last executing test programs:

3.30826711s ago: executing program 0 (id=649):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
exit(0x0)
write$UHID_INPUT(r0, 0x0, 0x0)

2.533170492s ago: executing program 2 (id=664):
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0)

2.479152107s ago: executing program 2 (id=665):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto$inet6(r0, &(0x7f00000000c0)="cfc850defd27f31e2d20223673feacf3b5421387e6f3b0e4740a", 0x66, 0x3b00, 0x0, 0x0)

2.477597982s ago: executing program 0 (id=667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)

2.430308176s ago: executing program 2 (id=668):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x55, 0xa, 0x3, "3258c5c00e7f94ae1e008faa001b0000f4ff4000000000000000e91aba2800"})

2.369747454s ago: executing program 0 (id=670):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10)

2.36896383s ago: executing program 2 (id=672):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="00220f000000540b8a50f8209501758483"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x20, 0x5, 0x59, {0x59, 0x6, "3455894f88026c903edb98c78c465e1f17ab06ecb270ff366b0b4d40620f2eceabd4f628e77b09839521cc6ac2a7355ed6201cc4ffed043ee97abe3aa3045407d4bc113ba2ce86b1d52b7d2d1ebe153a63dd11288482c6"}}, &(0x7f0000000100)={0x0, 0x3, 0x81, @string={0x81, 0x3, "e73cae91b4316bf659c4fd7a57dba86c636189007e52a739eddc86712ff7e1b351df094d07cece375fdc40fc8b864a5fd32d5bf013b1b24414784ba9425da29d12f4e5e6a24aa5297d4b5f6e147471e136ead358e00b1f1684168cbd6c0056226fbc09c1002816f700d35b858e011a9816bc558c8913649defc9f6d7c7a765"}}, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xd, 0x1, {0x22, 0x771}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000300)={0x40, 0x7, 0x8d, "d8cdc7697d3c1e2bd17261be2743c2dd6f6a77c399c4d0ea7870cc601352f00aa7b0bc7097beb041e4a6d8639e969bd9b860816c9e7799cbb593adfc6686a7da8df118cc63cc09a42af06942c19bc9d887fe87e27271f0b65f782a2329b61cc8eed0e26a1348c909409bae1f4dac40c1cd21e4cd934922408e12264ddb662bc6a66838ff66f395592d51e6a454"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x1, 0xe0, "3d615b9c2e0b3fac1507ef85bd9bc36594a691426e6faf18005940d469830778ce6f924a6facc9ad34a7048c19ead4071c64bf42f4a225e06bd02e5c0f801ae8c77473d3dc8e8cfef6dd3750b7a5cc5a78a0aa006cc30d411f6a7f4f7d94575a38cd6b3e2eae57013b0181659ecf20c50ecdeb4ed2eb25284162edfcdc53329342da0c1c7d32aec640621703ced756e48dff97116c70c0006e7a91650793bd2122205f8100d7388ceebee6a8fcc38744e39f0326216851fd6fef6b7e6974a06eacd03c873f443def2aeafff40f7342cc148d9436098c7861bef4669a491481b5"}, 0x0})
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x2003, 0xffffffff, 0x1, 0x1, 0x3, 0x2})

2.294828917s ago: executing program 0 (id=673):
listen(0xffffffffffffffff, 0x800)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)

1.707938092s ago: executing program 1 (id=682):
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0)

1.349063602s ago: executing program 0 (id=683):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mq_open(0x0, 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570", 0x6f}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x24000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r3 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
ioctl$OCFS2_IOC_RESVSP64(r3, 0x4030582a, &(0x7f0000000300)={0x1, 0x2, 0x5, 0x5, 0xf, 0x2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)

1.148087202s ago: executing program 1 (id=684):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000480)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
close(0x3)

1.058727516s ago: executing program 1 (id=685):
mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2480, 0x1)

930.03326ms ago: executing program 1 (id=686):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000)

829.278041ms ago: executing program 1 (id=687):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2a}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5d22}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x95, &(0x7f00000018c0)=""/149, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

688.989628ms ago: executing program 1 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x10001, &(0x7f0000000500)={[{@nossd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000003900)={{}, "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"})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r5, 0x2218, 0x22b0, 0x16, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0)

59.931193ms ago: executing program 0 (id=689):
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a3a440000000010109023b000101010000090400001202eb0000052406000005240000000d240f0100000000000000000009058202000200000009050302"], 0x0)

341.416µs ago: executing program 2 (id=690):
r0 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x801, {0x2, 0x0, 0x2}}, 0x18)

0s ago: executing program 2 (id=691):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

kernel console output (not intermixed with test programs):

syzkaller login: [   53.104307][ T5724] sshd (5724) used greatest stack depth: 20320 bytes left
Warning: Permanently added '[localhost]:55491' (ED25519) to the list of known hosts.
[   57.992680][ T5794] cgroup: Unknown subsys name 'net'
[   58.118552][ T5794] cgroup: Unknown subsys name 'cpuset'
[   58.122547][ T5794] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.846327][ T5794] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.464793][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.469549][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.472936][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.476770][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.480797][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.504423][ T5197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.509529][ T5197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.513412][ T5197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.517829][ T5197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.521268][ T5197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.596995][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.600831][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.604241][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.609783][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.614319][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.864483][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   64.909928][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   65.024721][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.028801][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.031613][ T5808] bridge_slave_0: entered allmulticast mode
[   65.034864][ T5808] bridge_slave_0: entered promiscuous mode
[   65.039604][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   65.065015][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.067897][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.070115][ T5808] bridge_slave_1: entered allmulticast mode
[   65.072878][ T5808] bridge_slave_1: entered promiscuous mode
[   65.122726][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.125812][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.128898][ T5813] bridge_slave_0: entered allmulticast mode
[   65.132584][ T5813] bridge_slave_0: entered promiscuous mode
[   65.154645][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.157743][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.160883][ T5813] bridge_slave_1: entered allmulticast mode
[   65.164638][ T5813] bridge_slave_1: entered promiscuous mode
[   65.170979][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.211249][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.218077][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.260820][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.263837][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.267049][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.269824][ T5818] bridge_slave_0: entered allmulticast mode
[   65.273642][ T5818] bridge_slave_0: entered promiscuous mode
[   65.278604][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.281382][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.284243][ T5818] bridge_slave_1: entered allmulticast mode
[   65.288425][ T5818] bridge_slave_1: entered promiscuous mode
[   65.334699][ T5808] team0: Port device team_slave_0 added
[   65.348997][ T5813] team0: Port device team_slave_0 added
[   65.352970][ T5808] team0: Port device team_slave_1 added
[   65.358299][ T5813] team0: Port device team_slave_1 added
[   65.369931][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.392970][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.395106][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.403595][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.410348][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.424924][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.427861][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.436974][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.452148][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.454846][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.464964][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.490860][ T5818] team0: Port device team_slave_0 added
[   65.495797][ T5818] team0: Port device team_slave_1 added
[   65.498685][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.501351][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.511608][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.568570][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.570880][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.580170][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.604132][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.606305][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.615178][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.628441][ T5808] hsr_slave_0: entered promiscuous mode
[   65.630789][ T5808] hsr_slave_1: entered promiscuous mode
[   65.638609][ T5813] hsr_slave_0: entered promiscuous mode
[   65.641145][ T5813] hsr_slave_1: entered promiscuous mode
[   65.643479][ T5813] debugfs: 'hsr0' already exists in 'hsr'
[   65.645609][ T5813] Cannot create hsr debugfs directory
[   65.688080][ T5818] hsr_slave_0: entered promiscuous mode
[   65.691107][ T5818] hsr_slave_1: entered promiscuous mode
[   65.693981][ T5818] debugfs: 'hsr0' already exists in 'hsr'
[   65.695993][ T5818] Cannot create hsr debugfs directory
[   66.019554][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.031740][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.039046][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.061256][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.123313][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.131232][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.140179][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.148988][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.229460][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.240590][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.245276][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.253548][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.312029][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.328118][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.342679][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   66.354338][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   66.366701][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.368988][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.373994][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.376920][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.391377][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.394233][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.399457][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.402280][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.495830][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.529115][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   66.535814][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.537979][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.548015][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.550537][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.585187][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.590913][ T5197] Bluetooth: hci1: command tx timeout
[   66.592839][ T5197] Bluetooth: hci0: command tx timeout
[   66.599241][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.639717][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.665948][   T54] Bluetooth: hci2: command tx timeout
[   66.674242][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.707355][ T5808] veth0_vlan: entered promiscuous mode
[   66.730368][ T5808] veth1_vlan: entered promiscuous mode
[   66.737971][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.744819][ T5813] veth0_vlan: entered promiscuous mode
[   66.768500][ T5813] veth1_vlan: entered promiscuous mode
[   66.789253][ T5808] veth0_macvtap: entered promiscuous mode
[   66.804410][ T5818] veth0_vlan: entered promiscuous mode
[   66.809718][ T5808] veth1_macvtap: entered promiscuous mode
[   66.829456][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.835215][ T5818] veth1_vlan: entered promiscuous mode
[   66.842725][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.848254][ T5813] veth0_macvtap: entered promiscuous mode
[   66.857112][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.861362][ T5813] veth1_macvtap: entered promiscuous mode
[   66.864727][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.876227][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.879463][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.907325][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.910983][ T5818] veth0_macvtap: entered promiscuous mode
[   66.932091][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.951236][ T5818] veth1_macvtap: entered promiscuous mode
[   66.959228][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.969916][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.981494][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.001568][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.011675][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.014234][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.057276][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.075949][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.079379][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.080834][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.114253][ T5654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.127023][ T5654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.138762][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.143073][ T5654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.147750][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.156411][ T5654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.178694][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.247704][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.253231][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.253283][  T737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.259345][  T737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.306973][  T737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.314743][  T737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.888162][  T900] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   68.065629][  T900] usb 2-1: Using ep0 maxpacket: 32
[   68.080537][  T900] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   68.087163][  T900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.090298][  T900] usb 2-1: Product: syz
[   68.091640][  T900] usb 2-1: Manufacturer: syz
[   68.093348][  T900] usb 2-1: SerialNumber: syz
[   68.102344][  T900] usb 2-1: config 0 descriptor??
[   68.322731][  T900] airspy 2-1:0.0: usb_control_msg() failed -71 request 09
[   68.329722][  T900] airspy 2-1:0.0: Could not detect board
[   68.337392][  T900] airspy 2-1:0.0: probe with driver airspy failed with error -71
[   68.357361][  T900] usb 2-1: USB disconnect, device number 2
[   68.400531][ T5893] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   68.656479][   T54] Bluetooth: hci0: command tx timeout
[   68.656559][ T5197] Bluetooth: hci1: command tx timeout
[   68.735735][ T5197] Bluetooth: hci2: command tx timeout
[   69.124709][ T5936] warning: `syz.1.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.227407][ T5942] Bluetooth: MGMT ver 1.23
[   69.757442][ T5845] IPVS: starting estimator thread 0...
[   69.875642][ T5952] IPVS: using max 41 ests per chain, 98400 per kthread
[   69.943547][ T5955] loop0: detected capacity change from 0 to 128
[   69.976538][ T5955] loop0: detected capacity change from 0 to 512
[   70.586416][ T5959] loop1: detected capacity change from 0 to 32768
[   70.607856][ T5959] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.31 (5959)
[   70.635368][ T5959] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   70.640408][ T5959] BTRFS info (device loop1): using sha256 checksum algorithm
[   70.678416][ T5981] loop0: detected capacity change from 0 to 2048
[   70.736288][ T5197] Bluetooth: hci0: command tx timeout
[   70.747868][ T5197] Bluetooth: hci1: command 0x040f tx timeout
[   70.769139][ T5959] BTRFS info (device loop1): enabling ssd optimizations
[   70.771767][ T5959] BTRFS info (device loop1): turning on async discard
[   70.774400][ T5959] BTRFS info (device loop1): enabling free space tree
[   70.778454][ T5959] BTRFS info (device loop1): enabling auto defrag
[   70.781353][ T5959] BTRFS info (device loop1): max_inline set to 4096
[   70.815575][ T5197] Bluetooth: hci2: command tx timeout
[   70.925386][ T5808] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   70.978684][ T6005] loop0: detected capacity change from 0 to 1024
[   71.288898][   T33] audit: type=1800 audit(1778873998.038:2): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   71.832161][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'.
[   71.879340][ T6023] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.52'.
[   72.021463][ T6031] Cannot find add_set index 46338 as target
[   72.261314][ T6033] loop0: detected capacity change from 0 to 32768
[   72.266857][ T6033] =======================================================
[   72.266857][ T6033] WARNING: The mand mount option has been deprecated and
[   72.266857][ T6033]          and is ignored by this kernel. Remove the mand
[   72.266857][ T6033]          option from the mount to silence this warning.
[   72.266857][ T6033] =======================================================
[   72.625633][  T783] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   72.805760][  T783] usb 2-1: Using ep0 maxpacket: 8
[   72.813971][  T783] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[   72.816115][   T54] Bluetooth: hci0: command tx timeout
[   72.817887][  T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.821209][ T5197] Bluetooth: hci1: command 0x040f tx timeout
[   72.822164][  T783] usb 2-1: config 0 has no interface number 0
[   72.822207][  T783] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   72.822226][  T783] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[   72.846685][  T783] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.856040][  T783] usb 2-1: config 0 interface 52 has no altsetting 0
[   72.864224][  T783] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[   72.871361][  T783] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[   72.874464][  T783] usb 2-1: Manufacturer: syz
[   72.896121][ T5197] Bluetooth: hci2: command tx timeout
[   72.899249][  T783] usb 2-1: config 0 descriptor??
[   72.919155][  T783] hub 2-1:0.52: bad descriptor, ignoring hub
[   72.921565][  T783] hub 2-1:0.52: probe with driver hub failed with error -5
[   73.140044][  T783] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[   73.143301][  T783] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5
[   73.405700][  T783] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   73.457439][   T10] usb 2-1: USB disconnect, device number 3
[   73.578995][  T783] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[   73.582186][  T783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.586876][  T783] usb 3-1: config 0 has no interface number 0
[   73.589367][  T783] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   73.597306][  T783] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   73.600583][  T783] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   73.603753][  T783] usb 3-1: Product: syz
[   73.608044][  T783] usb 3-1: SerialNumber: syz
[   73.614257][  T783] usb 3-1: config 0 descriptor??
[   73.623760][  T783] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[   73.832127][  T783] usb 3-1: USB disconnect, device number 2
[   73.943750][ T6081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.74'.
[   74.400468][ T6097] loop1: detected capacity change from 0 to 65536
[   74.456161][ T6097] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   74.467582][ T6097] XFS (loop1): Ending clean mount
[   74.471821][ T6097] XFS (loop1): Quotacheck needed: Please wait.
[   74.499321][ T6097] XFS (loop1): Quotacheck: Done.
[   74.543193][ T5808] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   74.703114][ T6128] Zero length message leads to an empty skb
[   74.901300][ T5197] Bluetooth: hci1: command 0x040f tx timeout
[   74.934658][ T6145] bond1: entered allmulticast mode
[   74.961029][ T6149] netlink: 1088 bytes leftover after parsing attributes in process `syz.1.103'.
[   75.089521][ T6156] loop1: detected capacity change from 0 to 16
[   75.100322][ T6156] erofs (device loop1): unidentified incompatible feature 7ffffe00, please upgrade kernel
[   75.697013][ T6171] syz.2.113 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   75.700968][ T6171] CPU: 1 UID: 0 PID: 6171 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(full) 
[   75.700981][ T6171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.700987][ T6171] Call Trace:
[   75.700991][ T6171]  <TASK>
[   75.700996][ T6171]  dump_stack_lvl+0xe8/0x150
[   75.701014][ T6171]  dump_header+0xd3/0x4c0
[   75.701026][ T6171]  oom_kill_process+0x3ab/0x970
[   75.701039][ T6171]  out_of_memory+0x106c/0x1410
[   75.701048][ T6171]  ? __pfx___mutex_lock+0x10/0x10
[   75.701063][ T6171]  ? __pfx_out_of_memory+0x10/0x10
[   75.701070][ T6171]  ? do_raw_spin_unlock+0x4d/0x210
[   75.701083][ T6171]  try_charge_memcg+0xc53/0x1560
[   75.701102][ T6171]  ? __pfx_try_charge_memcg+0x10/0x10
[   75.701115][ T6171]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[   75.701126][ T6171]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[   75.701137][ T6171]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[   75.701147][ T6171]  __swap_cache_prepare_and_add+0xe8/0x760
[   75.701162][ T6171]  ? page_rmappable_folio+0x9a/0x170
[   75.701177][ T6171]  swap_cache_alloc_folio+0xf1/0x240
[   75.701189][ T6171]  swap_cluster_readahead+0x53a/0x690
[   75.701203][ T6171]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   75.701220][ T6171]  ? get_vma_policy+0x27b/0x3c0
[   75.701231][ T6171]  swapin_readahead+0x196/0xc50
[   75.701247][ T6171]  ? __pfx_swapin_readahead+0x10/0x10
[   75.701259][ T6171]  ? swap_table_get+0x1e/0x260
[   75.701269][ T6171]  ? swap_table_get+0x1e/0x260
[   75.701278][ T6171]  ? swap_table_get+0x1e/0x260
[   75.701289][ T6171]  ? swap_table_get+0x216/0x260
[   75.701300][ T6171]  ? swap_cache_get_folio+0x513/0x520
[   75.701313][ T6171]  do_swap_page+0x56f/0x5a20
[   75.701358][ T6171]  ? do_swap_page+0x127/0x5a20
[   75.701369][ T6171]  ? __pfx_do_swap_page+0x10/0x10
[   75.701378][ T6171]  ? __pte_offset_map+0x1ae/0x240
[   75.701392][ T6171]  ? pte_offset_map_rw_nolock+0xea/0x160
[   75.701400][ T6171]  handle_mm_fault+0x12d2/0x3310
[   75.701423][ T6171]  ? handle_mm_fault+0xee/0x3310
[   75.701437][ T6171]  ? __pfx_handle_mm_fault+0x10/0x10
[   75.701447][ T6171]  ? lock_vma_under_rcu+0x45a/0x500
[   75.701467][ T6171]  do_user_addr_fault+0xa73/0x1340
[   75.701481][ T6171]  ? rcu_is_watching+0x15/0xb0
[   75.701494][ T6171]  ? trace_page_fault_user+0x84/0x210
[   75.701505][ T6171]  exc_page_fault+0x6a/0xc0
[   75.701515][ T6171]  asm_exc_page_fault+0x26/0x30
[   75.701525][ T6171] RIP: 0033:0x7f55b859d97f
[   75.701534][ T6171] Code: e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 64 48 8b 04 25 28 00 00 00 <48> 89 44 24 18 8d 07 48 69 c0 83 de 1b 43 48 c1 e8 32 89 c1 69 c0
[   75.701541][ T6171] RSP: 002b:00007ffc6e208250 EFLAGS: 00010246
[   75.701550][ T6171] RAX: 732757a2c09a8300 RBX: 00007f55b8815fa0 RCX: 00000000000124f8
[   75.701556][ T6171] RDX: 0000000000000236 RSI: 0000000000000000 RDI: 00000000000003e8
[   75.701560][ T6171] RBP: 00007f55b8817da0 R08: 7fffffffffffffff R09: 3fffffffffffffff
[   75.701566][ T6171] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000000128d3
[   75.701571][ T6171] R13: 00007f55b8815fac R14: 00000000000125c5 R15: 00007ffc6e208380
[   75.701584][ T6171]  </TASK>
[   75.701588][ T6171] memory: usage 307200kB, limit 307200kB, failcnt 2143
[   75.806433][ T6171] memory+swap: usage 307288kB, limit 9007199254740988kB, failcnt 0
[   75.809069][ T6171] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[   75.811555][ T6171] Memory cgroup stats for /syz2:
[   75.811850][ T6171] cache 0
[   75.815021][ T6171] rss 0
[   75.816138][ T6171] rss_huge 0
[   75.817165][ T6171] shmem 0
[   75.818078][ T6171] mapped_file 0
[   75.819178][ T6171] dirty 0
[   75.820278][ T6171] writeback 0
[   75.821408][ T6171] workingset_refault_anon 23
[   75.823111][ T6171] workingset_refault_file 1
[   75.824680][ T6171] swap 90112
[   75.825888][ T6171] swapcached 237568
[   75.827135][ T6171] pgpgin 9262
[   75.828279][ T6171] pgpgout 9256
[   75.829542][ T6171] pgfault 10144
[   75.830994][ T6171] pgmajfault 22
[   75.832494][ T6171] inactive_anon 12288
[   75.834112][ T6171] active_anon 8192
[   75.836215][ T6171] inactive_file 0
[   75.837825][ T6171] active_file 0
[   75.839369][ T6171] unevictable 0
[   75.840918][ T6171] hierarchical_memory_limit 314572800
[   75.843155][ T6171] hierarchical_memsw_limit 9223372036854771712
[   75.846236][ T6171] total_cache 0
[   75.847701][ T6171] total_rss 0
[   75.849140][ T6171] total_rss_huge 0
[   75.850646][ T6171] total_shmem 0
[   75.851949][ T6171] total_mapped_file 0
[   75.853395][ T6171] total_dirty 0
[   75.854566][ T6171] total_writeback 0
[   75.859279][ T6171] total_workingset_refault_anon 23
[   75.861289][ T6171] total_workingset_refault_file 1
[   75.863027][ T6171] total_swap 90112
[   75.864272][ T6171] total_swapcached 237568
[   75.867419][ T6171] total_pgpgin 9262
[   75.868971][ T6171] total_pgpgout 9256
[   75.870424][ T6171] total_pgfault 10144
[   75.872040][ T6171] total_pgmajfault 22
[   75.873686][ T6171] total_inactive_anon 12288
[   75.876009][ T6171] total_active_anon 8192
[   75.877798][ T6171] total_inactive_file 0
[   75.879578][ T6171] total_active_file 0
[   75.881232][ T6171] total_unevictable 0
[   75.882948][ T6171] anon_cost 0
[   75.884413][ T6171] file_cost 0
[   75.886363][ T6171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.113,pid=6171,uid=0
[   75.892949][ T6171] Memory cgroup out of memory: Killed process 6171 (syz.2.113) total-vm:102160kB, anon-rss:1264kB, file-rss:21576kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   75.895390][ T6172] syz.2.113 (6172) used greatest stack depth: 19960 bytes left
[   76.818523][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   76.821882][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   77.063138][ T6204] loop1: detected capacity change from 0 to 4096
[   77.122246][ T6205] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.432913][ T6198] syz.0.124 (6198): drop_caches: 2
[   77.436721][ T6209] loop1: detected capacity change from 0 to 1024
[   77.450382][ T6209] EXT4-fs: Ignoring removed bh option
[   77.469476][ T6209] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   77.518492][ T6209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.634916][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.957681][ T6225] overlayfs: overlapping lowerdir path
[   77.963605][ T6225] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   77.966988][ T6225] overlayfs: overlapping lowerdir path
[   78.021008][ T6235] loop1: detected capacity change from 0 to 4096
[   78.028061][ T6235] EXT4-fs: inline encryption not supported
[   78.039099][ T6235] EXT4-fs: Ignoring removed nobh option
[   78.041788][ T6235] EXT4-fs (loop1): Test dummy encryption mode enabled
[   78.047542][ T6235] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003]
[   78.051488][ T6235] System zones: 0-5
[   78.057505][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.179091][   T33] audit: type=1800 audit(1778874004.928:3): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.140" name="file1" dev="loop1" ino=15 res=0 errno=0
[   78.510490][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.910546][ T6243] loop0: detected capacity change from 0 to 4096
[   78.918347][ T6243] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   79.067830][ T6243] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   79.070284][ T6245] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.142'.
[   79.112468][ T6249] syz.1.145 uses obsolete (PF_INET,SOCK_PACKET)
[   79.119792][ T6243] ntfs3(loop0): ino=1e, mi_enum_attr
[   79.123364][ T6243] ntfs3(loop0): ino=1e, mi_enum_attr
[   79.275811][ T6253] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[   79.319083][ T6260] loop2: detected capacity change from 0 to 2048
[   79.329262][ T6260] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[   79.404358][ T6260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.497795][ T6255] loop0: detected capacity change from 0 to 40427
[   79.510739][ T6255] F2FS-fs (loop0): build fault injection rate: 8
[   79.512872][ T6255] F2FS-fs (loop0): build fault injection type: 0x3bf
[   79.539600][ T6255] F2FS-fs (loop0): invalid crc value
[   79.547065][ T6255] F2FS-fs (loop0): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x491a/0x7740
[   79.550767][ T6255] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12)
[   80.480549][ T6279] kAFS: unable to lookup cell '.,'
[   80.535285][ T6281] loop1: detected capacity change from 0 to 4096
[   80.545278][ T6281] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   80.561850][ T6281] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   80.564218][ T6281] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   80.569768][ T6281] ntfs3(loop1): ino=1e, mi_enum_attr
[   80.571926][ T6281] ntfs3(loop1): ino=1e, mi_enum_attr
[   80.598833][   T52] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   80.602968][ T5808] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   80.608032][ T5808] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   80.610929][ T5808] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   80.613734][   T52] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   80.993993][ T6297] netlink: 'syz.2.166': attribute type 2 has an invalid length.
[   81.015619][ T6297] netlink: 'syz.2.166': attribute type 1 has an invalid length.
[   81.029964][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'.
[   81.081922][ T6301] bond1 (unregistering): Released all slaves
[   81.265125][ T6289] loop1: detected capacity change from 0 to 32768
[   81.557129][ T6330] process 'syz.2.175' launched './file0' with NULL argv: empty string added
[   81.593498][ T6313] loop0: detected capacity change from 0 to 32768
[   81.624534][ T6313] (syz.0.173,6313,0):ocfs2_verify_volume:2308 ERROR: bad block number on superblock: found 255, should be 2
[   81.634475][ T6332] capability: warning: `syz.2.176' uses 32-bit capabilities (legacy support in use)
[   81.642668][ T6313] (syz.0.173,6313,0):ocfs2_verify_volume:2331 ERROR: status = -22
[   81.645201][ T6313] (syz.0.173,6313,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   81.648246][ T6313] (syz.0.173,6313,0):ocfs2_fill_super:1177 ERROR: status = -22
[   81.780348][ T6327] [U] ^\
[   82.145202][ T5859] libceph: connect (1)[c::]:6789 error -101
[   82.148430][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[   82.154914][ T6339] ceph: No mds server is up or the cluster is laggy
[   82.349356][ T6348] Bluetooth: hci0: unsupported parameter 39401
[   82.353003][ T6348] Bluetooth: hci0: unsupported parameter 255
[   82.357803][ T6348] Bluetooth: hci0: unsupported parameter 39401
[   82.361158][ T6348] Bluetooth: hci0: unsupported parameter 255
[   82.621102][ T6361] loop2: detected capacity change from 0 to 512
[   82.687744][ T6361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.701795][ T6361] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.089961][ T6378] loop0: detected capacity change from 0 to 512
[   83.113849][ T6378] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   83.124579][ T6378] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   83.146399][ T6378] EXT4-fs (loop0): 1 truncate cleaned up
[   83.157847][ T6378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.182522][ T6378] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   83.200839][ T6378] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   83.206985][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'.
[   83.230926][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.543805][ T6397] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   83.691543][ T6403] netlink: 'syz.1.204': attribute type 5 has an invalid length.
[   83.733555][ T6405] netlink: 48 bytes leftover after parsing attributes in process `syz.1.205'.
[   83.736551][ T5859] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   83.788107][ T6407] netlink: 100 bytes leftover after parsing attributes in process `syz.1.206'.
[   83.888621][ T5859] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[   83.896617][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.911863][ T5859] usb 1-1: config 0 has no interface number 0
[   83.924740][ T5859] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[   83.933788][ T5859] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64
[   83.939078][ T5859] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.944417][ T5859] usb 1-1: config 0 interface 52 has no altsetting 0
[   83.951250][ T5859] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[   83.959752][ T5859] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[   83.968427][ T5859] usb 1-1: Product: syz
[   83.971387][ T5859] usb 1-1: Manufacturer: syz
[   83.976147][ T5859] usb 1-1: SerialNumber: syz
[   83.989967][ T5859] usb 1-1: config 0 descriptor??
[   84.223549][ T5859] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input5
[   84.418151][ T5858] usb 1-1: USB disconnect, device number 2
[   84.418149][    C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[   84.524373][ T6421] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   84.528067][ T6421] macsec1: entered allmulticast mode
[   84.530331][ T6421] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   84.537443][ T6421] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   84.541085][ T6421] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   84.744649][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.132070][ T6437] netlink: 'syz.2.220': attribute type 2 has an invalid length.
[   85.350027][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'.
[   85.701979][ T6450] loop0: detected capacity change from 0 to 32768
[   85.705372][ T6450] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.226 (6450)
[   85.714079][ T6450] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.717337][ T6450] BTRFS info (device loop0): using sha256 checksum algorithm
[   85.801048][ T6472] netlink: 'syz.2.229': attribute type 107 has an invalid length.
[   85.818152][ T6450] BTRFS info (device loop0): enabling ssd optimizations
[   85.820407][ T6450] BTRFS info (device loop0): turning on async discard
[   85.822476][ T6450] BTRFS info (device loop0): enabling free space tree
[   86.406981][ T6475] syz.0.226 (6475) used greatest stack depth: 19720 bytes left
[   86.584570][ T6487] netlink: 'syz.1.234': attribute type 21 has an invalid length.
[   87.084521][   T24] cfg80211: failed to load regulatory.db
[   87.106381][ T6494] cgroup: Need name or subsystem set
[   87.232834][ T5818] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.295111][ T6488] loop2: detected capacity change from 0 to 40427
[   87.336855][ T6488] F2FS-fs (loop2): invalid crc value
[   87.569322][ T6503] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   87.663208][ T6488] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.691530][ T6488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   87.852452][ T6523] loop0: detected capacity change from 0 to 128
[   87.860855][ T6525] netlink: 'syz.1.248': attribute type 1 has an invalid length.
[   87.870758][ T6523] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   87.890599][ T6523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.930501][ T5813] syz-executor: attempt to access beyond end of device
[   87.930501][ T5813] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.939866][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   87.939883][ T5813] Tainted: [L]=SOFTLOCKUP
[   87.939886][ T5813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.939891][ T5813] Call Trace:
[   87.939896][ T5813]  <TASK>
[   87.939900][ T5813]  dump_stack_lvl+0xe8/0x150
[   87.939919][ T5813]  f2fs_handle_critical_error+0x37c/0x540
[   87.939935][ T5813]  f2fs_write_end_io+0xcdb/0xff0
[   87.939957][ T5813]  __submit_merged_bio+0x256/0x700
[   87.939971][ T5813]  __submit_merged_write_cond+0x3c9/0x4e0
[   87.939985][ T5813]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   87.940005][ T5813]  f2fs_write_data_pages+0x2975/0x35e0
[   87.940033][ T5813]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.940049][ T5813]  ? unwind_get_return_address+0x4d/0x90
[   87.940062][ T5813]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   87.940084][ T5813]  ? check_noncircular+0xda/0x150
[   87.940100][ T5813]  ? lockdep_unlock+0x5d/0xd0
[   87.940108][ T5813]  ? __lock_acquire+0x146e/0x2cf0
[   87.940129][ T5813]  ? do_raw_spin_lock+0x12b/0x2f0
[   87.940142][ T5813]  ? do_raw_spin_unlock+0x4d/0x210
[   87.940150][ T5813]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.940162][ T5813]  do_writepages+0x32e/0x550
[   87.940181][ T5813]  ? do_raw_spin_unlock+0x4d/0x210
[   87.940192][ T5813]  filemap_fdatawrite+0x1e9/0x2f0
[   87.940207][ T5813]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   87.940274][ T5813]  ? do_raw_spin_unlock+0x4d/0x210
[   87.940286][ T5813]  f2fs_sync_dirty_inodes+0x30e/0x860
[   87.940305][ T5813]  f2fs_write_checkpoint+0x9df/0x26a0
[   87.940333][ T5813]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   87.940386][ T5813]  kill_f2fs_super+0x314/0x720
[   87.940412][ T5813]  ? __pfx_kill_f2fs_super+0x10/0x10
[   87.940439][ T5813]  ? lockdep_hardirqs_on+0x7a/0x110
[   87.940466][ T5813]  deactivate_locked_super+0xbc/0x130
[   87.940488][ T5813]  cleanup_mnt+0x437/0x4d0
[   87.940504][ T5813]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.940519][ T5813]  task_work_run+0x1d9/0x270
[   87.940536][ T5813]  ? __pfx_task_work_run+0x10/0x10
[   87.940556][ T5813]  exit_to_user_mode_loop+0xed/0x480
[   87.940572][ T5813]  ? rcu_is_watching+0x15/0xb0
[   87.940597][ T5813]  do_syscall_64+0x32d/0xf80
[   87.940609][ T5813]  ? trace_irq_disable+0x3b/0x150
[   87.940621][ T5813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.940632][ T5813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.940640][ T5813] RIP: 0033:0x7f55b859e097
[   87.940650][ T5813] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   87.940657][ T5813] RSP: 002b:00007ffc6e207388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   87.940666][ T5813] RAX: 0000000000000000 RBX: 00007f55b86321ca RCX: 00007f55b859e097
[   87.940672][ T5813] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e207440
[   87.940677][ T5813] RBP: 00007ffc6e207440 R08: 00007ffc6e208440 R09: 00000000ffffffff
[   87.940693][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6e2084d0
[   87.940698][ T5813] R13: 00007f55b86321ca R14: 000000000001564e R15: 00007ffc6e208510
[   87.940712][ T5813]  </TASK>
[   87.940716][ T5813] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   88.118976][ T6531] openvswitch: netlink: Duplicate key (type 2).
[   88.878553][ T6551] loop2: detected capacity change from 0 to 128
[   88.888301][ T6551] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   88.898812][ T6551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.939719][ T6551] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   89.112083][ T6561] IPv6: addrconf: prefix option has invalid lifetime
[   89.326073][ T6572] macvtap1: entered promiscuous mode
[   89.328429][ T6572] macvtap1: entered allmulticast mode
[   89.339910][ T6572] veth1_vlan: entered allmulticast mode
[   89.685631][  T900] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   89.837367][  T900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.840993][  T900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.844286][  T900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   89.849534][  T900] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   89.852801][  T900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.868854][  T900] usb 1-1: config 0 descriptor??
[   89.869893][ T5838] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.874083][ T5838] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.878747][ T5838] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.882173][ T5838] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.915539][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   90.081770][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[   90.084777][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.087479][   T24] usb 3-1: Product: syz
[   90.088970][   T24] usb 3-1: Manufacturer: syz
[   90.090520][   T24] usb 3-1: SerialNumber: syz
[   90.099680][   T24] usb 3-1: config 0 descriptor??
[   90.104354][   T24] gspca_main: sonixb-2.14.0 probing 0c45:6005
[   90.265648][ T5197] Bluetooth: hci2: command tx timeout
[   90.285613][  T900] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd
[   90.307740][  T900] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   90.514463][   T24] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[   90.552737][ T5872] usb 1-1: USB disconnect, device number 3
[   90.719696][ T5858] usb 3-1: USB disconnect, device number 3
[   91.521376][ T6649] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[   91.624417][ T6653] xt_SECMARK: invalid mode: 2
[   91.805990][ T6651] loop0: detected capacity change from 0 to 32768
[   91.822362][   T33] audit: type=1326 audit(1778874018.578:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b859ce59 code=0x7ffc0000
[   91.837749][   T33] audit: type=1326 audit(1778874018.578:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f55b859ce59 code=0x7ffc0000
[   91.846486][   T33] audit: type=1326 audit(1778874018.578:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b859ce59 code=0x7ffc0000
[   91.853116][   T33] audit: type=1326 audit(1778874018.578:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b859ce59 code=0x7ffc0000
[   91.865529][ T6651] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.897997][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'.
[   91.900549][ T6651] XFS (loop0): Ending clean mount
[   91.927761][   T33] audit: type=1800 audit(1778874018.688:8): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.306" name="file1" dev="loop0" ino=6150 res=0 errno=0
[   91.943618][   T33] audit: type=1800 audit(1778874018.698:9): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.306" name="file1" dev="loop0" ino=6150 res=0 errno=0
[   92.121328][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'.
[   92.240748][ T6689] loop2: detected capacity change from 0 to 128
[   92.286183][ T6689] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   92.290067][ T6689] hpfs: filesystem error: improperly stopped
[   92.291967][ T6689] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   92.294293][ T6689] hpfs: You really don't want any checks? You are crazy...
[   92.308512][ T6689] hpfs: hpfs_map_sector(): read error
[   92.310288][ T6689] hpfs: code page support is disabled
[   92.312905][ T6689] hpfs: hpfs_map_4sectors(): unaligned read
[   92.314972][ T6689] hpfs: hpfs_map_4sectors(): unaligned read
[   92.317266][ T6689] hpfs: filesystem error: unable to find root dir
[   92.528519][ T5818] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.631913][ T6705] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[   92.852259][ T6709] loop0: detected capacity change from 0 to 32768
[   92.878414][ T6709] ERROR: (device loop0): xtTruncate_pmap: xt_getpage: xtree page corrupt
[   92.878414][ T6709] 
[   92.884202][ T6709] ERROR: (device loop0): remounting filesystem as read-only
[   92.888236][ T6709] ERROR: (device loop0): jfs_rename: 
[   92.888236][ T6709] 
[   92.903021][ T5818] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt
[   92.903021][ T5818] 
[   93.541592][ T6723] [U] ^K
[   93.805798][ T6738] loop2: detected capacity change from 0 to 128
[   93.808527][ T6738] EXT4-fs: Ignoring removed nobh option
[   93.822452][ T6738] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[   93.848225][ T6738] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   93.855642][ T6738] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535)
[   93.882009][ T5813] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   94.635582][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   94.787135][ T5872] usb 3-1: config 1 has an invalid interface number: 188 but max is 0
[   94.795980][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.800206][ T5872] usb 3-1: config 1 has no interface number 0
[   94.802437][ T5872] usb 3-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.809173][ T5872] usb 3-1: config 1 interface 188 has no altsetting 0
[   94.819914][ T5872] usb 3-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[   94.823074][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.826738][ T5872] usb 3-1: Product: syz
[   94.828115][ T5872] usb 3-1: Manufacturer: syz
[   94.829639][ T5872] usb 3-1: SerialNumber: syz
[   95.051484][ T5872] usb 3-1: unknown interface protocol 0xc1, assuming v1
[   95.054454][ T5872] usb 3-1: 188:0 : does not exist
[   95.092129][ T5872] usb 3-1: USB disconnect, device number 4
[   95.129142][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.222808][ T6773] loop0: detected capacity change from 0 to 1024
[   95.254303][ T6773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.556299][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.902159][ T6796] loop2: detected capacity change from 0 to 1024
[   95.904719][ T6796] EXT4-fs: Ignoring removed nobh option
[   95.911748][ T6796] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   95.917839][ T6796] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.366: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   95.942611][ T6797] loop0: detected capacity change from 0 to 2048
[   95.947459][ T6796] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   95.949638][ T6796] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.366: couldn't read orphan inode 11 (err -117)
[   95.956219][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   95.958465][    C1] EXT4-fs (loop2): initial error at time 1778874022: ext4_ext_check_inode:521: inode 11
[   95.962084][    C1] EXT4-fs (loop2): last error at time 1778874022: ext4_ext_check_inode:521: inode 11
[   95.968648][ T6797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.969934][ T6796] loop2: lost filesystem error report for type 5 error -117
[   95.978296][ T6796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.037131][ T6796] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.366: Invalid block bitmap block 0 in block_group 0
[   96.059302][ T6796] Quota error (device loop2): write_blk: dquota write failed
[   96.061799][ T6796] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   96.073072][ T6796] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.366: Failed to acquire dquot type 0
[   96.123709][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.127637][   T52] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[   96.131165][   T52] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u9:2: Failed to release dquot type 0
[   96.138460][   T52] loop2: lost filesystem error report for type 5 error -117
[   96.173692][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.180699][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.301085][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.310848][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.421078][ T5838] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.424770][ T5838] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.459304][ T5838] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.462614][ T5838] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.506944][ T6819] loop0: detected capacity change from 0 to 164
[   96.621299][   T24] IPVS: starting estimator thread 0...
[   96.623372][ T6825] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   96.725655][ T6826] IPVS: using max 66 ests per chain, 158400 per kthread
[   96.755646][ T5858] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   96.906327][ T5858] usb 3-1: Using ep0 maxpacket: 32
[   96.909851][ T5858] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[   96.913489][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[   96.916328][ T5858] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   96.919908][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.925209][ T5858] usb 3-1: config 0 descriptor??
[   97.012497][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[   97.042573][ T5872] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   97.137328][ T5858] usbhid 3-1:0.0: can't add hid device: -71
[   97.143736][ T5858] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   97.148620][ T5858] usb 3-1: USB disconnect, device number 5
[   97.205373][ T5872] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[   97.210887][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.214675][ T5872] usb 1-1: Product: syz
[   97.218601][ T5872] usb 1-1: Manufacturer: syz
[   97.220513][ T5872] usb 1-1: SerialNumber: syz
[   97.231090][ T5872] usb 1-1: config 0 descriptor??
[   97.237038][ T6846] netlink: 'syz.1.387': attribute type 12 has an invalid length.
[   97.240337][ T6846] netlink: 'syz.1.387': attribute type 4 has an invalid length.
[   97.444004][ T5872] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22
[   97.462869][ T6857] netlink: 32 bytes leftover after parsing attributes in process `syz.1.392'.
[   97.474394][ T6857] netlink: 32 bytes leftover after parsing attributes in process `syz.1.392'.
[   97.657930][ T5872] usb 1-1: USB disconnect, device number 4
[   97.751420][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'.
[   97.756912][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'.
[   97.775309][ T5838] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.786926][ T5838] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.791965][ T5838] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.794600][ T5838] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.907587][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.404'.
[   97.918877][ T6881] netlink: 67 bytes leftover after parsing attributes in process `syz.1.404'.
[   98.032060][ T5859] IPVS: starting estimator thread 0...
[   98.125682][ T6890] IPVS: using max 51 ests per chain, 122400 per kthread
[   98.141211][ T6898] capability: warning: `syz.1.412' uses deprecated v2 capabilities in a way that may be insecure
[   98.699230][ T6933] loop2: detected capacity change from 0 to 4096
[   98.726784][ T6936] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.844165][ T6941] netlink: 'syz.2.432': attribute type 4 has an invalid length.
[   98.892388][ T6943] autofs: Unknown parameter 'no9 PG!8E	'
[   98.942376][ T6947] loop2: detected capacity change from 0 to 256
[   98.955082][ T6947] FAT-fs (loop2): Directory bread(block 64) failed
[   98.960313][ T6947] FAT-fs (loop2): Directory bread(block 65) failed
[   98.962851][ T6947] FAT-fs (loop2): Directory bread(block 66) failed
[   98.965024][ T6947] FAT-fs (loop2): Directory bread(block 67) failed
[   98.967697][ T6947] FAT-fs (loop2): Directory bread(block 68) failed
[   98.969657][ T6947] FAT-fs (loop2): Directory bread(block 69) failed
[   98.975014][ T6947] FAT-fs (loop2): Directory bread(block 70) failed
[   98.982985][ T6947] FAT-fs (loop2): Directory bread(block 71) failed
[   98.986474][ T6947] FAT-fs (loop2): Directory bread(block 72) failed
[   98.988943][ T6947] FAT-fs (loop2): Directory bread(block 73) failed
[   99.083123][ T6953] loop2: detected capacity change from 0 to 512
[   99.092439][ T6953] EXT4-fs (loop2): orphan cleanup on readonly fs
[   99.104538][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.438: iget: bad extra_isize 90 (inode size 256)
[   99.110274][ T6953] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   99.111409][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.438: error while reading EA inode 11 err=-117
[   99.119093][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   99.119124][    C0] EXT4-fs (loop2): initial error at time 1778874025: ext4_xattr_inode_iget:441: inode 11
[   99.119138][    C0] EXT4-fs (loop2): last error at time 1778874025: ext4_xattr_inode_iget:441: inode 11
[   99.130028][ T6953] loop2: lost filesystem error report for type 5 error -117
[   99.130388][ T6953] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   99.139814][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.438: iget: bad extra_isize 90 (inode size 256)
[   99.148147][ T6953] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   99.152185][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.438: error while reading EA inode 11 err=-117
[   99.172350][ T6953] loop2: lost filesystem error report for type 5 error -117
[   99.172882][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.438: iget: bad extra_isize 90 (inode size 256)
[   99.198808][ T6953] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[   99.199403][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.438: error while reading EA inode 18 err=-117
[   99.214775][ T6953] loop2: lost filesystem error report for type 5 error -117
[   99.215235][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.438: iget: bad extra_isize 90 (inode size 256)
[   99.230428][ T6958] loop0: detected capacity change from 0 to 1024
[   99.233125][ T6953] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[   99.234628][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.438: error while reading EA inode 18 err=-117
[   99.262703][ T6953] loop2: lost filesystem error report for type 5 error -117
[   99.263244][ T6953] EXT4-fs (loop2): 1 orphan inode deleted
[   99.287262][ T6953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   99.387458][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.588783][ T6981] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   99.592542][ T6981] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[   99.918500][ T7003] loop0: detected capacity change from 0 to 4096
[   99.930321][ T7003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.963371][ T7003] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.462: bg 0: block 363: padding at end of block bitmap is not set
[   99.974814][ T7003] fs-verity (loop0, inode 15): ext4_end_enable_verity() failed with err -117
[  100.001999][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.150311][ T7009] input: syz1 as /devices/virtual/input/input8
[  100.282270][ T7015] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  100.285091][ T7015] overlayfs: failed to set xattr on upper
[  100.288601][ T7015] overlayfs: ...falling back to redirect_dir=nofollow.
[  100.291372][ T7015] overlayfs: ...falling back to index=off.
[  100.293660][ T7015] overlayfs: ...falling back to uuid=null.
[  100.435841][   T33] audit: type=1804 audit(1778874027.188:10): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.470" name="/newroot/155/file0" dev="tmpfs" ino=811 res=1 errno=0
[  100.445957][ T5858] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  100.448024][ T7021] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[  100.454546][ T7021] ref_ctr increment failed for inode: 0x32b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888113363d40
[  100.464261][ T7021] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[  100.468899][ T7021] ref_ctr decrement failed for inode: 0x32b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888113363d40
[  100.473146][ T7021] uprobe: syz.2.470:7021 failed to unregister, leaking uprobe
[  100.625885][ T5858] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.636751][ T5858] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  100.648466][ T5858] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 248, using maximum allowed: 30
[  100.686288][ T5858] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 248
[  100.698633][ T5858] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[  100.702231][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.705397][ T5858] usb 1-1: Product: syz
[  100.720918][ T5858] usb 1-1: Manufacturer: syz
[  100.725833][ T5858] usb 1-1: SerialNumber: syz
[  101.029471][ T5858] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  101.039018][ T5858] usb 1-1: USB disconnect, device number 5
[  101.064404][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.186880][ T7052] loop2: detected capacity change from 0 to 1024
[  101.453783][ T7065] 9p: Bad value for 'rfdno'
[  101.555612][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  101.688101][ T7071] loop0: detected capacity change from 0 to 32768
[  101.697404][ T7071] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  101.705739][ T5858] usb 3-1: Using ep0 maxpacket: 32
[  101.714186][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short
[  101.720922][ T7071] XFS (loop0): Ending clean mount
[  101.726437][ T5858] usb 3-1: config 251 has an invalid interface number: 18 but max is 0
[  101.736438][ T5858] usb 3-1: config 251 has no interface number 0
[  101.736896][   T33] audit: type=1800 audit(1778874028.498:11): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.493" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  101.738732][ T5858] usb 3-1: config 251 interface 18 has no altsetting 0
[  101.758770][ T5858] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=6a.c4
[  101.762354][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.765329][ T5858] usb 3-1: Product: syz
[  101.771376][ T5818] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  101.775224][ T5858] usb 3-1: Manufacturer: syz
[  101.783526][ T5858] usb 3-1: SerialNumber: syz
[  102.010037][ T5858] usb_ehset_test 3-1:251.18: probe with driver usb_ehset_test failed with error -32
[  102.026840][ T5858] usb 3-1: USB disconnect, device number 6
[  102.175738][  T783] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.326458][  T783] usb 1-1: Using ep0 maxpacket: 16
[  102.330231][  T783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.334411][  T783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.344192][  T783] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  102.353534][  T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.364408][  T783] usb 1-1: config 0 descriptor??
[  103.045763][  T783] apple 0003:05AC:024B.0002: unknown global tag 0xe
[  103.047952][  T783] apple 0003:05AC:024B.0002: item 0 1 1 14 parsing failed
[  103.050536][  T783] apple 0003:05AC:024B.0002: parse failed
[  103.052424][  T783] apple 0003:05AC:024B.0002: probe with driver apple failed with error -22
[  103.059012][  T783] usb 1-1: USB disconnect, device number 6
[  103.237945][ T7141] fuse: Bad value for 'fd'
[  103.725659][  T783] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  103.875582][  T783] usb 3-1: Using ep0 maxpacket: 8
[  103.883811][  T783] usb 3-1: config index 0 descriptor too short (expected 20772, got 36)
[  103.887224][  T783] usb 3-1: config 6 has too many interfaces: 211, using maximum allowed: 32
[  103.890716][  T783] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 211
[  103.897881][  T783] usb 3-1: config 6 has no interface number 0
[  103.905600][  T783] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  103.909218][  T783] usb 3-1: config 6 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 69
[  103.919568][  T783] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=82.06
[  103.923271][  T783] usb 3-1: New USB device strings: Mfr=62, Product=2, SerialNumber=3
[  103.933443][  T783] usb 3-1: Product: syz
[  103.935099][  T783] usb 3-1: Manufacturer: syz
[  103.937068][  T783] usb 3-1: SerialNumber: syz
[  103.942289][ T7151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  103.946905][  T783] hso 3-1:6.2: Failed to find INT IN ep
[  104.156702][  T783] usb 3-1: USB disconnect, device number 7
[  104.720668][ T7184] netlink: 95 bytes leftover after parsing attributes in process `syz.0.538'.
[  105.332391][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'.
[  105.351912][ T7219] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.478536][   T36] Bluetooth: hci3: Frame reassembly failed (-84)
[  105.486422][ T7224] Bluetooth: hci3: Frame reassembly failed (-90)
[  105.495206][ T7228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.559'.
[  105.502397][ T7228] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  105.508411][ T7228] bridge1: entered promiscuous mode
[  105.731768][ T7244] loop2: detected capacity change from 0 to 2048
[  105.744496][ T7244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.817951][ T7250] loop2: detected capacity change from 0 to 1024
[  105.825329][ T7250] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  105.967654][ T7258] loop2: detected capacity change from 0 to 128
[  106.006774][ T7260] netlink: 'syz.2.575': attribute type 29 has an invalid length.
[  106.009867][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'.
[  106.012603][ T7260] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  107.540171][   T54] Bluetooth: hci3: command 0x1003 tx timeout
[  107.542871][ T5197] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  107.589634][   T33] audit: type=1326 audit(1778874034.348:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.600832][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'.
[  107.603510][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'.
[  107.606732][   T33] audit: type=1326 audit(1778874034.368:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.614718][   T33] audit: type=1326 audit(1778874034.368:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.632776][   T33] audit: type=1326 audit(1778874034.368:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.645728][   T33] audit: type=1326 audit(1778874034.368:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.657839][   T33] audit: type=1326 audit(1778874034.368:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.666489][   T33] audit: type=1326 audit(1778874034.368:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.679654][   T33] audit: type=1326 audit(1778874034.368:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.686644][   T33] audit: type=1326 audit(1778874034.368:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.694026][   T33] audit: type=1326 audit(1778874034.368:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc696f9ce59 code=0x7ffc0000
[  107.708926][ T7299] program syz.0.593 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.740053][ T7321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.049847][ T7342] loop0: detected capacity change from 0 to 4096
[  109.085782][ T7342] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  109.203171][ T7352] overlayfs: failed to clone lowerpath
[  109.438462][ T7372] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  110.153297][ T7375] loop2: detected capacity change from 0 to 128
[  110.163683][ T7375] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  111.465561][ T5810] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  111.617454][ T5810] usb 1-1: unable to get BOS descriptor or descriptor too short
[  111.620836][ T5810] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.624118][ T5810] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  111.628597][ T5810] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  111.633968][ T5810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  111.636933][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.639385][ T5810] usb 1-1: Product: syz
[  111.640660][ T5810] usb 1-1: Manufacturer: syz
[  111.642333][ T5810] usb 1-1: SerialNumber: syz
[  111.867378][ T5810] cdc_ncm 1-1:1.0: bind() failure
[  111.874879][ T5810] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  111.879915][ T5810] cdc_ncm 1-1:1.1: bind() failure
[  111.894792][ T5810] usb 1-1: USB disconnect, device number 7
[  112.175712][   T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  112.349464][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  112.353387][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  112.358990][   T10] usb 3-1: config index 0 descriptor too short (expected 18, got 10)
[  112.362244][   T10] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  112.365308][   T10] usb 3-1: config 0 has no interfaces?
[  112.370994][   T10] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f
[  112.374697][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.385631][   T10] usb 3-1: Product: syz
[  112.387410][   T10] usb 3-1: Manufacturer: syz
[  112.395859][   T10] usb 3-1: SerialNumber: syz
[  112.416081][   T10] usb 3-1: config 0 descriptor??
[  112.636504][ T5859] usb 3-1: USB disconnect, device number 8
[  113.001734][ T7445] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  113.258634][ T7461] netlink: 'syz.1.663': attribute type 29 has an invalid length.
[  113.266280][ T7461] netlink: 'syz.1.663': attribute type 29 has an invalid length.
[  113.271378][ T7461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.663'.
[  113.746239][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  113.936088][ T7495] tipc: Started in network mode
[  113.938475][ T7495] tipc: Node identity 7f000001, cluster identity 4711
[  113.941674][ T7495] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  113.949824][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.953387][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.958631][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  113.963419][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  113.967359][ T7495] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  113.970476][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.977553][   T10] usb 3-1: config 0 descriptor??
[  113.978554][ T7495] tipc: Enabled bearer <udp:syz0>, priority 10
[  114.433748][   T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  115.013666][    C1] plantronics 0003:047F:FFFF.0003: hid_field_extract() called with n (132) > 32! (syz.2.672)
[  115.089127][   T10] tipc: Node number set to 2130706433
[  115.216547][   T10] usb 3-1: USB disconnect, device number 9
[  115.818267][ T7523] loop2: detected capacity change from 0 to 2048
[  115.839115][ T7523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.849030][ T7523] 
[  115.849981][ T7523] ======================================================
[  115.852554][ T7523] WARNING: possible circular locking dependency detected
[  115.854957][ T7523] syzkaller #0 Tainted: G             L     
[  115.857528][ T7523] ------------------------------------------------------
[  115.860341][ T7523] syz.2.691/7523 is trying to acquire lock:
[  115.862662][ T7523] ffff8881bbb9a728 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0
[  115.866223][ T7523] 
[  115.866223][ T7523] but task is already holding lock:
[  115.868679][ T7523] ffff88816b7dab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  115.872572][ T7523] 
[  115.872572][ T7523] which lock already depends on the new lock.
[  115.872572][ T7523] 
[  115.875886][ T7523] 
[  115.875886][ T7523] the existing dependency chain (in reverse order) is:
[  115.878684][ T7523] 
[  115.878684][ T7523] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  115.881476][ T7523]        percpu_down_read_internal+0x48/0x1c0
[  115.883345][ T7523]        ext4_writepages+0x205/0x3b0
[  115.884881][ T7523]        do_writepages+0x32e/0x550
[  115.886441][ T7523]        __writeback_single_inode+0x133/0x11a0
[  115.888219][ T7523]        writeback_single_inode+0x4ac/0xdc0
[  115.890021][ T7523]        write_inode_now+0x1c2/0x290
[  115.891646][ T7523]        iput+0x8c1/0xe80
[  115.892958][ T7523]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  115.894764][ T7523]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  115.896713][ T7523]        __ext4_expand_extra_isize+0x30d/0x400
[  115.898615][ T7523]        __ext4_mark_inode_dirty+0x45c/0x730
[  115.900471][ T7523]        ext4_evict_inode+0x7a1/0xeb0
[  115.902107][ T7523]        evict+0x61e/0xb10
[  115.903414][ T7523]        ext4_orphan_cleanup+0xc38/0x1470
[  115.905311][ T7523]        ext4_fill_super+0x59ff/0x6320
[  115.907203][ T7523]        get_tree_bdev_flags+0x431/0x4f0
[  115.908926][ T7523]        vfs_get_tree+0x92/0x2a0
[  115.910565][ T7523]        do_new_mount+0x341/0xd30
[  115.912325][ T7523]        __se_sys_mount+0x31d/0x420
[  115.914097][ T7523]        do_syscall_64+0x14d/0xf80
[  115.915672][ T7523]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.917579][ T7523] 
[  115.917579][ T7523] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[  115.919880][ T7523]        __lock_acquire+0x15a5/0x2cf0
[  115.921469][ T7523]        lock_acquire+0xf0/0x2e0
[  115.923047][ T7523]        down_write+0x96/0x200
[  115.924472][ T7523]        ext4_destroy_inline_data+0x28/0xe0
[  115.926297][ T7523]        ext4_do_writepages+0x51e/0x46e0
[  115.927996][ T7523]        ext4_writepages+0x241/0x3b0
[  115.929564][ T7523]        do_writepages+0x32e/0x550
[  115.931196][ T7523]        file_write_and_wait_range+0x36e/0x440
[  115.933251][ T7523]        generic_buffers_fsync_noflush+0x70/0x1d0
[  115.935275][ T7523]        ext4_sync_file+0x321/0xb70
[  115.936911][ T7523]        ext4_buffered_write_iter+0x2ca/0x3a0
[  115.938710][ T7523]        ext4_file_write_iter+0x298/0x1bf0
[  115.940448][ T7523]        vfs_write+0x61d/0xb90
[  115.941981][ T7523]        __x64_sys_pwrite64+0x199/0x230
[  115.943807][ T7523]        do_syscall_64+0x14d/0xf80
[  115.945582][ T7523]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.947715][ T7523] 
[  115.947715][ T7523] other info that might help us debug this:
[  115.947715][ T7523] 
[  115.951279][ T7523]  Possible unsafe locking scenario:
[  115.951279][ T7523] 
[  115.953925][ T7523]        CPU0                    CPU1
[  115.955675][ T7523]        ----                    ----
[  115.957451][ T7523]   rlock(&sbi->s_writepages_rwsem);
[  115.959315][ T7523]                                lock(&ei->xattr_sem);
[  115.961715][ T7523]                                lock(&sbi->s_writepages_rwsem);
[  115.964714][ T7523]   lock(&ei->xattr_sem);
[  115.966410][ T7523] 
[  115.966410][ T7523]  *** DEADLOCK ***
[  115.966410][ T7523] 
[  115.969433][ T7523] 2 locks held by syz.2.691/7523:
[  115.971329][ T7523]  #0: ffff88816b7dc420 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  115.974766][ T7523]  #1: ffff88816b7dab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  115.978281][ T7523] 
[  115.978281][ T7523] stack backtrace:
[  115.980295][ T7523] CPU: 1 UID: 0 PID: 7523 Comm: syz.2.691 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.980316][ T7523] Tainted: [L]=SOFTLOCKUP
[  115.980322][ T7523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.980330][ T7523] Call Trace:
[  115.980337][ T7523]  <TASK>
[  115.980345][ T7523]  dump_stack_lvl+0xe8/0x150
[  115.980370][ T7523]  print_circular_bug+0x2e1/0x300
[  115.980392][ T7523]  check_noncircular+0x12e/0x150
[  115.980413][ T7523]  __lock_acquire+0x15a5/0x2cf0
[  115.980427][ T7523]  ? __lock_acquire+0x6b5/0x2cf0
[  115.980447][ T7523]  ? __lock_acquire+0x6b5/0x2cf0
[  115.980465][ T7523]  ? __lock_acquire+0x6b5/0x2cf0
[  115.980483][ T7523]  lock_acquire+0xf0/0x2e0
[  115.980501][ T7523]  ? ext4_destroy_inline_data+0x28/0xe0
[  115.980523][ T7523]  down_write+0x96/0x200
[  115.980540][ T7523]  ? ext4_destroy_inline_data+0x28/0xe0
[  115.980558][ T7523]  ? __pfx_down_write+0x10/0x10
[  115.980577][ T7523]  ext4_destroy_inline_data+0x28/0xe0
[  115.980599][ T7523]  ext4_do_writepages+0x51e/0x46e0
[  115.980613][ T7523]  ? is_bpf_text_address+0x292/0x2b0
[  115.980628][ T7523]  ? is_bpf_text_address+0x26/0x2b0
[  115.980642][ T7523]  ? kernel_text_address+0xa5/0xe0
[  115.980658][ T7523]  ? __kernel_text_address+0xd/0x30
[  115.980671][ T7523]  ? unwind_get_return_address+0x4d/0x90
[  115.980724][ T7523]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  115.980738][ T7523]  ? arch_stack_walk+0xfb/0x150
[  115.980761][ T7523]  ? stack_trace_save+0xa9/0x100
[  115.980776][ T7523]  ? __pfx_stack_trace_save+0x10/0x10
[  115.980790][ T7523]  ? check_noncircular+0xda/0x150
[  115.980810][ T7523]  ? __pfx_ext4_do_writepages+0x10/0x10
[  115.980823][ T7523]  ? add_lock_to_list+0xc7/0x100
[  115.980843][ T7523]  ? lockdep_unlock+0x5d/0xd0
[  115.980856][ T7523]  ? __lock_acquire+0x146e/0x2cf0
[  115.980870][ T7523]  ? rcu_is_watching+0x15/0xb0
[  115.980895][ T7523]  ext4_writepages+0x241/0x3b0
[  115.980913][ T7523]  ? __pfx_ext4_writepages+0x10/0x10
[  115.980934][ T7523]  ? do_raw_spin_unlock+0x4d/0x210
[  115.980946][ T7523]  ? __pfx_ext4_writepages+0x10/0x10
[  115.980961][ T7523]  do_writepages+0x32e/0x550
[  115.980984][ T7523]  ? do_raw_spin_unlock+0x4d/0x210
[  115.980998][ T7523]  file_write_and_wait_range+0x36e/0x440
[  115.981023][ T7523]  ? __pfx_file_write_and_wait_range+0x10/0x10
[  115.981054][ T7523]  ? generic_perform_write+0x80a/0x8f0
[  115.981083][ T7523]  generic_buffers_fsync_noflush+0x70/0x1d0
[  115.981103][ T7523]  ext4_sync_file+0x321/0xb70
[  115.981122][ T7523]  ext4_buffered_write_iter+0x2ca/0x3a0
[  115.981137][ T7523]  ext4_file_write_iter+0x298/0x1bf0
[  115.981158][ T7523]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  115.981177][ T7523]  vfs_write+0x61d/0xb90
[  115.981198][ T7523]  ? __pfx_vfs_write+0x10/0x10
[  115.981215][ T7523]  ? __fget_files+0x2a/0x420
[  115.981239][ T7523]  __x64_sys_pwrite64+0x199/0x230
[  115.981254][ T7523]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  115.981270][ T7523]  do_syscall_64+0x14d/0xf80
[  115.981285][ T7523]  ? trace_irq_disable+0x3b/0x150
[  115.981305][ T7523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.981318][ T7523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.981333][ T7523] RIP: 0033:0x7f55b859ce59
[  115.981348][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.981361][ T7523] RSP: 002b:00007f55b9406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  115.981376][ T7523] RAX: ffffffffffffffda RBX: 00007f55b8815fa0 RCX: 00007f55b859ce59
[  115.981387][ T7523] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004
[  115.981396][ T7523] RBP: 00007f55b8632d6f R08: 0000000000000000 R09: 0000000000000000
[  115.981405][ T7523] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000000
[  115.981414][ T7523] R13: 00007f55b8816038 R14: 00007f55b8815fa0 R15: 00007ffc6e208118
[  115.981431][ T7523]  </TASK>
[  116.157034][ T7523] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  116.162295][ T7523] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  116.166434][ T7523] EXT4-fs (loop2): This should not happen!! Data will be lost
[  116.166434][ T7523] 
[  116.169613][ T7523] EXT4-fs (loop2): Total free blocks count 0
[  116.171375][ T7523] EXT4-fs (loop2): Free/Dirty block details
[  116.173316][ T7523] EXT4-fs (loop2): free_blocks=2415919104
[  116.175254][ T7523] EXT4-fs (loop2): dirty_blocks=64
[  116.177105][ T7523] EXT4-fs (loop2): Block reservation details
[  116.179185][ T7523] EXT4-fs (loop2): i_reserved_data_blocks=4
[  116.196833][   T52] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  116.225544][ T5810] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  116.377039][ T5810] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  116.380768][ T5810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  116.384462][ T5810] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  116.390826][ T5810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  116.394257][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  116.397700][ T5810] usb 1-1: SerialNumber: syz
[  116.609468][ T5810] usbtest 1-1:1.0: Linux user mode ISO test driver
[  116.612277][ T5810] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  116.616114][ T5810] usb 1-1: USB disconnect, device number 8
