last executing test programs:

3m28.731627957s ago: executing program 1 (id=249):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xaa3a}}}, 0x24}, 0x1, 0x0, 0x0, 0x20408d1}, 0x20000818)
gettid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

3m28.47553903s ago: executing program 1 (id=254):
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x7, 0x0, 0x83}, {0x9, 0x5, 0xb187}], 0x2, 0xfffffffffffffffe, 0x48, 0x0, 0xa, 0x5c})

3m28.349071455s ago: executing program 1 (id=258):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x2b, 0x0, @val=@iter={0x0}}, 0x20)

3m28.271010675s ago: executing program 1 (id=260):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000280)=ANY=[@ANYBLOB="8011a73c6f5c17ab4018ee31a2f01978447cc2ac"], 0x41, 0x1505, &(0x7f0000000840)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./bus\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x185082, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0)

3m28.176130272s ago: executing program 1 (id=261):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x36}, 0x41fe)

3m27.780315742s ago: executing program 1 (id=266):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
process_mrelease(0xffffffffffffffff, 0x700000000000013)

3m27.585426832s ago: executing program 32 (id=266):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
process_mrelease(0xffffffffffffffff, 0x700000000000013)

3m3.461161579s ago: executing program 3 (id=546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000018c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3m3.380469945s ago: executing program 3 (id=547):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c00)=@delchain={0x6a4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x678, 0x2, [@TCA_BPF_ACT={0x674, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x118, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x2a4, 0x13, 0x0, 0x0, {{0x7}, {0x23c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc9, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd924c9446734f9e4568"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x75, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a"}}, @TCA_IPT_TARG={0xa9, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x41, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd02a67777e4d51dfa578f9f5021013f0c9a057bc84da50e9717ad55f6dba06dd18f82"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3m3.380158763s ago: executing program 3 (id=548):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141")
ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000032000000000000008a0100003801000001000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141000000000000000008000000000000000000000000000000726169640000000000000000000000007261696431203120382032202d202e2f6465762f6c6f6f7030202d202e2f6465762f6c6f6f703100")
ioctl(r0, 0xc138fd0c, &(0x7f0000000500)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141")

3m3.019815554s ago: executing program 3 (id=555):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000005c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x7ff}}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8}, {@uni_xlate}, {@utf8}, {@fat=@showexec}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@numtail}]}, 0x0, 0x2c4, &(0x7f0000002880)="$eJzs3M9rE1sUwPHTpG3SlDZZlAfvweMdnhvdDG38C4K0IAaU2oh2IUztREPGJGRiJCK2O7f+HcWlKwX1H+jGnXtxUwTBTRfiSOZHm6ajrWnrtOb7gTKn98zJ3OHelHsHOls3n92vlh2jbLYkkVZJiKzLtkiuGwVGgmPCi8el17pcmPzy/t/rt5avFIrF+UXVhcLSxbyqTv/3+uHj5/+/bU3eeDH9KiWbudtbn/MfNv/a/Hvr21L46XURU1fq9Za5Ylu6WnGqhuo12zIdSys1x2q21Oxe0c+X7Xqj0VGztjqVaTQtx1Gz1tGq1dFWXVvNjpp3zUpNDcPQqYwMm+QvV5Q2FhfNwol0BnGYiGpsNgtmMjJZ2vgdnQIAAKdLXOv/exVHK47W6i396fo/Ib35A9b/IkO9/h9U48epyPUkzpbu+j8TfH/3Yv0PAAAAAAAAAAAAAAAAAAAAAMBZsO26Wdd1s+Ex/EmJSFpEwt/j7idOBuM/3Hr+cS8tYj9tl9ol/+jnC2WpiC2WzI6JfPXmQ8CPFy4X52fVk5M39lpQv9YuJSUV1ody0fVzfr321q/JmGR6r5+XrMxE1+cj6tulcTl/zk0FV7bEkKy8uyN1sWXVm9e79U/mVC9dLfbVT3jnAQAAAADwJzB0x779u5c3NHxtSF/eb9x9PiDZA54P9O2vR+Wf0fjuGwAAAACAYeKMS9W0bavpdDfjXtB5FLQMGITPC476OcceTBxnx0Tivp30YU/ujmzQ8vK0jMVhJ1J/amxfS3SQPNoofxKRPS0zsQ/3wIGb3JmrHx/434CIk5d3J4nfEtdfJAAAAAAnJdwGjMTdEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhthh3yIWnj/IS8h6LpeM5y4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0+F7AAAA///L0gt4")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

3m2.966428452s ago: executing program 3 (id=557):
unshare(0x28040680)
r0 = inotify_init()
inotify_add_watch(r0, 0x0, 0x10)

3m2.669406832s ago: executing program 3 (id=563):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000300)="5c63de0da5f7e9b2e8cbb7be405ad730e7a15699e65dbf9d3b54577bba5035e9b61d9ad1bef96398fa412fcf3208e98ee1179ae98a557c5dc8a2df4ed0e3b16c87ec863a2f4e23d5c8d46d6e4ee64ca00f22b44572678783f5ee83fda7b36df0e6ed905f87a29f57d3063fc46508e21a00acb4ee4ec297fcccd9c8a9334acd1c93bd0ad076bb2ace07", 0x89}, {&(0x7f00000004c0)="cab7ebaf680975afd192fa063862cea818414f71175d94c3e8130ad98d1015794ea4893e4da910deb3b224d40eb0e824a6abe6ffde216e697bc3f4b70587d93c7c51279b6041b74ae43055794485fd942979851a6f5a7da3878de6ccf25c49774a9a31a983f2e04df5d0301dfa295638b080c4d34a0acb1bf36a053868f7abbb7c5ab42e35188d45aa4c2f4104a6e696445e6e2d931d2bd225a40400bd46e9c78ab84e8f161f4c957a73ef300cd22939ab2f758f602cb24173bc119e5cb298ee9a02da6eb030340bd92f4127fb84bf71550ce97267b21bb793c93da91bb5773725054767d6b5be692942486593044b5abab07858824cc5f2eae2d0925d95c8c4f517001ad2cfed1387b172817f72cbf4ad5887e5c837fe8240ff4794bead43720f805933f0a6f3b6c4b20a36e25d851d5d9be727b596a9640b709c54bd0bed07d4e9871128b70773130160144096ccfb70b24e4cbb281bfde330462351aad6b0d929da8c00fcdecfb147a7db1dc55a6aae3524adfbe99184e348dabce3af56f3c6fcc5011cbbbdfd260f1b3b2240", 0x18e}, {&(0x7f0000001300)="80f0863cd9932955a29a0bb362c56abf346d17fa455773be7c9224352b0ce8c2ca6254f8d4a2514018ae9d54dac6832beccd115075442bfd86ada3b0b38c77a42f5196139e34d65bb1d6d56753918ffcb4c34960e26fe0b5b8c7194762fa83825a85ec4388090406aef4bd341292a69b0a8ce9cc82f59eac7f253307f2b7c65c76664716dff5bc9c11bdb5cfd222630ff010a37e2ecea054b7d81754b2e37cb2a9a0c9a92cf9cc4bc0cfa8f5f6dbf5b599f58ac4a9284ee714ff0a361419b337a4cf9a407c848aee9ccb718678060b59", 0xd0}], 0x4, 0x0, 0x0, 0x2c}, 0x44004)

3m2.613992423s ago: executing program 33 (id=563):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000300)="5c63de0da5f7e9b2e8cbb7be405ad730e7a15699e65dbf9d3b54577bba5035e9b61d9ad1bef96398fa412fcf3208e98ee1179ae98a557c5dc8a2df4ed0e3b16c87ec863a2f4e23d5c8d46d6e4ee64ca00f22b44572678783f5ee83fda7b36df0e6ed905f87a29f57d3063fc46508e21a00acb4ee4ec297fcccd9c8a9334acd1c93bd0ad076bb2ace07", 0x89}, {&(0x7f00000004c0)="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", 0x18e}, {&(0x7f0000001300)="80f0863cd9932955a29a0bb362c56abf346d17fa455773be7c9224352b0ce8c2ca6254f8d4a2514018ae9d54dac6832beccd115075442bfd86ada3b0b38c77a42f5196139e34d65bb1d6d56753918ffcb4c34960e26fe0b5b8c7194762fa83825a85ec4388090406aef4bd341292a69b0a8ce9cc82f59eac7f253307f2b7c65c76664716dff5bc9c11bdb5cfd222630ff010a37e2ecea054b7d81754b2e37cb2a9a0c9a92cf9cc4bc0cfa8f5f6dbf5b599f58ac4a9284ee714ff0a361419b337a4cf9a407c848aee9ccb718678060b59", 0xd0}], 0x4, 0x0, 0x0, 0x2c}, 0x44004)

2m36.838958419s ago: executing program 0 (id=879):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x7)

2m36.838850997s ago: executing program 0 (id=880):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = eventfd2(0xffffffff, 0x80000)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

2m36.78034299s ago: executing program 0 (id=881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0)

2m36.780118458s ago: executing program 0 (id=882):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x14014)

2m36.71032334s ago: executing program 0 (id=883):
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x24)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000001440)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65}, 0x94)

2m36.71003781s ago: executing program 0 (id=884):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sync()

2m21.643981415s ago: executing program 34 (id=884):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sync()

1m11.383607459s ago: executing program 5 (id=1947):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

1m11.305672853s ago: executing program 5 (id=1951):
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0x3, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x20}, @generic={0x95}], &(0x7f0000001100)='GPL\x00', 0x2, 0x1000, &(0x7f0000001140)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m11.227406778s ago: executing program 5 (id=1954):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2000)
fallocate(r0, 0x21, 0x0, 0x200000000000000)

1m11.164006191s ago: executing program 5 (id=1956):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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")
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x848, &(0x7f0000000040)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2)

1m11.09717483s ago: executing program 5 (id=1958):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f00000000c0)={[{@rescan_uuid_tree}, {@datasum}, {@autodefrag}, {@nossd}, {@acl}, {@user_subvol_rm}, {@noacl}, {@clear_cache}, {@rescue={'rescue', 0x3d, 'idatacsums'}}, {@discard_async}, {@nodatacow}, {@space_cache_v2}, {@nodiscard}, {@enospc_debug}, {@nospace_cache}]}, 0x9, 0x559d, &(0x7f0000004040)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = open(&(0x7f0000000300)='.\x00', 0x8c00, 0x5)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, 0x0, 0x0)

1m10.743463389s ago: executing program 5 (id=1963):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m10.65388873s ago: executing program 35 (id=1963):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

29.355011268s ago: executing program 2 (id=2531):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce)

29.203516962s ago: executing program 2 (id=2532):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4400000010000ffffeffff160000002508000000", @ANYRES32=0x0, @ANYBLOB="000000000006000014001280090001007665746800000000040002800800290036850700080028"], 0x44}, 0x1, 0x0, 0x0, 0x24800}, 0x4000000)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

29.156033873s ago: executing program 2 (id=2533):
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)

29.155781807s ago: executing program 2 (id=2534):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

29.063714627s ago: executing program 2 (id=2535):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYBLOB="0000000000000000b7020000140000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000010162000008001a"], 0x24}], 0x1}, 0x0)

28.627081251s ago: executing program 2 (id=2540):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2c00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1)
ioctl$PPPIOCATTCHAN(r1, 0x80047458, 0x0)

28.535544414s ago: executing program 36 (id=2540):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2c00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1)
ioctl$PPPIOCATTCHAN(r1, 0x80047458, 0x0)

1.123683044s ago: executing program 7 (id=2865):
userfaultfd(0x80001)

1.114793996s ago: executing program 7 (id=2868):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000001480)={0x0, "5fa80a9ae0ac5562b31eb6117a595b179b56460eb5a424b2417cb43eee961349", 0x2, 0x5, 0xffff, 0x80000})

1.024453944s ago: executing program 4 (id=2869):
socket$inet(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x20}, 0x2)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x1, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x23fd, 0xa334, 0x1, 0x0, 0x0)

1.024278034s ago: executing program 7 (id=2870):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r2, 0x0, 0x3, 0x2, &(0x7f0000001400)='!i', 0x5})

1.023971697s ago: executing program 7 (id=2871):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0x20000}, 0x0, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

472.344966ms ago: executing program 6 (id=2878):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), 0x8)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

406.679216ms ago: executing program 6 (id=2879):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xca})
fstat(r0, &(0x7f0000002a00))

406.46218ms ago: executing program 6 (id=2880):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723dd69207eb2c6e6c733d6575632d6a702c756d61736b3d30303030303030303030303030303030303030303031312c00"], 0x1, 0x5d1, &(0x7f0000001c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)

283.181857ms ago: executing program 4 (id=2881):
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x6000000, 0x1})

225.472848ms ago: executing program 6 (id=2882):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0x31, 0x0, @val=@tracing={0x0, 0xdf42}}, 0x20)

225.237776ms ago: executing program 4 (id=2883):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x2, @void}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, r4, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x20040000)

150.184643ms ago: executing program 7 (id=2884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x80, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @random="ce99a8ba8228"}, 0x0, @default, 0xd, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7f}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014)

127.104314ms ago: executing program 6 (id=2885):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='!*:n_existent_event:mod:syz_mod_123', 0x23)

117.621874ms ago: executing program 4 (id=2886):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x1000], [0x2, 0x9]], '\x00', [{}, {0x0, 0x6}, {0x0, 0x1000}, {0x11, 0x20012}, {0x8}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2})

35.723897ms ago: executing program 4 (id=2887):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x10a)
mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, &(0x7f00000000c0)='rdma')

3.274807ms ago: executing program 4 (id=2888):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10100000, r1, 0x4}, 0x38)

3.004954ms ago: executing program 6 (id=2889):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}})

0s ago: executing program 7 (id=2890):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000210009030800000019dcdf2501000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

kernel console output (not intermixed with test programs):

tect_reserved_inode:182: inode 3
[  212.360117][    C0] EXT4-fs (loop2): last error at time 1789785570: ext4_protect_reserved_inode:182: inode 3
[  212.362771][T10512] EXT4-fs (loop2): failed to initialize system zone (-117)
[  212.362861][T10512] EXT4-fs (loop2): mount failed
[  212.427773][ T5771] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  212.432860][ T5771] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  212.436764][ T5771] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  212.441002][ T5771] usb 6-1: config 220 has no interface number 2
[  212.441052][ T5771] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  212.441070][ T5771] usb 6-1: config 220 interface 0 has no altsetting 0
[  212.441081][ T5771] usb 6-1: config 220 interface 76 has no altsetting 0
[  212.441092][ T5771] usb 6-1: config 220 interface 1 has no altsetting 0
[  212.464053][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.464105][ T5771] usb 6-1: Product: syz
[  212.464159][ T5771] usb 6-1: Manufacturer: syz
[  212.464192][ T5771] usb 6-1: SerialNumber: syz
[  212.507245][T10517] loop2: detected capacity change from 0 to 2048
[  212.517771][T10517] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.590750][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1893'.
[  212.593912][T10519] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1893'.
[  212.594678][T10519] netlink: 'syz.2.1893': attribute type 3 has an invalid length.
[  212.594691][T10519] netlink: 'syz.2.1893': attribute type 2 has an invalid length.
[  212.594699][T10519] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1893'.
[  212.682270][ T5771] usb 6-1: selecting invalid altsetting 0
[  212.682577][ T5771] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  212.682627][ T5771] uvcvideo 6-1:220.0: No valid video chain found.
[  212.698481][ T5771] usb 6-1: selecting invalid altsetting 0
[  212.700704][ T5771] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  212.707755][ T5771] usb 6-1: USB disconnect, device number 10
[  212.719381][T10525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1896'.
[  213.036594][   T54] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  213.198577][   T54] usb 5-1: Using ep0 maxpacket: 16
[  213.205524][   T54] usb 5-1: unable to get BOS descriptor or descriptor too short
[  213.208924][   T54] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  213.213737][   T54] usb 5-1: config 1 interface 0 has no altsetting 0
[  213.221192][   T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.221242][   T54] usb 5-1: Product: syz
[  213.221297][   T54] usb 5-1: Manufacturer: syz
[  213.221340][   T54] usb 5-1: SerialNumber: syz
[  213.301546][T10535] loop5: detected capacity change from 0 to 8192
[  213.332817][T10535]  loop5: p1 < > p3 < > p4
[  213.338764][T10535] loop5: p4 size 851974 extends beyond EOD, truncated
[  213.418893][ T7736] udevd[7736]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  213.422968][ T6361] udevd[6361]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  213.431055][ T5729] udevd[5729]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  213.456841][   T54] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15
[  213.490033][ T5046] bcm5974 5-1:1.0: could not read from device
[  213.519984][ T5046] bcm5974 5-1:1.0: could not read from device
[  213.545918][   T54] usb 5-1: USB disconnect, device number 19
[  213.555795][ T5046] bcm5974 5-1:1.0: could not read from device
[  213.578685][ T5046] bcm5974 5-1:1.0: could not read from device
[  213.677788][T10547] loop2: detected capacity change from 0 to 1024
[  213.711793][   T33] kauditd_printk_skb: 28 callbacks suppressed
[  213.714258][   T33] audit: type=1326 audit(1789785571.512:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.5.1907" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe46d79e159 code=0x0
[  213.834709][T10557] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  213.902525][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'.
[  213.902579][T10561] netlink: 'syz.2.1914': attribute type 1 has an invalid length.
[  214.184516][T10578] loop2: detected capacity change from 0 to 256
[  214.191240][T10578] exfat: Deprecated parameter 'utf8'
[  214.191337][T10578] exfat: Deprecated parameter 'namecase'
[  214.203368][T10578] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  214.358736][T10580] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100000
[  214.358788][T10580] flags: 0x17ff00000000004(referenced|node=0|zone=2|lastcpupid=0x7ff)
[  214.358831][T10580] page_type: f2(table)
[  214.358866][T10580] raw: 017ff00000000004 0000000000000000 dead000000000122 0000000000000000
[  214.358899][T10580] raw: 0000000000000000 0000000000000000 00000001f2000000 0000000000000000
[  214.358929][T10580] page dumped because: unmovable page
[  214.358956][T10580] page_owner tracks the page as allocated
[  214.358977][T10580] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1563004110
[  214.359007][T10580]  register_early_stack+0x98/0x100
[  214.359037][T10580]  init_page_owner+0x38/0x600
[  214.359065][T10580]  page_ext_init+0x511/0x550
[  214.359094][T10580]  mm_core_init+0x97/0xb0
[  214.359120][T10580] page_owner free stack trace missing
[  214.573678][T10571] loop4: detected capacity change from 0 to 131072
[  214.575080][T10571] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  214.575097][T10571] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  214.577218][T10571] F2FS-fs (loop4): invalid crc value
[  214.626173][T10571] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  214.640054][T10571] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  214.640102][T10571] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  215.613910][T10612] IPVS: ip_vs_edit_dest(): server weight less than zero
[  216.201998][T10623] FAULT_INJECTION: forcing a failure.
[  216.201998][T10623] name failslab, interval 1, probability 0, space 0, times 0
[  216.207724][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.5.1939 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  216.207756][T10623] Tainted: [L]=SOFTLOCKUP
[  216.207761][T10623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.207767][T10623] Call Trace:
[  216.207771][T10623]  <TASK>
[  216.207776][T10623]  dump_stack_lvl+0xe8/0x150
[  216.207793][T10623]  should_fail_ex+0x410/0x560
[  216.207806][T10623]  should_failslab+0xa8/0x100
[  216.207817][T10623]  __kmalloc_noprof+0xfe/0x720
[  216.207829][T10623]  ? rcu_is_watching+0x16/0xb0
[  216.207839][T10623]  ? tomoyo_realpath_from_path+0xef/0x640
[  216.207851][T10623]  ? tomoyo_realpath_from_path+0xef/0x640
[  216.207866][T10623]  tomoyo_realpath_from_path+0xef/0x640
[  216.207881][T10623]  tomoyo_check_open_permission+0x229/0x470
[  216.207891][T10623]  ? tomoyo_check_open_permission+0x1d3/0x470
[  216.207900][T10623]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  216.207912][T10623]  ? __asan_memset+0x22/0x50
[  216.207934][T10623]  ? tomoyo_file_open+0x163/0x220
[  216.207944][T10623]  security_file_open+0xa9/0x240
[  216.207953][T10623]  do_dentry_open+0x4a0/0x1380
[  216.207965][T10623]  vfs_open+0x3b/0x340
[  216.207972][T10623]  ? path_openat+0x1428/0x1d60
[  216.207983][T10623]  path_openat+0x1443/0x1d60
[  216.208000][T10623]  do_file_open+0x23e/0x4a0
[  216.208012][T10623]  ? __pfx_do_file_open+0x10/0x10
[  216.208029][T10623]  ? _raw_spin_unlock+0x28/0x50
[  216.208041][T10623]  ? alloc_fd+0x651/0x6c0
[  216.208052][T10623]  do_sys_openat2+0x115/0x200
[  216.208060][T10623]  ? __se_sys_futex+0x3a8/0x450
[  216.208070][T10623]  ? __pfx_do_sys_openat2+0x10/0x10
[  216.208078][T10623]  ? ksys_write+0x242/0x270
[  216.208088][T10623]  ? rcu_is_watching+0x16/0xb0
[  216.208098][T10623]  __x64_sys_openat+0x138/0x170
[  216.208108][T10623]  do_syscall_64+0x166/0x520
[  216.208116][T10623]  ? trace_irq_disable+0x3b/0x140
[  216.208123][T10623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.208134][T10623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.208141][T10623] RIP: 0033:0x7fe46d75e98e
[  216.208149][T10623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  216.208155][T10623] RSP: 002b:00007fe46e5b3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  216.208165][T10623] RAX: ffffffffffffffda RBX: 00007fe46e5b46c0 RCX: 00007fe46d75e98e
[  216.208170][T10623] RDX: 0000000000000002 RSI: 00007fe46e5b3c00 RDI: ffffffffffffff9c
[  216.208175][T10623] RBP: 00007fe46d83506b R08: 0000000000000000 R09: 0000000000000000
[  216.208180][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.208184][T10623] R13: 00007fe46da26038 R14: 00007fe46da25fa0 R15: 00007ffe2d314388
[  216.208196][T10623]  </TASK>
[  216.211969][T10623] ERROR: Out of memory at tomoyo_realpath_from_path.
[  216.256622][T10627] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1941'.
[  216.341918][T10631] loop2: detected capacity change from 0 to 1024
[  216.350178][T10631] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  216.354245][T10631] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  216.357966][T10631] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  216.358949][T10631] EXT4-fs error (device loop2): ext4_get_journal_inode:5927: inode #32: comm syz.2.1943: iget: special inode unallocated
[  216.358963][T10631] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  216.359087][T10631] EXT4-fs (loop2): no journal found
[  216.359095][T10631] EXT4-fs (loop2): can't get journal size
[  216.370352][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  216.370364][    C1] EXT4-fs (loop2): initial error at time 1789785574: ext4_get_journal_inode:5927: inode 32
[  216.370377][    C1] EXT4-fs (loop2): last error at time 1789785574: ext4_get_journal_inode:5927: inode 32
[  216.374091][T10631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  216.417513][T10631] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  216.439996][T10631] EXT4-fs error (device loop2): __ext4_iget:5592: inode #15: block 1803188595: comm syz.2.1943: invalid block
[  216.442443][T10631] overlayfs: failed to look up (file1) for ino (-117)
[  216.461804][ T5720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.494914][T10636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1945'.
[  216.579370][T10640] : entered promiscuous mode
[  216.585782][T10640] openvswitch: : Dropping previously announced user features
[  216.659817][T10652] loop2: detected capacity change from 0 to 8
[  216.665172][T10652] unable to read xattr id index table
[  216.733626][T10658] loop5: detected capacity change from 0 to 512
[  216.737677][T10658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  216.756521][T10658] EXT4-fs (loop5): 1 truncate cleaned up
[  216.769576][T10658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.801100][ T8325] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6537: inode #11: comm syz-executor: bad extra_isize 62 (inode size 256)
[  216.835519][ T8325] EXT4-fs (loop5): Remounting filesystem read-only
[  216.951128][T10668] loop2: detected capacity change from 0 to 4096
[  216.957241][T10668] ntfs3(loop2): ino=0, mi_enum_attr
[  216.959716][T10668] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  216.969543][T10668] ntfs3(loop2): mft corrupted
[  216.972379][T10668] ntfs3(loop2): Failed to load $MFT.
[  217.090711][ T9414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.195175][ T6345] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.195250][ T6345] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.287358][ T6345] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.287423][ T6345] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.363632][ T5011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  217.387548][ T5011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  217.395055][ T5011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  217.405258][ T5011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  217.418730][ T5011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  217.440610][ T6345] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.440681][ T6345] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.660952][ T6345] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.661018][ T6345] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.122828][ T6345] bridge_slave_1: left allmulticast mode
[  218.122876][ T6345] bridge_slave_1: left promiscuous mode
[  218.126900][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.131348][ T6345] bridge_slave_0: left allmulticast mode
[  218.131379][ T6345] bridge_slave_0: left promiscuous mode
[  218.137949][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.290853][   T26] block nbd0: Possible stuck request ffff8881027b8000: control (read@0,1024B). Runtime 90 seconds
[  218.381524][    T9] kernel read not supported for file /1060/net/snmp6 (pid: 9 comm: kworker/0:0)
[  218.545831][ T6345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.550501][ T6345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.560493][ T6345] bond0 (unregistering): Released all slaves
[  218.568059][ T5358] 8021q: adding VLAN 0 to HW filter on device eth9
[  218.609097][    T9] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[  218.648614][ T6345] : left promiscuous mode
[  218.662368][T10673] dummy0 speed is unknown, defaulting to 1000
[  218.711669][ T5358] 8021q: adding VLAN 0 to HW filter on device eth10
[  218.766720][    T9] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  218.768080][    T9] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  218.768311][    T9] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.768360][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  218.768405][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.792890][    T9] usb 3-1: config 0 descriptor??
[  218.801514][T10701] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  219.116830][T10673] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.121371][T10673] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.124657][T10673] bridge_slave_0: entered allmulticast mode
[  219.130510][T10673] bridge_slave_0: entered promiscuous mode
[  219.137128][T10673] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.140409][T10673] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.144499][T10673] bridge_slave_1: entered allmulticast mode
[  219.148482][T10673] bridge_slave_1: entered promiscuous mode
[  219.170153][ T6345] hsr_slave_0: left promiscuous mode
[  219.176649][ T6345] hsr_slave_1: left promiscuous mode
[  219.179075][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.179139][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.204447][ T6345] veth1_macvtap: left promiscuous mode
[  219.205495][ T6345] veth0_macvtap: left promiscuous mode
[  219.216090][    T9] elecom 0003:056E:00FC.0009: unknown main item tag 0x2
[  219.216162][    T9] elecom 0003:056E:00FC.0009: unknown global tag 0xd
[  219.216200][    T9] elecom 0003:056E:00FC.0009: item 0 2 1 13 parsing failed
[  219.216786][    T9] elecom 0003:056E:00FC.0009: probe with driver elecom failed with error -22
[  219.405845][ T5771] usb 3-1: USB disconnect, device number 26
[  219.448203][ T6345] team0 (unregistering): Port device team_slave_1 removed
[  219.462235][ T6345] team0 (unregistering): Port device team_slave_0 removed
[  219.552159][   T54] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  219.589189][  T194] smbdirect: ib_dev[syz0] removed
[  219.590283][ T5358] 8021q: adding VLAN 0 to HW filter on device eth11
[  219.613662][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.622838][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.663625][ T5779] dummy0 speed is unknown, defaulting to 1000
[  219.665707][ T5779] infiniband syz0: ib_query_port failed (-19)
[  219.677378][T10673] team0: Port device team_slave_0 added
[  219.680648][T10673] team0: Port device team_slave_1 added
[  219.695652][   T54] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  219.700230][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.700390][   T54] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  219.704746][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.704767][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.713450][   T54] usb 5-1: config 0 has no interface number 0
[  219.730047][   T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.731436][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.731446][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.731464][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.732884][   T54] usb 5-1: Product: syz
[  219.732893][   T54] usb 5-1: Manufacturer: syz
[  219.732898][   T54] usb 5-1: SerialNumber: syz
[  219.758683][   T54] usb 5-1: config 0 descriptor??
[  219.845472][T10673] hsr_slave_0: entered promiscuous mode
[  219.846352][T10673] hsr_slave_1: entered promiscuous mode
[  219.846874][T10673] debugfs: 'hsr0' already exists in 'hsr'
[  219.846887][T10673] Cannot create hsr debugfs directory
[  219.959983][ T5358] 8021q: adding VLAN 0 to HW filter on device eth12
[  219.981119][   T54] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  219.989429][   T54] usb 5-1: USB disconnect, device number 20
[  220.203301][T10673] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  220.210868][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  220.211416][T10673] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  220.220115][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  220.220890][T10673] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  220.227041][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  220.227972][T10673] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  220.240397][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  220.322985][T10673] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.343063][T10673] 8021q: adding VLAN 0 to HW filter on device team0
[  220.354833][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.354945][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.363416][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.363501][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.595604][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.707451][T10780] loop4: detected capacity change from 0 to 8
[  220.712441][T10780] SQUASHFS error: Failed to read block 0xe000000000001ea: -5
[  220.716547][T10780] unable to read xattr id index table
[  220.774649][T10673] veth0_vlan: entered promiscuous mode
[  220.781736][T10673] veth1_vlan: entered promiscuous mode
[  220.797437][T10673] veth0_macvtap: entered promiscuous mode
[  220.804072][T10673] veth1_macvtap: entered promiscuous mode
[  220.815925][T10673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.822307][T10673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.838402][ T6345] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.838478][ T6345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.838532][ T6345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.838576][ T6345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.981068][ T8980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.981118][ T8980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.000008][   T54] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  221.016168][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.016258][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.150022][ T8980] IPVS: starting estimator thread 0...
[  221.153653][   T54] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  221.159021][   T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  221.159091][   T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.195268][T10796] loop6: detected capacity change from 0 to 128
[  221.229501][T10794] IPVS: using max 81 ests per chain, 194400 per kthread
[  221.251001][T10796] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54)
[  221.251066][T10796] FAT-fs (loop6): Filesystem has been set read-only
[  221.262305][T10673] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54)
[  221.299031][T10798] bond4: entered promiscuous mode
[  221.317510][T10801] sg_write: process 9 (syz.6.1988) changed security contexts after opening file descriptor, this is not allowed.
[  221.391322][   T54] qmi_wwan 5-1:1.0: cdc-wdm1: USB WDM device
[  221.460442][   T54] wwan wwan0: port wwan0qmi0 attached
[  221.610051][   T54] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, a2:68:9a:2e:95:ab
[  221.611395][T10820] loop2: detected capacity change from 0 to 1024
[  221.620775][   T54] usb 5-1: USB disconnect, device number 21
[  221.622390][T10820] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  221.627433][T10820] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  221.649991][   T54] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[  221.652825][T10820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.690636][   T33] audit: type=1800 audit(1789785579.890:83): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1997" name="bus" dev="loop2" ino=18 res=0 errno=0
[  221.704458][   T33] audit: type=1804 audit(1789785579.900:84): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1997" name="/newroot/607/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  221.753169][   T54] wwan wwan0: port wwan0qmi0 disconnected
[  221.779368][ T5720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.052250][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'.
[  222.293014][T10855] binder: 10854:10855 ioctl c0306201 200000000680 returned -14
[  222.311010][T10858] loop4: detected capacity change from 0 to 164
[  222.422717][T10862] loop6: detected capacity change from 0 to 256
[  222.976033][T10878] loop2: detected capacity change from 0 to 2048
[  223.032079][T10879] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.154943][   T33] audit: type=1326 audit(1789785581.422:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.2.2023" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f530c99e159 code=0x0
[  223.320463][T10885] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  223.890502][T10917] bond0: (slave syz_tun): Releasing backup interface
[  223.900611][T10917] bridge0: port 3(syz_tun) entered blocking state
[  223.903068][T10917] bridge0: port 3(syz_tun) entered disabled state
[  223.905608][T10917] syz_tun: entered allmulticast mode
[  224.067686][T10933] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  224.247790][T10952] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  224.943559][   T54] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  225.089433][   T54] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  225.101223][   T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.101274][   T54] usb 3-1: Product: syz
[  225.101307][   T54] usb 3-1: Manufacturer: syz
[  225.101340][   T54] usb 3-1: SerialNumber: syz
[  225.115457][   T54] usb 3-1: config 0 descriptor??
[  225.338162][   T54] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 027
[  226.811013][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  226.953522][    T9] usb 5-1: Using ep0 maxpacket: 8
[  226.954419][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  226.955612][    T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  226.955627][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.955648][    T9] usb 5-1: config 0 has no interface number 0
[  226.957995][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.958010][    T9] usb 5-1: Product: syz
[  226.958019][    T9] usb 5-1: Manufacturer: syz
[  226.958027][    T9] usb 5-1: SerialNumber: syz
[  226.960095][    T9] usb 5-1: config 0 descriptor??
[  226.961960][    T9] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  226.962006][    T9] uvcvideo 5-1:0.31: Failed to create links for entity 32774
[  226.962012][    T9] uvcvideo 5-1:0.31: Failed to register entities (-22).
[  227.167556][   T25] usb 5-1: USB disconnect, device number 22
[  227.580112][   T25] usb 3-1: USB disconnect, device number 27
[  227.779558][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2072'.
[  227.946051][T11018] loop2: detected capacity change from 0 to 1024
[  228.093261][T11014] hfsplus: request for non-existent node 16777217 in B*Tree
[  228.125468][T11014] hfsplus: request for non-existent node 16777217 in B*Tree
[  228.132226][T11014] hfsplus: xattr search failed
[  228.635869][T11054] loop2: detected capacity change from 0 to 32768
[  228.643367][T11054] JBD2: Ignoring recovery information on journal
[  228.662180][T11054] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  228.754458][T11062] loop6: detected capacity change from 0 to 512
[  228.771708][T11062] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2095: iget: bad i_size value: 38620345925642
[  228.771777][T11062] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  228.772193][T11062] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2095: couldn't read orphan inode 15 (err -117)
[  228.772226][T11062] loop6: lost filesystem error report for type 5 error -117
[  228.772682][    C0] EXT4-fs (loop6): error count since last fsck: 2
[  228.772691][    C0] EXT4-fs (loop6): initial error at time 1789785587: ext4_orphan_get:1403: inode 15
[  228.772703][    C0] EXT4-fs (loop6): last error at time 1789785587: ext4_orphan_get:1408
[  228.773962][T11062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.808440][ T5720] ocfs2: Unmounting device (7,2) on (node local)
[  228.923623][T11062] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.2095: bg 0: block 5: invalid block bitmap
[  228.943981][T11062] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1076 with error 28
[  228.944040][T11062] EXT4-fs (loop6): This should not happen!! Data will be lost
[  228.944040][T11062] 
[  228.979631][T11062] EXT4-fs (loop6): Total free blocks count 0
[  228.979789][T11062] EXT4-fs (loop6): Free/Dirty block details
[  228.979832][T11062] EXT4-fs (loop6): free_blocks=0
[  228.979853][T11062] EXT4-fs (loop6): dirty_blocks=1076
[  228.979859][T11062] EXT4-fs (loop6): Block reservation details
[  228.979864][T11062] EXT4-fs (loop6): i_reserved_data_blocks=1076
[  229.064302][T11077] loop2: detected capacity change from 0 to 512
[  229.072441][T11077] EXT4-fs: Ignoring removed bh option
[  229.083081][T11077] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2100: corrupted in-inode xattr: e_value size too large
[  229.089492][T11077] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  229.092394][T11077] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2100: couldn't read orphan inode 15 (err -117)
[  229.100899][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  229.100915][    C1] EXT4-fs (loop2): initial error at time 1789785587: ext4_iget_extra_inode:5210: inode 15
[  229.100938][    C1] EXT4-fs (loop2): last error at time 1789785587: ext4_iget_extra_inode:5210: inode 15
[  229.113908][T11077] loop2: lost filesystem error report for type 5 error -117
[  229.120999][T11077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.149357][T10673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.202801][ T5720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.374952][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'.
[  229.774682][T11121] FAULT_INJECTION: forcing a failure.
[  229.774682][T11121] name failslab, interval 1, probability 0, space 0, times 0
[  229.780047][T11121] CPU: 1 UID: 0 PID: 11121 Comm: syz.6.2118 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  229.780097][T11121] Tainted: [L]=SOFTLOCKUP
[  229.780103][T11121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.780111][T11121] Call Trace:
[  229.780117][T11121]  <TASK>
[  229.780123][T11121]  dump_stack_lvl+0xe8/0x150
[  229.780177][T11121]  should_fail_ex+0x410/0x560
[  229.780197][T11121]  should_failslab+0xa8/0x100
[  229.780214][T11121]  __kmalloc_noprof+0xfe/0x720
[  229.780235][T11121]  ? __kmalloc_noprof+0x1ab/0x720
[  229.780254][T11121]  ? group_cpus_evenly+0x2cf/0x5e0
[  229.780267][T11121]  ? group_cpus_evenly+0x2cf/0x5e0
[  229.780291][T11121]  group_cpus_evenly+0x2cf/0x5e0
[  229.780308][T11121]  ? __pfx_group_cpus_evenly+0x10/0x10
[  229.780332][T11121]  blk_mq_map_queues+0xb1/0x490
[  229.780350][T11121]  ? trace_kmalloc+0x2a/0xf0
[  229.780368][T11121]  ? __pfx_blk_mq_map_queues+0x10/0x10
[  229.780383][T11121]  ? __kmalloc_node_noprof+0x2f0/0x720
[  229.780399][T11121]  ? blk_mq_alloc_tag_set+0x5f8/0x1000
[  229.780415][T11121]  ? blk_mq_update_queue_map+0x383/0x450
[  229.780437][T11121]  blk_mq_alloc_tag_set+0x8dd/0x1000
[  229.780463][T11121]  loop_add+0x436/0xb40
[  229.780480][T11121]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  229.780502][T11121]  ? __pfx_loop_add+0x10/0x10
[  229.780538][T11121]  loop_control_ioctl+0x12b/0x5a0
[  229.780556][T11121]  ? __fget_files+0x2a/0x420
[  229.780573][T11121]  ? __pfx_loop_control_ioctl+0x10/0x10
[  229.780589][T11121]  ? __fget_files+0x2a/0x420
[  229.780605][T11121]  ? bpf_lsm_file_ioctl+0x9/0x20
[  229.780620][T11121]  ? __pfx_loop_control_ioctl+0x10/0x10
[  229.780637][T11121]  __se_sys_ioctl+0xfc/0x170
[  229.780658][T11121]  do_syscall_64+0x166/0x520
[  229.780673][T11121]  ? trace_irq_disable+0x3b/0x140
[  229.780684][T11121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.780699][T11121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.780711][T11121] RIP: 0033:0x7fa6cdb9e159
[  229.780724][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.780734][T11121] RSP: 002b:00007fa6cead4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  229.780750][T11121] RAX: ffffffffffffffda RBX: 00007fa6cde25fa0 RCX: 00007fa6cdb9e159
[  229.780759][T11121] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004
[  229.780767][T11121] RBP: 00007fa6cdc3506b R08: 0000000000000000 R09: 0000000000000000
[  229.780774][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.780780][T11121] R13: 00007fa6cde26038 R14: 00007fa6cde25fa0 R15: 00007ffd020c3238
[  229.780797][T11121]  </TASK>
[  229.877315][T11125] loop2: detected capacity change from 0 to 4096
[  229.904080][T11125] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  229.915949][ T5771] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  229.962586][T11125] ntfs3(loop2): ino=19, mi_enum_attr
[  229.962654][T11125] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  229.965276][T11125] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  230.061263][ T5771] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  230.064880][ T5771] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  230.064921][ T5771] usb 5-1: config 0 has no interface number 0
[  230.064955][ T5771] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  230.075542][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.075579][ T5771] usb 5-1: Product: syz
[  230.075622][ T5771] usb 5-1: Manufacturer: syz
[  230.075646][ T5771] usb 5-1: SerialNumber: syz
[  230.090395][ T5771] usb 5-1: config 0 descriptor??
[  230.139573][T11133] loop2: detected capacity change from 0 to 4096
[  230.170613][T11133] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  230.195521][T11133] ntfs3(loop2): Failed to load $Extend (-22).
[  230.195585][T11133] ntfs3(loop2): Failed to initialize $Extend.
[  230.291213][ T5771] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected
[  230.294500][ T5771] keyspan 5-1:0.133: unsupported endpoint type 0
[  230.298725][ T5771] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81
[  230.302336][ T5771] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1
[  230.307892][ T5771] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2
[  230.314619][ T5771] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  230.335264][ T5771] usb 5-1: USB disconnect, device number 23
[  230.365687][ T5771] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  230.370758][ T5771] keyspan 5-1:0.133: device disconnected
[  230.543815][T11146] loop2: detected capacity change from 0 to 32768
[  230.550275][T11146] 
[  230.550275][T11146]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  230.550275][T11146] 
[  230.561623][T11146] ERROR: (device loop2): diWrite: ixpxd invalid
[  230.561623][T11146] 
[  230.572348][T11146] ERROR: (device loop2): txCommit: 
[  230.572348][T11146] 
[  230.582372][ T5720] 
[  230.582372][ T5720]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  230.582372][ T5720] 
[  230.595960][ T5720] 
[  230.595960][ T5720]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  230.595960][ T5720] 
[  230.844223][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'.
[  231.723217][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2139'.
[  231.729798][T11183] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  232.536434][T11195] loop2: detected capacity change from 0 to 8192
[  232.542260][T11195] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  233.300786][T11207] loop6: detected capacity change from 0 to 32768
[  233.780654][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2159'.
[  233.792039][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2159'.
[  233.802443][T10887] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.806328][T10887] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.810180][T10887] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.810205][T10887] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.845567][T11223] loop2: detected capacity change from 0 to 4096
[  233.848468][T11223] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  233.872452][T11223] ntfs3(loop2): Failed to load $Extend (-22).
[  233.872517][T11223] ntfs3(loop2): Failed to initialize $Extend.
[  233.904925][   T25] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  233.967047][T11231] loop6: detected capacity change from 0 to 1024
[  233.976594][T11231] hfsplus: inconsistency in B*Tree (-1,0,1,1,0)
[  233.980863][T11231] hfsplus: failed to load root directory
[  234.049918][   T25] usb 5-1: Using ep0 maxpacket: 8
[  234.068523][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  234.068593][   T25] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  234.076382][   T25] usb 5-1: unable to read config index 0 descriptor/start: -71
[  234.076442][   T25] usb 5-1: can't read configurations, error -71
[  234.608415][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'.
[  234.777986][T11283] loop6: detected capacity change from 0 to 4096
[  234.825576][T11291] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.838998][T11290] loop4: detected capacity change from 0 to 4096
[  234.863484][T11292] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.063199][T11296] loop6: detected capacity change from 0 to 4096
[  235.086256][T11296] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  235.102490][T11296] ntfs3(loop6): Failed to load $Extend (-22).
[  235.102543][T11296] ntfs3(loop6): Failed to initialize $Extend.
[  235.193797][T11294] loop2: detected capacity change from 0 to 40427
[  235.205654][T11294] F2FS-fs (loop2): invalid crc value
[  235.292646][T11294] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  235.306564][T11294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  235.322245][T11315] overlayfs: workdir and upperdir must reside under the same mount
[  235.362876][ T5720] bio_check_eod: 1005 callbacks suppressed
[  235.375690][ T5720] syz-executor: attempt to access beyond end of device
[  235.375690][ T5720] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  235.378673][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  235.378697][ T5720] Tainted: [L]=SOFTLOCKUP
[  235.378701][ T5720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.378710][ T5720] Call Trace:
[  235.378715][ T5720]  <TASK>
[  235.378723][ T5720]  dump_stack_lvl+0xe8/0x150
[  235.378745][ T5720]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  235.378771][ T5720]  f2fs_write_end_io+0x1215/0x16f0
[  235.378787][ T5720]  ? blkg_put+0x22/0x240
[  235.378815][ T5720]  __submit_merged_bio+0x258/0x6a0
[  235.378828][ T5720]  ? rcu_is_watching+0x16/0xb0
[  235.378845][ T5720]  f2fs_submit_merged_write+0x27d/0x380
[  235.378866][ T5720]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  235.378895][ T5720]  f2fs_sync_node_pages+0x1055/0x1210
[  235.378928][ T5720]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  235.378971][ T5720]  f2fs_write_checkpoint+0xf91/0x2710
[  235.378986][ T5720]  ? __lock_acquire+0x683/0x2cf0
[  235.379019][ T5720]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  235.379095][ T5720]  ? try_to_wake_up+0x8b6/0x14d0
[  235.379120][ T5720]  kill_f2fs_super+0x2dd/0x700
[  235.379141][ T5720]  ? __pfx_kill_f2fs_super+0x10/0x10
[  235.379165][ T5720]  ? call_rcu+0x64d/0x8b0
[  235.379179][ T5720]  ? lockdep_hardirqs_on+0x7b/0x110
[  235.379201][ T5720]  deactivate_locked_super+0xbc/0x110
[  235.379218][ T5720]  cleanup_mnt+0x3d3/0x460
[  235.379240][ T5720]  task_work_run+0x1d9/0x270
[  235.379275][ T5720]  ? __pfx_task_work_run+0x10/0x10
[  235.379296][ T5720]  exit_to_user_mode_loop+0x204/0x770
[  235.379310][ T5720]  ? rcu_is_watching+0x16/0xb0
[  235.379328][ T5720]  do_syscall_64+0x328/0x520
[  235.379342][ T5720]  ? trace_irq_disable+0x3b/0x140
[  235.379354][ T5720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.379371][ T5720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.379384][ T5720] RIP: 0033:0x7f530c99f397
[  235.379397][ T5720] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  235.379407][ T5720] RSP: 002b:00007ffec1659968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  235.379421][ T5720] RAX: 0000000000000000 RBX: 00007f530ca344bb RCX: 00007f530c99f397
[  235.379430][ T5720] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1659a20
[  235.379438][ T5720] RBP: 00007ffec1659a20 R08: 00007ffec165aa20 R09: 00000000ffffffff
[  235.379446][ T5720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec165aab0
[  235.379454][ T5720] R13: 00007f530ca344bb R14: 000000000003a2ae R15: 00007ffec165aaf0
[  235.379476][ T5720]  </TASK>
[  235.379587][ T5720] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  235.608000][T11319] loop6: detected capacity change from 0 to 4096
[  235.852563][T11323] loop6: detected capacity change from 0 to 4096
[  235.880589][T11326] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.897495][T11323] NILFS error (device loop6): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  235.940377][T11323] Remounting filesystem read-only
[  235.950606][T11329] overlay: filesystem on ./file0 is read-only
[  235.965093][T11328] syzkaller0: entered promiscuous mode
[  235.965156][T11328] syzkaller0: entered allmulticast mode
[  235.979594][T11328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.000785][T11328] tipc: Resetting bearer <eth:syzkaller0>
[  236.008203][T11327] tipc: Resetting bearer <eth:syzkaller0>
[  236.051171][T11327] tipc: Disabling bearer <eth:syzkaller0>
[  236.160754][T11335] loop6: detected capacity change from 0 to 512
[  236.168372][T11339] EXT4-fs: Ignoring removed mblk_io_submit option
[  236.171620][T11339] EXT4-fs: Ignoring removed nobh option
[  236.176734][T11339] EXT4-fs: Ignoring removed nobh option
[  236.198129][T11339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.2212: EA inode 11 has unexpected i_nlink=1026 ref_count=1
[  236.203938][T11339] loop4: lost filesystem error report for type 5 error -117
[  236.207585][T11339] EXT4-fs (loop4): 1 orphan inode deleted
[  236.215746][T11339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.221493][T11335] FAT-fs (loop6): Directory bread(block 2080) failed
[  236.221573][T11335] FAT-fs (loop6): Directory bread(block 2081) failed
[  236.249684][T11335] FAT-fs (loop6): Directory bread(block 2082) failed
[  236.249769][T11335] FAT-fs (loop6): Directory bread(block 2083) failed
[  236.249808][T11335] FAT-fs (loop6): Directory bread(block 2084) failed
[  236.249846][T11335] FAT-fs (loop6): Directory bread(block 2085) failed
[  236.249884][T11335] FAT-fs (loop6): Directory bread(block 2086) failed
[  236.249921][T11335] FAT-fs (loop6): Directory bread(block 2087) failed
[  236.270385][T11335] FAT-fs (loop6): Directory bread(block 2080) failed
[  236.270448][T11335] FAT-fs (loop6): Directory bread(block 2081) failed
[  236.314231][ T7120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.338744][T11345] EXT4-fs: Ignoring removed i_version option
[  236.342546][T11345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  236.375376][T11345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.375499][T11345] ext4 filesystem being mounted at /690/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  236.397955][   T33] audit: type=1800 audit(1789785595.332:86): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2215" name="file1" dev="loop2" ino=15 res=0 errno=0
[  236.457311][ T5720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.494484][T11353] netlink: 'syz.2.2217': attribute type 3 has an invalid length.
[  236.494533][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'.
[  236.621354][T11361] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  237.051684][   T33] audit: type=1800 audit(1789785596.015:87): pid=11381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2229" name="lun" dev="configfs" ino=33875 res=0 errno=0
[  237.482248][T11398] FAULT_INJECTION: forcing a failure.
[  237.482248][T11398] name failslab, interval 1, probability 0, space 0, times 0
[  237.482323][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.2.2237 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  237.482343][T11398] Tainted: [L]=SOFTLOCKUP
[  237.482349][T11398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.482358][T11398] Call Trace:
[  237.482364][T11398]  <TASK>
[  237.482371][T11398]  dump_stack_lvl+0xe8/0x150
[  237.482395][T11398]  should_fail_ex+0x410/0x560
[  237.482415][T11398]  should_failslab+0xa8/0x100
[  237.482432][T11398]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  237.482450][T11398]  ? __lock_acquire+0x683/0x2cf0
[  237.482465][T11398]  ? __d_alloc+0x37/0x6f0
[  237.482481][T11398]  ? __d_alloc+0x37/0x6f0
[  237.482503][T11398]  __d_alloc+0x37/0x6f0
[  237.482520][T11398]  ? __lock_acquire+0x683/0x2cf0
[  237.482532][T11398]  d_alloc_pseudo+0x21/0xc0
[  237.482550][T11398]  alloc_path_pseudo+0x107/0x220
[  237.482566][T11398]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  237.482587][T11398]  alloc_file_pseudo+0xa8/0x1e0
[  237.482603][T11398]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  237.482623][T11398]  anon_inode_getfd+0xc8/0x1f0
[  237.482641][T11398]  map_create+0x61f/0x1b70
[  237.482659][T11398]  ? __pfx_map_create+0x10/0x10
[  237.482678][T11398]  ? bpf_lsm_bpf+0x9/0x20
[  237.482695][T11398]  ? security_bpf+0x7e/0x2d0
[  237.482714][T11398]  __sys_bpf+0xaea/0xd90
[  237.482733][T11398]  ? __pfx___sys_bpf+0x10/0x10
[  237.482748][T11398]  ? do_futex+0x3e7/0x4e0
[  237.482779][T11398]  ? ksys_write+0x242/0x270
[  237.482798][T11398]  ? rcu_is_watching+0x16/0xb0
[  237.482818][T11398]  __x64_sys_bpf+0xba/0xd0
[  237.482832][T11398]  do_syscall_64+0x166/0x520
[  237.482847][T11398]  ? trace_irq_disable+0x3b/0x140
[  237.482858][T11398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.482875][T11398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.482888][T11398] RIP: 0033:0x7f530c99e159
[  237.482901][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.482913][T11398] RSP: 002b:00007f530d815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  237.482929][T11398] RAX: ffffffffffffffda RBX: 00007f530cc25fa0 RCX: 00007f530c99e159
[  237.482940][T11398] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000
[  237.482948][T11398] RBP: 00007f530ca3506b R08: 0000000000000000 R09: 0000000000000000
[  237.482956][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.482963][T11398] R13: 00007f530cc26038 R14: 00007f530cc25fa0 R15: 00007ffec165a6f8
[  237.482984][T11398]  </TASK>
[  237.605160][T11400] EXT4-fs: Ignoring removed bh option
[  237.608296][T11400] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  237.618032][T11400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  237.618258][T11400] EXT4-fs (loop6): orphan cleanup on readonly fs
[  237.633232][T11400] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.2238: attempt to clear invalid blocks 1024 len 1
[  237.633288][T11400] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  237.639955][T11400] EXT4-fs (loop6): Remounting filesystem read-only
[  237.641088][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  237.641125][    C1] EXT4-fs (loop6): initial error at time 1789785596: ext4_clear_blocks:876: inode 11
[  237.641227][    C1] EXT4-fs (loop6): last error at time 1789785596: ext4_clear_blocks:876: inode 11
[  237.674618][T11400] EXT4-fs (loop6): 1 truncate cleaned up
[  237.677249][T11400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  237.693872][T10673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  237.736927][T11405] ipvlan2: entered allmulticast mode
[  237.743080][T11405] virt_wifi0: entered allmulticast mode
[  237.746462][T11405] batman_adv: batadv0: Adding interface: ipvlan2
[  237.751685][T11405] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  237.762967][T11405] batman_adv: batadv0: Interface activated: ipvlan2
[  237.921158][ T5011] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9
[  238.421248][T11433] ip_tables: iptables: counters copy to user failed while replacing table
[  238.508096][ T5779] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  238.654174][ T5779] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  238.655326][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64
[  238.655357][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.659423][ T5779] usb 3-1: config 0 descriptor??
[  238.697936][T11442] FAULT_INJECTION: forcing a failure.
[  238.697936][T11442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.702854][T11442] CPU: 1 UID: 0 PID: 11442 Comm: syz.4.2256 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  238.702887][T11442] Tainted: [L]=SOFTLOCKUP
[  238.702891][T11442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.702896][T11442] Call Trace:
[  238.702900][T11442]  <TASK>
[  238.702904][T11442]  dump_stack_lvl+0xe8/0x150
[  238.702920][T11442]  should_fail_ex+0x410/0x560
[  238.702934][T11442]  _copy_from_user+0x2d/0xb0
[  238.702946][T11442]  __se_sys_name_to_handle_at+0x337/0x9e0
[  238.702959][T11442]  ? __pfx___se_sys_name_to_handle_at+0x10/0x10
[  238.702968][T11442]  ? ksys_write+0x242/0x270
[  238.702978][T11442]  ? rcu_is_watching+0x16/0xb0
[  238.702990][T11442]  ? __x64_sys_name_to_handle_at+0x20/0xc0
[  238.702999][T11442]  do_syscall_64+0x166/0x520
[  238.703009][T11442]  ? trace_irq_disable+0x3b/0x140
[  238.703015][T11442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.703047][T11442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.703057][T11442] RIP: 0033:0x7ffbf019e159
[  238.703066][T11442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.703073][T11442] RSP: 002b:00007ffbf1017028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f
[  238.703083][T11442] RAX: ffffffffffffffda RBX: 00007ffbf0425fa0 RCX: 00007ffbf019e159
[  238.703088][T11442] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  238.703094][T11442] RBP: 00007ffbf023506b R08: 0000000000001200 R09: 0000000000000000
[  238.703104][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.703108][T11442] R13: 00007ffbf0426038 R14: 00007ffbf0425fa0 R15: 00007fffd12ecaa8
[  238.703120][T11442]  </TASK>
[  238.861118][ T5779] ath6kl: Failed to submit usb control message: -71
[  238.861214][ T5779] ath6kl: unable to send the bmi data to the device: -71
[  238.861225][ T5779] ath6kl: Unable to send get target info: -71
[  238.865291][ T5779] ath6kl: Failed to init ath6kl core: -71
[  238.865892][ T5779] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  238.874262][ T5779] usb 3-1: USB disconnect, device number 28
[  238.877554][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'.
[  238.877577][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2258'.
[  238.896374][T10887] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.910799][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.910862][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.910902][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.115805][T11460] set_capacity_and_notify: 5 callbacks suppressed
[  239.116231][T11460] loop4: detected capacity change from 0 to 1024
[  239.139379][T11460] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  239.157265][T11460] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 5: comm syz.4.2263: lblock 5 mapped to illegal pblock 5 (length 1)
[  239.157320][T11460] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  239.162603][T11460] Quota error (device loop4): write_blk: dquota write failed
[  239.162615][T11460] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  239.162676][T11460] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  239.162702][T11460] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2263: Failed to acquire dquot type 0
[  239.162711][T11460] loop4: lost filesystem error report for type 5 error -117
[  239.162862][T11460] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 5: comm syz.4.2263: lblock 5 mapped to illegal pblock 5 (length 1)
[  239.162875][T11460] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  239.162962][T11460] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5
[  239.162985][T11460] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  239.162999][T11460] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2263: Failed to acquire dquot type 0
[  239.163007][T11460] loop4: lost filesystem error report for type 5 error -117
[  239.163285][T11460] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.2263: Freeing blocks not in datazone - block = 0, count = 4096
[  239.163298][T11460] loop4: lost filesystem error report for type 5 error -117
[  239.168734][T11460] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 5: comm syz.4.2263: lblock 5 mapped to illegal pblock 5 (length 1)
[  239.168753][T11460] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  239.171783][T11460] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5
[  239.171825][T11460] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  239.171851][T11460] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2263: Failed to acquire dquot type 0
[  239.171937][T11460] loop4: lost filesystem error report for type 5 error -117
[  239.172882][T11460] EXT4-fs (loop4): 1 orphan inode deleted
[  239.174454][T11460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.273113][ T7120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.317352][T11465] loop4: detected capacity change from 0 to 1024
[  239.695260][   T33] audit: type=1804 audit(1789785598.786:88): pid=11480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2271" name="/newroot/715/file1" dev="tmpfs" ino=3790 res=1 errno=0
[  239.840593][T11482] ip6gretap0: entered promiscuous mode
[  239.862811][T11482] macsec1: entered allmulticast mode
[  239.862858][T11482] ip6gretap0: entered allmulticast mode
[  239.864846][ T5011] Bluetooth: hci3: command tx timeout
[  240.066847][T11504] loop6: detected capacity change from 0 to 512
[  240.106849][T11504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.106952][T11504] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.123777][T11504] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2277: bg 0: block 264: padding at end of block bitmap is not set
[  240.156623][T11504] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.2277: Failed to acquire dquot type 1
[  240.173821][T11493] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.2277: Failed to acquire dquot type 1
[  240.235265][T10673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.279696][ T5792] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  240.318375][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.343094][T11517] loop6: detected capacity change from 0 to 64
[  240.380501][T11517] syz.6.2287: attempt to access beyond end of device
[  240.380501][T11517] loop6: rw=8388608, sector=3584, nr_sectors = 2 limit=64
[  240.380572][T11517] Buffer I/O error on dev loop6, logical block 1792, async page read
[  240.382094][T11517] syz.6.2287: attempt to access beyond end of device
[  240.382094][T11517] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  240.382115][T11517] Buffer I/O error on dev loop6, logical block 56576, async page read
[  240.422715][ T5792] usb 5-1: Using ep0 maxpacket: 16
[  240.430765][ T5792] usb 5-1: unable to get BOS descriptor or descriptor too short
[  240.430844][ T5792] usb 5-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90
[  240.438998][ T5792] usb 5-1: config 251 has an invalid interface number: 33 but max is 0
[  240.439076][ T5792] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  240.439119][ T5792] usb 5-1: config 251 has no interface number 0
[  240.439163][ T5792] usb 5-1: config 251 interface 33 has no altsetting 0
[  240.457763][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.457818][ T5792] usb 5-1: Product: syz
[  240.457861][ T5792] usb 5-1: Manufacturer: syz
[  240.457892][ T5792] usb 5-1: SerialNumber: syz
[  240.668815][ T5792] qmi_wwan 5-1:251.33: probe with driver qmi_wwan failed with error -22
[  240.679126][ T5792] usb 5-1: USB disconnect, device number 26
[  240.740170][T11531] CIFS: Attempting to mount //127.0.0.1/share
[  241.210225][T11534] SET target dimension over the limit!
[  241.555329][T11543] loop4: detected capacity change from 0 to 1024
[  241.592026][T11531] CIFS: VFS: Error connecting to socket. Aborting operation.
[  241.592231][T11531] CIFS: VFS: cifs_mount failed w/return code = -4
[  241.605766][T11543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  241.605870][T11543] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.645533][T11543] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.2298: lblock 0 mapped to illegal pblock 0 (length 6)
[  241.687363][T11543] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.2298: lblock 0 mapped to illegal pblock 0 (length 1)
[  241.695141][T11543] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  241.695167][T11543] EXT4-fs (loop4): This should not happen!! Data will be lost
[  241.695167][T11543] 
[  241.727642][ T7120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  241.806181][T11555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.812479][T11557] loop4: detected capacity change from 0 to 512
[  241.823454][T11557] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  241.823525][T11557] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  241.823578][T11557] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2304: Corrupt directory, running e2fsck is recommended
[  241.839651][T11557] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  241.839783][T11557] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.2304: corrupted in-inode xattr: e_name out of bounds
[  241.840320][T11557] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  241.840689][T11557] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2304: couldn't read orphan inode 15 (err -117)
[  241.840709][T11557] loop4: lost filesystem error report for type 5 error -117
[  241.843162][ T5011] Bluetooth: hci3: command tx timeout
[  241.844698][T11557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.883334][ T7120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.957692][T11564] loop4: detected capacity change from 0 to 256
[  241.984304][T11566] loop2: detected capacity change from 0 to 2048
[  241.986734][T11564] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x3119abd1)
[  241.986745][T11564] exFAT-fs (loop4): invalid boot region
[  241.986749][T11564] exFAT-fs (loop4): failed to recognize exfat type
[  242.000466][T11566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.008434][   T33] kauditd_printk_skb: 15 callbacks suppressed
[  242.008541][   T33] audit: type=1800 audit(1789785601.222:98): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2308" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  242.069765][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2310'.
[  243.138192][ T7298] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  243.282384][ T7298] usb 3-1: not running at top speed; connect to a high speed hub
[  243.282443][ T7298] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  243.290109][ T7298] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.294007][ T7298] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  243.294052][ T7298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.692148][ T7298] uvcvideo 3-1:1.0: Found UVC 0.00 device <unnamed> (046d:0825)
[  243.696881][ T7298] uvcvideo 3-1:1.0: No valid video chain found.
[  243.845421][ T5011] Bluetooth: hci3: command tx timeout
[  243.886815][   T25] usb 3-1: USB disconnect, device number 29
[  243.975398][ T5771] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  244.152068][ T5771] usb 5-1: Using ep0 maxpacket: 8
[  244.184684][ T5771] usb 5-1: unable to get BOS descriptor or descriptor too short
[  244.184790][ T5771] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  244.193198][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  244.193543][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  244.193676][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  244.193770][ T5771] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  244.193876][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  244.194001][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12639, setting to 1024
[  244.194212][ T5771] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  244.247867][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.247964][ T5771] usb 5-1: Product: syz
[  244.253014][ T5771] usb 5-1: Manufacturer: syz
[  244.253083][ T5771] usb 5-1: SerialNumber: syz
[  244.300955][ T5771] usb 5-1: config 0 descriptor??
[  244.309146][T11611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  244.312413][T11611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  244.407759][ T5771] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  244.936459][ T5771] usb 5-1: USB disconnect, device number 27
[  245.373554][ T7734] udevd[7734]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.712739][T11637] loop4: detected capacity change from 0 to 128
[  245.726064][T11637] FAT-fs (loop4): bogus sectors per cluster 0
[  245.729184][T11637] FAT-fs (loop4): Can't find a valid FAT filesystem
[  245.805645][ T5011] Bluetooth: hci3: command tx timeout
[  246.097629][T11641] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  246.302777][T11654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2345'.
[  246.371710][T11658] loop2: detected capacity change from 0 to 2048
[  246.376768][T11658] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  246.397427][T11659] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.486398][T11661] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  246.511198][T11663] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2349'.
[  246.650991][T11669] netlink: 'syz.2.2352': attribute type 2 has an invalid length.
[  247.091357][T11695] loop2: detected capacity change from 0 to 8
[  247.105535][   T26] block nbd0: Possible stuck request ffff8881027b8000: control (read@0,1024B). Runtime 120 seconds
[  248.166629][T11723] loop2: detected capacity change from 0 to 128
[  248.205778][T11723] FAT-fs (loop2): Directory bread(block 1048) failed
[  248.205852][T11723] FAT-fs (loop2): Directory bread(block 1049) failed
[  248.208682][T11723] FAT-fs (loop2): Directory bread(block 1050) failed
[  248.208763][T11723] FAT-fs (loop2): Directory bread(block 1051) failed
[  248.208798][T11723] FAT-fs (loop2): Directory bread(block 1052) failed
[  248.208834][T11723] FAT-fs (loop2): Directory bread(block 1053) failed
[  248.208868][T11723] FAT-fs (loop2): Directory bread(block 1054) failed
[  248.208904][T11723] FAT-fs (loop2): Directory bread(block 1055) failed
[  248.212678][T11723] FAT-fs (loop2): Directory bread(block 1048) failed
[  248.216816][T11723] FAT-fs (loop2): Directory bread(block 1049) failed
[  248.326149][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'.
[  248.330270][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'.
[  248.377374][T11729] loop2: detected capacity change from 0 to 65
[  248.381725][T11729] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  248.390091][T11729] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  248.699035][T11750] loop2: detected capacity change from 0 to 256
[  248.741085][T11750] syz.2.2390: attempt to access beyond end of device
[  248.741085][T11750] loop2: rw=8912896, sector=1800, nr_sectors = 20 limit=256
[  248.748189][T11750] syz.2.2390: attempt to access beyond end of device
[  248.748189][T11750] loop2: rw=8388608, sector=1800, nr_sectors = 8 limit=256
[  248.756578][T11749] loop4: detected capacity change from 0 to 4096
[  248.762211][   T33] audit: type=1800 audit(1789785608.297:99): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2390" name="file2" dev="loop2" ino=1048695 res=0 errno=0
[  248.783627][T11750] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  248.788347][T11750] FAT-fs (loop2): Filesystem has been set read-only
[  248.795126][T11749] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  248.796864][T11749] ntfs3(loop4): Failed to load $Extend (-22).
[  248.796874][T11749] ntfs3(loop4): Failed to initialize $Extend.
[  248.846135][ T5011] Bluetooth: hci1: unexpected cc 0x0c05 length: 4 > 1
[  248.846187][ T5011] Bluetooth: hci1: unexpected event for opcode 0x0c05
[  249.041536][T11764] befs: (nullb0): invalid magic header
[  249.146458][T11774] ip_tables: iptables: counters copy to user failed while replacing table
[  249.198740][T11778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2404'.
[  250.643389][T11825] comedi comedi0: das-1801st: I/O port conflict (0x300,16)
[  250.897462][T11831] loop4: detected capacity change from 0 to 4096
[  250.905992][T11831] ntfs3(loop4): ino=3, Correct links count -> 2.
[  251.417975][T11841] futex_wake_op: syz.2.2430 tries to shift op by 144; fix this program
[  251.418172][T11841] futex_wake_op: syz.2.2430 tries to shift op by 144; fix this program
[  251.503668][T11831] ntfs3(loop4): failed to convert "0080" to cp874
[  251.509781][T11831] ntfs3(loop4): failed to convert name for inode 1e.
[  251.510176][T11831] ntfs3(loop4): ino=1f, mi_enum_attr
[  251.510202][T11831] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  251.987231][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  251.987313][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  252.368553][T11852] loop6: detected capacity change from 0 to 32768
[  252.381612][T11852] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  252.401787][T11852] XFS (loop6): Ending clean mount
[  252.739270][ T5771] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  252.884833][ T5771] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  252.885965][ T5771] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  252.885979][ T5771] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  252.885995][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.894126][T11873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  252.897022][ T5771] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  253.112654][ T5771] usb 3-1: USB disconnect, device number 30
[  253.234696][T10673] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  253.451829][T11881] netlink: 'syz.6.2438': attribute type 1 has an invalid length.
[  253.453843][T11881] netlink: 'syz.6.2438': attribute type 4 has an invalid length.
[  253.453856][T11881] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2438'.
[  253.454462][T11881] netlink: 'syz.6.2438': attribute type 1 has an invalid length.
[  253.454473][T11881] netlink: 'syz.6.2438': attribute type 4 has an invalid length.
[  253.454480][T11881] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2438'.
[  253.600056][T11889] loop6: detected capacity change from 0 to 164
[  254.013092][T11906] loop6: detected capacity change from 0 to 1024
[  254.016183][T11906] EXT4-fs: Ignoring removed nomblk_io_submit option
[  254.020623][T11906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  254.049653][T11906] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  254.092468][T10673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.421412][T11930] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2462'.
[  255.820030][ T7298] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  255.968511][ T7298] usb 5-1: Using ep0 maxpacket: 8
[  255.971499][ T7298] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  255.978421][ T7298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.978492][ T7298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  255.978570][ T7298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.001935][ T7298] usb 5-1: config 0 descriptor??
[  256.008055][ T7298] qmi_wwan 5-1:0.0: bogus CDC Union: master=25, slave=0
[  256.012775][ T7298] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22
[  256.216261][ T7298] usb 5-1: USB disconnect, device number 28
[  256.525363][T12003] loop2: detected capacity change from 0 to 128
[  256.526076][T12003] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  256.531160][T12003] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  256.584075][ T1014] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  256.767638][T12016] loop2: detected capacity change from 0 to 256
[  257.120149][T12036] loop2: detected capacity change from 0 to 64
[  257.151709][T12036] overlayfs: upper fs needs to support d_type.
[  257.212946][T12036] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  257.215956][T12036] overlayfs: failed to set xattr on upper
[  257.225065][T12036] overlayfs: ...falling back to redirect_dir=nofollow.
[  257.228465][T12036] overlayfs: ...falling back to index=off.
[  257.230999][T12036] overlayfs: ...falling back to uuid=null.
[  257.237413][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2513'.
[  257.237462][T12044] block nbd1: Unsupported socket: should be TCP or UNIX.
[  257.331111][ T5720] Trying to free block not in datazone
[  257.559205][   T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  257.703660][   T25] usb 5-1: Using ep0 maxpacket: 16
[  257.704336][   T25] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  257.705368][   T25] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  257.705383][   T25] usb 5-1: config 0 has no interface number 0
[  257.705409][   T25] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  257.707057][   T25] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  257.707073][   T25] usb 5-1: Product: syz
[  257.707082][   T25] usb 5-1: SerialNumber: syz
[  257.710923][   T25] usb 5-1: config 0 descriptor??
[  257.717603][   T25] cm109 5-1:0.8: invalid payload size 208, expected 4
[  257.724059][   T25] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input16
[  257.838008][T12067] loop6: detected capacity change from 0 to 16
[  257.842792][T12067] erofs (device loop6): mounted with root inode @ nid 36.
[  257.874078][T12067] erofs (device loop6): readahead error at folio 2 @ nid 89
[  257.877363][T12067] erofs (device loop6): readahead error at folio 1 @ nid 89
[  257.880080][T12067] erofs (device loop6): readahead error at folio 0 @ nid 89
[  257.883048][T12067] erofs (device loop6): read error -117 @ 0 of nid 89
[  257.906668][   T33] audit: type=1800 audit(1789785617.903:100): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2521" name="file2" dev="loop6" ino=89 res=0 errno=0
[  258.050302][T12069] loop2: detected capacity change from 0 to 32768
[  258.153570][T12075] loop2: detected capacity change from 0 to 2048
[  258.187316][T12075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.197883][T12075] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.2526: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[  258.229680][ T5720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.308935][    C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
[  258.309327][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.309473][   T25] usb 5-1: USB disconnect, device number 29
[  258.309541][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.309549][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  258.325397][   T25] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  258.530482][T12088] syzkaller1: entered promiscuous mode
[  258.535757][T12088] syzkaller1: entered allmulticast mode
[  258.835998][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  259.152794][T12102] loop4: detected capacity change from 0 to 4096
[  259.157976][T12102] EXT4-fs (loop4): Test dummy encryption mode enabled
[  259.182199][T12102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.288637][ T7120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.452935][T12108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17
[  259.464749][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  259.473099][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  259.476393][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  259.477504][   T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  259.480250][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  259.727272][T10886] bridge_slave_1: left allmulticast mode
[  259.727499][T10886] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.735462][T10886] bridge_slave_0: left allmulticast mode
[  259.739785][T10886] bridge_slave_0: left promiscuous mode
[  259.740001][T10886] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.920057][T10886] bond3 (unregistering): (slave bridge1): Releasing active interface
[  259.930297][T10886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.937776][T10886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.942941][T10886] bond0 (unregistering): Released all slaves
[  259.949501][T10886] bond1 (unregistering): Released all slaves
[  259.957247][T10886] bond2 (unregistering): Released all slaves
[  259.967600][T10886] bond3 (unregistering): Released all slaves
[  259.984469][T10886] bond4 (unregistering): Released all slaves
[  259.994783][ T5358] 8021q: adding VLAN 0 to HW filter on device eth13
[  260.071825][T10886] tipc: Left network mode
[  260.344661][ T5358] 8021q: adding VLAN 0 to HW filter on device eth14
[  260.431574][T10886] hsr_slave_0: left promiscuous mode
[  260.439526][T10886] hsr_slave_1: left promiscuous mode
[  260.440374][T10886] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.444271][T10886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.483705][   T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  260.627301][   T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  260.631563][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.651685][   T25] usb 5-1: config 0 descriptor??
[  260.656937][   T25] cp210x 5-1:0.0: cp210x converter detected
[  260.666809][T10886] team0 (unregistering): Port device team_slave_1 removed
[  260.671298][T10886] team0 (unregistering): Port device team_slave_0 removed
[  260.730427][ T5358] 8021q: adding VLAN 0 to HW filter on device eth15
[  261.032145][T12107] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.032323][T12107] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.032475][T12107] bridge_slave_0: entered allmulticast mode
[  261.033867][T12107] bridge_slave_0: entered promiscuous mode
[  261.036234][T12107] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.036352][T12107] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.036444][T12107] bridge_slave_1: entered allmulticast mode
[  261.037768][T12107] bridge_slave_1: entered promiscuous mode
[  261.085587][T12107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.087982][T12107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.098480][   T25] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  261.103594][   T25] cp210x 5-1:0.0: GPIO initialisation failed: -524
[  261.115721][   T25] usb 5-1: cp210x converter now attached to ttyUSB0
[  261.154936][T12107] team0: Port device team_slave_0 added
[  261.164072][T12148] loop6: detected capacity change from 0 to 32768
[  261.167973][T12107] team0: Port device team_slave_1 added
[  261.178335][T10886] IPVS: stop unused estimator thread 0...
[  261.183047][T12148] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  261.229041][T12107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.231685][T12107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.241077][T12107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.247646][T12107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.252328][T12107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.252387][T12107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.278302][ T5358] 8021q: adding VLAN 0 to HW filter on device eth16
[  261.286645][T10673] ocfs2: Unmounting device (7,6) on (node local)
[  261.310565][   T25] usb 5-1: USB disconnect, device number 30
[  261.327486][   T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  261.327944][   T25] cp210x 5-1:0.0: device disconnected
[  261.415810][T12107] hsr_slave_0: entered promiscuous mode
[  261.419655][T12107] hsr_slave_1: entered promiscuous mode
[  261.503049][   T56] Bluetooth: hci1: command tx timeout
[  261.578524][T12168] input: syz0 as /devices/virtual/input/input18
[  261.748802][T12174] loop6: detected capacity change from 0 to 512
[  261.757459][T12174] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  261.762091][T12174] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  261.762126][T12174] EXT4-fs (loop6): group descriptors corrupted!
[  261.894623][T12107] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  261.904220][T12107] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  261.904799][T12107] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  261.915402][T12107] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  261.916115][T12107] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  261.930196][T12107] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  261.930761][T12107] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  261.947907][T12107] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  262.034068][T12107] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.052264][T12185] loop6: detected capacity change from 0 to 32768
[  262.059795][T12107] 8021q: adding VLAN 0 to HW filter on device team0
[  262.065257][T12185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2556 (12185)
[  262.081173][T12185] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  262.081233][T12185] BTRFS info (device loop6): using sha256 checksum algorithm
[  262.086883][ T2297] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.086935][ T2297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.098821][ T2297] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.098935][ T2297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.167378][T12185] BTRFS info (device loop6): enabling ssd optimizations
[  262.167421][T12185] BTRFS info (device loop6): turning on async discard
[  262.167452][T12185] BTRFS info (device loop6): enabling free space tree
[  262.180888][ T5771] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  262.211848][T12185] BTRFS critical (device loop6 state E): emergency shutdown
[  262.264878][T10673] BTRFS info (device loop6 state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  262.323540][ T5771] usb 5-1: Using ep0 maxpacket: 16
[  262.327867][ T5771] usb 5-1: unable to get BOS descriptor or descriptor too short
[  262.327941][ T5771] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=fd.8a
[  262.345866][ T5771] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  262.345916][ T5771] usb 5-1: config 0 has no interface number 0
[  262.345974][ T5771] usb 5-1: config 0 interface 20 has no altsetting 0
[  262.363949][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.364000][ T5771] usb 5-1: Product: syz
[  262.364053][ T5771] usb 5-1: Manufacturer: syz
[  262.364084][ T5771] usb 5-1: SerialNumber: syz
[  262.379516][ T5771] usb 5-1: config 0 descriptor??
[  262.667751][ T5771] usb 5-1: USB disconnect, device number 31
[  262.678344][ T7736] udevd[7736]: setting owner of /dev/bus/usb/005/031 to uid=0, gid=0 failed: No such file or directory
[  262.825476][T12107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.062257][T12107] veth0_vlan: entered promiscuous mode
[  263.073332][T12107] veth1_vlan: entered promiscuous mode
[  263.104493][T12107] veth0_macvtap: entered promiscuous mode
[  263.116013][T12107] veth1_macvtap: entered promiscuous mode
[  263.155543][T12107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.164378][T12107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.239086][ T5772] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.242703][ T5772] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.246163][ T5772] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.249433][ T5772] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.345029][T12254] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2568'.
[  263.373901][  T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.373953][  T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.416689][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.419683][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.484322][   T56] Bluetooth: hci1: command tx timeout
[  263.786612][   T33] audit: type=1326 audit(1789785624.076:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.4.2576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf019e159 code=0x7fc00000
[  263.796796][   T33] audit: type=1326 audit(1789785624.097:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.4.2576" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffbf019e159 code=0x7fc00000
[  263.932010][ T6486] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  264.011119][T12277] binder: 12276:12277 ioctl c0306201 200000000480 returned -14
[  264.063095][T12279] loop6: detected capacity change from 0 to 256
[  264.076063][ T6486] usb 8-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  264.083777][ T6486] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  264.083875][ T6486] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  264.083911][ T6486] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  264.083947][ T6486] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  264.086486][T12279] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  264.090950][   T33] audit: type=1800 audit(1789785624.401:103): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2579" name="file1" dev="loop6" ino=1048709 res=0 errno=0
[  264.122027][ T6486] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.122078][ T6486] usb 8-1: Product: syz
[  264.122129][ T6486] usb 8-1: Manufacturer: syz
[  264.122160][ T6486] usb 8-1: SerialNumber: syz
[  264.137846][ T6486] ums-onetouch 8-1:1.0: USB Mass Storage device detected
[  264.342881][   T25] usb 8-1: USB disconnect, device number 2
[  265.465618][   T56] Bluetooth: hci1: command tx timeout
[  266.316122][T12303] loop7: detected capacity change from 0 to 512
[  266.486533][T12303] EXT4-fs (loop7): 1 orphan inode deleted
[  266.490396][T12303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.495805][T12303] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.539130][T12107] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.764233][T12310] kAFS: unable to lookup cell '/(,cL'
[  266.845414][T12312] loop7: detected capacity change from 0 to 256
[  266.922187][T12312] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  266.922253][T12312] FAT-fs (loop7): Filesystem has been set read-only
[  266.922357][T12312] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  266.922373][T12312] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  266.960347][T12312] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  266.960460][T12312] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  266.960476][T12312] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  266.960555][T12312] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  266.960572][T12312] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  266.966532][   T33] audit: type=1800 audit(1789785627.425:104): pid=12312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2592" name="file1" dev="loop7" ino=1048710 res=0 errno=0
[  266.978074][T12312] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  267.206765][T12331] loop7: detected capacity change from 0 to 4096
[  267.241948][T12331] NILFS (loop7): invalid segment: Checksum error in segment payload
[  267.241998][T12331] NILFS (loop7): trying rollback from an earlier position
[  267.333918][T12331] NILFS (loop7): recovery complete
[  267.339928][T12335] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  267.394322][T12338] loop4: detected capacity change from 0 to 128
[  267.397782][T12338] vfat: Unexpected value for 'rodir'
[  267.438975][T12342] loop6: detected capacity change from 0 to 128
[  267.447320][   T56] Bluetooth: hci1: command tx timeout
[  267.475682][T12342] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  267.480426][T12342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  267.900806][T12375] loop4: detected capacity change from 0 to 1024
[  267.915784][T12375] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  267.917214][T12375] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  267.934537][T12375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.993075][ T7120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.026953][T12384] loop6: detected capacity change from 0 to 128
[  268.038943][T12384] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  268.040584][T12384] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.055401][T12384] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.6.2624: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  268.104051][T10673] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  268.225227][T12392] loop4: detected capacity change from 0 to 2048
[  268.266387][T12397] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.314377][T12392] NILFS (loop4): bad btree node (ino=16, blocknr=15): unsorted keys at index 5 (1065168666629) and 6 (6)
[  268.314491][T12392] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16)
[  268.384369][T12392] Remounting filesystem read-only
[  268.384426][T12392] NILFS (loop4): error -5 truncating bmap (ino=16)
[  268.461007][T12408] loop6: detected capacity change from 0 to 764
[  268.465164][ T7120] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  268.495530][T12408] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  268.830535][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2643'.
[  268.834742][T12428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.870336][T12428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.872094][T12431] loop4: detected capacity change from 0 to 4096
[  268.899747][T12431] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  268.899812][T12431] ntfs3(loop4): Failed to initialize $Secure::$SDH (-22).
[  268.899917][T12431] ntfs3(loop4): Failed to initialize $Secure (-22).
[  268.900075][T12431] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  268.977425][T12435] program syz.4.2647 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  269.079637][ T5824] kernel write not supported for file /sg0 (pid: 5824 comm: kworker/1:5)
[  269.285395][ T6486] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  269.441238][ T6486] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  269.448910][ T6486] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.453259][ T6486] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  269.460843][ T6486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.460893][ T6486] usb 5-1: Product: syz
[  269.460932][ T6486] usb 5-1: Manufacturer: syz
[  269.460965][ T6486] usb 5-1: SerialNumber: syz
[  269.708377][ T6486] usb 5-1: unit 187 not found!
[  269.710334][ T6486] usb 5-1: unit 229 not found!
[  269.794666][ T6486] usb 5-1: USB disconnect, device number 32
[  269.910422][ T7738] udevd[7738]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  269.948779][T12450] loop7: detected capacity change from 0 to 136
[  270.561513][T12456] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  270.566193][T12456] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  271.309551][T12469] netlink: 'syz.7.2657': attribute type 1 has an invalid length.
[  271.309603][T12469] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2657'.
[  271.726991][T12480] set_capacity_and_notify: 1 callbacks suppressed
[  271.729708][T12480] loop4: detected capacity change from 0 to 32768
[  271.745071][T12480] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.784343][T12480] XFS (loop4): Ending clean mount
[  271.863406][T12480] XFS (loop4): Quotacheck needed: Please wait.
[  272.046273][T12480] XFS (loop4): Quotacheck: Done.
[  272.071531][T12519] loop7: detected capacity change from 0 to 512
[  272.093625][T12519] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.2672: Unimplemented hash flags: 0x0001
[  272.093707][T12519] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2672: Corrupt directory, running e2fsck is recommended
[  272.105440][T12519] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  272.105800][T12519] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.2672: corrupted in-inode xattr: invalid ea_ino
[  272.105814][T12519] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  272.106068][T12519] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.2672: couldn't read orphan inode 15 (err -117)
[  272.106079][T12519] loop7: lost filesystem error report for type 5 error -117
[  272.107030][T12519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.110225][T12519] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.2672: Unimplemented hash flags: 0x0001
[  272.110238][T12519] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2672: Corrupt directory, running e2fsck is recommended
[  272.110458][T12519] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.2672: Unimplemented hash flags: 0x0001
[  272.110468][T12519] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2672: Corrupt directory, running e2fsck is recommended
[  272.110654][T12519] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.2672: Unimplemented hash flags: 0x0001
[  272.110698][T12519] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2672: Corrupt directory, running e2fsck is recommended
[  272.111102][T12519] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.2672: Unimplemented hash flags: 0x0001
[  272.111119][T12519] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2672: Corrupt directory, running e2fsck is recommended
[  272.111454][T12519] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.2672: Unimplemented hash flags: 0x0001
[  272.111464][T12519] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2672: Corrupt directory, running e2fsck is recommended
[  272.186290][T12107] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.264568][ T7120] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  272.511884][T12534] loop7: detected capacity change from 0 to 1024
[  272.517037][T12534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  272.517294][T12534] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  272.535446][T12536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2675'.
[  272.565967][T12534] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 2: comm syz.7.2677: lblock 2 mapped to illegal pblock 2 (length 1)
[  272.566025][T12534] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  272.566307][T12534] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  272.566327][T12534] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 48: comm syz.7.2677: lblock 0 mapped to illegal pblock 48 (length 1)
[  272.566339][T12534] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  272.566427][T12534] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  272.566436][T12534] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.2677: Failed to acquire dquot type 0
[  272.566445][T12534] loop7: lost filesystem error report for type 5 error -117
[  272.566712][T12534] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  272.566723][T12534] loop7: lost filesystem error report for type 5 error -117
[  272.566836][T12534] EXT4-fs error (device loop7): ext4_evict_inode:269: inode #11: comm syz.7.2677: mark_inode_dirty error
[  272.566848][T12534] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  272.566915][T12534] EXT4-fs warning (device loop7): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  272.566955][T12534] EXT4-fs (loop7): 1 orphan inode deleted
[  272.568168][T12534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.744999][T12544] bonding: bond0 is being created...
[  272.759995][T12544] bonding: bond0 already exists
[  272.799242][T12107] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.813287][ T2297] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 1: comm kworker/u9:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  272.813328][ T2297] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  272.827612][ T2297] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  272.835719][ T2297] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u9:4: Failed to release dquot type 0
[  272.851679][ T2297] loop7: lost filesystem error report for type 5 error -117
[  272.880112][T12107] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  272.880167][T12107] loop7: lost filesystem error report for type 5 error -117
[  272.913353][T12107] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  272.913405][T12107] loop7: lost filesystem error report for type 5 error -117
[  272.925287][T12107] EXT4-fs error (device loop7): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  272.925340][T12107] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  272.925806][T12107] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  272.925819][T12107] loop7: lost filesystem error report for type 5 error -117
[  273.099367][T12562] loop6: detected capacity change from 0 to 256
[  273.202339][T12568] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  273.206085][T12568] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  273.210240][T12568] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  273.399926][T12578] netlink: 'syz.6.2693': attribute type 4 has an invalid length.
[  273.437315][T12580] loop6: detected capacity change from 0 to 256
[  273.455030][T12580] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  273.466091][T12580] FAT-fs (loop6): Filesystem has been set read-only
[  273.470479][T12580] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  273.474720][T12580] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  273.477808][   T33] audit: type=1800 audit(1789785634.248:105): pid=12580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2694" name="file1" dev="loop6" ino=1048712 res=0 errno=0
[  273.532394][   T33] audit: type=1326 audit(1789785634.311:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.6.2695" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6cdb9e159 code=0x0
[  274.241666][T12604] loop7: detected capacity change from 0 to 4096
[  274.245208][T12604] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  274.283434][T12604] ntfs3(loop7): mft corrupted
[  274.287575][T12604] ntfs3(loop7): Failed to load $Extend (-22).
[  274.292546][T12604] ntfs3(loop7): Failed to initialize $Extend.
[  274.341596][T12610] loop7: detected capacity change from 0 to 1764
[  274.379025][T12107] iso9660: Corrupted directory entry in block 14 of inode 1920
[  274.405984][T12107] iso9660: Corrupted directory entry in block 14 of inode 1920
[  274.663039][T12627] loop7: detected capacity change from 0 to 128
[  274.682226][T12625] loop4: detected capacity change from 0 to 4096
[  274.708023][T12625] ntfs3(loop4): Failed to load $Extend (-22).
[  274.708170][T12625] ntfs3(loop4): Failed to initialize $Extend.
[  275.191118][ T7298] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  275.311305][T12656] loop6: detected capacity change from 0 to 512
[  275.317173][T12656] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  275.329099][T12656] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2728: corrupted in-inode xattr: bad e_name length
[  275.329153][T12656] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  275.334976][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  275.334995][    C1] EXT4-fs (loop6): initial error at time 1789785636: ext4_iget_extra_inode:5210: inode 15
[  275.335015][    C1] EXT4-fs (loop6): last error at time 1789785636: ext4_iget_extra_inode:5210: inode 15
[  275.335777][T12656] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2728: couldn't read orphan inode 15 (err -117)
[  275.343948][ T7298] usb 5-1: Using ep0 maxpacket: 16
[  275.345582][ T7298] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  275.355435][T12656] loop6: lost filesystem error report for type 5 error -117
[  275.360688][ T7298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.360753][ T7298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.360800][ T7298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  275.360850][ T7298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.380087][ T7298] usb 5-1: config 0 descriptor??
[  275.384196][T12656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.421436][T10673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.524507][   T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  275.667583][   T25] usb 8-1: Using ep0 maxpacket: 8
[  275.670789][   T25] usb 8-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  275.675809][   T25] usb 8-1: config 3 has an invalid interface number: 45 but max is 0
[  275.679517][   T25] usb 8-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  275.679688][   T25] usb 8-1: config 3 has no interface number 0
[  275.679741][   T25] usb 8-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  275.679779][   T25] usb 8-1: config 3 interface 45 has no altsetting 0
[  275.699190][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.704218][   T25] usb 8-1: Product: syz
[  275.706279][   T25] usb 8-1: Manufacturer: syz
[  275.708440][   T25] usb 8-1: SerialNumber: syz
[  275.756418][   T26] block nbd0: Possible stuck request ffff8881027b8000: control (read@0,1024B). Runtime 150 seconds
[  275.814551][ T7298] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input19
[  275.949149][ T7298] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  275.994591][ T7298] usb 5-1: USB disconnect, device number 33
[  276.144197][   T25] usb 8-1: USB disconnect, device number 3
[  276.190344][ T7738] udevd[7738]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  276.421874][T12668] SQUASHFS error: lzo decompression failed, data probably corrupt
[  276.421926][T12668] SQUASHFS error: Failed to read block 0x1dd: -5
[  276.422182][T12668] SQUASHFS error: Unable to read metadata cache entry [1db]
[  276.422199][T12668] SQUASHFS error: Unable to read inode 0xa7
[  277.249233][T12700] set_capacity_and_notify: 1 callbacks suppressed
[  277.253168][T12700] loop4: detected capacity change from 0 to 16
[  277.258842][T12700] erofs (device loop4): algorithm 1 isn't enabled on this kernel
[  277.449725][   T33] audit: type=1326 audit(1789785638.427:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12703 comm="syz.6.2749" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6cdb9e159 code=0x0
[  278.650879][T12735] loop4: detected capacity change from 0 to 256
[  278.976991][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2765'.
[  279.001576][T12737] loop7: detected capacity change from 0 to 40427
[  279.009650][T12737] F2FS-fs (loop7): Wrong segment_count / block_count (64 > 16384)
[  279.009664][T12737] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  279.158729][T12737] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  279.207194][T12737] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  279.207247][T12737] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  279.289111][T12737] syz.7.2763: attempt to access beyond end of device
[  279.289111][T12737] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  279.430981][ T2297] kworker/u9:4: attempt to access beyond end of device
[  279.430981][ T2297] loop7: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  279.488855][T12066] kworker/u9:8: attempt to access beyond end of device
[  279.488855][T12066] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  279.488920][T12066] CPU: 0 UID: 0 PID: 12066 Comm: kworker/u9:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  279.488947][T12066] Tainted: [L]=SOFTLOCKUP
[  279.488951][T12066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  279.488956][T12066] Workqueue: writeback wb_workfn (flush-7:7)
[  279.488974][T12066] Call Trace:
[  279.488978][T12066]  <TASK>
[  279.488982][T12066]  dump_stack_lvl+0xe8/0x150
[  279.488995][T12066]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  279.489009][T12066]  f2fs_write_end_io+0x1215/0x16f0
[  279.489020][T12066]  ? blkg_put+0x22/0x240
[  279.489036][T12066]  __submit_merged_bio+0x258/0x6a0
[  279.489043][T12066]  ? rcu_is_watching+0x16/0xb0
[  279.489054][T12066]  __submit_merged_write_cond+0x3c9/0x4e0
[  279.489073][T12066]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  279.489092][T12066]  f2fs_write_data_pages+0x2a27/0x36f0
[  279.489113][T12066]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  279.489121][T12066]  ? clockevents_program_event+0x491/0x630
[  279.489145][T12066]  ? unwind_next_frame+0x8f/0x2550
[  279.489154][T12066]  ? lock_acquire+0x106/0x350
[  279.489168][T12066]  ? unwind_next_frame+0x1baf/0x2550
[  279.489178][T12066]  ? ret_from_fork_asm+0x1a/0x30
[  279.489193][T12066]  ? ret_from_fork_asm+0x1a/0x30
[  279.489203][T12066]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  279.489212][T12066]  do_writepages+0x338/0x560
[  279.489226][T12066]  ? reacquire_held_locks+0x104/0x190
[  279.489234][T12066]  ? writeback_sb_inodes+0x450/0x1b00
[  279.489244][T12066]  __writeback_single_inode+0x136/0x1220
[  279.489253][T12066]  ? do_raw_spin_unlock+0x4d/0x200
[  279.489264][T12066]  writeback_sb_inodes+0x9de/0x1b00
[  279.489272][T12066]  ? __lock_acquire+0x683/0x2cf0
[  279.489284][T12066]  ? unwind_next_frame+0x8f/0x2550
[  279.489312][T12066]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  279.489335][T12066]  ? rcu_is_watching+0x16/0xb0
[  279.489343][T12066]  ? queue_io+0x2d3/0x470
[  279.489352][T12066]  wb_writeback+0x41c/0xad0
[  279.489361][T12066]  ? queue_io+0x2b1/0x470
[  279.489371][T12066]  ? __pfx_wb_writeback+0x10/0x10
[  279.489379][T12066]  ? do_raw_spin_lock+0x12b/0x2f0
[  279.489393][T12066]  wb_workfn+0x431/0x10f0
[  279.489410][T12066]  ? __pfx_wb_workfn+0x10/0x10
[  279.489423][T12066]  ? update_protect_slice+0x128/0x210
[  279.489439][T12066]  ? process_scheduled_works+0x97a/0x1630
[  279.489448][T12066]  ? process_scheduled_works+0x97a/0x1630
[  279.489459][T12066]  ? rcu_is_watching+0x16/0xb0
[  279.489468][T12066]  ? process_scheduled_works+0x97a/0x1630
[  279.489477][T12066]  process_scheduled_works+0xc3d/0x1630
[  279.489497][T12066]  ? __pfx_process_scheduled_works+0x10/0x10
[  279.489508][T12066]  ? assign_work+0x3cf/0x5d0
[  279.489519][T12066]  worker_thread+0xa47/0xfb0
[  279.489533][T12066]  ? __kthread_parkme+0x71/0x1f0
[  279.489547][T12066]  kthread+0x38b/0x480
[  279.489553][T12066]  ? __pfx_worker_thread+0x10/0x10
[  279.489562][T12066]  ? __pfx_kthread+0x10/0x10
[  279.489571][T12066]  ret_from_fork+0x514/0xb70
[  279.489604][T12066]  ? __pfx_ret_from_fork+0x10/0x10
[  279.489611][T12066]  ? __switch_to+0xc89/0x1420
[  279.489622][T12066]  ? __pfx_kthread+0x10/0x10
[  279.489629][T12066]  ret_from_fork_asm+0x1a/0x30
[  279.489645][T12066]  </TASK>
[  279.651880][T12066] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  279.835415][T12759] VFS:Filesystem freeze failed
[  280.233766][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2779'.
[  280.554043][ T5779] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  280.713456][ T5779] usb 8-1: unable to get BOS descriptor or descriptor too short
[  280.716999][ T5779] usb 8-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60
[  280.722543][ T5779] usb 8-1: config 114 has an invalid interface number: 32 but max is 0
[  280.727314][ T5779] usb 8-1: config 114 has no interface number 0
[  280.727389][ T5779] usb 8-1: config 114 interface 32 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  280.727431][ T5779] usb 8-1: config 114 interface 32 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[  280.727472][ T5779] usb 8-1: config 114 interface 32 has no altsetting 0
[  280.743302][ T5779] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.743347][ T5779] usb 8-1: Product: syz
[  280.743380][ T5779] usb 8-1: Manufacturer: syz
[  280.743407][ T5779] usb 8-1: SerialNumber: syz
[  280.747203][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2779'.
[  280.776600][T12779] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  280.956688][T12795] xt_hashlimit: size too large, truncated to 1048576
[  280.985963][ T5779] usb 8-1: USB disconnect, device number 4
[  281.115968][T12800] loop4: detected capacity change from 0 to 136
[  281.119610][T12800] iso9660: Unknown parameter '000000000000021632115773e 
[  281.119610][T12800] ^H'@㟅.X&uQx'
[  281.227238][T12806] netlink: 'syz.4.2792': attribute type 10 has an invalid length.
[  281.229902][T12806] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.232758][T12806] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.245112][T12806] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.245226][T12806] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.245509][T12806] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.245636][T12806] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.264460][T12806] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  282.453886][T12823] loop7: detected capacity change from 0 to 512
[  282.462217][T12823] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  282.475369][T12823] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.2799: bad orphan inode 131083
[  282.485978][T12823] loop7: lost filesystem error report for type 5 error -117
[  282.487680][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  282.487713][    C0] EXT4-fs (loop7): initial error at time 1789785643: ext4_orphan_get:1429
[  282.487757][    C0] EXT4-fs (loop7): last error at time 1789785643: ext4_orphan_get:1429
[  282.552541][T12823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.789184][T12107] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.260704][T12839] loop7: detected capacity change from 0 to 64
[  283.346650][T12841] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  283.373348][T12841] bond1 (unregistering): Released all slaves
[  283.468555][T12845] lo: entered allmulticast mode
[  283.475226][T12845] lo: left allmulticast mode
[  283.962113][T12853] syzkaller1: entered promiscuous mode
[  283.962176][T12853] syzkaller1: entered allmulticast mode
[  284.014610][T12849] loop7: detected capacity change from 0 to 32768
[  284.029425][T12849] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2809 (12849)
[  284.045163][T12849] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  284.045233][T12849] BTRFS info (device loop7): using sha256 checksum algorithm
[  284.109089][T12849] BTRFS info (device loop7): enabling ssd optimizations
[  284.109162][T12849] BTRFS info (device loop7): turning on async discard
[  284.110879][T12849] BTRFS info (device loop7): enabling free space tree
[  284.175648][T12107] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  284.346443][T12876] FAULT_INJECTION: forcing a failure.
[  284.346443][T12876] name failslab, interval 1, probability 0, space 0, times 0
[  284.346497][T12876] CPU: 1 UID: 0 PID: 12876 Comm: syz.4.2815 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  284.346549][T12876] Tainted: [L]=SOFTLOCKUP
[  284.346555][T12876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.346561][T12876] Call Trace:
[  284.346565][T12876]  <TASK>
[  284.346570][T12876]  dump_stack_lvl+0xe8/0x150
[  284.346585][T12876]  should_fail_ex+0x410/0x560
[  284.346598][T12876]  ? alloc_io_context+0x27/0x290
[  284.346607][T12876]  should_failslab+0xa8/0x100
[  284.346618][T12876]  ? alloc_io_context+0x27/0x290
[  284.346626][T12876]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  284.346638][T12876]  ? alloc_io_context+0x27/0x290
[  284.346649][T12876]  alloc_io_context+0x27/0x290
[  284.346658][T12876]  set_task_ioprio+0x461/0x5e0
[  284.346675][T12876]  ? set_task_ioprio+0x5f/0x5e0
[  284.346690][T12876]  __se_sys_ioprio_set+0x7dc/0xa60
[  284.346704][T12876]  ? __se_sys_ioprio_set+0xd0/0xa60
[  284.346723][T12876]  do_syscall_64+0x166/0x520
[  284.346736][T12876]  ? trace_irq_disable+0x3b/0x140
[  284.346749][T12876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.346767][T12876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.346780][T12876] RIP: 0033:0x7ffbf019e159
[  284.346795][T12876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.346805][T12876] RSP: 002b:00007ffbf1017028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb
[  284.346816][T12876] RAX: ffffffffffffffda RBX: 00007ffbf0425fa0 RCX: 00007ffbf019e159
[  284.346823][T12876] RDX: 0000000000004004 RSI: 0000000000000000 RDI: 0000000000000002
[  284.346829][T12876] RBP: 00007ffbf023506b R08: 0000000000000000 R09: 0000000000000000
[  284.346834][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.346839][T12876] R13: 00007ffbf0426038 R14: 00007ffbf0425fa0 R15: 00007fffd12ecaa8
[  284.346850][T12876]  </TASK>
[  284.647335][T12890] loop4: detected capacity change from 0 to 4096
[  284.651427][T12890] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  284.675745][T12890] ntfs3(loop4): Failed to load root (-22).
[  285.061185][T12919] loop6: detected capacity change from 0 to 512
[  285.084377][T12919] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  285.125076][T12919] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2829: casefold flag without casefold feature
[  285.131438][T12919] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  285.132511][T12919] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2829: couldn't read orphan inode 15 (err -117)
[  285.139242][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  285.139253][    C0] EXT4-fs (loop6): initial error at time 1789785646: ext4_orphan_get:1403: inode 15
[  285.139266][    C0] EXT4-fs (loop6): last error at time 1789785646: ext4_orphan_get:1403: inode 15
[  285.148829][T12919] loop6: lost filesystem error report for type 5 error -117
[  285.152208][T12919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.166728][T12919] EXT4-fs (loop6): shut down requested (1)
[  285.227922][T10673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.628785][T12941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  285.922771][T12961] loop7: detected capacity change from 0 to 128
[  285.933809][T12955] loop4: detected capacity change from 0 to 32768
[  285.948736][T12955] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  285.964152][T12961] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  285.970736][T12961] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  285.988671][   T33] audit: type=1800 audit(1789785647.392:108): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2848" name="file1" dev="loop7" ino=12 res=0 errno=0
[  286.030981][ T7120] ocfs2: Unmounting device (7,4) on (node local)
[  286.068705][T12107] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  286.136579][T12968] FAULT_INJECTION: forcing a failure.
[  286.136579][T12968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.140798][T12968] CPU: 0 UID: 0 PID: 12968 Comm: syz.4.2849 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  286.140828][T12968] Tainted: [L]=SOFTLOCKUP
[  286.140832][T12968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.140837][T12968] Call Trace:
[  286.140842][T12968]  <TASK>
[  286.140846][T12968]  dump_stack_lvl+0xe8/0x150
[  286.140862][T12968]  should_fail_ex+0x410/0x560
[  286.140875][T12968]  _copy_from_user+0x2d/0xb0
[  286.140887][T12968]  ipv6_set_opt_hdr+0x3d3/0x760
[  286.140900][T12968]  do_ipv6_setsockopt+0x1444/0x3180
[  286.140914][T12968]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  286.140926][T12968]  ? futex_wait+0x2a2/0x390
[  286.140939][T12968]  ? __lock_acquire+0x683/0x2cf0
[  286.140954][T12968]  ? aa_sk_perm+0x6e0/0x910
[  286.140965][T12968]  ? __fget_files+0x2a/0x420
[  286.140977][T12968]  ? __pfx_aa_sk_perm+0x10/0x10
[  286.140988][T12968]  ? aa_sock_opt_perm+0x105/0x1b0
[  286.141001][T12968]  ipv6_setsockopt+0x59/0x170
[  286.141010][T12968]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  286.141020][T12968]  do_sock_setsockopt+0x17c/0x1b0
[  286.141032][T12968]  __x64_sys_setsockopt+0x13d/0x1b0
[  286.141044][T12968]  do_syscall_64+0x166/0x520
[  286.141053][T12968]  ? trace_irq_disable+0x3b/0x140
[  286.141061][T12968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.141070][T12968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.141078][T12968] RIP: 0033:0x7ffbf019e159
[  286.141087][T12968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.141093][T12968] RSP: 002b:00007ffbf1017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  286.141102][T12968] RAX: ffffffffffffffda RBX: 00007ffbf0425fa0 RCX: 00007ffbf019e159
[  286.141107][T12968] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000005
[  286.141112][T12968] RBP: 00007ffbf023506b R08: 0000000000000008 R09: 0000000000000000
[  286.141117][T12968] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  286.141121][T12968] R13: 00007ffbf0426038 R14: 00007ffbf0425fa0 R15: 00007fffd12ecaa8
[  286.141138][T12968]  </TASK>
[  286.339528][T12966] loop7: detected capacity change from 0 to 32768
[  286.344175][T12966] (syz.7.2850,12966,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  286.347379][T12966] (syz.7.2850,12966,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  286.347442][T12966] (syz.7.2850,12966,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  286.354145][T12966] (syz.7.2850,12966,0):ocfs2_initialize_super:2194 ERROR: status = -22
[  286.357221][T12966] (syz.7.2850,12966,0):ocfs2_fill_super:1177 ERROR: status = -22
[  286.591090][T12988] vti0: entered promiscuous mode
[  286.595341][T12988] vti0: entered allmulticast mode
[  286.695482][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2864'.
[  286.695542][T12994] netlink: 'syz.7.2864': attribute type 2 has an invalid length.
[  287.330720][T13023] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2876'.
[  287.330784][T13023] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2876'.
[  287.549592][T13031] loop6: detected capacity change from 0 to 1024
[  287.719739][T13035] syz_tun: left allmulticast mode
[  287.722219][T13035] bridge0: port 3(syz_tun) entered disabled state
[  287.738147][T13035] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  287.852778][T13045] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  287.852840][T13045] CIFS mount error: No usable UNC path provided in device string!
[  287.852840][T13045] 
[  287.855521][T13045] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  287.952301][   T34] INFO: task syz.0.884:8009 blocked for more than 143 seconds.
[  287.952354][   T34]       Tainted: G             L      syzkaller #0
[  287.952408][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.952435][   T34] task:syz.0
** replaying previous printk message **
[  287.952435][   T34] task:syz.0.884       state:D stack:27744 pid:8009  tgid:8008  ppid:6350   task_flags:0x400140 flags:0x00080002
[  287.952510][   T34] Call Trace:
[  287.952536][   T34]  <TASK>
[  287.952559][   T34]  __schedule+0x17d4/0x5820
[  287.952597][   T34]  ? __pfx_blkdev_writepages+0x10/0x10
[  287.952627][   T34]  ? do_writepages+0x4c1/0x560
[  287.952661][   T34]  ? __pfx___schedule+0x10/0x10
[  287.952690][   T34]  ? schedule+0x90/0x2b0
[  287.952717][   T34]  schedule+0x164/0x2b0
[  287.952744][   T34]  schedule_preempt_disabled+0x13/0x30
[  287.952769][   T34]  __mutex_lock+0x7c1/0x1550
[  287.952798][   T34]  ? __mutex_lock+0x5d4/0x1550
[  287.952826][   T34]  ? sync_bdevs+0x276/0x470
[  287.952854][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  287.952885][   T34]  ? iput+0x456/0xf00
[  287.952915][   T34]  sync_bdevs+0x276/0x470
[  287.952945][   T34]  __ia32_sys_sync+0xc5/0x120
[  287.952974][   T34]  ? __pfx___ia32_sys_sync+0x10/0x10
[  287.953003][   T34]  ? __seccomp_permit_syscall+0xe7/0x2b0
[  287.953032][   T34]  do_syscall_64+0x166/0x520
[  287.953059][   T34]  ? trace_irq_disable+0x3b/0x140
[  287.953085][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.953114][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.953140][   T34] RIP: 0033:0x7f5e8639e159
[  287.953165][   T34] RSP: 002b:00007f5e871d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  287.953273][   T34] RAX: ffffffffffffffda RBX: 00007f5e86625fa0 RCX: 00007f5e8639e159
[  287.953302][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  287.953332][   T34] RBP: 00007f5e86625fa0 R08: 0000000000000000 R09: 0000000000000000
[  287.953361][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.953392][   T34] R13: 00007f5e86626038 R14: 00007f5e86625fa0 R15: 00007ffcfaff4f28
[  287.953435][   T34]  </TASK>
[  287.953506][   T34] 
[  287.953506][   T34] Showing all locks held in the system:
[  287.953536][   T34] locks held by khungtaskd/34: 1, last CPU#0:
[  287.953567][   T34]  #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  287.953746][   T34] locks held by udevd/5061: 1, last CPU#1:
[  287.953769][   T34]  #0: ffffffff8f4ec0b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[  287.956319][   T34] locks held by getty/5441: 2, on CPU#0:
[  287.956328][   T34]  #0: ffff8881149ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  287.956359][   T34]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  287.956392][   T34] locks held by udevd/5726: 1, on CPU#1:
[  287.956400][   T34]  #0: ffff88816d04f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  287.956431][   T34] locks held by kworker/0:5/5779: 4, last CPU#0:
[  287.956439][   T34]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  287.956470][   T34]  #1: ffffc90006abfc40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  287.956529][   T34]  #2: ffffffff8ee8b020 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40
[  287.956564][   T34]  #3: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  287.956602][   T34] locks held by syz.0.884/8009: 1, on CPU#1:
[  287.956610][   T34]  #0: ffff88816d04f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  287.956640][   T34] locks held by syz-executor/10673: 4, last CPU#1:
[  287.956649][   T34]  #0: ffffffff8ee35b50 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480
[  287.956680][   T34]  #1: ffff8881bf24d038 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  287.956712][   T34]  #2: ffff88816c7ac378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  287.956749][   T34]  #3: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  287.956785][   T34] locks held by syz-executor/12107: 4, last CPU#1:
[  287.956794][   T34]  #0: ffffffff8ee35b50 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480
[  287.956823][   T34]  #1: ffff8881baa81078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  287.956915][   T34]  #2: ffff88816c7ae9b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  287.956949][   T34]  #3: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  287.956981][   T34] locks held by syz-executor/13048: 4, last CPU#1:
[  287.956989][   T34]  #0: ffff888029560460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  287.957027][   T34]  #1: ffff888119ae38d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  287.957066][   T34]  #2: ffffffff8f4ec0b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[  287.957096][   T34]  #3: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  287.957124][   T34] 
[  287.957133][   T34] =============================================
[  287.957133][   T34] 
[  287.957139][   T34] NMI backtrace for cpu 1
[  287.957150][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  287.957165][   T34] Tainted: [L]=SOFTLOCKUP
[  287.957169][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.957177][   T34] Call Trace:
[  287.957182][   T34]  <TASK>
[  287.957188][   T34]  dump_stack_lvl+0xe8/0x150
[  287.957207][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  287.957224][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  287.957242][   T34]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  287.957260][   T34]  sys_info+0x135/0x170
[  287.957275][   T34]  watchdog+0xfd7/0x1030
[  287.957292][   T34]  ? watchdog+0x1c7/0x1030
[  287.957307][   T34]  kthread+0x38b/0x480
[  287.957321][   T34]  ? __pfx_watchdog+0x10/0x10
[  287.957331][   T34]  ? __pfx_kthread+0x10/0x10
[  287.957343][   T34]  ret_from_fork+0x514/0xb70
[  287.957357][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  287.957369][   T34]  ? __switch_to+0xc89/0x1420
[  287.957387][   T34]  ? __pfx_kthread+0x10/0x10
[  287.957398][   T34]  ret_from_fork_asm+0x1a/0x30
[  287.957423][   T34]  </TASK>
[  287.957428][   T34] Sending NMI from CPU 1 to CPUs 0:
[  287.957513][    C0] NMI backtrace for cpu 0
[  287.957528][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  287.957546][    C0] Tainted: [L]=SOFTLOCKUP
[  287.957551][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.957559][    C0] RIP: 0010:io_serial_out+0x7c/0xc0
[  287.957585][    C0] Code: 52 57 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4c 05 c7 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
[  287.957598][    C0] RSP: 0018:ffffc90000157900 EFLAGS: 00000002
[  287.957610][    C0] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000
[  287.957618][    C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
[  287.957627][    C0] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004
[  287.957635][    C0] R10: dffffc0000000000 R11: ffffffff85705b30 R12: dffffc0000000000
[  287.957645][    C0] R13: 0000000000000020 R14: ffffffff9ad27100 R15: 0000000000000000
[  287.957655][    C0] FS:  0000000000000000(0000) GS:ffff88818d6e4000(0000) knlGS:0000000000000000
[  287.957665][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.957674][    C0] CR2: 00007ffbf0f5da08 CR3: 0000000169eac000 CR4: 00000000000006f0
[  287.957711][    C0] Call Trace:
[  287.957718][    C0]  <TASK>
[  287.957725][    C0]  __serial8250_console_fifo_write+0x1e6/0x3e0
[  287.957746][    C0]  serial8250_console_write+0xaa1/0x1200
[  287.957765][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  287.957779][    C0]  ? __schedule+0x17ea/0x5820
[  287.957795][    C0]  nbcon_emit_next_record+0xef5/0x1a90
[  287.957815][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  287.957830][    C0]  ? nbcon_context_try_acquire+0x819/0xbd0
[  287.957847][    C0]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  287.957866][    C0]  nbcon_kthread_func+0x679/0x880
[  287.957880][    C0]  ? nbcon_kthread_func+0x163/0x880
[  287.957892][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  287.957907][    C0]  ? __kthread_parkme+0x71/0x1f0
[  287.957923][    C0]  ? __kthread_parkme+0x199/0x1f0
[  287.957940][    C0]  kthread+0x38b/0x480
[  287.957952][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  287.957963][    C0]  ? __pfx_kthread+0x10/0x10
[  287.957974][    C0]  ret_from_fork+0x514/0xb70
[  287.957988][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  287.957999][    C0]  ? __switch_to+0xc89/0x1420
[  287.958015][    C0]  ? __pfx_kthread+0x10/0x10
[  287.958026][    C0]  ret_from_fork_asm+0x1a/0x30
[  287.958050][    C0]  </TASK>
[  287.965641][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  288.249781][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.253433][   T34] Tainted: [L]=SOFTLOCKUP
[  288.255134][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  288.258850][   T34] Call Trace:
[  288.260044][   T34]  <TASK>
[  288.261084][   T34]  vpanic+0x56d/0xa60
[  288.262443][   T34]  ? __pfx___schedule+0x10/0x10
[  288.264042][   T34]  ? __pfx_vpanic+0x10/0x10
[  288.265532][   T34]  panic+0xc5/0xd0
[  288.266753][   T34]  ? __pfx_panic+0x10/0x10
[  288.268197][   T34]  ? preempt_schedule_common+0x7f/0xd0
[  288.269970][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  288.271693][   T34]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  288.273669][   T34]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  288.275641][   T34]  watchdog+0x1030/0x1030
[  288.277023][   T34]  ? watchdog+0x1c7/0x1030
[  288.278581][   T34]  kthread+0x38b/0x480
[  288.279891][   T34]  ? __pfx_watchdog+0x10/0x10
[  288.281423][   T34]  ? __pfx_kthread+0x10/0x10
[  288.283188][   T34]  ret_from_fork+0x514/0xb70
[  288.284992][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  288.286981][   T34]  ? __switch_to+0xc89/0x1420
[  288.288670][   T34]  ? __pfx_kthread+0x10/0x10
[  288.290346][   T34]  ret_from_fork_asm+0x1a/0x30
[  288.292065][   T34]  </TASK>
[  288.293871][   T34] Kernel Offset: disabled
[  288.295380][   T34] Rebooting in 86400 seconds..
