last executing test programs:

6.860561824s ago: executing program 2 (id=75):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)

6.61996547s ago: executing program 2 (id=76):
chdir(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x408100)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4)

5.728816042s ago: executing program 2 (id=84):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000)=0x8, 0x4)

5.640575735s ago: executing program 2 (id=86):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x4)

5.549805857s ago: executing program 2 (id=87):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002004})

5.106647238s ago: executing program 2 (id=94):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000200)="c7", &(0x7f0000000380)=@tcp6=r1, 0x1}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.958640448s ago: executing program 32 (id=94):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000200)="c7", &(0x7f0000000380)=@tcp6=r1, 0x1}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.586195389s ago: executing program 1 (id=109):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)

3.509252612s ago: executing program 1 (id=111):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

3.448091721s ago: executing program 1 (id=112):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4002, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)

523.377927ms ago: executing program 0 (id=128):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x11, 0x2, 0x20000000)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000004c0)=0x517, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0)

439.068456ms ago: executing program 3 (id=129):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f020})

438.789132ms ago: executing program 0 (id=130):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

320.359966ms ago: executing program 1 (id=131):
r0 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x9, @pix_mp={0x96, 0x1, 0x5eec3288416e45e, 0x2, 0x9, [{0x0, 0x1}, {0xfffffffc, 0x40}, {0x8, 0x49}, {0x1ff}, {0x12f8, 0x5}, {}, {0x3, 0x8}, {0x3, 0x7}], 0x3, 0x5, 0x3, 0x0, 0x5}}, 0x10000})

320.182642ms ago: executing program 3 (id=132):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000ee", @ANYRES32], 0x50)

320.060792ms ago: executing program 0 (id=133):
io_setup(0xe4, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)
io_destroy(r0)

230.091824ms ago: executing program 3 (id=134):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060500000000000000000000fffefc05000400000000000900020073797a310000000010000300686173683a69702c6d61630005000500020000000500010006"], 0x48}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="27d156241a05"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)

229.774203ms ago: executing program 1 (id=135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
write$FUSE_DIRENTPLUS(r2, 0x0, 0x10)

179.699679ms ago: executing program 3 (id=136):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000001980)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

127.240852ms ago: executing program 0 (id=137):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[<r1=>0x0], 0x1})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[<r3=>0x0], &(0x7f00000000c0), 0x1, r1})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x2, r3, r1, 0xeeeeeeee})

126.714802ms ago: executing program 1 (id=138):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)

52.044396ms ago: executing program 3 (id=139):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x18}, 0x20)

51.790854ms ago: executing program 0 (id=140):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503020000000000000016000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010)

279.251µs ago: executing program 3 (id=141):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@data_err_ignore}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq")

0s ago: executing program 0 (id=142):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19741' (ED25519) to the list of known hosts.
syzkaller login: [   56.640890][ T5793] cgroup: Unknown subsys name 'net'
[   56.747215][ T5793] cgroup: Unknown subsys name 'cpuset'
[   56.750838][ T5793] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.381419][ T5793] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.812185][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.820778][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.823590][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.827351][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.829865][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.891216][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.893807][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.898723][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.903975][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.907013][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.910637][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.913950][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.918388][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.929069][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.934798][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.147158][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   63.207613][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   63.278619][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.281844][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.284865][ T5815] bridge_slave_0: entered allmulticast mode
[   63.288602][ T5815] bridge_slave_0: entered promiscuous mode
[   63.301251][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   63.315650][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.318371][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.321102][ T5815] bridge_slave_1: entered allmulticast mode
[   63.325255][ T5815] bridge_slave_1: entered promiscuous mode
[   63.393646][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.397415][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.400113][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.402790][ T5810] bridge_slave_0: entered allmulticast mode
[   63.407446][ T5810] bridge_slave_0: entered promiscuous mode
[   63.412645][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.415800][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.418727][ T5810] bridge_slave_1: entered allmulticast mode
[   63.422320][ T5810] bridge_slave_1: entered promiscuous mode
[   63.441980][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.505396][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.508130][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.511050][ T5816] bridge_slave_0: entered allmulticast mode
[   63.515101][ T5816] bridge_slave_0: entered promiscuous mode
[   63.522177][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.526848][ T5815] team0: Port device team_slave_0 added
[   63.531109][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.535028][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.537698][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.540395][ T5816] bridge_slave_1: entered allmulticast mode
[   63.544065][ T5816] bridge_slave_1: entered promiscuous mode
[   63.549073][ T5815] team0: Port device team_slave_1 added
[   63.602477][ T5810] team0: Port device team_slave_0 added
[   63.607125][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.611811][ T5810] team0: Port device team_slave_1 added
[   63.614098][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.616473][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.623799][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.629467][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.632877][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.635622][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.645668][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.698358][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.700811][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.709728][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.716314][ T5816] team0: Port device team_slave_0 added
[   63.725902][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.728328][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.737446][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.754840][ T5816] team0: Port device team_slave_1 added
[   63.770391][ T5815] hsr_slave_0: entered promiscuous mode
[   63.773446][ T5815] hsr_slave_1: entered promiscuous mode
[   63.821526][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.824453][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.834074][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.839975][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.842688][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.853016][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.876751][ T5810] hsr_slave_0: entered promiscuous mode
[   63.879448][ T5810] hsr_slave_1: entered promiscuous mode
[   63.881982][ T5810] debugfs: 'hsr0' already exists in 'hsr'
[   63.884002][ T5810] Cannot create hsr debugfs directory
[   64.011882][ T5816] hsr_slave_0: entered promiscuous mode
[   64.015170][ T5816] hsr_slave_1: entered promiscuous mode
[   64.018116][ T5816] debugfs: 'hsr0' already exists in 'hsr'
[   64.020330][ T5816] Cannot create hsr debugfs directory
[   64.289800][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.302535][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.309623][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.327393][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.376358][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.389738][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.396189][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.403085][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.479266][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.489530][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.504886][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.511728][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.617288][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.625159][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.652179][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   64.671119][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.673359][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.679670][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   64.689592][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.692153][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.703350][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.705726][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.722080][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.725494][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.728100][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.765160][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   64.788746][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.791351][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.808658][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.811237][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.836454][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.865394][ T5821] Bluetooth: hci0: command tx timeout
[   64.897714][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.946131][ T5821] Bluetooth: hci1: command tx timeout
[   64.959545][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.017524][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.021511][ T5816] veth0_vlan: entered promiscuous mode
[   65.025650][ T5821] Bluetooth: hci2: command tx timeout
[   65.036889][ T5816] veth1_vlan: entered promiscuous mode
[   65.060005][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.098179][ T5815] veth0_vlan: entered promiscuous mode
[   65.106220][ T5816] veth0_macvtap: entered promiscuous mode
[   65.120850][ T5816] veth1_macvtap: entered promiscuous mode
[   65.128472][ T5815] veth1_vlan: entered promiscuous mode
[   65.131675][ T5810] veth0_vlan: entered promiscuous mode
[   65.141277][ T5810] veth1_vlan: entered promiscuous mode
[   65.153911][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.165984][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.186227][ T5704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.197904][ T5810] veth0_macvtap: entered promiscuous mode
[   65.202279][ T5704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.205702][ T5704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.208231][ T5704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.220127][ T5815] veth0_macvtap: entered promiscuous mode
[   65.232475][ T5810] veth1_macvtap: entered promiscuous mode
[   65.253839][ T5815] veth1_macvtap: entered promiscuous mode
[   65.282649][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.286869][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.288657][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.289378][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.307689][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.328027][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.332004][ T5704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.335253][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.338527][ T5704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.342149][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.350166][ T5704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.362259][ T5704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.366605][ T5704] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.383631][ T5704] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.390614][ T5704] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.400987][ T5704] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.409241][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.476224][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.478865][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.505393][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.509001][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.533909][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.541741][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.568755][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.571024][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.790693][ T5885] loop0: detected capacity change from 0 to 256
[   65.801461][ T5885] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[   65.892095][ T5888] loop2: detected capacity change from 0 to 2048
[   65.936810][ T5895] loop1: detected capacity change from 0 to 128
[   65.940030][ T5888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.973524][   T34] audit: type=1800 audit(1776621187.791:2): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file1" dev="loop2" ino=15 res=0 errno=0
[   65.991497][ T5888] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   66.007439][ T5888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28
[   66.012377][ T5888] EXT4-fs (loop2): This should not happen!! Data will be lost
[   66.012377][ T5888] 
[   66.017835][ T5888] EXT4-fs (loop2): Total free blocks count 0
[   66.019803][ T5888] EXT4-fs (loop2): Free/Dirty block details
[   66.021699][ T5888] EXT4-fs (loop2): free_blocks=66060288
[   66.023787][ T5888] EXT4-fs (loop2): dirty_blocks=256
[   66.026261][ T5888] EXT4-fs (loop2): Block reservation details
[   66.028273][ T5888] EXT4-fs (loop2): i_reserved_data_blocks=16
[   66.045167][ T5899] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   66.379929][ T5904] loop2: detected capacity change from 0 to 128
[   66.409813][ T5904] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.424317][ T5904] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   66.492521][ T5815] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.801559][    T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   66.865221][ T5843] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   66.947373][ T5821] Bluetooth: hci0: command tx timeout
[   66.969608][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   66.973997][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.980268][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   66.985415][    T9] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[   66.989052][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.000077][    T9] usb 1-1: config 0 descriptor??
[   67.014382][ T5843] usb 3-1: Using ep0 maxpacket: 8
[   67.020748][ T5843] usb 3-1: unable to get BOS descriptor or descriptor too short
[   67.025587][ T5843] usb 3-1: config 8 has an invalid interface number: 222 but max is 0
[   67.029501][ T5843] usb 3-1: config 8 has no interface number 0
[   67.031628][ T5843] usb 3-1: config 8 interface 222 has no altsetting 0
[   67.036309][ T5821] Bluetooth: hci1: command tx timeout
[   67.055712][ T5843] usb 3-1: New USB device found, idVendor=3f89, idProduct=3684, bcdDevice=c7.bb
[   67.058350][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.060752][ T5843] usb 3-1: Product: syz
[   67.062150][ T5843] usb 3-1: Manufacturer: syz
[   67.063585][ T5843] usb 3-1: SerialNumber: syz
[   67.114336][ T5821] Bluetooth: hci2: command tx timeout
[   67.293111][ T5843] usb-storage 3-1:8.222: USB Mass Storage device detected
[   67.347328][ T5843] usb 3-1: USB disconnect, device number 2
[   67.418412][    T9] hid-multitouch 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0
[   67.686547][ T5843] usb 1-1: USB disconnect, device number 2
[   67.899399][ T5921] loop2: detected capacity change from 0 to 4096
[   67.906100][ T5921] =======================================================
[   67.906100][ T5921] WARNING: The mand mount option has been deprecated and
[   67.906100][ T5921]          and is ignored by this kernel. Remove the mand
[   67.906100][ T5921]          option from the mount to silence this warning.
[   67.906100][ T5921] =======================================================
[   67.918728][ T5921] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   67.937132][ T5921] ntfs3(loop2): ino=19, mi_enum_attr
[   67.939832][ T5921] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   68.247924][ T5933] cgroup: fork rejected by pids controller in /syz2
[   68.407449][ T5936] loop0: detected capacity change from 0 to 32768
[   68.415758][ T5936] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.24 (5936)
[   68.435267][ T5936] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   68.438132][ T5936] BTRFS info (device loop0): using crc32c checksum algorithm
[   68.440301][ T5936] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   68.537981][ T5936] BTRFS info (device loop0): rebuilding free space tree
[   68.554778][ T5936] BTRFS info (device loop0): disabling free space tree
[   68.557037][ T5936] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   68.560023][ T5936] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   68.566515][ T5936] BTRFS info (device loop0): enabling ssd optimizations
[   68.568671][ T5936] BTRFS info (device loop0): turning on async discard
[   68.570677][ T5936] BTRFS info (device loop0): enabling disk space caching
[   68.572681][ T5936] BTRFS info (device loop0): force clearing of disk cache
[   68.574960][ T5936] BTRFS info (device loop0): use zstd compression, level 3
[   68.597337][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.681717][ T5810] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   68.691114][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.782859][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.796576][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.799451][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.802053][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.805390][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.811004][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.889891][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.901344][ T5957] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.026009][   T55] Bluetooth: hci0: command tx timeout
[   69.042813][ T5965] comedi comedi0: dmm32at: a I/O base address must be specified
[   69.065183][   T13] bridge_slave_1: left allmulticast mode
[   69.066909][   T13] bridge_slave_1: left promiscuous mode
[   69.072230][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.097640][   T13] bridge_slave_0: left allmulticast mode
[   69.099398][   T13] bridge_slave_0: left promiscuous mode
[   69.101286][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.194359][   T55] Bluetooth: hci2: command tx timeout
[   69.304678][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.311763][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.318414][   T13] bond0 (unregistering): Released all slaves
[   69.343212][ T5954] chnl_net:caif_netlink_parms(): no params data found
[   69.565244][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.567460][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.569660][ T5954] bridge_slave_0: entered allmulticast mode
[   69.580300][ T5954] bridge_slave_0: entered promiscuous mode
[   69.608659][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.610941][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.613208][ T5954] bridge_slave_1: entered allmulticast mode
[   69.617567][ T5954] bridge_slave_1: entered promiscuous mode
[   69.661301][   T13] hsr_slave_0: left promiscuous mode
[   69.665020][   T13] hsr_slave_1: left promiscuous mode
[   69.667051][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.669577][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.674966][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.677532][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.690646][   T13] veth1_macvtap: left promiscuous mode
[   69.692691][   T13] veth0_macvtap: left promiscuous mode
[   69.696592][   T13] veth1_vlan: left promiscuous mode
[   69.698467][   T13] veth0_vlan: left promiscuous mode
[   69.921101][   T13] team0 (unregistering): Port device team_slave_1 removed
[   69.928461][   T13] team0 (unregistering): Port device team_slave_0 removed
[   70.002077][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.009815][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.045328][ T5954] team0: Port device team_slave_0 added
[   70.052974][ T5954] team0: Port device team_slave_1 added
[   70.091143][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.093193][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.101956][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.112332][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.118205][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.135326][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.178183][ T5954] hsr_slave_0: entered promiscuous mode
[   70.180552][ T5954] hsr_slave_1: entered promiscuous mode
[   70.324478][ T5819] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   70.339884][ T6016] loop1: detected capacity change from 0 to 128
[   70.427746][ T6019] loop1: detected capacity change from 0 to 4096
[   70.433874][ T6019] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   70.455477][ T6019] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   70.477984][ T5819] usb 1-1: not running at top speed; connect to a high speed hub
[   70.481605][ T5819] usb 1-1: config 11 has an invalid interface number: 95 but max is 0
[   70.493564][ T5819] usb 1-1: config 11 has no interface number 0
[   70.496535][ T5819] usb 1-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86
[   70.501430][ T5819] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   70.505485][ T5819] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10
[   70.509483][ T5819] usb 1-1: config 11 interface 95 has no altsetting 0
[   70.512595][ T5819] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[   70.517309][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[   70.519662][ T5819] usb 1-1: Manufacturer: syz
[   70.523169][ T6004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   70.748197][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.752084][ T5819] usbtouchscreen 1-1:11.95: probe with driver usbtouchscreen failed with error -71
[   70.758650][ T6032] loop1: detected capacity change from 0 to 2048
[   70.763623][ T5819] usb 1-1: USB disconnect, device number 3
[   70.775475][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.783441][ T6032] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   70.799121][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.801806][ T6032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.808088][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.874429][   T55] Bluetooth: hci1: command tx timeout
[   70.883379][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.903942][ T5954] 8021q: adding VLAN 0 to HW filter on device team0
[   70.921803][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.923939][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.936420][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.938643][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.072242][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.102709][ T5954] veth0_vlan: entered promiscuous mode
[   71.105217][   T55] Bluetooth: hci0: command tx timeout
[   71.118045][ T5954] veth1_vlan: entered promiscuous mode
[   71.142047][ T5954] veth0_macvtap: entered promiscuous mode
[   71.146204][ T5954] veth1_macvtap: entered promiscuous mode
[   71.163115][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.177061][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.191778][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.201142][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.204018][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.216024][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.265596][   T55] Bluetooth: hci2: command tx timeout
[   71.271450][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.273821][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.301134][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.306133][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.307181][ T6069] loop1: detected capacity change from 0 to 512
[   71.330229][ T6069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   71.365011][ T6069] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.50: iget: bad i_size value: 38620345925642
[   71.377233][ T6069] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   71.385496][ T6069] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.50: couldn't read orphan inode 15 (err -117)
[   71.394248][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   71.396454][    C0] EXT4-fs (loop1): initial error at time 1776621193: ext4_orphan_get:1391: inode 15
[   71.399192][    C0] EXT4-fs (loop1): last error at time 1776621193: ext4_orphan_get:1391: inode 15
[   71.415526][ T6069] loop1: lost filesystem error report for type 5 error -117
[   71.417150][ T6069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.466357][ T6079] loop2: detected capacity change from 0 to 1024
[   71.482023][ T6079] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   71.560390][ T6069] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.50: bg 0: block 5: invalid block bitmap
[   71.577331][ T6069] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1040 with error 28
[   71.587898][ T6069] EXT4-fs (loop1): This should not happen!! Data will be lost
[   71.587898][ T6069] 
[   71.591210][ T6069] EXT4-fs (loop1): Total free blocks count 0
[   71.593331][ T6069] EXT4-fs (loop1): Free/Dirty block details
[   71.617475][ T6069] EXT4-fs (loop1): free_blocks=0
[   71.619047][ T6069] EXT4-fs (loop1): dirty_blocks=1044
[   71.620594][ T6069] EXT4-fs (loop1): Block reservation details
[   71.622386][ T6069] EXT4-fs (loop1): i_reserved_data_blocks=1044
[   71.685976][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.805044][ T6087] loop2: detected capacity change from 0 to 32768
[   71.918282][ T6085] loop0: detected capacity change from 0 to 40427
[   71.924977][ T6085] F2FS-fs: heap/no_heap options were deprecated
[   71.939868][ T6085] F2FS-fs (loop0): build fault injection rate: 16
[   71.941889][ T6085] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   71.960260][ T6085] F2FS-fs (loop0): invalid crc value
[   71.984005][ T6085] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[   71.995989][ T5819] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   72.003721][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   72.037473][ T6085] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.042441][ T6085] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   72.056262][ T6085] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0x181/0x600
[   72.061860][ T6085] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[   72.068876][ T6085] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[   72.072589][ T6085] F2FS-fs (loop0): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[   72.083090][ T6085] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of __f2fs_find_entry+0x7ba/0xf10
[   72.088021][ T6085] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0
[   72.093687][ T6085] F2FS-fs (loop0): inject evict_inode fail in f2fs_evict_inode of evict+0x61e/0xb10
[   72.125885][ T5810] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __write_node_folio+0x5ba/0x1a50
[   72.130090][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   72.130102][ T5810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.130108][ T5810] Call Trace:
[   72.130112][ T5810]  <TASK>
[   72.130116][ T5810]  dump_stack_lvl+0xe8/0x150
[   72.130131][ T5810]  f2fs_handle_critical_error+0x37c/0x540
[   72.130145][ T5810]  __write_node_folio+0x5dd/0x1a50
[   72.130162][ T5810]  ? __pfx___write_node_folio+0x10/0x10
[   72.130176][ T5810]  ? f2fs_inode_chksum_set+0x13e/0x640
[   72.130189][ T5810]  ? folio_clear_dirty_for_io+0x1d4/0x710
[   72.130201][ T5810]  ? folio_clear_dirty_for_io+0x570/0x710
[   72.130212][ T5810]  ? folio_clear_dirty_for_io+0x1d4/0x710
[   72.130226][ T5810]  f2fs_sync_node_pages+0xeb4/0x1680
[   72.130237][ T5810]  ? add_lock_to_list+0xc7/0x100
[   72.130264][ T5810]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   72.130306][ T5810]  f2fs_write_checkpoint+0xeb8/0x26a0
[   72.130335][ T5810]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   72.130372][ T5810]  kill_f2fs_super+0x314/0x720
[   72.130386][ T5810]  ? __pfx_kill_f2fs_super+0x10/0x10
[   72.130402][ T5810]  ? lockdep_hardirqs_on+0x7a/0x110
[   72.130421][ T5810]  deactivate_locked_super+0xbc/0x130
[   72.130430][ T5810]  cleanup_mnt+0x437/0x4d0
[   72.130440][ T5810]  ? _raw_spin_unlock_irq+0x23/0x50
[   72.130452][ T5810]  task_work_run+0x1d9/0x270
[   72.130462][ T5810]  ? __pfx_task_work_run+0x10/0x10
[   72.130475][ T5810]  exit_to_user_mode_loop+0xed/0x480
[   72.130484][ T5810]  ? rcu_is_watching+0x15/0xb0
[   72.130497][ T5810]  do_syscall_64+0x32d/0xf80
[   72.130508][ T5810]  ? trace_irq_disable+0x3b/0x150
[   72.130519][ T5810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.130529][ T5810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.130536][ T5810] RIP: 0033:0x7faa56f9da57
[   72.130545][ T5810] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   72.130551][ T5810] RSP: 002b:00007ffe7a92b538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   72.130559][ T5810] RAX: 0000000000000000 RBX: 00007faa57032048 RCX: 00007faa56f9da57
[   72.130564][ T5810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7a92b5f0
[   72.130569][ T5810] RBP: 00007ffe7a92b5f0 R08: 00007ffe7a92c5f0 R09: 00000000ffffffff
[   72.130574][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7a92c680
[   72.130578][ T5810] R13: 00007faa57032048 R14: 0000000000011952 R15: 00007ffe7a92c6c0
[   72.130592][ T5810]  </TASK>
[   72.130595][ T5810] F2FS-fs (loop0): Stopped filesystem due to reason: 9
[   72.225766][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.230907][ T5819] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[   72.233497][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.235938][ T5819] usb 2-1: Product: syz
[   72.237128][ T5819] usb 2-1: Manufacturer: syz
[   72.238465][ T5819] usb 2-1: SerialNumber: syz
[   72.241452][ T5819] usb 2-1: config 0 descriptor??
[   72.244516][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   72.398515][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   72.402566][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.403345][ T6101] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   72.410640][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.413562][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   72.418772][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   72.421476][    T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   72.423788][    T9] usb 3-1: Manufacturer: syz
[   72.445746][    T9] usb 3-1: config 0 descriptor??
[   72.461667][ T5819] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -71
[   72.480524][ T5819] usb 2-1: USB disconnect, device number 2
[   72.513714][ T6103] loop0: detected capacity change from 0 to 4096
[   72.536243][ T6103] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   72.601274][ T6103] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB
[   72.683781][ T6105] loop0: detected capacity change from 0 to 256
[   72.701832][ T6105] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[   72.869305][    T9] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[   72.894808][    T9] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[   72.944459][   T55] Bluetooth: hci1: command tx timeout
[   73.130152][ T5843] usb 3-1: USB disconnect, device number 3
[   73.184439][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   73.355460][    T9] usb 1-1: too many configurations: 90, using maximum allowed: 8
[   73.372433][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   73.375456][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.377748][    T9] usb 1-1: Product: syz
[   73.378958][    T9] usb 1-1: Manufacturer: syz
[   73.380287][    T9] usb 1-1: SerialNumber: syz
[   73.385409][    T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   73.387879][ T6128] loop1: detected capacity change from 0 to 32768
[   73.418009][ T5917] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   73.420081][ T6128] ERROR: (device loop1): dbAlloc: the hint is outside the map
[   73.420081][ T6128] 
[   73.436197][ T6128] ERROR: (device loop1): remounting filesystem as read-only
[   73.460613][  T116] blkno = 5002c, nblocks = 1
[   73.462371][  T116] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   73.462371][  T116] 
[   73.835709][ T5819] usb 1-1: USB disconnect, device number 4
[   74.369830][ T6142] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   74.372160][ T6142] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   74.383638][ T6142] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   74.387757][ T6142] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   74.464344][ T5917] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[   74.468823][ T5917] ath9k_htc: Failed to initialize the device
[   74.483496][ T5819] usb 1-1: ath9k_htc: USB layer deinitialized
[   74.495636][ T6142] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   74.497874][ T6142] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   74.579945][ T6155] loop0: detected capacity change from 0 to 1024
[   74.609060][ T6155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   74.625357][ T6155] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.639511][ T6155] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.80: lblock 0 mapped to illegal pblock 0 (length 1)
[   74.654564][ T6155] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   74.659075][ T6155] EXT4-fs (loop0): This should not happen!! Data will be lost
[   74.659075][ T6155] 
[   74.695776][ T6164] loop1: detected capacity change from 0 to 128
[   74.703829][ T6164] zonefs: Bad value for 'errors'
[   74.718028][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   74.777342][ T6170] loop0: detected capacity change from 0 to 512
[   74.780436][ T6170] EXT4-fs: Ignoring removed nobh option
[   74.803346][ T6170] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   74.863200][ T6170] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[   74.873654][ T6170] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.82: inode has both inline data and extents flags
[   74.887572][ T6170] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   74.887991][ T6170] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.82: couldn't read orphan inode 13 (err -117)
[   74.894097][ T6170] loop0: lost filesystem error report for type 5 error -117
[   74.894260][    C0] EXT4-fs (loop0): error count since last fsck: 2
[   74.898307][    C0] EXT4-fs (loop0): initial error at time 1776621196: ext4_orphan_get:1391: inode 13
[   74.901006][    C0] EXT4-fs (loop0): last error at time 1776621196: ext4_orphan_get:1396
[   74.925149][ T6170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.057935][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.492394][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.566247][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.687956][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.735077][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.779917][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.783462][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.806115][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.810918][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.818532][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.836314][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.841396][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.845376][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.849859][   T13] bridge_slave_1: left allmulticast mode
[   75.851963][   T13] bridge_slave_1: left promiscuous mode
[   75.855533][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.859212][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.859400][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.878653][   T13] bridge_slave_0: left allmulticast mode
[   75.880477][   T13] bridge_slave_0: left promiscuous mode
[   75.882569][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.109050][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.113976][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.117664][   T13] bond0 (unregistering): Released all slaves
[   76.142533][ T6217] F2FS-fs (loop1): invalid crc value
[   76.257077][ T6217] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.260627][ T6217] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   76.314387][   T34] audit: type=1800 audit(1776621198.131:3): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.98" name="file1" dev="loop1" ino=10 res=0 errno=0
[   76.361113][ T5816] syz-executor: attempt to access beyond end of device
[   76.361113][ T5816] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   76.377544][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   76.377558][ T5816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.377564][ T5816] Call Trace:
[   76.377569][ T5816]  <TASK>
[   76.377573][ T5816]  dump_stack_lvl+0xe8/0x150
[   76.377589][ T5816]  f2fs_handle_critical_error+0x37c/0x540
[   76.377611][ T5816]  f2fs_write_end_io+0x1273/0x1740
[   76.377633][ T5816]  __submit_merged_bio+0x256/0x700
[   76.377646][ T5816]  __submit_merged_write_cond+0x3c9/0x4e0
[   76.377659][ T5816]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   76.377680][ T5816]  f2fs_write_data_pages+0x287e/0x34f0
[   76.377690][ T5816]  ? is_bpf_text_address+0x26/0x2b0
[   76.377715][ T5816]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   76.377732][ T5816]  ? do_raw_spin_lock+0x12b/0x2f0
[   76.377753][ T5816]  ? do_raw_spin_unlock+0x4d/0x210
[   76.377763][ T5816]  ? __lock_acquire+0x6b5/0x2cf0
[   76.377780][ T5816]  ? __lock_acquire+0x6b5/0x2cf0
[   76.377792][ T5816]  ? do_raw_spin_lock+0x12b/0x2f0
[   76.377804][ T5816]  ? do_raw_spin_unlock+0x4d/0x210
[   76.377812][ T5816]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   76.377823][ T5816]  do_writepages+0x32e/0x550
[   76.377839][ T5816]  ? do_raw_spin_unlock+0x4d/0x210
[   76.377849][ T5816]  filemap_fdatawrite+0x1e9/0x2f0
[   76.377863][ T5816]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   76.377894][ T5816]  ? do_raw_spin_unlock+0x4d/0x210
[   76.377903][ T5816]  f2fs_sync_dirty_inodes+0x30e/0x860
[   76.377922][ T5816]  f2fs_write_checkpoint+0x9df/0x26a0
[   76.377948][ T5816]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   76.377983][ T5816]  kill_f2fs_super+0x314/0x720
[   76.377997][ T5816]  ? __pfx_kill_f2fs_super+0x10/0x10
[   76.378014][ T5816]  ? lockdep_hardirqs_on+0x7a/0x110
[   76.378031][ T5816]  deactivate_locked_super+0xbc/0x130
[   76.378041][ T5816]  cleanup_mnt+0x437/0x4d0
[   76.378051][ T5816]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.378062][ T5816]  task_work_run+0x1d9/0x270
[   76.378073][ T5816]  ? __pfx_task_work_run+0x10/0x10
[   76.378086][ T5816]  exit_to_user_mode_loop+0xed/0x480
[   76.378095][ T5816]  ? rcu_is_watching+0x15/0xb0
[   76.378108][ T5816]  do_syscall_64+0x32d/0xf80
[   76.378119][ T5816]  ? trace_irq_disable+0x3b/0x150
[   76.378129][ T5816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.378140][ T5816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.378148][ T5816] RIP: 0033:0x7f3214d9da57
[   76.378156][ T5816] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   76.378163][ T5816] RSP: 002b:00007fff1351c108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.378172][ T5816] RAX: 0000000000000000 RBX: 00007f3214e32048 RCX: 00007f3214d9da57
[   76.378177][ T5816] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1351c1c0
[   76.378181][ T5816] RBP: 00007fff1351c1c0 R08: 00007fff1351d1c0 R09: 00000000ffffffff
[   76.378186][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1351d250
[   76.378190][ T5816] R13: 00007f3214e32048 R14: 00000000000129c4 R15: 00007fff1351d290
[   76.378229][ T5816]  </TASK>
[   76.378234][ T5816] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   76.503348][ T6212] chnl_net:caif_netlink_parms(): no params data found
[   76.549969][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   76.551993][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   76.713554][ T6248] set_capacity_and_notify: 1 callbacks suppressed
[   76.713571][ T6248] loop1: detected capacity change from 0 to 1024
[   76.772404][   T13] hsr_slave_0: left promiscuous mode
[   76.781696][ T6252] loop0: detected capacity change from 0 to 2048
[   76.786919][   T13] hsr_slave_1: left promiscuous mode
[   76.789841][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.792369][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.806615][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.822248][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.855515][ T6254] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.858680][   T13] veth1_macvtap: left promiscuous mode
[   76.860298][   T13] veth0_macvtap: left promiscuous mode
[   76.867442][   T13] veth1_vlan: left promiscuous mode
[   76.870336][   T13] veth0_vlan: left promiscuous mode
[   76.973344][ T6259] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   77.072863][ T6263] loop0: detected capacity change from 0 to 512
[   77.088176][ T6263] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   77.228077][   T13] team0 (unregistering): Port device team_slave_1 removed
[   77.250637][   T13] team0 (unregistering): Port device team_slave_0 removed
[   77.904707][   T55] Bluetooth: hci1: command tx timeout
[   77.944036][ T6272] loop0: detected capacity change from 0 to 32768
[   77.957408][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.959887][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.962450][ T6212] bridge_slave_0: entered allmulticast mode
[   77.977102][ T6212] bridge_slave_0: entered promiscuous mode
[   77.981367][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.985019][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.987789][ T6212] bridge_slave_1: entered allmulticast mode
[   77.994782][ T6212] bridge_slave_1: entered promiscuous mode
[   77.997179][ T6272] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   78.018031][ T6212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.025200][ T6212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.067339][ T6272] XFS (loop0): Ending clean mount
[   78.091759][ T6212] team0: Port device team_slave_0 added
[   78.105901][ T5810] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   78.118154][ T6212] team0: Port device team_slave_1 added
[   78.133536][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.138462][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.146175][ T6212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.151564][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.160084][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.183639][ T6212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.278373][ T6212] hsr_slave_0: entered promiscuous mode
[   78.292540][ T6212] hsr_slave_1: entered promiscuous mode
[   78.564416][ T6327] loop0: detected capacity change from 0 to 736
[   78.610173][ T6212] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.632122][ T6212] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.650652][ T6327] rock: directory entry would overflow storage
[   78.652468][ T6212] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.656091][ T6327] rock: sig=0x3b10, size=4, remaining=3
[   78.668501][ T6212] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.743959][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.746209][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.876909][ T6212] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.915332][  T825] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.981215][ T6212] 8021q: adding VLAN 0 to HW filter on device team0
[   78.998345][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.001136][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.026996][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.029752][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.085305][ T6212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.245056][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.281973][ T6212] veth0_vlan: entered promiscuous mode
[   79.287614][ T6212] veth1_vlan: entered promiscuous mode
[   79.303561][ T6212] veth0_macvtap: entered promiscuous mode
[   79.308796][ T6212] veth1_macvtap: entered promiscuous mode
[   79.318992][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.326748][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.345373][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.348521][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.351387][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.360531][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.437457][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.444669][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.472109][  T274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.476744][  T274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.688776][ T6416] loop3: detected capacity change from 0 to 1024
[   79.727941][ T6416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.742762][ T6416] capability: warning: `syz.3.122' uses deprecated v2 capabilities in a way that may be insecure
[   79.772614][ T6212] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.949127][ T6439] input: syz1 as /devices/virtual/input/input5
[   79.985406][   T55] Bluetooth: hci1: command tx timeout
[   80.416262][ T6480] loop3: detected capacity change from 0 to 512
[   80.557256][ T6490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.140'.
[   80.595236][ T6492] loop3: detected capacity change from 0 to 512
[   80.623130][ T6492] 
[   80.624113][ T6492] ======================================================
[   80.626603][ T6492] WARNING: possible circular locking dependency detected
[   80.629155][ T6492] syzkaller #0 Not tainted
[   80.630926][ T6492] ------------------------------------------------------
[   80.633471][ T6492] syz.3.141/6492 is trying to acquire lock:
[   80.635668][ T6492] ffff888178466b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[   80.639383][ T6492] 
[   80.639383][ T6492] but task is already holding lock:
[   80.642015][ T6492] ffff8881b8c2d720 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x730
[   80.645490][ T6492] 
[   80.645490][ T6492] which lock already depends on the new lock.
[   80.645490][ T6492] 
[   80.649215][ T6492] 
[   80.649215][ T6492] the existing dependency chain (in reverse order) is:
[   80.652439][ T6492] 
[   80.652439][ T6492] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[   80.655175][ T6492]        down_write+0x96/0x200
[   80.656900][ T6492]        ext4_destroy_inline_data+0x28/0xe0
[   80.659035][ T6492]        ext4_do_writepages+0x51e/0x46e0
[   80.661083][ T6492]        ext4_writepages+0x241/0x3b0
[   80.663052][ T6492]        do_writepages+0x32e/0x550
[   80.664893][ T6492]        file_write_and_wait_range+0x36e/0x440
[   80.667088][ T6492]        generic_buffers_fsync_noflush+0x70/0x1d0
[   80.669425][ T6492]        ext4_sync_file+0x321/0xb70
[   80.671347][ T6492]        ext4_buffered_write_iter+0x2ca/0x3a0
[   80.673485][ T6492]        ext4_file_write_iter+0x298/0x1bf0
[   80.675652][ T6492]        do_iter_readv_writev+0x619/0x8c0
[   80.677650][ T6492]        vfs_writev+0x33c/0x990
[   80.679387][ T6492]        __se_sys_pwritev2+0x184/0x2a0
[   80.681386][ T6492]        do_syscall_64+0x14d/0xf80
[   80.683209][ T6492]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.685486][ T6492] 
[   80.685486][ T6492] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[   80.687933][ T6492]        __lock_acquire+0x15a5/0x2cf0
[   80.689466][ T6492]        lock_acquire+0xf0/0x2e0
[   80.691095][ T6492]        percpu_down_read_internal+0x48/0x1c0
[   80.693301][ T6492]        ext4_writepages+0x205/0x3b0
[   80.695231][ T6492]        do_writepages+0x32e/0x550
[   80.697152][ T6492]        __writeback_single_inode+0x133/0x11a0
[   80.699441][ T6492]        writeback_single_inode+0x4ac/0xdc0
[   80.701623][ T6492]        write_inode_now+0x1c2/0x290
[   80.703624][ T6492]        iput+0x8c1/0xe80
[   80.705271][ T6492]        ext4_xattr_block_set+0x1fd4/0x2ad0
[   80.707485][ T6492]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[   80.709903][ T6492]        __ext4_expand_extra_isize+0x30d/0x400
[   80.712180][ T6492]        __ext4_mark_inode_dirty+0x45c/0x730
[   80.714383][ T6492]        ext4_evict_inode+0x7a1/0xeb0
[   80.716310][ T6492]        evict+0x61e/0xb10
[   80.717942][ T6492]        ext4_orphan_cleanup+0xc38/0x1470
[   80.719660][ T6492]        ext4_fill_super+0x59ff/0x6320
[   80.721248][ T6492]        get_tree_bdev_flags+0x431/0x4f0
[   80.722956][ T6492]        vfs_get_tree+0x92/0x2a0
[   80.724348][ T6492]        do_new_mount+0x341/0xd30
[   80.725672][ T6492]        __se_sys_mount+0x31d/0x420
[   80.727239][ T6492]        do_syscall_64+0x14d/0xf80
[   80.729044][ T6492]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.731009][ T6492] 
[   80.731009][ T6492] other info that might help us debug this:
[   80.731009][ T6492] 
[   80.734447][ T6492]  Possible unsafe locking scenario:
[   80.734447][ T6492] 
[   80.736757][ T6492]        CPU0                    CPU1
[   80.738362][ T6492]        ----                    ----
[   80.739923][ T6492]   lock(&ei->xattr_sem);
[   80.741110][ T6492]                                lock(&sbi->s_writepages_rwsem);
[   80.743271][ T6492]                                lock(&ei->xattr_sem);
[   80.745358][ T6492]   rlock(&sbi->s_writepages_rwsem);
[   80.746821][ T6492] 
[   80.746821][ T6492]  *** DEADLOCK ***
[   80.746821][ T6492] 
[   80.749162][ T6492] 3 locks held by syz.3.141/6492:
[   80.750540][ T6492]  #0: ffff888173a100e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[   80.753399][ T6492]  #1: ffff888173a10610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x274/0xeb0
[   80.756162][ T6492]  #2: ffff8881b8c2d720 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x730
[   80.759411][ T6492] 
[   80.759411][ T6492] stack backtrace:
[   80.761034][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.3.141 Not tainted syzkaller #0 PREEMPT(full) 
[   80.761045][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.761051][ T6492] Call Trace:
[   80.761056][ T6492]  <TASK>
[   80.761061][ T6492]  dump_stack_lvl+0xe8/0x150
[   80.761075][ T6492]  print_circular_bug+0x2e1/0x300
[   80.761089][ T6492]  check_noncircular+0x12e/0x150
[   80.761101][ T6492]  __lock_acquire+0x15a5/0x2cf0
[   80.761111][ T6492]  ? rcu_is_watching+0x15/0xb0
[   80.761124][ T6492]  ? __lock_acquire+0x6b5/0x2cf0
[   80.761136][ T6492]  lock_acquire+0xf0/0x2e0
[   80.761144][ T6492]  ? ext4_writepages+0x205/0x3b0
[   80.761156][ T6492]  percpu_down_read_internal+0x48/0x1c0
[   80.761165][ T6492]  ? ext4_writepages+0x205/0x3b0
[   80.761175][ T6492]  ext4_writepages+0x205/0x3b0
[   80.761185][ T6492]  ? __pfx_ext4_writepages+0x10/0x10
[   80.761197][ T6492]  ? ext4_fc_track_inode+0x153/0xc60
[   80.761208][ T6492]  ? from_kprojid+0x1d9/0x6a0
[   80.761218][ T6492]  ? __pfx_ext4_writepages+0x10/0x10
[   80.761227][ T6492]  do_writepages+0x32e/0x550
[   80.761240][ T6492]  __writeback_single_inode+0x133/0x11a0
[   80.761251][ T6492]  ? do_raw_spin_unlock+0x4d/0x210
[   80.761259][ T6492]  writeback_single_inode+0x4ac/0xdc0
[   80.761269][ T6492]  write_inode_now+0x1c2/0x290
[   80.761278][ T6492]  ? __pfx_write_inode_now+0x10/0x10
[   80.761293][ T6492]  ? do_raw_spin_unlock+0x4d/0x210
[   80.761300][ T6492]  iput+0x8c1/0xe80
[   80.761308][ T6492]  ext4_xattr_block_set+0x1fd4/0x2ad0
[   80.761322][ T6492]  ? __pfx_check_xattrs+0x10/0x10
[   80.761331][ T6492]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[   80.761340][ T6492]  ? ext4_xattr_block_find+0x2d4/0x350
[   80.761350][ T6492]  ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[   80.761365][ T6492]  __ext4_expand_extra_isize+0x30d/0x400
[   80.761376][ T6492]  __ext4_mark_inode_dirty+0x45c/0x730
[   80.761385][ T6492]  ext4_evict_inode+0x7a1/0xeb0
[   80.761393][ T6492]  ? __pfx_ext4_evict_inode+0x10/0x10
[   80.761400][ T6492]  ? do_raw_spin_unlock+0x4d/0x210
[   80.761407][ T6492]  ? __pfx_ext4_evict_inode+0x10/0x10
[   80.761414][ T6492]  evict+0x61e/0xb10
[   80.761424][ T6492]  ? __pfx_evict+0x10/0x10
[   80.761432][ T6492]  ? _raw_spin_unlock+0x28/0x50
[   80.761442][ T6492]  ? iput+0xb25/0xe80
[   80.761449][ T6492]  ext4_orphan_cleanup+0xc38/0x1470
[   80.761458][ T6492]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[   80.761466][ T6492]  ? ext4_register_li_request+0x640/0x720
[   80.761477][ T6492]  ? errseq_check_and_advance+0x66/0x120
[   80.761485][ T6492]  ext4_fill_super+0x59ff/0x6320
[   80.761499][ T6492]  ? __pfx_ext4_fill_super+0x10/0x10
[   80.761508][ T6492]  ? snprintf+0xe8/0x140
[   80.761516][ T6492]  ? __pfx_snprintf+0x10/0x10
[   80.761523][ T6492]  ? set_blocksize+0x1c9/0x440
[   80.761532][ T6492]  ? sb_set_blocksize+0x155/0x240
[   80.761539][ T6492]  ? setup_bdev_super+0x4c1/0x5b0
[   80.761549][ T6492]  get_tree_bdev_flags+0x431/0x4f0
[   80.761557][ T6492]  ? __pfx_ext4_fill_super+0x10/0x10
[   80.761567][ T6492]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   80.761577][ T6492]  vfs_get_tree+0x92/0x2a0
[   80.761586][ T6492]  do_new_mount+0x341/0xd30
[   80.761596][ T6492]  ? apparmor_capable+0x126/0x170
[   80.761604][ T6492]  ? __pfx_do_new_mount+0x10/0x10
[   80.761614][ T6492]  ? ns_capable+0x89/0xe0
[   80.761624][ T6492]  ? user_path_at+0xd4/0x160
[   80.761632][ T6492]  __se_sys_mount+0x31d/0x420
[   80.761639][ T6492]  ? __pfx___se_sys_mount+0x10/0x10
[   80.761647][ T6492]  ? __x64_sys_mount+0x20/0xc0
[   80.761654][ T6492]  do_syscall_64+0x14d/0xf80
[   80.761666][ T6492]  ? trace_irq_disable+0x3b/0x150
[   80.761677][ T6492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.761685][ T6492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.761693][ T6492] RIP: 0033:0x7efdc2b9da8a
[   80.761703][ T6492] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.761710][ T6492] RSP: 002b:00007efdc3ae1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   80.761720][ T6492] RAX: ffffffffffffffda RBX: 00007efdc3ae1ee0 RCX: 00007efdc2b9da8a
[   80.761726][ T6492] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007efdc3ae1ea0
[   80.761731][ T6492] RBP: 0000200000000180 R08: 00007efdc3ae1ee0 R09: 0000000000000000
[   80.761736][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[   80.761742][ T6492] R13: 00007efdc3ae1ea0 R14: 000000000000047a R15: 000000000000002c
[   80.761750][ T6492]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   80.952287][ T6492] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.141: iget: bad extra_isize 90 (inode size 256)
[   80.957289][ T6492] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   80.957551][ T6492] EXT4-fs (loop3): Remounting filesystem read-only
[   80.963385][ T6492] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   80.968052][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   80.968066][    C1] EXT4-fs (loop3): initial error at time 1776621202: ext4_xattr_inode_iget:441: inode 11
[   80.968087][    C1] EXT4-fs (loop3): last error at time 1776621202: ext4_xattr_inode_iget:441: inode 11
[   80.977657][ T6492] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -30)
[   80.981372][ T6492] EXT4-fs (loop3): 1 orphan inode deleted
[   81.006183][ T6492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.066151][ T6492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.407431][ T5874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.457049][ T5874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.506719][ T5874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.558047][ T5874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.621625][ T5874] bridge_slave_1: left allmulticast mode
[   81.623357][ T5874] bridge_slave_1: left promiscuous mode
[   81.628594][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.632342][ T5874] bridge_slave_0: left allmulticast mode
[   81.634126][ T5874] bridge_slave_0: left promiscuous mode
[   81.636488][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.726450][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.734888][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.738878][ T5874] bond0 (unregistering): Released all slaves
[   81.922894][ T5874] hsr_slave_0: left promiscuous mode
[   81.926488][ T5874] hsr_slave_1: left promiscuous mode
[   81.928444][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.930580][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.932939][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.936583][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.940712][ T5874] veth1_macvtap: left promiscuous mode
[   81.942309][ T5874] veth0_macvtap: left promiscuous mode
[   81.944340][ T5874] veth1_vlan: left promiscuous mode
[   81.945991][ T5874] veth0_vlan: left promiscuous mode
[   82.017889][ T5874] team0 (unregistering): Port device team_slave_1 removed
[   82.023298][ T5874] team0 (unregistering): Port device team_slave_0 removed
[   82.711743][ T5874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.750171][ T5874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.778213][ T5874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.820109][ T5874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.884483][ T5874] bridge_slave_1: left allmulticast mode
[   82.886582][ T5874] bridge_slave_1: left promiscuous mode
[   82.888967][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.893307][ T5874] bridge_slave_0: left allmulticast mode
[   82.897134][ T5874] bridge_slave_0: left promiscuous mode
[   82.899303][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.977292][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.981854][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.986108][ T5874] bond0 (unregistering): Released all slaves
[   83.166444][ T5874] hsr_slave_0: left promiscuous mode
[   83.168998][ T5874] hsr_slave_1: left promiscuous mode
[   83.171436][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.174445][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.178041][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.180828][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.205398][ T5874] veth1_macvtap: left promiscuous mode
[   83.207480][ T5874] veth0_macvtap: left promiscuous mode
[   83.209658][ T5874] veth1_vlan: left promiscuous mode
[   83.211696][ T5874] veth0_vlan: left promiscuous mode
[   83.291635][ T5874] team0 (unregistering): Port device team_slave_1 removed
[   83.299013][ T5874] team0 (unregistering): Port device team_slave_0 removed
[   86.784918][   T33] cfg80211: failed to load regulatory.db
