last executing test programs:

3.354066235s ago: executing program 1 (id=565):
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e2c, 0x40, 0x1, 0x89})
io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000300)=[r0], 0x1)

3.035776148s ago: executing program 1 (id=566):
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001)

3.035460745s ago: executing program 1 (id=567):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)

2.950920282s ago: executing program 1 (id=568):
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file1/../file0', [], 0xa, "123785e42d17fee4"}, 0x1c)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, 0x0)
unshare(0x2060400)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2cd, 0x191, 0x1, 0x3, 0xdd9f85, 0x1, 0x40, 0xf3, 0x200f9, 0x5, 0x6, 0x6, 0x8, 0x0, 0x3f, 0x5, {0x0, 0x7}, 0x43, 0x6d}})
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

2.533336619s ago: executing program 0 (id=573):
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xd495, 0x13100, 0x0, 0x4}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
umount2(&(0x7f00000000c0)='./cgroup\x00', 0x9)

2.467944315s ago: executing program 0 (id=574):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186f03, &(0x7f00000004c0)={0x200000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2401})

2.1677684s ago: executing program 0 (id=575):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)

2.055378239s ago: executing program 1 (id=576):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)
syz_mount_image$jfs(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x100c047, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1bb9ec930dabfc165907d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31c0971007f269f873e14e5fe3c46c0ac2b22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b98ade053b2f9b7918"], 0x1, 0x631f, &(0x7f0000000780)="$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")
mount(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x2390024, 0x0)

1.828622426s ago: executing program 0 (id=577):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}})
socket$nl_netfilter(0x10, 0x3, 0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x215, 0x2}, 0x9, 0xffffffff, 0x7, 0x9, r0, r0, 0x4})
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setitimer(0x2, 0x0, 0x0)
setitimer(0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002ef0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
syz_open_procfs(0x0, 0x0)

1.302118342s ago: executing program 2 (id=578):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'Z'}]}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xd4}}, 0x0)

1.226377237s ago: executing program 1 (id=579):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102000000080e0bffff40000102030109022400010101a00409040005010301018709210600020122bc0c0905810310"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})

1.225945699s ago: executing program 2 (id=580):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000080)={'stack ', '%#{//(@\\)//&@},[\'%%&\\#*\x00\x00\x00'}, 0x14)

1.079729673s ago: executing program 2 (id=581):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x52d, 0xe, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x3, 0xca}]}}}}})

1.004277228s ago: executing program 2 (id=582):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x23, &(0x7f0000000280)='j\x00'/14, 0x0, 0x200008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

187.232079ms ago: executing program 0 (id=583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

24.221026ms ago: executing program 2 (id=584):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

9.752566ms ago: executing program 0 (id=585):
syz_open_dev$sg(&(0x7f0000000340), 0xffffffffffffffff, 0x8102)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040011)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
writev(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000300)="644ee8", 0x3}], 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x1], 0x0, 0x0, 0x1}}, 0x40)
syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, &(0x7f0000000000)=""/104, 0x68)
close_range(r3, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=586):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000001c0)="$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")

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9146' (ED25519) to the list of known hosts.
syzkaller login: [   56.238718][ T5542] cgroup: Unknown subsys name 'net'
[   56.327254][ T5542] cgroup: Unknown subsys name 'cpuset'
[   56.331430][ T5542] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.069191][ T5542] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.587408][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.610560][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.618381][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.621823][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.626110][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.630426][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.643810][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.661305][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.667274][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.671406][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.678025][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.678571][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.685804][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.691116][ T5007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.697053][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.703907][ T5007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.604879][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.608466][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.610714][ T5846] bridge_slave_0: entered allmulticast mode
[   74.613401][ T5846] bridge_slave_0: entered promiscuous mode
[   74.630633][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.634127][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.636978][ T5846] bridge_slave_1: entered allmulticast mode
[   74.640700][ T5846] bridge_slave_1: entered promiscuous mode
[   74.698013][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.700225][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.702409][ T5853] bridge_slave_0: entered allmulticast mode
[   74.705437][ T5853] bridge_slave_0: entered promiscuous mode
[   74.708692][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.711294][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.714001][ T5850] bridge_slave_0: entered allmulticast mode
[   74.717570][ T5850] bridge_slave_0: entered promiscuous mode
[   74.721373][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.724755][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.727382][ T5850] bridge_slave_1: entered allmulticast mode
[   74.729969][ T5850] bridge_slave_1: entered promiscuous mode
[   74.737125][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.740382][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.743059][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.746814][ T5853] bridge_slave_1: entered allmulticast mode
[   74.749840][ T5853] bridge_slave_1: entered promiscuous mode
[   74.776041][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.800798][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.814211][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.822059][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.845842][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.863892][ T5846] team0: Port device team_slave_0 added
[   74.878538][ T5850] team0: Port device team_slave_0 added
[   74.882287][ T5846] team0: Port device team_slave_1 added
[   74.905393][ T5850] team0: Port device team_slave_1 added
[   74.916856][ T5853] team0: Port device team_slave_0 added
[   74.919841][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.922026][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.930537][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.951858][ T5853] team0: Port device team_slave_1 added
[   74.954439][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.956628][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.964836][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.000638][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.003325][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.012456][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.016873][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.019340][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.028508][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.034221][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.037125][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.046318][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.060237][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.063766][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.072097][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.108294][ T5846] hsr_slave_0: entered promiscuous mode
[   75.112117][ T5846] hsr_slave_1: entered promiscuous mode
[   75.173458][ T5850] hsr_slave_0: entered promiscuous mode
[   75.176468][ T5850] hsr_slave_1: entered promiscuous mode
[   75.178667][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   75.180683][ T5850] Cannot create hsr debugfs directory
[   75.186154][ T5853] hsr_slave_0: entered promiscuous mode
[   75.188359][ T5853] hsr_slave_1: entered promiscuous mode
[   75.190461][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   75.192220][ T5853] Cannot create hsr debugfs directory
[   75.471009][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.486217][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.489015][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.497471][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.502055][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.511797][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.532275][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.539104][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.579149][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.589143][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.602406][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.608821][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.615816][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.621963][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.625909][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.632116][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.664235][ T5852] Bluetooth: hci0: command tx timeout
[   75.716198][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.721794][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.728838][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.733411][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.737179][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.742563][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.746842][ T5852] Bluetooth: hci2: command tx timeout
[   75.746861][ T5007] Bluetooth: hci1: command tx timeout
[   75.764103][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.769387][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.862275][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.889561][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.917298][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   75.929193][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   75.946160][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.949002][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.965124][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.967621][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.972890][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.975598][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.996210][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.998547][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.013015][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.097739][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   76.117430][  T103] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.120484][  T103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.151869][  T103] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.154873][  T103] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.449022][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.513092][ T5846] veth0_vlan: entered promiscuous mode
[   76.526578][ T5846] veth1_vlan: entered promiscuous mode
[   76.554731][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.601533][ T5846] veth0_macvtap: entered promiscuous mode
[   76.617032][ T5846] veth1_macvtap: entered promiscuous mode
[   76.644630][ T5850] veth0_vlan: entered promiscuous mode
[   76.658239][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.662850][ T5850] veth1_vlan: entered promiscuous mode
[   76.681421][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.687756][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.701621][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.707552][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.719880][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.722672][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.738325][ T5850] veth0_macvtap: entered promiscuous mode
[   76.758503][ T5850] veth1_macvtap: entered promiscuous mode
[   76.812806][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.837802][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.869367][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.873812][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.877045][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.881850][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.900277][ T5853] veth0_vlan: entered promiscuous mode
[   76.908370][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.912546][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.945286][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.948228][ T5853] veth1_vlan: entered promiscuous mode
[   76.952919][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.963437][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[   76.970815][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[   77.047548][ T5853] veth0_macvtap: entered promiscuous mode
[   77.065861][ T5853] veth1_macvtap: entered promiscuous mode
[   77.110744][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.119981][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'.
[   77.123433][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.126447][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.154875][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.206918][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.210932][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.216942][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.220079][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.230630][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.234121][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.326120][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.334603][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.367063][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.370542][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.466064][ T5922] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.475096][ T5964] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   77.624042][ T5922] usb 3-1: Using ep0 maxpacket: 32
[   77.649511][ T5922] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[   77.653219][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.656850][ T5922] usb 3-1: Product: syz
[   77.659509][ T5922] usb 3-1: Manufacturer: syz
[   77.663085][ T5922] usb 3-1: SerialNumber: syz
[   77.694905][ T5922] usb 3-1: config 0 descriptor??
[   77.712590][ T5971] loop1: detected capacity change from 0 to 256
[   77.718543][ T5922] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[   77.727441][ T5971] =======================================================
[   77.727441][ T5971] WARNING: The mand mount option has been deprecated and
[   77.727441][ T5971]          and is ignored by this kernel. Remove the mand
[   77.727441][ T5971]          option from the mount to silence this warning.
[   77.727441][ T5971] =======================================================
[   77.747790][ T5852] Bluetooth: hci0: command tx timeout
[   77.824040][ T5852] Bluetooth: hci2: command tx timeout
[   77.834896][ T5852] Bluetooth: hci1: command tx timeout
[   79.340845][ T5922] gspca_ov534_9: reg_w failed -71
[   79.363214][ T5853] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   79.378820][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   79.378837][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.378847][ T5853] Call Trace:
[   79.378852][ T5853]  <TASK>
[   79.378858][ T5853]  dump_stack_lvl+0xe8/0x150
[   79.378875][ T5853]  dump_header+0xd3/0x4b0
[   79.378895][ T5853]  oom_kill_process+0x3ab/0x970
[   79.378912][ T5853]  out_of_memory+0x1064/0x1480
[   79.378924][ T5853]  ? try_charge_memcg+0xbca/0x1590
[   79.378944][ T5853]  ? __pfx_out_of_memory+0x10/0x10
[   79.378954][ T5853]  ? do_raw_spin_unlock+0x4d/0x210
[   79.378976][ T5853]  try_charge_memcg+0xc74/0x1590
[   79.378996][ T5853]  ? __pfx_try_charge_memcg+0x10/0x10
[   79.379006][ T5853]  ? percpu_ref_tryget+0x15/0x180
[   79.379031][ T5853]  ? charge_memcg+0x20/0x2b0
[   79.379045][ T5853]  charge_memcg+0x19c/0x2b0
[   79.379057][ T5853]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[   79.379069][ T5853]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[   79.379083][ T5853]  swap_cache_alloc_folio+0x4de/0x990
[   79.379107][ T5853]  swap_cache_read_folio+0x44/0x120
[   79.379160][ T5853]  swap_cluster_readahead+0x3a0/0x640
[   79.379179][ T5853]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   79.379202][ T5853]  ? get_vma_policy+0x27b/0x3c0
[   79.379216][ T5853]  swapin_readahead+0x19a/0xc10
[   79.379232][ T5853]  ? swap_table_get+0x1e/0x260
[   79.379247][ T5853]  ? swap_table_get+0x1e/0x260
[   79.379261][ T5853]  ? __pfx_swapin_readahead+0x10/0x10
[   79.379277][ T5853]  ? swap_table_get+0x1e/0x260
[   79.379295][ T5853]  ? swap_table_get+0x1e/0x260
[   79.379319][ T5853]  ? swap_table_get+0x1e/0x260
[   79.379336][ T5853]  ? swap_table_get+0x216/0x260
[   79.379352][ T5853]  ? swap_cache_get_folio+0x2e7/0x2f0
[   79.379370][ T5853]  do_swap_page+0x411/0x5030
[   79.379385][ T5853]  ? __lock_acquire+0x683/0x2cd0
[   79.379409][ T5853]  ? __pte_offset_map+0x29/0x240
[   79.379427][ T5853]  ? lockdep_hardirqs_on+0x7a/0x110
[   79.379450][ T5853]  ? do_swap_page+0x124/0x5030
[   79.379468][ T5853]  ? __pfx_do_swap_page+0x10/0x10
[   79.379483][ T5853]  ? __pte_offset_map+0x1ae/0x240
[   79.379501][ T5853]  ? pte_offset_map_rw_nolock+0xea/0x160
[   79.379521][ T5853]  handle_mm_fault+0x124e/0x3080
[   79.379538][ T5853]  ? lockdep_hardirqs_on+0x7a/0x110
[   79.379566][ T5853]  ? handle_mm_fault+0xec/0x3080
[   79.379589][ T5853]  ? __pfx_handle_mm_fault+0x10/0x10
[   79.379627][ T5853]  ? lock_vma_under_rcu+0x45a/0x500
[   79.379667][ T5853]  do_user_addr_fault+0xa4d/0x1340
[   79.379692][ T5853]  ? trace_page_fault_user+0x84/0x1e0
[   79.379709][ T5853]  exc_page_fault+0x6a/0xc0
[   79.379731][ T5853]  asm_exc_page_fault+0x26/0x30
[   79.379746][ T5853] RIP: 0033:0x7f630e95d68e
[   79.379760][ T5853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   79.379770][ T5853] RSP: 002b:00007fff1f874878 EFLAGS: 00010246
[   79.379780][ T5853] RAX: 0000000000000000 RBX: 0000555565c33500 RCX: 00007f630e95d68e
[   79.379788][ T5853] RDX: 00007fff1f8748d0 RSI: 0000000000000000 RDI: 0000000000000000
[   79.379797][ T5853] RBP: 00007fff1f87493c R08: 0000000000000000 R09: 0000000000000000
[   79.379804][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[   79.379811][ T5853] R13: 00000000000927c0 R14: 00000000000131f9 R15: 00007fff1f874990
[   79.379831][ T5853]  </TASK>
[   79.380845][ T5853] memory: usage 307200kB, limit 307200kB, failcnt 133
[   79.508560][ T5975] macvlan0: entered promiscuous mode
[   79.515522][ T5853] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0
[   79.518502][ T5853] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[   79.521145][ T5853] Memory cgroup stats for /syz0:
[   79.521442][ T5853] cache 0
[   79.525290][ T5853] rss 0
[   79.526411][ T5853] rss_huge 0
[   79.527721][ T5853] shmem 0
[   79.528862][ T5853] mapped_file 0
[   79.530162][ T5853] dirty 0
[   79.531261][ T5853] writeback 0
[   79.532487][ T5853] workingset_refault_anon 9
[   79.534335][ T5853] workingset_refault_file 0
[   79.536098][ T5853] swap 106496
[   79.537364][ T5853] swapcached 151552
[   79.538767][ T5853] pgpgin 68
[   79.539992][ T5853] pgpgout 67
[   79.541283][ T5853] pgfault 256
[   79.542516][ T5853] pgmajfault 9
[   79.544628][ T5853] inactive_anon 0
[   79.546175][ T5853] active_anon 4096
[   79.547554][ T5853] inactive_file 0
[   79.548913][ T5853] active_file 0
[   79.550226][ T5853] unevictable 0
[   79.551529][ T5853] hierarchical_memory_limit 314572800
[   79.553817][ T5853] hierarchical_memsw_limit 9223372036854771712
[   79.556586][ T5853] total_cache 0
[   79.558236][ T5853] total_rss 0
[   79.559729][ T5853] total_rss_huge 0
[   79.561196][ T5853] total_shmem 0
[   79.562544][ T5853] total_mapped_file 0
[   79.564704][ T5853] total_dirty 0
[   79.566189][ T5853] total_writeback 0
[   79.567673][ T5853] total_workingset_refault_anon 9
[   79.569646][ T5853] total_workingset_refault_file 0
[   79.571598][ T5853] total_swap 106496
[   79.574068][ T5853] total_swapcached 151552
[   79.575822][ T5853] total_pgpgin 68
[   79.577229][ T5853] total_pgpgout 67
[   79.578597][ T5853] total_pgfault 256
[   79.579943][ T5853] total_pgmajfault 9
[   79.581376][ T5853] total_inactive_anon 0
[   79.582915][ T5853] total_active_anon 4096
[   79.586980][ T5853] total_inactive_file 0
[   79.588731][ T5853] total_active_file 0
[   79.590262][ T5853] total_unevictable 0
[   79.591727][ T5853] anon_cost 0
[   79.592983][ T5853] file_cost 0
[   79.619762][ T5853] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.212,pid=5972,uid=0
[   79.641657][ T5853] Memory cgroup out of memory: Killed process 5972 (syz.0.212) total-vm:102160kB, anon-rss:1248kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   79.684815][ T5922] gspca_ov534_9: Unknown sensor 0000
[   79.684896][ T5922] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[   79.699765][ T5922] usb 3-1: USB disconnect, device number 2
[   79.825383][ T5852] Bluetooth: hci0: command tx timeout
[   79.904365][ T5852] Bluetooth: hci1: command tx timeout
[   79.907529][ T5852] Bluetooth: hci2: command tx timeout
[   80.684779][ T6023] netlink: 'syz.1.232': attribute type 21 has an invalid length.
[   80.748729][ T6027] loop0: detected capacity change from 0 to 1024
[   80.761455][ T6027] EXT4-fs: Ignoring removed bh option
[   80.792117][ T6029] loop1: detected capacity change from 0 to 512
[   80.795128][ T6027] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   80.835805][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.836005][ T6029] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.235: iget: bad i_size value: 38620345925642
[   80.858041][ T6027] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   80.867226][ T6029] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   80.867910][ T6029] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.235: couldn't read orphan inode 15 (err -117)
[   80.875859][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   80.875898][    C0] EXT4-fs (loop1): initial error at time 1782519530: ext4_orphan_get:1397: inode 15
[   80.875912][    C0] EXT4-fs (loop1): last error at time 1782519530: ext4_orphan_get:1397: inode 15
[   80.913755][ T6029] loop1: lost filesystem error report for type 5 error -117
[   80.914897][ T6029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.956904][ T6029] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.235: bg 0: block 5: invalid block bitmap
[   80.966482][ T6029] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8191 with max blocks 1 with error 28
[   80.973308][ T6029] EXT4-fs (loop1): This should not happen!! Data will be lost
[   80.973308][ T6029] 
[   80.977616][ T6029] EXT4-fs (loop1): Total free blocks count 0
[   80.980028][ T6029] EXT4-fs (loop1): Free/Dirty block details
[   80.982288][ T6029] EXT4-fs (loop1): free_blocks=0
[   80.985174][ T6029] EXT4-fs (loop1): dirty_blocks=2
[   80.986743][ T6029] EXT4-fs (loop1): Block reservation details
[   80.988678][ T6029] EXT4-fs (loop1): i_reserved_data_blocks=2
[   80.989685][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.026125][   T62] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8192 with max blocks 1 with error 28
[   81.059319][ T5850] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[   81.127910][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'.
[   81.134108][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'.
[   81.157328][ T6037] geneve2: entered promiscuous mode
[   81.159894][ T6037] geneve2: entered allmulticast mode
[   81.168348][ T6037] Zero length message leads to an empty skb
[   81.331591][ T6045] loop2: detected capacity change from 0 to 512
[   81.348604][ T6045] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   81.357244][ T6045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   81.365498][ T6045] EXT4-fs (loop2): 1 truncate cleaned up
[   81.380330][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.447986][ T6050] loop0: detected capacity change from 0 to 512
[   81.455985][ T6050] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   81.479973][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.510290][ T6050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.530745][ T6050] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.579556][ T6050] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.243: iget: bad i_size value: 2533274857506816
[   81.588688][ T6056] xt_time: invalid argument - start or stop time greater than 23:59:59
[   81.605635][ T6050] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.243: iget: bad i_size value: 2533274857506816
[   81.613864][ T6050] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.243: iget: bad i_size value: 2533274857506816
[   81.625803][   T33] audit: type=1800 audit(1782519531.723:2): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.243" name="file1" dev="loop0" ino=15 res=0 errno=0
[   81.680881][ T6060] loop2: detected capacity change from 0 to 1024
[   81.683733][ T6060] EXT4-fs: Ignoring removed mblk_io_submit option
[   81.716803][ T6060] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   81.720614][ T6060] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   81.724385][ T6060] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.247: Failed to acquire dquot type 0
[   81.727974][ T6060] loop2: lost filesystem error report for type 5 error -5
[   81.739590][ T6060] EXT4-fs (loop2): 1 truncate cleaned up
[   81.743542][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   81.746623][    C1] EXT4-fs (loop2): initial error at time 1782519531: ext4_acquire_dquot:7034
[   81.749502][    C1] EXT4-fs (loop2): last error at time 1782519531: ext4_acquire_dquot:7034
[   81.750227][ T6060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.763426][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.776544][ T6060] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   81.781669][ T6060] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   81.795441][ T6060] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.247: Failed to acquire dquot type 0
[   81.847044][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.904246][ T5007] Bluetooth: hci0: command tx timeout
[   81.994799][ T5852] Bluetooth: hci1: command tx timeout
[   81.996750][ T5007] Bluetooth: hci2: command tx timeout
[   82.586827][ T6077] trusted_key: encrypted_key: master key parameter '' is invalid
[   83.235881][ T6083] netlink: 'syz.2.255': attribute type 9 has an invalid length.
[   83.650014][ T6094] netlink: 'syz.1.260': attribute type 4 has an invalid length.
[   83.652466][ T6094] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.260'.
[   84.527773][ T6112] netlink: 'syz.2.268': attribute type 1 has an invalid length.
[   84.734434][ T6125] loop2: detected capacity change from 0 to 512
[   84.739157][ T6122] warning: `syz.1.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.763416][ T6125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.776230][ T6125] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   84.822388][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.650953][ T5852] Bluetooth: hci3: unexpected event 0x02 length: 0 < 1
[   85.920646][ T6153] loop2: detected capacity change from 0 to 128
[   85.951016][ T6153] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   85.955364][ T6153] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.011363][ T5846] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.159363][ T6170] loop0: detected capacity change from 0 to 512
[   86.176449][ T6170] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   86.700559][ T6191] loop0: detected capacity change from 0 to 4096
[   86.713154][ T6191] EXT4-fs (loop0): Test dummy encryption mode enabled
[   86.734685][ T6191] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[   86.744035][ T6191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.759302][   T33] audit: type=1800 audit(1782519536.657:3): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.302" name="file1" dev="loop0" ino=15 res=0 errno=0
[   86.812880][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.910459][ T6196] loop0: detected capacity change from 0 to 512
[   86.933186][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.850418][ T5852] Bluetooth: hci3: command 0x1003 tx timeout
[   87.859780][ T5007] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   87.956453][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.091739][ T6212] loop0: detected capacity change from 0 to 1764
[   88.141669][ T6217] loop1: detected capacity change from 0 to 2048
[   88.158057][ T6217] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   88.187564][ T6217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.206577][ T6219] loop2: detected capacity change from 0 to 256
[   88.252399][ T6219] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   88.262276][ T6219] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[   88.270277][   T33] audit: type=1800 audit(1782519538.070:4): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.313" name="file1" dev="loop2" ino=1048623 res=0 errno=0
[   88.283283][   T33] audit: type=1800 audit(1782519538.070:5): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.313" name="file1" dev="loop2" ino=1048623 res=0 errno=0
[   88.546679][ T6235] capability: warning: `syz.1.321' uses deprecated v2 capabilities in a way that may be insecure
[   89.243891][ T6244] loop0: detected capacity change from 0 to 4096
[   89.280914][ T6244] NILFS (loop0): invalid segment: Checksum error in segment payload
[   89.292426][ T6244] NILFS (loop0): trying rollback from an earlier position
[   89.341825][ T6244] NILFS (loop0): recovery complete
[   89.350491][ T6251] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.446177][ T6244] /dev/loop0: Can't open blockdev
[   90.313090][ T6275] usb usb8: usbfs: process 6275 (syz.1.337) did not claim interface 1 before use
[   90.369736][ T6277] loop2: detected capacity change from 0 to 512
[   90.399765][ T6277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.414118][ T6277] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.495979][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.684044][ T6313] loop1: detected capacity change from 0 to 2048
[   91.690956][ T6313] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   91.696238][ T6313] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   91.705360][ T6313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.117809][ T5922] Process accounting resumed
[   92.377496][ T6324] loop0: detected capacity change from 0 to 8192
[   92.412146][ T6324] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.900439][  T799] cfg80211: failed to load regulatory.db
[   93.102557][   T33] audit: type=1800 audit(1782519542.588:6): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.363" name="bus" dev="tmpfs" ino=257 res=0 errno=0
[   93.572707][   T33] audit: type=1326 audit(1782519543.028:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e99ce59 code=0x7ffc0000
[   93.587594][   T33] audit: type=1326 audit(1782519543.028:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e99ce59 code=0x7ffc0000
[   93.598783][ T6355] netlink: 'syz.1.369': attribute type 12 has an invalid length.
[   93.601250][   T33] audit: type=1326 audit(1782519543.028:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e99ce59 code=0x7ffc0000
[   93.620448][   T33] audit: type=1326 audit(1782519543.028:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f630e99ce59 code=0x7ffc0000
[   93.638575][   T33] audit: type=1326 audit(1782519543.084:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.656774][   T33] audit: type=1326 audit(1782519543.084:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.680417][   T33] audit: type=1326 audit(1782519543.093:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.691240][   T33] audit: type=1326 audit(1782519543.093:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.702082][   T33] audit: type=1326 audit(1782519543.093:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.716621][   T33] audit: type=1326 audit(1782519543.093:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.729117][   T33] audit: type=1326 audit(1782519543.093:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.747865][   T33] audit: type=1326 audit(1782519543.103:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.758792][   T33] audit: type=1326 audit(1782519543.103:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.766206][   T33] audit: type=1326 audit(1782519543.103:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.364" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f630e95d68e code=0x7ffc0000
[   93.850392][ T6367] bridge0: port 2(bridge_slave_1) entered listening state
[   93.876205][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.333590][ T6387] capability: warning: `syz.0.385' uses 32-bit capabilities (legacy support in use)
[   94.866613][ T6401] loop0: detected capacity change from 0 to 8
[   95.062142][ T6406] loop0: detected capacity change from 0 to 512
[   95.106606][ T6406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   95.117832][ T6406] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.181006][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   95.312070][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.396'.
[   95.462923][ T5007] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   95.467078][ T5007] Bluetooth: hci2: Injecting HCI hardware error event
[   95.472636][ T5852] Bluetooth: hci2: hardware error 0x00
[   95.513812][ T6424] overlay: Unknown parameter '\/binderfs/binder0'
[   95.554749][ T6426] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   95.915216][ T6444] loop0: detected capacity change from 0 to 256
[   95.923505][ T6444] vfat: Bad value for 'utf8'
[   95.944836][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'.
[   95.949829][ T6446] netlink: 44 bytes leftover after parsing attributes in process `syz.1.412'.
[   96.166877][ T5922] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.274568][ T6463] loop0: detected capacity change from 0 to 128
[   96.282524][ T6463] EXT4-fs (loop0): Test dummy encryption mode enabled
[   96.317148][ T6463] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.327611][ T5922] usb 3-1: Using ep0 maxpacket: 32
[   96.330014][ T6463] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.334498][ T5922] usb 3-1: config index 0 descriptor too short (expected 12645, got 27)
[   96.339253][ T5922] usb 3-1: config 32 has too many interfaces: 58, using maximum allowed: 32
[   96.342382][ T5922] usb 3-1: config 32 has an invalid descriptor of length 61, skipping remainder of the config
[   96.346636][ T5922] usb 3-1: config 32 has 0 interfaces, different from the descriptor's value: 58
[   96.355115][ T5922] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[   96.361380][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.369829][ T5922] usb 3-1: Product: syz
[   96.373322][ T5922] usb 3-1: Manufacturer: syz
[   96.378811][ T5922] usb 3-1: SerialNumber: syz
[   96.501060][ T6463] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[   96.547280][ T5853] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   96.567098][ T6478] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   96.573135][ T6478] overlayfs: failed to set xattr on upper
[   96.579811][ T6478] overlayfs: ...falling back to index=off.
[   96.582185][ T6478] overlayfs: ...falling back to uuid=null.
[   96.620411][ T5922] usb 3-1: USB disconnect, device number 3
[   96.681279][ T6484] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   96.687712][ T6484] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.726389][ T6487] team0: Port device syz_tun added
[   96.791307][ T6489] Illegal XDP return value 545259555 on prog  (id 23) dev N/A, expect packet loss!
[   96.845079][ T6492] netlink: 'syz.0.431': attribute type 8 has an invalid length.
[   96.879539][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'.
[   97.041777][ T6505] loop1: detected capacity change from 0 to 256
[   97.045884][ T6505] exfat: Deprecated parameter 'namecase'
[   97.062593][ T6505] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[   97.232272][ T6515] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[   97.318185][ T6521] netlink: 100 bytes leftover after parsing attributes in process `syz.1.445'.
[   97.341031][ T6520] bridge1: entered promiscuous mode
[   97.345019][ T6523] loop2: detected capacity change from 0 to 256
[   97.347548][ T6520] bridge1: entered allmulticast mode
[   97.440885][ T6529] loop0: detected capacity change from 0 to 512
[   97.475888][ T6529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.482677][ T6529] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.499083][ T6529] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   97.531484][ T6533] Bluetooth: MGMT ver 1.23
[   97.544202][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.698669][ T5852] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   97.789884][ T6549] netlink: 'syz.1.456': attribute type 10 has an invalid length.
[   97.820051][ T6549] team0: Port device dummy0 added
[   97.838908][ T6549] netlink: 'syz.1.456': attribute type 10 has an invalid length.
[   97.881904][ T6549] team0: Port device dummy0 removed
[   97.889033][ T6549] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   97.901712][ T6553] Sensor B: =================  START STATUS  =================
[   97.913572][ T6553] Sensor B: Test Pattern: 75% Colorbar
[   97.935331][ T6553] Sensor B: Show Information: All
[   97.938958][ T6553] Sensor B: Vertical Flip: false
[   97.940529][ T6553] Sensor B: Horizontal Flip: false
[   97.946210][ T6555] binder: 6554:6555 ioctl c0306201 0 returned -14
[   97.952892][ T6553] Sensor B: Brightness: 128
[   97.969256][ T6553] Sensor B: Contrast: 128
[   97.971045][ T6553] Sensor B: Hue: 0
[   97.972612][ T6553] Sensor B: Saturation: 128
[   97.976963][ T6553] Sensor B: Pixel Rate: 160000000
[   97.979070][ T6553] Sensor B: Horizontal Blanking: 800
[   97.981299][ T6553] Sensor B: Vertical Blanking: 3223
[   97.983438][ T6553] Sensor B: ==================  END STATUS  ==================
[   98.027037][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'.
[   98.156486][ T5922] IPVS: starting estimator thread 0...
[   98.171407][ T6568] loop2: detected capacity change from 0 to 256
[   98.174647][ T6568] exfat: Deprecated parameter 'utf8'
[   98.187116][ T6568] exfat: Deprecated parameter 'utf8'
[   98.189618][ T6568] exfat: Deprecated parameter 'namecase'
[   98.202414][ T6568] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   98.261596][ T6566] IPVS: using max 40 ests per chain, 96000 per kthread
[   98.341008][ T6572] ieee802154 phy0 wpan0: encryption failed: -22
[   98.920659][ T6593] loop1: detected capacity change from 0 to 2048
[   98.942540][ T6593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.069090][ T6601] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   99.073472][ T6601] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   99.077577][ T6601] overlayfs: missing 'lowerdir'
[   99.147377][ T6607] loop1: detected capacity change from 0 to 256
[   99.151440][ T6607] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.172541][ T6607] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   99.179302][ T6607] FAT-fs (loop1): Filesystem has been set read-only
[   99.231648][ T6613] loop2: detected capacity change from 0 to 128
[   99.234651][ T6613] zonefs: Unexpected value for 'explicit-open'
[   99.288304][ T5958] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   99.449648][ T5958] usb 1-1: not running at top speed; connect to a high speed hub
[   99.455232][ T5958] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   99.468252][ T5958] usb 1-1: config 1 interface 0 has no altsetting 0
[   99.473891][ T5958] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40
[   99.480161][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.485408][ T5958] usb 1-1: Product: syz
[   99.486979][ T5958] usb 1-1: Manufacturer: syz
[   99.501859][ T5958] usb 1-1: SerialNumber: syz
[   99.776307][ T5958] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5
[   99.804909][ T5052] bcm5974 1-1:1.0: could not read from device
[   99.818497][ T5052] bcm5974 1-1:1.0: could not read from device
[   99.836858][ T5958] usb 1-1: USB disconnect, device number 2
[   99.839444][ T5052] bcm5974 1-1:1.0: could not read from device
[   99.847272][ T5052] bcm5974 1-1:1.0: could not read from device
[   99.895518][ T5796] udevd[5796]: Error opening device "/dev/input/event3": No such file or directory
[   99.905925][ T5796] udevd[5796]: Unable to EVIOCGABS device "/dev/input/event3"
[   99.912004][ T5796] udevd[5796]: Unable to EVIOCGABS device "/dev/input/event3"
[   99.917152][ T5796] udevd[5796]: Unable to EVIOCGABS device "/dev/input/event3"
[   99.920701][ T5796] udevd[5796]: Unable to EVIOCGABS device "/dev/input/event3"
[  100.482374][ T6642] tipc: Started in network mode
[  100.488580][ T6642] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  100.492861][ T6642] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  100.501696][ T6642] tipc: Enabled bearer <udp:syz0>, priority 10
[  100.523050][ T6638] loop0: detected capacity change from 0 to 4096
[  100.630476][ T6638] ntfs3(loop0): ino=19, mi_enum_attr
[  100.638229][ T6638] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  100.911055][ T6653] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.506: inode has both inline data and extents flags
[  100.918187][ T6653] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  100.918486][ T6653] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.506: couldn't read orphan inode 15 (err -117)
[  100.924901][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.508'.
[  100.926438][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  100.932480][    C1] EXT4-fs (loop0): initial error at time 1782519549: ext4_orphan_get:1397: inode 15
[  100.936162][    C1] EXT4-fs (loop0): last error at time 1782519549: ext4_orphan_get:1397: inode 15
[  100.956055][ T6653] loop0: lost filesystem error report for type 5 error -117
[  100.964170][ T6653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.019190][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.145754][ T6669] syz.0.513 uses obsolete (PF_INET,SOCK_PACKET)
[  101.219529][ T6671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.226588][ T6671] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.241850][   T33] kauditd_printk_skb: 58 callbacks suppressed
[  101.241861][   T33] audit: type=1800 audit(1782519550.203:79): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.514" name="bus" dev="loop1" ino=18 res=0 errno=0
[  101.261604][   T33] audit: type=1804 audit(1782519550.222:80): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.514" name="/newroot/113/file0/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  101.303934][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.362476][ T6677] set_capacity_and_notify: 2 callbacks suppressed
[  101.362490][ T6677] loop0: detected capacity change from 0 to 128
[  101.376979][ T6677] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.382325][ T6677] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.466865][  T103] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.589736][   T10] tipc: Node number set to 1
[  101.906600][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.960175][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.067017][   T10] usb 1-1: Using ep0 maxpacket: 16
[  102.123083][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  102.130559][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  102.132936][ T5922] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  102.133787][   T10] usb 1-1: can't read configurations, error -71
[  102.138479][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.143619][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  102.147643][ T5922] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  102.150842][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.156231][ T5922] usb 2-1: config 0 descriptor??
[  102.160678][ T5922] usb-storage 2-1:0.0: USB Mass Storage device detected
[  102.172187][ T5922] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  102.390201][ T5958] usb 2-1: USB disconnect, device number 2
[  103.003693][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'.
[  103.392403][  T799] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.552966][  T799] usb 3-1: Using ep0 maxpacket: 8
[  103.562992][  T799] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65
[  103.567313][  T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.570648][  T799] usb 3-1: Product: syz
[  103.572611][  T799] usb 3-1: Manufacturer: syz
[  103.575191][  T799] usb 3-1: SerialNumber: syz
[  103.580065][  T799] usb 3-1: config 0 descriptor??
[  103.591498][  T799] pegasus 3-1:0.0: Missing or invalid endpoints
[  103.810618][  T799] usb 3-1: USB disconnect, device number 4
[  104.226282][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  104.256855][ T6726] IPv4: Oversized IP packet from 127.202.26.0
[  104.387558][   T10] usb 1-1: Using ep0 maxpacket: 8
[  104.410834][   T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  104.419714][   T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  104.428599][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  104.440340][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  104.454398][   T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  104.466264][   T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  104.470142][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.706465][   T10] usb 1-1: GET_CAPABILITIES returned 0
[  104.720140][   T10] usbtmc 1-1:16.0: can't read capabilities
[  104.933183][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.937739][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.141604][ T6756] loop2: detected capacity change from 0 to 32768
[  105.199905][ T6756] jfs_lookup: iget failed on inum 4
[  105.206213][ T6756] jfs_lookup: iget failed on inum 4
[  105.386035][ T6766] loop2: detected capacity change from 0 to 2048
[  105.412728][ T6766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.422639][   T33] audit: type=1800 audit(1782519554.114:81): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.557" name="file1" dev="loop2" ino=15 res=0 errno=0
[  105.434080][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  105.596340][    T9] usb 2-1: config 9 has an invalid interface number: 138 but max is 0
[  105.600480][    T9] usb 2-1: config 9 has no interface number 0
[  105.609940][    T9] usb 2-1: New USB device found, idVendor=51df, idProduct=dad6, bcdDevice=db.cb
[  105.613762][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.617307][    T9] usb 2-1: Product: syz
[  105.618788][    T9] usb 2-1: Manufacturer: syz
[  105.620398][    T9] usb 2-1: SerialNumber: syz
[  105.853789][    T9] usb-storage 2-1:9.138: USB Mass Storage device detected
[  105.931359][    T9] usb 2-1: USB disconnect, device number 3
[  106.207694][   T10] usb 1-1: USB disconnect, device number 5
[  106.379925][ T6766] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  106.401454][ T6765] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 598 with max blocks 2048 with error 28
[  106.412167][ T6765] EXT4-fs (loop2): This should not happen!! Data will be lost
[  106.412167][ T6765] 
[  106.416895][ T6765] EXT4-fs (loop2): Total free blocks count 0
[  106.420305][ T6765] EXT4-fs (loop2): Free/Dirty block details
[  106.423043][ T6765] EXT4-fs (loop2): free_blocks=2415919504
[  106.425396][ T6765] EXT4-fs (loop2): dirty_blocks=8400
[  106.427447][ T6765] EXT4-fs (loop2): Block reservation details
[  106.429911][ T6765] EXT4-fs (loop2): i_reserved_data_blocks=525
[  106.484254][ T6778] netlink: 104 bytes leftover after parsing attributes in process `syz.0.560'.
[  106.532534][ T6766] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2648 with max blocks 2048 with error 28
[  106.766263][ T6784] xt_CT: You must specify a L4 protocol and not use inversions on it
[  107.108515][ T5846] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  107.297007][ T6800] netlink: 'syz.2.569': attribute type 6 has an invalid length.
[  107.569706][ T6810] loop0: detected capacity change from 0 to 128
[  107.572395][ T6810] ubifs: Unexpected value for 'bulk_read'
[  107.593205][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  107.753687][   T10] usb 3-1: Using ep0 maxpacket: 8
[  107.760047][   T10] usb 3-1: config 1 interface 0 altsetting 96 bulk endpoint 0x82 has invalid maxpacket 64
[  107.769143][   T10] usb 3-1: config 1 interface 0 altsetting 96 bulk endpoint 0x3 has invalid maxpacket 8
[  107.777099][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  107.790458][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  107.798328][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.804486][   T10] usb 3-1: Product: syz
[  107.806382][   T10] usb 3-1: Manufacturer: syz
[  107.809316][   T10] usb 3-1: SerialNumber: syz
[  107.815810][ T6802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.819966][ T6802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.879640][ T6820] loop0: detected capacity change from 0 to 32768
[  107.929590][ T6820] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  107.938312][ T6820] JBD2: Ignoring recovery information on journal
[  107.973792][ T6820] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  108.007992][ T6820] (syz.0.574,6820,1):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume.
[  108.014117][ T6820] (syz.0.574,6820,1):ocfs2_group_add:513 ERROR: status = -22
[  108.063782][   T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  108.073528][   T10] usb 3-1: USB disconnect, device number 5
[  108.114952][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[  108.541254][ T6829] loop1: detected capacity change from 0 to 32768
[  108.602232][ T6838] syz.0.577 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  108.883030][ T6829] 
[  108.883030][ T6829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.883030][ T6829] 
[  108.938471][ T5850] 
[  108.938471][ T5850]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.938471][ T5850] 
[  108.954649][ T5850] 
[  108.954649][ T5850]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.954649][ T5850] 
[  109.045486][   T33] audit: type=1400 audit(1782519557.500:82): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="%#{//(@\)//&@}" pid=6842 comm="syz.2.580"
[  109.400292][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  109.570817][ T5922] usb 2-1: Using ep0 maxpacket: 8
[  109.584144][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short
[  109.588366][ T5922] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.602844][ T5922] usb 2-1: config 1 interface 0 has no altsetting 0
[  109.611287][ T5922] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  109.615099][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.624185][ T5922] usb 2-1: Product: syz
[  109.625970][ T5922] usb 2-1: Manufacturer: syz
[  109.627823][ T5922] usb 2-1: SerialNumber: syz
[  109.869413][ T5922] usbhid 2-1:1.0: can't add hid device: -71
[  109.880821][ T5922] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  109.889058][ T5922] usb 2-1: USB disconnect, device number 4
[  110.223228][ T6859] loop2: detected capacity change from 0 to 512
[  110.253155][ T6859] 
[  110.253965][ T6859] ======================================================
[  110.256158][ T6859] WARNING: possible circular locking dependency detected
[  110.258284][ T6859] syzkaller #0 Tainted: G             L     
[  110.260711][ T6859] ------------------------------------------------------
[  110.263443][ T6859] syz.2.586/6859 is trying to acquire lock:
[  110.265741][ T6859] ffff8881bc8cac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  110.269308][ T6859] 
[  110.269308][ T6859] but task is already holding lock:
[  110.271664][ T6859] ffff8881bb3a5e30 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x700
[  110.274729][ T6859] 
[  110.274729][ T6859] which lock already depends on the new lock.
[  110.274729][ T6859] 
[  110.277792][ T6859] 
[  110.277792][ T6859] the existing dependency chain (in reverse order) is:
[  110.280476][ T6859] 
[  110.280476][ T6859] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  110.282736][ T6859]        down_write+0x96/0x200
[  110.284182][ T6859]        ext4_destroy_inline_data+0x28/0xe0
[  110.285938][ T6859]        ext4_do_writepages+0x573/0x47a0
[  110.287659][ T6859]        ext4_writepages+0x241/0x3b0
[  110.289259][ T6859]        do_writepages+0x338/0x560
[  110.290851][ T6859]        filemap_flush+0x1e1/0x2e0
[  110.292389][ T6859]        ext4_release_file+0x82/0x310
[  110.293988][ T6859]        __fput+0x418/0xa50
[  110.295319][ T6859]        task_work_run+0x1d9/0x270
[  110.297065][ T6859]        exit_to_user_mode_loop+0x193/0x6b0
[  110.299107][ T6859]        do_syscall_64+0x353/0x580
[  110.300720][ T6859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.302695][ T6859] 
[  110.302695][ T6859] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  110.305497][ T6859]        __lock_acquire+0x1520/0x2cd0
[  110.307081][ T6859]        lock_acquire+0x106/0x350
[  110.308554][ T6859]        percpu_down_read_internal+0x48/0x1c0
[  110.310387][ T6859]        ext4_writepages+0x205/0x3b0
[  110.311929][ T6859]        do_writepages+0x338/0x560
[  110.313532][ T6859]        __writeback_single_inode+0x12e/0xf90
[  110.315440][ T6859]        writeback_single_inode+0x495/0xde0
[  110.317152][ T6859]        write_inode_now+0x1c2/0x290
[  110.318679][ T6859]        iput+0x864/0xe00
[  110.319985][ T6859]        ext4_xattr_block_set+0x22e4/0x2a80
[  110.321891][ T6859]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[  110.323849][ T6859]        __ext4_expand_extra_isize+0x30d/0x400
[  110.325636][ T6859]        __ext4_mark_inode_dirty+0x455/0x700
[  110.327414][ T6859]        ext4_evict_inode+0x976/0x10c0
[  110.329322][ T6859]        evict+0x624/0xb50
[  110.330718][ T6859]        ext4_orphan_cleanup+0xc7a/0x14c0
[  110.332449][ T6859]        ext4_fill_super+0x5cb7/0x65c0
[  110.333956][ T6859]        get_tree_bdev_flags+0x430/0x4f0
[  110.335593][ T6859]        vfs_get_tree+0x92/0x2a0
[  110.337085][ T6859]        do_new_mount+0x319/0xdc0
[  110.338535][ T6859]        __se_sys_mount+0x31d/0x420
[  110.340134][ T6859]        do_syscall_64+0x174/0x580
[  110.341734][ T6859]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.343860][ T6859] 
[  110.343860][ T6859] other info that might help us debug this:
[  110.343860][ T6859] 
[  110.346950][ T6859]  Possible unsafe locking scenario:
[  110.346950][ T6859] 
[  110.349230][ T6859]        CPU0                    CPU1
[  110.350983][ T6859]        ----                    ----
[  110.353089][ T6859]   lock(&ei->xattr_sem);
[  110.354625][ T6859]                                lock(&sbi->s_writepages_rwsem);
[  110.356851][ T6859]                                lock(&ei->xattr_sem);
[  110.359053][ T6859]   rlock(&sbi->s_writepages_rwsem);
[  110.360940][ T6859] 
[  110.360940][ T6859]  *** DEADLOCK ***
[  110.360940][ T6859] 
[  110.363636][ T6859] 3 locks held by syz.2.586/6859:
[  110.365380][ T6859]  #0: ffff8881bc8cc0d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x283/0xa60
[  110.368390][ T6859]  #1: ffff8881bc8cc600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0
[  110.371054][ T6859]  #2: ffff8881bb3a5e30 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x700
[  110.374043][ T6859] 
[  110.374043][ T6859] stack backtrace:
[  110.375760][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.2.586 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.375773][ T6859] Tainted: [L]=SOFTLOCKUP
[  110.375776][ T6859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.375782][ T6859] Call Trace:
[  110.375786][ T6859]  <TASK>
[  110.375792][ T6859]  dump_stack_lvl+0xe8/0x150
[  110.375803][ T6859]  print_circular_bug+0x2e1/0x300
[  110.375816][ T6859]  check_noncircular+0x12e/0x150
[  110.375826][ T6859]  __lock_acquire+0x1520/0x2cd0
[  110.375836][ T6859]  ? is_bpf_text_address+0x26/0x2b0
[  110.375845][ T6859]  ? rcu_is_watching+0x15/0xb0
[  110.375854][ T6859]  ? __kasan_check_byte+0x12/0x40
[  110.375864][ T6859]  ? rcu_is_watching+0x15/0xb0
[  110.375872][ T6859]  ? lock_release+0x4b/0x3c0
[  110.375881][ T6859]  ? ext4_writepages+0x205/0x3b0
[  110.375890][ T6859]  lock_acquire+0x106/0x350
[  110.375897][ T6859]  ? ext4_writepages+0x205/0x3b0
[  110.375908][ T6859]  percpu_down_read_internal+0x48/0x1c0
[  110.375917][ T6859]  ? ext4_writepages+0x205/0x3b0
[  110.375926][ T6859]  ext4_writepages+0x205/0x3b0
[  110.375936][ T6859]  ? __pfx_ext4_writepages+0x10/0x10
[  110.375948][ T6859]  ? do_raw_spin_unlock+0x4d/0x210
[  110.375978][ T6859]  ? __pfx_ext4_writepages+0x10/0x10
[  110.375989][ T6859]  do_writepages+0x338/0x560
[  110.376000][ T6859]  ? do_raw_spin_lock+0x12b/0x2f0
[  110.376011][ T6859]  __writeback_single_inode+0x12e/0xf90
[  110.376023][ T6859]  writeback_single_inode+0x495/0xde0
[  110.376032][ T6859]  write_inode_now+0x1c2/0x290
[  110.376040][ T6859]  ? __pfx_write_inode_now+0x10/0x10
[  110.376057][ T6859]  ? do_raw_spin_unlock+0x4d/0x210
[  110.376068][ T6859]  iput+0x864/0xe00
[  110.376081][ T6859]  ext4_xattr_block_set+0x22e4/0x2a80
[  110.376096][ T6859]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  110.376104][ T6859]  ? xattr_find_entry+0x236/0x280
[  110.376112][ T6859]  ? ext4_xattr_block_find+0xce/0x320
[  110.376121][ T6859]  ext4_expand_extra_isize_ea+0x1342/0x1e70
[  110.376142][ T6859]  __ext4_expand_extra_isize+0x30d/0x400
[  110.376153][ T6859]  __ext4_mark_inode_dirty+0x455/0x700
[  110.376168][ T6859]  ext4_evict_inode+0x976/0x10c0
[  110.376181][ T6859]  ? __pfx_ext4_evict_inode+0x10/0x10
[  110.376192][ T6859]  ? do_raw_spin_unlock+0x4d/0x210
[  110.376203][ T6859]  ? __pfx_ext4_evict_inode+0x10/0x10
[  110.376213][ T6859]  evict+0x624/0xb50
[  110.376223][ T6859]  ? __pfx_evict+0x10/0x10
[  110.376230][ T6859]  ? _raw_spin_unlock+0x28/0x50
[  110.376241][ T6859]  ? iput+0xaa7/0xe00
[  110.376252][ T6859]  ext4_orphan_cleanup+0xc7a/0x14c0
[  110.376263][ T6859]  ? try_to_wake_up+0x7c5/0x1330
[  110.376275][ T6859]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  110.376287][ T6859]  ? ext4_register_li_request+0x640/0x720
[  110.376299][ T6859]  ? errseq_check_and_advance+0x66/0x120
[  110.376310][ T6859]  ext4_fill_super+0x5cb7/0x65c0
[  110.376324][ T6859]  ? __pfx_ext4_fill_super+0x10/0x10
[  110.376333][ T6859]  ? snprintf+0xe8/0x140
[  110.376344][ T6859]  ? __pfx_snprintf+0x10/0x10
[  110.376352][ T6859]  ? set_blocksize+0x1c9/0x440
[  110.376363][ T6859]  ? sb_set_blocksize+0x155/0x240
[  110.376372][ T6859]  ? setup_bdev_super+0x4c1/0x5b0
[  110.376380][ T6859]  get_tree_bdev_flags+0x430/0x4f0
[  110.376388][ T6859]  ? __pfx_ext4_fill_super+0x10/0x10
[  110.376397][ T6859]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  110.376406][ T6859]  vfs_get_tree+0x92/0x2a0
[  110.376414][ T6859]  do_new_mount+0x319/0xdc0
[  110.376425][ T6859]  ? __pfx_do_new_mount+0x10/0x10
[  110.376434][ T6859]  ? ns_capable+0x89/0xe0
[  110.376442][ T6859]  ? path_mount+0x647/0x1040
[  110.376451][ T6859]  ? user_path_at+0xd4/0x160
[  110.376462][ T6859]  __se_sys_mount+0x31d/0x420
[  110.376473][ T6859]  ? __pfx___se_sys_mount+0x10/0x10
[  110.376483][ T6859]  ? __x64_sys_mount+0x20/0xc0
[  110.376492][ T6859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.376500][ T6859]  do_syscall_64+0x174/0x580
[  110.376508][ T6859]  ? trace_irq_disable+0x3b/0x140
[  110.376520][ T6859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.376528][ T6859] RIP: 0033:0x7f2ca379e0ca
[  110.376538][ T6859] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.376544][ T6859] RSP: 002b:00007f2ca4710e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  110.376553][ T6859] RAX: ffffffffffffffda RBX: 00007f2ca4710ee0 RCX: 00007f2ca379e0ca
[  110.376559][ T6859] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f2ca4710ea0
[  110.376564][ T6859] RBP: 0000200000000180 R08: 00007f2ca4710ee0 R09: 0000000000000000
[  110.376570][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  110.376575][ T6859] R13: 00007f2ca4710ea0 R14: 000000000000047a R15: 0000200000000b40
[  110.376583][ T6859]  </TASK>
[  110.531280][ T6859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.586: iget: bad extra_isize 58 (inode size 256)
[  110.537922][ T6859] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  110.538167][ T6859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.586: error while reading EA inode 11 err=-117
[  110.544826][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  110.544838][    C1] EXT4-fs (loop2): initial error at time 1782519558: ext4_xattr_inode_iget:441: inode 11
[  110.544851][    C1] EXT4-fs (loop2): last error at time 1782519558: ext4_xattr_inode_iget:441: inode 11
[  110.552566][ T6859] loop2: lost filesystem error report for type 5 error -117
[  110.553155][ T6859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.586: iget: bad extra_isize 58 (inode size 256)
[  110.560186][ T6859] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  110.560396][ T6859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.586: error while reading EA inode 11 err=-117
[  110.567528][ T6859] loop2: lost filesystem error report for type 5 error -117
[  110.567789][ T6859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.586: iget: bad extra_isize 58 (inode size 256)
[  110.574033][ T6859] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  110.574290][ T6859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.586: error while reading EA inode 18 err=-117
[  110.583706][ T6859] loop2: lost filesystem error report for type 5 error -117
[  110.584088][ T6859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.586: iget: bad extra_isize 58 (inode size 256)
[  110.590957][ T6859] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  110.591171][ T6859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.586: error while reading EA inode 18 err=-117
[  110.598605][ T6859] loop2: lost filesystem error report for type 5 error -117
[  110.598871][ T6859] EXT4-fs (loop2): 1 orphan inode deleted
[  110.603361][ T6859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.618752][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.757282][   T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  110.940477][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  110.945025][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  110.948944][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  110.955299][   T32] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  110.959028][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.962529][   T32] usb 1-1: Product: syz
[  110.964347][   T32] usb 1-1: Manufacturer: syz
[  110.966321][   T32] usb 1-1: SerialNumber: syz
[  110.969744][   T32] usb 1-1: config 0 descriptor??
[  111.189739][   T32] adutux 1-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  111.197454][   T32] usb 1-1: USB disconnect, device number 6
