last executing test programs:

3.999978227s ago: executing program 1 (id=586):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r1, 0x10, "d72e4afa70070a8e4461aab07d1fa611"}, &(0x7f0000000300)=0x18)

3.935924418s ago: executing program 1 (id=588):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="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", 0x2e0}], 0x5)

3.760980688s ago: executing program 1 (id=591):
iopl(0xb4)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = syz_io_uring_setup(0x10d1, &(0x7f0000000480)={0x0, 0x4a44, 0x0, 0x800, 0x34f}, &(0x7f0000000340)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47bc, 0xfac7, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4)

2.020484791s ago: executing program 1 (id=618):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x3, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x5, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x7, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x9, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000004})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

1.835627089s ago: executing program 1 (id=620):
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x548d, 0x7ff, {}, {}, 0x8000000000000000, 0x7})
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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")
fanotify_init(0xf00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000)

1.24134335s ago: executing program 0 (id=622):
r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x7, 0x101000)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x800000000d26e5)

1.178476858s ago: executing program 0 (id=624):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

1.178321414s ago: executing program 0 (id=625):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0xe50003fc)
open(&(0x7f0000000200)='./file0\x00', 0x4088043, 0x1)

1.089039977s ago: executing program 0 (id=626):
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
unshare(0x8040480)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="848350b5c1bddec23bb513ae7ccad567f62a101a8be5055a1e3605627eb2bc657686d7c03997b254d20530234174d272647dcba2518fda061c45096992ec317ef4a2b28fa31c3af449226485cb2c8592f6c3f68a92c63f74bec465b713bd001435279a5b274a099c41e6a6250c34eac4ce14"], 0x1, 0x4f8, &(0x7f00000005c0)="$eJzs3M9u1NoZAHA7JGqUSqjSVS/cXBa+3C7ogsEzKUERK9fjSQwz45HtoLCqUElQ1IRWhUqFHRvaSu1DsO0TdNU3Qn2EVp6ZUCB/hgJluOj3k+CcsT+f8x1rdI7G0XEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARh2o3jdhj08+H2TnS6tFsWgzPOH7X3jzeKM/oNgrD5FywvBxcnhy5+9d/TP23+uxxcmHy6ECw3xXLw9Mdf/+TmV4sLR9efkdAn8ejJ09/cOzjY/f28E5mTzWyYV0U+SDazKK+KaGN9Pb621auiXt7PqrtVnQ2itMySuiijK+nPo/bGxlqUte4W28PNbtLPjg7euNqJ4/XoVmuUJWVVDK/dalXpVt7v58PNcUxzuom50XwRb+d1VGfJIIr29g9212Yl2QS13yWoMyuoE3c67Xan016/vnH9RhwvHjsQvyU4FjH/Ly3z9ZFncHh//56u/wAAAMCXKxw/Y29+/y+Nn8OHQS/vZ/G80wIAAAA+ovFf/i80xVJTuxiEfv8DAADAl+bPM/fYVaMfhf/8V1CWS+Gz0c7PwsOkiUsOz02uO/d2i3VvNTw/bWRcrC9OP6XZpfCbSdA3R9Evp8XerDzCj5BA8NdgdRKzen9S3j86M+llpZf3s1Za9G+2gyQ5v1BnO/UfHu7/MRgP/y/Dwfkw2Ns/2G39+rcH98e5PGtaeXY43UBxbB/FGbk8frXv8eQRL40fxEz7XZn0G78+/oXJ5Qv/Q5/Pg28nMd+uTMqVN8e/3PTZbp02+mkW7Q8c+fPg0iTm0pXvm+L7Kydk0ZmVRef1LN7rXrxDFmuzslj7wCwA5mVvxioUHl/432OW+zSr+/Pgu0nMd6vjiXVx9YQZPZ41o8cfuLr9Pbg8ibl8FHzaGtv0+7e3VtUXzQUvTu236nfC5haee3z4u+DrR0+eXt0/vPdg98Huw05nbT3+RRxf7wRL42FMC2sPACfIypfhSv2nsCzz0a/aGxvtpN7KorJIb0dl3t3MonxYZ2W6lQw3s2hUFnWRFv2mcifvZlVUbY9GRVlHvaKMRkWV74zf/BJNX/1SZYNkWOdpNepnSZVFaTGsk7SOunmVRqPtX/bzaisrxxdXoyzNe3ma1HkxjKpiu0yzVhRVWfZaYN7NhnXey5vqMBqV+SAp70Z3iv72IIu6WZWW+aguJg0e9ZUPe0U5GDfbmvfNBoDPxKs32P0fK/MeIwDwJqs0AAAAAAAAAAAAAAB8/j7F/j8VFZUfWmXeMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHPefAAAA///v3qTr")
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000300))
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x7, 0x8, 0x1, 0x30323953, [0x1, 0xd], [0x8, 0x3], 0x2}})

917.750976ms ago: executing program 1 (id=627):
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc)
read$char_usb(r1, &(0x7f0000000100)=""/67, 0x43)
syz_usb_disconnect(r0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4)

379.403384ms ago: executing program 2 (id=631):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000007c0)={0x0, 0x3, 0x20}, 0xc)

319.275132ms ago: executing program 2 (id=632):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

319.066196ms ago: executing program 2 (id=633):
setitimer(0x1, &(0x7f0000000040)={{0x1000000000}}, 0x0)

205.098919ms ago: executing program 2 (id=634):
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xb470)

204.707268ms ago: executing program 2 (id=635):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESDEC, @ANYRES8], 0x1, 0x14fe, &(0x7f0000001580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

149.74081ms ago: executing program 0 (id=636):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18)
utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)

80.018828ms ago: executing program 0 (id=637):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

0s ago: executing program 2 (id=638):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12954' (ED25519) to the list of known hosts.
syzkaller login: [   57.234568][ T5829] cgroup: Unknown subsys name 'net'
[   57.377784][ T5829] cgroup: Unknown subsys name 'cpuset'
[   57.383849][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.799938][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.288688][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.291995][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.299413][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.302443][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.305880][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.308897][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.312877][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.315818][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.320021][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.323070][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.348399][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.359532][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.362673][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.365930][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.369812][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.554911][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   65.687130][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.690982][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.693671][ T5850] bridge_slave_0: entered allmulticast mode
[   65.696638][ T5850] bridge_slave_0: entered promiscuous mode
[   65.733549][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.736394][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.740237][ T5850] bridge_slave_1: entered allmulticast mode
[   65.744030][ T5850] bridge_slave_1: entered promiscuous mode
[   65.818393][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.825802][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.830520][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   65.908770][ T5850] team0: Port device team_slave_0 added
[   65.917752][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.927330][ T5850] team0: Port device team_slave_1 added
[   65.990356][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.993015][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.002951][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.043107][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.045919][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.056552][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.083859][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.087004][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.090736][ T5845] bridge_slave_0: entered allmulticast mode
[   66.094831][ T5845] bridge_slave_0: entered promiscuous mode
[   66.122468][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.125591][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.128727][ T5845] bridge_slave_1: entered allmulticast mode
[   66.134688][ T5845] bridge_slave_1: entered promiscuous mode
[   66.172396][ T5850] hsr_slave_0: entered promiscuous mode
[   66.175501][ T5850] hsr_slave_1: entered promiscuous mode
[   66.214117][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.221445][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.252874][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.255627][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.258484][ T5855] bridge_slave_0: entered allmulticast mode
[   66.262576][ T5855] bridge_slave_0: entered promiscuous mode
[   66.298906][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.302233][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.305308][ T5855] bridge_slave_1: entered allmulticast mode
[   66.309486][ T5855] bridge_slave_1: entered promiscuous mode
[   66.325229][ T5845] team0: Port device team_slave_0 added
[   66.342350][ T5845] team0: Port device team_slave_1 added
[   66.386038][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.393411][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.453926][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.456805][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.467947][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.483488][ T5855] team0: Port device team_slave_0 added
[   66.486742][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.491508][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.502222][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.514216][ T5855] team0: Port device team_slave_1 added
[   66.577290][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.580765][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.591407][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.619709][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.622586][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.633966][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.690505][ T5845] hsr_slave_0: entered promiscuous mode
[   66.693825][ T5845] hsr_slave_1: entered promiscuous mode
[   66.696809][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   66.701387][ T5845] Cannot create hsr debugfs directory
[   66.758865][ T5855] hsr_slave_0: entered promiscuous mode
[   66.763784][ T5855] hsr_slave_1: entered promiscuous mode
[   66.766381][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   66.768544][ T5855] Cannot create hsr debugfs directory
[   66.848871][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.865217][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.887620][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.893820][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.089507][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.102512][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.112821][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.122398][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.220432][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.232055][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.243246][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.252953][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.261054][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.306226][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.326922][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.329653][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.348149][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.350906][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.403891][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.410274][   T56] Bluetooth: hci2: command tx timeout
[   67.411197][ T5853] Bluetooth: hci0: command tx timeout
[   67.412952][ T5849] Bluetooth: hci1: command tx timeout
[   67.463602][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   67.478776][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.494006][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.497019][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.512260][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.515284][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.558819][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   67.572460][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.574834][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.618860][ T3213] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.621896][ T3213] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.702257][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.798127][ T5850] veth0_vlan: entered promiscuous mode
[   67.823893][ T5850] veth1_vlan: entered promiscuous mode
[   67.848173][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.884464][ T5850] veth0_macvtap: entered promiscuous mode
[   67.908433][ T5850] veth1_macvtap: entered promiscuous mode
[   67.932653][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.955227][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.961630][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.985276][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.992031][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.995052][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.997881][ T5845] veth0_vlan: entered promiscuous mode
[   68.008330][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.017533][ T5845] veth1_vlan: entered promiscuous mode
[   68.107427][ T5855] veth0_vlan: entered promiscuous mode
[   68.112947][ T5845] veth0_macvtap: entered promiscuous mode
[   68.125850][ T5855] veth1_vlan: entered promiscuous mode
[   68.145094][ T5845] veth1_macvtap: entered promiscuous mode
[   68.173128][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.180292][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.206561][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.233154][ T5855] veth0_macvtap: entered promiscuous mode
[   68.238138][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.258954][ T5855] veth1_macvtap: entered promiscuous mode
[   68.263341][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.266330][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.282593][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.299369][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.333673][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.340246][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.357992][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.370595][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.383012][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.427403][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.436610][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.486399][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.491830][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.563148][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.566260][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.656378][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.671761][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.687624][ T3213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.704836][ T3213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.744574][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.747710][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.958982][ T5928] loop0: detected capacity change from 0 to 512
[   69.003949][ T5928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   69.016439][ T5928] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.102788][ T5936] loop1: detected capacity change from 0 to 512
[   69.107765][ T5936] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   69.114251][ T5936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   69.127378][ T5936] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm BM6: invalid indirect mapped block 4294967295 (level 0)
[   69.134281][ T5936] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm BM6: invalid indirect mapped block 4294967295 (level 1)
[   69.142548][ T5936] EXT4-fs (loop1): 1 orphan inode deleted
[   69.145070][ T5936] EXT4-fs (loop1): 1 truncate cleaned up
[   69.148680][ T5936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.244658][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.504105][ T5853] Bluetooth: hci0: command tx timeout
[   69.506886][ T5853] Bluetooth: hci1: command tx timeout
[   69.509542][ T5853] Bluetooth: hci2: command tx timeout
[   69.844681][ T5945] loop2: detected capacity change from 0 to 1024
[   69.861765][ T5945] hfsplus: Unknown parameter 'onfigfs'
[   69.996659][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   70.023478][ T5950] loop1: detected capacity change from 0 to 2048
[   70.073379][ T5950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.138121][ T5950] UDF-fs: error (device loop1): udf_truncate_tail_extent: Extent after EOF in inode 1367
[   70.601150][ T5966] warning: `syz.1.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.335226][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.337613][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.569252][   T56] Bluetooth: hci2: command tx timeout
[   71.572385][ T5853] Bluetooth: hci1: command tx timeout
[   71.574729][ T5849] Bluetooth: hci0: command tx timeout
[   71.617575][ T5982] loop1: detected capacity change from 0 to 40427
[   71.628170][ T5982] F2FS-fs (loop1): build fault injection rate: 771
[   71.647594][ T5982] F2FS-fs (loop1): invalid crc value
[   71.781820][ T5982] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   71.793130][ T5982] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   71.917804][ T5855] syz-executor: attempt to access beyond end of device
[   71.917804][ T5855] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   71.927685][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   71.927708][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.927716][ T5855] Call Trace:
[   71.927723][ T5855]  <TASK>
[   71.927729][ T5855]  dump_stack_lvl+0x189/0x250
[   71.927757][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.927773][ T5855]  ? __pfx_queue_work_on+0x10/0x10
[   71.927786][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.927806][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.927834][ T5855]  f2fs_handle_critical_error+0x37c/0x540
[   71.927867][ T5855]  f2fs_write_end_io+0x886/0xb60
[   71.927894][ T5855]  __submit_merged_bio+0x27a/0x6a0
[   71.927917][ T5855]  __submit_merged_write_cond+0x255/0x530
[   71.927938][ T5855]  f2fs_write_data_pages+0x261d/0x3000
[   71.927982][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.928058][ T5855]  ? __lock_acquire+0xab9/0xd20
[   71.928083][ T5855]  ? do_raw_spin_lock+0x121/0x290
[   71.928106][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[   71.928119][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.928137][ T5855]  do_writepages+0x32e/0x550
[   71.928162][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[   71.928179][ T5855]  filemap_fdatawrite+0x199/0x240
[   71.928197][ T5855]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   71.928269][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[   71.928288][ T5855]  f2fs_sync_dirty_inodes+0x31f/0x830
[   71.928311][ T5855]  f2fs_write_checkpoint+0x93e/0x2440
[   71.928324][ T5855]  ? stack_depot_save_flags+0x41b/0x860
[   71.928367][ T5855]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   71.928412][ T5855]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   71.928424][ T5855]  ? kfree+0x199/0x6d0
[   71.928449][ T5855]  kill_f2fs_super+0x2cc/0x6d0
[   71.928467][ T5855]  ? __pfx_kill_f2fs_super+0x10/0x10
[   71.928494][ T5855]  ? shrinker_free+0x2ce/0x3e0
[   71.928511][ T5855]  deactivate_locked_super+0xbc/0x130
[   71.928528][ T5855]  cleanup_mnt+0x425/0x4c0
[   71.928541][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.928557][ T5855]  task_work_run+0x1d4/0x260
[   71.928576][ T5855]  ? __pfx_task_work_run+0x10/0x10
[   71.928590][ T5855]  ? __x64_sys_umount+0x122/0x160
[   71.928610][ T5855]  ? exit_to_user_mode_loop+0x40/0x130
[   71.928632][ T5855]  exit_to_user_mode_loop+0xec/0x130
[   71.928677][ T5855]  do_syscall_64+0x2bd/0xfa0
[   71.928690][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.928702][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.928715][ T5855]  ? exc_page_fault+0xab/0x100
[   71.928729][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.928742][ T5855] RIP: 0033:0x7fc2ae78ff17
[   71.928756][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   71.928781][ T5855] RSP: 002b:00007ffc9478de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   71.928796][ T5855] RAX: 0000000000000000 RBX: 00007fc2ae811c05 RCX: 00007fc2ae78ff17
[   71.928804][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9478df20
[   71.928811][ T5855] RBP: 00007ffc9478df20 R08: 0000000000000000 R09: 0000000000000000
[   71.928819][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9478efb0
[   71.928828][ T5855] R13: 00007fc2ae811c05 R14: 000000000001184b R15: 00007ffc9478eff0
[   71.928858][ T5855]  </TASK>
[   72.051711][ T5855] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   72.228889][ T6002] could not allocate digest TFM handle tgr160
[   72.476731][ T6008] overlayfs: missing 'lowerdir'
[   73.650987][   T56] Bluetooth: hci2: command tx timeout
[   73.653543][ T5853] Bluetooth: hci1: command tx timeout
[   73.656011][ T5849] Bluetooth: hci0: command tx timeout
[   74.021365][ T6028] Bluetooth: MGMT ver 1.23
[   74.098073][ T6032] loop1: detected capacity change from 0 to 1024
[   74.101968][ T6032] =======================================================
[   74.101968][ T6032] WARNING: The mand mount option has been deprecated and
[   74.101968][ T6032]          and is ignored by this kernel. Remove the mand
[   74.101968][ T6032]          option from the mount to silence this warning.
[   74.101968][ T6032] =======================================================
[   74.136316][ T6032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   74.136438][ T6032] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.153686][ T6032] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 2: comm syz.1.48: lblock 2 mapped to illegal pblock 2 (length 4)
[   74.157855][ T6032] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.48: lblock 3 mapped to illegal pblock 3 (length 3)
[   74.170687][ T6032] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   74.170711][ T6032] EXT4-fs (loop1): This should not happen!! Data will be lost
[   74.170711][ T6032] 
[   74.184356][ T6032] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.48: lblock 3 mapped to illegal pblock 3 (length 3)
[   74.221142][ T1092] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u10:5: lblock 8 mapped to illegal pblock 8 (length 8)
[   74.228711][ T1092] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   74.234426][ T1092] EXT4-fs (loop1): This should not happen!! Data will be lost
[   74.234426][ T1092] 
[   74.262423][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   74.412189][ T6044] loop1: detected capacity change from 0 to 512
[   74.416963][ T6044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   74.425549][ T6044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[   74.428147][ T6044] System zones: 1-12
[   74.432168][ T6044] EXT4-fs (loop1): 1 truncate cleaned up
[   74.435668][ T6044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.447012][ T6044] EXT4-fs warning (device loop1): ext4_group_extend:1862: can't shrink FS - resize aborted
[   74.466665][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.549861][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   74.719277][    T9] usb 3-1: Using ep0 maxpacket: 16
[   74.724726][    T9] usb 3-1: config 252 has an invalid interface number: 165 but max is 0
[   74.727747][    T9] usb 3-1: config 252 has no interface number 0
[   74.730372][    T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd
[   74.733891][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.748134][    T9] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[   74.751742][    T9] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[   74.962125][ T5896] usb 3-1: USB disconnect, device number 2
[   75.451739][   T33] audit: type=1326 audit(1757323941.821:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.1.56" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2ae78ebe9 code=0x0
[   75.505093][ T6056] loop1: detected capacity change from 0 to 1024
[   75.508790][ T6056] EXT4-fs: Ignoring removed nobh option
[   75.535438][ T6058] loop2: detected capacity change from 0 to 2048
[   75.535670][ T6056] EXT4-fs: Ignoring removed bh option
[   75.554810][ T6058] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[   75.560816][ T6058] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.569761][ T6056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.707859][ T6063] UHID_CREATE from different security context by process 45 (syz.1.56), this is not allowed.
[   75.753614][ T6065] loop2: detected capacity change from 0 to 128
[   75.756117][ T6063] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.56: Allocating blocks 385-513 which overlap fs metadata
[   75.793915][ T6065] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   75.802614][ T6065] hpfs: filesystem error: improperly stopped
[   75.805112][ T6065] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   75.808191][ T6065] hpfs: You really don't want any checks? You are crazy...
[   75.841268][ T6065] hpfs: hpfs_map_sector(): read error
[   75.847104][ T6065] hpfs: code page support is disabled
[   75.857782][ T6065] hpfs: hpfs_map_4sectors(): unaligned read
[   75.863241][ T6065] hpfs: hpfs_map_4sectors(): unaligned read
[   75.865933][ T6065] hpfs: filesystem error: unable to find root dir
[   76.137541][ T6067] loop2: detected capacity change from 0 to 2048
[   76.219271][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.375774][ T6052] EXT4-fs (loop1): pa ffff88811204ad98: logic 16, phys. 129, len 24
[   76.376782][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.379402][ T6052] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[   76.928893][ T6079] loop2: detected capacity change from 0 to 16
[   76.936143][ T6079] erofs (device loop2): mounted with root inode @ nid 36.
[   76.950327][   T33] audit: type=1800 audit(1757323943.311:3): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.65" name="file1" dev="loop2" ino=86 res=0 errno=0
[   76.982761][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.137532][ T6089] input input4: cannot allocate more than FF_MAX_EFFECTS effects
[   77.201996][ T6091] loop2: detected capacity change from 0 to 2048
[   77.213288][ T6091] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576
[   77.224231][ T6091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.279231][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   77.774380][ T5896] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   77.774431][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.782812][ T5896] usb 2-1: config 0 descriptor??
[   78.043921][ T6103] Zero length message leads to an empty skb
[   78.274931][ T6111] mmap: syz.0.77 (6111) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   78.443805][ T6119] loop0: detected capacity change from 0 to 128
[   78.714175][ T6135] process 'syz.0.88' launched '/dev/fd/3' with NULL argv: empty string added
[   78.814910][ T5896] usb 2-1: Cannot set autoneg
[   78.817402][ T5896] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   78.852233][ T5896] usb 2-1: USB disconnect, device number 2
[   78.889447][ T6132] loop2: detected capacity change from 0 to 32768
[   78.897411][ T6132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.87 (6132)
[   78.932619][ T6132] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.936248][ T6132] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   78.998382][ T6132] BTRFS info (device loop2): enabling ssd optimizations
[   79.001407][ T6132] BTRFS info (device loop2): enabling free space tree
[   79.038259][   T33] audit: type=1800 audit(1757323945.401:4): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.87" name="bus" dev="loop2" ino=263 res=0 errno=0
[   79.186277][ T6160] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   79.208861][ T5850] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.366440][ T6167] netlink: 'syz.2.93': attribute type 10 has an invalid length.
[   79.457944][ T6171] loop2: detected capacity change from 0 to 512
[   79.462328][ T6169] syzkaller1: entered promiscuous mode
[   79.469595][ T6169] syzkaller1: entered allmulticast mode
[   79.487553][ T6171] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.96: Invalid inode bitmap blk 4 in block_group 0
[   79.498437][ T6171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.535458][   T33] audit: type=1326 audit(1757323945.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.96" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36eb8ebe9 code=0x7ffc0000
[   79.549184][   T33] audit: type=1326 audit(1757323945.901:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.96" exe="/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb36eb8ebe9 code=0x7ffc0000
[   79.684740][ T6162] loop0: detected capacity change from 0 to 32768
[   79.720708][ T6162] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.767240][ T6162] XFS (loop0): Ending clean mount
[   79.775890][ T6186] ipvlan2: entered promiscuous mode
[   79.807449][ T5845] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.995607][ T6192] capability: warning: `syz.1.102' uses 32-bit capabilities (legacy support in use)
[   80.107275][ T6198] sp0: Synchronizing with TNC
[   80.118002][ T6197] [U] 
[   80.171291][ T6200] loop1: detected capacity change from 0 to 4096
[   80.204596][ T6200] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   80.228416][ T6200] ntfs3(loop1): Failed to load $Extend (-22).
[   80.237342][ T6200] ntfs3(loop1): Failed to initialize $Extend.
[   80.479489][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   80.502568][ T6210] kernel read not supported for file /file0 (pid: 6210 comm: syz.1.111)
[   80.506225][   T33] audit: type=1800 audit(1757323946.871:7): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="file0" dev="mqueue" ino=7950 res=0 errno=0
[   80.629371][ T5896] usb 1-1: Using ep0 maxpacket: 32
[   80.637264][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short
[   80.642628][ T5896] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   80.646374][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.653481][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   80.660167][ T5896] usb 1-1: New USB device found, idVendor=286b, idProduct=0101, bcdDevice= 0.40
[   80.667294][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.671146][ T5896] usb 1-1: Product: syz
[   80.672829][ T5896] usb 1-1: Manufacturer: syz
[   80.676478][ T5896] usb 1-1: SerialNumber: syz
[   80.787910][ T6215] loop1: detected capacity change from 0 to 164
[   80.921815][ T5896] usb 1-1: 0:2 : does not exist
[   80.960368][ T5896] usb 1-1: USB disconnect, device number 2
[   80.998919][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   81.563652][ T6226] loop0: detected capacity change from 0 to 512
[   81.568749][ T6226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   81.593402][ T6226] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[   81.596705][ T6226] System zones: 0-2, 18-18, 34-34
[   81.612651][ T6226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.617646][ T6226] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.715157][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.079336][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   82.161829][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   82.233910][ T5897] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   82.237545][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.242505][ T5897] usb 2-1: Product: syz
[   82.244188][ T5897] usb 2-1: Manufacturer: syz
[   82.245962][ T5897] usb 2-1: SerialNumber: syz
[   82.256308][ T5897] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   82.288777][  T795] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   82.309512][    T9] usb 1-1: Using ep0 maxpacket: 8
[   82.314639][    T9] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[   82.317979][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   82.322150][    T9] usb 1-1: config 0 has no interface number 0
[   82.324734][    T9] usb 1-1: config 0 interface 52 has no altsetting 0
[   82.328757][    T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice= 8.00
[   82.332822][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=184
[   82.336641][    T9] usb 1-1: SerialNumber: syz
[   82.343252][    T9] usb 1-1: config 0 descriptor??
[   82.471428][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.633435][ T6245] loop2: detected capacity change from 0 to 4096
[   82.637470][ T6245] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   82.644777][ T6245] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   82.648239][ T6245] ntfs3(loop2): ino=0, mi_enum_attr
[   82.650800][ T6245] ntfs3(loop2): Failed to load $MFT.
[   82.710673][ T5910] usb 2-1: USB disconnect, device number 3
[   82.760428][   T24] usb 1-1: USB disconnect, device number 3
[   83.000700][ T5896] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.151226][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.155563][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.159665][ T5896] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   83.163271][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.169990][ T5896] usb 3-1: config 0 descriptor??
[   83.252786][ T6249] loop1: detected capacity change from 0 to 8
[   83.329754][  T795] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[   83.332889][  T795] ath9k_htc: Failed to initialize the device
[   83.338468][ T5910] usb 2-1: ath9k_htc: USB layer deinitialized
[   83.610274][ T5896] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[   83.624089][ T6256] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   83.702553][ T6255] loop0: detected capacity change from 0 to 32768
[   83.728057][ T6255] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   83.746204][ T6255] XFS (loop0): Ending clean mount
[   83.778742][ T5845] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   83.792087][ T5896] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device
[   83.803170][ T5896] arvo 0003:1E7D:30D4.0001: couldn't install keyboard
[   83.814691][ T5896] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -71
[   83.846843][ T5896] usb 3-1: USB disconnect, device number 3
[   84.229234][ T5910] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.250593][ T6271] loop1: detected capacity change from 0 to 128
[   84.278590][ T6271] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.287857][ T6271] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.300279][ T6271] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08)
[   84.336064][ T5855] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.394095][ T5910] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[   84.397702][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.404623][ T5910] usb 1-1: Product: syz
[   84.408836][ T5910] usb 1-1: Manufacturer: syz
[   84.412210][ T5910] usb 1-1: SerialNumber: syz
[   84.417954][ T5910] usb 1-1: config 0 descriptor??
[   84.456951][ T1091] Bluetooth: hci3: Frame reassembly failed (-84)
[   84.527308][ T6281] loop1: detected capacity change from 0 to 128
[   84.829348][    T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   84.982861][    T9] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[   84.986275][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.990900][    T9] usb 2-1: config 0 has no interface number 0
[   84.996100][    T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[   85.000311][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.003586][    T9] usb 2-1: Product: syz
[   85.005328][    T9] usb 2-1: Manufacturer: syz
[   85.007185][    T9] usb 2-1: SerialNumber: syz
[   85.012291][    T9] usb 2-1: config 0 descriptor??
[   85.034661][ T5910] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   85.041308][ T5910] asix 1-1:0.0: probe with driver asix failed with error -71
[   85.047964][ T5910] usb 1-1: USB disconnect, device number 4
[   85.223932][    T9] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[   85.226990][    T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82
[   85.232134][    T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[   85.235263][    T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[   85.238319][    T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[   85.245653][    T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[   85.259424][    T9] usb 2-1: USB disconnect, device number 4
[   85.270490][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[   85.274946][    T9] keyspan 2-1:0.133: device disconnected
[   86.096927][ T6293] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   86.545199][ T5849] Bluetooth: hci3: command 0x1003 tx timeout
[   86.550148][   T56] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   86.706044][  T125] cfg80211: failed to load regulatory.db
[   86.879313][ T5896] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   87.029286][ T5896] usb 1-1: Using ep0 maxpacket: 32
[   87.036467][ T5896] usb 1-1: config 0 has an invalid interface number: 235 but max is 0
[   87.039736][ T5896] usb 1-1: config 0 has no interface number 0
[   87.043078][ T6305] loop1: detected capacity change from 0 to 32768
[   87.043697][ T5896] usb 1-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[   87.053020][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.056100][ T5896] usb 1-1: Product: syz
[   87.057686][ T5896] usb 1-1: Manufacturer: syz
[   87.064501][ T5896] usb 1-1: SerialNumber: syz
[   87.073062][ T5896] usb 1-1: config 0 descriptor??
[   87.146947][ T6305] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[   87.146966][ T6305]   allowing incompatible features above 0.0: (unknown version)
[   87.146972][ T6305]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   87.165916][ T6305] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   87.168591][ T6305] bcachefs (loop1): initializing new filesystem
[   87.178329][ T6305] bcachefs (loop1): going read-write
[   87.190398][ T6305] bcachefs (loop1): marking superblocks
[   87.212292][ T6305] bcachefs (loop1): initializing freespace
[   87.225821][ T6305] bcachefs (loop1): done initializing freespace
[   87.231824][ T6305] bcachefs (loop1): reading snapshots table
[   87.233841][ T6305] bcachefs (loop1): reading snapshots done
[   87.268665][ T6305] bcachefs (loop1): done starting filesystem
[   87.307030][ T5896] kaweth 1-1:0.235: Firmware present in device.
[   87.336398][ T6305] overlayfs: missing 'lowerdir'
[   87.368059][ T6305] syz.1.144 (6305) used greatest stack depth: 15096 bytes left
[   87.397368][ T5855] bcachefs (loop1): shutting down
[   87.409031][ T5855] bcachefs (loop1): going read-only
[   87.413564][ T5855] bcachefs (loop1): finished waiting for writes to stop
[   87.421102][ T5855] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[   87.455414][ T5855] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   87.461120][ T5855] bcachefs (loop1): clean shutdown complete, journal seq 4
[   87.461644][ T6325] loop2: detected capacity change from 0 to 4096
[   87.463887][ T5855] bcachefs (loop1): marking filesystem clean
[   87.471594][ T6325] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   87.486003][ T5896] kaweth 1-1:0.235: Statistics collection: 0
[   87.488365][ T5896] kaweth 1-1:0.235: Multicast filter limit: 0
[   87.504835][ T5896] kaweth 1-1:0.235: MTU: 0
[   87.506668][ T5896] kaweth 1-1:0.235: Read MAC address 00:00:00:00:00:00
[   87.513712][ T5855] bcachefs (loop1): shutdown complete
[   88.040794][ T6334] loop2: detected capacity change from 0 to 32768
[   88.058640][ T6334] JBD2: Ignoring recovery information on journal
[   88.089846][ T6334] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   88.096381][ T5896] kaweth 1-1:0.235: Error setting receive filter
[   88.104933][ T5896] kaweth 1-1:0.235: probe with driver kaweth failed with error -5
[   88.148712][ T5896] usb 1-1: USB disconnect, device number 5
[   88.168684][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[   88.209577][   T56] Bluetooth: hci0: command tx timeout
[   88.341168][ T6340] loop2: detected capacity change from 0 to 512
[   88.387140][ T6340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.392620][ T6340] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.441285][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.513574][ T6345] loop2: detected capacity change from 0 to 1764
[   88.541409][ T6345] iso9660: Corrupted directory entry in block 2 of inode 1920
[   88.752473][ T6355] loop0: detected capacity change from 0 to 512
[   88.755225][ T6355] EXT4-fs: Ignoring removed i_version option
[   88.757323][ T6355] EXT4-fs: Ignoring removed mblk_io_submit option
[   88.778443][ T6355] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.159: inode #13: comm syz.0.159: iget: illegal inode #
[   88.784971][ T6355] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.159: couldn't read orphan inode 13 (err -117)
[   88.791917][ T6355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.804794][ T6355] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.159: resize_inode disabled but reserved GDT blocks non-zero
[   88.880717][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.051780][ T6364] loop1: detected capacity change from 0 to 2048
[   89.077420][ T6364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.111065][ T6364] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408)
[   89.205128][ T6371] loop2: detected capacity change from 0 to 512
[   89.208638][ T6371] EXT4-fs: Ignoring removed mblk_io_submit option
[   89.247101][ T6371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   89.279288][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.284310][ T6371] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.284900][ T6372] loop0: detected capacity change from 0 to 4096
[   89.294792][ T6372] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   89.362088][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.578705][ T6384] loop2: detected capacity change from 0 to 128
[   89.630804][ T6384] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   89.634067][ T6384] System zones: 1-3, 19-19, 35-36
[   89.637659][ T6384] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   89.646004][ T6374] loop1: detected capacity change from 0 to 32768
[   89.655443][ T6382] loop0: detected capacity change from 0 to 4096
[   89.678236][ T6384] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   89.678992][ T6374] JBD2: Ignoring recovery information on journal
[   89.714915][ T6382] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   89.734666][ T6384] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups)
[   89.735360][ T6382] ntfs3(loop0): ino=0, "file0" The size of extended attributes must not exceed 64KiB
[   89.771960][ T6374] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   89.793178][ T5850] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.923660][ T6391] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   89.935380][ T5855] ocfs2: Unmounting device (7,1) on (node local)
[   90.332015][ T6401] loop0: detected capacity change from 0 to 32768
[   90.351837][ T6401] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   90.373221][ T6401] (syz.0.179,6401,1):ocfs2_mknod:505 ERROR: status = -2
[   90.376092][ T6401] (syz.0.179,6401,1):ocfs2_mkdir:661 ERROR: status = -2
[   90.426607][ T5845] (syz-executor,5845,0):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode.
[   90.438611][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[   90.550926][  T125] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   90.673656][ T6416] random: crng reseeded on system resumption
[   90.839293][  T125] usb 3-1: Using ep0 maxpacket: 8
[   90.846868][  T125] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 129, using maximum allowed: 30
[   90.856042][  T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 136, changing to 11
[   90.862559][  T125] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   90.867700][  T125] usb 3-1: config 0 interface 0 has no altsetting 0
[   90.871623][  T125] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[   90.875997][  T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.887831][  T125] usb 3-1: config 0 descriptor??
[   90.988018][ T6422] binder: 6421:6422 ioctl c0306201 200000000080 returned -14
[   91.101844][  T125] usbhid 3-1:0.0: can't add hid device: -71
[   91.103972][  T125] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   91.112950][  T125] usb 3-1: USB disconnect, device number 4
[   91.155998][ T6428] geneve0: entered allmulticast mode
[   91.515110][ T6430] loop0: detected capacity change from 0 to 32768
[   91.526960][ T6430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.190 (6430)
[   91.571260][ T6430] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.575597][ T6430] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   91.652646][ T6430] BTRFS info (device loop0): rebuilding free space tree
[   91.662094][ T6432] loop1: detected capacity change from 0 to 32768
[   91.723752][ T6432] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.759538][ T6430] BTRFS info (device loop0): allowing degraded mounts
[   91.762208][ T6430] BTRFS info (device loop0): enabling ssd optimizations
[   91.769695][ T6430] BTRFS info (device loop0): enabling free space tree
[   91.772476][ T6430] BTRFS info (device loop0): force clearing of disk cache
[   91.784109][ T6432] XFS (loop1): Ending clean mount
[   91.787674][ T6430] BTRFS info (device loop0): use zstd compression, level 3
[   91.796846][ T6430] BTRFS info (device loop0): max_inline set to 0
[   91.800705][ T6432] XFS (loop1): Quotacheck needed: Please wait.
[   91.836788][ T6432] XFS (loop1): Quotacheck: Done.
[   91.889454][ T5855] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.917006][ T6462] loop2: detected capacity change from 0 to 2048
[   91.933501][ T6462] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   91.974884][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.001288][ T5854] udevd[5854]: incorrect nilfs2 checksum on /dev/loop2
[   92.024623][ T5854] udevd[5854]: incorrect nilfs2 checksum on /dev/loop2
[   92.350530][ T6471] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   92.517899][ T6479] autofs: Bad value for 'fd'
[   92.714847][ T6473] loop1: detected capacity change from 0 to 40427
[   92.719361][ T6473] F2FS-fs: inline xattr size is out of range: 6 ~ 903
[   92.897492][ T6495] loop1: detected capacity change from 0 to 256
[   92.914939][ T6495] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[   93.109608][  T125] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   93.281983][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   93.286418][  T125] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   93.290444][  T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.296228][  T125] usb 3-1: config 0 descriptor??
[   93.304615][  T125] usb 3-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[   93.307340][  T125] usb 3-1: No valid video chain found.
[   93.510321][  T125] usb 3-1: USB disconnect, device number 5
[   93.606767][ T6509] loop0: detected capacity change from 0 to 128
[   93.622018][ T6509] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   93.630948][ T6509] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   93.654430][ T6509] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 20: comm syz.0.215: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[   93.662018][ T6509] EXT4-fs error (device loop0) in do_split:2029: Corrupt filesystem
[   93.682434][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   94.064929][ T6518] evm: overlay not supported
[   94.579384][ T6513] Bluetooth: hci0: Opcode 0x080f failed: -4
[   94.785364][ T6528] loop0: detected capacity change from 0 to 1024
[   94.811617][ T6528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.815538][ T6528] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.861211][ T4287] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u9:6: bg 0: block 393: padding at end of block bitmap is not set
[   94.877291][ T4287] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28
[   94.884603][ T4287] EXT4-fs (loop0): This should not happen!! Data will be lost
[   94.884603][ T4287] 
[   94.893490][ T4287] EXT4-fs (loop0): Total free blocks count 0
[   94.895785][ T4287] EXT4-fs (loop0): Free/Dirty block details
[   94.898061][ T4287] EXT4-fs (loop0): free_blocks=0
[   94.917067][ T4287] EXT4-fs (loop0): dirty_blocks=0
[   94.920266][ T4287] EXT4-fs (loop0): Block reservation details
[   94.922762][ T4287] EXT4-fs (loop0): i_reserved_data_blocks=0
[   94.927566][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.324180][ T6538] loop0: detected capacity change from 0 to 32768
[   95.349656][ T6538] btrfs: Unknown parameter 'ref_verify'
[   95.723000][ T6548] loop2: detected capacity change from 0 to 128
[   95.809366][   T56] Bluetooth: hci0: command 0x080f tx timeout
[   96.773422][  T795] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   96.950624][  T795] usb 3-1: Using ep0 maxpacket: 16
[   96.953932][  T795] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[   96.956601][  T795] usb 3-1: config 0 has no interface number 0
[   96.958653][  T795] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   96.962995][  T795] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   96.968336][  T795] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   96.972706][  T795] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   96.975592][  T795] usb 3-1: Product: syz
[   96.977292][  T795] usb 3-1: SerialNumber: syz
[   96.982045][  T795] usb 3-1: config 0 descriptor??
[   96.985536][  T795] cm109 3-1:0.8: invalid payload size 0, expected 4
[   96.996337][  T795] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5
[   97.194951][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[   97.195277][ T5910] usb 3-1: USB disconnect, device number 6
[   97.197802][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   97.249570][  T125] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   97.254132][ T5910] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   97.739291][  T125] usb 1-1: Using ep0 maxpacket: 16
[   97.744821][  T125] usb 1-1: config 1 interface 0 has no altsetting 0
[   97.751436][  T125] usb 1-1: New USB device found, idVendor=2453, idProduct=0100, bcdDevice= 0.40
[   97.755225][  T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.758138][  T125] usb 1-1: Product: syz
[   97.759921][  T125] usb 1-1: Manufacturer: syz
[   97.761710][  T125] usb 1-1: SerialNumber: syz
[   98.515922][   T33] audit: type=1326 audit(1757323964.881:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36eb8ebe9 code=0x7ffc0000
[   98.526464][   T33] audit: type=1326 audit(1757323964.881:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36eb8ebe9 code=0x7ffc0000
[   98.535215][   T33] audit: type=1326 audit(1757323964.891:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.254" exe="/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fb36eb8ebe9 code=0x7ffc0000
[   98.546070][   T33] audit: type=1326 audit(1757323964.891:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36eb8ebe9 code=0x7ffc0000
[   98.556037][   T33] audit: type=1326 audit(1757323964.891:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36eb8ebe9 code=0x7ffc0000
[   98.569202][  T795] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   98.653003][ T6611] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   98.657065][ T6611] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   98.663278][ T6611] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   98.723072][  T795] usb 2-1: Using ep0 maxpacket: 8
[   98.728644][  T795] usb 2-1: unable to get BOS descriptor or descriptor too short
[   98.743321][  T795] usb 2-1: config 7 has an invalid interface number: 67 but max is 0
[   98.746540][  T795] usb 2-1: config 7 has no interface number 0
[   98.753505][  T795] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[   98.760938][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.764098][  T795] usb 2-1: Product: syz
[   98.765738][  T795] usb 2-1: Manufacturer: syz
[   98.767486][  T795] usb 2-1: SerialNumber: syz
[   98.941628][ T6619] loop2: detected capacity change from 0 to 8
[   98.946646][ T6619] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   99.091385][  T795] usb 2-1: USB disconnect, device number 5
[   99.237999][ T6621] cramfs: Error -3 while decompressing!
[   99.240838][ T6621] cramfs: ffffffff99e0d8c8(26)->ffff88811c0fa000(4096)
[   99.244176][ T6621] cramfs: Error -3 while decompressing!
[   99.246758][ T6621] cramfs: ffffffff99e0d8e2(26)->ffff888112b45000(4096)
[   99.250046][ T6621] cramfs: Error -3 while decompressing!
[   99.252651][ T6621] cramfs: ffffffff99e0d8fc(16)->ffff888112b44000(4096)
[   99.255765][ T6621] cramfs: Error -3 while decompressing!
[   99.258038][ T6621] cramfs: ffffffff99e0d8c8(26)->ffff88811c0fa000(4096)
[   99.717500][ T6627] loop1: detected capacity change from 0 to 512
[   99.743505][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.748923][ T6627] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.881133][  T125] usbhid 1-1:1.0: can't add hid device: -71
[   99.883820][  T125] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   99.904744][  T125] usb 1-1: USB disconnect, device number 6
[   99.913510][ T6632] loop2: detected capacity change from 0 to 64
[  100.217686][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.314086][ T6648] loop1: detected capacity change from 0 to 512
[  100.316889][ T6648] EXT4-fs: Ignoring removed orlov option
[  100.332074][ T6648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  100.353827][ T6648] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  100.363496][ T6648] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  100.369706][ T6648] EXT4-fs (loop1): 1 orphan inode deleted
[  100.373364][ T6648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.403470][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.480657][ T6653] loop1: detected capacity change from 0 to 2048
[  100.486444][ T6653] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  100.507265][ T6654] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.028209][ T6666] loop0: detected capacity change from 0 to 128
[  101.032860][ T6666] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.055996][ T6666] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.914803][ T3213] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  102.306044][ T6690] loop2: detected capacity change from 0 to 40427
[  102.320595][ T6690] F2FS-fs (loop2): Invalid log blocks per segment (327689)
[  102.323524][ T6690] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  102.349818][ T6690] F2FS-fs (loop2): invalid crc value
[  102.428870][ T6690] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.437033][ T6690] F2FS-fs (loop2): Start checkpoint disabled!
[  102.453230][ T6690] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  102.464444][ T6690] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  102.467274][ T6690] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  102.536012][ T1092] kworker/u10:5: attempt to access beyond end of device
[  102.536012][ T1092] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  102.546429][ T1092] CPU: 1 UID: 0 PID: 1092 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[  102.546459][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.546474][ T1092] Workqueue: writeback wb_workfn (flush-7:2)
[  102.546498][ T1092] Call Trace:
[  102.546504][ T1092]  <TASK>
[  102.546511][ T1092]  dump_stack_lvl+0x189/0x250
[  102.546540][ T1092]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.546553][ T1092]  ? __pfx_queue_work_on+0x10/0x10
[  102.546565][ T1092]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  102.546584][ T1092]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  102.546609][ T1092]  f2fs_handle_critical_error+0x37c/0x540
[  102.546632][ T1092]  f2fs_write_end_io+0x886/0xb60
[  102.546658][ T1092]  __submit_merged_bio+0x27a/0x6a0
[  102.546679][ T1092]  __submit_merged_write_cond+0x255/0x530
[  102.546702][ T1092]  f2fs_write_data_pages+0x261d/0x3000
[  102.546750][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  102.546779][ T1092]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  102.546820][ T1092]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  102.546844][ T1092]  ? trace_f2fs_writepages+0x7f/0x200
[  102.546862][ T1092]  ? f2fs_write_node_pages+0x478/0x6e0
[  102.546881][ T1092]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  102.546930][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  102.546950][ T1092]  do_writepages+0x32e/0x550
[  102.546973][ T1092]  ? reacquire_held_locks+0x127/0x1d0
[  102.546986][ T1092]  ? writeback_sb_inodes+0x384/0x1010
[  102.547009][ T1092]  __writeback_single_inode+0x145/0xff0
[  102.547024][ T1092]  ? do_raw_spin_unlock+0x4d/0x240
[  102.547043][ T1092]  writeback_sb_inodes+0x6c7/0x1010
[  102.547083][ T1092]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  102.547132][ T1092]  ? rcu_is_watching+0x15/0xb0
[  102.547153][ T1092]  wb_writeback+0x43b/0xaf0
[  102.547176][ T1092]  ? queue_io+0x2f1/0x590
[  102.547194][ T1092]  ? __pfx_wb_writeback+0x10/0x10
[  102.547217][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.547240][ T1092]  wb_workfn+0x409/0xef0
[  102.547265][ T1092]  ? __pfx_wb_workfn+0x10/0x10
[  102.547280][ T1092]  ? __lock_acquire+0xab9/0xd20
[  102.547305][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  102.547329][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.547342][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  102.547356][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  102.547373][ T1092]  process_scheduled_works+0xae1/0x17b0
[  102.547444][ T1092]  ? __pfx_process_scheduled_works+0x10/0x10
[  102.547473][ T1092]  worker_thread+0x8a0/0xda0
[  102.547497][ T1092]  ? __kthread_parkme+0x7b/0x200
[  102.547524][ T1092]  kthread+0x711/0x8a0
[  102.547542][ T1092]  ? __pfx_worker_thread+0x10/0x10
[  102.547552][ T1092]  ? __pfx_kthread+0x10/0x10
[  102.547566][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.547581][ T1092]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.547593][ T1092]  ? __pfx_kthread+0x10/0x10
[  102.547608][ T1092]  ret_from_fork+0x47f/0x820
[  102.547627][ T1092]  ? __pfx_ret_from_fork+0x10/0x10
[  102.547649][ T1092]  ? __switch_to_asm+0x39/0x70
[  102.547663][ T1092]  ? __switch_to_asm+0x33/0x70
[  102.547674][ T1092]  ? __pfx_kthread+0x10/0x10
[  102.547685][ T1092]  ret_from_fork_asm+0x1a/0x30
[  102.547715][ T1092]  </TASK>
[  102.559893][ T1092] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  104.457802][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.301'.
[  105.276656][ T6752] loop2: detected capacity change from 0 to 128
[  105.779471][ T6754] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.659788][ T6762] loop2: detected capacity change from 0 to 256
[  106.744448][ T6762] FAT-fs (loop2): Directory bread(block 64) failed
[  106.752149][ T6762] FAT-fs (loop2): Directory bread(block 65) failed
[  106.755198][ T6762] FAT-fs (loop2): Directory bread(block 66) failed
[  106.757833][ T6762] FAT-fs (loop2): Directory bread(block 67) failed
[  106.766760][ T6762] FAT-fs (loop2): Directory bread(block 68) failed
[  106.771883][ T6762] FAT-fs (loop2): Directory bread(block 69) failed
[  106.774909][ T6762] FAT-fs (loop2): Directory bread(block 70) failed
[  106.777483][ T6762] FAT-fs (loop2): Directory bread(block 71) failed
[  106.789405][ T6762] FAT-fs (loop2): Directory bread(block 72) failed
[  106.792111][ T6762] FAT-fs (loop2): Directory bread(block 73) failed
[  106.863148][ T6762] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  106.939839][   T36] kworker/u10:1: attempt to access beyond end of device
[  106.939839][   T36] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256
[  107.286387][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.320'.
[  107.445939][ T6794] loop2: detected capacity change from 0 to 8192
[  107.656390][ T6801] netlink: 'syz.0.328': attribute type 1 has an invalid length.
[  107.656971][ T6799] loop2: detected capacity change from 0 to 512
[  107.663933][ T6801] netlink: 'syz.0.328': attribute type 2 has an invalid length.
[  107.706229][ T6799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.716947][ T6799] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.741706][ T6799] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.327: corrupted xattr block 33: overlapping e_value 
[  107.776391][ T6809] loop0: detected capacity change from 0 to 2048
[  107.782921][ T6809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.824453][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.949186][   T33] audit: type=1326 audit(1757323974.301:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253f8ebe9 code=0x7ffc0000
[  107.974816][   T33] audit: type=1326 audit(1757323974.301:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253f8ebe9 code=0x7ffc0000
[  107.985583][   T33] audit: type=1326 audit(1757323974.351:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.333" exe="/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5253f8ebe9 code=0x7ffc0000
[  107.993586][   T33] audit: type=1326 audit(1757323974.351:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253f8ebe9 code=0x7ffc0000
[  108.003049][   T33] audit: type=1326 audit(1757323974.351:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253f8ebe9 code=0x7ffc0000
[  108.045288][ T6820] fuse: Bad value for 'fd'
[  108.066703][ T6822] netlink: 'syz.2.337': attribute type 1 has an invalid length.
[  108.194583][   T56] Bluetooth: hci0: unexpected event for opcode 0x0c7a
[  108.328619][ T6825] loop2: detected capacity change from 0 to 32768
[  108.371195][ T6825] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  108.431552][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  108.452803][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'.
[  108.456860][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.344'.
[  108.717811][ T6852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'.
[  108.722835][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'.
[  109.725791][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'.
[  109.838114][ T6896] netlink: 'syz.0.370': attribute type 1 has an invalid length.
[  110.050524][ T6910] trusted_key: syz.1.376 sent an empty control message without MSG_MORE.
[  110.515456][ T6924] QAT: failed to copy from user cfg_data.
[  110.959247][  T125] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  111.109249][  T125] usb 3-1: Using ep0 maxpacket: 16
[  111.112964][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  111.115921][  T125] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  111.120324][  T125] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 132
[  111.126471][  T125] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=14.47
[  111.131463][  T125] usb 3-1: New USB device strings: Mfr=55, Product=172, SerialNumber=120
[  111.134998][  T125] usb 3-1: Product: syz
[  111.136653][  T125] usb 3-1: Manufacturer: syz
[  111.138530][  T125] usb 3-1: SerialNumber: syz
[  111.144085][  T125] usb 3-1: config 0 descriptor??
[  111.146880][ T6932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  111.176397][  T125] mcba_usb 3-1:0.0 can0: failed tx_urb -90
[  111.178620][  T125] mcba_usb 3-1:0.0 can0: Failed to send cmd (169)
[  111.183080][  T125] mcba_usb 3-1:0.0 can0: failed tx_urb -90
[  111.185671][  T125] mcba_usb 3-1:0.0 can0: Failed to send cmd (169)
[  111.187950][  T125] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected
[  111.604076][ T5911] usb 3-1: USB disconnect, device number 7
[  111.657275][ T5911] mcba_usb 3-1:0.0 can0: device disconnected
[  113.234673][ T6965] loop2: detected capacity change from 0 to 32768
[  113.271720][ T6965] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  113.349327][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  113.636363][ T7009] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.408'.
[  113.647342][ T7004] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.408'.
[  113.661481][ T7009] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.408'.
[  113.725331][ T7013] netlink: 'syz.1.412': attribute type 8 has an invalid length.
[  113.737250][ T7015] loop2: detected capacity change from 0 to 16
[  113.756729][ T7015] erofs (device loop2): mounted with root inode @ nid 36.
[  113.835290][ T7021] tipc: Can't bind to reserved service type 1
[  113.954838][ T7029] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  113.966889][ T7029] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  113.974167][ T7029] bridge_slave_0: default FDB implementation only supports local addresses
[  114.314399][ T7056] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  114.314399][ T7056] The task syz.0.428 (7056) triggered the difference, watch for misbehavior.
[  115.317725][ T7102] loop2: detected capacity change from 0 to 4096
[  115.331772][ T7102] EXT4-fs (loop2): Test dummy encryption mode enabled
[  115.340833][ T7102] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  115.344084][ T7102] System zones: 0-5
[  115.358013][ T7102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.812738][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.418932][   T47] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  116.540094][ T5911] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  116.732078][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  116.737122][ T5911] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  116.742853][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.748793][ T5911] usb 3-1: config 0 descriptor??
[  116.758986][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  116.799230][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  116.852329][ T7162] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[  116.855485][ T7162] netlink: 'syz.0.475': attribute type 4 has an invalid length.
[  116.858534][ T7162] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.475'.
[  116.864237][ T7162] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[  116.867305][ T7162] netlink: 'syz.0.475': attribute type 4 has an invalid length.
[  116.875364][ T7162] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.475'.
[  116.969294][    T9] usb 2-1: Using ep0 maxpacket: 16
[  116.980235][    T9] usb 2-1: config 1 interface 0 altsetting 206 endpoint 0x81 has invalid maxpacket 1080, setting to 1024
[  116.987861][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  116.999381][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.40
[  117.003362][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.006925][    T9] usb 2-1: Product: syz
[  117.008835][    T9] usb 2-1: Manufacturer: syz
[  117.016232][    T9] usb 2-1: SerialNumber: syz
[  117.031696][ T7148] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  117.110388][   T56] Bluetooth: min 9 > max 0
[  117.196389][ T5911] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  117.268424][    T9] usbhid 2-1:1.0: can't add hid device: -71
[  117.272652][    T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  117.278679][    T9] usb 2-1: USB disconnect, device number 6
[  117.445341][ T5896] usb 3-1: USB disconnect, device number 8
[  117.996817][ T7195] loop2: detected capacity change from 0 to 8
[  119.169296][   T56] Bluetooth: hci0: command 0x080f tx timeout
[  120.884685][ T7244] loop2: detected capacity change from 0 to 4096
[  120.918804][ T7244] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  121.163244][ T7259] loop2: detected capacity change from 0 to 256
[  121.190270][ T7259] FAT-fs (loop2): Directory bread(block 64) failed
[  121.196652][ T7259] FAT-fs (loop2): Directory bread(block 65) failed
[  121.198840][ T7259] FAT-fs (loop2): Directory bread(block 66) failed
[  121.206999][ T7259] FAT-fs (loop2): Directory bread(block 67) failed
[  121.215008][ T7259] FAT-fs (loop2): Directory bread(block 68) failed
[  121.217817][ T7259] FAT-fs (loop2): Directory bread(block 69) failed
[  121.224115][ T7259] FAT-fs (loop2): Directory bread(block 70) failed
[  121.226714][ T7259] FAT-fs (loop2): Directory bread(block 71) failed
[  121.231560][ T7259] FAT-fs (loop2): Directory bread(block 72) failed
[  121.234198][ T7259] FAT-fs (loop2): Directory bread(block 73) failed
[  121.865602][ T7295] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.536'.
[  121.879503][ T7295] openvswitch: netlink: Message has 512 unknown bytes.
[  122.108230][ T7307] loop2: detected capacity change from 0 to 256
[  122.290356][ T5896] IPVS: starting estimator thread 0...
[  122.379819][ T7323] IPVS: using max 64 ests per chain, 153600 per kthread
[  122.876747][ T7354] netlink: 'syz.0.564': attribute type 10 has an invalid length.
[  123.471630][ T7372] netlink: 'syz.0.570': attribute type 11 has an invalid length.
[  125.020435][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'.
[  125.023510][ T7395] bridge_slave_0: default FDB implementation only supports local addresses
[  125.768762][ T7419] geneve2: entered promiscuous mode
[  125.774883][ T7419] geneve2: entered allmulticast mode
[  126.866181][ T7439] overlayfs: failed to clone upperpath
[  127.344843][   T56] Bluetooth: hci0: unexpected event for opcode 0x2028
[  127.608285][ T7485] input: syz1 as /devices/virtual/input/input7
[  129.091756][ T7499] loop2: detected capacity change from 0 to 32768
[  129.189183][  T125] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  129.339349][  T125] usb 2-1: Using ep0 maxpacket: 32
[  129.426797][  T125] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  129.433648][ T7526] loop2: detected capacity change from 0 to 256
[  129.445372][  T125] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  129.449468][  T125] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  129.452755][  T125] usb 2-1: Product: syz
[  129.455070][  T125] usb 2-1: Manufacturer: syz
[  129.457013][  T125] usb 2-1: SerialNumber: syz
[  129.472837][  T125] usb 2-1: config 0 descriptor??
[  129.475606][ T7510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  129.482710][ T7526] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  129.501943][ T7526] exFAT-fs (loop2): error, data size is invalid(10)
[  129.504830][ T7526] exFAT-fs (loop2): Filesystem has been set read-only
[  129.518574][ T7526] exFAT-fs (loop2): error, data size is invalid(10)
[  129.987906][ T5911] usb 2-1: USB disconnect, device number 7
[  130.099341][ T7532] loop2: detected capacity change from 0 to 32768
[  130.127151][ T7532] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  130.161406][ T7532] 
[  130.162465][ T7532] ======================================================
[  130.165256][ T7532] WARNING: possible circular locking dependency detected
[  130.167881][ T7532] syzkaller #0 Not tainted
[  130.169963][ T7532] ------------------------------------------------------
[  130.173322][ T7532] syz.2.638/7532 is trying to acquire lock:
[  130.175417][ T7532] ffff88802dc59840 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  130.180662][ T7532] 
[  130.180662][ T7532] but task is already holding lock:
[  130.183157][ T7532] ffff88802dc5c060 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x198/0x310
[  130.186547][ T7532] 
[  130.186547][ T7532] which lock already depends on the new lock.
[  130.186547][ T7532] 
[  130.189950][ T7532] 
[  130.189950][ T7532] the existing dependency chain (in reverse order) is:
[  130.192582][ T7532] 
[  130.192582][ T7532] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  130.195137][ T7532]        lock_acquire+0x120/0x360
[  130.196670][ T7532]        down_write+0x96/0x1f0
[  130.198463][ T7532]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  130.200299][ T7532]        ocfs2_xattr_set+0x595/0x11f0
[  130.201852][ T7532]        ocfs2_set_acl+0x701/0x7b0
[  130.203548][ T7532]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  130.205144][ T7532]        vfs_set_acl+0x887/0xb00
[  130.206795][ T7532]        filename_setxattr+0x2e0/0x600
[  130.208551][ T7532]        path_setxattrat+0x364/0x3a0
[  130.210386][ T7532]        __x64_sys_setxattr+0xbc/0xe0
[  130.212155][ T7532]        do_syscall_64+0xfa/0xfa0
[  130.213846][ T7532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.215687][ T7532] 
[  130.215687][ T7532] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  130.218170][ T7532]        lock_acquire+0x120/0x360
[  130.219879][ T7532]        down_read+0x46/0x2e0
[  130.221670][ T7532]        ocfs2_init_acl+0x2f9/0x720
[  130.223494][ T7532]        ocfs2_mknod+0x1321/0x2050
[  130.225240][ T7532]        ocfs2_create+0x1a5/0x440
[  130.226698][ T7532]        path_openat+0x14f4/0x3830
[  130.228253][ T7532]        do_filp_open+0x1fa/0x410
[  130.229754][ T7532]        do_sys_openat2+0x121/0x1c0
[  130.231372][ T7532]        __x64_sys_openat+0x138/0x170
[  130.233178][ T7532]        do_syscall_64+0xfa/0xfa0
[  130.234918][ T7532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.237110][ T7532] 
[  130.237110][ T7532] -> #3 (jbd2_handle){++++}-{0:0}:
[  130.239744][ T7532]        lock_acquire+0x120/0x360
[  130.241516][ T7532]        start_this_handle+0x1fa7/0x21c0
[  130.243266][ T7532]        jbd2__journal_start+0x2c1/0x5b0
[  130.245006][ T7532]        jbd2_journal_start+0x2a/0x40
[  130.246776][ T7532]        ocfs2_start_trans+0x376/0x6d0
[  130.248479][ T7532]        ocfs2_modify_bh+0xe8/0x470
[  130.250077][ T7532]        ocfs2_local_read_info+0x1465/0x17e0
[  130.252018][ T7532]        dquot_load_quota_sb+0x791/0xbd0
[  130.253851][ T7532]        dquot_load_quota_inode+0x2e1/0x5d0
[  130.255838][ T7532]        ocfs2_enable_quotas+0x1c6/0x450
[  130.257981][ T7532]        ocfs2_fill_super+0x50e7/0x63a0
[  130.259915][ T7532]        get_tree_bdev_flags+0x40e/0x4d0
[  130.261679][ T7532]        vfs_get_tree+0x92/0x2b0
[  130.263184][ T7532]        do_new_mount+0x2ee/0xa90
[  130.264879][ T7532]        __se_sys_mount+0x317/0x410
[  130.266655][ T7532]        do_syscall_64+0xfa/0xfa0
[  130.268510][ T7532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.270764][ T7532] 
[  130.270764][ T7532] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  130.273457][ T7532]        lock_acquire+0x120/0x360
[  130.275045][ T7532]        down_read+0x46/0x2e0
[  130.276775][ T7532]        ocfs2_start_trans+0x36a/0x6d0
[  130.278765][ T7532]        ocfs2_modify_bh+0xe8/0x470
[  130.280553][ T7532]        ocfs2_local_read_info+0x1465/0x17e0
[  130.282772][ T7532]        dquot_load_quota_sb+0x791/0xbd0
[  130.284797][ T7532]        dquot_load_quota_inode+0x2e1/0x5d0
[  130.286736][ T7532]        ocfs2_enable_quotas+0x1c6/0x450
[  130.288499][ T7532]        ocfs2_fill_super+0x50e7/0x63a0
[  130.290279][ T7532]        get_tree_bdev_flags+0x40e/0x4d0
[  130.292202][ T7532]        vfs_get_tree+0x92/0x2b0
[  130.293826][ T7532]        do_new_mount+0x2ee/0xa90
[  130.295481][ T7532]        __se_sys_mount+0x317/0x410
[  130.297406][ T7532]        do_syscall_64+0xfa/0xfa0
[  130.299061][ T7532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.301153][ T7532] 
[  130.301153][ T7532] -> #1 (sb_internal#4){.+.+}-{0:0}:
[  130.303697][ T7532]        lock_acquire+0x120/0x360
[  130.305509][ T7532]        ocfs2_start_trans+0x26b/0x6d0
[  130.307274][ T7532]        ocfs2_mknod+0xe93/0x2050
[  130.309136][ T7532]        ocfs2_create+0x1a5/0x440
[  130.310753][ T7532]        path_openat+0x14f4/0x3830
[  130.312493][ T7532]        do_filp_open+0x1fa/0x410
[  130.314159][ T7532]        do_sys_openat2+0x121/0x1c0
[  130.315990][ T7532]        __x64_sys_openat+0x138/0x170
[  130.317662][ T7532]        do_syscall_64+0xfa/0xfa0
[  130.319268][ T7532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.321330][ T7532] 
[  130.321330][ T7532] -> #0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  130.324676][ T7532]        validate_chain+0xb9b/0x2140
[  130.326443][ T7532]        __lock_acquire+0xab9/0xd20
[  130.328061][ T7532]        lock_acquire+0x120/0x360
[  130.329696][ T7532]        down_write+0x96/0x1f0
[  130.331158][ T7532]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  130.333299][ T7532]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  130.335520][ T7532]        ocfs2_lock_allocators+0x2fa/0x5c0
[  130.337464][ T7532]        ocfs2_write_begin_nolock+0x2279/0x4340
[  130.339565][ T7532]        ocfs2_write_begin+0x1bb/0x310
[  130.341388][ T7532]        generic_perform_write+0x2c5/0x900
[  130.343360][ T7532]        ocfs2_file_write_iter+0x157a/0x1d10
[  130.345358][ T7532]        vfs_write+0x5c9/0xb30
[  130.347075][ T7532]        __x64_sys_pwrite64+0x193/0x220
[  130.349187][ T7532]        do_syscall_64+0xfa/0xfa0
[  130.350815][ T7532]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.352836][ T7532] 
[  130.352836][ T7532] other info that might help us debug this:
[  130.352836][ T7532] 
[  130.355983][ T7532] Chain exists of:
[  130.355983][ T7532]   &ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE] --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  130.355983][ T7532] 
[  130.361474][ T7532]  Possible unsafe locking scenario:
[  130.361474][ T7532] 
[  130.363880][ T7532]        CPU0                    CPU1
[  130.365582][ T7532]        ----                    ----
[  130.367554][ T7532]   lock(&ocfs2_file_ip_alloc_sem_key);
[  130.369650][ T7532]                                lock(&oi->ip_xattr_sem);
[  130.372281][ T7532]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  130.374827][ T7532]   lock(&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]);
[  130.377143][ T7532] 
[  130.377143][ T7532]  *** DEADLOCK ***
[  130.377143][ T7532] 
[  130.380057][ T7532] 3 locks held by syz.2.638/7532:
[  130.381520][ T7532]  #0: ffff8880393ea428 (sb_writers#24){.+.+}-{0:0}, at: vfs_write+0x211/0xb30
[  130.384563][ T7532]  #1: ffff88802dc5c3c0 (&sb->s_type->i_mutex_key#38){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x429/0x1d10
[  130.388032][ T7532]  #2: ffff88802dc5c060 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x198/0x310
[  130.391427][ T7532] 
[  130.391427][ T7532] stack backtrace:
[  130.393290][ T7532] CPU: 1 UID: 0 PID: 7532 Comm: syz.2.638 Not tainted syzkaller #0 PREEMPT(full) 
[  130.393302][ T7532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.393308][ T7532] Call Trace:
[  130.393315][ T7532]  <TASK>
[  130.393321][ T7532]  dump_stack_lvl+0x189/0x250
[  130.393335][ T7532]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.393370][ T7532]  ? __pfx__printk+0x10/0x10
[  130.393384][ T7532]  ? print_lock_name+0xde/0x100
[  130.393395][ T7532]  print_circular_bug+0x2ee/0x310
[  130.393407][ T7532]  check_noncircular+0x134/0x160
[  130.393416][ T7532]  validate_chain+0xb9b/0x2140
[  130.393428][ T7532]  __lock_acquire+0xab9/0xd20
[  130.393439][ T7532]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  130.393451][ T7532]  lock_acquire+0x120/0x360
[  130.393460][ T7532]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  130.393472][ T7532]  ? is_bpf_text_address+0x26/0x2b0
[  130.393483][ T7532]  ? kernel_text_address+0xa5/0xe0
[  130.393494][ T7532]  down_write+0x96/0x1f0
[  130.393503][ T7532]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  130.393516][ T7532]  ? __pfx_down_write+0x10/0x10
[  130.393526][ T7532]  ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  130.393540][ T7532]  ? check_noncircular+0xe0/0x160
[  130.393549][ T7532]  ? lockdep_unlock+0x89/0x120
[  130.393558][ T7532]  ? validate_chain+0x897/0x2140
[  130.393565][ T7532]  ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10
[  130.393582][ T7532]  ? __lock_acquire+0xab9/0xd20
[  130.393594][ T7532]  ? do_raw_spin_unlock+0x4d/0x240
[  130.393603][ T7532]  ? _raw_spin_unlock+0x28/0x50
[  130.393612][ T7532]  ? ocfs2_alloc_should_use_local+0x152/0x310
[  130.393622][ T7532]  ? ocfs2_reserve_clusters_with_limit+0x16b/0xba0
[  130.393632][ T7532]  ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  130.393641][ T7532]  ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10
[  130.393650][ T7532]  ? rcu_is_watching+0x15/0xb0
[  130.393657][ T7532]  ? ocfs2_num_free_extents+0x347/0x620
[  130.393665][ T7532]  ? __pfx_ocfs2_num_free_extents+0x10/0x10
[  130.393673][ T7532]  ? __brelse+0x59/0xa0
[  130.393680][ T7532]  ? ocfs2_get_clusters+0x2b3/0xa70
[  130.393691][ T7532]  ocfs2_lock_allocators+0x2fa/0x5c0
[  130.393701][ T7532]  ? __pfx_ocfs2_lock_allocators+0x10/0x10
[  130.393709][ T7532]  ? ocfs2_write_begin_nolock+0xeb9/0x4340
[  130.393717][ T7532]  ? rcu_is_watching+0x15/0xb0
[  130.393723][ T7532]  ? ocfs2_write_begin_nolock+0xeb9/0x4340
[  130.393730][ T7532]  ? kfree+0x4d/0x6d0
[  130.393739][ T7532]  ocfs2_write_begin_nolock+0x2279/0x4340
[  130.393763][ T7532]  ? __pfx_ocfs2_write_begin_nolock+0x10/0x10
[  130.393772][ T7532]  ? __bfs+0x154/0x2a0
[  130.393784][ T7532]  ? check_path+0x21/0x40
[  130.393790][ T7532]  ? check_noncircular+0xe0/0x160
[  130.393799][ T7532]  ? lockdep_unlock+0x89/0x120
[  130.393808][ T7532]  ? validate_chain+0x897/0x2140
[  130.393818][ T7532]  ? __pfx_ocfs2_journal_access_di+0x10/0x10
[  130.393834][ T7532]  ? __lock_acquire+0xab9/0xd20
[  130.393846][ T7532]  ? ocfs2_write_begin+0x198/0x310
[  130.393857][ T7532]  ? down_write+0x162/0x1f0
[  130.393867][ T7532]  ? __pfx_down_write+0x10/0x10
[  130.393879][ T7532]  ocfs2_write_begin+0x1bb/0x310
[  130.393890][ T7532]  ? __pfx_ocfs2_write_begin+0x10/0x10
[  130.393898][ T7532]  ? preempt_schedule_common+0x83/0xd0
[  130.393914][ T7532]  generic_perform_write+0x2c5/0x900
[  130.393925][ T7532]  ? __pfx_generic_perform_write+0x10/0x10
[  130.393933][ T7532]  ? file_update_time+0x416/0x490
[  130.393942][ T7532]  ? __generic_file_write_iter+0xf9/0x230
[  130.393949][ T7532]  ? ocfs2_file_write_iter+0x1551/0x1d10
[  130.393961][ T7532]  ocfs2_file_write_iter+0x157a/0x1d10
[  130.393971][ T7532]  ? aa_file_perm+0x13a/0x1550
[  130.393982][ T7532]  ? __pfx_ocfs2_file_write_iter+0x10/0x10
[  130.393993][ T7532]  ? __pfx_aa_file_perm+0x10/0x10
[  130.394001][ T7532]  ? __lock_acquire+0xab9/0xd20
[  130.394012][ T7532]  ? rcu_read_lock_any_held+0xb3/0x120
[  130.394019][ T7532]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  130.394028][ T7532]  vfs_write+0x5c9/0xb30
[  130.394039][ T7532]  ? __pfx_ocfs2_file_write_iter+0x10/0x10
[  130.394050][ T7532]  ? __pfx_vfs_write+0x10/0x10
[  130.394060][ T7532]  ? __fget_files+0x2a/0x420
[  130.394071][ T7532]  __x64_sys_pwrite64+0x193/0x220
[  130.394081][ T7532]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  130.394090][ T7532]  ? do_syscall_64+0xbe/0xfa0
[  130.394099][ T7532]  do_syscall_64+0xfa/0xfa0
[  130.394106][ T7532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.394113][ T7532]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  130.394123][ T7532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.394131][ T7532] RIP: 0033:0x7fb36eb8ebe9
[  130.394144][ T7532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.394156][ T7532] RSP: 002b:00007fb36fa6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  130.394169][ T7532] RAX: ffffffffffffffda RBX: 00007fb36edc5fa0 RCX: 00007fb36eb8ebe9
[  130.394180][ T7532] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005
[  130.394188][ T7532] RBP: 00007fb36ec11e19 R08: 0000000000000000 R09: 0000000000000000
[  130.394196][ T7532] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[  130.394205][ T7532] R13: 00007fb36edc6038 R14: 00007fb36edc5fa0 R15: 00007ffe3c06dc78
[  130.394222][ T7532]  </TASK>
[  130.603117][   T33] audit: type=1800 audit(1757326574.955:18): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.638" name="file2" dev="loop2" ino=17060 res=0 errno=0
[  130.655920][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  132.780803][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.783395][ T1360] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
09:33:16  Registers:
info registers vcpu 0

CPU#0
RAX=cfae4b183c195300 RBX=ffffffff81979518 RCX=cfae4b183c195300 RDX=0000000000000001
RSI=ffffffff8c0370e0 RDI=ffffffff81979518 RBP=ffffffff8e007ea8 RSP=ffffffff8e007d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fc3eb30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1c12a38
RIP=ffffffff8b7e9dd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32423ffc CR3=0000000104d26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5254197498 00007f5254197470 XMM03=00007f52541974a8 00007f52541974a0
XMM04=00007f5254cfd100 00007f5254197460 XMM05=00007f5254197478 00007f52541974c0
XMM06=00007f52541974b8 00007f52541974b0 XMM07=00007f52541974a8 00007f52541974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5254012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001351 RDI=0000000000001352 RBP=00000000000003f8 RSP=ffffc90006bbe150
R8 =ffff8880204b8237 R9 =1ffff11004097046 R10=dffffc0000000000 R11=ffffffff85526070
R12=dffffc0000000000 R13=ffffffff99d1b92b R14=ffffffff9a02e080 R15=0000000000000000
RIP=ffffffff855260ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb36fa6a6c0 ffffffff 00c00000
GS =0000 ffff8881a39fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c39221d CR3=00000000403f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb36ed97498 00007fb36ed97470 XMM03=00007fb36ed974a8 00007fb36ed974a0
XMM04=00007fb36f8fd100 00007fb36ed97460 XMM05=00007fb36ed97478 00007fb36ed974c0
XMM06=00007fb36ed974b8 00007fb36ed974b0 XMM07=00007fb36ed974a8 00007fb36ed974a0
XMM08=0000000000000000 00001b7d1475bf98 XMM09=0000000000000000 00007fb36ec12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
