last executing test programs:

3.867976692s ago: executing program 2 (id=598):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044081}, 0x40000)

3.791161427s ago: executing program 2 (id=599):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'sit0\x00'}}, 0x1e)
sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x252882, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4ea4, @private=0xa010100}, 0x10)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1bf, &(0x7f0000000480)="$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")
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

2.920128974s ago: executing program 2 (id=608):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
write(r2, 0x0, 0x0)
close(r3)

1.994087806s ago: executing program 2 (id=615):
setresgid(0xee00, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x2a8000, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x5)
prlimit64(r0, 0x7, 0x0, 0x0)

1.06861104s ago: executing program 2 (id=621):
setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081)

468.688342ms ago: executing program 0 (id=628):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x9, 0xfffffffffffffffe}, {0xffffffff, 0x0, 0x9, 0x100000000002}]})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r2, 0x1000, &(0x7f0000001540)=""/4096})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

389.148041ms ago: executing program 1 (id=630):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r0, 0x80084522, &(0x7f0000001f40)=""/230)

311.126164ms ago: executing program 0 (id=631):
open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x28014010, 0x2, 0x2, 0x0, 0xd, 0x0, 0x0, 0x20, 0x9}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
dup3(r0, r2, 0x6700000000000000)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001500)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x6, {0x7, 0x2b, 0x5f, 0x400202, 0x0, 0xfe, 0x8000, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

310.857941ms ago: executing program 1 (id=632):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)

226.51946ms ago: executing program 1 (id=633):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x20}, @fda={0x66646185, 0x0, 0x1, 0xc8}}, &(0x7f00000001c0)={0x48, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

170.141953ms ago: executing program 1 (id=634):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000680)={0x1, @output={0x0, 0x1, {0x20000004, 0xe69}, 0x2007, 0xfffffffc}})

169.747427ms ago: executing program 0 (id=635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r4, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050)

97.589988ms ago: executing program 2 (id=636):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

97.416688ms ago: executing program 1 (id=637):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

96.970017ms ago: executing program 0 (id=638):
r0 = socket(0x400000000010, 0x3, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff04b, 0x0, 0x8})
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x20040041, 0x10, 0x3ff, 0x0, 0x3, 0x8}})

920.775µs ago: executing program 0 (id=639):
ioperm(0x5, 0x9, 0x80)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x393, 0x1)

686.743µs ago: executing program 0 (id=640):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYBLOB="1c57"], 0x0)

0s ago: executing program 1 (id=641):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x69, 0x4, 0x7d, 0x8, 0xabf, 0x3370, 0x30e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0xbc, 0x65}}]}}]}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47359' (ED25519) to the list of known hosts.
syzkaller login: [   56.989738][ T5828] cgroup: Unknown subsys name 'net'
[   57.154494][ T5828] cgroup: Unknown subsys name 'cpuset'
[   57.160962][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.547273][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.278782][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.285907][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.290739][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.294173][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.297129][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.300944][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.304271][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.307618][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.310749][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.317727][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.329807][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.336732][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.341846][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.345461][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.356189][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.728936][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   65.808571][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   65.833527][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   65.913758][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.917632][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.921292][ T5846] bridge_slave_0: entered allmulticast mode
[   65.924805][ T5846] bridge_slave_0: entered promiscuous mode
[   65.931577][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.934582][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.937602][ T5846] bridge_slave_1: entered allmulticast mode
[   65.942537][ T5846] bridge_slave_1: entered promiscuous mode
[   66.022179][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.050838][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.097932][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.101754][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.104855][ T5851] bridge_slave_0: entered allmulticast mode
[   66.108793][ T5851] bridge_slave_0: entered promiscuous mode
[   66.143826][ T5846] team0: Port device team_slave_0 added
[   66.148951][ T5846] team0: Port device team_slave_1 added
[   66.152011][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.154786][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.157684][ T5851] bridge_slave_1: entered allmulticast mode
[   66.162723][ T5851] bridge_slave_1: entered promiscuous mode
[   66.179432][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.182430][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.185320][ T5848] bridge_slave_0: entered allmulticast mode
[   66.189237][ T5848] bridge_slave_0: entered promiscuous mode
[   66.225344][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.228383][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.233570][ T5848] bridge_slave_1: entered allmulticast mode
[   66.237491][ T5848] bridge_slave_1: entered promiscuous mode
[   66.251209][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.253478][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.261616][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.270477][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.289381][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.292955][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.303505][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.311522][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.358246][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.395987][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.403781][ T5851] team0: Port device team_slave_0 added
[   66.436292][ T5851] team0: Port device team_slave_1 added
[   66.455387][ T5846] hsr_slave_0: entered promiscuous mode
[   66.458704][ T5846] hsr_slave_1: entered promiscuous mode
[   66.479380][ T5848] team0: Port device team_slave_0 added
[   66.485010][ T5848] team0: Port device team_slave_1 added
[   66.497826][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.500529][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.508634][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.552981][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.555871][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.567454][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.611508][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.613873][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.622999][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.628845][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.633252][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.642980][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.778682][ T5848] hsr_slave_0: entered promiscuous mode
[   66.783051][ T5848] hsr_slave_1: entered promiscuous mode
[   66.786381][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   66.788871][ T5848] Cannot create hsr debugfs directory
[   66.822997][ T5851] hsr_slave_0: entered promiscuous mode
[   66.826489][ T5851] hsr_slave_1: entered promiscuous mode
[   66.830689][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   66.833159][ T5851] Cannot create hsr debugfs directory
[   67.084055][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.106287][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.118006][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.131128][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.226111][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.241763][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.250770][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.275214][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.341186][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.357288][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.365407][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.378438][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.391328][ T5236] Bluetooth: hci1: command tx timeout
[   67.391992][   T55] Bluetooth: hci0: command tx timeout
[   67.396547][ T5852] Bluetooth: hci2: command tx timeout
[   67.503817][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.540473][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.553587][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   67.582307][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.585336][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.605668][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.608602][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.625377][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   67.648059][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.650842][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.674738][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.677672][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.703598][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.773071][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   67.796281][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.799252][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.824130][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.827139][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.852996][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.052754][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.070662][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.096271][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.167454][ T5851] veth0_vlan: entered promiscuous mode
[   68.173692][ T5846] veth0_vlan: entered promiscuous mode
[   68.204876][ T5851] veth1_vlan: entered promiscuous mode
[   68.208571][ T5848] veth0_vlan: entered promiscuous mode
[   68.216698][ T5846] veth1_vlan: entered promiscuous mode
[   68.237643][ T5848] veth1_vlan: entered promiscuous mode
[   68.292128][ T5851] veth0_macvtap: entered promiscuous mode
[   68.299360][ T5851] veth1_macvtap: entered promiscuous mode
[   68.314250][ T5848] veth0_macvtap: entered promiscuous mode
[   68.321399][ T5846] veth0_macvtap: entered promiscuous mode
[   68.331679][ T5848] veth1_macvtap: entered promiscuous mode
[   68.345155][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.348927][ T5846] veth1_macvtap: entered promiscuous mode
[   68.375512][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.395487][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.408255][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.414491][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.428029][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.433853][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.440881][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.466354][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.493335][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.507809][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.515262][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.532542][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.549093][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.557056][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.583671][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.588403][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.633574][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.651288][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.658474][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.721326][ T5075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.729737][ T5075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.758205][ T5075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.763478][ T5075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.804922][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.807740][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.848896][ T5075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.859619][ T5075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.899257][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.900320][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.906997][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.970796][ T5916] loop2: detected capacity change from 0 to 512
[   69.048823][ T5916] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[   69.066199][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[   69.071957][ T5916] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.3: iget: bad i_size value: 12154757448730
[   69.078434][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[   69.091199][ T5916] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3: couldn't read orphan inode 13 (err -117)
[   69.112609][ T5916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.122672][ T5916] fscrypt (loop2, inode 2): Error -61 getting encryption context
[   69.145605][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.166508][ T5925] loop0: detected capacity change from 0 to 4096
[   69.173335][ T5925] =======================================================
[   69.173335][ T5925] WARNING: The mand mount option has been deprecated and
[   69.173335][ T5925]          and is ignored by this kernel. Remove the mand
[   69.173335][ T5925]          option from the mount to silence this warning.
[   69.173335][ T5925] =======================================================
[   69.288109][ T5930] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.373447][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   69.471068][   T55] Bluetooth: hci1: command tx timeout
[   69.471581][ T5236] Bluetooth: hci0: command tx timeout
[   69.473443][ T5852] Bluetooth: hci2: command tx timeout
[   69.966462][ T5964] loop0: detected capacity change from 0 to 512
[   69.991905][ T5964] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   69.998305][ T5964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[   70.009867][ T5964] System zones: 1-12
[   70.014161][ T5964] EXT4-fs (loop0): orphan cleanup on readonly fs
[   70.017747][ T5964] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.20: invalid indirect mapped block 12 (level 1)
[   70.032008][ T5964] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.20: invalid indirect mapped block 2 (level 2)
[   70.042711][ T5964] EXT4-fs (loop0): 1 truncate cleaned up
[   70.046048][ T5964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[   70.068282][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   70.148807][ T5957] loop1: detected capacity change from 0 to 40427
[   70.206066][ T5957] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   70.220368][ T5957] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   70.278327][ T5977] netlink: 68 bytes leftover after parsing attributes in process `syz.2.24'.
[   70.306291][ T5848] syz-executor: attempt to access beyond end of device
[   70.306291][ T5848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   70.326618][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   70.326635][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.326641][ T5848] Call Trace:
[   70.326655][ T5848]  <TASK>
[   70.326660][ T5848]  dump_stack_lvl+0x189/0x250
[   70.326680][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.326690][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[   70.326700][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   70.326714][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   70.326730][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[   70.326747][ T5848]  f2fs_write_end_io+0x886/0xb60
[   70.326765][ T5848]  __submit_merged_bio+0x27a/0x6a0
[   70.326781][ T5848]  __submit_merged_write_cond+0x255/0x530
[   70.326796][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[   70.326851][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.326901][ T5848]  ? __lock_acquire+0xab9/0xd20
[   70.326919][ T5848]  ? do_raw_spin_lock+0x121/0x290
[   70.326934][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   70.326944][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.326956][ T5848]  do_writepages+0x32e/0x550
[   70.326974][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   70.326986][ T5848]  filemap_fdatawrite+0x199/0x240
[   70.326998][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   70.327033][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   70.327045][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[   70.327061][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[   70.327081][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   70.327114][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[   70.327125][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[   70.327137][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[   70.327143][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[   70.327160][ T5848]  ? shrinker_free+0x2ce/0x3e0
[   70.327170][ T5848]  deactivate_locked_super+0xbc/0x130
[   70.327182][ T5848]  cleanup_mnt+0x425/0x4c0
[   70.327192][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.327206][ T5848]  task_work_run+0x1d4/0x260
[   70.327219][ T5848]  ? __pfx_task_work_run+0x10/0x10
[   70.327228][ T5848]  ? __x64_sys_umount+0x122/0x160
[   70.327242][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[   70.327257][ T5848]  exit_to_user_mode_loop+0xec/0x110
[   70.327268][ T5848]  do_syscall_64+0x2bd/0x3b0
[   70.327275][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.327286][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.327294][ T5848]  ? exc_page_fault+0x9f/0xf0
[   70.327306][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.327314][ T5848] RIP: 0033:0x7f748e18ff17
[   70.327323][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   70.327331][ T5848] RSP: 002b:00007ffcebc8b5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   70.327341][ T5848] RAX: 0000000000000000 RBX: 00007f748e211c05 RCX: 00007f748e18ff17
[   70.327346][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcebc8b660
[   70.327350][ T5848] RBP: 00007ffcebc8b660 R08: 0000000000000000 R09: 0000000000000000
[   70.327355][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcebc8c6f0
[   70.327360][ T5848] R13: 00007f748e211c05 R14: 00000000000111f2 R15: 00007ffcebc8c730
[   70.327374][ T5848]  </TASK>
[   70.327378][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   70.711831][ T6001] usb usb8: usbfs: process 6001 (syz.1.26) did not claim interface 0 before use
[   70.865259][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37'.
[   70.868215][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'.
[   70.890278][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37'.
[   70.894744][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37'.
[   70.909973][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.925651][ T6011] loop2: detected capacity change from 0 to 2048
[   70.937424][ T6011] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096)
[   71.059776][ T5913] usb 1-1: Using ep0 maxpacket: 32
[   71.065113][ T6017] process 'syz.1.43' launched '/dev/fd/3' with NULL argv: empty string added
[   71.066470][ T5913] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   71.073572][ T5913] usb 1-1: config 0 has no interface number 0
[   71.084174][ T5913] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   71.096060][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.102896][ T5913] usb 1-1: Product: syz
[   71.104278][ T5913] usb 1-1: Manufacturer: syz
[   71.105157][ T6015] loop2: detected capacity change from 0 to 4096
[   71.105771][ T5913] usb 1-1: SerialNumber: syz
[   71.124655][ T5913] usb 1-1: config 0 descriptor??
[   71.153097][ T5913] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   71.164641][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.167434][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.357814][ T5913] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   71.383245][ T6029] trusted_key: syz.1.49 sent an empty control message without MSG_MORE.
[   71.388271][ T5913] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   71.550799][ T5852] Bluetooth: hci0: command tx timeout
[   71.550865][ T5236] Bluetooth: hci2: command tx timeout
[   71.553003][ T5852] Bluetooth: hci1: command tx timeout
[   71.567829][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[   71.800889][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   71.803182][ T5899] usb 1-1: USB disconnect, device number 2
[   71.828564][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   71.857496][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   71.874900][ T5899] quatech2 1-1:0.51: device disconnected
[   72.051795][ T6041] loop2: detected capacity change from 0 to 32768
[   72.108544][ T6041] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   72.158390][ T5851] ocfs2: Unmounting device (7,2) on (node local)
[   72.389056][ T6045] loop1: detected capacity change from 0 to 40427
[   72.398403][ T6045] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   72.401232][ T6045] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   72.504726][ T6045] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.522097][ T6045] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   72.524967][ T6045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   72.626888][ T6067] loop2: detected capacity change from 0 to 1024
[   72.655286][ T6067] EXT4-fs: Ignoring removed nobh option
[   72.705290][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.748266][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.947503][ T6077] loop2: detected capacity change from 0 to 4096
[   72.956388][ T6077] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   72.979960][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   72.997260][ T6077] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   73.002919][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'.
[   73.062319][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'.
[   73.154257][ T5899] usb 1-1: config 2 has an invalid interface number: 233 but max is 0
[   73.157673][ T5899] usb 1-1: config 2 has no interface number 0
[   73.169582][ T5899] usb 1-1: config 2 interface 233 has no altsetting 0
[   73.171258][ T6086] loop2: detected capacity change from 0 to 4096
[   73.181712][ T5899] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=33.00
[   73.190027][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.193333][ T5899] usb 1-1: Product: syz
[   73.195834][ T5899] usb 1-1: Manufacturer: syz
[   73.197863][ T5899] usb 1-1: SerialNumber: syz
[   73.248195][ T6086] ntfs3(loop2): ino=1e, "file1" attr_set_size
[   73.251675][ T6086] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   73.418855][ T5899] ftdi_sio 1-1:2.233: FTDI USB Serial Device converter detected
[   73.430624][ T5899] usb 1-1: Detected FT232HP
[   73.433835][ T5899] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   73.437857][ T5899] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   73.445882][ T5899] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   73.452706][ T6090] loop2: detected capacity change from 0 to 8192
[   73.455944][ T5899] usb 1-1: USB disconnect, device number 3
[   73.469302][ T5899] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   73.478277][ T5899] ftdi_sio 1-1:2.233: device disconnected
[   73.630218][ T5852] Bluetooth: hci2: command tx timeout
[   73.632911][ T5852] Bluetooth: hci0: command tx timeout
[   73.633364][   T55] Bluetooth: hci1: command tx timeout
[   74.364344][ T6130] loop1: detected capacity change from 0 to 8
[   74.582294][ T6140] loop2: detected capacity change from 0 to 4096
[   74.591577][ T6140] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   75.008249][ T6152] loop2: detected capacity change from 0 to 32768
[   75.186524][ T6161] netlink: 'syz.2.105': attribute type 1 has an invalid length.
[   75.188869][ T6161] netlink: 172 bytes leftover after parsing attributes in process `syz.2.105'.
[   75.345767][ T6170] loop1: detected capacity change from 0 to 512
[   75.351890][ T6170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   75.387053][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.390226][ T6175] netlink: 'syz.0.111': attribute type 6 has an invalid length.
[   75.395938][ T6170] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.396748][ T6175] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.111'.
[   75.403873][ T6170] capability: warning: `syz.1.110' uses deprecated v2 capabilities in a way that may be insecure
[   75.411564][   T33] audit: type=1800 audit(1756998686.086:2): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.110" name="file1" dev="loop1" ino=15 res=0 errno=0
[   75.469313][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.484108][ T6179] sctp: [Deprecated]: syz.2.114 (pid 6179) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.484108][ T6179] Use struct sctp_sack_info instead
[   75.560670][ T6185] loop2: detected capacity change from 0 to 8
[   76.029721][ T6203] binder: 6197:6203 ioctl 4018620d 0 returned -22
[   76.037996][ T6203] binder: 6197:6203 ioctl c0306201 0 returned -14
[   76.716500][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'.
[   76.742484][ T5899] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.815800][ T6226] loop1: detected capacity change from 0 to 512
[   76.847582][ T6226] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.134: bad orphan inode 13
[   76.852014][ T6226] ext4_test_bit(bit=12, block=4) = 1
[   76.854279][ T6226] is_bad_inode(inode)=0
[   76.856237][ T6226] NEXT_ORPHAN(inode)=0
[   76.857899][ T6226] max_ino=32
[   76.859235][ T6226] i_nlink=1
[   76.865753][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.894079][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.925425][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.939403][ T5899] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   76.944615][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.955603][ T5899] usb 3-1: config 0 descriptor??
[   77.380787][ T5899] prodikeys 0003:041E:2801.0001: unknown main item tag 0x2
[   77.389111][ T5899] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0
[   77.577812][ T5899] usb 3-1: USB disconnect, device number 2
[   79.419728][ T5913] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   79.602081][ T5913] usb 3-1: config index 0 descriptor too short (expected 19492, got 36)
[   79.605624][ T5913] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[   79.609179][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36
[   79.614591][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   79.619076][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.623236][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.631465][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[   79.635134][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.641311][ T5913] usb 3-1: config 0 descriptor??
[   79.849247][ T6277] loop1: detected capacity change from 0 to 4096
[   80.012432][ T6279] loop1: detected capacity change from 0 to 8
[   80.039344][ T6279] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[   80.064352][ T5913] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0
[   80.067307][ T5913] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0
[   80.074901][ T6281] Zero length message leads to an empty skb
[   80.093753][ T5913] lg-g15 0003:046D:C225.0002: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.2-1/input0
[   80.271886][ T5899] usb 3-1: USB disconnect, device number 3
[   80.340680][   T47] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   80.534450][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   80.542811][   T47] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc
[   80.546527][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.553456][   T47] usb 2-1: Product: syz
[   80.555178][   T47] usb 2-1: Manufacturer: syz
[   80.557183][   T47] usb 2-1: SerialNumber: syz
[   80.567992][   T47] usb 2-1: config 0 descriptor??
[   80.577742][   T47] ldusb 2-1:0.0: Interrupt in endpoint not found
[   80.964306][   T47] usb 2-1: USB disconnect, device number 2
[   81.508817][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   81.624631][ T6333] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   81.665592][ T6337] tmpfs: Bad value for 'mpol'
[   81.713854][ T6341] loop2: detected capacity change from 0 to 8
[   81.744211][ T6341] SQUASHFS error: xz decompression failed, data probably corrupt
[   81.749615][ T6341] SQUASHFS error: Failed to read block 0x108: -5
[   81.752205][ T6341] SQUASHFS error: Unable to read metadata cache entry [106]
[   81.754978][ T6341] SQUASHFS error: Unable to read inode 0x11f
[   82.118537][ T6357] loop9: detected capacity change from 0 to 7
[   82.133692][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.140301][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.143981][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.147409][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.154101][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.171928][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.185152][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.200867][ T6357] ldm_validate_partition_table(): Disk read failed.
[   82.215839][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.228120][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.243444][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read
[   82.257464][ T6357] Dev loop9: unable to read RDB block 0
[   82.277309][ T6357]  loop9: unable to read partition table
[   82.302798][ T6357] loop9: partition table beyond EOD, truncated
[   82.317096][ T6357] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ
[   82.317096][ T6357] ) failed (rc=-5)
[   83.202704][ T6366] loop1: detected capacity change from 0 to 32768
[   83.227577][ T6366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.192 (6366)
[   83.324331][ T6366] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   83.328308][ T6366] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   83.439185][ T6366] BTRFS info (device loop1): enabling ssd optimizations
[   83.441999][ T6366] BTRFS info (device loop1): enabling free space tree
[   83.535412][ T5848] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   83.937416][ T6407] loop2: detected capacity change from 0 to 1024
[   83.995353][ T6407] hfsplus: failed to load root directory
[   84.340759][ T5899] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   84.520762][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.538411][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   84.551400][ T5899] usb 2-1: string descriptor 0 read error: -22
[   84.553606][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   84.556275][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.583073][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   84.587598][ T5899] usb 2-1: MIDIStreaming interface descriptor not found
[   84.694024][ T6446] loop2: detected capacity change from 0 to 1024
[   84.703796][ T6446] EXT4-fs: Ignoring removed orlov option
[   84.706032][ T6446] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.724016][ T6446] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   84.738754][ T6446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.777631][ T5899] usb 2-1: USB disconnect, device number 3
[   84.823596][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.065667][ T6464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.224'.
[   85.069394][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'.
[   85.075315][ T6464] netlink: 31 bytes leftover after parsing attributes in process `syz.0.224'.
[   85.078345][ T6464] netlink: 'syz.0.224': attribute type 3 has an invalid length.
[   85.083096][ T6464] netlink: 'syz.0.224': attribute type 2 has an invalid length.
[   85.085945][ T6464] netlink: 31 bytes leftover after parsing attributes in process `syz.0.224'.
[   85.199879][ T5913] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   85.352441][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   85.357253][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   85.369679][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 255, setting to 64
[   85.374266][ T5913] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   85.377990][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.393020][ T5913] usb 3-1: config 0 descriptor??
[   85.395868][ T6460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   85.400704][ T5913] hub 3-1:0.0: bad descriptor, ignoring hub
[   85.403128][ T5913] hub 3-1:0.0: probe with driver hub failed with error -5
[   85.775037][ T6472] loop1: detected capacity change from 0 to 32768
[   85.806965][ T6472] jfs_mkdir: dtInsert returned -EIO
[   85.812984][ T6472] ERROR: (device loop1): jfs_mkdir: 
[   85.812984][ T6472] 
[   85.820157][ T6472] ERROR: (device loop1): remounting filesystem as read-only
[   86.289868][ T5913] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[   86.304573][ T5913] usb 3-1: USB disconnect, device number 4
[   86.536764][   T10] cfg80211: failed to load regulatory.db
[   86.652763][ T6487] loop1: detected capacity change from 0 to 8
[   86.671012][ T6487] SQUASHFS error: Failed to read block 0x2d7: -5
[   86.673810][ T6487] SQUASHFS error: Unable to read metadata cache entry [2d5]
[   86.904890][ T6493] syz.2.237 uses obsolete (PF_INET,SOCK_PACKET)
[   87.057962][ T6506] loop1: detected capacity change from 0 to 256
[   87.499639][   T33] audit: type=1326 audit(1756998698.136:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.2.245" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f787418ebe9 code=0x0
[   88.374821][ T6548] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[   88.555512][ T6556] loop2: detected capacity change from 0 to 2048
[   88.574224][ T6040] udevd[6040]: incorrect nilfs2 checksum on /dev/loop2
[   88.600756][ T6556] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   88.604457][ T6556] NILFS (loop2): mounting unchecked fs
[   88.622959][ T6040] udevd[6040]: incorrect nilfs2 checksum on /dev/loop2
[   88.624964][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'.
[   88.628690][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'.
[   88.635303][ T6562] netlink: 'syz.0.264': attribute type 6 has an invalid length.
[   88.636950][ T6556] NILFS (loop2): recovery complete
[   88.649641][ T6563] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.776546][   T10] IPVS: starting estimator thread 0...
[   88.880252][ T6568] IPVS: using max 50 ests per chain, 120000 per kthread
[   88.965042][ T6578] overlayfs: upper fs does not support file handles, falling back to index=off.
[   89.295521][ T6590] loop1: detected capacity change from 0 to 32768
[   89.299617][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   89.306578][ T6590] XFS: ikeep mount option is deprecated.
[   89.324757][ T6590] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   89.344110][ T6590] XFS (loop1): Ending clean mount
[   89.352247][ T6590] XFS (loop1): Quotacheck needed: Please wait.
[   89.379333][ T6590] XFS (loop1): Quotacheck: Done.
[   89.408486][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   89.460857][   T10] usb 3-1: Using ep0 maxpacket: 16
[   89.472450][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.479627][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   89.496797][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   89.515267][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.518449][   T10] usb 3-1: Product: syz
[   89.537245][   T10] usb 3-1: Manufacturer: syz
[   89.545382][   T10] usb 3-1: SerialNumber: syz
[   89.758748][   T10] usb 3-1: 0:2 : does not exist
[   89.767296][   T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   89.803912][   T10] usb 3-1: USB disconnect, device number 5
[   89.833958][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.910194][ T6621] netlink: 'syz.0.284': attribute type 1 has an invalid length.
[   89.913281][ T6621] netlink: 'syz.0.284': attribute type 2 has an invalid length.
[   89.983458][ T6627] dlm: non-version read from control device 36
[   90.413684][ T6643] netlink: 'syz.1.295': attribute type 9 has an invalid length.
[   90.529947][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   90.694808][    T9] usb 3-1: Using ep0 maxpacket: 8
[   90.706040][ T6648] : entered promiscuous mode
[   90.727938][    T9] usb 3-1: config 0 has no interfaces?
[   90.735892][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[   90.735924][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.736006][    T9] usb 3-1: Product: syz
[   90.736021][    T9] usb 3-1: Manufacturer: syz
[   90.736033][    T9] usb 3-1: SerialNumber: syz
[   90.744928][    T9] usb 3-1: config 0 descriptor??
[   91.019422][ T6639] loop2: detected capacity change from 0 to 64
[   91.097295][ T6639] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[   91.145942][    T9] usb 3-1: USB disconnect, device number 6
[   91.590855][ T6655] warning: `syz.1.299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   91.838266][ T6659] batadv_slave_1: entered promiscuous mode
[   91.843462][ T6658] batadv_slave_1: left promiscuous mode
[   91.988584][ T6667] netlink: 'syz.0.305': attribute type 11 has an invalid length.
[   91.992367][ T6667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.305'.
[   92.230571][   T33] audit: type=1326 audit(1756998702.876:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.314" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f748e18ebe9 code=0x0
[   92.270497][ T6665] loop2: detected capacity change from 0 to 32768
[   92.277974][ T6665] XFS: noattr2 mount option is deprecated.
[   92.281519][ T6665] XFS: attr2 mount option is deprecated.
[   92.285037][ T6665] XFS (loop2): attr2 and noattr2 cannot both be specified.
[   92.399749][ T6693] loop2: detected capacity change from 0 to 1024
[   92.403750][ T6693] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   92.407645][ T6693] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   92.451205][ T6693] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #5: comm syz.2.318: unexpected bad inode w/o EXT4_IGET_BAD
[   92.468016][ T6693] EXT4-fs (loop2): Remounting filesystem read-only
[   92.478178][ T6693] EXT4-fs (loop2): no journal found
[   92.494451][ T6693] EXT4-fs (loop2): can't get journal size
[   92.518318][ T6693] EXT4-fs (loop2): failed to initialize system zone (-117)
[   92.528705][ T6693] EXT4-fs (loop2): mount failed
[   93.698712][ T6720] loop1: detected capacity change from 0 to 1024
[   93.733271][   T33] audit: type=1800 audit(1756998704.396:5): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.330" name="file1" dev="loop1" ino=26 res=0 errno=0
[   93.762760][ T6722] loop2: detected capacity change from 0 to 16
[   93.787802][ T6722] erofs (device loop2): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[   93.806345][ T6722] erofs (device loop2): unsupported i_format 65280 of nid 255
[   94.076967][ T6724] loop1: detected capacity change from 0 to 32768
[   94.125938][ T6724] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   94.147527][ T6724] XFS (loop1): Ending clean mount
[   94.157721][ T6724] XFS (loop1): Quotacheck needed: Please wait.
[   94.210798][ T6724] XFS (loop1): Quotacheck: Done.
[   94.259198][ T5848] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   94.665707][ T6726] loop2: detected capacity change from 0 to 131072
[   94.673300][ T6726] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[   94.676672][ T6726] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   94.683314][ T6726] F2FS-fs (loop2): invalid crc value
[   94.744476][ T6726] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.752610][ T6726] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   94.755572][ T6726] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   94.908525][ T6740] loop1: detected capacity change from 0 to 4096
[   94.979237][ T6740] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB
[   95.362702][ T6752] smc: net device bond0 applied user defined pnetid SYZ0
[   95.365468][ T6752] smc: net device bond0 erased user defined pnetid SYZ0
[   95.398865][ T6754] loop2: detected capacity change from 0 to 512
[   95.419275][ T6754] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[   95.423409][ T6754] System zones: 0-2, 18-18, 34-35
[   95.434758][ T6754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.443383][ T6754] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.477017][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.551142][ T5913] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.713776][ T5913] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   95.721532][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0
[   95.735708][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   95.739653][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   95.744643][ T5913] usb 2-1: Product: syz
[   95.746407][ T5913] usb 2-1: Manufacturer: syz
[   95.748288][ T5913] usb 2-1: SerialNumber: syz
[   95.759812][ T5913] usb 2-1: config 0 descriptor??
[   95.773917][ T5913] usb 2-1: selecting invalid altsetting 0
[   96.018748][ T5913] usb 2-1: USB disconnect, device number 4
[   96.841976][ T6765] : renamed from bridge_slave_0 (while UP)
[   96.926596][ T5296] udevd[5296]: worker [5923] terminated by signal 33 (Unknown signal 33)
[   96.949550][ T5296] udevd[5296]: worker [5923] failed while handling '/devices/virtual/block/loop1'
[   96.980102][ T6774] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   97.285495][ T6784] loop2: detected capacity change from 0 to 256
[   97.288973][ T6784] exfat: Deprecated parameter 'namecase'
[   97.324832][ T6784] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   97.331903][ T5913] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   97.584988][ T5913] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[   97.588149][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.593540][ T5913] usb 2-1: Product: syz
[   97.594904][ T5913] usb 2-1: Manufacturer: syz
[   97.596395][ T5913] usb 2-1: SerialNumber: syz
[   97.612426][ T5913] usb 2-1: config 0 descriptor??
[   97.851810][ T5913] hso 2-1:0.0: Failed to find INT IN ep
[   97.853985][ T5913] usb-storage 2-1:0.0: USB Mass Storage device detected
[   98.056058][ T5913] usb 2-1: USB disconnect, device number 5
[   99.181288][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'.
[   99.192514][ T6800] netlink: 'syz.2.358': attribute type 2 has an invalid length.
[   99.619835][ T6819] netlink: 495 bytes leftover after parsing attributes in process `syz.2.367'.
[   99.819914][ T5913] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   99.911649][ T6839] loop2: detected capacity change from 0 to 256
[   99.925612][ T6839] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.930252][ T6839] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   99.938340][ T6839] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   99.989756][ T5913] usb 2-1: Using ep0 maxpacket: 32
[  100.001423][ T5913] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  100.004608][ T5913] usb 2-1: config 0 has no interface number 0
[  100.032296][ T5913] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  100.035896][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.045322][ T5913] usb 2-1: Product: syz
[  100.052753][ T5913] usb 2-1: Manufacturer: syz
[  100.058931][   T33] audit: type=1326 audit(1756998710.726:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787418ebe9 code=0x7ffc0000
[  100.059885][ T5913] usb 2-1: SerialNumber: syz
[  100.067387][   T33] audit: type=1326 audit(1756998710.726:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787418ebe9 code=0x7ffc0000
[  100.081973][   T33] audit: type=1326 audit(1756998710.746:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f787418ebe9 code=0x7ffc0000
[  100.087736][ T5913] usb 2-1: config 0 descriptor??
[  100.094894][   T33] audit: type=1326 audit(1756998710.746:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787418ebe9 code=0x7ffc0000
[  100.106885][   T33] audit: type=1326 audit(1756998710.746:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787418ebe9 code=0x7ffc0000
[  100.117983][ T5913] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  100.332294][ T5913] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  100.353340][ T5913] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  100.361231][   T55] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  100.365332][   T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) 
[  100.365352][   T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.365363][   T55] Workqueue: hci0 hci_rx_work
[  100.365389][   T55] Call Trace:
[  100.365396][   T55]  <TASK>
[  100.365403][   T55]  dump_stack_lvl+0x189/0x250
[  100.365430][   T55]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.365458][   T55]  ? __pfx__printk+0x10/0x10
[  100.365486][   T55]  ? kernfs_path_from_node+0x250/0x290
[  100.365529][   T55]  ? kernfs_path_from_node+0x2f/0x290
[  100.365551][   T55]  sysfs_create_dir_ns+0x259/0x280
[  100.365570][   T55]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  100.365589][   T55]  ? do_raw_spin_unlock+0x4d/0x240
[  100.365612][   T55]  kobject_add_internal+0x59f/0xb40
[  100.365637][   T55]  kobject_add+0x155/0x220
[  100.365655][   T55]  ? __pfx_kobject_add+0x10/0x10
[  100.365670][   T55]  ? _raw_spin_unlock+0x28/0x50
[  100.365696][   T55]  ? get_device_parent+0x366/0x3a0
[  100.365717][   T55]  device_add+0x408/0xb50
[  100.365736][   T55]  hci_conn_add_sysfs+0xd5/0x1e0
[  100.365758][   T55]  le_conn_complete_evt+0xc3a/0x1220
[  100.365806][   T55]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  100.365832][   T55]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  100.365855][   T55]  ? __asan_memcpy+0x40/0x70
[  100.365876][   T55]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  100.365897][   T55]  ? skb_pull_data+0xfb/0x200
[  100.365920][   T55]  hci_le_conn_complete_evt+0x187/0x450
[  100.365949][   T55]  hci_event_packet+0x78f/0x1200
[  100.365971][   T55]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  100.365994][   T55]  ? __pfx_hci_event_packet+0x10/0x10
[  100.366013][   T55]  ? kcov_remote_start+0x4d3/0x7f0
[  100.366033][   T55]  ? lockdep_hardirqs_on+0x90/0x150
[  100.366056][   T55]  ? hci_send_to_monitor+0xe2/0x570
[  100.366073][   T55]  hci_rx_work+0x46a/0xe80
[  100.366098][   T55]  ? process_scheduled_works+0x9ef/0x17b0
[  100.366115][   T55]  process_scheduled_works+0xae1/0x17b0
[  100.366155][   T55]  ? __pfx_process_scheduled_works+0x10/0x10
[  100.366184][   T55]  worker_thread+0x8a0/0xda0
[  100.366218][   T55]  kthread+0x711/0x8a0
[  100.366266][   T55]  ? __pfx_worker_thread+0x10/0x10
[  100.366281][   T55]  ? __pfx_kthread+0x10/0x10
[  100.366302][   T55]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.366321][   T55]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.366340][   T55]  ? __pfx_kthread+0x10/0x10
[  100.366359][   T55]  ret_from_fork+0x3fc/0x770
[  100.366377][   T55]  ? __pfx_ret_from_fork+0x10/0x10
[  100.366397][   T55]  ? __switch_to_asm+0x39/0x70
[  100.366415][   T55]  ? __switch_to_asm+0x33/0x70
[  100.366432][   T55]  ? __pfx_kthread+0x10/0x10
[  100.366459][   T55]  ret_from_fork_asm+0x1a/0x30
[  100.366493][   T55]  </TASK>
[  100.367781][   T55] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  100.476085][   T55] Bluetooth: hci0: failed to register connection device
[  100.588273][ T6851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.599664][ T5914] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  100.714264][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  100.714588][ T5899] usb 2-1: USB disconnect, device number 6
[  100.726829][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  100.738285][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  100.748340][ T5899] quatech2 2-1:0.51: device disconnected
[  100.750901][ T5914] usb 3-1: Using ep0 maxpacket: 32
[  100.756277][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.766991][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.774163][ T5914] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  100.778300][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.792188][ T5914] usb 3-1: config 0 descriptor??
[  101.171063][ T6865] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  101.432467][ T5914] saitek 0003:06A3:0621.0004: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0
[  101.585272][ T5914] usb 3-1: USB disconnect, device number 7
[  101.758715][ T6869] loop1: detected capacity change from 0 to 40427
[  101.763356][ T6869] F2FS-fs (loop1): build fault injection rate: 771
[  101.768013][ T6869] F2FS-fs (loop1): invalid crc value
[  101.822975][ T6869] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.841147][ T6869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  101.894252][ T6872] f2fs_ckpt-7:1: attempt to access beyond end of device
[  101.894252][ T6872] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  101.903459][ T6872] CPU: 0 UID: 0 PID: 6872 Comm: f2fs_ckpt-7:1 Not tainted syzkaller #0 PREEMPT(full) 
[  101.903484][ T6872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.903492][ T6872] Call Trace:
[  101.903499][ T6872]  <TASK>
[  101.903507][ T6872]  dump_stack_lvl+0x189/0x250
[  101.903532][ T6872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.903547][ T6872]  ? __pfx_queue_work_on+0x10/0x10
[  101.903561][ T6872]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.903581][ T6872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  101.903607][ T6872]  f2fs_handle_critical_error+0x37c/0x540
[  101.903633][ T6872]  f2fs_write_end_io+0x886/0xb60
[  101.903660][ T6872]  __submit_merged_bio+0x27a/0x6a0
[  101.903683][ T6872]  __submit_merged_write_cond+0x255/0x530
[  101.903707][ T6872]  f2fs_write_data_pages+0x261d/0x3000
[  101.903752][ T6872]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  101.903824][ T6872]  ? __lock_acquire+0xab9/0xd20
[  101.903851][ T6872]  ? do_raw_spin_lock+0x121/0x290
[  101.903874][ T6872]  ? do_raw_spin_unlock+0x4d/0x240
[  101.903889][ T6872]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  101.903909][ T6872]  do_writepages+0x32e/0x550
[  101.903936][ T6872]  ? do_raw_spin_unlock+0x4d/0x240
[  101.903953][ T6872]  filemap_fdatawrite+0x199/0x240
[  101.903972][ T6872]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  101.904024][ T6872]  ? do_raw_spin_unlock+0x4d/0x240
[  101.904043][ T6872]  f2fs_sync_dirty_inodes+0x31f/0x830
[  101.904068][ T6872]  f2fs_write_checkpoint+0x95a/0x1df0
[  101.904099][ T6872]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  101.904141][ T6872]  ? down_write+0x162/0x1f0
[  101.904153][ T6872]  ? __pfx_down_write+0x10/0x10
[  101.904167][ T6872]  ? __pfx___schedule+0x10/0x10
[  101.904189][ T6872]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  101.904212][ T6872]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  101.904238][ T6872]  issue_checkpoint_thread+0xd9/0x260
[  101.904255][ T6872]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  101.904269][ T6872]  ? __pfx_autoremove_wake_function+0x10/0x10
[  101.904286][ T6872]  ? __kthread_parkme+0x7b/0x200
[  101.904301][ T6872]  ? __kthread_parkme+0x1a1/0x200
[  101.904319][ T6872]  kthread+0x711/0x8a0
[  101.904338][ T6872]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  101.904351][ T6872]  ? __pfx_kthread+0x10/0x10
[  101.904368][ T6872]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.904410][ T6872]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.904429][ T6872]  ? __pfx_kthread+0x10/0x10
[  101.904446][ T6872]  ret_from_fork+0x3fc/0x770
[  101.904463][ T6872]  ? __pfx_ret_from_fork+0x10/0x10
[  101.904481][ T6872]  ? __switch_to_asm+0x39/0x70
[  101.904497][ T6872]  ? __switch_to_asm+0x33/0x70
[  101.904511][ T6872]  ? __pfx_kthread+0x10/0x10
[  101.904527][ T6872]  ret_from_fork_asm+0x1a/0x30
[  101.904556][ T6872]  </TASK>
[  101.904562][ T6872] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  102.051854][ T6882] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.395'.
[  102.097011][ T6884] openvswitch: netlink: IPv4 tun info is not correct
[  102.411663][ T6901] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  102.767872][ T6920] netlink: 'syz.1.412': attribute type 11 has an invalid length.
[  102.894855][ T6927] loop1: detected capacity change from 0 to 256
[  103.167242][ T6929] block nbd1: not configured, cannot reconfigure
[  104.245629][ T6954] loop2: detected capacity change from 0 to 40427
[  104.279954][ T6954] F2FS-fs (loop2): invalid crc value
[  104.396471][ T6954] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  104.410678][ T6954] F2FS-fs (loop2): Start checkpoint disabled!
[  104.431998][ T6954] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  104.853051][ T1136] kworker/u9:4: attempt to access beyond end of device
[  104.853051][ T1136] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  104.877142][ T1136] CPU: 0 UID: 0 PID: 1136 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  104.877207][ T1136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.877217][ T1136] Workqueue: writeback wb_workfn (flush-7:2)
[  104.877243][ T1136] Call Trace:
[  104.877250][ T1136]  <TASK>
[  104.877258][ T1136]  dump_stack_lvl+0x189/0x250
[  104.877282][ T1136]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.877299][ T1136]  ? __pfx_queue_work_on+0x10/0x10
[  104.877313][ T1136]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  104.877334][ T1136]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.877364][ T1136]  f2fs_handle_critical_error+0x37c/0x540
[  104.877392][ T1136]  f2fs_write_end_io+0x886/0xb60
[  104.877423][ T1136]  __submit_merged_bio+0x27a/0x6a0
[  104.877449][ T1136]  __submit_merged_write_cond+0x255/0x530
[  104.877475][ T1136]  f2fs_write_data_pages+0x261d/0x3000
[  104.877526][ T1136]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.877559][ T1136]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  104.877606][ T1136]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  104.877636][ T1136]  ? trace_f2fs_writepages+0x7f/0x200
[  104.877657][ T1136]  ? f2fs_write_node_pages+0x478/0x6e0
[  104.877697][ T1136]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  104.877727][ T1136]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.877748][ T1136]  do_writepages+0x32e/0x550
[  104.877773][ T1136]  ? reacquire_held_locks+0x127/0x1d0
[  104.877787][ T1136]  ? writeback_sb_inodes+0x384/0x1010
[  104.877812][ T1136]  __writeback_single_inode+0x145/0xff0
[  104.877831][ T1136]  ? do_raw_spin_unlock+0x4d/0x240
[  104.877851][ T1136]  writeback_sb_inodes+0x6c7/0x1010
[  104.877893][ T1136]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  104.877956][ T1136]  ? rcu_is_watching+0x15/0xb0
[  104.877980][ T1136]  wb_writeback+0x43b/0xaf0
[  104.878004][ T1136]  ? queue_io+0x3a1/0x590
[  104.878025][ T1136]  ? __pfx_wb_writeback+0x10/0x10
[  104.878050][ T1136]  ? _raw_spin_unlock_irq+0x23/0x50
[  104.878073][ T1136]  wb_workfn+0x409/0xef0
[  104.878103][ T1136]  ? __pfx_wb_workfn+0x10/0x10
[  104.878122][ T1136]  ? __lock_acquire+0xab9/0xd20
[  104.878153][ T1136]  ? process_scheduled_works+0x9ef/0x17b0
[  104.878200][ T1136]  ? _raw_spin_unlock_irq+0x23/0x50
[  104.878216][ T1136]  ? process_scheduled_works+0x9ef/0x17b0
[  104.878228][ T1136]  ? process_scheduled_works+0x9ef/0x17b0
[  104.878243][ T1136]  process_scheduled_works+0xae1/0x17b0
[  104.878285][ T1136]  ? __pfx_process_scheduled_works+0x10/0x10
[  104.878316][ T1136]  worker_thread+0x8a0/0xda0
[  104.878333][ T1136]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.878359][ T1136]  ? __kthread_parkme+0x7b/0x200
[  104.878383][ T1136]  kthread+0x711/0x8a0
[  104.878403][ T1136]  ? __pfx_worker_thread+0x10/0x10
[  104.878416][ T1136]  ? __pfx_kthread+0x10/0x10
[  104.878434][ T1136]  ? _raw_spin_unlock_irq+0x23/0x50
[  104.878451][ T1136]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.878470][ T1136]  ? __pfx_kthread+0x10/0x10
[  104.878487][ T1136]  ret_from_fork+0x3fc/0x770
[  104.878506][ T1136]  ? __pfx_ret_from_fork+0x10/0x10
[  104.878526][ T1136]  ? __switch_to_asm+0x39/0x70
[  104.878542][ T1136]  ? __switch_to_asm+0x33/0x70
[  104.878556][ T1136]  ? __pfx_kthread+0x10/0x10
[  104.878574][ T1136]  ret_from_fork_asm+0x1a/0x30
[  104.878607][ T1136]  </TASK>
[  104.878614][ T1136] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  105.184329][ T6967] netlink: 'syz.1.432': attribute type 30 has an invalid length.
[  105.235090][ T1136] CPU: 0 UID: 0 PID: 1136 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  105.235106][ T1136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.235112][ T1136] Workqueue: writeback wb_workfn (flush-7:2)
[  105.235155][ T1136] Call Trace:
[  105.235160][ T1136]  <TASK>
[  105.235165][ T1136]  dump_stack_lvl+0x189/0x250
[  105.235181][ T1136]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.235190][ T1136]  ? __pfx_queue_work_on+0x10/0x10
[  105.235199][ T1136]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  105.235212][ T1136]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.235228][ T1136]  f2fs_handle_critical_error+0x37c/0x540
[  105.235244][ T1136]  f2fs_write_end_io+0x886/0xb60
[  105.235261][ T1136]  __submit_merged_bio+0x27a/0x6a0
[  105.235275][ T1136]  __submit_merged_write_cond+0x255/0x530
[  105.235289][ T1136]  f2fs_write_data_pages+0x261d/0x3000
[  105.235316][ T1136]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  105.235334][ T1136]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  105.235358][ T1136]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  105.235375][ T1136]  ? trace_f2fs_writepages+0x7f/0x200
[  105.235386][ T1136]  ? f2fs_write_node_pages+0x478/0x6e0
[  105.235399][ T1136]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  105.235416][ T1136]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  105.235428][ T1136]  do_writepages+0x32e/0x550
[  105.235442][ T1136]  ? reacquire_held_locks+0x127/0x1d0
[  105.235450][ T1136]  ? writeback_sb_inodes+0x384/0x1010
[  105.235465][ T1136]  __writeback_single_inode+0x145/0xff0
[  105.235475][ T1136]  ? do_raw_spin_unlock+0x4d/0x240
[  105.235486][ T1136]  writeback_sb_inodes+0x6c7/0x1010
[  105.235507][ T1136]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  105.235535][ T1136]  ? rcu_is_watching+0x15/0xb0
[  105.235548][ T1136]  wb_writeback+0x43b/0xaf0
[  105.235562][ T1136]  ? queue_io+0x3a1/0x590
[  105.235572][ T1136]  ? __pfx_wb_writeback+0x10/0x10
[  105.235586][ T1136]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.235598][ T1136]  wb_workfn+0x409/0xef0
[  105.235613][ T1136]  ? __pfx_wb_workfn+0x10/0x10
[  105.235623][ T1136]  ? __lock_acquire+0xab9/0xd20
[  105.235639][ T1136]  ? process_scheduled_works+0x9ef/0x17b0
[  105.235649][ T1136]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.235658][ T1136]  ? process_scheduled_works+0x9ef/0x17b0
[  105.235665][ T1136]  ? process_scheduled_works+0x9ef/0x17b0
[  105.235672][ T1136]  process_scheduled_works+0xae1/0x17b0
[  105.235695][ T1136]  ? __pfx_process_scheduled_works+0x10/0x10
[  105.235710][ T1136]  worker_thread+0x8a0/0xda0
[  105.235718][ T1136]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.235732][ T1136]  ? __kthread_parkme+0x7b/0x200
[  105.235746][ T1136]  kthread+0x711/0x8a0
[  105.235757][ T1136]  ? __pfx_worker_thread+0x10/0x10
[  105.235764][ T1136]  ? __pfx_kthread+0x10/0x10
[  105.235774][ T1136]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.235784][ T1136]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.235795][ T1136]  ? __pfx_kthread+0x10/0x10
[  105.235805][ T1136]  ret_from_fork+0x3fc/0x770
[  105.235815][ T1136]  ? __pfx_ret_from_fork+0x10/0x10
[  105.235826][ T1136]  ? __switch_to_asm+0x39/0x70
[  105.235835][ T1136]  ? __switch_to_asm+0x33/0x70
[  105.235844][ T1136]  ? __pfx_kthread+0x10/0x10
[  105.235854][ T1136]  ret_from_fork_asm+0x1a/0x30
[  105.235871][ T1136]  </TASK>
[  105.235875][ T1136] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  105.847566][ T6984] overlay: filesystem on ./file0 not supported as upperdir
[  105.860299][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  105.973280][ T6992] openvswitch: netlink: Missing key (keys=40, expected=100)
[  106.012388][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  106.015847][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.020926][   T10] usb 2-1: config 0 descriptor??
[  106.026559][   T10] gspca_main: spca508-2.14.0 probing 8086:0110
[  106.177646][ T6988] loop2: detected capacity change from 0 to 40427
[  106.194607][ T6988] F2FS-fs (loop2): build fault injection rate: 9
[  106.197336][ T6988] F2FS-fs (loop2): build fault injection type: 0xeffa
[  106.215084][ T6988] F2FS-fs (loop2): invalid crc value
[  106.223028][ T6988] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  106.232750][ T6988] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  106.448615][   T10] gspca_spca508: reg_read err -71
[  106.460947][   T10] gspca_spca508: reg_read err -71
[  106.470235][   T10] gspca_spca508: reg_read err -71
[  106.473220][   T10] gspca_spca508: reg_read err -71
[  106.480999][   T10] gspca_spca508: reg write: error -71
[  106.483332][   T10] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  106.487431][ T7003] loop2: detected capacity change from 0 to 256
[  106.505818][   T10] usb 2-1: USB disconnect, device number 7
[  106.524421][ T7003] FAT-fs (loop2): Directory bread(block 64) failed
[  106.532693][ T7003] FAT-fs (loop2): Directory bread(block 65) failed
[  106.537191][ T7003] FAT-fs (loop2): Directory bread(block 66) failed
[  106.542600][ T7003] FAT-fs (loop2): Directory bread(block 67) failed
[  106.545718][ T7003] FAT-fs (loop2): Directory bread(block 68) failed
[  106.548319][ T7003] FAT-fs (loop2): Directory bread(block 69) failed
[  106.552564][ T7003] FAT-fs (loop2): Directory bread(block 70) failed
[  106.555158][ T7003] FAT-fs (loop2): Directory bread(block 71) failed
[  106.557988][ T7003] FAT-fs (loop2): Directory bread(block 72) failed
[  106.562066][ T7003] FAT-fs (loop2): Directory bread(block 73) failed
[  106.589897][ T5852] Bluetooth: hci0: command 0x0406 tx timeout
[  106.782694][ T7011] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  106.796310][ T7011] TC_ACT_REPEAT abuse ?
[  106.798617][    C1] TC_ACT_REPEAT abuse ?
[  106.806633][ T5075] Bluetooth: hci3: Frame reassembly failed (-84)
[  108.377004][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'.
[  108.385067][ T7016] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  108.388921][ T7016] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  108.578261][ T7024] syz_tun: entered allmulticast mode
[  108.587099][ T7023] syz_tun: left allmulticast mode
[  108.829997][ T5852] Bluetooth: hci3: command 0x1003 tx timeout
[  108.831002][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  109.552114][   T10] TC_ACT_REPEAT abuse ?
[  109.596013][ T7045] loop1: detected capacity change from 0 to 2048
[  109.627577][ T7048] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.655946][ T7048] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  109.661110][ T7048] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  109.668100][ T7048] Remounting filesystem read-only
[  109.679349][ T7045] NILFS (loop1): mounting fs with errors
[  109.684931][ T7045] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  109.688834][ T7045] Remounting filesystem read-only
[  109.716030][ T5848] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  109.750986][ T7052] netlink: 'syz.0.470': attribute type 11 has an invalid length.
[  109.751409][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'.
[  109.753456][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[  110.250933][ T5914] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  110.421956][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short
[  110.427589][ T5914] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  110.436381][ T5914] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  110.440469][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.443775][ T5914] usb 2-1: Product: syz
[  110.445535][ T5914] usb 2-1: Manufacturer: syz
[  110.447326][ T5914] usb 2-1: SerialNumber: syz
[  110.801755][ T5914] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[  110.951152][ T7081] loop2: detected capacity change from 0 to 2048
[  110.975407][ T6037]  loop2: p1 < >
[  110.985783][ T7081]  loop2: p1 < >
[  111.035135][ T6037] udevd[6037]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  111.157395][ T7089] loop2: detected capacity change from 0 to 512
[  111.164839][ T7089] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  111.170047][ T7089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  111.181209][ T7089] EXT4-fs (loop2): 1 truncate cleaned up
[  111.185380][ T7089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.198001][ T7089] syz.2.485 (pid 7089) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  111.217441][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.489644][ T5914] usb 2-1: device descriptor read/64, error -71
[  111.492364][   T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  111.649747][   T47] usb 3-1: Using ep0 maxpacket: 16
[  111.655138][   T47] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  111.658591][   T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.663104][   T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.669077][   T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.673121][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.675983][   T47] usb 3-1: Product: syz
[  111.677681][   T47] usb 3-1: Manufacturer: syz
[  111.680931][   T47] usb 3-1: SerialNumber: syz
[  111.739761][ T5914] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[  111.908353][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short
[  111.916563][ T5914] usb 2-1: device firmware changed
[  111.930379][ T5914] usb 2-1: USB disconnect, device number 9
[  112.094718][   T47] usb 3-1: 0:2 : does not exist
[  112.630938][   T33] audit: type=1326 audit(1756998723.296:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.491" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748e18ebe9 code=0x0
[  112.727747][   T47] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  112.773215][   T47] usb 3-1: USB disconnect, device number 8
[  112.828103][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.100658][ T7117] hugetlbfs: syz.1.494 (7117): Using mlock ulimits for SHM_HUGETLB is obsolete
[  113.368935][ T7120] netlink: 'syz.2.498': attribute type 4 has an invalid length.
[  113.640133][  T973] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  113.791766][ T7140] loop1: detected capacity change from 0 to 256
[  113.812494][ T7140] FAT-fs (loop1): Directory bread(block 64) failed
[  113.813623][  T973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  113.818021][ T7140] FAT-fs (loop1): Directory bread(block 65) failed
[  113.818499][  T973] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  113.821825][ T7140] FAT-fs (loop1): Directory bread(block 66) failed
[  113.828038][ T7140] FAT-fs (loop1): Directory bread(block 67) failed
[  113.831758][ T7140] FAT-fs (loop1): Directory bread(block 68) failed
[  113.833956][ T7140] FAT-fs (loop1): Directory bread(block 69) failed
[  113.836329][ T7140] FAT-fs (loop1): Directory bread(block 70) failed
[  113.839148][ T7140] FAT-fs (loop1): Directory bread(block 71) failed
[  113.844126][ T7140] FAT-fs (loop1): Directory bread(block 72) failed
[  113.846776][ T7140] FAT-fs (loop1): Directory bread(block 73) failed
[  113.847996][  T973] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.857097][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  113.860537][  T973] usb 3-1: SerialNumber: syz
[  114.012502][ T7148] loop1: detected capacity change from 0 to 512
[  114.024409][ T7148] EXT4-fs: Ignoring removed oldalloc option
[  114.038254][ T7148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  114.046490][ T7148] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  114.052893][ T7148] EXT4-fs (loop1): 1 truncate cleaned up
[  114.057339][ T7148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.110880][  T973] usb 3-1: USB disconnect, device number 9
[  114.154629][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.280683][  T973] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  115.433943][  T973] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.438009][  T973] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  115.940153][  T973] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  115.944660][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.947790][  T973] usb 3-1: Product: syz
[  115.950214][  T973] usb 3-1: Manufacturer: syz
[  115.956430][  T973] usb 3-1: SerialNumber: syz
[  116.198027][  T973] usb 3-1: 0:2 : does not exist
[  116.203517][  T973] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  116.225335][  T973] usb 3-1: USB disconnect, device number 10
[  116.368242][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.725819][ T7212] loop1: detected capacity change from 0 to 2048
[  116.786655][ T7216] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.813419][ T7219] loop2: detected capacity change from 0 to 512
[  116.816999][ T7219] EXT4-fs: Ignoring removed nobh option
[  116.823659][ T7212] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  116.828350][ T7212] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16)
[  116.843123][ T7219] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 3: comm syz.2.541: lblock 0 mapped to illegal pblock 3 (length 1)
[  116.855663][ T7219] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.541: error -117 reading directory block
[  116.863032][ T7212] Remounting filesystem read-only
[  116.863713][ T7219] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  116.865179][ T7212] NILFS (loop1): error -5 truncating bmap (ino=16)
[  116.870823][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.899845][ T5848] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  116.924108][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.202701][ T7241] loop1: detected capacity change from 0 to 512
[  117.233943][ T7241] EXT4-fs (loop1): too many log groups per flexible block group
[  117.237337][ T7241] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  117.256765][ T7241] EXT4-fs (loop1): mount failed
[  117.339851][ T7247] loop2: detected capacity change from 0 to 512
[  117.356641][ T7247] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.552: casefold flag without casefold feature
[  117.374812][ T7247] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.552: couldn't read orphan inode 15 (err -117)
[  117.382727][ T7247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.457298][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.557483][ T7258] loop2: detected capacity change from 0 to 1024
[  117.571135][ T7258] EXT4-fs: inline encryption not supported
[  117.573148][ T7258] EXT4-fs: Ignoring removed bh option
[  117.642366][ T7258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.702521][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.750165][ T7254] loop1: detected capacity change from 0 to 32768
[  117.984692][ T7254] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  117.984717][ T7254]   allowing incompatible features above 0.0: (unknown version)
[  117.984722][ T7254]   features: lz4
[  117.997722][ T7254] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  118.000504][ T7254] bcachefs (loop1): initializing new filesystem
[  118.011000][ T7254] bcachefs (loop1): going read-write
[  118.057856][ T7254] bcachefs (loop1): marking superblocks
[  118.303983][ T7254] bcachefs (loop1): initializing freespace
[  118.313288][ T7254] bcachefs (loop1): done initializing freespace
[  118.324647][ T7254] bcachefs (loop1): reading snapshots table
[  118.326612][ T7254] bcachefs (loop1): reading snapshots done
[  118.390343][ T7254] bcachefs (loop1): done starting filesystem
[  118.512559][ T7254] syz.1.555 (7254) used greatest stack depth: 16752 bytes left
[  118.571352][ T5848] bcachefs (loop1): shutting down
[  118.574257][ T5848] bcachefs (loop1): going read-only
[  118.577168][ T5848] bcachefs (loop1): finished waiting for writes to stop
[  118.598375][ T5848] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  118.663508][ T5848] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  118.674379][ T5848] bcachefs (loop1): clean shutdown complete, journal seq 4
[  118.684256][ T5848] bcachefs (loop1): marking filesystem clean
[  118.748855][ T5848] bcachefs (loop1): shutdown complete
[  118.830968][ T7285] netlink: 168 bytes leftover after parsing attributes in process `syz.0.562'.
[  118.922843][ T7290] loop2: detected capacity change from 0 to 512
[  118.938245][ T7290] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  118.945609][ T7290] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  118.958300][ T7290] EXT4-fs (loop2): 1 truncate cleaned up
[  118.966567][ T7290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.997578][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.380641][   T10] TC_ACT_REPEAT abuse ?
[  119.438075][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'.
[  119.893626][ T7319] TC_ACT_REPEAT abuse ?
[  119.896083][ T7319] TC_ACT_REPEAT abuse ?
[  119.898042][ T7319] TC_ACT_REPEAT abuse ?
[  119.900167][ T7319] TC_ACT_REPEAT abuse ?
[  119.901883][ T7319] TC_ACT_REPEAT abuse ?
[  119.907227][ T7318] TC_ACT_REPEAT abuse ?
[  120.127739][   T10] TC_ACT_REPEAT abuse ?
[  120.256423][ T7335] program syz.2.584 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.317404][ T7339] netlink: 'syz.2.586': attribute type 12 has an invalid length.
[  120.322639][   T10] TC_ACT_REPEAT abuse ?
[  120.325277][ T7339] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.586'.
[  120.600276][ T7355] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  120.602698][ T7355] netlink: 224 bytes leftover after parsing attributes in process `syz.2.593'.
[  120.637188][ T7359] tmpfs: User quota inode hardlimit too large.
[  120.855259][ T7369] TC_ACT_REPEAT abuse ?
[  120.918292][ T7371] loop2: detected capacity change from 0 to 256
[  121.243727][ T7381] loop1: detected capacity change from 0 to 32768
[  121.268599][ T7381] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  121.295928][ T5848] (syz-executor,5848,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  121.305726][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[  121.443504][ T7385] loop1: detected capacity change from 0 to 128
[  121.449681][ T7385] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  121.455228][ T7385] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  121.504768][   T65] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  122.339628][  T973] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  122.500193][  T973] usb 2-1: Using ep0 maxpacket: 32
[  122.509941][  T973] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  122.513274][  T973] usb 2-1: config 0 has no interface number 0
[  122.515745][  T973] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  122.531332][  T973] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  122.536138][  T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.539387][  T973] usb 2-1: Product: syz
[  122.541870][  T973] usb 2-1: Manufacturer: syz
[  122.543699][  T973] usb 2-1: SerialNumber: syz
[  122.556703][  T973] usb 2-1: config 0 descriptor??
[  122.572194][  T973] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  122.576651][  T973] em28xx 2-1:0.132: Video interface 132 found:
[  122.977856][  T973] em28xx 2-1:0.132: chip ID is em2840
[  123.270926][  T973] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  123.277851][  T973] em28xx 2-1:0.132: board has no eeprom
[  123.349734][  T973] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  123.359988][  T973] em28xx 2-1:0.132: analog set to bulk mode.
[  123.362206][ T5899] em28xx 2-1:0.132: Registering V4L2 extension
[  123.398921][  T973] usb 2-1: USB disconnect, device number 10
[  123.407822][  T973] em28xx 2-1:0.132: Disconnecting em28xx
[  123.495261][ T5899] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  123.505641][ T5899] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  123.507992][ T5899] em28xx 2-1:0.132: No AC97 audio processor
[  123.536649][ T5899] usb 2-1: Decoder not found
[  123.538637][ T5899] em28xx 2-1:0.132: failed to create media graph
[  123.550952][ T5899] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  123.566809][ T5899] em28xx 2-1:0.132: Remote control support is not available for this card.
[  123.578330][  T973] em28xx 2-1:0.132: Closing input extension
[  123.595050][  T973] em28xx 2-1:0.132: Freeing device
[  124.126561][ T7441] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  124.313172][ T7452] binder: 7451:7452 ioctl c0306201 200000000080 returned -14
[  124.499265][ T7462] capability: warning: `syz.0.638' uses 32-bit capabilities (legacy support in use)
[  124.644774][ T7460] loop2: detected capacity change from 0 to 32768
[  124.660844][ T7460] (syz.2.636,7460,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  124.668841][ T7460] (syz.2.636,7460,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  124.689389][ T7460] JBD2: Ignoring recovery information on journal
[  124.724188][ T7460] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  124.789427][ T7460] 
[  124.790520][ T7460] ======================================================
[  124.793358][ T7460] WARNING: possible circular locking dependency detected
[  124.796124][ T7460] syzkaller #0 Not tainted
[  124.798190][ T7460] ------------------------------------------------------
[  124.801937][ T7460] syz.2.636/7460 is trying to acquire lock:
[  124.804346][ T7460] ffff88801e80c0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  124.808073][ T7460] 
[  124.808073][ T7460] but task is already holding lock:
[  124.811009][ T7460] ffff88802ad1a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  124.814710][ T7460] 
[  124.814710][ T7460] which lock already depends on the new lock.
[  124.814710][ T7460] 
[  124.818828][ T7460] 
[  124.818828][ T7460] the existing dependency chain (in reverse order) is:
[  124.822375][ T7460] 
[  124.822375][ T7460] -> #4 (jbd2_handle){++++}-{0:0}:
[  124.825354][ T7460]        lock_acquire+0x120/0x360
[  124.827425][ T7460]        start_this_handle+0x1fa7/0x21c0
[  124.829736][ T7460]        jbd2__journal_start+0x2c1/0x5b0
[  124.832160][ T7460]        jbd2_journal_start+0x2a/0x40
[  124.834381][ T7460]        ocfs2_start_trans+0x376/0x6d0
[  124.836685][ T7460]        ocfs2_reserve_suballoc_bits+0x711/0x4640
[  124.839314][ T7460]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  124.842046][ T7460]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  124.844508][ T7460]        ocfs2_xattr_set+0xb70/0x11f0
[  124.846655][ T7460]        ocfs2_set_acl+0x701/0x7b0
[  124.848757][ T7460]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  124.850989][ T7460]        vfs_set_acl+0x887/0xb00
[  124.853032][ T7460]        do_set_acl+0xf6/0x190
[  124.854996][ T7460]        filename_setxattr+0x2e0/0x600
[  124.857234][ T7460]        path_setxattrat+0x364/0x3a0
[  124.859422][ T7460]        __x64_sys_setxattr+0xbc/0xe0
[  124.861670][ T7460]        do_syscall_64+0xfa/0x3b0
[  124.863705][ T7460]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.866260][ T7460] 
[  124.866260][ T7460] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  124.869659][ T7460]        lock_acquire+0x120/0x360
[  124.871704][ T7460]        down_read+0x46/0x2e0
[  124.873646][ T7460]        ocfs2_start_trans+0x36a/0x6d0
[  124.875794][ T7460]        ocfs2_reserve_suballoc_bits+0x711/0x4640
[  124.878351][ T7460]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  124.881062][ T7460]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  124.883569][ T7460]        ocfs2_xattr_set+0xb70/0x11f0
[  124.885765][ T7460]        ocfs2_set_acl+0x701/0x7b0
[  124.887898][ T7460]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  124.890054][ T7460]        vfs_set_acl+0x887/0xb00
[  124.892054][ T7460]        do_set_acl+0xf6/0x190
[  124.893982][ T7460]        filename_setxattr+0x2e0/0x600
[  124.896222][ T7460]        path_setxattrat+0x364/0x3a0
[  124.898358][ T7460]        __x64_sys_setxattr+0xbc/0xe0
[  124.900575][ T7460]        do_syscall_64+0xfa/0x3b0
[  124.902650][ T7460]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.905261][ T7460] 
[  124.905261][ T7460] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  124.908305][ T7460]        lock_acquire+0x120/0x360
[  124.910368][ T7460]        ocfs2_start_trans+0x26b/0x6d0
[  124.912586][ T7460]        ocfs2_xattr_set+0xd69/0x11f0
[  124.914749][ T7460]        ocfs2_set_acl+0x701/0x7b0
[  124.916858][ T7460]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  124.919082][ T7460]        vfs_set_acl+0x887/0xb00
[  124.921115][ T7460]        do_set_acl+0xf6/0x190
[  124.923095][ T7460]        filename_setxattr+0x2e0/0x600
[  124.925345][ T7460]        path_setxattrat+0x364/0x3a0
[  124.927440][ T7460]        __x64_sys_setxattr+0xbc/0xe0
[  124.929356][ T7460]        do_syscall_64+0xfa/0x3b0
[  124.931019][ T7460]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.933246][ T7460] 
[  124.933246][ T7460] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  124.936686][ T7460]        lock_acquire+0x120/0x360
[  124.938535][ T7460]        down_write+0x96/0x1f0
[  124.940225][ T7460]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  124.942574][ T7460]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  124.945034][ T7460]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  124.947510][ T7460]        ocfs2_xattr_set+0xb70/0x11f0
[  124.949715][ T7460]        ocfs2_set_acl+0x701/0x7b0
[  124.951823][ T7460]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  124.954021][ T7460]        vfs_set_acl+0x887/0xb00
[  124.956025][ T7460]        do_set_acl+0xf6/0x190
[  124.957960][ T7460]        filename_setxattr+0x2e0/0x600
[  124.960182][ T7460]        path_setxattrat+0x364/0x3a0
[  124.962347][ T7460]        __x64_sys_setxattr+0xbc/0xe0
[  124.964459][ T7460]        do_syscall_64+0xfa/0x3b0
[  124.966464][ T7460]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.969128][ T7460] 
[  124.969128][ T7460] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  124.972232][ T7460]        validate_chain+0xb9b/0x2140
[  124.974358][ T7460]        __lock_acquire+0xab9/0xd20
[  124.976538][ T7460]        lock_acquire+0x120/0x360
[  124.978569][ T7460]        down_read+0x46/0x2e0
[  124.980463][ T7460]        ocfs2_init_acl+0x2f9/0x720
[  124.982508][ T7460]        ocfs2_mknod+0x1321/0x2050
[  124.984642][ T7460]        ocfs2_create+0x1a5/0x440
[  124.986693][ T7460]        path_openat+0x14f4/0x3830
[  124.988781][ T7460]        do_filp_open+0x1fa/0x410
[  124.990801][ T7460]        do_sys_openat2+0x121/0x1c0
[  124.992951][ T7460]        __x64_sys_creat+0x8f/0xc0
[  124.994979][ T7460]        do_syscall_64+0xfa/0x3b0
[  124.996977][ T7460]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.999597][ T7460] 
[  124.999597][ T7460] other info that might help us debug this:
[  124.999597][ T7460] 
[  125.003649][ T7460] Chain exists of:
[  125.003649][ T7460]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  125.003649][ T7460] 
[  125.009013][ T7460]  Possible unsafe locking scenario:
[  125.009013][ T7460] 
[  125.011918][ T7460]        CPU0                    CPU1
[  125.014049][ T7460]        ----                    ----
[  125.016191][ T7460]   rlock(jbd2_handle);
[  125.017898][ T7460]                                lock(&journal->j_trans_barrier);
[  125.020957][ T7460]                                lock(jbd2_handle);
[  125.023651][ T7460]   rlock(&oi->ip_xattr_sem);
[  125.025554][ T7460] 
[  125.025554][ T7460]  *** DEADLOCK ***
[  125.025554][ T7460] 
[  125.028748][ T7460] 8 locks held by syz.2.636/7460:
[  125.030752][ T7460]  #0: ffff88801e5ac428 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  125.034419][ T7460]  #1: ffff88801e80c3c0 (&type->i_mutex_dir_key#10){+.+.}-{4:4}, at: path_openat+0x8da/0x3830
[  125.038530][ T7460]  #2: ffff88801ebe26c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  125.043935][ T7460]  #3: ffff88801ebe1840 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  125.049372][ T7460]  #4: ffff88801ebe43c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  125.054840][ T7460]  #5: ffff88801e5ac618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  125.058551][ T7460]  #6: ffff88802b43c0e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  125.063160][ T7460]  #7: ffff88802ad1a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  125.067037][ T7460] 
[  125.067037][ T7460] stack backtrace:
[  125.069401][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz.2.636 Not tainted syzkaller #0 PREEMPT(full) 
[  125.069419][ T7460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.069431][ T7460] Call Trace:
[  125.069448][ T7460]  <TASK>
[  125.069458][ T7460]  dump_stack_lvl+0x189/0x250
[  125.069484][ T7460]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.069499][ T7460]  ? __pfx__printk+0x10/0x10
[  125.069516][ T7460]  ? stack_trace_save+0x9c/0xe0
[  125.069537][ T7460]  print_circular_bug+0x2ee/0x310
[  125.069557][ T7460]  check_noncircular+0x134/0x160
[  125.069575][ T7460]  validate_chain+0xb9b/0x2140
[  125.069597][ T7460]  __lock_acquire+0xab9/0xd20
[  125.069652][ T7460]  ? ocfs2_init_acl+0x2f9/0x720
[  125.069672][ T7460]  lock_acquire+0x120/0x360
[  125.069690][ T7460]  ? ocfs2_init_acl+0x2f9/0x720
[  125.069707][ T7460]  down_read+0x46/0x2e0
[  125.069722][ T7460]  ? ocfs2_init_acl+0x2f9/0x720
[  125.069739][ T7460]  ocfs2_init_acl+0x2f9/0x720
[  125.069755][ T7460]  ? ocfs2_mknod_locked+0x148/0x250
[  125.069773][ T7460]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  125.069789][ T7460]  ? dquot_alloc_inode+0x8ba/0xa50
[  125.069805][ T7460]  ? dquot_alloc_inode+0x166/0xa50
[  125.069819][ T7460]  ? ocfs2_block_signals+0x94/0xe0
[  125.069844][ T7460]  ? ocfs2_init_security_get+0x139/0x1a0
[  125.069862][ T7460]  ocfs2_mknod+0x1321/0x2050
[  125.069879][ T7460]  ? __pfx_ocfs2_mknod+0x10/0x10
[  125.069893][ T7460]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  125.069910][ T7460]  ? __lock_acquire+0xab9/0xd20
[  125.069935][ T7460]  ? look_up_lock_class+0x74/0x170
[  125.069956][ T7460]  ? register_lock_class+0x51/0x320
[  125.069976][ T7460]  ? __lock_acquire+0xab9/0xd20
[  125.069995][ T7460]  ? __lock_acquire+0xab9/0xd20
[  125.070016][ T7460]  ? do_raw_spin_lock+0x121/0x290
[  125.070034][ T7460]  ? do_raw_spin_unlock+0x4d/0x240
[  125.070052][ T7460]  ? rcu_is_watching+0x15/0xb0
[  125.070063][ T7460]  ? ocfs2_lookup+0x5b9/0x9b0
[  125.070077][ T7460]  ocfs2_create+0x1a5/0x440
[  125.070089][ T7460]  ? __pfx_ocfs2_lookup+0x10/0x10
[  125.070101][ T7460]  ? from_kgid+0x1b0/0x650
[  125.070118][ T7460]  ? __pfx_ocfs2_create+0x10/0x10
[  125.070129][ T7460]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  125.070143][ T7460]  ? inode_permission+0x149/0x470
[  125.070153][ T7460]  ? __pfx_ocfs2_permission+0x10/0x10
[  125.070170][ T7460]  ? bpf_lsm_inode_create+0x9/0x20
[  125.070183][ T7460]  ? __pfx_ocfs2_create+0x10/0x10
[  125.070194][ T7460]  path_openat+0x14f4/0x3830
[  125.070207][ T7460]  ? arch_stack_walk+0xfc/0x150
[  125.070235][ T7460]  ? __pfx_path_openat+0x10/0x10
[  125.070250][ T7460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.070270][ T7460]  do_filp_open+0x1fa/0x410
[  125.070285][ T7460]  ? __lock_acquire+0xab9/0xd20
[  125.070302][ T7460]  ? __pfx_do_filp_open+0x10/0x10
[  125.070323][ T7460]  ? _raw_spin_unlock+0x28/0x50
[  125.070342][ T7460]  ? alloc_fd+0x64c/0x6c0
[  125.070366][ T7460]  do_sys_openat2+0x121/0x1c0
[  125.070380][ T7460]  ? __se_sys_futex+0x36f/0x400
[  125.070399][ T7460]  ? __pfx_do_sys_openat2+0x10/0x10
[  125.070414][ T7460]  ? __pfx___se_sys_futex+0x10/0x10
[  125.070431][ T7460]  ? rcu_is_watching+0x15/0xb0
[  125.070453][ T7460]  __x64_sys_creat+0x8f/0xc0
[  125.070469][ T7460]  do_syscall_64+0xfa/0x3b0
[  125.070484][ T7460]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.070505][ T7460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.070518][ T7460]  ? exc_page_fault+0x9f/0xf0
[  125.070535][ T7460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.070549][ T7460] RIP: 0033:0x7f787418ebe9
[  125.070564][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.070577][ T7460] RSP: 002b:00007f78750e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  125.070593][ T7460] RAX: ffffffffffffffda RBX: 00007f78743c5fa0 RCX: 00007f787418ebe9
[  125.070603][ T7460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  125.070647][ T7460] RBP: 00007f7874211e19 R08: 0000000000000000 R09: 0000000000000000
[  125.070655][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.070663][ T7460] R13: 00007f78743c6038 R14: 00007f78743c5fa0 R15: 00007ffc826ac898
[  125.070678][ T7460]  </TASK>
[  125.235670][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  125.256759][ T5851] ocfs2: Unmounting device (7,2) on (node local)
[  125.389693][   T10] usb 2-1: Using ep0 maxpacket: 8
[  125.394067][   T10] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  125.396983][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.402479][   T10] usb 2-1: config 0 descriptor??
[  125.608560][  T973] usb 2-1: USB disconnect, device number 11
[  126.191247][    T9] net_ratelimit: 1023 callbacks suppressed
[  126.191286][    T9] TC_ACT_REPEAT abuse ?
[  129.389917][    C0] TC_ACT_REPEAT abuse ?
[  132.601670][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.604199][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
15:12:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002d66 RDI=0000000000002d67 RBP=00000000000003f8 RSP=ffffc90009c968f0
R8 =ffff88801f4b0237 R9 =1ffff11003e96046 R10=dffffc0000000000 R11=ffffffff854f3b80
R12=dffffc0000000000 R13=ffffffff99afd8ca R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f78750e06c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f78741733e0 CR3=00000001176e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=6f6e3d7461656274 726165682c65756e
XMM04=6e69746e6f633d73 726f7272652c656e XMM05=0000000000000000 00007f78750df6e0
XMM06=00007f78750df6e0 00007f78750df560 XMM07=00007f78750df5a0 00007f78750df580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f7874212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d2a20a0888115300 RBX=ffffffff819683c8 RCX=d2a20a0888115300 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683c8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39030 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32523ffc CR3=0000000027296000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007feb98012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
