27] 
[  444.438903][   T27] ERROR: (device loop3): remounting filesystem as read-only
[  444.442709][   T27] jfs_write_inode: jfs_commit_inode failed!
[  444.668302][T17950] loop4: detected capacity change from 0 to 256
[  444.671080][T17950] exfat: Deprecated parameter 'utf8'
[  444.672862][T17950] exfat: Deprecated parameter 'utf8'
[  444.675421][T17950] exfat: Deprecated parameter 'namecase'
[  444.677923][T17950] exfat: Deprecated parameter 'namecase'
[  444.686640][T17950] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[  444.942917][T14452] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  445.293060][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4597'.
[  445.510847][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4606'.
[  445.708838][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  445.843143][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4611'.
[  446.337027][T10898] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  446.450549][T18022] loop4: detected capacity change from 0 to 32768
[  446.462875][T18022] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  446.499928][T10898] usb 4-1: unable to get BOS descriptor or descriptor too short
[  446.499995][T10898] usb 4-1: New USB device found, idVendor=33a6, idProduct=6e1b, bcdDevice=cb.45
[  446.509404][T10898] usb 4-1: config 1 has an invalid interface number: 244 but max is 0
[  446.509452][T10898] usb 4-1: config 1 has no interface number 0
[  446.509502][T10898] usb 4-1: config 1 interface 244 has no altsetting 0
[  446.516363][T18022] XFS (loop4): Ending clean mount
[  446.527792][T10898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.533603][T10898] usb 4-1: Product: syz
[  446.533653][T10898] usb 4-1: Manufacturer: syz
[  446.533685][T10898] usb 4-1: SerialNumber: syz
[  446.630827][ T7845] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  446.784482][T10898] rndis_host 4-1:1.244: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  446.792139][T10898] usb 4-1: USB disconnect, device number 26
[  447.464743][T18049] loop3: detected capacity change from 0 to 16
[  447.474255][T18049] erofs (device loop3): bogus i_mode (0) @ nid 0
[  447.743348][T18055] loop3: detected capacity change from 0 to 32768
[  447.765403][   T34] audit: type=1800 audit(1789785149.319:1082): pid=18055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4635" name="file1" dev="loop3" ino=4 res=0 errno=0
[  447.768275][T18055] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong
[  447.768275][T18055] 
[  447.785130][T18055] ERROR: (device loop3): remounting filesystem as read-only
[  447.785215][T18055] ialloc: diAlloc returned -5!
[  447.889570][T18057] netlink: 'syz.3.4636': attribute type 2 has an invalid length.
[  447.889626][T18057] netlink: 'syz.3.4636': attribute type 2 has an invalid length.
[  448.238743][T10898] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  448.400086][T10898] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  448.405209][T10898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.410784][T10898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.410851][T10898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.422237][T10898] usb 4-1: config 0 descriptor??
[  448.859792][T10898] hid (null): unknown global tag 0xe
[  448.866028][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.869344][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.871876][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.874376][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.877046][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.879491][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.879503][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.879512][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.879521][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.879530][T10898] uclogic 0003:5543:0064.000F: unknown main item tag 0x0
[  448.880394][T10898] uclogic 0003:5543:0064.000F: reserved main item tag 0xd
[  448.880417][T10898] uclogic 0003:5543:0064.000F: unknown global tag 0xe
[  448.880423][T10898] uclogic 0003:5543:0064.000F: item 0 2 1 14 parsing failed
[  448.900683][T10898] uclogic 0003:5543:0064.000F: parse failed
[  448.900754][T10898] uclogic 0003:5543:0064.000F: probe with driver uclogic failed with error -22
[  449.081799][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout
[  449.088546][T10898] usb 4-1: USB disconnect, device number 27
[  450.198982][T18079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4647'.
[  450.247425][T18081] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  450.344588][T18090] vxcan0: tx address claim with dlc 0
[  450.605854][T18107] loop3: detected capacity change from 0 to 4096
[  450.606969][T18107] EXT4-fs (loop3): Test dummy encryption mode enabled
[  450.611825][T18111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.649770][T18107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.687931][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.821346][T18123] openvswitch: netlink: VLAN attribute unexpected.
[  450.919424][T18131] netlink: 'syz.1.4672': attribute type 3 has an invalid length.
[  450.919456][T18131] netlink: 'syz.1.4672': attribute type 27 has an invalid length.
[  451.165977][T18146] loop1: detected capacity change from 0 to 1024
[  451.166520][T18146] hfsplus: Bad value for 'part'
[  451.320044][   T34] audit: type=1326 audit(1789785152.652:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18153 comm="syz.4.4684" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  451.320106][   T34] audit: type=1326 audit(1789785152.652:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18153 comm="syz.4.4684" exe="/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  451.320174][   T34] audit: type=1326 audit(1789785152.652:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18153 comm="syz.4.4684" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  451.338599][T18157] block2mtd: illegal erase size
[  451.351875][   T34] audit: type=1326 audit(1789785152.680:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18153 comm="syz.4.4684" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  451.721045][T18186] loop1: detected capacity change from 0 to 512
[  451.732804][T18186] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  451.754240][T18186] EXT4-fs (loop1): 1 truncate cleaned up
[  451.754952][T18186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.786919][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.037769][T18238] loop3: detected capacity change from 0 to 1024
[  453.038279][T18238] EXT4-fs: Ignoring removed orlov option
[  453.040306][T18238] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  453.064828][T18238] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.4708: lblock 2 mapped to illegal pblock 2 (length 1)
[  453.064889][T18238] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  453.071583][T18238] EXT4-fs (loop3): Remounting filesystem read-only
[  453.078267][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  453.078284][    C0] EXT4-fs (loop3): initial error at time 1789785154: ext4_map_blocks:790: inode 3: block 2
[  453.078310][    C0] EXT4-fs (loop3): last error at time 1789785154: ext4_map_blocks:790: inode 3: block 2
[  453.090709][T18238] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  453.094352][T18238] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  453.107626][T18238] EXT4-fs (loop3): 1 orphan inode deleted
[  453.111362][T18238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.129487][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.208321][T18242] loop3: detected capacity change from 0 to 2048
[  453.231662][T18242] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  453.231861][T18242] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  453.231869][T18242] UDF-fs: Scanning with blocksize 512 failed
[  453.238529][T18242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  453.834373][T14670] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  453.995090][T14670] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  453.996078][T14670] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  453.997843][T14670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.997854][T14670] usb 4-1: Product: syz
[  453.997860][T14670] usb 4-1: Manufacturer: syz
[  453.997866][T14670] usb 4-1: SerialNumber: syz
[  454.222002][T14670] snd-usb-6fire 4-1:1.0: unknown device firmware state received from device:
[  454.222050][T14670] eb 00 00 00 00 00 00 00 
[  454.227957][T14670] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -5
[  454.293949][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  454.308865][T18196] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  454.312723][T18196] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  454.434685][ T6314] usb 4-1: USB disconnect, device number 28
[  455.084058][T18196] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  455.084165][T18196] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  455.202585][T18196] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  455.202637][T18196] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  455.247815][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4716'.
[  455.247865][T18258] bridge: RTM_NEWNEIGH with invalid ether address
[  456.037074][T18279] netlink: 'syz.1.4726': attribute type 15 has an invalid length.
[  456.040423][T18279] netlink: 'syz.1.4726': attribute type 7 has an invalid length.
[  456.067872][T18281] loop4: detected capacity change from 0 to 256
[  456.252753][T18295] loop1: detected capacity change from 0 to 164
[  456.328264][T18297] loop3: detected capacity change from 0 to 512
[  456.382886][T18297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.382973][T18297] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.484904][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.662389][T18313] netlink: 'syz.3.4739': attribute type 20 has an invalid length.
[  456.662505][T18313] IPv6: NLM_F_CREATE should be specified when creating new route
[  457.016162][T18315] tmpfs: Bad value for 'mpol'
[  458.188057][T18326] loop1: detected capacity change from 0 to 32768
[  458.208420][T18326] 
[  458.208420][T18326]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  458.208420][T18326] 
[  458.219184][T18326] ERROR: (device loop1): diWrite: ixpxd invalid
[  458.219184][T18326] 
[  458.249752][T18326] ERROR: (device loop1): txCommit: 
[  458.249752][T18326] 
[  458.252683][T18326] jfs_mkdir: dtSearch returned -17
[  458.268518][T14452] 
[  458.268518][T14452]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  458.268518][T14452] 
[  458.273368][T14452] 
[  458.273368][T14452]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  458.273368][T14452] 
[  458.367804][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4751'.
[  458.371426][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4751'.
[  458.374721][T18334] netlink: 'syz.4.4751': attribute type 18 has an invalid length.
[  458.573195][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4756'.
[  458.582137][T18349] macvtap1: entered promiscuous mode
[  458.584524][T18349] macvtap1: entered allmulticast mode
[  458.588243][T18349] veth1_vlan: entered allmulticast mode
[  459.326970][T18371] jffs2: notice: (18371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  459.592314][T18380] xt_cgroup: invalid path, errno=-2
[  459.602850][T18381] syz_tun: entered promiscuous mode
[  459.608179][T18381] syz_tun: left promiscuous mode
[  460.033398][T18401] netlink: 'syz.1.4779': attribute type 23 has an invalid length.
[  460.507764][T18425] loop3: detected capacity change from 0 to 512
[  460.508351][T18425] EXT4-fs: Ignoring removed orlov option
[  460.513006][T18425] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  460.657565][T18425] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #15: comm syz.3.4790: corrupted xattr block 252: invalid header
[  460.667687][T18425] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  460.670021][    C1] EXT4-fs (loop3): initial error at time 1789785161: ext4_xattr_delete_inode:2933: inode 15
[  460.670148][    C1] EXT4-fs (loop3): last error at time 1789785161: ext4_xattr_delete_inode:2933: inode 15
[  460.682108][T18425] EXT4-fs (loop3): Remounting filesystem read-only
[  460.685215][T18425] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117)
[  460.689292][T18425] EXT4-fs (loop3): 1 orphan inode deleted
[  460.698317][T18425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.740338][T18425] EXT4-fs: Ignoring removed orlov option
[  460.746569][T18425] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  460.788906][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.878200][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  460.921857][T18435] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4794'.
[  461.212822][T18451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4802'.
[  461.217094][T18451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4802'.
[  461.220841][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4802'.
[  461.343138][T14223] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  461.424071][T18461] loop3: detected capacity change from 0 to 1764
[  461.436226][T18463] netlink: 'syz.4.4808': attribute type 31 has an invalid length.
[  461.503779][T14223] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  461.506340][T18466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4809'.
[  461.511843][T14223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  461.511907][T14223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.523130][T14223] usb 2-1: config 0 descriptor??
[  461.529153][T14223] pwc: Askey VC010 type 2 USB webcam detected.
[  461.971352][T14223] pwc: recv_control_msg error -32 req 02 val 2b00
[  461.982208][T14223] pwc: recv_control_msg error -32 req 02 val 2700
[  461.987433][T14223] pwc: recv_control_msg error -32 req 02 val 2c00
[  461.990137][T14223] pwc: recv_control_msg error -32 req 04 val 1000
[  462.152252][T18480] loop4: detected capacity change from 0 to 4096
[  462.157649][T18480] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  462.174335][T18480] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  462.209324][T14223] pwc: recv_control_msg error -71 req 04 val 1400
[  462.211755][T14223] pwc: recv_control_msg error -71 req 02 val 2000
[  462.214155][T14223] pwc: recv_control_msg error -71 req 02 val 2100
[  462.216445][T14223] pwc: recv_control_msg error -71 req 04 val 1500
[  462.219056][T14223] pwc: recv_control_msg error -71 req 02 val 2500
[  462.221924][T14223] pwc: recv_control_msg error -71 req 02 val 2400
[  462.224198][T14223] pwc: recv_control_msg error -71 req 02 val 2600
[  462.226795][T14223] pwc: recv_control_msg error -71 req 02 val 2900
[  462.229488][T14223] pwc: recv_control_msg error -71 req 02 val 2800
[  462.232008][T14223] pwc: recv_control_msg error -71 req 04 val 1100
[  462.234527][T14223] pwc: recv_control_msg error -71 req 04 val 1200
[  462.249063][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4815'.
[  462.254061][T14223] pwc: Registered as video103.
[  462.256783][T14223] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32
[  462.262873][T14223] usb 2-1: USB disconnect, device number 37
[  462.335800][T18485] loop4: detected capacity change from 0 to 1024
[  462.384668][T18485] hfsplus: bad catalog file entry
[  462.384787][T18485] hfsplus: failed to load root directory
[  462.622494][T18493] loop3: detected capacity change from 0 to 8192
[  462.957689][T18508] loop3: detected capacity change from 0 to 2048
[  462.977227][T18508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  463.132682][   T34] audit: type=1326 audit(1789785163.710:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.1.4830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  463.136531][T18515] loop3: detected capacity change from 0 to 8192
[  463.144722][   T34] audit: type=1326 audit(1789785163.710:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.1.4830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  463.155229][   T34] audit: type=1326 audit(1789785163.738:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.1.4830" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  463.155281][   T34] audit: type=1326 audit(1789785163.738:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.1.4830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  463.155396][   T34] audit: type=1326 audit(1789785163.738:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.1.4830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  463.178983][   T34] audit: type=1326 audit(1789785163.757:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.1.4830" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  463.179105][   T34] audit: type=1326 audit(1789785163.757:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.1.4830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  463.179157][   T34] audit: type=1326 audit(1789785163.757:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.1.4830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4bb9e159 code=0x7ffc0000
[  463.368846][T18527] loop1: detected capacity change from 0 to 4096
[  463.374080][T18527] EXT4-fs (loop1): can't read group descriptor 0
[  463.544760][   T53] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  463.623416][T18535] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4839'.
[  463.658847][T18537] loop4: detected capacity change from 0 to 736
[  463.724702][   T53] usb 4-1: Using ep0 maxpacket: 8
[  463.725670][   T53] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  463.731029][   T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  463.731047][   T53] usb 4-1: Product: syz
[  463.731056][   T53] usb 4-1: Manufacturer: syz
[  463.731065][   T53] usb 4-1: SerialNumber: syz
[  463.736911][   T53] usb 4-1: config 0 descriptor??
[  463.784102][   T53] gspca_main: sq905-2.14.0 probing 2770:9120
[  463.949158][T18544] loop4: detected capacity change from 0 to 4096
[  464.210763][   T53] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  464.210870][   T53] sq905 4-1:0.0: probe with driver sq905 failed with error -71
[  464.218498][   T53] usb 4-1: USB disconnect, device number 29
[  464.261065][T18548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4845'.
[  464.376278][T18554] netlink: 'syz.4.4848': attribute type 2 has an invalid length.
[  464.411159][T18556] loop4: detected capacity change from 0 to 2048
[  464.418430][T18556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  465.048869][T14223] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  465.268570][T18567] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  465.268747][T18567] System zones: 0-2, 18-18, 34-35
[  465.301383][T18567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.301577][T18567] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.345840][T14223] usb 2-1: unable to get BOS descriptor or descriptor too short
[  465.350077][T14223] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  465.354794][T14223] usb 2-1: unable to read config index 0 descriptor/start: -71
[  465.358311][T14223] usb 2-1: can't read configurations, error -71
[  465.895315][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.244896][T14223] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  466.406278][T14223] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  466.412725][T14223] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  466.412846][T14223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  466.423610][T14223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.427900][T14223] usb 2-1: Product: syz
[  466.427949][T14223] usb 2-1: Manufacturer: syz
[  466.427994][T14223] usb 2-1: SerialNumber: syz
[  466.579497][T18617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4876 (18617)
[  466.588010][T18617] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  466.588122][T18617] BTRFS info (device loop3): using sha256 checksum algorithm
[  466.588190][T18617] BTRFS error (device loop3): cannot disable free-space-tree
[  466.588307][T18617] BTRFS error (device loop3): open_ctree failed: -EINVAL
[  467.518829][T14223] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed
[  467.542458][T14223] cdc_ncm 2-1:1.0: bind() failure
[  467.548478][T14223] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  467.548810][T18652] set_capacity_and_notify: 3 callbacks suppressed
[  467.548819][T18652] loop3: detected capacity change from 0 to 512
[  467.554948][T14223] cdc_ncm 2-1:1.1: bind() failure
[  467.557854][T18652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.565388][T18652] EXT4-fs warning (device loop3): ext4_begin_enable_verity:135: inode #18: comm syz.3.4892: verity is only allowed on extent-based files
[  467.570461][T14223] usb 2-1: USB disconnect, device number 39
[  467.617083][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.964408][T10898] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  468.138276][T10898] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  468.140674][T10898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  468.140697][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  468.140707][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  468.140717][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  468.140725][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  468.140734][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[  468.140743][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  468.140752][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[  468.140760][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  468.140770][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  468.140778][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  468.140788][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  468.140796][T10898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  468.140804][T10898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  468.140812][T10898] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14
[  468.142594][T10898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.142604][T10898] usb 4-1: Product: syz
[  468.142610][T10898] usb 4-1: Manufacturer: syz
[  468.142616][T10898] usb 4-1: SerialNumber: syz
[  468.152621][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.152737][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.152779][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.152889][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.152951][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.153117][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.153172][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.153267][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.153306][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.153345][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.153435][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  468.159216][T10898] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  468.160104][T10898] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7
[  468.164864][T10898] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  468.166081][T10898] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  468.196305][T10898] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  468.339678][T18666] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4898'.
[  468.411982][T18668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4900'.
[  468.416735][T10898] usb 4-1: USB disconnect, device number 30
[  468.428751][T18668] loop4: detected capacity change from 0 to 512
[  468.432270][T18668] ext4: Unknown parameter 'j'
[  468.506441][T18670] o2cb: This node has not been configured.
[  468.506490][T18670] o2cb: Cluster check failed. Fix errors before retrying.
[  468.537558][T18670] (syz.1.4899,18670,0):user_dlm_register:674 ERROR: status = -22
[  468.537614][T18670] (syz.1.4899,18670,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  468.780048][T10898] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  468.783703][T10898] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  468.783885][T10898] keyspan 4-1:1.0: device disconnected
[  468.881012][T18685] loop1: detected capacity change from 0 to 1024
[  468.929727][T18685] hfsplus: request for non-existent node 131072 in B*Tree
[  468.929797][T18685] hfsplus: request for non-existent node 131072 in B*Tree
[  469.309397][T18700] loop3: detected capacity change from 0 to 4096
[  469.314603][T18700] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  469.446550][  T801] ntfs3(loop3): ino=1e, ni_find_attr
[  469.491237][T18707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4917'.
[  469.498472][T18707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4917'.
[  469.854746][T14670] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  470.017682][T14670] usb 4-1: Using ep0 maxpacket: 16
[  470.020084][T14670] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  470.024231][T14670] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  470.024265][T14670] usb 4-1: config 0 has no interface number 0
[  470.024318][T14670] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  470.024346][T14670] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  470.024373][T14670] usb 4-1: config 0 interface 41 has no altsetting 0
[  470.040513][T14670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.040563][T14670] usb 4-1: Product: syz
[  470.040622][T14670] usb 4-1: Manufacturer: syz
[  470.040654][T14670] usb 4-1: SerialNumber: syz
[  470.055513][T14670] usb 4-1: config 0 descriptor??
[  470.058253][T18711] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  470.058402][T18711] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  470.289187][T18711] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  470.289350][T18711] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  470.361827][T18735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4931'.
[  470.426889][T18737] netlink: 'syz.1.4932': attribute type 26 has an invalid length.
[  470.512202][T14670] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  470.519323][T14670] usb 4-1: USB disconnect, device number 31
[  470.635701][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4936'.
[  470.639423][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4936'.
[  470.777578][T18754] sock: sock_timestamping_bind_phc: sock not bind to device
[  471.510588][T18794] FAULT_INJECTION: forcing a failure.
[  471.510588][T18794] name failslab, interval 1, probability 0, space 0, times 0
[  471.531570][T18794] CPU: 0 UID: 0 PID: 18794 Comm: syz.3.4958 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  471.531604][T18794] Tainted: [L]=SOFTLOCKUP
[  471.531609][T18794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.531614][T18794] Call Trace:
[  471.531619][T18794]  <TASK>
[  471.531623][T18794]  dump_stack_lvl+0xe8/0x150
[  471.531639][T18794]  should_fail_ex+0x410/0x560
[  471.531652][T18794]  should_failslab+0xa8/0x100
[  471.531662][T18794]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  471.531675][T18794]  ? __kernfs_new_node+0xa9/0x980
[  471.531687][T18794]  ? __kernfs_new_node+0xa9/0x980
[  471.531701][T18794]  kstrdup+0x42/0x100
[  471.531711][T18794]  __kernfs_new_node+0xa9/0x980
[  471.531722][T18794]  ? vsnprintf+0xe42/0xef0
[  471.531735][T18794]  ? kernfs_root+0x1c/0x230
[  471.531744][T18794]  ? __pfx___kernfs_new_node+0x10/0x10
[  471.531754][T18794]  ? kernfs_root+0x1c/0x230
[  471.531767][T18794]  ? kernfs_root+0x1c/0x230
[  471.531776][T18794]  ? kernfs_root+0x1c/0x230
[  471.531788][T18794]  kernfs_new_node+0xea/0x140
[  471.531801][T18794]  __kernfs_create_file+0x4b/0x2e0
[  471.531810][T18794]  cgroup_addrm_files+0x837/0xd70
[  471.531827][T18794]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  471.531838][T18794]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  471.531853][T18794]  ? idr_replace+0x136/0x1b0
[  471.531866][T18794]  css_populate_dir+0x123/0x3d0
[  471.531880][T18794]  cgroup_apply_control_enable+0x797/0xda0
[  471.531895][T18794]  cgroup_mkdir+0xd2c/0xf90
[  471.531907][T18794]  ? __pfx_cgroup_mkdir+0x10/0x10
[  471.531941][T18794]  kernfs_iop_mkdir+0x213/0x360
[  471.531960][T18794]  vfs_mkdir+0x40c/0x620
[  471.531986][T18794]  filename_mkdirat+0x285/0x510
[  471.532005][T18794]  ? __pfx_filename_mkdirat+0x10/0x10
[  471.532018][T18794]  ? do_getname+0x151/0x250
[  471.532027][T18794]  __se_sys_mkdirat+0x35/0x150
[  471.532039][T18794]  do_syscall_64+0x166/0x520
[  471.532047][T18794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.532058][T18794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.532065][T18794] RIP: 0033:0x7fb04579e159
[  471.532074][T18794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.532081][T18794] RSP: 002b:00007fb046603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  471.532090][T18794] RAX: ffffffffffffffda RBX: 00007fb045a25fa0 RCX: 00007fb04579e159
[  471.532096][T18794] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  471.532101][T18794] RBP: 00007fb04583506b R08: 0000000000000000 R09: 0000000000000000
[  471.532106][T18794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.532110][T18794] R13: 00007fb045a26038 R14: 00007fb045a25fa0 R15: 00007fff24459f98
[  471.532123][T18794]  </TASK>
[  471.532173][T18794] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12
[  471.689785][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4959'.
[  471.999705][T14670] hid_parser_main: 174 callbacks suppressed
[  472.066062][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.097744][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.097805][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.097844][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.097881][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.097949][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.097986][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.098023][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.098132][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.098170][T14670] hid-generic 0000:0000:0004.0010: unknown main item tag 0x0
[  472.170952][T18820] loop3: detected capacity change from 0 to 4096
[  472.186965][T18820] EXT4-fs: Ignoring removed mblk_io_submit option
[  472.190716][T18820] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  472.194236][T18820] EXT4-fs (loop3): Test dummy encryption mode enabled
[  472.205213][T14670] hid-generic 0000:0000:0004.0010: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  472.209078][T18820] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c199, mo2=0002]
[  472.209168][T18820] System zones: 0-5
[  472.235327][T18820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.286136][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.950580][T18840] loop1: detected capacity change from 0 to 128
[  473.217141][T18851] loop3: detected capacity change from 0 to 16
[  473.226494][T18851] erofs (device loop3): mounted with root inode @ nid 36.
[  473.256876][   T56] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  473.275589][T18851] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  473.275668][T18851] erofs (device loop3): read error -117 @ 0 of nid 89
[  474.066265][T18880] FAULT_INJECTION: forcing a failure.
[  474.066265][T18880] name failslab, interval 1, probability 0, space 0, times 0
[  474.088487][T18880] CPU: 1 UID: 0 PID: 18880 Comm: syz.1.4993 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  474.088519][T18880] Tainted: [L]=SOFTLOCKUP
[  474.088523][T18880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  474.088529][T18880] Call Trace:
[  474.088535][T18880]  <TASK>
[  474.088539][T18880]  dump_stack_lvl+0xe8/0x150
[  474.088555][T18880]  should_fail_ex+0x410/0x560
[  474.088569][T18880]  should_failslab+0xa8/0x100
[  474.088579][T18880]  __kmalloc_cache_noprof+0xa3/0x600
[  474.088592][T18880]  ? __kmalloc_cache_noprof+0x14d/0x600
[  474.088604][T18880]  ? pty_common_install+0xd9/0x780
[  474.088611][T18880]  ? pty_common_install+0xd9/0x780
[  474.088622][T18880]  pty_common_install+0xd9/0x780
[  474.088633][T18880]  tty_init_dev+0xd7/0x4d0
[  474.088644][T18880]  ptmx_open+0xeb/0x2e0
[  474.088653][T18880]  chrdev_open+0x4d9/0x600
[  474.088663][T18880]  ? __pfx_chrdev_open+0x10/0x10
[  474.088671][T18880]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  474.088684][T18880]  ? __pfx_chrdev_open+0x10/0x10
[  474.088691][T18880]  do_dentry_open+0x816/0x1380
[  474.088704][T18880]  vfs_open+0x3b/0x340
[  474.088710][T18880]  ? path_openat+0x1428/0x1d60
[  474.088722][T18880]  path_openat+0x1443/0x1d60
[  474.088739][T18880]  do_file_open+0x23e/0x4a0
[  474.088752][T18880]  ? __pfx_do_file_open+0x10/0x10
[  474.088770][T18880]  ? _raw_spin_unlock+0x28/0x50
[  474.088782][T18880]  ? alloc_fd+0x651/0x6c0
[  474.088795][T18880]  do_sys_openat2+0x115/0x200
[  474.088803][T18880]  ? __se_sys_futex+0x3a8/0x450
[  474.088813][T18880]  ? __pfx_do_sys_openat2+0x10/0x10
[  474.088824][T18880]  ? rcu_is_watching+0x16/0xb0
[  474.088835][T18880]  __x64_sys_openat+0x138/0x170
[  474.088846][T18880]  do_syscall_64+0x166/0x520
[  474.088855][T18880]  ? trace_irq_disable+0x3b/0x140
[  474.088862][T18880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.088872][T18880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.088879][T18880] RIP: 0033:0x7f2d4bb9e159
[  474.088923][T18880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.088930][T18880] RSP: 002b:00007f2d4ca02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  474.088940][T18880] RAX: ffffffffffffffda RBX: 00007f2d4be25fa0 RCX: 00007f2d4bb9e159
[  474.088963][T18880] RDX: 0000000000080782 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  474.088969][T18880] RBP: 00007f2d4bc3506b R08: 0000000000000000 R09: 0000000000000000
[  474.088974][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.088978][T18880] R13: 00007f2d4be26038 R14: 00007f2d4be25fa0 R15: 00007ffd05549958
[  474.088991][T18880]  </TASK>
[  474.103380][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4994'.
[  474.657274][T18915] usb usb9: usbfs: process 18915 (syz.4.5002) did not claim interface 0 before use
[  474.690336][T18918] bridge0: port 1(bridge_slave_0) entered listening state
[  475.248830][T18958] FAULT_INJECTION: forcing a failure.
[  475.248830][T18958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.248923][T18958] CPU: 0 UID: 0 PID: 18958 Comm: syz.3.5014 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  475.248958][T18958] Tainted: [L]=SOFTLOCKUP
[  475.248964][T18958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  475.248972][T18958] Call Trace:
[  475.248978][T18958]  <TASK>
[  475.248985][T18958]  dump_stack_lvl+0xe8/0x150
[  475.249008][T18958]  should_fail_ex+0x410/0x560
[  475.249028][T18958]  _copy_from_user+0x2d/0xb0
[  475.249043][T18958]  dvb_usercopy+0x15c/0x2e0
[  475.249056][T18958]  ? __pfx_dvb_frontend_do_ioctl+0x10/0x10
[  475.249067][T18958]  ? __pfx_dvb_usercopy+0x10/0x10
[  475.249082][T18958]  ? __fget_files+0x2a/0x420
[  475.249092][T18958]  ? __fget_files+0x3a2/0x420
[  475.249101][T18958]  ? __fget_files+0x2a/0x420
[  475.249112][T18958]  ? __pfx_dvb_frontend_ioctl+0x10/0x10
[  475.249123][T18958]  dvb_frontend_ioctl+0x59/0x80
[  475.249135][T18958]  __se_sys_ioctl+0xfc/0x170
[  475.249148][T18958]  do_syscall_64+0x166/0x520
[  475.249156][T18958]  ? trace_irq_disable+0x3b/0x140
[  475.249163][T18958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.249173][T18958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.249180][T18958] RIP: 0033:0x7fb04579e159
[  475.249189][T18958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.249196][T18958] RSP: 002b:00007fb046603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  475.249206][T18958] RAX: ffffffffffffffda RBX: 00007fb045a25fa0 RCX: 00007fb04579e159
[  475.249211][T18958] RDX: 0000000000000000 RSI: 0000000080106f53 RDI: 0000000000000003
[  475.249216][T18958] RBP: 00007fb04583506b R08: 0000000000000000 R09: 0000000000000000
[  475.249221][T18958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.249226][T18958] R13: 00007fb045a26038 R14: 00007fb045a25fa0 R15: 00007fff24459f98
[  475.249237][T18958]  </TASK>
[  475.317925][T18961] FAULT_INJECTION: forcing a failure.
[  475.317925][T18961] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  475.317943][T18961] CPU: 0 UID: 0 PID: 18961 Comm: syz.1.5015 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  475.317955][T18961] Tainted: [L]=SOFTLOCKUP
[  475.317958][T18961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  475.317964][T18961] Call Trace:
[  475.317968][T18961]  <TASK>
[  475.317972][T18961]  dump_stack_lvl+0xe8/0x150
[  475.317987][T18961]  should_fail_ex+0x410/0x560
[  475.317999][T18961]  prepare_alloc_pages+0x223/0x600
[  475.318016][T18961]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  475.318027][T18961]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  475.318037][T18961]  ? __pfx_policy_nodemask+0x10/0x10
[  475.318067][T18961]  ? rcu_is_watching+0x16/0xb0
[  475.318078][T18961]  alloc_pages_mpol+0x21e/0x390
[  475.318089][T18961]  alloc_pages_noprof+0xb1/0x2b0
[  475.318099][T18961]  alloc_pages_exact_noprof+0x3b/0xc0
[  475.318108][T18961]  snd_pcm_attach_substream+0x5c5/0xb10
[  475.318121][T18961]  snd_pcm_open_substream+0xb9/0x24f0
[  475.318137][T18961]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  475.318150][T18961]  ? mutex_init_lockdep+0xdf/0x110
[  475.318161][T18961]  snd_pcm_oss_open+0xf42/0x1c00
[  475.318181][T18961]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  475.318191][T18961]  ? tomoyo_check_open_permission+0x38e/0x470
[  475.318204][T18961]  ? do_raw_spin_lock+0x12b/0x2f0
[  475.318218][T18961]  ? __pfx_default_wake_function+0x10/0x10
[  475.318234][T18961]  chrdev_open+0x4d9/0x600
[  475.318243][T18961]  ? __pfx_chrdev_open+0x10/0x10
[  475.318251][T18961]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  475.318265][T18961]  ? __pfx_chrdev_open+0x10/0x10
[  475.318272][T18961]  do_dentry_open+0x816/0x1380
[  475.318284][T18961]  vfs_open+0x3b/0x340
[  475.318291][T18961]  ? path_openat+0x1428/0x1d60
[  475.318302][T18961]  path_openat+0x1443/0x1d60
[  475.318320][T18961]  do_file_open+0x23e/0x4a0
[  475.318332][T18961]  ? __pfx_do_file_open+0x10/0x10
[  475.318350][T18961]  ? _raw_spin_unlock+0x28/0x50
[  475.318361][T18961]  ? alloc_fd+0x651/0x6c0
[  475.318374][T18961]  do_sys_openat2+0x115/0x200
[  475.318382][T18961]  ? __se_sys_futex+0x3a8/0x450
[  475.318392][T18961]  ? __pfx_do_sys_openat2+0x10/0x10
[  475.318402][T18961]  ? rcu_is_watching+0x16/0xb0
[  475.318412][T18961]  __x64_sys_openat+0x138/0x170
[  475.318422][T18961]  do_syscall_64+0x166/0x520
[  475.318429][T18961]  ? trace_irq_disable+0x3b/0x140
[  475.318436][T18961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.318446][T18961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.318453][T18961] RIP: 0033:0x7f2d4bb9e159
[  475.318462][T18961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.318468][T18961] RSP: 002b:00007f2d4ca02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  475.318478][T18961] RAX: ffffffffffffffda RBX: 00007f2d4be25fa0 RCX: 00007f2d4bb9e159
[  475.318484][T18961] RDX: 0000000000000042 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  475.318489][T18961] RBP: 00007f2d4bc3506b R08: 0000000000000000 R09: 0000000000000000
[  475.318494][T18961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.318498][T18961] R13: 00007f2d4be26038 R14: 00007f2d4be25fa0 R15: 00007ffd05549958
[  475.318510][T18961]  </TASK>
[  475.674384][T18975] loop1: detected capacity change from 0 to 128
[  475.686399][T18975] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  475.686468][T18975] hpfs: filesystem error: improperly stopped
[  475.686509][T18975] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  475.686549][T18975] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  475.686570][T18975] hpfs: You really don't want any checks? You are crazy...
[  475.686725][T18975] hpfs: hpfs_map_sector(): read error
[  475.686747][T18975] hpfs: code page support is disabled
[  475.705857][T18975] hpfs: hpfs_map_4sectors(): unaligned read
[  475.705936][T18975] hpfs: hpfs_map_4sectors(): unaligned read
[  475.705974][T18975] hpfs: filesystem error: unable to find root dir
[  476.033293][T19000] Bluetooth: (null): Too short H5 packet
[  476.186503][T19011] batadv_slave_1: entered promiscuous mode
[  476.191156][T19010] batadv_slave_1: left promiscuous mode
[  476.222862][T19015] loop3: detected capacity change from 0 to 2048
[  476.228008][T19015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  476.355598][T19024] loop4: detected capacity change from 0 to 128
[  476.398367][T19024] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  476.405781][T19024] ext4 filesystem being mounted at /1391/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  476.419300][T19024] ecryptfs: Unknown parameter 'r0_size'
[  476.455573][   T34] audit: type=1800 audit(1789785176.191:1095): pid=19027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5044" name="file1" dev="tmpfs" ino=2900 res=0 errno=0
[  477.085376][T10898] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  477.221374][ T7845] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  477.248406][T10898] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  477.251066][T10898] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  477.251086][T10898] usb 4-1: Product: syz
[  477.251096][T10898] usb 4-1: SerialNumber: syz
[  477.253269][T10898] usb 4-1: config 0 descriptor??
[  477.438195][T19080] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5071'.
[  477.438257][T19080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5071'.
[  477.438394][T19080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5071'.
[  477.438405][T19080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5071'.
[  477.498795][T10898] usb 4-1: USB disconnect, device number 32
[  477.508102][T19084] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  477.511534][T19084] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  478.889502][T19130] loop4: detected capacity change from 0 to 512
[  478.896057][T19130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  478.947572][T19130] EXT4-fs (loop4): 1 truncate cleaned up
[  478.948917][T19130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.151053][ T7845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.226104][T19139] loop4: detected capacity change from 0 to 8192
[  479.232176][T14670] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  479.311304][T19141] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  479.392248][T14670] usb 4-1: Using ep0 maxpacket: 16
[  479.396261][T14670] usb 4-1: unable to get BOS descriptor or descriptor too short
[  479.396320][T14670] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[  479.403131][T14670] usb 4-1: config 4 has an invalid interface number: 127 but max is 0
[  479.403179][T14670] usb 4-1: config 4 has no interface number 0
[  479.403224][T14670] usb 4-1: config 4 interface 127 has no altsetting 0
[  479.411201][T14670] usb 4-1: language id specifier not provided by device, defaulting to English
[  479.419742][T14670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.419777][T14670] usb 4-1: Product: syz
[  479.419808][T14670] usb 4-1: SerialNumber: syz
[  479.629167][T19151] loop4: detected capacity change from 0 to 4096
[  479.645751][T19151] ntfs3(loop4): Failed to load $MFT (-22).
[  479.712575][T14670] usb 4-1: USB disconnect, device number 33
[  479.779193][T19149] loop1: detected capacity change from 0 to 32768
[  479.783745][T19149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5101 (19149)
[  479.813639][T19149] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  479.819122][T19149] BTRFS info (device loop1): using sha256 checksum algorithm
[  479.840113][T19157] loop4: detected capacity change from 0 to 512
[  479.966370][   T34] audit: type=1326 audit(1789785179.468:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  479.966442][   T34] audit: type=1326 audit(1789785179.468:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  479.985184][   T34] audit: type=1326 audit(1789785179.496:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  479.985234][   T34] audit: type=1326 audit(1789785179.496:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  479.985287][   T34] audit: type=1326 audit(1789785179.496:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  480.002779][   T34] audit: type=1326 audit(1789785179.496:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  480.002849][   T34] audit: type=1326 audit(1789785179.496:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  480.027080][   T34] audit: type=1326 audit(1789785179.534:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  480.041288][   T34] audit: type=1326 audit(1789785179.534:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.4.5105" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f019439e159 code=0x7ffc0000
[  480.057519][T19149] BTRFS info (device loop1): allowing degraded mounts
[  480.060722][T19149] BTRFS info (device loop1): enabling ssd optimizations
[  480.063914][T19149] BTRFS info (device loop1): disabling tree log
[  480.067238][T19149] BTRFS info (device loop1): turning on sync discard
[  480.069986][T19149] BTRFS info (device loop1): enabling free space tree
[  480.154549][T14452] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  481.425379][T19209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.599732][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5124'.
[  481.776236][T19219] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  481.844142][T19223] netlink: 'syz.4.5127': attribute type 5 has an invalid length.
[  482.436278][T10900] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  482.563598][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5138'.
[  482.628921][T10900] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  482.632678][T10900] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  482.635547][T10900] usb 2-1: config 0 has no interface number 0
[  482.637716][T10900] usb 2-1: config 0 interface 8 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  482.641983][T10900] usb 2-1: config 0 interface 8 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.642024][T10900] usb 2-1: config 0 interface 8 has no altsetting 0
[  482.642059][T10900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.651485][T10900] usb 2-1: config 0 descriptor??
[  483.096723][T10900] uclogic 0003:5543:0045.0011: interface is invalid, ignoring
[  483.311313][T10900] usb 2-1: USB disconnect, device number 40
[  483.730071][T19257] loop3: detected capacity change from 0 to 8
[  483.838318][T19261] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5144'.
[  483.838413][T19261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5144'.
[  484.087349][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5149'.
[  485.078285][T19286] loop1: detected capacity change from 0 to 512
[  485.078813][T19286] EXT4-fs: Ignoring removed bh option
[  485.100461][T19286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.100545][T19286] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.244597][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.630046][T14669] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  485.789894][T14669] usb 4-1: Using ep0 maxpacket: 32
[  485.790739][T14669] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0109, bcdDevice=ae.ff
[  485.791829][T14669] usb 4-1: config 247 has an invalid interface number: 92 but max is 0
[  485.791844][T14669] usb 4-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[  485.791854][T14669] usb 4-1: config 247 has no interface number 0
[  485.791875][T14669] usb 4-1: config 247 interface 92 altsetting 3 endpoint 0x6 has invalid wMaxPacketSize 0
[  485.791893][T14669] usb 4-1: config 247 interface 92 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  485.791907][T14669] usb 4-1: config 247 interface 92 has no altsetting 0
[  485.793974][T14669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.793985][T14669] usb 4-1: Product: syz
[  485.793991][T14669] usb 4-1: Manufacturer: syz
[  485.793996][T14669] usb 4-1: SerialNumber: syz
[  485.796914][T14669] kvaser_usb 4-1:247.92: error -ENODEV: Cannot get usb endpoint(s)
[  486.030226][T10900] usb 4-1: USB disconnect, device number 34
[  486.278545][T19308] loop1: detected capacity change from 0 to 4096
[  486.302610][T19310] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  486.310023][T19308] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  486.325436][T19311] loop4: detected capacity change from 0 to 512
[  486.336455][T19308] NILFS (loop1): mounting fs with errors
[  486.532550][T19317] loop1: detected capacity change from 0 to 1024
[  486.536358][T19317] EXT4-fs: Ignoring removed bh option
[  486.574963][T19317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  486.756273][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.002853][T19333] loop3: detected capacity change from 0 to 4096
[  487.009550][T19333] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  487.050073][T19333] ntfs3(loop3): ino=19, mi_enum_attr
[  487.058058][T19333] ntfs3(loop3): failed to convert "c46c" to iso8859-3
[  487.062893][T19333] ntfs3(loop3): ino=20, mi_enum_attr
[  487.334029][T19338] loop4: detected capacity change from 0 to 512
[  487.343152][T19338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  487.360665][T19338] EXT4-fs (loop4): 1 truncate cleaned up
[  487.383047][T19338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.324858][ T7845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.982468][T19377] loop3: detected capacity change from 0 to 128
[  488.988810][T19375] loop1: detected capacity change from 0 to 512
[  489.011340][T19375] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  489.017468][T19375] EXT4-fs (loop1): 1 truncate cleaned up
[  489.024786][T19375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.040696][T19380] Non-string source
[  489.094404][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.256567][T19390] loop3: detected capacity change from 0 to 128
[  489.276687][T19392] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  489.623270][T19395] loop3: detected capacity change from 0 to 32768
[  489.627124][T19395] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus (7:3) scanned by syz.3.5197 (19395)
[  489.627196][T19395] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  489.627210][T19395] btrfs: Unknown parameter 'fowner<00000000000000000000'
[  492.045125][T19448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5222'.
[  492.553000][T19459] loop4: detected capacity change from 0 to 512
[  492.557374][T19459] EXT4-fs (loop4): Test dummy encryption mode enabled
[  492.587321][T19459] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.5226: inode has both inline data and extents flags
[  492.587367][T19459] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  492.591762][T19459] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.5226: couldn't read orphan inode 15 (err -117)
[  492.591776][T19459] loop4: lost filesystem error report for type 5 error -117
[  492.595245][    C1] EXT4-fs (loop4): error count since last fsck: 2
[  492.595256][    C1] EXT4-fs (loop4): initial error at time 1789785191: ext4_orphan_get:1403: inode 15
[  492.595270][    C1] EXT4-fs (loop4): last error at time 1789785191: ext4_orphan_get:1408
[  492.596152][T19459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.722505][ T7845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.976561][T19468] tc_dump_action: action bad kind
[  493.238838][T19481] loop3: detected capacity change from 0 to 512
[  493.249778][T19481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  493.258736][T19481] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.5236: bad orphan inode 131083
[  493.258785][T19481] loop3: lost filesystem error report for type 5 error -117
[  493.263129][T19481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.334135][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.731995][T19508] FAULT_INJECTION: forcing a failure.
[  493.731995][T19508] name failslab, interval 1, probability 0, space 0, times 0
[  493.736179][T19508] CPU: 1 UID: 0 PID: 19508 Comm: syz.1.5247 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.736194][T19508] Tainted: [L]=SOFTLOCKUP
[  493.736197][T19508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  493.736202][T19508] Call Trace:
[  493.736206][T19508]  <TASK>
[  493.736211][T19508]  dump_stack_lvl+0xe8/0x150
[  493.736226][T19508]  should_fail_ex+0x410/0x560
[  493.736239][T19508]  should_failslab+0xa8/0x100
[  493.736252][T19508]  __kmalloc_cache_noprof+0xa3/0x600
[  493.736265][T19508]  ? call_usermodehelper_setup+0x8e/0x270
[  493.736276][T19508]  ? call_usermodehelper_setup+0x8e/0x270
[  493.736285][T19508]  ? __request_module+0x2ec/0x630
[  493.736297][T19508]  call_usermodehelper_setup+0x8e/0x270
[  493.736306][T19508]  ? __pfx_free_modprobe_argv+0x10/0x10
[  493.736316][T19508]  __request_module+0x3ba/0x630
[  493.736329][T19508]  ? __pfx___request_module+0x10/0x10
[  493.736343][T19508]  ? __get_fs_type+0x21/0x280
[  493.736353][T19508]  ? __get_fs_type+0x21/0x280
[  493.736362][T19508]  ? __get_fs_type+0x267/0x280
[  493.736372][T19508]  ? __get_fs_type+0x21/0x280
[  493.736382][T19508]  get_fs_type+0x7f/0x1b0
[  493.736392][T19508]  __se_sys_fsopen+0x8b/0x2c0
[  493.736401][T19508]  do_syscall_64+0x166/0x520
[  493.736410][T19508]  ? trace_irq_disable+0x3b/0x140
[  493.736417][T19508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.736427][T19508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.736434][T19508] RIP: 0033:0x7f2d4bb9e159
[  493.736443][T19508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.736450][T19508] RSP: 002b:00007f2d4ca02028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  493.736460][T19508] RAX: ffffffffffffffda RBX: 00007f2d4be25fa0 RCX: 00007f2d4bb9e159
[  493.736466][T19508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[  493.736471][T19508] RBP: 00007f2d4bc3506b R08: 0000000000000000 R09: 0000000000000000
[  493.736476][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.736481][T19508] R13: 00007f2d4be26038 R14: 00007f2d4be25fa0 R15: 00007ffd05549958
[  493.736493][T19508]  </TASK>
[  494.421285][T19515] loop3: detected capacity change from 0 to 32768
[  494.442606][T19515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5250 (19515)
[  494.511205][T19515] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  494.511276][T19515] BTRFS info (device loop3): using sha256 checksum algorithm
[  494.511369][T19515] BTRFS error (device loop3): superblock metadata_uuid doesn't match metadata uuid of fs_devices: 395ef67a-297e-477c-816d-cd80a5b93e5d != 00000000-0000-0000-0000-000000000000
[  494.511388][T19515] BTRFS error (device loop3): dev_item UUID does not match metadata fsid: 00000000-0000-0000-0000-000000000000 != 395ef67a-297e-477c-816d-cd80a5b93e5d
[  494.511405][T19515] BTRFS error (device loop3): superblock contains fatal errors
[  494.511487][T19515] BTRFS error (device loop3): open_ctree failed: -EINVAL
[  495.042566][T19533] netlink: zone id is out of range
[  495.042614][T19533] netlink: zone id is out of range
[  495.042639][T19533] netlink: zone id is out of range
[  495.042685][T19533] netlink: zone id is out of range
[  495.042710][T19533] netlink: zone id is out of range
[  495.042737][T19533] netlink: zone id is out of range
[  495.042742][T19533] netlink: zone id is out of range
[  495.042745][T19533] netlink: zone id is out of range
[  495.042749][T19533] netlink: zone id is out of range
[  495.042752][T19533] netlink: zone id is out of range
[  495.204433][T19542] loop3: detected capacity change from 0 to 256
[  495.290990][T19548] loop1: detected capacity change from 0 to 4096
[  495.294032][T19548] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  495.315099][T19548] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  495.323991][T19548] ntfs3(loop1): ino=1a, mi_enum_attr
[  495.326108][T19548] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  495.575505][T19553] loop1: detected capacity change from 0 to 32768
[  495.579142][T19553] xfs: Deprecated parameter 'noikeep'
[  495.581423][T19553] XFS: noikeep mount option is deprecated.
[  495.585037][T19553] XFS (loop1): Invalid device [./file0], error=-15
[  495.676672][T19563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5273'.
[  495.832305][T19569] loop3: detected capacity change from 0 to 2048
[  495.853274][T19569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  495.921435][T19569] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #12: block 2: comm syz.3.5276: lblock 0 mapped to illegal pblock 2 (length 1)
[  495.922458][T19569] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #12: block 2: comm syz.3.5276: lblock 0 mapped to illegal pblock 2 (length 1)
[  495.965932][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.050134][T15843] IPVS: starting estimator thread 0...
[  496.126052][T19584] loop3: detected capacity change from 0 to 16
[  496.133154][T19584] erofs (device loop3): mounted with root inode @ nid 36.
[  496.150417][T19580] IPVS: using max 93 ests per chain, 223200 per kthread
[  496.163394][T19584] erofs (device loop3): negative i_size @ nid 86
[  496.398780][T19592] loop1: detected capacity change from 0 to 4096
[  496.871561][T19608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5293'.
[  497.581511][T19619] input: syz0 as /devices/virtual/input/input33
[  497.843595][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5303'.
[  497.972101][T19623] loop4: detected capacity change from 0 to 32768
[  497.977276][T19623] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5300 (19623)
[  497.989134][T19623] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  497.989178][T19623] BTRFS info (device loop4): using sha256 checksum algorithm
[  498.007567][T19638] loop1: detected capacity change from 0 to 256
[  498.008097][T19638] exfat: Deprecated parameter 'utf8'
[  498.008162][T19638] exfat: Deprecated parameter 'namecase'
[  498.008181][T19638] exfat: Deprecated parameter 'utf8'
[  498.025227][T19638] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  498.066307][T19623] BTRFS info (device loop4): enabling ssd optimizations
[  498.066345][T19623] BTRFS info (device loop4): turning on async discard
[  498.066380][T19623] BTRFS info (device loop4): enabling free space tree
[  498.119242][T19623] BTRFS warning (device loop4): get dev_stats failed, device not found
[  498.140480][ T7845] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  498.364532][T19663] gtp0: entered promiscuous mode
[  498.367883][T19663] gtp0: entered allmulticast mode
[  498.921238][T19691] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  498.921238][T19691] Please contact the netfilter-devel mailing list or update your nftables rules.
[  499.198856][T19698] loop3: detected capacity change from 0 to 128
[  499.211333][T19698] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  499.215826][T19698] ext4 filesystem being mounted at /531/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  499.250938][T19693] loop4: detected capacity change from 0 to 32768
[  499.264716][T19693] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  499.284105][T16111] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  499.317463][T19693] XFS (loop4): Ending clean mount
[  499.353677][T19712] loop3: detected capacity change from 0 to 512
[  499.371725][T19712] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.5329: inode has both inline data and extents flags
[  499.371793][T19712] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  499.372028][T19712] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.5329: couldn't read orphan inode 15 (err -117)
[  499.372067][T19712] loop3: lost filesystem error report for type 5 error -117
[  499.373015][ T7845] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  499.378241][T19712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.475448][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5332'.
[  499.506877][T16111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.108591][T19747] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in;
[  500.108591][T19747]    program syz.3.5346 not setting count and/or reply_len properly
[  500.568772][T19763] netlink: 'syz.1.5353': attribute type 1 has an invalid length.
[  501.300706][T19777] FAULT_INJECTION: forcing a failure.
[  501.300706][T19777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.306072][T19777] CPU: 0 UID: 0 PID: 19777 Comm: syz.3.5359 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  501.306096][T19777] Tainted: [L]=SOFTLOCKUP
[  501.306101][T19777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  501.306109][T19777] Call Trace:
[  501.306116][T19777]  <TASK>
[  501.306123][T19777]  dump_stack_lvl+0xe8/0x150
[  501.306147][T19777]  should_fail_ex+0x410/0x560
[  501.306166][T19777]  _copy_to_user+0x31/0xb0
[  501.306185][T19777]  move_addr_to_user+0x13a/0x210
[  501.306202][T19777]  __sys_getsockname+0x20f/0x2d0
[  501.306219][T19777]  ? __pfx___sys_getsockname+0x10/0x10
[  501.306241][T19777]  ? rcu_is_watching+0x16/0xb0
[  501.306260][T19777]  __x64_sys_getpeername+0x80/0x90
[  501.306277][T19777]  do_syscall_64+0x166/0x520
[  501.306291][T19777]  ? trace_irq_disable+0x3b/0x140
[  501.306302][T19777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.306319][T19777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.306331][T19777] RIP: 0033:0x7fb04579e159
[  501.306344][T19777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.306355][T19777] RSP: 002b:00007fb046603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000034
[  501.306369][T19777] RAX: ffffffffffffffda RBX: 00007fb045a25fa0 RCX: 00007fb04579e159
[  501.306379][T19777] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 0000000000000003
[  501.306387][T19777] RBP: 00007fb04583506b R08: 0000000000000000 R09: 0000000000000000
[  501.306396][T19777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  501.306405][T19777] R13: 00007fb045a26038 R14: 00007fb045a25fa0 R15: 00007fff24459f98
[  501.306425][T19777]  </TASK>
[  501.701988][T19797] tipc: Started in network mode
[  501.702044][T19797] tipc: Node identity aaaaaaaaaa15, cluster identity 4711
[  501.702375][T19797] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  501.821634][T14223] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  501.982997][T14223] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.08
[  501.985061][T14223] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  501.985084][T14223] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  501.985098][T14223] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  501.985115][T14223] usb 4-1: config 0 interface 0 has no altsetting 0
[  501.985138][T14223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.987163][T14223] usb 4-1: config 0 descriptor??
[  502.429703][T14223] hid_parser_main: 91 callbacks suppressed
[  502.430292][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430358][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430388][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430416][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430444][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430472][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430499][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430527][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430555][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430565][T14223] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0
[  502.430610][T14223] pantherlord 0003:0F30:0111.0012: unbalanced collection at end of report description
[  502.430902][T14223] pantherlord 0003:0F30:0111.0012: parse failed
[  502.430928][T14223] pantherlord 0003:0F30:0111.0012: probe with driver pantherlord failed with error -22
[  502.651903][T14223] usb 4-1: USB disconnect, device number 35
[  502.718634][   T53] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  502.879556][   T53] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  502.884700][   T53] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.884772][   T53] usb 2-1: config 0 has no interfaces?
[  502.884817][   T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.897003][T14670] tipc: Node number set to 12561066
[  502.900403][   T53] usb 2-1: config 0 descriptor??
[  503.130069][T19803] netlink: 'syz.1.5372': attribute type 1 has an invalid length.
[  503.155161][T19803] 8021q: adding VLAN 0 to HW filter on device bond2
[  503.188054][T19803] bond2: (slave veth3): Enslaving as an active interface with a down link
[  503.272420][T19807] netlink: 'syz.1.5372': attribute type 10 has an invalid length.
[  503.272473][T19807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5372'.
[  503.287893][T19803] bond2: (slave dummy0): making interface the new active one
[  503.299298][T19803] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  503.302524][T19807] dummy0: entered promiscuous mode
[  503.309079][T19807] bond2: (slave dummy0): Releasing active interface
[  503.838854][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5381'.
[  503.868019][T19826] loop4: detected capacity change from 0 to 512
[  503.872529][T19826] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  503.873232][T19826] EXT4-fs (loop4): invalid journal inode
[  503.873266][T19826] EXT4-fs (loop4): can't get journal size
[  503.877782][T19826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  503.878222][T19826] System zones: 1-12, 13-13
[  503.908315][T19826] EXT4-fs (loop4): 1 truncate cleaned up
[  503.909890][T19826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.968917][ T7845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.181975][T14223] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  504.342588][T14223] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  504.343514][T14223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  504.345294][T14223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.345305][T14223] usb 4-1: Product: syz
[  504.345312][T14223] usb 4-1: Manufacturer: syz
[  504.345317][T14223] usb 4-1: SerialNumber: syz
[  504.571204][T14223] snd-usb-6fire 4-1:1.0: unknown device firmware state received from device: 
[  504.571252][T14223] eb aa 55 00 00 00 00 00 
[  504.571338][T14223] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -5
[  504.793842][   T53] usb 4-1: USB disconnect, device number 36
[  505.693241][T10898] usb 2-1: USB disconnect, device number 42
[  506.259068][T19887] loop3: detected capacity change from 0 to 32768
[  506.265504][T19887] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: extent list l_next_free_rec 3329 exceeds l_count 19
[  506.272890][T19887] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  506.273024][T19887] OCFS2: File system is now read-only.
[  506.273054][T19887] (syz.3.5411,19887,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  506.273160][T19887] (syz.3.5411,19887,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  506.273320][T19887] (syz.3.5411,19887,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  506.273357][T19887] (syz.3.5411,19887,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  506.273394][T19887] (syz.3.5411,19887,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  506.273432][T19887] (syz.3.5411,19887,0):ocfs2_initialize_super:2194 ERROR: status = -30
[  506.273523][T19887] (syz.3.5411,19887,0):ocfs2_fill_super:1177 ERROR: status = -30
[  506.848325][T19903] loop1: detected capacity change from 0 to 32768
[  506.868029][T19903] JBD2: Ignoring recovery information on journal
[  506.910439][T19903] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  507.114814][T14452] ocfs2: Unmounting device (7,1) on (node local)
[  507.281071][   T34] audit: type=1800 audit(1789785205.057:1105): pid=19908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5419" name=08 dev="sda1" ino=1940 res=0 errno=0
[  507.688796][T19911] loop1: detected capacity change from 0 to 32768
[  507.704041][T19911] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  507.748027][T19911] XFS (loop1): Ending clean mount
[  507.772064][T19911] XFS (loop1): Quotacheck needed: Please wait.
[  507.935064][T19911] XFS (loop1): Quotacheck: Done.
[  507.981074][T14452] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  508.577950][T19938] FAULT_INJECTION: forcing a failure.
[  508.577950][T19938] name fail_futex, interval 1, probability 0, space 0, times 1
[  508.578075][T19938] CPU: 1 UID: 0 PID: 19938 Comm: syz.1.5429 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  508.578098][T19938] Tainted: [L]=SOFTLOCKUP
[  508.578102][T19938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  508.578109][T19938] Call Trace:
[  508.578115][T19938]  <TASK>
[  508.578121][T19938]  dump_stack_lvl+0xe8/0x150
[  508.578142][T19938]  should_fail_ex+0x410/0x560
[  508.578161][T19938]  get_futex_key+0x1b4/0x1580
[  508.578177][T19938]  ? __pfx_do_raw_write_lock+0x10/0x10
[  508.578195][T19938]  ? __pfx_get_futex_key+0x10/0x10
[  508.578205][T19938]  ? do_raw_spin_lock+0x12b/0x2f0
[  508.578227][T19938]  futex_wake+0x119/0x5f0
[  508.578246][T19938]  ? __pfx_futex_wake+0x10/0x10
[  508.578263][T19938]  ? netlink_bind+0xba9/0xda0
[  508.578287][T19938]  do_futex+0x458/0x4e0
[  508.578302][T19938]  ? __pfx_do_futex+0x10/0x10
[  508.578315][T19938]  ? __sys_bind+0x306/0x410
[  508.578332][T19938]  __se_sys_futex+0x3a8/0x450
[  508.578348][T19938]  ? __pfx___se_sys_futex+0x10/0x10
[  508.578362][T19938]  ? rcu_is_watching+0x16/0xb0
[  508.578378][T19938]  ? __x64_sys_futex+0x21/0xf0
[  508.578392][T19938]  do_syscall_64+0x166/0x520
[  508.578403][T19938]  ? trace_irq_disable+0x3b/0x140
[  508.578412][T19938]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.578426][T19938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.578436][T19938] RIP: 0033:0x7f2d4bb9e159
[  508.578446][T19938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.578456][T19938] RSP: 002b:00007f2d4ca020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  508.578468][T19938] RAX: ffffffffffffffda RBX: 00007f2d4be25fa8 RCX: 00007f2d4bb9e159
[  508.578475][T19938] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2d4be25fac
[  508.578482][T19938] RBP: 00007f2d4be25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  508.578489][T19938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.578495][T19938] R13: 00007f2d4be26038 R14: 00007ffd05549870 R15: 00007ffd05549958
[  508.578540][T19938]  </TASK>
[  508.806860][T19946] net_ratelimit: 872 callbacks suppressed
[  508.806927][T19946] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  509.087630][T19959] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  509.301017][   T34] audit: type=1800 audit(1789785206.939:1106): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5443" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  509.329935][T15719] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3
[  509.330182][T15719] ref_tracker: netdev@ffff88811319c700 has 1/2 users at
[  509.330182][T15719]      netdev_get_by_index+0x79/0xb0
[  509.330182][T15719]      fib6_nh_init+0x285/0x1e40
[  509.330182][T15719]      ip6_route_info_create_nh+0x16a/0xad0
[  509.330182][T15719]      addrconf_f6i_alloc+0x3b7/0x630
[  509.330182][T15719]      ipv6_add_addr+0x59c/0x1110
[  509.330182][T15719]      inet6_addr_add+0x43c/0xb50
[  509.330182][T15719]      inet6_rtm_newaddr+0x9fc/0xe00
[  509.330182][T15719]      rtnetlink_rcv_msg+0x802/0xc00
[  509.330182][T15719]      netlink_rcv_skb+0x226/0x4a0
[  509.330182][T15719]      netlink_unicast+0x7bd/0x940
[  509.330182][T15719]      netlink_sendmsg+0x813/0xb40
[  509.330182][T15719]      sock_sendmsg_nosec+0x13a/0x180
[  509.330182][T15719]      __sys_sendto+0x408/0x5a0
[  509.330182][T15719]      __x64_sys_sendto+0xde/0x100
[  509.330182][T15719]      do_syscall_64+0x166/0x520
[  509.330182][T15719]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.330182][T15719] 
[  509.330248][T15719] ref_tracker: netdev@ffff88811319c700 has 1/2 users at
[  509.330248][T15719]      ipv6_add_dev+0x50f/0x13a0
[  509.330248][T15719]      addrconf_notify+0x771/0x1050
[  509.330248][T15719]      notifier_call_chain+0x1a5/0x3d0
[  509.330248][T15719]      register_netdevice+0x18a4/0x1eb0
[  509.330248][T15719]      tun_set_iff+0x82b/0xf20
[  509.330248][T15719]      __tun_chr_ioctl+0x7e5/0x1e70
[  509.330248][T15719]      __se_sys_ioctl+0xfc/0x170
[  509.330248][T15719]      do_syscall_64+0x166/0x520
[  509.330248][T15719]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.330248][T15719] 
