last executing test programs:

5.200260265s ago: executing program 0 (id=163):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x56c})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00007bf000/0x3000)=nil, 0x3000}, 0x4})
syz_usb_connect(0x2, 0xdeb, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0xfa, 0xcc, 0x71, 0x8, 0xbda, 0x817f, 0xc5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd9, 0x3, 0xb, 0x4, 0x20, 0x5, [{{0x9, 0x4, 0x4c, 0x0, 0xc, 0xff, 0xff, 0xff, 0x8, [@generic={0xfa, 0x31, "177aa3b7520885f70354d7fa3d933b11819659dc4f236e6af9dc7d4c8683c5c9f877a3622e9de5dd10f4a0b83c464fcd2c79b4c60cdbd6a122501f0a9c05293a3df509b7a58aebf713367806e73e8166c95da3660d0d9bcfe1f12f009fecd76df0c9ba18f98c5a3e256eddad4168b83022d301ab971404bac6eb2db34301ff9efdf978e73c76cb03f013e6aa5744890a54b90cb841dd96937ef284df511d7e2053479531dc09de5f17395a6fb99e33aaa9b694b5f490ed453ea8b99f7cbe4b8c9d712c724b6ece8825e0f2b3a2f5696fb0ca779ed3c20333a59b966c77180e9a8c142fb6331b1d98d2ce13796e1268475d96ba51ecae447e"}], [{{0x9, 0x5, 0x3, 0x8, 0x40, 0x3, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1, 0x2, 0x18}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x5f, 0x7, 0x0, [@generic={0x5c, 0x7, "14c02a1fe0094d9be2ecaf9c3732e2b07873bf8089ebdc86b23d341a46893469a1c52a4cfb0489fa75b5732ef89c24bebadab511287f9689fcbd154effe7370553ec642709c6b29883c07e39e4d9babbe2e89897fb1ec7c853f9"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0xa, 0x3, 0x2}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x8f, 0x8, 0x3b, [@generic={0x6a, 0x23, "b9b6d9310eb91ec7c05b351d3a035db9b230f30b155fc0dc1703af46c57ba9fe484ba7e7f9b83145eda1ac29b3cea11fbb53e6b07fff5e3f96716052e2a30d42ef51c88ebb2c70207182c482356c3bd780a78e336faaba0dfe9d89043e930ee80cc4327b40a9fcbb"}, @generic={0x4e, 0xc, "b4689d01c456fa9d3b1480c189e132b9dc15ebf8ef8b4e15e2d1a9f6798bdc78710f5040d9f38cbd3d83730b7039f61b3d8c9c0331cc55a9970257803675d32b0618b9ff3192ae2b8a96e673"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xc, 0x2, 0x0, [@generic={0xf2, 0xc, "6272a224014ca78ad8f7302287be020ac277cb2b7d5addecfe41b324a76c4b9025be56151f0a2f8d4b231231b819f53943532be24b7d7d88a6eda14de8c0306ccd697da791dfd863f482b2991bbedd8a448a5c7a5d1b15d5ca17bcb52597c637e87c520e379d2d44dc10ffb6946f5e661b4dd53f6feaff0348658d1f2c573181b0ef1983a9e0af4935ad2060454b89a050159f8220a5a23f13683db1e2d9c2d153ef623075105b4d9264c88e894e7c079019b047645abc374114fc1bb753caf40963ed2cf275efeed46e488474de47c424f5dd7d2291829c703b509bb93c4731c426a6ae7113f2bdcd0b93e38256e0b0"}, @generic={0x8e, 0x6, "672d4a5faf8548fe6dde4074a0f7fd376ea139241ca22aed9d5b0fc6e3bc265c9b0077c6ab837c1859c15e0230d1474214070765bc2a2ccaca0a9710d002f2c8254641d9f90b13ae7f01c12578a11fc10fe171bf82cd184e56e5b38870852351a1922a1f7fa75f010ddad7da4e6bb93e4f934f6e628312dbd66ae767add8a312ae54299ced8226141fd22606"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x240, 0x0, 0xf4, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x2}]}}, {{0x9, 0x5, 0xa, 0x4, 0x30, 0x1, 0xa3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x7f97}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x5, 0x3, 0x5, [@generic={0x10, 0xc, "f7fc2157a81f717a5e34c28072cc"}, @generic={0x5f, 0x4, "d7ef1c629fe99626a87014e4c35eab65bf38175d85c3c5f6ab039e34fb3c7bc1f80ab5d41710fc48d1b4b1de82b12278d80555342c58b88002b7f6dbae14389a2c7f0671dc65ef36c186e1b6e2bb6a674ab47283cbb0b0b466f1826b8a"}]}}, {{0x9, 0x5, 0xa1056a8234d26d26, 0x2, 0x40, 0xc5, 0x1, 0x8, [@generic={0x7a, 0x3, "5edfb50eb0ddb94cabe2b9598acf93770ccb2150290294134236e405d682a63f928e339b014ce665a90dd23d994ca83c44716b49fe600ba0a6a41a2d2e7d711112485d39b9ce149ff4c17015a3ea6a18b33d3578269b588eee6e548e94a32f6b245daa21f63d825929bd768a22dc1abe3b07a81ba37a4c83"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x68, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x6, 0x14, 0x2, [@generic={0xa2, 0xc, "a48a35779b7fedc9903b6c28702d13a38dc0922525745083d8f2670739f8fb28c20d273933521e84035814ea1f64865cd0fe345057ccbe1107becd454762e654f068a1d47fa6dbb1e3b24933d26f7933ca58b7dce13e358b6dda2076b4cca4a2d9479e0574f7fe8ed491d801f9e722d5493855bb0b80dea95ffeb8e85b0dae286af8a3b9dce142ffa961f9957c3808f1780152c7eda4b22346a41c167e46be25"}]}}]}}, {{0x9, 0x4, 0x9e, 0x4, 0xe, 0xa, 0x0, 0x0, 0x5, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x8, 0x6}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x25, 0x3, 0xb, 0x9}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x1, 0xe, 0xff, "c13287", '2'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x0, 0x9, "40ce"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xb8, 0x4, 0x81, 0x90, "5490de14"}]}], [{{0x9, 0x5, 0x80, 0xc, 0x400, 0x40, 0xe, 0x7d, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xfff}]}}, {{0x9, 0x5, 0xf, 0x9, 0x200, 0x9, 0x6, 0x40}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x1, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x7ff}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x4, 0x4, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x6, 0x6, 0x6, [@generic={0xfe, 0x6, "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"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x6, 0xa1, 0x19}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x3, 0xeb, 0x5, [@generic={0x83, 0x8, "82da2a92ef61d666be24c88c4918af0a1f2b43eaef730fcd2cb43cdf90624b560b693e8d3cce3cb1e786d3b0f3070afd3b0c9f986cc37bd4f7134ae2800c99cf98e1ac06866556702751de0f29a302fa3d9f8f8b8633de85bf8f56c58abd84b365f5663ed65d55be2a3aa05a675a544699678b90a8fb42a1126df373a1ab594ee5"}, @generic={0x48, 0x7, "57e79fe2c5e29b1e777c3237cd46cc87035cd6762773377d86bfaa34cda562d5d98dce3dcddfdd55c19d58d2f39ddb53f3d9dac68748f6fab20eed3bdeb58a992e1693c74798"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x5, 0x6, 0xe6}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x0, 0x9, 0xf, [@generic={0x29, 0x2b, "2633b6ccf8e3768d8faa8dd7ec47e452eff00871acfda904664e9832fe92c16ff8e5a3a4a65b48"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x9, 0x4, 0xbd}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x6, 0x1, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x76, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0x49, 0x6}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x4, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x2, 0x6}}]}}, {{0x9, 0x4, 0x44, 0x2, 0xb, 0xff, 0x22, 0x50, 0x80, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xd, 0x9, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0xe, 0x54, 'Y'}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0xa2, 0x3, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}, @generic={0xe3, 0x8, "a13659fd918bdb1a2d634c628b3949cf9db04f6150f015a20a3bcd02cf3301b426e90730cad9b1d9cb3f91d610e1051c4cbaa5567b15896483f48273f66f6c0a1fcf28e24690f85540eed474774bf03d1f81e7030a5dea7ead196c85adecc8a5444dc022d7edf35f1f4900b6305f6c93267b2ee94d970a8f6e8f2f5b7bc8caf63e2a5b26c164b944419372c8b53fff525cc46d4dee8b2c43242873bf7a30cb5d9d9679e9c7e4a8909089f888dc926e153be7aa626168f14d16dea026efc157ce130d7ada092910c67da78befed3026d425e3d2b1bbf9a0d9e1f23ac830c5804fa7"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x240, 0x2, 0x1d, 0x1}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x5, 0xc, 0xe}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xef, 0x7f, 0xe4, [@generic={0x44, 0x23, "ae80feb8bad90117a4fd275bdac678e81e5c7182e269b9468e00fe5d06206bfeaf14514584f73838097265622688b6cca5ed11fb3fb2aa46516ba71ec30542ed3303"}, @generic={0x2e, 0x1, "7dd51038090536529dee59e881bfa1946a3e080f1a4ad95341ef598d69a8dc1fa3508b9be17b82971afabe0a"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x4, 0xac, 0x9}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x3, 0x3, 0xf9, [@generic={0x93, 0x1, "a54203091fc34848e0841fd75a3b4cd1b8ce359c3272097d5e78627abf9be49209bdab10de9ada7f9098a4ef86fa3a4a63db1d6ab7259579e8a79dd1d426f43c083664fe93ec51264795f2b4674ac2e4d36c518e749f87fd3259f033fea82fd842893d12da7457a5401f92b81b967e15a06842ed6dcee215066c6dff6902e3233f2e651a8cdd86f22d48fa5701c266f40b"}, @generic={0xa7, 0x31, "cf85caff7fe9eb227b9ff7c51be634a64d8c7fca13026fd59b98ace204ae203a386e26721c2bff7646414589c1989d99186c1ca1a2395e529aa0dfe16fffe98656d82007455fa5d349e3b46391a332253f1db877af1818b67e861ba32191c4faac26b74f66dfbb20a42f0e84a016f39299b263645c983576c18b1fa33051835b352c7b94856beaafe6d90e5f5bcf3798c974f0275c5d98e7d17cc2d497abd76a5922f792ae"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xff, 0x7f, 0x10, [@generic={0x1c, 0x4, "46ba099fb9950c91fc022fba620d5f8f1e896790ff0b001b5607"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x20}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0xe, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1ff}, @generic={0x9, 0x7, "416479454f9e63"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x9, 0x2, 0x10, [@generic={0x5c, 0x3, "e310d339eed79b58811ac00da062fbcd30f13b0f8db14598152f410ee91a9f55f5ea946b885c7b77af89e29526e2303e5daaad9bc140988837f06291defd2bf374a1dff61b07c58c33b3762cd1405950c02e1e8bb1f5a3e3067d"}, @generic={0xf6, 0xc, "5ff825b3cf56f4d8209a7288a2d977c526396426ff3c248c6c1620536d811ba18ea4584875194793f8d20dc2bd3414b51b213432088f3de023ac6a5b827f2e23b7fce2b8db9b69c5c8f7c5ef0dc94f770cddd6e23a22245aa0a6b37ec777eb253eb8cb43f0cfd93298b9f8471cb664d3d6d82bfb7e896d8db27fe5d4533557dea4b6f10ff7ec733170ea5f14e952dd87927f294de6515e37104f92dfe222e4bf1ad4b7fbf8547fdfc43ce42feee74980aaeba60b793e91e06c5bad7f436bcc1a7892e7adb88af8bb038bf19e7e31f8280fd48941d32a8fc840601b428652cf21a559c17990ff68f31106c1ed82cb0a683378a97e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x2, 0x1, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x76b}, @generic={0xc7, 0x23, "894139625a1d13c3595ad732c622e02573ef25a676e0852ec96f6e9f66bacd8fc93938c27192ef49d79e997f2b04247f2c53b7070ce8d7fd902a3ce706c10e52d313db173c6b00b617751dcbbcef2e2978e0520860b1e1f7d56e071d99aabfc2575a9ba6c51377d855727d889115135ef4f2bbf471d62732128bea5eb190179dc06744899b5e91c98934b12128b5297f8d4bedf4d26f24a5f0f00348c42da0fc1434b485bd8a5437fed8677a20af2894d11c2ac4ddf0c79c9b6642c27361397824326a6a79"}]}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x99, 0x7, 0xde, 0x8, 0x79}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x2, 0x200}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001180)=@lang_id={0x4}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x6c, &(0x7f0000001200)=@string={0x6c, 0x3, "fcb03c44a3af53a99930e82562463dafbe33f2b3a7fdf6f179f06c32e814211d965207592f906d74a27f6f84e019feaa6ef0d87fac633d2dfc743d92b97034b591b387f42d3ef17a1298887def12411a3a744d8123ddae6cff99cb53114a576d2b901130588f88e5a5fd"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x81a}}]})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})

4.070013539s ago: executing program 2 (id=167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x60000}]}, 0x28}}, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x703})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

3.443034364s ago: executing program 2 (id=168):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x50009404, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = creat(0x0, 0x1bf)
close(r1)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffd, 0x1, @mcast1, @mcast2, 0x8000, 0x0, 0x2000002}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

3.175105378s ago: executing program 0 (id=169):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000009060102000000000000000003000100090002007379fa3100000000050001000700000004000780869f571ae2be87ab2ea18dc80b42147d6180bbe88353e6c153f4845d6698c66980a08bfbbf485cfa08aeb805c816105798a88a37e690a691e0261e"], 0x2c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x0, 0xeffb, 0x9)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
truncate(&(0x7f0000000480)='./file1\x00', 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) (async)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000009060102000000000000000003000100090002007379fa3100000000050001000700000004000780869f571ae2be87ab2ea18dc80b42147d6180bbe88353e6c153f4845d6698c66980a08bfbbf485cfa08aeb805c816105798a88a37e690a691e0261e"], 0x2c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async)
fallocate(r2, 0x0, 0xeffb, 0x9) (async)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) (async)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") (async)
truncate(&(0x7f0000000480)='./file1\x00', 0x0) (async)

2.653508859s ago: executing program 2 (id=171):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x32cbf000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
socket$packet(0x11, 0xa, 0x300) (async)
socket$packet(0x11, 0xa, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf253d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000024020000080000000100000008005d000000000008005d000000000008005d0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x64}, 0xc8)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r2, 0x25, &(0x7f0000000580)={0x1, 0x0, 0x8, 0x6})
fcntl$lock(r2, 0x24, &(0x7f00000003c0)={0x2, 0x0, 0x5, 0x10})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040015}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2d080045e90028006500000206907864010102ac1414bb4e204e", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2d080045e90028006500000206907864010102ac1414bb4e204e", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x0, r5}) (async)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x0, r5})
mmap$xdp(&(0x7f000027d000/0x1000)=nil, 0x1000, 0x4, 0x4010, r5, 0x100000000)

2.521514631s ago: executing program 0 (id=172):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in=@private=0xf0, 0x1ffe, 0xff, 0xfffc, 0x41, 0x2}, {0x6, 0x3, 0xfffffffffffffffe, 0x10000000, 0x4, 0x0, 0x80000000000000, 0xfffffffffffffffc}, {0x402, 0x3, 0x0, 0x800}, 0x4000008, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d6, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000008100)='/sys/power/pm_freeze_timeout', 0x68800, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc82, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0xeffffffa, 0xb, 0xfffffff8, 0xfffffffc, 0x7f, "db5909003a7f000700"})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff)
write$eventfd(r1, &(0x7f00000000c0)=0x9, 0x8)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4f3}, {0x8000, 0x0, 0xffa}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0xcf6c, 0x0, 0x8, 0x4, 0x0, 0xb})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000004, 0xfffffffd, 0x0, 0x0, 0x100000, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
sendmsg$nl_route(r6, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100002000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x50)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8000000000000a, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.713577576s ago: executing program 2 (id=173):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x603, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x1f, 0x0, {}, {0xfff1, 0x2}, {0x6, 0xe}}}, 0x24}}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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")
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f2600011904"], 0x7)
chdir(&(0x7f0000000040)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000300)={0x6, 0x7, 0x0, 0x7e})

1.473296098s ago: executing program 0 (id=174):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0)
setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x6, 0x4)
syz_io_uring_setup(0x61fe, &(0x7f0000000080)={0x0, 0x5280, 0x20000, 0x1, 0x16a}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1, 0x5cc}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x164, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, &(0x7f0000000040))
syz_io_uring_submit(r2, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x28, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}})

1.253538317s ago: executing program 2 (id=175):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[{@barrier}, {@errors_remount}, {@noquota}, {@jqfmt_vfsv1}, {@noload}, {@barrier}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ftruncate(r4, 0xc17a)
ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000080)={0x8})
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x1000040}, 0x1c)
write$sndseq(r0, &(0x7f0000000200)=[{0x40, 0x40, 0xff, 0x5, @tick=0x5, {0xf, 0xa}, {0x6, 0xe}, @time=@tick=0x4}, {0xb, 0xff, 0x2, 0x1, @time={0x2f03a383, 0x1}, {0x6, 0x28}, {0x8, 0x40}, @queue={0x1, {0x3, 0x8}}}], 0x38)
read$FUSE(r1, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r5, 0xda0, 0x2001)
pwrite64(r1, &(0x7f0000000880)='u', 0x1, 0x83)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))

912.62635ms ago: executing program 0 (id=177):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open(0x0, 0x28202, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x21, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a)
socket(0x2b, 0x80801, 0x1)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20)

812.535767ms ago: executing program 2 (id=178):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_usb_connect(0x5, 0x88f, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x42, 0x3e, 0xff, 0x40, 0x424, 0xc001, 0x79c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87d, 0x4, 0xc, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0xf1, 0x4, 0xc9, 0x11, 0xcc, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0x2}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x5, "4614"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x5, 0x6, 0x6, 0x6, 0x7}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x1, 0x5, [0x4, 0x1, 0x9, 0x3, 0x2], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x4, 0x9, 0x81, 0x8, 0xfa}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x9, "cb69080c"}]}], [{{0x9, 0x5, 0xc, 0xc, 0x400, 0x9, 0x3, 0x59}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x9, 0xf8, 0x6, [@generic={0x5c, 0x31, "7cd692a64b8184706ce9ac32c338c2db7f50d263318efed1cd4624d377a8f2d7f7bf824772d6cb161a5ec5ddd9a7e4561e374b45eac90ba949da4cf5bbf81ce65131162d9d793895636dfcf3eef0f6a6a991afc6d0a54083a3c8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x9, 0x5, 0x9, [@generic={0x96, 0x23, "094e7afffdc12c6c8d266f2068112b545d03e6a70bbdfb9230080380b2d65aab0aee7c54e51d3d9333d75874b0202ec08fbac1e5fb5f84b8ac62c33cbf753e1392e3124a33bfd74a5892da0868b906239e2aaf7ad1782c4ca6796a3c7cb15d45ba1a36ca6b39ee88e1f08b97b2fe0e3a585461f61eeb5ab8bb1e11ad6ac937fa2859023c5dddb552b5f2b08007166f98e2cf7a6a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x7d, 0xdd, 0xe}}]}}, {{0x9, 0x4, 0x91, 0x36, 0xb, 0x3e, 0x93, 0x93, 0x1, [@generic={0xcc, 0xd, "1e1526e78717aee92c7897dfe6c252e82d4512d469a10352f894e96e1c5a1424a622339f4e65fd81a40a12760fbfa7cdf42db36182d3dceaeda671d14d7f619ca2de3251adc8abc74f811f9179dc4cc651636d740e7f11ac6a9d8ab163b0c4c6179dd3ef847ddb29eef42925ec500e63f5d3c49d2ae39e4148ba5159eea319b5c99869ab064daec50248f8df5c2d950df63f6b75765d29bfc239811940329917677bc08d065a01b911ee5e1e65dcc759627eeb2a26fbf6bf95523a2d675a13638ebd719ce69bd0c0d280"}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0xbe, 0x0, 0x10, [@generic={0x9f, 0x6, "9b4f8226ed00f19ea1dc58cfdfbbf4dbfff1be7630f7d257d1693e9458f0196a96aa58f3015b1cf0b059bb6512244b5fd410a536e82826703cdc461319966b19f8feb568c4c25f7db2f6cc2df7f312def7bf0acbad28e0a89e8eb79fb078c93f576be61135a7ba3d721637226dfc8d2208aef8b1486b26f8ff80b812401304e7553266070599798211aedc8f129bc18e79aae2cebcd5f2aec49fd3eea1"}, @generic={0xcd, 0x8, "bff057a5fcc504385208896f7478f610ff196d436f959518b755faaf98e67a0a21e7d27d18e04ad826dd1b2a4ded62bb6cfea8e41d3fb28ed23ad9160477ee0389c6f61fa15475bef950e6e8e3b98aba1724c2d7d6af00e8824a02fae46c51ac11d5219b133bd596002b9fedb9613090b638ebc6fbde942cbc704791f2a13f7d46676b3aa0e4a84044074fac6ec15453b62ab99a52e08a250c1f941aadfdcb564a0d967a539ec7f091e4201b693508be5cc57e03bccccd6d4decb01b296505b31c218d52b7101512ce8def"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x7f, 0xd}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x2, 0xff, 0xf, [@generic={0x55, 0x21, "c7ee054110e81ed912ca8ab575fd7df48aa37a9da41ea7205a5b2f5428e93316c1a4f91611f86a68eeadcefaa2b855318ca404274f01d3c15867586aa3841c5125b306d1bfd57bcfe982b538bc5b5e41e34a7c"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x28, 0x1}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0xf, 0xea, 0x2}}, {{0x9, 0x5, 0xa, 0x14, 0x3ff, 0x4, 0x7, 0x8}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x2, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x1, 0x9f, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x10, 0x27, 0x6}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x3, 0xff, 0xfd}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x2e, 0x9, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x9, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0xa2, 0x6, 0x9, 0x1d, 0x2d, 0x73, 0x2, [], [{{0x9, 0x5, 0x9, 0xc, 0x400, 0xa, 0x5, 0x1f}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x4, 0x1, 0xd7}}, {{0x9, 0x5, 0xd, 0x1, 0x7ff, 0x7, 0x92, 0x10}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0xea, 0x3, 0xc}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x2, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xa1, 0x0, 0x4, [@generic={0x3b, 0x21, "29be45e2b4b5f0b82be873e2dd8d326bb5196ca34301e422400866328019e03f82eff70f0205bef3b649831ee261e96abcf83c0efe30865a3d"}, @generic={0xff, 0xc, "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"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0xc3, 0x3, 0x34}}, {{0x9, 0x5, 0x80, 0x2, 0xb5cac86af96898f7, 0x2, 0x7a, 0x4}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x5f, 0x3, 0x1, [@generic={0x10, 0xe, "46b23f4d9f90c9efb4737af0e5d6"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x1800}]}}]}}, {{0x9, 0x4, 0x91, 0x8, 0xa, 0xdb, 0xe3, 0x3, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x2, 0x2, 0x1000, 0x7, 0x2}]}], [{{0x9, 0x5, 0x0, 0x3, 0x200, 0xa7, 0xb5, 0xd, [@generic={0x3, 0x9, "b4"}]}}, {{0x9, 0x5, 0x0, 0x1b, 0x50, 0x2, 0xfc, 0xdc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x59a}, @generic={0x80, 0x261d1884eaa18760, "e2d011ceee76e9e633020aefdb9411a0113b4850e21d8d0afec6168a2090c66fa2bc18d6a00576eb722584a74187e344b2fb4abdc8e85a0763524ec301b0647a2249c57ceab2c668c79c734124b5423ce70f7c60a1bd238c7b29aecee3a834128f8ae7166dad8787fe1603668540bf0679067999c08515647286cecc636f"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x80, 0xc, 0x3, [@generic={0x1e, 0xa, "89c3a988cc6e3f75b07609318d56cd6b56740fd8f27044d308689afe"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x6, 0x5, 0x7}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x7, 0x2, [@generic={0xf4, 0x33, "d87fdd6bc0168fa9d72dffbb32ced2175cd8033abdb2ad352defa6a366dcb83a947267ce0f3ffd019a2589eb7848af8763a990558e9d96cb8b6f86076b3fb09ec59fdcd28f170704ce3dd7a4a34e923c01cfbbe47c021acbf2fe531896438875f89055575cbbaaea99b45ed24e4b28afd77430670f0a76d3446fed750e91993b3fa6c0e6acd2c545390e05e7af6cdd40a5785b23609fe066007260b04f854e35e7a7759b82078ffb308b59e3c49f81eef759bc2e2cdb387fa60c6ca72dd53f836eacc9c291a336debf4efd8d9d2a77d04074629bbfdac0dc4a1bf5dc81ac219d50e1396af1d6b7a6162beb5596257f0c9a93"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x7}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x58, 0xa, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}]}}, {{0x9, 0x5, 0xb, 0x2, 0x77c5f608ca063f13, 0x9, 0x9, 0xa9}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x92, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd9, 0x10}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x8, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x10, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf3, 0x9}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x47, 0x81, 0x9, 0x20, 0x5}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x66, &(0x7f0000000200)=@string={0x66, 0x3, "7f775684976b4a1cf484e735bc862e270aed5980fb722c2cbe4d5bb1e12badb3f13af3b8ecb649607a8e9abf55e32bf1e3195f0733efa7766cfec06198a8f39f4240ff4b289633eaa9854e145ca48d5f87bc9349372f6d3c3b90591b3483880b61a4b1d2"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x105f}}, {0xc2, &(0x7f0000000c80)=@string={0xc2, 0x3, "52ff7709591429ab422d95f283aedb3810f50fbaac1f6dac293afd2067e334b756a47bbe56683bb7993af69894cada8a1b00632b403eaa14b7980722f3c61681cd6a794e7f0ce947083e7064e22c8a88df4ee31782c26d75da8e7169ec8b64d03b2031bc4eb9e58c7fc8337d3796c16ad0c0843eee051e264b5ae8aa6974010dc2889dfe35fb2d47e0f55a0025f0eca403434f8fc43fdeb845eb9d93733f83a5886534eec83d94245f1046a60dab4ae472b6b7c4fa47d2d7fe233c3c3da337f9"}}]})
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

511.75494ms ago: executing program 1 (id=181):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000300)={0x6, 0x7, 0x0, 0x7e})

491.402072ms ago: executing program 1 (id=182):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff020000fff5000000000000000000014f194e20"], 0xfdef)

263.520383ms ago: executing program 1 (id=183):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x0, 0x9, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62cee", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000003e80)={0x28, r3, 0x1, 0xf8bd6d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000380), 0x0, 0x2}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0)

261.447073ms ago: executing program 1 (id=184):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x4000000, 0x40000}, 0x0)

183.486931ms ago: executing program 1 (id=185):
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000000c0)=0x678, 0x4)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x145202, 0x80, 0x24}, 0x18)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)=<r4=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_mmap={0x401, 0x2, 0x4, 0x100, 0xdb7, {r2, r3/1000+60000}, {0x4, 0x1, 0x8, 0x7, 0x4, 0x0, "1d6b1b72"}, 0x8, 0x1, {&(0x7f00000001c0)=[{0x9, 0x800, {0x2}, 0x6}, {0x1c00, 0x3d8334e4, {0x6}, 0x5}]}, 0x4, 0x0, r4}) (async)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000340)=0xc) (async)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000380)=[0x0, 0x1000]) (async)
fcntl$getownex(r0, 0x10, &(0x7f00000003c0))
setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000400)=0x1, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000440)=0x1) (async)
clock_adjtime(0x7, &(0x7f0000000480)={0xfffffffffffffffe, 0x8000, 0x6, 0x1, 0x9, 0x7f8c84e5, 0x1, 0x0, 0x5, 0x4, 0xfffffffffffffff8, 0x100000000, 0x9, 0x3, 0x5, 0xfffffffffffffff7, 0x82, 0x7, 0xfffffffffffff1b6, 0xfffffffffffffff8, 0x9, 0x800, 0x9, 0xfffffffffffffffd, 0x7, 0x5}) (async)
socket$alg(0x26, 0x5, 0x0) (async)
setxattr$trusted_overlay_upper(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0x1015, 0x3, 0xc, "804626d6a55b3cce18effc7e56adbdad", "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"}, 0x1015, 0x0) (async)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xb0, 0x1403, 0x8, 0x70bd2a, 0xd275, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x41)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000017c0), &(0x7f0000001800)=0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001880)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
clock_gettime(0x0, &(0x7f00000048c0)={<r7=>0x0, <r8=>0x0})
recvmmsg(r5, &(0x7f00000047c0)=[{{&(0x7f00000019c0)=@xdp, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001a40)=""/83, 0x53}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/182, 0xb6}, {&(0x7f0000002b80)=""/176, 0xb0}, {&(0x7f0000002c40)=""/255, 0xff}], 0x5, &(0x7f0000002dc0)=""/148, 0x94}, 0x53}, {{&(0x7f0000002e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/190, 0xbe}, {&(0x7f0000003fc0)=""/245, 0xf5}, {&(0x7f00000040c0)=""/199, 0xc7}], 0x4, &(0x7f0000004200)=""/153, 0x99}, 0x5}, {{&(0x7f00000042c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004340)=""/16, 0x10}], 0x1, &(0x7f00000043c0)=""/75, 0x4b}, 0x7}, {{&(0x7f0000004440)=@xdp, 0x80, &(0x7f0000004740)=[{&(0x7f00000044c0)=""/224, 0xe0}, {&(0x7f00000045c0)=""/204, 0xcc}, {&(0x7f00000046c0)=""/74, 0x4a}], 0x3, &(0x7f0000004780)=""/21, 0x15}}], 0x4, 0x2, &(0x7f0000004900)={r7, r8+10000000}) (async)
sendto(r1, &(0x7f0000004940)="518979120814adae4fa7a2b4c8152553aae33fc82de99669eb9397493f4fa0d85ba9ee50b5c3e7ae1461d6dcbdca94fc05a81d8b5c643b59ebce7bf42906ae", 0x3f, 0x4048004, 0x0, 0x0) (async)
r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000004980), 0x941)
ioctl$SG_GET_SCSI_ID(r9, 0x2276, &(0x7f00000049c0)) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004a40), r9)
sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000004b00)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a80)={0x28, r11, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044841}, 0x4080) (async)
openat(r9, &(0x7f0000004b40)='./file0\x00', 0x200000, 0x0)
select(0x40, &(0x7f0000004b80)={0x8, 0x5, 0x3ff, 0xe78, 0x920, 0x1, 0xc1, 0x10000}, &(0x7f0000004bc0)={0x81, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x2, 0x10, 0x4e73, 0xa378, 0x1}, &(0x7f0000004c00)={0x1, 0x4, 0x8, 0x300000000000, 0x40, 0x5, 0xc20, 0x4}, &(0x7f0000004c40))

123.113616ms ago: executing program 1 (id=186):
r0 = syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000001c0)='./file1\x00', 0x4040, &(0x7f0000000580)=ANY=[], 0x4, 0xfc0, &(0x7f0000002240)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42002, 0x113)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000240)="12", 0x1}], 0x1, 0xcfbc, 0x3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff7, 0x4012011, r1, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000804)
r9 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xc000)
ioctl$BLKSECDISCARD(r9, 0x127d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa1, &(0x7f00000002c0)=""/161, 0x0, 0x28}, 0x94)

0s ago: executing program 0 (id=187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) (async)
r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0xf7}}]}, 0x1, 0x599, &(0x7f0000000540)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES32=r1, @ANYRES32=r1], 0xd)
pipe(&(0x7f00000007c0)) (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@auto_da_alloc}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bsdgroups}, {@bsdgroups}, {@resuid}]}, 0x1, 0x599, &(0x7f0000001280)="$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") (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0) (async)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x2)
mmap(&(0x7f000036d000/0x2000)=nil, 0x2000, 0x100000a, 0x12, r5, 0xb3d2d000) (async)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000002) (async)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
read$msr(0xffffffffffffffff, &(0x7f0000002740)=""/102400, 0x19000)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}, {{0xa, 0x0, 0x1, @loopback}}}, 0x108) (async)
close(0x3) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
fallocate(r5, 0x10, 0x800, 0x8000) (async)
openat(r4, &(0x7f0000000100)='./file1\x00', 0x0, 0x1bf) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x202640)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51518' (ED25519) to the list of known hosts.
syzkaller login: [   56.205325][ T5837] cgroup: Unknown subsys name 'net'
[   56.355351][ T5837] cgroup: Unknown subsys name 'cpuset'
[   56.362197][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.286674][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.712181][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.716317][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.719769][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.730761][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.733954][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.762948][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.766835][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.770901][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.774630][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.778481][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.809945][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.813625][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.820995][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.825291][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.828596][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.111914][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   64.161403][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   64.222692][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   64.271688][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.274530][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.277366][ T5853] bridge_slave_0: entered allmulticast mode
[   64.281682][ T5853] bridge_slave_0: entered promiscuous mode
[   64.311851][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.314539][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.317330][ T5853] bridge_slave_1: entered allmulticast mode
[   64.321132][ T5853] bridge_slave_1: entered promiscuous mode
[   64.405562][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.427786][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.431512][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.434283][ T5857] bridge_slave_0: entered allmulticast mode
[   64.437786][ T5857] bridge_slave_0: entered promiscuous mode
[   64.442254][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.444976][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.447708][ T5857] bridge_slave_1: entered allmulticast mode
[   64.451881][ T5857] bridge_slave_1: entered promiscuous mode
[   64.456711][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.460455][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.463101][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.465446][ T5863] bridge_slave_0: entered allmulticast mode
[   64.468726][ T5863] bridge_slave_0: entered promiscuous mode
[   64.473211][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.475551][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.477930][ T5863] bridge_slave_1: entered allmulticast mode
[   64.481346][ T5863] bridge_slave_1: entered promiscuous mode
[   64.533507][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.560107][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.564412][ T5853] team0: Port device team_slave_0 added
[   64.568807][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.575418][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.597738][ T5853] team0: Port device team_slave_1 added
[   64.609801][ T5863] team0: Port device team_slave_0 added
[   64.633437][ T5863] team0: Port device team_slave_1 added
[   64.637116][ T5857] team0: Port device team_slave_0 added
[   64.652760][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.655006][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.664335][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.691548][ T5857] team0: Port device team_slave_1 added
[   64.694645][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.697237][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.706777][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.712085][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.714553][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.723811][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.736193][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.738808][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.748433][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.787894][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.790881][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.801126][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.845062][ T5853] hsr_slave_0: entered promiscuous mode
[   64.848017][ T5853] hsr_slave_1: entered promiscuous mode
[   64.851932][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.854662][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.863246][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.871382][ T5863] hsr_slave_0: entered promiscuous mode
[   64.874135][ T5863] hsr_slave_1: entered promiscuous mode
[   64.876510][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[   64.878623][ T5863] Cannot create hsr debugfs directory
[   64.953908][ T5857] hsr_slave_0: entered promiscuous mode
[   64.956393][ T5857] hsr_slave_1: entered promiscuous mode
[   64.959009][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   64.961435][ T5857] Cannot create hsr debugfs directory
[   65.230357][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.238727][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.251308][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.268180][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.317984][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.327269][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.342799][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.349030][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.431015][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.436077][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.445754][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.462989][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.550950][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.591762][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   65.602147][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.617358][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.620518][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.637721][  T903] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.640631][  T903] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.664496][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   65.681596][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.683918][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.692138][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.695017][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.706610][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.755963][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.767389][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.770166][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.783404][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.785835][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.790167][ T5859] Bluetooth: hci1: command tx timeout
[   65.800149][ T5859] Bluetooth: hci0: command tx timeout
[   65.870700][ T5859] Bluetooth: hci2: command tx timeout
[   65.935419][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.023795][ T5863] veth0_vlan: entered promiscuous mode
[   66.040390][ T5863] veth1_vlan: entered promiscuous mode
[   66.077674][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.084941][ T5863] veth0_macvtap: entered promiscuous mode
[   66.097169][ T5863] veth1_macvtap: entered promiscuous mode
[   66.124459][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.145195][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.171970][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.182972][ T5857] veth0_vlan: entered promiscuous mode
[   66.194706][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.219115][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.227519][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.236098][ T5857] veth1_vlan: entered promiscuous mode
[   66.243097][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.256445][ T5853] veth0_vlan: entered promiscuous mode
[   66.275110][ T5853] veth1_vlan: entered promiscuous mode
[   66.334344][ T5857] veth0_macvtap: entered promiscuous mode
[   66.339756][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.342760][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.372437][ T5857] veth1_macvtap: entered promiscuous mode
[   66.391623][ T5853] veth0_macvtap: entered promiscuous mode
[   66.404694][ T5853] veth1_macvtap: entered promiscuous mode
[   66.412619][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.415465][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.418142][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.438428][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.453967][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.471388][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.481799][ T5884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.486110][ T5884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.493926][ T5884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.497509][ T5884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.514414][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.524975][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.543788][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.572066][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.587158][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.655099][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.657650][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.670882][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.682101][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.704948][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.709591][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.731412][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.733994][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.844538][ T5918] loop0: detected capacity change from 0 to 32768
[   66.855148][ T5918] btrfs: Deprecated parameter 'usebackuproot'
[   66.857786][ T5918] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   66.887550][ T5918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5918)
[   66.941999][ T5918] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   66.946148][ T5918] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   67.414528][   T65] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   67.428581][ T5918] BTRFS error (device loop0): failed to load root extent
[   67.434253][ T5918] BTRFS warning (device loop0): try to load backup roots slot 1
[   67.442143][  T760] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   67.454159][ T5918] BTRFS warning (device loop0): couldn't read tree root
[   67.457787][ T5918] BTRFS warning (device loop0): try to load backup roots slot 2
[   67.464583][  T760] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   67.480293][ T5918] BTRFS warning (device loop0): couldn't read tree root
[   67.485530][ T5918] BTRFS warning (device loop0): try to load backup roots slot 3
[   67.497233][   T40] BTRFS warning (device loop0): checksum verify failed on logical 5242880 mirror 1 wanted 0xc0857788 found 0x43ea095e level 0
[   67.509480][ T5918] BTRFS warning (device loop0): couldn't read tree root
[   67.529626][ T5918] BTRFS error (device loop0): open_ctree failed: -5
[   67.801774][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7'.
[   67.872564][ T5856] Bluetooth: hci1: command tx timeout
[   67.874816][ T5859] Bluetooth: hci0: command tx timeout
[   67.943208][ T5959] binder: 5957:5959 ioctl 800454d2 200000000080 returned -22
[   67.949730][ T5859] Bluetooth: hci2: command tx timeout
[   68.011231][ T5966] loop1: detected capacity change from 0 to 512
[   68.013875][ T5966] EXT4-fs: Ignoring removed nobh option
[   68.051647][ T5966] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.11: iget: bad i_size value: 38620345925642
[   68.055979][ T5966] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.11: couldn't read orphan inode 15 (err -117)
[   68.060802][ T5966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.127469][ T5966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.11: bg 0: block 5: invalid block bitmap
[   68.135040][ T5966] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[   68.139122][ T5966] EXT4-fs (loop1): This should not happen!! Data will be lost
[   68.139122][ T5966] 
[   68.143759][ T5966] EXT4-fs (loop1): Total free blocks count 0
[   68.145917][ T5966] EXT4-fs (loop1): Free/Dirty block details
[   68.147824][ T5966] EXT4-fs (loop1): free_blocks=0
[   68.150459][ T5966] EXT4-fs (loop1): dirty_blocks=1988
[   68.152554][ T5966] EXT4-fs (loop1): Block reservation details
[   68.154732][ T5966] EXT4-fs (loop1): i_reserved_data_blocks=1988
[   68.158845][  T903] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 1968 with error 28
[   68.470936][ T5973] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   68.555663][ T5975] loop0: detected capacity change from 0 to 2048
[   68.591426][ T5977] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.624003][ T5980] NILFS (loop0): error -2 truncating bmap (ino=16)
[   68.880902][ T5977] NILFS (loop0): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[   68.884361][ T5977] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16)
[   68.894589][ T5982] loop1: detected capacity change from 0 to 32768
[   68.904739][ T5977] Remounting filesystem read-only
[   68.910404][ T5982] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15 (5982)
[   68.920365][ T5863] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[   68.934486][ T5982] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   68.961192][ T5982] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   69.020981][ T5982] BTRFS info (device loop1): setting nodatasum
[   69.023403][ T5982] BTRFS info (device loop1): enabling ssd optimizations
[   69.039519][ T5982] BTRFS info (device loop1): disabling tree log
[   69.048370][ T5982] BTRFS info (device loop1): enabling free space tree
[   69.053177][ T5982] BTRFS info (device loop1): enabling auto defrag
[   69.204723][ T6010] loop0: detected capacity change from 0 to 1024
[   69.207289][ T6010] =======================================================
[   69.207289][ T6010] WARNING: The mand mount option has been deprecated and
[   69.207289][ T6010]          and is ignored by this kernel. Remove the mand
[   69.207289][ T6010]          option from the mount to silence this warning.
[   69.207289][ T6010] =======================================================
[   69.300581][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   69.305210][ T6010] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.314178][ T5985] loop2: detected capacity change from 0 to 32768
[   69.320919][ T5985] btrfs: Deprecated parameter 'usebackuproot'
[   69.328741][ T5985] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   69.340718][   T33] audit: type=1800 audit(1759299744.370:2): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=15 res=0 errno=0
[   69.343392][ T5985] BTRFS info: device /dev/loop2 (7:2) using temp-fsid d620bbc3-0121-4929-8179-9ee5f47eef4f
[   69.351993][ T5985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.17 (5985)
[   69.356618][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.376103][ T5985] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.382195][ T5985] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   69.410548][   T33] audit: type=1800 audit(1759299744.450:3): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=15 res=0 errno=0
[   69.495955][ T3032] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   69.505341][ T5857] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.512435][ T5985] BTRFS error (device loop2): failed to load root extent
[   69.512859][ T6028] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.19: lblock 0 mapped to illegal pblock 0 (length 1)
[   69.520835][ T5985] BTRFS warning (device loop2): try to load backup roots slot 1
[   69.521176][  T903] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   69.521307][ T5985] BTRFS warning (device loop2): couldn't read tree root
[   69.521323][ T5985] BTRFS warning (device loop2): try to load backup roots slot 2
[   69.521549][  T903] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   69.521625][ T5985] BTRFS warning (device loop2): couldn't read tree root
[   69.521640][ T5985] BTRFS warning (device loop2): try to load backup roots slot 3
[   69.521860][  T903] BTRFS warning (device loop2): checksum verify failed on logical 5242880 mirror 1 wanted 0xc0857788 found 0x43ea095e level 0
[   69.568978][ T6028] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.19: lblock 0 mapped to illegal pblock 0 (length 1)
[   69.577887][ T5985] BTRFS warning (device loop2): couldn't read tree root
[   69.592526][ T6028] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   69.593798][ T5985] BTRFS error (device loop2): open_ctree failed: -5
[   69.597458][ T6028] EXT4-fs (loop0): This should not happen!! Data will be lost
[   69.597458][ T6028] 
[   69.627663][ T6028] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.19: lblock 1 mapped to illegal pblock 1 (length 2)
[   69.686050][ T6028] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 117
[   69.747011][ T6028] EXT4-fs (loop0): This should not happen!! Data will be lost
[   69.747011][ T6028] 
[   69.873171][ T6035] Zero length message leads to an empty skb
[   69.949074][ T6035] loop2: detected capacity change from 0 to 2048
[   69.953800][ T5859] Bluetooth: hci0: command tx timeout
[   69.956114][ T5859] Bluetooth: hci1: command tx timeout
[   69.966936][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   70.007874][ T6035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.031400][ T5856] Bluetooth: hci2: command tx timeout
[   70.148350][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.172692][ T6045] loop0: detected capacity change from 0 to 1024
[   70.228016][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   70.254770][ T6045] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.514148][ T6045] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.23: Freeing blocks not in datazone - block = 0, count = 16
[   70.550149][ T6045] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   70.568046][ T6045] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28
[   70.572449][ T6045] EXT4-fs (loop0): This should not happen!! Data will be lost
[   70.572449][ T6045] 
[   70.576074][ T6045] EXT4-fs (loop0): Total free blocks count 0
[   70.579664][ T6045] EXT4-fs (loop0): Free/Dirty block details
[   70.581828][ T6045] EXT4-fs (loop0): free_blocks=4293918720
[   70.582912][ T6047] loop2: detected capacity change from 0 to 40427
[   70.588436][ T6045] EXT4-fs (loop0): dirty_blocks=80
[   70.594597][ T6045] EXT4-fs (loop0): Block reservation details
[   70.597074][ T6045] EXT4-fs (loop0): i_reserved_data_blocks=5
[   70.622438][ T6047] F2FS-fs (loop2): invalid crc value
[   70.685593][ T6047] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   70.692589][ T6047] F2FS-fs (loop2): Start checkpoint disabled!
[   70.701643][ T6047] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   70.705385][ T6047] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   70.746801][ T6051] loop1: detected capacity change from 0 to 32768
[   70.751345][ T6051] btrfs: Deprecated parameter 'usebackuproot'
[   70.753728][ T6051] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   70.758080][ T6051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.25 (6051)
[   70.779084][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   71.094201][ T6051] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.098213][ T6051] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   71.103079][ T6051] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   71.159080][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.162020][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.223321][ T3601] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   71.234250][ T6051] BTRFS error (device loop1): failed to load root extent
[   71.237221][ T6051] BTRFS warning (device loop1): try to load backup roots slot 1
[   71.266207][ T3601] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   71.300315][ T6051] BTRFS warning (device loop1): couldn't read tree root
[   71.313993][ T6051] BTRFS warning (device loop1): try to load backup roots slot 2
[   71.326793][ T3601] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   71.342242][ T6051] BTRFS warning (device loop1): couldn't read tree root
[   71.352332][ T6051] BTRFS warning (device loop1): try to load backup roots slot 3
[   71.371694][ T6071] syz.2.24: attempt to access beyond end of device
[   71.371694][ T6071] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   71.404818][ T6051] BTRFS info (device loop1): rebuilding free space tree
[   71.510642][ T6051] BTRFS info (device loop1): disabling free space tree
[   71.525844][ T6051] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   71.539540][ T6051] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   71.571993][ T6077] loop0: detected capacity change from 0 to 1024
[   71.580874][ T6051] BTRFS info (device loop1): setting nodatasum
[   71.594134][ T6051] BTRFS info (device loop1): setting nodatacow
[   71.596729][ T6051] BTRFS info (device loop1): enabling ssd optimizations
[   71.618398][ T6051] BTRFS info (device loop1): turning off barriers
[   71.621476][ T6051] BTRFS info (device loop1): turning on sync discard
[   71.625363][ T6051] BTRFS info (device loop1): enabling disk space caching
[   71.628422][ T6051] BTRFS info (device loop1): force clearing of disk cache
[   71.632034][ T6077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   71.632195][ T6077] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.642249][ T6051] BTRFS info (device loop1): enabling auto defrag
[   71.644708][ T6051] BTRFS info (device loop1): trying to use backup root at mount time
[   71.647914][ T6051] BTRFS info (device loop1): max_inline set to 0
[   71.738465][ T3032] kworker/u9:4: attempt to access beyond end of device
[   71.738465][ T3032] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[   71.747506][ T6082] overlayfs: failed to resolve './file0/file0': -2
[   71.782663][ T3032] CPU: 0 UID: 0 PID: 3032 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[   71.782703][ T3032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.782713][ T3032] Workqueue: writeback wb_workfn (flush-7:2)
[   71.782744][ T3032] Call Trace:
[   71.782763][ T3032]  <TASK>
[   71.782781][ T3032]  dump_stack_lvl+0x189/0x250
[   71.782803][ T3032]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.782816][ T3032]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   71.782832][ T3032]  ? __pfx_queue_work_on+0x10/0x10
[   71.782845][ T3032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.782858][ T3032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.782881][ T3032]  f2fs_handle_critical_error+0x37c/0x540
[   71.782901][ T3032]  f2fs_write_end_io+0x886/0xb60
[   71.782931][ T3032]  __submit_merged_bio+0x27a/0x6a0
[   71.782950][ T3032]  __submit_merged_write_cond+0x255/0x530
[   71.782975][ T3032]  f2fs_write_data_pages+0x261d/0x3000
[   71.783012][ T3032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.783092][ T3032]  ? trace_pelt_se_tp+0x39/0x130
[   71.783129][ T3032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.783144][ T3032]  do_writepages+0x32e/0x550
[   71.783163][ T3032]  ? reacquire_held_locks+0x127/0x1d0
[   71.783176][ T3032]  ? writeback_sb_inodes+0x384/0x1010
[   71.783196][ T3032]  __writeback_single_inode+0x145/0xff0
[   71.783211][ T3032]  ? do_raw_spin_unlock+0x4d/0x240
[   71.783229][ T3032]  writeback_sb_inodes+0x6c7/0x1010
[   71.783261][ T3032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   71.783300][ T3032]  ? rcu_is_watching+0x15/0xb0
[   71.783319][ T3032]  wb_writeback+0x43b/0xaf0
[   71.783340][ T3032]  ? queue_io+0x2e1/0x590
[   71.783356][ T3032]  ? __pfx_wb_writeback+0x10/0x10
[   71.783376][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.783391][ T3032]  wb_workfn+0x409/0xef0
[   71.783422][ T3032]  ? __pfx_wb_workfn+0x10/0x10
[   71.783440][ T3032]  ? __lock_acquire+0xab9/0xd20
[   71.783461][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   71.783488][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.783501][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   71.783518][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   71.783538][ T3032]  process_scheduled_works+0xae1/0x17b0
[   71.783574][ T3032]  ? __pfx_process_scheduled_works+0x10/0x10
[   71.783600][ T3032]  worker_thread+0x8a0/0xda0
[   71.783619][ T3032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.783639][ T3032]  ? __kthread_parkme+0x7b/0x200
[   71.783656][ T3032]  kthread+0x711/0x8a0
[   71.783671][ T3032]  ? __pfx_worker_thread+0x10/0x10
[   71.783688][ T3032]  ? __pfx_kthread+0x10/0x10
[   71.783704][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.783717][ T3032]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.783731][ T3032]  ? __pfx_kthread+0x10/0x10
[   71.783744][ T3032]  ret_from_fork+0x4bc/0x870
[   71.783765][ T3032]  ? __pfx_ret_from_fork+0x10/0x10
[   71.783788][ T3032]  ? __switch_to_asm+0x39/0x70
[   71.783804][ T3032]  ? __switch_to_asm+0x33/0x70
[   71.783816][ T3032]  ? __pfx_kthread+0x10/0x10
[   71.783829][ T3032]  ret_from_fork_asm+0x1a/0x30
[   71.783853][ T3032]  </TASK>
[   71.783917][ T3032] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   71.928756][ T3032] CPU: 0 UID: 0 PID: 3032 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[   71.928778][ T3032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.928805][ T3032] Workqueue: writeback wb_workfn (flush-7:2)
[   71.928835][ T3032] Call Trace:
[   71.928842][ T3032]  <TASK>
[   71.928849][ T3032]  dump_stack_lvl+0x189/0x250
[   71.928870][ T3032]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.928885][ T3032]  ? __pfx_queue_work_on+0x10/0x10
[   71.928897][ T3032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.928914][ T3032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.928936][ T3032]  f2fs_handle_critical_error+0x37c/0x540
[   71.928957][ T3032]  f2fs_write_end_io+0x886/0xb60
[   71.928986][ T3032]  __submit_merged_bio+0x27a/0x6a0
[   71.929005][ T3032]  __submit_merged_write_cond+0x255/0x530
[   71.929031][ T3032]  f2fs_write_data_pages+0x261d/0x3000
[   71.929096][ T3032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.929158][ T3032]  ? trace_pelt_se_tp+0x39/0x130
[   71.929197][ T3032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.929213][ T3032]  do_writepages+0x32e/0x550
[   71.929230][ T3032]  ? reacquire_held_locks+0x127/0x1d0
[   71.929242][ T3032]  ? writeback_sb_inodes+0x384/0x1010
[   71.929264][ T3032]  __writeback_single_inode+0x145/0xff0
[   71.929279][ T3032]  ? do_raw_spin_unlock+0x4d/0x240
[   71.929297][ T3032]  writeback_sb_inodes+0x6c7/0x1010
[   71.929346][ T3032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   71.929393][ T3032]  ? rcu_is_watching+0x15/0xb0
[   71.929413][ T3032]  wb_writeback+0x43b/0xaf0
[   71.929433][ T3032]  ? queue_io+0x2e1/0x590
[   71.929449][ T3032]  ? __pfx_wb_writeback+0x10/0x10
[   71.929473][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.929491][ T3032]  wb_workfn+0x409/0xef0
[   71.929522][ T3032]  ? __pfx_wb_workfn+0x10/0x10
[   71.929544][ T3032]  ? __lock_acquire+0xab9/0xd20
[   71.929570][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   71.929595][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.929607][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   71.929625][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   71.929644][ T3032]  process_scheduled_works+0xae1/0x17b0
[   71.929685][ T3032]  ? __pfx_process_scheduled_works+0x10/0x10
[   71.929717][ T3032]  worker_thread+0x8a0/0xda0
[   71.929737][ T3032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.929758][ T3032]  ? __kthread_parkme+0x7b/0x200
[   71.929779][ T3032]  kthread+0x711/0x8a0
[   71.929795][ T3032]  ? __pfx_worker_thread+0x10/0x10
[   71.929813][ T3032]  ? __pfx_kthread+0x10/0x10
[   71.929829][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.929842][ T3032]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.929855][ T3032]  ? __pfx_kthread+0x10/0x10
[   71.929870][ T3032]  ret_from_fork+0x4bc/0x870
[   71.929890][ T3032]  ? __pfx_ret_from_fork+0x10/0x10
[   71.929914][ T3032]  ? __switch_to_asm+0x39/0x70
[   71.929928][ T3032]  ? __switch_to_asm+0x33/0x70
[   71.929942][ T3032]  ? __pfx_kthread+0x10/0x10
[   71.929957][ T3032]  ret_from_fork_asm+0x1a/0x30
[   71.929986][ T3032]  </TASK>
[   72.043678][   T33] audit: type=1800 audit(1759299746.970:4): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25" name="file1" dev="overlay" ino=265 res=0 errno=0
[   72.046684][ T6082] evm: overlay not supported
[   72.075372][ T5856] Bluetooth: hci1: command tx timeout
[   72.078699][ T5856] Bluetooth: hci0: command tx timeout
[   72.111086][ T5859] Bluetooth: hci2: command tx timeout
[   72.186266][ T3032] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   72.394130][ T5857] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   73.021290][ T6084] loop2: detected capacity change from 0 to 4096
[   73.190811][ T6091] mmap: syz.2.30 (6091) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   73.274738][ T6093] loop1: detected capacity change from 0 to 256
[   73.324257][ T6093] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   73.370896][   T33] audit: type=1800 audit(1759299748.410:5): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.31" name="file1" dev="loop1" ino=1048596 res=0 errno=0
[   73.445820][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   74.804487][ T6105] loop0: detected capacity change from 0 to 40427
[   74.841869][ T6105] F2FS-fs (loop0): invalid crc value
[   74.903284][ T6105] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   74.907499][ T6105] F2FS-fs (loop0): Start checkpoint disabled!
[   74.913294][ T6105] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   74.916995][ T6105] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   75.405837][ T6113] loop1: detected capacity change from 0 to 32768
[   75.430052][ T6113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.40 (6113)
[   75.451034][ T6113] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   75.455956][ T6113] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   75.517539][ T3032] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   75.528343][ T6113] BTRFS error (device loop1): failed to load root extent
[   75.545560][ T6115] loop0: detected capacity change from 0 to 32768
[   75.549164][ T6115] btrfs: Deprecated parameter 'usebackuproot'
[   75.551971][ T6115] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   75.556371][ T6115] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 69333250-f11b-4b79-8bb2-e57b8f2a38c8
[   75.560621][ T6115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.37 (6115)
[   75.647721][ T6115] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   75.656813][ T6115] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   75.754663][ T3032] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   75.772884][ T6113] BTRFS error (device loop1): open_ctree failed: -5
[   75.790183][ T6115] BTRFS error (device loop0): failed to load root extent
[   75.792441][ T6115] BTRFS warning (device loop0): try to load backup roots slot 1
[   75.805585][ T3032] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   75.824097][ T6115] BTRFS warning (device loop0): couldn't read tree root
[   75.826833][ T6115] BTRFS warning (device loop0): try to load backup roots slot 2
[   75.849839][  T760] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   75.861511][ T6115] BTRFS warning (device loop0): couldn't read tree root
[   75.882548][ T6115] BTRFS warning (device loop0): try to load backup roots slot 3
[   75.886133][  T760] BTRFS warning (device loop0): checksum verify failed on logical 5242880 mirror 1 wanted 0xc0857788 found 0x43ea095e level 0
[   75.901144][ T6115] BTRFS warning (device loop0): couldn't read tree root
[   75.952423][ T6115] BTRFS error (device loop0): open_ctree failed: -5
[   76.342384][ T6162] loop0: detected capacity change from 0 to 16
[   76.362133][ T6162] erofs (device loop0): mounted with root inode @ nid 36.
[   76.377621][ T6162] erofs (device loop0): negative i_size @ nid 46
[   77.089807][ T6158] loop1: detected capacity change from 0 to 32768
[   77.093300][ T6158] btrfs: Deprecated parameter 'usebackuproot'
[   77.095782][ T6158] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   77.127008][ T6158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.43 (6158)
[   77.157292][ T6158] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.172933][ T6158] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   77.181131][ T6158] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   77.240693][ T1091] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   77.251074][ T6158] BTRFS error (device loop1): failed to load root extent
[   77.254031][ T6158] BTRFS warning (device loop1): try to load backup roots slot 1
[   77.258101][  T760] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   77.270441][ T6158] BTRFS warning (device loop1): couldn't read tree root
[   77.275566][ T6158] BTRFS warning (device loop1): try to load backup roots slot 2
[   77.279066][ T1091] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   77.283616][ T6158] BTRFS warning (device loop1): couldn't read tree root
[   77.286745][ T6158] BTRFS warning (device loop1): try to load backup roots slot 3
[   77.297112][ T6158] BTRFS info (device loop1): rebuilding free space tree
[   77.312516][ T6158] BTRFS info (device loop1): disabling free space tree
[   77.315355][ T6158] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   77.321478][ T6158] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   77.329297][ T6158] BTRFS info (device loop1): setting nodatasum
[   77.333289][ T6158] BTRFS info (device loop1): setting nodatacow
[   77.339941][ T6158] BTRFS info (device loop1): enabling ssd optimizations
[   77.342179][ T6158] BTRFS info (device loop1): turning off barriers
[   77.359109][ T6158] BTRFS info (device loop1): turning on sync discard
[   77.362441][ T6158] BTRFS info (device loop1): enabling disk space caching
[   77.366624][ T6158] BTRFS info (device loop1): force clearing of disk cache
[   77.369588][ T6158] BTRFS info (device loop1): enabling auto defrag
[   77.372280][ T6158] BTRFS info (device loop1): trying to use backup root at mount time
[   77.375506][ T6158] BTRFS info (device loop1): max_inline set to 0
[   77.405896][ T6158] overlayfs: failed to resolve './file0/file0': -2
[   77.421261][ T6186] capability: warning: `syz.2.47' uses deprecated v2 capabilities in a way that may be insecure
[   77.425544][   T33] audit: type=1800 audit(1759299752.460:6): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.43" name="file1" dev="overlay" ino=265 res=0 errno=0
[   77.525845][ T5857] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.800168][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.913799][ T6191] loop1: detected capacity change from 0 to 32768
[   77.930527][ T6191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.48 (6191)
[   77.942939][ T6191] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.946458][ T6191] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   77.959941][   T24] usb 3-1: Using ep0 maxpacket: 8
[   77.967267][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   77.973169][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   77.983472][   T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[   77.987189][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.994226][   T24] usb 3-1: Product: syz
[   77.995633][   T24] usb 3-1: Manufacturer: syz
[   77.997107][   T24] usb 3-1: SerialNumber: syz
[   78.014351][   T24] usb 3-1: config 0 descriptor??
[   78.044761][ T6191] BTRFS info (device loop1): allowing degraded mounts
[   78.049477][ T6191] BTRFS info (device loop1): enabling ssd optimizations
[   78.051786][ T6191] BTRFS info (device loop1): enabling free space tree
[   78.054216][ T6191] BTRFS info (device loop1): force zlib compression, level 3
[   78.339466][ T5919] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   78.499772][ T5919] usb 2-1: Using ep0 maxpacket: 16
[   78.504446][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.508364][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   78.512858][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   78.522455][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[   78.526091][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.529057][ T5919] usb 2-1: Product: syz
[   78.534731][ T5919] usb 2-1: Manufacturer: syz
[   78.536739][ T5919] usb 2-1: SerialNumber: syz
[   78.543120][ T5919] usb 2-1: config 0 descriptor??
[   78.553448][ T5919] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[   78.556122][ T5919] gspca_stv06xx: st6422 sensor detected
[   78.809933][ T5919] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71
[   78.819050][ T5919] usb 2-1: USB disconnect, device number 2
[   78.940240][   T47] usb 3-1: USB disconnect, device number 2
[   79.054343][ T6214] loop2: detected capacity change from 0 to 1024
[   79.075220][ T6214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   79.080396][ T6214] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.091486][ T6214] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 3)
[   79.098474][ T6214] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   79.107701][ T6214] EXT4-fs (loop2): This should not happen!! Data will be lost
[   79.107701][ T6214] 
[   79.113800][ T6214] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.127975][ T6214] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.136653][ T6214] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.143019][ T6214] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.152827][ T6214] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.160054][ T6214] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.167550][ T6214] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.175379][ T6213] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.50: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   79.183103][ T6213] EXT4-fs error (device loop2) in ext4_setattr:6042: Corrupt filesystem
[   79.244992][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   79.329913][ T6223] loop0: detected capacity change from 0 to 1024
[   79.353821][ T5857] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.354372][ T6223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   79.363973][ T6225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.52'.
[   79.371050][ T6223] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.378427][ T6225] loop2: detected capacity change from 0 to 256
[   79.387729][ T6225] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   79.417874][   T33] audit: type=1800 audit(1759299754.450:7): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.53" name="file1" dev="loop0" ino=15 res=0 errno=0
[   79.435352][   T33] audit: type=1800 audit(1759299754.460:8): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.53" name="file1" dev="loop0" ino=15 res=0 errno=0
[   79.443419][ T6223] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.53: lblock 0 mapped to illegal pblock 0 (length 1)
[   79.511452][ T6223] EXT4-fs (loop0): Remounting filesystem read-only
[   79.620817][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   79.677778][ T6231] binder: 6230:6231 ioctl c0306201 2000000004c0 returned -22
[   79.740635][ T6233] binder: 6230:6233 ioctl 8933 0 returned -22
[   79.823889][ T6236] netlink: 'syz.2.56': attribute type 6 has an invalid length.
[   79.844793][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'.
[   79.863500][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.867997][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.047361][ T6234] loop1: detected capacity change from 0 to 32768
[   80.056158][ T6234] btrfs: Deprecated parameter 'usebackuproot'
[   80.062423][ T6234] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   80.078285][ T6234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.54 (6234)
[   80.100518][ T6234] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.104812][ T6234] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   80.108359][ T6234] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   80.231293][  T760] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   80.236682][ T6234] BTRFS error (device loop1): failed to load root extent
[   80.238927][ T6234] BTRFS warning (device loop1): try to load backup roots slot 1
[   80.243853][   T65] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   80.249643][ T6234] BTRFS warning (device loop1): couldn't read tree root
[   80.251830][ T6234] BTRFS warning (device loop1): try to load backup roots slot 2
[   80.254555][  T760] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   80.257797][ T6234] BTRFS warning (device loop1): couldn't read tree root
[   80.261961][ T6234] BTRFS warning (device loop1): try to load backup roots slot 3
[   80.270999][ T6234] BTRFS info (device loop1): rebuilding free space tree
[   80.281359][ T6234] BTRFS info (device loop1): disabling free space tree
[   80.283683][ T6234] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   80.286841][ T6234] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   80.294519][ T6234] BTRFS info (device loop1): setting nodatasum
[   80.296591][ T6234] BTRFS info (device loop1): setting nodatacow
[   80.298790][ T6234] BTRFS info (device loop1): enabling ssd optimizations
[   80.302793][ T6234] BTRFS info (device loop1): turning off barriers
[   80.304929][ T6234] BTRFS info (device loop1): turning on sync discard
[   80.307085][ T6234] BTRFS info (device loop1): enabling disk space caching
[   80.309510][ T6234] BTRFS info (device loop1): force clearing of disk cache
[   80.311835][ T6234] BTRFS info (device loop1): enabling auto defrag
[   80.314020][ T6234] BTRFS info (device loop1): trying to use backup root at mount time
[   80.316818][ T6234] BTRFS info (device loop1): max_inline set to 0
[   80.337230][ T6234] overlayfs: failed to resolve './file0/file0': -2
[   80.344095][   T33] audit: type=1800 audit(1759299755.380:9): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.54" name="file1" dev="overlay" ino=265 res=0 errno=0
[   80.395534][ T5857] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.624148][ T6261] netlink: 72 bytes leftover after parsing attributes in process `syz.2.59'.
[   80.678074][ T6261] autofs4:pid:6261:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(24.1), cmd(0xc018937e)
[   80.697021][ T6261] autofs4:pid:6261:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[   80.900251][ T6267] loop3: detected capacity change from 0 to 7
[   80.938765][ T6267] Dev loop3: unable to read RDB block 7
[   80.948427][ T6267]  loop3: unable to read partition table
[   80.956915][ T6267] loop3: partition table beyond EOD, truncated
[   80.995073][ T6267] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[   81.169938][ T6275] loop1: detected capacity change from 0 to 1024
[   81.296817][ T6275] loop1: detected capacity change from 0 to 16
[   81.307414][ T6275] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   82.121412][ T6286] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   83.166877][ T6282] syz.0.65: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   83.177171][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) 
[   83.177191][ T6282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.177199][ T6282] Call Trace:
[   83.177238][ T6282]  <TASK>
[   83.177244][ T6282]  dump_stack_lvl+0x189/0x250
[   83.177269][ T6282]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.177283][ T6282]  ? __pfx__printk+0x10/0x10
[   83.177301][ T6282]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.177317][ T6282]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.177332][ T6282]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   83.177347][ T6282]  warn_alloc+0x214/0x310
[   83.177369][ T6282]  ? __pfx_warn_alloc+0x10/0x10
[   83.177387][ T6282]  ? __get_vm_area_node+0x28f/0x300
[   83.177402][ T6282]  ? hash_netport4_resize+0x235/0x1b60
[   83.177424][ T6282]  __vmalloc_node_range_noprof+0x690/0x12d0
[   83.177437][ T6282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.177469][ T6282]  ? alloc_pages_mpol+0x3cd/0x4a0
[   83.177488][ T6282]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   83.177505][ T6282]  ? rcu_is_watching+0x15/0xb0
[   83.177518][ T6282]  ? hash_netport4_resize+0x235/0x1b60
[   83.177533][ T6282]  __kvmalloc_node_noprof+0x674/0x910
[   83.177549][ T6282]  ? hash_netport4_resize+0x235/0x1b60
[   83.177572][ T6282]  hash_netport4_resize+0x235/0x1b60
[   83.177590][ T6282]  ? hash_netport4_uadt+0xc97/0xf30
[   83.177609][ T6282]  ? __pfx_hash_netport4_add+0x10/0x10
[   83.177623][ T6282]  ? __pfx_hash_netport4_uadt+0x10/0x10
[   83.177651][ T6282]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   83.177679][ T6282]  call_ad+0x44e/0xb00
[   83.177699][ T6282]  ? __pfx_call_ad+0x10/0x10
[   83.177718][ T6282]  ? __nla_parse+0x40/0x60
[   83.177740][ T6282]  ip_set_ad+0x791/0x930
[   83.177759][ T6282]  ? __pfx_ip_set_ad+0x10/0x10
[   83.177798][ T6282]  nfnetlink_rcv_msg+0xb4d/0x1130
[   83.177814][ T6282]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   83.177839][ T6282]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   83.177877][ T6282]  ? __lock_acquire+0xab9/0xd20
[   83.177902][ T6282]  netlink_rcv_skb+0x208/0x470
[   83.177919][ T6282]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   83.177932][ T6282]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   83.177950][ T6282]  ? bpf_lsm_capable+0x9/0x20
[   83.177962][ T6282]  ? security_capable+0x7e/0x2e0
[   83.177983][ T6282]  nfnetlink_rcv+0x282/0x2590
[   83.177998][ T6282]  ? kernel_text_address+0xa5/0xe0
[   83.178015][ T6282]  ? __kernel_text_address+0xd/0x40
[   83.178035][ T6282]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   83.178050][ T6282]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.178066][ T6282]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   83.178079][ T6282]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   83.178093][ T6282]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   83.178110][ T6282]  ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0
[   83.178138][ T6282]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[   83.178155][ T6282]  ? __skb_clone+0x483/0x7a0
[   83.178176][ T6282]  ? rcu_is_watching+0x15/0xb0
[   83.178189][ T6282]  ? rcu_read_unlock_special+0x3a2/0x4b0
[   83.178207][ T6282]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   83.178249][ T6282]  ? netlink_deliver_tap+0x2e/0x1b0
[   83.178268][ T6282]  ? netlink_deliver_tap+0x2e/0x1b0
[   83.178288][ T6282]  netlink_unicast+0x82f/0x9e0
[   83.178307][ T6282]  ? __pfx_netlink_unicast+0x10/0x10
[   83.178321][ T6282]  ? netlink_sendmsg+0x642/0xb30
[   83.178335][ T6282]  ? skb_put+0x11b/0x210
[   83.178351][ T6282]  netlink_sendmsg+0x805/0xb30
[   83.178369][ T6282]  ? __pfx_netlink_sendmsg+0x10/0x10
[   83.178385][ T6282]  ? aa_sock_msg_perm+0xf1/0x1d0
[   83.178403][ T6282]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   83.178420][ T6282]  ? __pfx_netlink_sendmsg+0x10/0x10
[   83.178435][ T6282]  __sock_sendmsg+0x21c/0x270
[   83.178457][ T6282]  ____sys_sendmsg+0x505/0x830
[   83.178476][ T6282]  ? __pfx_____sys_sendmsg+0x10/0x10
[   83.178498][ T6282]  ? import_iovec+0x74/0xa0
[   83.178514][ T6282]  ___sys_sendmsg+0x21f/0x2a0
[   83.178532][ T6282]  ? __pfx____sys_sendmsg+0x10/0x10
[   83.178572][ T6282]  ? __fget_files+0x2a/0x420
[   83.178590][ T6282]  ? __fget_files+0x3a0/0x420
[   83.178611][ T6282]  __x64_sys_sendmsg+0x19b/0x260
[   83.178626][ T6282]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   83.178661][ T6282]  ? do_syscall_64+0xbe/0xfa0
[   83.178681][ T6282]  do_syscall_64+0xfa/0xfa0
[   83.178696][ T6282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.178708][ T6282]  ? asm_sysvec_call_function_single+0x1a/0x20
[   83.178722][ T6282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.178735][ T6282] RIP: 0033:0x7f54ba98ec29
[   83.178748][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.178760][ T6282] RSP: 002b:00007f54bb806038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   83.178774][ T6282] RAX: ffffffffffffffda RBX: 00007f54babd6090 RCX: 00007f54ba98ec29
[   83.178782][ T6282] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005
[   83.178788][ T6282] RBP: 00007f54baa11e41 R08: 0000000000000000 R09: 0000000000000000
[   83.178795][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.178802][ T6282] R13: 00007f54babd6128 R14: 00007f54babd6090 R15: 00007ffea703c748
[   83.178825][ T6282]  </TASK>
[   83.178886][ T6282] Mem-Info:
[   83.388157][ T6282] active_anon:6934 inactive_anon:0 isolated_anon:0
[   83.388157][ T6282]  active_file:1485 inactive_file:38245 isolated_file:0
[   83.388157][ T6282]  unevictable:1768 dirty:1809 writeback:0
[   83.388157][ T6282]  slab_reclaimable:9537 slab_unreclaimable:51880
[   83.388157][ T6282]  mapped:18614 shmem:3466 pagetables:943
[   83.388157][ T6282]  sec_pagetables:0 bounce:0
[   83.388157][ T6282]  kernel_misc_reclaimable:0
[   83.388157][ T6282]  free:295039 free_pcp:22794 free_cma:0
[   83.406002][ T6282] Node 0 active_anon:14500kB inactive_anon:0kB active_file:4404kB inactive_file:144724kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45776kB dirty:7132kB writeback:0kB shmem:8948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6960kB pagetables:1984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.418142][ T6282] Node 1 active_anon:13236kB inactive_anon:0kB active_file:1536kB inactive_file:8256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28680kB dirty:104kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4492kB pagetables:1788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.431175][ T6282] Node 0 DMA free:15360kB boost:0kB min:644kB low:804kB high:964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   83.443680][ T6282] lowmem_reserve[]: 0 804 804 804 804
[   83.446000][ T6282] Node 0 DMA32 free:263944kB boost:0kB min:33416kB low:41768kB high:50120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14500kB inactive_anon:0kB active_file:4404kB inactive_file:144724kB unevictable:3536kB writepending:7132kB zspages:0kB present:1556484kB managed:823580kB mlocked:0kB bounce:0kB free_pcp:42560kB local_pcp:27400kB free_cma:0kB
[   83.458897][ T6282] lowmem_reserve[]: 0 0 0 0 0
[   83.461245][ T6282] Node 1 DMA32 free:458492kB boost:0kB min:19272kB low:24088kB high:28904kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   83.474458][ T6282] lowmem_reserve[]: 0 0 854 854 854
[   83.476679][ T6282] Node 1 Normal free:442360kB boost:0kB min:36772kB low:45964kB high:55156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13236kB inactive_anon:0kB active_file:1536kB inactive_file:8256kB unevictable:3536kB writepending:104kB zspages:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:48944kB local_pcp:15524kB free_cma:0kB
[   83.490100][ T6282] lowmem_reserve[]: 0 0 0 0 0
[   83.492183][ T6282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   83.497284][ T6282] Node 0 DMA32: 472*4kB (ME) 239*8kB (UME) 407*16kB (UME) 442*32kB (UME) 140*64kB (UME) 59*128kB (UM) 39*256kB (UME) 16*512kB (ME) 14*1024kB (M) 1*2048kB (M) 46*4096kB (UM) = 263944kB
[   83.505023][ T6282] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   83.511850][ T6282] Node 1 Normal: 684*4kB (UME) 773*8kB (UME) 378*16kB (UME) 206*32kB (UME) 59*64kB (UME) 28*128kB (UME) 17*256kB (UME) 21*512kB (ME) 15*1024kB (UME) 9*2048kB (UME) 89*4096kB (UM) = 442360kB
[   83.519252][ T6282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.524396][ T6282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.528118][ T6282] 43193 total pagecache pages
[   83.530496][ T6282] 0 pages in swap cache
[   83.532350][ T6282] Free swap  = 124996kB
[   83.534055][ T6282] Total swap = 124996kB
[   83.535733][ T6282] 786301 pages RAM
[   83.537216][ T6282] 0 pages HighMem/MovableOnly
[   83.539103][ T6282] 243174 pages reserved
[   83.541141][ T6282] 0 pages cma reserved
[   83.685337][ T6300] loop1: detected capacity change from 0 to 2048
[   83.746766][ T6300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   84.361733][   T33] audit: type=1800 audit(1759299759.400:10): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.70" name="file1" dev="loop1" ino=15 res=0 errno=0
[   84.612173][ T6306] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   84.619754][ T6306] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   84.628166][ T6306] EXT4-fs (loop1): This should not happen!! Data will be lost
[   84.628166][ T6306] 
[   84.632879][ T6306] EXT4-fs (loop1): Total free blocks count 0
[   84.635263][ T6306] EXT4-fs (loop1): Free/Dirty block details
[   84.637534][ T6306] EXT4-fs (loop1): free_blocks=2415919104
[   84.640199][ T6306] EXT4-fs (loop1): dirty_blocks=3632
[   84.641937][ T6306] EXT4-fs (loop1): Block reservation details
[   84.643835][ T6306] EXT4-fs (loop1): i_reserved_data_blocks=227
[   84.704119][ T6320] netlink: 'syz.0.74': attribute type 6 has an invalid length.
[   84.707063][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   84.975889][   T40] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1570 with error 28
[   85.142502][ T6318] loop2: detected capacity change from 0 to 40427
[   85.153948][ T6318] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   85.160658][ T6318] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   85.181889][ T6318] F2FS-fs (loop2): invalid crc value
[   85.275739][ T6329] loop1: detected capacity change from 0 to 1024
[   85.311888][ T6318] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.330629][ T6318] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   85.333484][ T6318] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   85.604611][ T6322] loop0: detected capacity change from 0 to 32768
[   85.625643][ T6339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.80'.
[   85.636169][ T6322] btrfs: Deprecated parameter 'usebackuproot'
[   85.639012][ T6322] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   85.643604][ T6322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.75 (6322)
[   85.654743][ T6322] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.658651][ T6322] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   85.663578][ T6322] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   85.751993][ T6343] netlink: 'syz.1.81': attribute type 6 has an invalid length.
[   85.755178][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   85.771406][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.774841][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.846153][   T27] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   85.854385][ T6322] BTRFS error (device loop0): failed to load root extent
[   85.857065][ T6322] BTRFS warning (device loop0): try to load backup roots slot 1
[   85.868995][   T40] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   85.875208][ T6322] BTRFS warning (device loop0): couldn't read tree root
[   85.878110][ T6322] BTRFS warning (device loop0): try to load backup roots slot 2
[   85.881975][   T27] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   85.886291][ T6322] BTRFS warning (device loop0): couldn't read tree root
[   85.889206][ T6322] BTRFS warning (device loop0): try to load backup roots slot 3
[   85.900324][ T6322] BTRFS info (device loop0): rebuilding free space tree
[   85.914058][ T6322] BTRFS info (device loop0): disabling free space tree
[   85.916914][ T6322] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   85.921143][ T6322] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   85.928508][ T6322] BTRFS info (device loop0): setting nodatasum
[   85.931664][ T6322] BTRFS info (device loop0): setting nodatacow
[   85.934617][ T6322] BTRFS info (device loop0): enabling ssd optimizations
[   85.937411][ T6322] BTRFS info (device loop0): turning off barriers
[   85.940519][ T6322] BTRFS info (device loop0): turning on sync discard
[   85.943100][ T6322] BTRFS info (device loop0): enabling disk space caching
[   85.945649][ T6322] BTRFS info (device loop0): force clearing of disk cache
[   85.948376][ T6322] BTRFS info (device loop0): enabling auto defrag
[   85.953411][ T6322] BTRFS info (device loop0): trying to use backup root at mount time
[   85.956598][ T6322] BTRFS info (device loop0): max_inline set to 0
[   85.983379][ T6361] loop2: detected capacity change from 0 to 1024
[   86.024739][ T6361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   86.043914][ T6361] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.078632][   T33] audit: type=1800 audit(1759299761.110:11): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.79" name="file1" dev="loop2" ino=15 res=0 errno=0
[   86.099471][   T33] audit: type=1800 audit(1759299761.110:12): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.79" name="file1" dev="loop2" ino=15 res=0 errno=0
[   86.124464][   T33] audit: type=1800 audit(1759299761.160:13): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.75" name="file1" dev="overlay" ino=265 res=0 errno=0
[   86.216112][ T6361] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.79: lblock 0 mapped to illegal pblock 0 (length 4)
[   86.260932][ T6361] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117
[   86.274811][ T6361] EXT4-fs (loop2): This should not happen!! Data will be lost
[   86.274811][ T6361] 
[   86.290815][ T6367] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.79: lblock 0 mapped to illegal pblock 0 (length 1)
[   86.295610][ T5863] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.331688][ T6367] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.79: lblock 0 mapped to illegal pblock 0 (length 1)
[   86.351223][ T6367] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.79: lblock 0 mapped to illegal pblock 0 (length 1)
[   86.364869][ T6367] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.79: lblock 0 mapped to illegal pblock 0 (length 1)
[   86.441519][   T40] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 4: comm kworker/u10:2: lblock 4 mapped to illegal pblock 4 (length 2)
[   86.447307][   T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[   86.452568][   T40] EXT4-fs (loop2): This should not happen!! Data will be lost
[   86.452568][   T40] 
[   86.456395][   T40] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u10:2: lblock 8 mapped to illegal pblock 8 (length 4)
[   86.523016][ T1271] cfg80211: failed to load regulatory.db
[   86.577982][   T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117
[   86.582065][   T40] EXT4-fs (loop2): This should not happen!! Data will be lost
[   86.582065][   T40] 
[   86.615998][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   87.038733][ T6372] loop0: detected capacity change from 0 to 2048
[   87.067771][ T5862] udevd[5862]: incorrect nilfs2 checksum on /dev/loop0
[   87.072889][ T6372] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   87.092664][ T6377] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.104505][ T6372] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[   87.123426][ T6372] Remounting filesystem read-only
[   87.222149][   T33] audit: type=1326 audit(1759299762.260:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ba98ec29 code=0x7ffc0000
[   87.237048][   T33] audit: type=1326 audit(1759299762.260:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ba98ec29 code=0x7ffc0000
[   87.253216][   T33] audit: type=1326 audit(1759299762.270:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f54ba98ec29 code=0x7ffc0000
[   87.268052][   T33] audit: type=1326 audit(1759299762.270:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ba98ec29 code=0x7ffc0000
[   87.288949][   T33] audit: type=1326 audit(1759299762.270:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ba98ec29 code=0x7ffc0000
[   87.296080][   T33] audit: type=1326 audit(1759299762.270:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f54ba98ec29 code=0x7ffc0000
[   87.613256][ T6379] loop2: detected capacity change from 0 to 32768
[   87.620387][ T6379] btrfs: Deprecated parameter 'usebackuproot'
[   87.629129][ T6379] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   87.643847][ T6379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.87 (6379)
[   87.669305][ T6379] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.679568][ T6379] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   87.683010][ T6379] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   87.784326][ T3601] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   87.828669][ T6379] BTRFS error (device loop2): failed to load root extent
[   87.839487][ T6379] BTRFS warning (device loop2): try to load backup roots slot 1
[   87.879524][ T3449] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   87.886246][ T6379] BTRFS warning (device loop2): couldn't read tree root
[   87.889011][ T6379] BTRFS warning (device loop2): try to load backup roots slot 2
[   87.923451][ T3449] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   87.927470][ T6379] BTRFS warning (device loop2): couldn't read tree root
[   87.939572][ T6379] BTRFS warning (device loop2): try to load backup roots slot 3
[   87.970569][ T6379] BTRFS info (device loop2): rebuilding free space tree
[   88.001680][ T6379] BTRFS info (device loop2): disabling free space tree
[   88.010812][ T6379] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   88.015541][ T6379] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   88.039310][ T6379] BTRFS info (device loop2): setting nodatasum
[   88.041890][ T6379] BTRFS info (device loop2): setting nodatacow
[   88.044331][ T6379] BTRFS info (device loop2): enabling ssd optimizations
[   88.069569][ T6379] BTRFS info (device loop2): turning off barriers
[   88.072000][ T6379] BTRFS info (device loop2): turning on sync discard
[   88.074516][ T6379] BTRFS info (device loop2): enabling disk space caching
[   88.077161][ T6379] BTRFS info (device loop2): force clearing of disk cache
[   88.099487][ T6379] BTRFS info (device loop2): enabling auto defrag
[   88.101964][ T6379] BTRFS info (device loop2): trying to use backup root at mount time
[   88.105118][ T6379] BTRFS info (device loop2): max_inline set to 0
[   88.196777][ T6379] overlayfs: failed to resolve './file0/file0': -2
[   88.270888][ T5853] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.520916][ T6407] fuse: Bad value for 'fd'
[   89.023334][ T6420] loop0: detected capacity change from 0 to 2048
[   89.050611][ T6420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.082268][ T6415] loop2: detected capacity change from 0 to 40427
[   89.095513][ T6415] F2FS-fs (loop2): invalid crc value
[   89.196863][ T6415] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   89.204827][ T6415] F2FS-fs (loop2): Start checkpoint disabled!
[   89.208516][ T6415] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   89.213200][ T6415] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   89.240396][ T6415] syz.2.93: attempt to access beyond end of device
[   89.240396][ T6415] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   89.276519][ T3601] kworker/u9:6: attempt to access beyond end of device
[   89.276519][ T3601] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   89.286260][ T3601] CPU: 0 UID: 0 PID: 3601 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[   89.286274][ T3601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.286280][ T3601] Workqueue: writeback wb_workfn (flush-7:2)
[   89.286303][ T3601] Call Trace:
[   89.286307][ T3601]  <TASK>
[   89.286311][ T3601]  dump_stack_lvl+0x189/0x250
[   89.286325][ T3601]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.286334][ T3601]  ? __pfx_queue_work_on+0x10/0x10
[   89.286342][ T3601]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   89.286353][ T3601]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   89.286367][ T3601]  f2fs_handle_critical_error+0x37c/0x540
[   89.286380][ T3601]  f2fs_write_end_io+0x886/0xb60
[   89.286399][ T3601]  __submit_merged_bio+0x27a/0x6a0
[   89.286410][ T3601]  __submit_merged_write_cond+0x255/0x530
[   89.286427][ T3601]  f2fs_write_data_pages+0x261d/0x3000
[   89.286452][ T3601]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   89.286468][ T3601]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   89.286496][ T3601]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   89.286511][ T3601]  ? trace_f2fs_writepages+0x7f/0x200
[   89.286519][ T3601]  ? f2fs_write_node_pages+0x478/0x6e0
[   89.286534][ T3601]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   89.286548][ T3601]  ? __lock_acquire+0xab9/0xd20
[   89.286564][ T3601]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   89.286573][ T3601]  do_writepages+0x32e/0x550
[   89.286584][ T3601]  ? reacquire_held_locks+0x127/0x1d0
[   89.286591][ T3601]  ? writeback_sb_inodes+0x384/0x1010
[   89.286605][ T3601]  __writeback_single_inode+0x145/0xff0
[   89.286613][ T3601]  ? do_raw_spin_unlock+0x4d/0x240
[   89.286624][ T3601]  writeback_sb_inodes+0x6c7/0x1010
[   89.286645][ T3601]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   89.286675][ T3601]  ? rcu_is_watching+0x15/0xb0
[   89.286688][ T3601]  wb_writeback+0x43b/0xaf0
[   89.286700][ T3601]  ? queue_io+0x2e1/0x590
[   89.286709][ T3601]  ? __pfx_wb_writeback+0x10/0x10
[   89.286722][ T3601]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.286732][ T3601]  wb_workfn+0x409/0xef0
[   89.286751][ T3601]  ? __pfx_wb_workfn+0x10/0x10
[   89.286791][ T3601]  ? __lock_acquire+0xab9/0xd20
[   89.286807][ T3601]  ? process_scheduled_works+0x9ef/0x17b0
[   89.286821][ T3601]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.286829][ T3601]  ? process_scheduled_works+0x9ef/0x17b0
[   89.286839][ T3601]  ? process_scheduled_works+0x9ef/0x17b0
[   89.286851][ T3601]  process_scheduled_works+0xae1/0x17b0
[   89.286877][ T3601]  ? __pfx_process_scheduled_works+0x10/0x10
[   89.286902][ T3601]  worker_thread+0x8a0/0xda0
[   89.286914][ T3601]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   89.286927][ T3601]  ? __kthread_parkme+0x7b/0x200
[   89.286940][ T3601]  kthread+0x711/0x8a0
[   89.286952][ T3601]  ? __pfx_worker_thread+0x10/0x10
[   89.286962][ T3601]  ? __pfx_kthread+0x10/0x10
[   89.286972][ T3601]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.286979][ T3601]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.286988][ T3601]  ? __pfx_kthread+0x10/0x10
[   89.286997][ T3601]  ret_from_fork+0x4bc/0x870
[   89.287011][ T3601]  ? __pfx_ret_from_fork+0x10/0x10
[   89.287025][ T3601]  ? __switch_to_asm+0x39/0x70
[   89.287034][ T3601]  ? __switch_to_asm+0x33/0x70
[   89.287042][ T3601]  ? __pfx_kthread+0x10/0x10
[   89.287051][ T3601]  ret_from_fork_asm+0x1a/0x30
[   89.287070][ T3601]  </TASK>
[   89.287074][ T3601] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   89.875673][ T6435] loop0: detected capacity change from 0 to 32768
[   89.878950][ T6435] btrfs: Deprecated parameter 'usebackuproot'
[   89.909414][ T6435] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   89.913348][ T6435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.101 (6435)
[   89.929214][ T6437] loop2: detected capacity change from 0 to 512
[   89.940081][ T6437] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   90.099035][ T6435] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.107006][ T6435] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   90.117150][ T6435] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   90.207060][ T6445] process 'syz.2.98' launched '/dev/fd/3' with NULL argv: empty string added
[   90.549048][ T1091] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   90.559902][ T6435] BTRFS error (device loop0): failed to load root extent
[   90.563539][ T6435] BTRFS warning (device loop0): try to load backup roots slot 1
[   90.570829][   T27] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   90.578236][ T6435] BTRFS warning (device loop0): couldn't read tree root
[   90.582994][ T6435] BTRFS warning (device loop0): try to load backup roots slot 2
[   90.591884][   T27] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   90.603099][ T6435] BTRFS warning (device loop0): couldn't read tree root
[   90.607189][ T6435] BTRFS warning (device loop0): try to load backup roots slot 3
[   90.623309][ T6435] BTRFS info (device loop0): rebuilding free space tree
[   90.632588][ T6435] BTRFS info (device loop0): disabling free space tree
[   90.634968][ T6435] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   90.638364][ T6435] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   90.647152][ T6435] BTRFS info (device loop0): setting nodatasum
[   90.649880][ T6435] BTRFS info (device loop0): setting nodatacow
[   90.651975][ T6435] BTRFS info (device loop0): enabling ssd optimizations
[   90.654232][ T6435] BTRFS info (device loop0): turning off barriers
[   90.656597][ T6435] BTRFS info (device loop0): turning on sync discard
[   90.658707][ T6435] BTRFS info (device loop0): enabling disk space caching
[   90.661726][ T6435] BTRFS info (device loop0): force clearing of disk cache
[   90.664356][ T6435] BTRFS info (device loop0): enabling auto defrag
[   90.666463][ T6435] BTRFS info (device loop0): trying to use backup root at mount time
[   90.669089][ T6435] BTRFS info (device loop0): max_inline set to 0
[   90.851398][ T6459] netlink: 'syz.2.102': attribute type 6 has an invalid length.
[   90.857792][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'.
[   90.948581][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   90.952479][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   90.955833][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   90.963618][ T6461] loop2: detected capacity change from 0 to 128
[   90.967716][ T6461] EXT4-fs: Ignoring removed nobh option
[   90.979743][   T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   90.984059][ T6461] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.999208][ T6461] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   91.010964][ T6461] ptrace attach of "/syz-executor exec"[5853] was attempted by "\x22"[6461]
[   91.014743][ T6461] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 225 (only 1 groups)
[   91.159930][   T47] usb 1-1: Using ep0 maxpacket: 32
[   91.167382][   T47] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[   91.171689][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.177370][   T47] usb 1-1: config 0 descriptor??
[   91.193360][   T47] usb 1-1: selecting invalid altsetting 3
[   91.195460][   T47] comedi comedi5: could not set alternate setting 3 in high speed
[   91.198509][   T47] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[   91.205176][   T47] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22
[   91.269732][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   91.310319][ T6465] loop1: detected capacity change from 0 to 1024
[   91.319782][ T6465] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[   91.319782][ T6465] 
[   91.323875][ T6465] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   91.395215][   T47] usb 1-1: USB disconnect, device number 2
[   91.421496][    T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   91.427398][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   91.437863][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   91.441402][    T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   91.444195][    T9] usb 3-1: Product: syz
[   91.445513][    T9] usb 3-1: Manufacturer: syz
[   91.446960][    T9] usb 3-1: SerialNumber: syz
[   91.454566][    T9] usb 3-1: config 0 descriptor??
[   91.462001][    T9] usb 3-1: selecting invalid altsetting 0
[   91.766997][ T6478] netlink: 'syz.1.109': attribute type 6 has an invalid length.
[   91.775387][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'.
[   91.941831][ T5863] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.109655][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   92.162607][ T6485] loop0: detected capacity change from 0 to 8192
[   92.259607][    T9] usb 2-1: Using ep0 maxpacket: 32
[   92.263891][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.268474][    T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[   92.272642][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.278031][    T9] usb 2-1: config 0 descriptor??
[   92.496026][    T9] stadia 0003:18D1:9400.0001: unknown main item tag 0x1
[   92.499055][    T9] stadia 0003:18D1:9400.0001: unknown main item tag 0x2
[   92.510029][    T9] stadia 0003:18D1:9400.0001: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0
[   92.514642][    T9] stadia 0003:18D1:9400.0001: no inputs found
[   92.517285][    T9] stadia 0003:18D1:9400.0001: force feedback init failed
[   92.723582][   T47] usb 2-1: USB disconnect, device number 3
[   93.092056][ T6491] loop0: detected capacity change from 0 to 1024
[   93.095334][ T6491] EXT4-fs: Ignoring removed orlov option
[   93.097290][ T6491] EXT4-fs: Ignoring removed nobh option
[   93.099067][ T6491] EXT4-fs: Ignoring removed bh option
[   93.125129][ T6491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.133133][ T6491] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.114: Allocating blocks 481-513 which overlap fs metadata
[   93.164051][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.472347][ T6503] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.725589][ T6500] loop1: detected capacity change from 0 to 40427
[   93.733881][ T6500] F2FS-fs (loop1): invalid crc value
[   93.779061][ T6500] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   93.783447][ T6500] F2FS-fs (loop1): Start checkpoint disabled!
[   93.786564][ T6500] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   93.792317][ T6500] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   93.798957][ T6500] F2FS-fs (loop1): Corrupted max_depth of 3: 25165825
[   93.942676][   T47] usb 3-1: USB disconnect, device number 3
[   93.993170][ T5853] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   94.245145][ T6510] loop0: detected capacity change from 0 to 8192
[   94.278745][ T6510] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.567815][ T6514] loop1: detected capacity change from 0 to 32768
[   94.658469][ T6514] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   94.730413][ T6519] loop0: detected capacity change from 0 to 32768
[   94.735164][ T6519] btrfs: Unknown parameter 'fragment'
[   94.865478][ T5857] ocfs2: Unmounting device (7,1) on (node local)
[   95.371078][ T6529] loop0: detected capacity change from 0 to 40427
[   95.378910][ T6529] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   95.390372][ T6529] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   95.395851][ T6529] F2FS-fs (loop0): invalid crc value
[   95.432416][ T6529] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.436034][ T6529] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   95.438063][ T6529] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   95.689551][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   95.831801][ T6560] netlink: 'syz.1.133': attribute type 6 has an invalid length.
[   95.834708][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[   95.844489][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   95.850830][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   95.860966][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.876226][    T9] usb 1-1: config 0 descriptor??
[   96.175895][ T6558] loop2: detected capacity change from 0 to 32768
[   96.179713][ T6558] btrfs: Deprecated parameter 'usebackuproot'
[   96.182336][ T6558] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   96.186741][ T6558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.132 (6558)
[   96.205419][ T6562] loop1: detected capacity change from 0 to 32768
[   96.210323][ T6558] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.214337][ T6558] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   96.220629][ T6562] btrfs: Deprecated parameter 'usebackuproot'
[   96.223048][ T6562] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   96.227484][ T6562] BTRFS info: device /dev/loop1 (7:1) using temp-fsid a6c46a56-f794-43e8-9cc8-3aaacc90686c
[   96.232396][ T6562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.134 (6562)
[   96.240403][ T6562] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.244899][ T6562] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   96.267781][ T6562] BTRFS error (device loop1): superblock checksum mismatch
[   96.271597][ T6562] BTRFS error (device loop1): open_ctree failed: -22
[   96.322968][   T40] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   96.332934][ T6558] BTRFS error (device loop2): failed to load root extent
[   96.335779][ T6558] BTRFS warning (device loop2): try to load backup roots slot 1
[   96.339174][ T1091] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   96.340188][    T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   96.379699][ T6558] BTRFS warning (device loop2): couldn't read tree root
[   96.382463][ T6558] BTRFS warning (device loop2): try to load backup roots slot 2
[   96.413161][ T1091] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   96.417196][ T6558] BTRFS warning (device loop2): couldn't read tree root
[   96.422380][ T6558] BTRFS warning (device loop2): try to load backup roots slot 3
[   96.428598][   T40] BTRFS warning (device loop2): checksum verify failed on logical 5242880 mirror 1 wanted 0xc0857788 found 0x43ea095e level 0
[   96.444904][ T6558] BTRFS warning (device loop2): couldn't read tree root
[   96.501467][ T6558] BTRFS error (device loop2): open_ctree failed: -5
[   96.640575][   T47] usb 1-1: USB disconnect, device number 3
[   96.730494][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'.
[   96.956394][ T6585] loop2: detected capacity change from 0 to 4096
[   97.031960][ T6585] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   97.254140][ T6589] loop1: detected capacity change from 0 to 1024
[   97.258454][ T6591] loop2: detected capacity change from 0 to 1024
[   97.355036][   T33] kauditd_printk_skb: 17 callbacks suppressed
[   97.355051][   T33] audit: type=1800 audit(1759299772.390:37): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.140" name="file1" dev="loop1" ino=2 res=0 errno=0
[   97.635638][ T6597] binder: 6596:6597 ioctl c0306201 200000000080 returned -22
[   97.804001][ T6594] loop2: detected capacity change from 0 to 32768
[   97.810733][ T6594] btrfs: Deprecated parameter 'usebackuproot'
[   97.816726][ T6594] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   97.824317][ T6594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.142 (6594)
[   97.840229][ T6594] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.844195][ T6594] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   97.847885][ T6594] BTRFS error (device loop2): superblock checksum mismatch
[   97.858211][ T6594] BTRFS error (device loop2): open_ctree failed: -22
[   97.996348][ T6610] loop1: detected capacity change from 0 to 512
[   98.010248][ T6610] EXT4-fs: Ignoring removed bh option
[   98.014882][ T6610] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   98.074066][ T6611] loop2: detected capacity change from 0 to 64
[   98.091656][ T6611] minix: Unknown parameter '{c%cd(vT'j;Y	ka@@oa00000000000000000000000'
[   98.115828][ T6610] EXT4-fs (loop1): 1 truncate cleaned up
[   98.139237][ T6610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.287752][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.339245][ T6616] loop1: detected capacity change from 0 to 2048
[   98.350230][ T6616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.369973][   T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   98.531887][ T6618] loop0: detected capacity change from 0 to 4096
[   98.550026][ T6616] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[   98.565921][ T6618] ntfs3(loop0): ino=b, mi_enum_attr
[   98.568046][ T6618] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   98.574882][ T6618] ntfs3(loop0): Failed to load $Extend (-22).
[   98.576859][ T6618] ntfs3(loop0): Failed to initialize $Extend.
[   98.639129][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.643894][   T47] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   98.647373][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.655021][   T47] usb 3-1: config 0 descriptor??
[   99.068303][   T47] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   99.071535][   T47] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x3
[   99.078190][   T47] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0003/input/input5
[   99.129214][   T47] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   99.608779][ T6635] loop1: detected capacity change from 0 to 40427
[   99.616917][ T6635] F2FS-fs (loop1): invalid crc value
[   99.648548][ T6635] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   99.651829][ T6635] F2FS-fs (loop1): Start checkpoint disabled!
[   99.654928][ T6635] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   99.658569][ T6635] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   99.691024][ T6635] syz.1.154: attempt to access beyond end of device
[   99.691024][ T6635] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   99.718075][ T3032] kworker/u9:4: attempt to access beyond end of device
[   99.718075][ T3032] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   99.724020][ T3032] CPU: 0 UID: 0 PID: 3032 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[   99.724041][ T3032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.724050][ T3032] Workqueue: writeback wb_workfn (flush-7:1)
[   99.724081][ T3032] Call Trace:
[   99.724087][ T3032]  <TASK>
[   99.724112][ T3032]  dump_stack_lvl+0x189/0x250
[   99.724134][ T3032]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.724148][ T3032]  ? __pfx_queue_work_on+0x10/0x10
[   99.724160][ T3032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   99.724178][ T3032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   99.724203][ T3032]  f2fs_handle_critical_error+0x37c/0x540
[   99.724224][ T3032]  f2fs_write_end_io+0x886/0xb60
[   99.724256][ T3032]  __submit_merged_bio+0x27a/0x6a0
[   99.724276][ T3032]  __submit_merged_write_cond+0x255/0x530
[   99.724304][ T3032]  f2fs_write_data_pages+0x261d/0x3000
[   99.724348][ T3032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   99.724381][ T3032]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   99.724429][ T3032]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   99.724455][ T3032]  ? trace_f2fs_writepages+0x7f/0x200
[   99.724470][ T3032]  ? f2fs_write_node_pages+0x478/0x6e0
[   99.724496][ T3032]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   99.724516][ T3032]  ? __lock_acquire+0xab9/0xd20
[   99.724538][ T3032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   99.724552][ T3032]  do_writepages+0x32e/0x550
[   99.724568][ T3032]  ? reacquire_held_locks+0x127/0x1d0
[   99.724578][ T3032]  ? writeback_sb_inodes+0x384/0x1010
[   99.724600][ T3032]  __writeback_single_inode+0x145/0xff0
[   99.724615][ T3032]  ? do_raw_spin_unlock+0x4d/0x240
[   99.724634][ T3032]  writeback_sb_inodes+0x6c7/0x1010
[   99.724668][ T3032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   99.724714][ T3032]  ? rcu_is_watching+0x15/0xb0
[   99.724736][ T3032]  wb_writeback+0x43b/0xaf0
[   99.724758][ T3032]  ? queue_io+0x2e1/0x590
[   99.724775][ T3032]  ? __pfx_wb_writeback+0x10/0x10
[   99.724797][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   99.724814][ T3032]  wb_workfn+0x409/0xef0
[   99.724842][ T3032]  ? __pfx_wb_workfn+0x10/0x10
[   99.724861][ T3032]  ? __lock_acquire+0xab9/0xd20
[   99.724888][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   99.724912][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   99.724924][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   99.724940][ T3032]  ? process_scheduled_works+0x9ef/0x17b0
[   99.725000][ T3032]  process_scheduled_works+0xae1/0x17b0
[   99.725043][ T3032]  ? __pfx_process_scheduled_works+0x10/0x10
[   99.725076][ T3032]  worker_thread+0x8a0/0xda0
[   99.725095][ T3032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   99.725115][ T3032]  ? __kthread_parkme+0x7b/0x200
[   99.725135][ T3032]  kthread+0x711/0x8a0
[   99.725150][ T3032]  ? __pfx_worker_thread+0x10/0x10
[   99.725164][ T3032]  ? __pfx_kthread+0x10/0x10
[   99.725179][ T3032]  ? _raw_spin_unlock_irq+0x23/0x50
[   99.725193][ T3032]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.725208][ T3032]  ? __pfx_kthread+0x10/0x10
[   99.725222][ T3032]  ret_from_fork+0x4bc/0x870
[   99.725241][ T3032]  ? __pfx_ret_from_fork+0x10/0x10
[   99.725264][ T3032]  ? __switch_to_asm+0x39/0x70
[   99.725280][ T3032]  ? __switch_to_asm+0x33/0x70
[   99.725294][ T3032]  ? __pfx_kthread+0x10/0x10
[   99.725310][ T3032]  ret_from_fork_asm+0x1a/0x30
[   99.725337][ T3032]  </TASK>
[   99.726419][ T3032] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  100.771153][   T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  100.949528][   T47] usb 2-1: Using ep0 maxpacket: 32
[  100.954159][   T47] usb 2-1: config 2 has an invalid interface number: 20 but max is 0
[  100.956784][   T47] usb 2-1: config 2 has no interface number 0
[  100.960746][   T47] usb 2-1: config 2 interface 20 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  100.964757][   T47] usb 2-1: config 2 interface 20 has no altsetting 0
[  100.966655][ T5883] usb 3-1: USB disconnect, device number 4
[  100.968430][   T47] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93
[  100.973635][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.066361][ T6656] loop0: detected capacity change from 0 to 2048
[  101.094229][ T5862] udevd[5862]: incorrect nilfs2 checksum on /dev/loop0
[  101.111761][ T6656] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  101.160379][ T5862] udevd[5862]: incorrect nilfs2 checksum on /dev/loop0
[  101.234092][ T6650] netlink: 'syz.1.158': attribute type 1 has an invalid length.
[  101.237313][ T6650] netlink: 224 bytes leftover after parsing attributes in process `syz.1.158'.
[  101.284033][   T47] usb 2-1: string descriptor 0 read error: -71
[  101.313098][   T47] usb 2-1: USB disconnect, device number 4
[  101.420554][ T6662] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.464453][ T6654] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[  101.472116][ T6654] Remounting filesystem read-only
[  101.475761][ T6654] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[  101.641518][ T6654] syz.0.159 (6654) used greatest stack depth: 19912 bytes left
[  101.890936][ T6667] loop2: detected capacity change from 0 to 32768
[  101.894535][ T6667] btrfs: Deprecated parameter 'usebackuproot'
[  101.919969][ T6667] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  101.924174][ T6667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.162 (6667)
[  101.931951][ T6675] loop1: detected capacity change from 0 to 512
[  101.965163][ T6675] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.165: corrupted in-inode xattr: invalid ea_ino
[  101.977865][ T6675] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.165: couldn't read orphan inode 15 (err -117)
[  101.981487][ T5883] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  102.004348][ T6667] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.008092][ T6675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.013681][ T6667] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  102.034633][ T6667] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  102.116750][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.141057][ T5883] usb 1-1: not running at top speed; connect to a high speed hub
[  102.143164][   T65] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  102.146100][ T5883] usb 1-1: config 11 has an invalid interface number: 76 but max is 2
[  102.155007][ T6667] BTRFS error (device loop2): failed to load root extent
[  102.157143][ T6667] BTRFS warning (device loop2): try to load backup roots slot 1
[  102.159570][ T5883] usb 1-1: config 11 has an invalid interface number: 215 but max is 2
[  102.164861][ T5883] usb 1-1: config 11 has an invalid interface number: 158 but max is 2
[  102.168192][ T5883] usb 1-1: config 11 has an invalid interface number: 68 but max is 2
[  102.170146][   T65] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  102.189629][ T5883] usb 1-1: config 11 contains an unexpected descriptor of type 0x1, skipping
[  102.193650][ T5883] usb 1-1: config 11 contains an unexpected descriptor of type 0x1, skipping
[  102.197307][ T5883] usb 1-1: config 11 has an invalid interface number: 70 but max is 2
[  102.198003][ T6667] BTRFS warning (device loop2): couldn't read tree root
[  102.205965][ T5883] usb 1-1: config 11 has 5 interfaces, different from the descriptor's value: 3
[  102.212919][ T5883] usb 1-1: config 11 has no interface number 0
[  102.219098][ T6667] BTRFS warning (device loop2): try to load backup roots slot 2
[  102.226068][ T5883] usb 1-1: config 11 has no interface number 1
[  102.228522][ T5883] usb 1-1: config 11 has no interface number 2
[  102.241391][ T5883] usb 1-1: config 11 has no interface number 3
[  102.243845][ T5883] usb 1-1: config 11 has no interface number 4
[  102.246375][ T5883] usb 1-1: config 11 interface 76 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  102.259630][ T3032] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  102.266302][ T6667] BTRFS warning (device loop2): couldn't read tree root
[  102.269163][ T5883] usb 1-1: config 11 interface 76 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  102.276489][ T6667] BTRFS warning (device loop2): try to load backup roots slot 3
[  102.279821][ T5883] usb 1-1: config 11 interface 76 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  102.284061][ T5883] usb 1-1: config 11 interface 76 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  102.298638][ T5883] usb 1-1: config 11 interface 76 altsetting 0 endpoint 0x2 has invalid maxpacket 576, setting to 64
[  102.304333][ T5883] usb 1-1: config 11 interface 76 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  102.308460][ T5883] usb 1-1: config 11 interface 76 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 12
[  102.323632][ T5883] usb 1-1: config 11 interface 215 altsetting 239 has an endpoint descriptor with address 0x26, changing to 0x6
[  102.335732][ T6667] BTRFS info (device loop2): rebuilding free space tree
[  102.346075][ T5883] usb 1-1: config 11 interface 215 altsetting 239 endpoint 0x9 has an invalid bInterval 104, changing to 4
[  102.356382][ T5883] usb 1-1: config 11 interface 215 altsetting 239 has a duplicate endpoint with address 0xF, skipping
[  102.370390][ T5883] usb 1-1: config 11 interface 215 altsetting 239 has 3 endpoint descriptors, different from the interface descriptor's value: 28
[  102.386595][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  102.395863][ T6667] BTRFS info (device loop2): disabling free space tree
[  102.398877][ T6667] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  102.403315][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0xF, skipping
[  102.407531][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[  102.412878][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[  102.417413][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[  102.422022][ T6667] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  102.429290][ T5883] usb 1-1: config 11 interface 158 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  102.435422][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0xF, skipping
[  102.450348][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  102.455652][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0x1, skipping
[  102.465873][ T6667] BTRFS info (device loop2): setting nodatasum
[  102.468390][ T6667] BTRFS info (device loop2): setting nodatacow
[  102.471611][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0x1, skipping
[  102.475862][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[  102.480657][ T6667] BTRFS info (device loop2): enabling ssd optimizations
[  102.483502][ T6667] BTRFS info (device loop2): turning off barriers
[  102.486026][ T6667] BTRFS info (device loop2): turning on sync discard
[  102.488569][ T6667] BTRFS info (device loop2): enabling disk space caching
[  102.492033][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[  102.495997][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[  102.500023][ T6667] BTRFS info (device loop2): force clearing of disk cache
[  102.500470][ T5883] usb 1-1: config 11 interface 158 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  102.505335][ T6667] BTRFS info (device loop2): enabling auto defrag
[  102.506596][ T5883] usb 1-1: config 11 interface 68 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  102.511601][ T6667] BTRFS info (device loop2): trying to use backup root at mount time
[  102.514248][ T5883] usb 1-1: config 11 interface 68 altsetting 2 endpoint 0xC has invalid maxpacket 576, setting to 64
[  102.520812][ T5883] usb 1-1: config 11 interface 68 altsetting 2 has a duplicate endpoint with address 0xA, skipping
[  102.524845][ T6667] BTRFS info (device loop2): max_inline set to 0
[  102.525913][ T5883] usb 1-1: config 11 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  102.532863][ T5883] usb 1-1: config 11 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  102.536968][ T5883] usb 1-1: config 11 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[  102.552154][ T5883] usb 1-1: config 11 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  102.556410][ T5883] usb 1-1: config 11 interface 68 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 11
[  102.562709][ T5883] usb 1-1: config 11 interface 70 altsetting 186 has a duplicate endpoint with address 0xE, skipping
[  102.566979][ T5883] usb 1-1: config 11 interface 70 altsetting 186 has a duplicate endpoint with address 0xE, skipping
[  102.579409][ T5883] usb 1-1: config 11 interface 70 altsetting 186 has a duplicate endpoint with address 0x7, skipping
[  102.583585][ T5883] usb 1-1: config 11 interface 70 altsetting 186 has an invalid descriptor for endpoint zero, skipping
[  102.587734][ T5883] usb 1-1: config 11 interface 70 altsetting 186 has 4 endpoint descriptors, different from the interface descriptor's value: 9
[  102.598894][ T5883] usb 1-1: config 11 interface 215 has no altsetting 0
[  102.602376][ T5883] usb 1-1: config 11 interface 158 has no altsetting 0
[  102.605050][ T5883] usb 1-1: config 11 interface 68 has no altsetting 0
[  102.607748][ T5883] usb 1-1: config 11 interface 70 has no altsetting 0
[  102.615665][ T5883] usb 1-1: New USB device found, idVendor=0bda, idProduct=817f, bcdDevice= c.5d
[  102.619683][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.622726][ T5883] usb 1-1: Product: ᰊ
[  102.624473][ T5883] usb 1-1: SerialNumber: 냼䐼꾣゙꥓◨䙢꼽㎾돲ﶧ㉬ᓨᴡ劖备逯瑭羢葯᧠꫾翘掬ⴽ瓼鈽点딴뎑㸭竱頒綈ዯᩁ琺腍沮駿友䨑浗逫】轘ﶥ
[  102.675729][ T6667] overlayfs: failed to resolve './file0/file0': -2
[  102.885527][ T5853] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.954427][ T5883] usb 1-1: USB disconnect, device number 4
[  103.320615][ T6700] netlink: 'syz.2.167': attribute type 2 has an invalid length.
[  104.156197][ T6708] loop0: detected capacity change from 0 to 32768
[  104.160359][ T6708] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.169 (6708)
[  104.169662][ T6708] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  104.177068][ T6708] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  104.272985][ T6708] BTRFS info (device loop0): enabling ssd optimizations
[  104.275959][ T6708] BTRFS info (device loop0): enabling free space tree
[  104.299803][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  104.373459][ T5863] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  104.461159][   T10] usb 2-1: Using ep0 maxpacket: 16
[  104.466225][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.473001][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.484278][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  104.493291][   T10] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  104.499784][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.513393][   T10] usb 2-1: config 0 descriptor??
[  104.945109][   T10] hid-multitouch 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0
[  105.155048][    T9] usb 2-1: USB disconnect, device number 5
[  105.488092][ T6742] loop2: detected capacity change from 0 to 40427
[  105.492626][ T6742] F2FS-fs: heap/no_heap options were deprecated
[  105.495626][ T6742] F2FS-fs (loop2): build fault injection rate: 19
[  105.498115][ T6742] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  105.505238][ T6742] F2FS-fs (loop2): invalid crc value
[  105.515408][ T6742] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  105.561662][ T6742] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  105.572029][ T6742] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  105.576018][ T6742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  105.585929][ T6742] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  105.595465][ T6742] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  105.601622][ T6742] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  105.927554][ T6753] loop2: detected capacity change from 0 to 1024
[  105.956143][ T6753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  105.976249][ T6753] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.000200][   T33] audit: type=1800 audit(1759299781.040:38): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.175" name="file1" dev="loop2" ino=15 res=0 errno=0
[  106.019939][   T33] audit: type=1800 audit(1759299781.040:39): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.175" name="file1" dev="loop2" ino=15 res=0 errno=0
[  106.039750][ T6753] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.175: lblock 0 mapped to illegal pblock 0 (length 1)
[  106.045243][ T6753] EXT4-fs (loop2): Remounting filesystem read-only
[  106.060852][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  106.269847][   T33] audit: type=1326 audit(1759299781.300:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.1.180" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7caf8ec29 code=0x0
[  106.276297][   T10] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  106.278705][   T33] audit: type=1326 audit(1759299781.300:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.1.180" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7caf8ec29 code=0x0
[  106.539571][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  106.634324][   T33] audit: type=1804 audit(1759299781.670:42): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.183" name="/newroot/73/file0" dev="tmpfs" ino=418 res=1 errno=0
[  106.693207][   T24] usb 3-1: config 12 has an invalid interface number: 224 but max is 3
[  106.696058][   T24] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  106.698958][   T24] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  106.702536][   T24] usb 3-1: config 12 has 2 interfaces, different from the descriptor's value: 4
[  106.706048][   T24] usb 3-1: config 12 has no interface number 0
[  106.707943][   T24] usb 3-1: config 12 has no interface number 1
[  106.710166][   T24] usb 3-1: config 12 interface 224 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  106.714848][   T24] usb 3-1: too many endpoints for config 12 interface 2 altsetting 5: 70, using maximum allowed: 30
[  106.718807][   T24] usb 3-1: config 12 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 70
[  106.726403][   T24] usb 3-1: config 12 interface 224 has no altsetting 0
[  106.728839][   T24] usb 3-1: config 12 interface 2 has no altsetting 0
[  106.735327][   T24] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=79.c6
[  106.738861][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.743131][   T24] usb 3-1: Product: ｒॷᑙꬩⵂ꺃㣛먏ᾬ걭㨩⃽뜴ꑖ빻桖뜻㪙飶쪔諚⭣㹀ᒪ颷∇웳脖櫍乹౿䟩㸈摰Ⳣ袊仟៣슂畭軚楱诬큤※백륎賥졿紳阷櫁샐㺄׮☞婋ꫨ瑩ഁ裂ﺝוּ䜭Zꓬ䌃轏㿄룞鎝㽳ꖃ斈㷈⒔ၟꙆꬍ뙲쒷䟺ퟒ⏾㰼ꌽ路
[  106.759530][   T24] usb 3-1: Manufacturer: ၟ
[  106.761422][   T24] usb 3-1: SerialNumber: syz
[  106.818278][ T6786] loop1: detected capacity change from 0 to 4096
[  106.834548][ T6786] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  106.849983][ T6786] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  106.864402][ T6787] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.895773][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.910867][ T6786] Remounting filesystem read-only
[  106.913074][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.913626][ T6790] loop0: detected capacity change from 0 to 1024
[  106.918839][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.928146][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.936412][ T6790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  106.938875][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.941527][ T6790] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.957124][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.962261][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.966799][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.975882][   T33] audit: type=1800 audit(1759299782.000:43): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.187" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  106.983420][   T24] usb 3-1: USB disconnect, device number 5
[  106.984516][   T24] ==================================================================
[  106.988678][   T24] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0
[  106.991010][   T24] Read of size 8 at addr ffff8880206518a0 by task kworker/1:0/24
[  106.991461][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.994058][   T24] 
[  106.994079][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) 
[  106.994102][   T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.994117][   T24] Workqueue: usb_hub_wq hub_event
[  106.994145][   T24] Call Trace:
[  106.994157][   T24]  <TASK>
[  106.994167][   T24]  dump_stack_lvl+0x189/0x250
[  106.994194][   T24]  ? __kasan_check_byte+0x12/0x40
[  106.994220][   T24]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.994239][   T24]  ? lock_release+0x4b/0x3e0
[  106.994270][   T24]  ? __virt_addr_valid+0x4a5/0x5c0
[  106.994292][   T24]  print_report+0xca/0x240
[  106.994319][   T24]  ? hdm_disconnect+0x10d/0x1c0
[  106.994341][   T24]  kasan_report+0x118/0x150
[  106.994362][   T24]  ? hdm_disconnect+0x10d/0x1c0
[  106.994387][   T24]  hdm_disconnect+0x10d/0x1c0
[  106.994409][   T24]  usb_unbind_interface+0x26e/0x910
[  106.994456][   T24]  ? __pfx_usb_unbind_interface+0x10/0x10
[  106.994474][   T24]  device_release_driver_internal+0x4d9/0x800
[  106.994501][   T24]  bus_remove_device+0x34d/0x410
[  106.994519][   T24]  device_del+0x511/0x8e0
[  106.994537][   T24]  ? __pm_runtime_barrier+0x212/0x460
[  106.994556][   T24]  ? __pfx_device_del+0x10/0x10
[  106.994574][   T24]  ? __pfx___mutex_lock+0x10/0x10
[  106.994596][   T24]  usb_disable_device+0x3e9/0x8a0
[  106.994615][   T24]  usb_disconnect+0x330/0x950
[  106.994635][   T24]  hub_event+0x1cf5/0x4a20
[  106.994654][   T24]  ? do_raw_spin_lock+0x121/0x290
[  106.994674][   T24]  ? register_lock_class+0x51/0x320
[  106.994699][   T24]  ? __pfx_hub_event+0x10/0x10
[  106.994711][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  106.994726][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.994734][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  106.994745][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  106.994755][   T24]  process_scheduled_works+0xae1/0x17b0
[  106.994773][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  106.994792][   T24]  worker_thread+0x8a0/0xda0
[  106.994812][   T24]  kthread+0x711/0x8a0
[  106.994827][   T24]  ? __pfx_worker_thread+0x10/0x10
[  106.994852][   T24]  ? __pfx_kthread+0x10/0x10
[  106.994867][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.994881][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.994897][   T24]  ? __pfx_kthread+0x10/0x10
[  106.994912][   T24]  ret_from_fork+0x4bc/0x870
[  106.994927][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  106.994945][   T24]  ? __switch_to_asm+0x39/0x70
[  106.994960][   T24]  ? __switch_to_asm+0x33/0x70
[  106.994973][   T24]  ? __pfx_kthread+0x10/0x10
[  106.994986][   T24]  ret_from_fork_asm+0x1a/0x30
[  106.995005][   T24]  </TASK>
[  106.995012][   T24] 
[  106.998573][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  106.999150][   T24] Allocated by task 24:
[  106.999160][   T24]  kasan_save_track+0x3e/0x80
[  107.024610][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.025757][   T24]  __kasan_kmalloc+0x93/0xb0
[  107.027650][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.029496][   T24]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  107.029517][   T24]  hdm_probe+0x96/0x1400
[  107.029529][   T24]  usb_probe_interface+0x668/0xc30
[  107.029540][   T24]  really_probe+0x26d/0x9e0
[  107.029551][   T24]  __driver_probe_device+0x18c/0x2f0
[  107.029563][   T24]  driver_probe_device+0x4f/0x430
[  107.029575][   T24]  __device_attach_driver+0x2ce/0x530
[  107.029586][   T24]  bus_for_each_drv+0x251/0x2e0
[  107.029596][   T24]  __device_attach+0x2b8/0x400
[  107.029606][   T24]  bus_probe_device+0x185/0x260
[  107.029613][   T24]  device_add+0x7b6/0xb50
[  107.029622][   T24]  usb_set_configuration+0x1a87/0x20e0
[  107.029630][   T24]  usb_generic_driver_probe+0x8d/0x150
[  107.029637][   T24]  usb_probe_device+0x1c4/0x390
[  107.029644][   T24]  really_probe+0x26d/0x9e0
[  107.029654][   T24]  __driver_probe_device+0x18c/0x2f0
[  107.029663][   T24]  driver_probe_device+0x4f/0x430
[  107.029673][   T24]  __device_attach_driver+0x2ce/0x530
[  107.029683][   T24]  bus_for_each_drv+0x251/0x2e0
[  107.029690][   T24]  __device_attach+0x2b8/0x400
[  107.029699][   T24]  bus_probe_device+0x185/0x260
[  107.029706][   T24]  device_add+0x7b6/0xb50
[  107.029714][   T24]  usb_new_device+0xa39/0x16f0
[  107.029725][   T24]  hub_event+0x2958/0x4a20
[  107.029731][   T24]  process_scheduled_works+0xae1/0x17b0
[  107.029742][   T24]  worker_thread+0x8a0/0xda0
[  107.029752][   T24]  kthread+0x711/0x8a0
[  107.029759][   T24]  ret_from_fork+0x4bc/0x870
[  107.029769][   T24]  ret_from_fork_asm+0x1a/0x30
[  107.029779][   T24] 
[  107.029782][   T24] Freed by task 24:
[  107.029788][   T24]  kasan_save_track+0x3e/0x80
[  107.029796][   T24]  __kasan_save_free_info+0x46/0x50
[  107.032771][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.034188][   T24]  __kasan_slab_free+0x5c/0x80
[  107.037120][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.037704][   T24]  kfree+0x19a/0x6d0
[  107.040067][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.041491][   T24]  device_release+0x9c/0x1c0
[  107.043640][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.045355][   T24]  kobject_put+0x22b/0x480
[  107.047238][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.048604][   T24]  hdm_disconnect+0xf3/0x1c0
[  107.050674][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.052584][   T24]  usb_unbind_interface+0x26e/0x910
[  107.054446][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.056063][   T24]  device_release_driver_internal+0x4d9/0x800
[  107.058111][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.059767][   T24]  bus_remove_device+0x34d/0x410
[  107.059782][   T24]  device_del+0x511/0x8e0
[  107.059793][   T24]  usb_disable_device+0x3e9/0x8a0
[  107.059802][   T24]  usb_disconnect+0x330/0x950
[  107.059813][   T24]  hub_event+0x1cf5/0x4a20
[  107.059820][   T24]  process_scheduled_works+0xae1/0x17b0
[  107.059831][   T24]  worker_thread+0x8a0/0xda0
[  107.062081][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.063755][   T24]  kthread+0x711/0x8a0
[  107.066098][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.067587][   T24]  ret_from_fork+0x4bc/0x870
[  107.069294][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.071221][   T24]  ret_from_fork_asm+0x1a/0x30
[  107.071243][   T24] 
[  107.071249][   T24] The buggy address belongs to the object at ffff888020650000
[  107.071249][   T24]  which belongs to the cache kmalloc-8k of size 8192
[  107.071262][   T24] The buggy address is located 6304 bytes inside of
[  107.071262][   T24]  freed 8192-byte region [ffff888020650000, ffff888020652000)
[  107.071277][   T24] 
[  107.071282][   T24] The buggy address belongs to the physical page:
[  107.071292][   T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20650
[  107.073093][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.074710][   T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  107.076795][ T6786] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  107.078230][   T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  107.256988][   T24] page_type: f5(slab)
[  107.258492][   T24] raw: 00fff00000000040 ffff88801ac42280 ffffea00042cd800 dead000000000004
[  107.261203][   T24] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  107.263833][   T24] head: 00fff00000000040 ffff88801ac42280 ffffea00042cd800 dead000000000004
[  107.266993][   T24] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  107.269621][   T24] head: 00fff00000000003 ffffea0000819401 00000000ffffffff 00000000ffffffff
[  107.272162][   T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  107.274713][   T24] page dumped because: kasan: bad access detected
[  107.276559][   T24] page_owner tracks the page as allocated
[  107.278222][   T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5593, tgid 5593 (dhcpcd), ts 40370382880, free_ts 36381201377
[  107.284674][   T24]  post_alloc_hook+0x240/0x2a0
[  107.286087][   T24]  get_page_from_freelist+0x2365/0x2440
[  107.287845][   T24]  __alloc_frozen_pages_noprof+0x181/0x370
[  107.290001][   T24]  alloc_pages_mpol+0x232/0x4a0
[  107.291876][   T24]  allocate_slab+0x96/0x3a0
[  107.293359][   T24]  ___slab_alloc+0xe94/0x1920
[  107.294882][   T24]  __slab_alloc+0x65/0x100
[  107.296305][   T24]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[  107.298130][   T24]  kmalloc_reserve+0x136/0x290
[  107.299568][   T24]  __alloc_skb+0x142/0x2d0
[  107.300972][   T24]  netlink_dump+0x167/0xe90
[  107.302452][   T24]  netlink_recvmsg+0x676/0xa30
[  107.303871][   T24]  sock_recvmsg+0x22c/0x270
[  107.305429][   T24]  ____sys_recvmsg+0x1c9/0x460
[  107.307168][   T24]  ___sys_recvmsg+0x1b5/0x510
[  107.308957][   T24]  __x64_sys_recvmsg+0x198/0x260
[  107.310825][   T24] page last free pid 5574 tgid 5574 stack trace:
[  107.313136][   T24]  __free_frozen_pages+0xbc4/0xd30
[  107.315055][   T24]  __put_partials+0x146/0x170
[  107.316867][   T24]  put_cpu_partial+0x1f2/0x2e0
[  107.318675][   T24]  __slab_free+0x2b9/0x390
[  107.320425][   T24]  qlist_free_all+0x97/0x140
[  107.322206][   T24]  kasan_quarantine_reduce+0x148/0x160
[  107.324289][   T24]  __kasan_slab_alloc+0x22/0x80
[  107.326208][   T24]  kmem_cache_alloc_noprof+0x367/0x6e0
[  107.328357][   T24]  vm_area_alloc+0x24/0x140
[  107.330166][   T24]  _install_special_mapping+0x2e/0x350
[  107.332330][   T24]  map_vdso+0x1df/0x480
[  107.333959][   T24]  load_elf_binary+0x1c25/0x2740
[  107.335796][   T24]  bprm_execve+0x99c/0x1450
[  107.337553][   T24]  do_execveat_common+0x510/0x6a0
[  107.339460][   T24]  __x64_sys_execve+0x94/0xb0
[  107.341270][   T24]  do_syscall_64+0xfa/0xfa0
[  107.343022][   T24] 
[  107.343978][   T24] Memory state around the buggy address:
[  107.346137][   T24]  ffff888020651780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  107.349250][   T24]  ffff888020651800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  107.352316][   T24] >ffff888020651880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  107.355347][   T24]                                ^
[  107.357324][   T24]  ffff888020651900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  107.360299][   T24]  ffff888020651980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  107.363367][   T24] ==================================================================
[  107.436465][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  107.526018][   T24] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  107.528759][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) 
[  107.531994][   T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.535480][   T24] Workqueue: usb_hub_wq hub_event
[  107.537341][   T24] Call Trace:
[  107.538646][   T24]  <TASK>
[  107.539610][   T24]  dump_stack_lvl+0x99/0x250
[  107.541214][   T24]  ? __asan_memcpy+0x40/0x70
[  107.542904][   T24]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.544547][   T24]  ? __pfx__printk+0x10/0x10
[  107.546157][   T24]  vpanic+0x237/0x6d0
[  107.547691][   T24]  ? __pfx_vpanic+0x10/0x10
[  107.549412][   T24]  ? preempt_schedule+0xae/0xc0
[  107.551287][   T24]  ? __pfx_preempt_schedule+0x10/0x10
[  107.553339][   T24]  panic+0xb9/0xc0
[  107.554790][   T24]  ? __pfx_panic+0x10/0x10
[  107.556525][   T24]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  107.558699][   T24]  ? hdm_disconnect+0x10d/0x1c0
[  107.560675][   T24]  check_panic_on_warn+0x89/0xb0
[  107.562610][   T24]  ? hdm_disconnect+0x10d/0x1c0
[  107.564595][   T24]  end_report+0x78/0x160
[  107.566318][   T24]  kasan_report+0x129/0x150
[  107.568149][   T24]  ? hdm_disconnect+0x10d/0x1c0
[  107.570156][   T24]  hdm_disconnect+0x10d/0x1c0
[  107.572040][   T24]  usb_unbind_interface+0x26e/0x910
[  107.574072][   T24]  ? __pfx_usb_unbind_interface+0x10/0x10
[  107.576354][   T24]  device_release_driver_internal+0x4d9/0x800
[  107.578662][   T24]  bus_remove_device+0x34d/0x410
[  107.580606][   T24]  device_del+0x511/0x8e0
[  107.582327][   T24]  ? __pm_runtime_barrier+0x212/0x460
[  107.584481][   T24]  ? __pfx_device_del+0x10/0x10
[  107.586371][   T24]  ? __pfx___mutex_lock+0x10/0x10
[  107.588398][   T24]  usb_disable_device+0x3e9/0x8a0
[  107.590345][   T24]  usb_disconnect+0x330/0x950
[  107.592224][   T24]  hub_event+0x1cf5/0x4a20
[  107.594108][   T24]  ? do_raw_spin_lock+0x121/0x290
[  107.596140][   T24]  ? register_lock_class+0x51/0x320
[  107.598222][   T24]  ? __pfx_hub_event+0x10/0x10
[  107.600153][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  107.602406][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.604475][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  107.606718][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  107.608958][   T24]  process_scheduled_works+0xae1/0x17b0
[  107.611138][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  107.613494][   T24]  worker_thread+0x8a0/0xda0
[  107.615290][   T24]  kthread+0x711/0x8a0
[  107.616895][   T24]  ? __pfx_worker_thread+0x10/0x10
[  107.618908][   T24]  ? __pfx_kthread+0x10/0x10
[  107.620730][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.622767][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.624825][   T24]  ? __pfx_kthread+0x10/0x10
[  107.626515][   T24]  ret_from_fork+0x4bc/0x870
[  107.628268][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  107.630279][   T24]  ? __switch_to_asm+0x39/0x70
[  107.632115][   T24]  ? __switch_to_asm+0x33/0x70
[  107.634032][   T24]  ? __pfx_kthread+0x10/0x10
[  107.635869][   T24]  ret_from_fork_asm+0x1a/0x30
[  107.637784][   T24]  </TASK>
[  107.639712][   T24] Kernel Offset: disabled
[  107.641432][   T24] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:23:02  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000035cf5 RDI=0000000000035cf6 RBP=00000000000003f8 RSP=ffffc9000809eab0
R8 =ffff8881089a8237 R9 =1ffff11021135046 R10=dffffc0000000000 R11=ffffffff8556cf50
R12=dffffc0000000000 R13=ffffffff99d198ef R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556cfcc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe7cbe8e6c0 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000002068e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000ff0000000000 XMM01=0000000000000000 0000010000000000
XMM02=00007fb755bf1b00 00007fb700627375 XMM03=ffffffffffffff00 ffff0000000000ff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000028 0000000000322e28
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=0000000000000041 0000000000322e32
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a0bf6f RBX=ffffffff81a0bf2e RCX=0000000000100000 RDX=ffffc9002806a000
RSI=000000000002f306 RDI=000000000002f307 RBP=ffffc900001c7230 RSP=ffffc900001c7120
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c66251
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=1ffff92000038e28
RIP=ffffffff81a0bf5d RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000002913e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fe7cb012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
