last executing test programs:

7m51.026960581s ago: executing program 1 (id=747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf2515000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040010)

7m50.691219376s ago: executing program 1 (id=748):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0)

7m50.468056442s ago: executing program 1 (id=752):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

7m50.367558149s ago: executing program 1 (id=754):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646d6f64653d30303030303030303030303030303030303030303030342c726f6f746469723d30303030303030303030303030303030303030342c696f636861727365743d63703836362c756e686964652c6e6f6164696e6963622c6e6f7374726963742c7569643d666f726765742c006e646058ca3be182cc43baaaf2f77a30538415e6cd8618f1936a4cc4515f736be0cf653e6d411a18db5d62a4cc1dca6e05b1200c3e50270c9902df1ebd79437f74a1b37db2bf05cda881dd68d2c53a4780f47d"], 0x1, 0xc32, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})

7m50.19508065s ago: executing program 1 (id=756):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0)

7m49.908817501s ago: executing program 1 (id=757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m49.82317494s ago: executing program 32 (id=757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m39.858497548s ago: executing program 3 (id=848):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x444a, &(0x7f0000008c00)="$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")

7m39.509251954s ago: executing program 3 (id=856):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x71}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x16fd6f154f7d60d8, 0x16, 0xfd1f}}], 0x38, 0x40001}, 0x20020090)

7m39.457184695s ago: executing program 3 (id=858):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000050000000000000000000100181100", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000050000008500000084000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c0004"], 0xe8}}, 0x0)

7m39.335805253s ago: executing program 3 (id=861):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum64={0x6, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x7, 0x3, 0x7}, {0x5, 0x1, 0xe}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x2e, 0x61, 0x2e, 0x5f, 0x5f]}}, &(0x7f00000005c0)=""/194, 0x46, 0xc2, 0x1, 0x8}, 0x28)

7m39.199058445s ago: executing program 3 (id=864):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

7m39.00606837s ago: executing program 3 (id=865):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x240080e0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x50}}]}, 0x1, 0x698, &(0x7f0000000a80)="$eJzs3dFuE9kZAODfbLKL0gpVbYUQYtlZaNUgscF2lqBor1xnksyu47FmnBVcrdASVoiw28JWKlwtqrRtpfYh9rYP0d5U6iP0puobrPoIrTy2IYAT00AwQt9nwTmec3zOfxxrfk3imQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIGrttXq9UYtO1t2+muyvvVbkWwe0j8f72xPFAfNG1Ab/4vjxODXcdOqnj5tPDv47F2eGz87E8UFxPB784OSPPvrJ3LHx6w8I6JW4d//B7eu7uzt3Zx3IjGyk3azMs63WRppkZZ6srqzUL22ul8l61knLa2U/3UraRdrq50Wy2L6QNFZXl5N06Vq+3d1Ya3XS8cYrHzTr9ZXk46Ve2irKvHvp46WyvZl1Oll3o+ozaB70uTL4IH6S9ZN+2tpKkpu3dneWpwU56NR4nk7N/Zv/+U5EkjTrzWaj0Ww2Vi6vXr5Sr889s6H+lHimx+w/tMzS28lL3oPD4R0b5f/oRBbd2I6rkUx8tGMtishja5/2kXH+//mldFj7ZvK8e/P/OMufetx8Oqr8f3b47Ow++f8fbw3bJ0d01I/5SOJe3I8HcTuux27sxk7cnVEss3psRBrdyKKMPLLYila1JRltSWI1VmIl6vFZbMZ6lJHEemTRiTTKuBZl9COtPlHtKCKN+ehHHkUksRjtuBBJNGI1VmM5kkhjKa5FHtvRjY1Yi1Y1ys24Vb3vywfE+KhTI5J4e1qn5gEjyf+8uCPYi8Ph/Hec/wEAAIA3Vq367fvg+H8+3q1q61knrc86LAAAAOAlqv7yf2ZQzA9q70bN8T8AAAC8aWrVOXa1iFiI94a18ZlQfgkAAAAAb4jq7/9nB8XCoPZe1Bz/AwAAwJvmD1OvsV/23qn99T9RFPO1h72rP6vdaQ36te6Mrr371tMj9tdP106MBqmKlbnRs3Z6pja6+uWji2DOD4vvbz6K49+T46i9hADiT/H+sM/7N4bljXHLcJaF9ayTLrXzzkeNaLVOHOunV/u/+fLWb6Na/h+7WydqcfPW7s7S51/t3qhieTgY5eGd0QUUn7mO4oRYxk1fV9dbqM65mLji+epEjNG8C8N563vXf2z48mP/x/q/jXPDPucWhuXCk+s/PpizsbTf6kdRNA658sdRnB/2Ob94flhMiKI5LYrm3igO9V48RxTL06JYfsEoAGbl5pQsVHs28R9iL/cou//uX0eY3b+NxWGfxdPVjnXu9IQ9en3aHr3+gtntL3Fh2OfCuPN+OXYw75+fyqrfDV7w3b7zlp1mbfCDeuvrO7+Kk/fuP/jg1p3rX+x8sfNls7m8Uv+wXr/cjPlqGaNC7gFggqn32Jneo/bhlKPqHz9KZEvxeXwVu3EjLlZnG1TfOJg46sKeryFcnHLUurDnDi8Xnz6qi7mIPX0j4pvxjV6e6bu437jLR/1jAIBX6tyUPPw8+f/ilOPuJ3P5wUfHe3M5AHA00uL72kL/97WiyHqfNVZXG63+ZpoUefuTpMjWNtIk6/bTor3Z6m6kSa/I+3k77wwqn2ZraZmU271eXvST9bxIenmZXa3u/J6Mbv1eplutbj9rl71O2irTpJ13+612P1nLynbS2/5lJys306J6cdlL29l61m71s7yblPl20U6XkqRM0z0ds7W028/Ws0G1m/SKbKtVXEs+zTvbW2mylpbtIuv18+GA47my7npebFXDLs36zQaA18S9+w9uX9/d3bl7hJVZrxEAeJIsDQAAAAAAAAAAAAAAr79Xcf7fUVd+eLhV/OLvh5/012/IW/fKKnPxWoQx48robhdxFFO8/ZIHnPGOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm+F8AAAD//73kUA0=")
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)

7m23.946915873s ago: executing program 33 (id=865):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x240080e0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x50}}]}, 0x1, 0x698, &(0x7f0000000a80)="$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")
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)

5m14.462583907s ago: executing program 4 (id=2972):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8)

5m14.367479773s ago: executing program 4 (id=2974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=0x0, @ANYBLOB="08000f"], 0x44}}, 0x0)

5m14.277744635s ago: executing program 4 (id=2977):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

5m14.088213663s ago: executing program 4 (id=2980):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x101891, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

5m13.962458836s ago: executing program 4 (id=2983):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
syz_clone3(&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600})

5m13.747283291s ago: executing program 4 (id=2990):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd28, 0xbdd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004080)

5m13.625232127s ago: executing program 34 (id=2990):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd28, 0xbdd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004080)

4m24.513528644s ago: executing program 5 (id=3639):
syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303437372c666f7263652c706172743d3078303030303030303030303030303466352c747970653d883b7f382c6e6c733d6370313235312c756d61736b3d30303030303030303030303030303030303030303031312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465636f6d706f73652c63726561746f723d853544712c00596b0ef4cdc421fbd02b91c13684c156114df156a5c51754a9ddfcee438b48190bcaaef9dfefb7262f48bff37813a9aa9150fa7daab42645c8bef0de8f2e1503a97c83478a2e03a1782a2ce27ca80c93120e75f9710450ca5ac05a8ea5d43aeb1464c6b6cc5732d31a3a2e66825a6d23a0136c951772dd4aabe1fa6270e5c5047c985e0f919a032ffc208c9a5effb439648b40dc33371b2412edbe9749d9f32243001542c11709"], 0x1, 0x6da, &(0x7f0000000c80)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0)

4m24.442879152s ago: executing program 5 (id=3641):
syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0)

4m24.393127069s ago: executing program 5 (id=3643):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

4m23.472312545s ago: executing program 5 (id=3672):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e0a, &(0x7f000000c740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}})

4m23.069184422s ago: executing program 5 (id=3676):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, {0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)

4m22.258684552s ago: executing program 5 (id=3688):
r0 = getpgrp(0x0)
kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

4m22.044498866s ago: executing program 35 (id=3688):
r0 = getpgrp(0x0)
kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

2m58.182074535s ago: executing program 6 (id=5116):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x800}, 0x0)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)

2m57.938532126s ago: executing program 6 (id=5121):
unshare(0x20000400)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

2m57.935610409s ago: executing program 6 (id=5122):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r1, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000000)="b7", 0x1, 0xffff})

2m57.851463958s ago: executing program 6 (id=5123):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x100000000000, 0xfffffffffffffffa, 0x0, 0x203, 0x38820000, {0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)

2m57.680059285s ago: executing program 6 (id=5127):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r2 = fanotify_init(0xf00, 0x1)
fanotify_mark(r2, 0x105, 0x40009975, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x1000000, 0x3)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40011)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)

2m57.324466332s ago: executing program 6 (id=5130):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f00000000c0)=""/226, 0xe2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2m57.150664867s ago: executing program 36 (id=5130):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f00000000c0)=""/226, 0xe2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2m43.012454954s ago: executing program 2 (id=5339):
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r1, 0x0, 0xd}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0})

2m42.962290046s ago: executing program 2 (id=5340):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_submit(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14)

2m42.409511559s ago: executing program 2 (id=5341):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0xffffffff, 0x0, 0xfffff067})

2m42.40925602s ago: executing program 2 (id=5342):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

2m42.010968958s ago: executing program 2 (id=5352):
pipe2$9p(&(0x7f0000000900)={<r0=>0xffffffffffffffff}, 0x84880)
fcntl$setpipe(r0, 0x11, 0x7efffeff00000000)

2m41.671880103s ago: executing program 2 (id=5358):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa120000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x23)

2m41.590884121s ago: executing program 37 (id=5358):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa120000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x23)

2.984329994s ago: executing program 8 (id=7593):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="99", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8)

2.808399106s ago: executing program 8 (id=7596):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0)

2.568361079s ago: executing program 8 (id=7598):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029400030100e0000904000000010100000a24010000010201020c24020000000000070000000524050000082404030f8bf8ac0c240701050000c80975f90707240701010000092403000000000100090401000001020000090401010101020000090501090000010000072501000100000904020000010200000944020101010200000905820900000000ff07"], 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448)

1.949478235s ago: executing program 8 (id=7614):
semget(0x1, 0x4, 0x3c4)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x0, 0xcc06}], 0x1)

1.866206448s ago: executing program 7 (id=7616):
r0 = io_uring_setup(0x3eaf, &(0x7f0000000100))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a"], 0x68}}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x22, &(0x7f0000000340)=[{&(0x7f0000000480)=""/233}], 0x1)

1.799424149s ago: executing program 7 (id=7617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000003a80)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @empty, @remote, @broadcast}}}}, 0x0)

1.798853768s ago: executing program 8 (id=7618):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x10001})
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x400, 0x200000400000000, 0x5, 0x344}, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)

1.676296408s ago: executing program 7 (id=7619):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getpeername$netrom(r0, 0x0, 0x0)

1.675857256s ago: executing program 7 (id=7620):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x800)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48)

1.134724106s ago: executing program 7 (id=7621):
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x0, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x7, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x6, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x9, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0x1, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x100, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x6, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38)

1.029922014s ago: executing program 0 (id=7624):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000)

780.051806ms ago: executing program 0 (id=7625):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="85aeb8"], 0x8)

739.521349ms ago: executing program 8 (id=7626):
setresgid(0xee00, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x2a8000, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x5)
prlimit64(r0, 0x7, 0x0, 0x0)

599.573524ms ago: executing program 0 (id=7627):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0x4})

540.100628ms ago: executing program 0 (id=7628):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="40070300"], 0x0, 0x0})

178.731142ms ago: executing program 7 (id=7629):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
open(&(0x7f0000000900)='./file1\x00', 0x84200, 0x104)

398.046µs ago: executing program 0 (id=7630):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000030200000000005f"], 0x0, 0x44}, 0x28)

0s ago: executing program 0 (id=7631):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000000)=ANY=[], 0x5, 0x7e1, &(0x7f0000001100)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @sack_perm], 0x4)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

kernel console output (not intermixed with test programs):

197][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.461257][   T12] veth1_macvtap: left promiscuous mode
[  428.463100][   T12] veth0_macvtap: left promiscuous mode
[  428.464840][   T12] veth1_vlan: left promiscuous mode
[  428.466512][   T12] veth0_vlan: left promiscuous mode
[  428.661422][   T55] Bluetooth: hci1: command tx timeout
[  429.194491][   T12] team0 (unregistering): Port device team_slave_1 removed
[  429.253073][   T12] team0 (unregistering): Port device team_slave_0 removed
[  430.165455][T18086] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.168381][T18086] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.180330][T18086] bridge_slave_0: entered allmulticast mode
[  430.184626][T18086] bridge_slave_0: entered promiscuous mode
[  430.213258][T18086] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.216070][T18086] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.241070][T18086] bridge_slave_1: entered allmulticast mode
[  430.245255][T18086] bridge_slave_1: entered promiscuous mode
[  430.317510][T18086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.355609][T18086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.444202][T18086] team0: Port device team_slave_0 added
[  430.447471][T18086] team0: Port device team_slave_1 added
[  430.536275][T18086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.540388][T18086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.549037][T18086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.553547][T18086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.555686][T18086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.563604][T18086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.650936][T18086] hsr_slave_0: entered promiscuous mode
[  430.653303][T18086] hsr_slave_1: entered promiscuous mode
[  430.655979][T18086] debugfs: 'hsr0' already exists in 'hsr'
[  430.658369][T18086] Cannot create hsr debugfs directory
[  430.824762][   T55] Bluetooth: hci1: command tx timeout
[  430.988311][   T12] IPVS: stop unused estimator thread 0...
[  431.096051][T18086] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  431.107830][T18086] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  431.113964][T18086] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  431.124637][T18086] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  431.264152][T18086] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.319907][T18086] 8021q: adding VLAN 0 to HW filter on device team0
[  431.325878][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.328140][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.346406][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.349087][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.582101][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5182'.
[  431.701202][T18086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.907168][T18086] veth0_vlan: entered promiscuous mode
[  431.921882][T18086] veth1_vlan: entered promiscuous mode
[  431.964932][T18086] veth0_macvtap: entered promiscuous mode
[  431.973695][T18086] veth1_macvtap: entered promiscuous mode
[  432.009664][T18086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.035537][T18086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.064683][T18181] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.081494][T18181] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.085628][T18181] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.102700][T18181] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.230531][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.236813][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.243827][T18283] batadv_slave_0: entered promiscuous mode
[  432.247294][T18283] batadv_slave_0: left promiscuous mode
[  432.290635][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.295355][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.532264][T18303] vcan0: Caught tx_queue_len zero misconfig
[  432.633482][T18309] netlink: 'syz.2.5203': attribute type 4 has an invalid length.
[  432.898521][   T55] Bluetooth: hci1: command tx timeout
[  433.222889][T18344] loop7: detected capacity change from 0 to 256
[  433.451301][T18356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  433.670300][T18374] overlayfs: failed to resolve 'W': -2
[  433.901166][   T55] Bluetooth: hci0: unexpected event for opcode 0x2064
[  433.905363][   T33] audit: type=1326 audit(1755067207.757:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.5239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  433.915097][   T33] audit: type=1326 audit(1755067207.757:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.5239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  433.935593][   T33] audit: type=1326 audit(1755067207.757:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.5239" exe="/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  433.951055][   T33] audit: type=1326 audit(1755067207.757:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.5239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  433.970271][   T33] audit: type=1326 audit(1755067207.757:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.5239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  433.991033][   T33] audit: type=1326 audit(1755067207.757:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.5239" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  434.003819][   T33] audit: type=1326 audit(1755067207.757:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18397 comm="syz.0.5239" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  434.009752][T18406] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.5242'.
[  434.014789][T18406] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  434.018992][T18406] openvswitch: netlink: Duplicate key (type 0).
[  434.075334][T18412] netlink: 'syz.0.5245': attribute type 21 has an invalid length.
[  434.078424][T18412] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5245'.
[  434.081536][T18412] netlink: 'syz.0.5245': attribute type 5 has an invalid length.
[  434.084021][T18412] netlink: 'syz.0.5245': attribute type 6 has an invalid length.
[  434.086528][T18412] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5245'.
[  434.190292][   T33] audit: type=1800 audit(1755067208.047:279): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5248" name="nullb0" dev="tmpfs" ino=4440 res=0 errno=0
[  434.978220][   T55] Bluetooth: hci1: command tx timeout
[  435.091566][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5259'.
[  435.094635][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5259'.
[  437.658094][T18181] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.067059][T18523] overlayfs: unescaped trailing colons in lowerdir mount option.
[  439.062672][T17265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  439.698738][T18598] dvmrp17: entered allmulticast mode
[  439.703490][T18598] dvmrp17: left allmulticast mode
[  439.721943][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.723956][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  439.804411][T18605] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  440.863862][T18640] 9pnet_fd: Insufficient options for proto=fd
[  440.956688][T18646] netlink: 'syz.7.5347': attribute type 1 has an invalid length.
[  440.973850][T18646] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5347'.
[  441.067462][T18648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  441.291494][T18658] comedi comedi3: pcmda12: I/O port conflict (0x5,16)
[  441.579687][T18181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.583504][T18181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.586741][T18181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  441.592572][T18181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 39663 - 0
[  441.793416][T18181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.796617][T18181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.823440][T18181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  441.836417][T18181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 39663 - 0
[  441.841951][T18089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  441.846089][T18089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  441.858454][T18089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  441.873242][T18089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  441.876436][T18089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  441.931786][T18181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.935454][T18181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.941432][T18181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  441.944618][T18181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 39663 - 0
[  442.493213][T18181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.496513][T18181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.501676][T18181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  442.505239][T18181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 39663 - 0
[  442.687761][T18673] chnl_net:caif_netlink_parms(): no params data found
[  442.768806][T18181] bridge_slave_1: left allmulticast mode
[  442.771121][T18181] bridge_slave_1: left promiscuous mode
[  442.773465][T18181] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.787698][T18181] bridge_slave_0: left allmulticast mode
[  442.789904][T18181] bridge_slave_0: left promiscuous mode
[  442.793048][T18181] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.171682][T18181] bond3 (unregistering): (slave gretap2): Releasing active interface
[  443.683420][T18181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  443.687811][T18181] bond_slave_0: left promiscuous mode
[  443.695426][T18181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  443.699440][T18181] bond_slave_1: left promiscuous mode
[  443.707999][T18181] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  443.729773][T18181] bond0 (unregistering): Released all slaves
[  443.948210][   T55] Bluetooth: hci2: command tx timeout
[  443.956483][T18181] bond1 (unregistering): Released all slaves
[  443.968338][T18181] bond2 (unregistering): Released all slaves
[  444.191056][T18181] bond3 (unregistering): Released all slaves
[  444.231645][   T10] syz0: Port: 1 Link DOWN
[  444.301183][T18673] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.327366][T18673] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.330314][T18673] bridge_slave_0: entered allmulticast mode
[  444.341771][T18673] bridge_slave_0: entered promiscuous mode
[  444.348281][T18673] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.351096][T18673] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.359904][T18673] bridge_slave_1: entered allmulticast mode
[  444.363252][T18673] bridge_slave_1: entered promiscuous mode
[  444.532395][T18673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.560530][T18673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.705311][T18673] team0: Port device team_slave_0 added
[  444.710366][T18673] team0: Port device team_slave_1 added
[  444.855494][T18673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.862593][T18673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.887676][T18673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.935665][T18673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.966548][T18673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.978378][T18673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.108594][T18706] loop7: detected capacity change from 0 to 32768
[  445.154327][T18673] hsr_slave_0: entered promiscuous mode
[  445.163572][T18673] hsr_slave_1: entered promiscuous mode
[  445.166466][T18673] debugfs: 'hsr0' already exists in 'hsr'
[  445.166510][T18706] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  445.178277][T18706] (syz.7.5371,18706,1):ocfs2_find_entry:1094 ERROR: status = -117
[  445.191650][T18673] Cannot create hsr debugfs directory
[  445.193207][T18706] (syz.7.5371,18706,1):ocfs2_find_entry:1094 ERROR: status = -117
[  445.202621][T18706] (syz.7.5371,18706,1):ocfs2_symlink:2080 ERROR: status = -117
[  445.274427][T18086] (syz-executor,18086,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  445.275625][T18181] batman_adv: batadv0: Removing interface: wlan0
[  445.298460][T18086] ocfs2: Unmounting device (7,7) on (node local)
[  445.772986][T18181] hsr_slave_0: left promiscuous mode
[  445.779797][T18181] hsr_slave_1: left promiscuous mode
[  445.781980][T18181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.784693][T18181] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.798071][T18181] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.800782][T18181] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.830410][T18181] veth1_macvtap: left promiscuous mode
[  445.832619][T18181] veth0_macvtap: left promiscuous mode
[  445.834587][T18181] veth1_vlan: left promiscuous mode
[  445.852833][T18735] loop7: detected capacity change from 0 to 4096
[  445.912517][T18736] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  446.021668][   T55] Bluetooth: hci2: command tx timeout
[  447.074543][T18752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5385'.
[  447.160195][T18754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.381242][T18181] team0 (unregistering): Port device team_slave_1 removed
[  447.783231][T18181] team0 (unregistering): Port device team_slave_0 removed
[  448.014269][ T5945] smc: removing ib device syz0
[  448.126795][   T55] Bluetooth: hci2: command tx timeout
[  450.186259][   T55] Bluetooth: hci2: command tx timeout
[  450.324894][T18673] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  450.353520][T18673] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  450.367872][T18673] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  450.392766][T18673] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  450.764432][T18673] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.812269][T18673] 8021q: adding VLAN 0 to HW filter on device team0
[  450.847142][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.850052][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.947009][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.949594][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.374172][T18673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.467507][T18836] netlink: 'syz.7.5410': attribute type 13 has an invalid length.
[  451.864371][T18673] veth0_vlan: entered promiscuous mode
[  451.893842][T18673] veth1_vlan: entered promiscuous mode
[  451.974545][T18673] veth0_macvtap: entered promiscuous mode
[  451.984040][T18673] veth1_macvtap: entered promiscuous mode
[  452.021275][T18673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.051861][T18673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.065941][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.114968][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.126513][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.140635][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.254711][ T7995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.258928][ T7995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.319614][ T7995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.322207][ T7995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.378005][T18883] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  452.382129][T18883] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  452.492357][T18889] loop7: detected capacity change from 0 to 2048
[  452.517360][T18891] loop8: detected capacity change from 0 to 1024
[  452.518766][T18889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  452.547739][T18891] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  452.599041][T18891] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.675472][T18903] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.5359: missing EA_INODE flag
[  452.728659][T18903] EXT4-fs (loop8): Remounting filesystem read-only
[  452.923186][T18891] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  453.165593][T18673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.088402][T18978] netlink: ct family unspecified
[  454.089988][T18978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.243703][T18983] autofs: Bad value for 'fd'
[  454.322978][T18988] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5456'.
[  454.537353][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5459'.
[  454.864173][   T33] audit: type=1326 audit(1755067228.719:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19026 comm="syz.8.5469" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  454.878008][   T33] audit: type=1326 audit(1755067228.719:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19026 comm="syz.8.5469" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  454.906556][   T33] audit: type=1326 audit(1755067228.729:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19026 comm="syz.8.5469" exe="/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  454.923579][   T33] audit: type=1326 audit(1755067228.729:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19026 comm="syz.8.5469" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  454.932329][   T33] audit: type=1326 audit(1755067228.729:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19026 comm="syz.8.5469" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  455.153031][T19036] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5472'.
[  455.281024][T19044] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  455.421370][T19045] loop8: detected capacity change from 0 to 1024
[  455.461528][T19045] syz.8.5474: attempt to access beyond end of device
[  455.461528][T19045] loop8: rw=2049, sector=31588620, nr_sectors = 2 limit=1024
[  455.475487][T19045] Buffer I/O error on dev loop8, logical block 15794310, lost async page write
[  455.610748][T19057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5478'.
[  455.613776][T19057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5478'.
[  455.889133][T19059] loop8: detected capacity change from 0 to 40427
[  455.921888][T19059] F2FS-fs (loop8): invalid crc value
[  456.054936][T19059] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  456.071366][T19059] F2FS-fs (loop8): Start checkpoint disabled!
[  456.082218][T19059] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  456.160206][T19092] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5489'.
[  456.167623][ T5945] kworker/u9:4: attempt to access beyond end of device
[  456.167623][ T5945] loop8: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  456.185905][ T5945] kworker/u9:4: attempt to access beyond end of device
[  456.185905][ T5945] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  456.198241][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: kworker/u9:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  456.198258][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  456.198265][ T5945] Workqueue: writeback wb_workfn (flush-7:8)
[  456.198285][ T5945] Call Trace:
[  456.198289][ T5945]  <TASK>
[  456.198294][ T5945]  dump_stack_lvl+0x189/0x250
[  456.198310][ T5945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  456.198320][ T5945]  ? __pfx_queue_work_on+0x10/0x10
[  456.198329][ T5945]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  456.198340][ T5945]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  456.198355][ T5945]  f2fs_handle_critical_error+0x37c/0x540
[  456.198372][ T5945]  f2fs_write_end_io+0x886/0xb60
[  456.198394][ T5945]  __submit_merged_bio+0x27a/0x6a0
[  456.198408][ T5945]  __submit_merged_write_cond+0x255/0x530
[  456.198422][ T5945]  f2fs_write_data_pages+0x261d/0x3000
[  456.198452][ T5945]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  456.198470][ T5945]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  456.198501][ T5945]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  456.198518][ T5945]  ? trace_f2fs_writepages+0x7f/0x200
[  456.198529][ T5945]  ? f2fs_write_node_pages+0x478/0x6e0
[  456.198541][ T5945]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  456.198559][ T5945]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  456.198571][ T5945]  do_writepages+0x32e/0x550
[  456.198585][ T5945]  ? reacquire_held_locks+0x127/0x1d0
[  456.198595][ T5945]  ? writeback_sb_inodes+0x384/0x1010
[  456.198610][ T5945]  __writeback_single_inode+0x145/0xff0
[  456.198621][ T5945]  ? do_raw_spin_unlock+0x4d/0x240
[  456.198633][ T5945]  writeback_sb_inodes+0x6c7/0x1010
[  456.198658][ T5945]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  456.198691][ T5945]  ? rcu_is_watching+0x15/0xb0
[  456.198705][ T5945]  wb_writeback+0x43b/0xaf0
[  456.198719][ T5945]  ? queue_io+0x341/0x590
[  456.198730][ T5945]  ? __pfx_wb_writeback+0x10/0x10
[  456.198750][ T5945]  ? _raw_spin_unlock_irq+0x23/0x50
[  456.198762][ T5945]  wb_workfn+0x409/0xef0
[  456.198779][ T5945]  ? __pfx_wb_workfn+0x10/0x10
[  456.198790][ T5945]  ? __lock_acquire+0xab9/0xd20
[  456.198808][ T5945]  ? process_scheduled_works+0x9ef/0x17b0
[  456.198820][ T5945]  ? _raw_spin_unlock_irq+0x23/0x50
[  456.198827][ T5945]  ? process_scheduled_works+0x9ef/0x17b0
[  456.198834][ T5945]  ? process_scheduled_works+0x9ef/0x17b0
[  456.198843][ T5945]  process_scheduled_works+0xae1/0x17b0
[  456.198867][ T5945]  ? __pfx_process_scheduled_works+0x10/0x10
[  456.198890][ T5945]  worker_thread+0x8a0/0xda0
[  456.198901][ T5945]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  456.198914][ T5945]  ? __kthread_parkme+0x7b/0x200
[  456.198930][ T5945]  kthread+0x711/0x8a0
[  456.198941][ T5945]  ? __pfx_worker_thread+0x10/0x10
[  456.198949][ T5945]  ? __pfx_kthread+0x10/0x10
[  456.198960][ T5945]  ? _raw_spin_unlock_irq+0x23/0x50
[  456.198971][ T5945]  ? lockdep_hardirqs_on+0x9c/0x150
[  456.198983][ T5945]  ? __pfx_kthread+0x10/0x10
[  456.199027][ T5945]  ret_from_fork+0x3fc/0x770
[  456.199045][ T5945]  ? __pfx_ret_from_fork+0x10/0x10
[  456.199064][ T5945]  ? __switch_to_asm+0x39/0x70
[  456.199078][ T5945]  ? __switch_to_asm+0x33/0x70
[  456.199087][ T5945]  ? __pfx_kthread+0x10/0x10
[  456.199097][ T5945]  ret_from_fork_asm+0x1a/0x30
[  456.199116][ T5945]  </TASK>
[  456.199121][ T5945] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  456.288317][T19098] delete_channel: no stack
[  456.373432][T19098] delete_channel: no stack
[  456.828157][T19125] netlink: 'syz.0.5503': attribute type 5 has an invalid length.
[  456.870441][T19127] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5491'.
[  456.903245][T19115] loop7: detected capacity change from 0 to 32768
[  456.954129][T19115] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  457.031095][T19115] XFS (loop7): Ending clean mount
[  457.052056][T18086] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  457.202958][T19152] sit0: Caught tx_queue_len zero misconfig
[  457.204851][T19152] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5512'.
[  457.425478][ T2206] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  457.637537][ T2206] usb 9-1: Using ep0 maxpacket: 16
[  457.683117][ T2206] usb 9-1: config 0 has an invalid interface number: 105 but max is 0
[  457.693523][   T33] audit: type=1326 audit(1755067231.550:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19169 comm="syz.0.5518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  457.696293][ T2206] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.713071][ T2206] usb 9-1: config 0 has no interface number 0
[  457.713080][   T33] audit: type=1326 audit(1755067231.550:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19169 comm="syz.0.5518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  457.713113][   T33] audit: type=1326 audit(1755067231.550:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19169 comm="syz.0.5518" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  457.721623][ T2206] usb 9-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  457.729638][   T33] audit: type=1326 audit(1755067231.550:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19169 comm="syz.0.5518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  457.732014][ T2206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.741333][ T2206] usb 9-1: Product: syz
[  457.742764][ T2206] usb 9-1: Manufacturer: syz
[  457.744317][ T2206] usb 9-1: SerialNumber: syz
[  457.751167][ T2206] usb 9-1: config 0 descriptor??
[  457.758212][ T2206] uvcvideo 9-1:0.105: probe with driver uvcvideo failed with error -22
[  457.761185][   T33] audit: type=1326 audit(1755067231.550:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19169 comm="syz.0.5518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  457.984005][ T5882] usb 9-1: USB disconnect, device number 2
[  458.523997][T19218] loop7: detected capacity change from 0 to 32768
[  458.555377][T19218] ea_get: invalid extended attribute
[  458.766367][T19226] batman_adv: batadv0: Adding interface: dummy0
[  458.768595][T19226] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.782622][T19226] batman_adv: batadv0: Interface activated: dummy0
[  459.366390][T19242] sctp: [Deprecated]: syz.0.5543 (pid 19242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  459.366390][T19242] Use struct sctp_sack_info instead
[  459.689027][T19238] loop8: detected capacity change from 0 to 32768
[  459.822707][T19238] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode.
[  460.014693][T19238] syz.8.5541 (19238) used greatest stack depth: 18576 bytes left
[  460.062305][T18673] ocfs2: Unmounting device (7,8) on (node local)
[  460.316224][T19260] loop8: detected capacity change from 0 to 256
[  460.652578][ T5889] IPVS: starting estimator thread 0...
[  460.767275][T19263] IPVS: using max 62 ests per chain, 148800 per kthread
[  460.934042][T19267] loop7: detected capacity change from 0 to 4096
[  460.950426][T19267] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  461.013408][T19267] ntfs3(loop7): Failed to load $Extend (-22).
[  461.019492][T19267] ntfs3(loop7): Failed to initialize $Extend.
[  461.344135][T19292] loop8: detected capacity change from 0 to 128
[  461.459967][T19299] !: renamed from dummy0 (while UP)
[  461.533556][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.533556][   T36] loop8: rw=1, sector=145, nr_sectors = 8 limit=128
[  461.542041][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.542041][   T36] loop8: rw=1, sector=161, nr_sectors = 8 limit=128
[  461.549143][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.549143][   T36] loop8: rw=1, sector=177, nr_sectors = 8 limit=128
[  461.553863][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.553863][   T36] loop8: rw=1, sector=193, nr_sectors = 8 limit=128
[  461.565825][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.565825][   T36] loop8: rw=1, sector=209, nr_sectors = 8 limit=128
[  461.571095][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.571095][   T36] loop8: rw=1, sector=225, nr_sectors = 8 limit=128
[  461.577192][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.577192][   T36] loop8: rw=1, sector=241, nr_sectors = 8 limit=128
[  461.582835][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.582835][   T36] loop8: rw=1, sector=257, nr_sectors = 8 limit=128
[  461.593290][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.593290][   T36] loop8: rw=1, sector=273, nr_sectors = 8 limit=128
[  461.605041][   T36] kworker/u10:1: attempt to access beyond end of device
[  461.605041][   T36] loop8: rw=1, sector=289, nr_sectors = 8 limit=128
[  462.268917][T19323] loop8: detected capacity change from 0 to 1024
[  462.483117][T19334] tmpfs: Bad value for 'size'
[  462.812827][T19349] loop7: detected capacity change from 0 to 4096
[  462.823706][T19349] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  462.897335][T19355] loop8: detected capacity change from 0 to 1024
[  463.267715][T19377] loop8: detected capacity change from 0 to 256
[  463.307621][T19377] FAT-fs (loop8): Directory bread(block 64) failed
[  463.309720][T19377] FAT-fs (loop8): Directory bread(block 65) failed
[  463.312348][T19377] FAT-fs (loop8): Directory bread(block 66) failed
[  463.316466][T19377] FAT-fs (loop8): Directory bread(block 67) failed
[  463.319141][T19377] FAT-fs (loop8): Directory bread(block 68) failed
[  463.321614][T19377] FAT-fs (loop8): Directory bread(block 69) failed
[  463.324052][T19377] FAT-fs (loop8): Directory bread(block 70) failed
[  463.328288][T19377] FAT-fs (loop8): Directory bread(block 71) failed
[  463.336047][T19377] FAT-fs (loop8): Directory bread(block 72) failed
[  463.346102][T19377] FAT-fs (loop8): Directory bread(block 73) failed
[  463.431937][T19386] loop7: detected capacity change from 0 to 256
[  463.543164][T19390] IPv6: sit1: Disabled Multicast RS
[  463.553867][T19390] sit1: entered allmulticast mode
[  465.876104][T19439] openvswitch: netlink: Flow key attribute not present in set flow.
[  466.031906][T18181] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  466.036671][T18181] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  466.076596][T18181] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  466.541035][T19452] wg1 speed is unknown, defaulting to 1000
[  466.544355][T19452] wg1 speed is unknown, defaulting to 1000
[  466.547748][T19452] wg1 speed is unknown, defaulting to 1000
[  466.555032][T19452] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  466.564691][T19452] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  466.595047][T19452] wg1 speed is unknown, defaulting to 1000
[  466.598221][T19452] wg1 speed is unknown, defaulting to 1000
[  466.601023][T19452] wg1 speed is unknown, defaulting to 1000
[  466.603807][T19452] wg1 speed is unknown, defaulting to 1000
[  466.835654][T19456] block device autoloading is deprecated and will be removed.
[  467.247882][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5637'.
[  467.583724][T19507] loop8: detected capacity change from 0 to 1024
[  467.598358][T19507] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  467.601417][T19507] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  467.642476][T19507] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: inode #32: comm syz.8.5647: iget: special inode unallocated
[  467.656737][T19507] EXT4-fs (loop8): Remounting filesystem read-only
[  467.659626][T19507] EXT4-fs (loop8): no journal found
[  467.662362][T19507] EXT4-fs (loop8): can't get journal size
[  467.676605][T19507] EXT4-fs (loop8): filesystem is read-only
[  467.700034][T19507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  467.733397][T18673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.833633][T19521] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5650'.
[  467.845300][T19521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.737627][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5672'.
[  469.742320][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5672'.
[  469.877320][ T5911] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  470.039210][ T5911] usb 9-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  470.042688][ T5911] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.068587][ T5911] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[  470.095687][ T5911] usb 9-1: New USB device found, idVendor=1039, idProduct=12b6, bcdDevice=af.00
[  470.120473][ T5911] usb 9-1: New USB device strings: Mfr=99, Product=0, SerialNumber=0
[  470.137557][ T5911] usb 9-1: Manufacturer: syz
[  470.221740][ T5911] usb 9-1: config 0 descriptor??
[  470.610531][    T9] usb 9-1: USB disconnect, device number 3
[  471.611272][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'.
[  471.621945][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'.
[  471.762229][T19626] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5687'.
[  472.030238][T19639] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5693'.
[  472.299979][T19648] loop8: detected capacity change from 0 to 4096
[  472.321680][T19648] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  472.339350][T19648] ntfs3(loop8): Failed to load $Extend (-22).
[  472.342244][T19648] ntfs3(loop8): Failed to initialize $Extend.
[  472.609388][T19654] loop8: detected capacity change from 0 to 2048
[  472.615028][T19654] EXT4-fs: Ignoring removed mblk_io_submit option
[  472.651057][T19654] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.662754][T19654] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5700'.
[  472.689466][T18673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.495715][T19685] netlink: 'syz.0.5714': attribute type 5 has an invalid length.
[  473.498466][T19685] netlink: 'syz.0.5714': attribute type 5 has an invalid length.
[  473.501001][T19685] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5714'.
[  473.583453][ T8570] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  473.740496][ T8570] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  473.747544][ T8570] usb 9-1: config 0 interface 0 has no altsetting 0
[  473.755310][ T8570] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  473.759819][ T8570] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  473.766468][ T8570] usb 9-1: Product: syz
[  473.768341][ T8570] usb 9-1: Manufacturer: syz
[  473.774085][ T8570] usb 9-1: SerialNumber: syz
[  473.778884][ T8570] usb 9-1: config 0 descriptor??
[  473.801579][ T8570] usb 9-1: selecting invalid altsetting 0
[  474.011880][ T5911] usb 9-1: USB disconnect, device number 4
[  475.350566][T19732] netlink: 'syz.7.5736': attribute type 1 has an invalid length.
[  475.407787][T19732] bond1: (slave gretap1): making interface the new active one
[  475.412252][T19732] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  476.117603][T19761] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.5749'.
[  476.168306][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5750'.
[  476.172636][T19763] netlink: 'syz.0.5750': attribute type 5 has an invalid length.
[  476.178311][T19763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5750'.
[  476.190061][T19763] geneve2: entered promiscuous mode
[  476.192324][T19763] geneve2: entered allmulticast mode
[  476.197621][T18181] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  476.201232][T18181] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  476.206078][T18181] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  476.210295][T18181] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  476.837784][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5753'.
[  478.600911][T19799] binder: 19798:19799 ioctl c00c6211 0 returned -14
[  478.884228][T19802] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.809281][T19807] loop7: detected capacity change from 0 to 40427
[  479.830891][T19807] F2FS-fs (loop7): build fault injection rate: 771
[  479.849861][T19807] F2FS-fs (loop7): invalid crc value
[  480.036154][T19807] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  480.049964][T19807] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  480.336609][T19835] loop8: detected capacity change from 0 to 1024
[  480.736417][T19849] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  480.745619][T19849] CIFS mount error: No usable UNC path provided in device string!
[  480.745619][T19849] 
[  480.750134][T19849] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  482.708011][T19886] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  482.897382][T19901] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5811'.
[  483.425208][T19905] loop8: detected capacity change from 0 to 32768
[  483.431459][T19905] XFS (loop8): sunit and swidth options incompatible with the noalign option
[  483.658865][T19917] netlink: 120 bytes leftover after parsing attributes in process `syz.8.5818'.
[  483.662969][T19917] netlink: 120 bytes leftover after parsing attributes in process `syz.8.5818'.
[  484.238126][T19937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.250552][T19937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.853934][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5831'.
[  484.928277][   T33] kauditd_printk_skb: 14 callbacks suppressed
[  484.928295][   T33] audit: type=1326 audit(1755067258.783:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.0.5834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  484.950883][   T33] audit: type=1326 audit(1755067258.783:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.0.5834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  484.961771][   T33] audit: type=1326 audit(1755067258.793:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.0.5834" exe="/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  484.979241][   T33] audit: type=1326 audit(1755067258.793:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.0.5834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  484.996040][   T33] audit: type=1326 audit(1755067258.793:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.0.5834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  485.193415][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  485.346660][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  485.350800][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  485.355077][    T9] usb 9-1: config 1 has no interface number 0
[  485.357714][    T9] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.362663][    T9] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  485.369135][    T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  485.378026][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.381208][    T9] usb 9-1: Product: syz
[  485.383536][    T9] usb 9-1: Manufacturer: syz
[  485.385393][    T9] usb 9-1: SerialNumber: syz
[  486.217075][    T9] cdc_ncm 9-1:1.1: bind() failure
[  486.362781][   T33] audit: type=1326 audit(1755067260.223:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.0.5846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7fc00000
[  486.419545][ T5910] usb 9-1: USB disconnect, device number 5
[  487.029099][   T33] audit: type=1326 audit(1755067260.883:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.0.5846" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f02d7f85ba7 code=0x7fc00000
[  488.577236][T20017] loop8: detected capacity change from 0 to 512
[  488.589967][T20017] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  488.607159][T20017] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: comm syz.8.5859: inode #1661: comm syz.8.5859: iget: illegal inode #
[  488.621229][T20017] EXT4-fs (loop8): no journal found
[  488.625338][T20017] EXT4-fs (loop8): can't get journal size
[  488.634585][T20017] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  488.639060][T20017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8056c118, mo2=0002]
[  488.650532][T20017] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  488.657407][T20017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.702160][T18673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.163393][T20037] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  489.221467][ T5911] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  489.374072][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.377925][ T5911] usb 9-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  489.384726][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.402103][ T5911] usb 9-1: config 0 descriptor??
[  489.611031][T20051] veth2: entered promiscuous mode
[  489.617331][T20051] veth2: entered allmulticast mode
[  489.850054][ T5911] pantherlord 0003:0810:0001.000D: item fetching failed at offset 5/7
[  489.858415][ T5911] pantherlord 0003:0810:0001.000D: parse failed
[  489.860519][ T5911] pantherlord 0003:0810:0001.000D: probe with driver pantherlord failed with error -22
[  490.126796][ T5910] usb 9-1: USB disconnect, device number 6
[  490.290857][T20060] loop7: detected capacity change from 0 to 40427
[  490.295072][T20060] F2FS-fs: heap/no_heap options were deprecated
[  490.312968][T20060] F2FS-fs (loop7): invalid crc value
[  490.373241][T20060] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  490.377630][T20060] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  490.401439][   T33] audit: type=1800 audit(1755067264.254:311): pid=20060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5877" name="file1" dev="loop7" ino=10 res=0 errno=0
[  490.432005][T18086] bio_check_eod: 104 callbacks suppressed
[  490.432019][T18086] syz-executor: attempt to access beyond end of device
[  490.432019][T18086] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  490.441094][T18086] CPU: 1 UID: 0 PID: 18086 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  490.441115][T18086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  490.441123][T18086] Call Trace:
[  490.441130][T18086]  <TASK>
[  490.441137][T18086]  dump_stack_lvl+0x189/0x250
[  490.441164][T18086]  ? __pfx_dump_stack_lvl+0x10/0x10
[  490.441203][T18086]  ? __pfx_queue_work_on+0x10/0x10
[  490.441218][T18086]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  490.441236][T18086]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  490.441259][T18086]  f2fs_handle_critical_error+0x37c/0x540
[  490.441285][T18086]  f2fs_write_end_io+0x886/0xb60
[  490.441320][T18086]  __submit_merged_bio+0x27a/0x6a0
[  490.441341][T18086]  __submit_merged_write_cond+0x255/0x530
[  490.441363][T18086]  f2fs_write_data_pages+0x261d/0x3000
[  490.441411][T18086]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  490.441426][T18086]  ? __switch_to+0xdae/0x1670
[  490.441482][T18086]  ? rcu_is_watching+0x15/0xb0
[  490.441497][T18086]  ? trace_sched_exit_tp+0x36/0x110
[  490.441514][T18086]  ? __schedule+0x17ae/0x4cc0
[  490.441532][T18086]  ? folios_put_refs+0x559/0x640
[  490.441586][T18086]  ? __lock_acquire+0xab9/0xd20
[  490.441619][T18086]  ? do_raw_spin_lock+0x121/0x290
[  490.441644][T18086]  ? do_raw_spin_unlock+0x4d/0x240
[  490.441659][T18086]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  490.441678][T18086]  do_writepages+0x32e/0x550
[  490.441706][T18086]  ? do_raw_spin_unlock+0x4d/0x240
[  490.441725][T18086]  filemap_fdatawrite+0x199/0x240
[  490.441742][T18086]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  490.441801][T18086]  ? do_raw_spin_unlock+0x4d/0x240
[  490.441820][T18086]  f2fs_sync_dirty_inodes+0x31f/0x830
[  490.441852][T18086]  f2fs_write_checkpoint+0x95a/0x1df0
[  490.441891][T18086]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  490.441946][T18086]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  490.441963][T18086]  ? kfree+0x18e/0x440
[  490.441980][T18086]  ? kill_f2fs_super+0x298/0x6c0
[  490.442003][T18086]  kill_f2fs_super+0x2c3/0x6c0
[  490.442026][T18086]  ? __pfx_kill_f2fs_super+0x10/0x10
[  490.442042][T18086]  ? radix_tree_delete_item+0x2b6/0x400
[  490.442064][T18086]  ? shrinker_free+0x2ce/0x3e0
[  490.442081][T18086]  deactivate_locked_super+0xbc/0x130
[  490.442099][T18086]  cleanup_mnt+0x425/0x4c0
[  490.442113][T18086]  ? lockdep_hardirqs_on+0x9c/0x150
[  490.442132][T18086]  task_work_run+0x1d4/0x260
[  490.442153][T18086]  ? __pfx_task_work_run+0x10/0x10
[  490.442168][T18086]  ? __x64_sys_umount+0x122/0x160
[  490.442189][T18086]  ? exit_to_user_mode_loop+0x40/0x110
[  490.442210][T18086]  exit_to_user_mode_loop+0xec/0x110
[  490.442229][T18086]  do_syscall_64+0x2bd/0x3b0
[  490.442244][T18086]  ? lockdep_hardirqs_on+0x9c/0x150
[  490.442258][T18086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.442271][T18086]  ? exc_page_fault+0x9f/0xf0
[  490.442288][T18086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.442301][T18086] RIP: 0033:0x7f7782b8ff17
[  490.442314][T18086] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  490.442325][T18086] RSP: 002b:00007ffda6c360c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  490.442340][T18086] RAX: 0000000000000000 RBX: 00007f7782c11c05 RCX: 00007f7782b8ff17
[  490.442349][T18086] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda6c36180
[  490.442357][T18086] RBP: 00007ffda6c36180 R08: 0000000000000000 R09: 0000000000000000
[  490.442364][T18086] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda6c37210
[  490.442373][T18086] R13: 00007f7782c11c05 R14: 0000000000077b2d R15: 00007ffda6c37250
[  490.442397][T18086]  </TASK>
[  490.445406][T18086] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  490.778560][T20071] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5881'.
[  491.684804][T20120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5903'.
[  491.689188][T20120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5903'.
[  491.929229][T20118] loop7: detected capacity change from 0 to 32768
[  491.943737][T20118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5902 (20118)
[  491.990421][T20118] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  491.994486][T20118] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  491.997709][T20118] BTRFS info (device loop7): using free-space-tree
[  492.077068][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  492.189141][T20118] BTRFS error (device loop7): target device  is invalid!
[  492.221802][T18086] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  493.159291][T20171] loop8: detected capacity change from 0 to 32768
[  493.188599][T20171] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  493.218117][T20171] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280
[  493.228435][T20171] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  493.235594][T20171] OCFS2: File system is now read-only.
[  493.237760][T20171] (syz.8.5919,20171,0):ocfs2_search_chain:1817 ERROR: status = -30
[  493.240489][T20171] (syz.8.5919,20171,0):ocfs2_search_chain:1940 ERROR: status = -30
[  493.244957][T20171] (syz.8.5919,20171,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  493.248259][T20171] (syz.8.5919,20171,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  493.251016][T20171] (syz.8.5919,20171,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  493.253686][T20171] (syz.8.5919,20171,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  493.256187][T20171] (syz.8.5919,20171,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  493.258677][T20171] (syz.8.5919,20171,0):ocfs2_mknod:388 ERROR: status = -30
[  493.261728][T20171] (syz.8.5919,20171,0):ocfs2_mknod:505 ERROR: status = -30
[  493.263987][T20171] (syz.8.5919,20171,0):ocfs2_create:678 ERROR: status = -30
[  493.292115][T18673] ocfs2: Unmounting device (7,8) on (node local)
[  493.496822][T20187] tmpfs: Bad value for 'mpol'
[  493.560492][T20191] No source specified
[  493.644263][T20197] netlink: 'syz.7.5930': attribute type 8 has an invalid length.
[  493.689596][T20185] loop8: detected capacity change from 0 to 32768
[  493.698305][T20185] BTRFS warning: excessive commit interval 2147483647, use with care
[  493.709748][T20185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5924 (20185)
[  493.838486][T20185] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  493.844663][T20185] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  493.848493][T20185] BTRFS info (device loop8): disk space caching is enabled
[  493.855899][T20185] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  494.344589][T20185] BTRFS info (device loop8): rebuilding free space tree
[  494.366314][T20185] BTRFS info (device loop8): disabling free space tree
[  494.368510][T20185] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  494.373758][T20185] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  494.526698][T18673] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  495.056538][T20232] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  495.459002][T20234] loop7: detected capacity change from 0 to 32768
[  495.468977][T20234] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5939 (20234)
[  495.497410][T20234] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  495.510694][T20234] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  495.515160][T20234] BTRFS info (device loop7): using free-space-tree
[  495.826831][T18086] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  496.276209][T20294] loop8: detected capacity change from 0 to 128
[  496.351774][T20294] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  496.367158][T20294] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  496.525385][T18673] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  497.923506][T20319] loop8: detected capacity change from 0 to 512
[  497.938905][T20319] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.5969: corrupted in-inode xattr: invalid ea_ino
[  497.943958][T20319] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.5969: couldn't read orphan inode 15 (err -117)
[  497.948845][T20319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  498.225717][T20319] EXT4-fs error (device loop8): ext4_add_entry:2417: inode #2: comm syz.8.5969: Directory hole found for htree leaf block 0
[  498.361796][T18673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.479273][T20332] loop8: detected capacity change from 0 to 8
[  498.506635][T20332] SQUASHFS error: xz decompression failed, data probably corrupt
[  498.514451][T20332] SQUASHFS error: Failed to read block 0x108: -5
[  498.519223][T20332] SQUASHFS error: Unable to read metadata cache entry [106]
[  498.523720][T20332] SQUASHFS error: Unable to read inode 0x11f
[  500.057885][   T33] audit: type=1804 audit(1755067273.915:312): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.5999" name="/newroot/190/file0" dev="tmpfs" ino=1001 res=1 errno=0
[  500.513171][T20394] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  501.139270][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  501.141479][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  502.258978][T20427] loop7: detected capacity change from 0 to 32768
[  502.268171][T20427] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  502.278359][T20427] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  502.342082][T18086] ocfs2: Unmounting device (7,7) on (node local)
[  502.656921][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6031'.
[  503.036630][T20486] ptrace attach of "/syz-executor exec"[18673] was attempted by "/syz-executor exec"[20486]
[  503.246337][T20488] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  503.249304][T20488] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  503.818856][T20498] loop8: detected capacity change from 0 to 2048
[  503.829739][T20498] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  503.842131][T20498] UDF-fs: Scanning with blocksize 512 failed
[  503.864545][T20498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  504.043095][T20512] loop8: detected capacity change from 0 to 1024
[  504.096599][ T1089] hfsplus: b-tree write err: -5, ino 4
[  504.470040][ T2206] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  504.662100][ T2206] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[  504.666827][ T2206] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 110, changing to 7
[  504.672608][ T2206] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 10099, setting to 1024
[  504.677173][ T2206] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  504.685719][ T2206] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  504.689333][ T2206] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  504.693278][ T2206] usb 9-1: SerialNumber: syz
[  504.921861][ T2206] usbtest 9-1:1.0: Linux user mode ISO test driver
[  504.924462][ T2206] usbtest 9-1:1.0: high-speed {control bulk-in iso-out} tests (+alt)
[  504.933707][ T2206] usb 9-1: USB disconnect, device number 7
[  505.534242][T20535] loop7: detected capacity change from 0 to 16
[  505.538970][T20532] tipc: Started in network mode
[  505.542606][T20535] erofs (device loop7): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  505.544601][T20532] tipc: Node identity ac1414aa, cluster identity 4711
[  505.549200][T20535] erofs (device loop7): mounted with root inode @ nid 36.
[  505.557791][T20532] tipc: Enabled bearer <udp:s>, priority 10
[  506.077601][T20535] syz.7.6063: attempt to access beyond end of device
[  506.077601][T20535] loop7: rw=0, sector=15300821024, nr_sectors = 8 limit=16
[  506.091469][T20535] erofs (device loop7): read error -5 @ 72 of nid 36
[  506.378817][T20556] kAFS: unable to lookup cell '/,cL'
[  506.672735][    T9] tipc: Node number set to 2886997162
[  506.885444][T20589] team0: Caught tx_queue_len zero misconfig
[  507.452870][   T33] audit: type=1326 audit(1755067281.316:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20620 comm="syz.8.6102" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x0
[  507.517307][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6103'.
[  507.687833][T20631] netlink: 'syz.7.6107': attribute type 1 has an invalid length.
[  507.861123][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6111'.
[  507.945325][T20645] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6114'.
[  507.950462][T20645] unsupported nlmsg_type 40
[  508.051861][   T33] audit: type=1326 audit(1755067281.916:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.068305][T20653] overlayfs: failed to clone upperpath
[  508.072007][   T33] audit: type=1326 audit(1755067281.916:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.092743][   T33] audit: type=1326 audit(1755067281.916:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.105146][   T33] audit: type=1326 audit(1755067281.916:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.119675][   T33] audit: type=1326 audit(1755067281.916:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.127211][   T33] audit: type=1326 audit(1755067281.916:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.135875][   T33] audit: type=1326 audit(1755067281.916:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.148469][   T33] audit: type=1326 audit(1755067281.916:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.157961][   T33] audit: type=1326 audit(1755067281.916:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.0.6119" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x50000
[  508.986612][T20681] netlink: 'syz.7.6132': attribute type 21 has an invalid length.
[  508.991974][T20681] netlink: 'syz.7.6132': attribute type 6 has an invalid length.
[  508.994578][T20681] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6132'.
[  509.097507][T20685] syz.7.6134(20685): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  510.157096][T20710] tipc: Enabling of bearer <etl:g> rejected, media not registered
[  511.541225][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6161'.
[  511.545023][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6161'.
[  514.018099][T20796] loop7: detected capacity change from 0 to 32768
[  514.062373][T20796] JBD2: Ignoring recovery information on journal
[  514.123279][T20796] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  514.181492][T18086] ocfs2: Unmounting device (7,7) on (node local)
[  514.344998][T20812] loop7: detected capacity change from 0 to 2048
[  514.362876][T20812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.407090][T18086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.654625][T20831] netlink: 'syz.0.6195': attribute type 1 has an invalid length.
[  514.657177][T20831] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6195'.
[  514.674893][T20819] loop7: detected capacity change from 0 to 40427
[  514.682876][T20819] F2FS-fs (loop7): build fault injection rate: 771
[  514.710473][T20819] F2FS-fs (loop7): invalid crc value
[  514.734686][T20836] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.6196'.
[  514.774021][T20819] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  514.793148][T20819] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  514.805104][   T33] kauditd_printk_skb: 15335 callbacks suppressed
[  514.805120][   T33] audit: type=1800 audit(1755067288.666:15658): pid=20819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6188" name="bus" dev="loop7" ino=14 res=0 errno=0
[  514.826707][T18086] syz-executor: attempt to access beyond end of device
[  514.826707][T18086] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  514.834456][T18086] CPU: 0 UID: 0 PID: 18086 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  514.834472][T18086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  514.834478][T18086] Call Trace:
[  514.834481][T18086]  <TASK>
[  514.834485][T18086]  dump_stack_lvl+0x189/0x250
[  514.834502][T18086]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.834512][T18086]  ? __pfx_queue_work_on+0x10/0x10
[  514.834521][T18086]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  514.834531][T18086]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  514.834546][T18086]  f2fs_handle_critical_error+0x37c/0x540
[  514.834562][T18086]  f2fs_write_end_io+0x886/0xb60
[  514.834583][T18086]  __submit_merged_bio+0x27a/0x6a0
[  514.834596][T18086]  __submit_merged_write_cond+0x255/0x530
[  514.834609][T18086]  f2fs_write_data_pages+0x261d/0x3000
[  514.834638][T18086]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.834688][T18086]  ? folios_put_refs+0x559/0x640
[  514.834704][T18086]  ? __pfx_folios_put_refs+0x10/0x10
[  514.834711][T18086]  ? rcu_is_watching+0x15/0xb0
[  514.834725][T18086]  ? __lock_acquire+0xab9/0xd20
[  514.834745][T18086]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.834757][T18086]  do_writepages+0x32e/0x550
[  514.834774][T18086]  ? do_raw_spin_unlock+0x4d/0x240
[  514.834786][T18086]  filemap_fdatawrite+0x199/0x240
[  514.834830][T18086]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  514.834878][T18086]  ? do_raw_spin_unlock+0x4d/0x240
[  514.834895][T18086]  f2fs_sync_dirty_inodes+0x31f/0x830
[  514.834926][T18086]  f2fs_write_checkpoint+0x95a/0x1df0
[  514.834952][T18086]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  514.834990][T18086]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  514.835009][T18086]  ? kfree+0x18e/0x440
[  514.835026][T18086]  ? kill_f2fs_super+0x298/0x6c0
[  514.835050][T18086]  kill_f2fs_super+0x2c3/0x6c0
[  514.835065][T18086]  ? __pfx_kill_f2fs_super+0x10/0x10
[  514.835074][T18086]  ? radix_tree_delete_item+0x2b6/0x400
[  514.835088][T18086]  ? shrinker_free+0x2ce/0x3e0
[  514.835100][T18086]  deactivate_locked_super+0xbc/0x130
[  514.835118][T18086]  cleanup_mnt+0x425/0x4c0
[  514.835134][T18086]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.835152][T18086]  task_work_run+0x1d4/0x260
[  514.835174][T18086]  ? __pfx_task_work_run+0x10/0x10
[  514.835189][T18086]  ? __x64_sys_umount+0x122/0x160
[  514.835203][T18086]  ? exit_to_user_mode_loop+0x40/0x110
[  514.835217][T18086]  exit_to_user_mode_loop+0xec/0x110
[  514.835229][T18086]  do_syscall_64+0x2bd/0x3b0
[  514.835244][T18086]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.835259][T18086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.835272][T18086]  ? exc_page_fault+0x9f/0xf0
[  514.835290][T18086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.835303][T18086] RIP: 0033:0x7f7782b8ff17
[  514.835317][T18086] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  514.835329][T18086] RSP: 002b:00007ffda6c360c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  514.835340][T18086] RAX: 0000000000000000 RBX: 00007f7782c11c05 RCX: 00007f7782b8ff17
[  514.835346][T18086] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda6c36180
[  514.835351][T18086] RBP: 00007ffda6c36180 R08: 0000000000000000 R09: 0000000000000000
[  514.835359][T18086] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda6c37210
[  514.835368][T18086] R13: 00007f7782c11c05 R14: 000000000007da7a R15: 00007ffda6c37250
[  514.835392][T18086]  </TASK>
[  514.835398][T18086] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  514.962719][T18086] CPU: 0 UID: 0 PID: 18086 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  514.962733][T18086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  514.962739][T18086] Call Trace:
[  514.962742][T18086]  <TASK>
[  514.962746][T18086]  dump_stack_lvl+0x189/0x250
[  514.962763][T18086]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.962773][T18086]  ? __pfx_queue_work_on+0x10/0x10
[  514.962808][T18086]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  514.962820][T18086]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  514.962835][T18086]  f2fs_handle_critical_error+0x37c/0x540
[  514.962851][T18086]  f2fs_write_end_io+0x886/0xb60
[  514.962872][T18086]  __submit_merged_bio+0x27a/0x6a0
[  514.962885][T18086]  __submit_merged_write_cond+0x255/0x530
[  514.962900][T18086]  f2fs_write_data_pages+0x261d/0x3000
[  514.962930][T18086]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.962971][T18086]  ? folios_put_refs+0x559/0x640
[  514.962986][T18086]  ? __pfx_folios_put_refs+0x10/0x10
[  514.962993][T18086]  ? rcu_is_watching+0x15/0xb0
[  514.963006][T18086]  ? __lock_acquire+0xab9/0xd20
[  514.963027][T18086]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.963038][T18086]  do_writepages+0x32e/0x550
[  514.963055][T18086]  ? do_raw_spin_unlock+0x4d/0x240
[  514.963067][T18086]  filemap_fdatawrite+0x199/0x240
[  514.963078][T18086]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  514.963114][T18086]  ? do_raw_spin_unlock+0x4d/0x240
[  514.963126][T18086]  f2fs_sync_dirty_inodes+0x31f/0x830
[  514.963146][T18086]  f2fs_write_checkpoint+0x95a/0x1df0
[  514.963171][T18086]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  514.963204][T18086]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  514.963215][T18086]  ? kfree+0x18e/0x440
[  514.963225][T18086]  ? kill_f2fs_super+0x298/0x6c0
[  514.963239][T18086]  kill_f2fs_super+0x2c3/0x6c0
[  514.963253][T18086]  ? __pfx_kill_f2fs_super+0x10/0x10
[  514.963263][T18086]  ? radix_tree_delete_item+0x2b6/0x400
[  514.963276][T18086]  ? shrinker_free+0x2ce/0x3e0
[  514.963286][T18086]  deactivate_locked_super+0xbc/0x130
[  514.963297][T18086]  cleanup_mnt+0x425/0x4c0
[  514.963306][T18086]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.963316][T18086]  task_work_run+0x1d4/0x260
[  514.963329][T18086]  ? __pfx_task_work_run+0x10/0x10
[  514.963338][T18086]  ? __x64_sys_umount+0x122/0x160
[  514.963351][T18086]  ? exit_to_user_mode_loop+0x40/0x110
[  514.963365][T18086]  exit_to_user_mode_loop+0xec/0x110
[  514.963376][T18086]  do_syscall_64+0x2bd/0x3b0
[  514.963385][T18086]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.963393][T18086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.963402][T18086]  ? exc_page_fault+0x9f/0xf0
[  514.963412][T18086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.963420][T18086] RIP: 0033:0x7f7782b8ff17
[  514.963428][T18086] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  514.963436][T18086] RSP: 002b:00007ffda6c360c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  514.963445][T18086] RAX: 0000000000000000 RBX: 00007f7782c11c05 RCX: 00007f7782b8ff17
[  514.963451][T18086] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda6c36180
[  514.963456][T18086] RBP: 00007ffda6c36180 R08: 0000000000000000 R09: 0000000000000000
[  514.963461][T18086] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda6c37210
[  514.963466][T18086] R13: 00007f7782c11c05 R14: 000000000007da7a R15: 00007ffda6c37250
[  514.963481][T18086]  </TASK>
[  514.963485][T18086] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  515.867610][T20875] loop7: detected capacity change from 0 to 8
[  515.872924][T20874] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551613)
[  515.877467][T20874] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  515.900217][T20875] SQUASHFS error: xz decompression failed, data probably corrupt
[  515.905855][T20875] SQUASHFS error: Failed to read block 0x108: -5
[  515.908843][T20875] SQUASHFS error: Unable to read metadata cache entry [106]
[  515.915000][T20875] SQUASHFS error: Unable to read inode 0x11f
[  516.245991][T20901] loop7: detected capacity change from 0 to 512
[  516.250996][T20901] EXT4-fs: Ignoring removed oldalloc option
[  516.264206][T20901] EXT4-fs (loop7): 1 truncate cleaned up
[  516.266916][T20901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.285487][T20901] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  516.317862][T18086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.428222][T20907] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6229'.
[  516.497436][T20911] netlink: 'syz.7.6232': attribute type 1 has an invalid length.
[  516.732112][T20931] ip6_vti0: Caught tx_queue_len zero misconfig
[  516.856621][T20939] Option '    ' to dns_resolver key: bad/missing value
[  516.944829][T20928] loop7: detected capacity change from 0 to 32768
[  516.955813][T20928] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6240 (20928)
[  516.981075][T20928] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  516.985042][T20928] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  516.990319][T20928] BTRFS info (device loop7): using free-space-tree
[  517.160410][T18086] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  517.439597][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6256'.
[  518.081132][T21012] netlink: 'syz.7.6271': attribute type 4 has an invalid length.
[  518.427531][T21020] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6274'.
[  518.481290][T21024] netlink: 'syz.7.6276': attribute type 74 has an invalid length.
[  521.004967][T21061] loop7: detected capacity change from 0 to 32768
[  521.199650][T21073] bond0: Unable to set up delay as MII monitoring is disabled
[  521.440474][T21081] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6298'.
[  521.696126][T21061] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  521.696154][T21061]   allowing incompatible features above 0.0: (unknown version)
[  521.696164][T21061]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  521.730498][T21061] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  521.734092][T21061] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  521.737148][T21061] bcachefs (loop7): Version upgrade required:
[  521.737148][T21061] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  521.737148][T21061] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  521.737148][T21061]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  521.800260][T21061] bcachefs (loop7): dropping and reconstructing all alloc info
[  521.816653][T21061] bcachefs (loop7): accounting_read... done
[  521.822240][T21061] bcachefs (loop7): alloc_read... done
[  521.824527][T21061] bcachefs (loop7): snapshots_read... done
[  521.826820][T21061] bcachefs (loop7): check_allocations... done
[  521.854332][T21061] bcachefs (loop7): going read-write
[  521.857269][T21061] bcachefs (loop7): insufficient writeable journal devices available: have 0, need 1
[  521.857269][T21061] rw journal devs:
[  521.896751][T21061] bcachefs (loop7): done starting filesystem
[  521.947192][T18086] bcachefs (loop7): shutting down
[  521.949377][T18086] bcachefs (loop7): going read-only
[  521.953915][T18086] bcachefs (loop7): finished waiting for writes to stop
[  521.965635][T18086] bcachefs (loop7): flushing journal and stopping allocators, journal seq 10
[  521.968916][T18086] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 10
[  521.975131][T18086] bcachefs (loop7): unclean shutdown complete, journal seq 10
[  521.984414][T18086] bcachefs (loop7): done going read-only, filesystem not clean
[  522.016681][T18086] bcachefs (loop7): shutdown complete
[  522.473687][T21126] netlink: 'syz.0.6316': attribute type 7 has an invalid length.
[  522.493663][T21126] : entered promiscuous mode
[  523.391962][T21143] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  523.394779][T21143] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  523.409917][T21143] hsr_slave_0: left promiscuous mode
[  523.413276][T21143] hsr_slave_1: left promiscuous mode
[  523.456499][T21145] loop7: detected capacity change from 0 to 1024
[  523.603917][   T27] hfsplus: b-tree write err: -5, ino 3
[  523.641855][T18086] hfsplus: node 4:3 still has 1 user(s)!
[  523.827721][T21164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6330'.
[  523.830932][T21159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6330'.
[  523.838419][T21159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6330'.
[  524.000652][   T33] audit: type=1326 audit(1755067297.868:15659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21172 comm="syz.0.6336" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02d7f8ebe9 code=0x0
[  525.333158][T21196] 9pnet_fd: Insufficient options for proto=fd
[  525.375947][T21198] netlink: 'syz.0.6346': attribute type 1 has an invalid length.
[  525.379186][T21198] netlink: 'syz.0.6346': attribute type 4 has an invalid length.
[  525.382177][T21198] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6346'.
[  526.585450][T21223] netdevsim netdevsim8: Direct firmware load for .. failed with error -2
[  526.600781][T21223] netdevsim netdevsim8: Falling back to sysfs fallback for: ..
[  526.964122][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6361'.
[  527.325682][T21246] loop7: detected capacity change from 0 to 1024
[  527.349667][T21246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.358998][T21246] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  527.389380][T21246] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 1: comm syz.7.6367: lblock 1 mapped to illegal pblock 1 (length 15)
[  527.403055][T21246] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  527.408796][T21246] EXT4-fs (loop7): This should not happen!! Data will be lost
[  527.408796][T21246] 
[  527.456725][T18086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.575315][T21255] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  528.475550][T21266] netlink: 116 bytes leftover after parsing attributes in process `syz.8.6374'.
[  529.918287][T21327] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6403'.
[  530.042020][T21337] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6409'.
[  530.993235][   T33] audit: type=1326 audit(1755067304.858:15660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21379 comm="syz.8.6429" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x0
[  531.756974][T21394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6435'.
[  531.770816][T21394] batadv2: entered allmulticast mode
[  531.871878][T21398] netlink: 'syz.8.6437': attribute type 4 has an invalid length.
[  531.964677][T21404] team_slave_0: entered promiscuous mode
[  531.967223][T21404] team_slave_1: entered promiscuous mode
[  531.969942][T21404] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  531.975105][T21404] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  532.195213][T21414] openvswitch: netlink: Actions may not be safe on all matching packets
[  532.282842][T21422] overlayfs: failed to clone lowerpath
[  534.614125][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6480'.
[  535.394644][T21520] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  535.850840][T21536] loop7: detected capacity change from 0 to 40427
[  535.862157][T21536] F2FS-fs: heap/no_heap options were deprecated
[  535.878242][T21536] F2FS-fs (loop7): invalid crc value
[  535.905346][T21554] netlink: 'syz.8.6510': attribute type 10 has an invalid length.
[  535.947715][T21554] team0: Device bond0 is already an upper device of the team interface
[  535.966966][T21536] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  535.974522][T21536] F2FS-fs (loop7): Start checkpoint disabled!
[  535.979810][T21536] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  536.031840][   T27] kworker/u10:0: attempt to access beyond end of device
[  536.031840][   T27] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  536.040705][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  536.040728][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  536.040737][   T27] Workqueue: writeback wb_workfn (flush-7:7)
[  536.040758][   T27] Call Trace:
[  536.040762][   T27]  <TASK>
[  536.040768][   T27]  dump_stack_lvl+0x189/0x250
[  536.040791][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  536.040809][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  536.040822][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  536.040839][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  536.040856][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  536.040881][   T27]  f2fs_write_end_io+0x886/0xb60
[  536.040918][   T27]  __submit_merged_bio+0x27a/0x6a0
[  536.040937][   T27]  __submit_merged_write_cond+0x255/0x530
[  536.040955][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  536.041007][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  536.041032][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  536.041084][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  536.041101][   T27]  ? look_up_lock_class+0x74/0x170
[  536.041127][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[  536.041146][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[  536.041165][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  536.041191][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  536.041211][   T27]  do_writepages+0x32e/0x550
[  536.041235][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  536.041248][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  536.041300][   T27]  __writeback_single_inode+0x145/0xff0
[  536.041319][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  536.041341][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  536.041384][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  536.041441][   T27]  ? rcu_is_watching+0x15/0xb0
[  536.041466][   T27]  wb_writeback+0x43b/0xaf0
[  536.041484][   T27]  ? queue_io+0x341/0x590
[  536.041504][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  536.041530][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  536.041551][   T27]  wb_workfn+0x409/0xef0
[  536.041580][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  536.041593][   T27]  ? __lock_acquire+0xab9/0xd20
[  536.041624][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  536.041645][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  536.041658][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  536.041670][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  536.041686][   T27]  process_scheduled_works+0xae1/0x17b0
[  536.041720][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  536.041760][   T27]  worker_thread+0x8a0/0xda0
[  536.041793][   T27]  kthread+0x711/0x8a0
[  536.041814][   T27]  ? __pfx_worker_thread+0x10/0x10
[  536.041827][   T27]  ? __pfx_kthread+0x10/0x10
[  536.041846][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  536.041860][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  536.041872][   T27]  ? __pfx_kthread+0x10/0x10
[  536.041884][   T27]  ret_from_fork+0x3fc/0x770
[  536.041902][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  536.041923][   T27]  ? __switch_to_asm+0x39/0x70
[  536.041939][   T27]  ? __switch_to_asm+0x33/0x70
[  536.041955][   T27]  ? __pfx_kthread+0x10/0x10
[  536.041966][   T27]  ret_from_fork_asm+0x1a/0x30
[  536.041997][   T27]  </TASK>
[  536.042003][   T27] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  536.429084][T21582] 9pnet: Found fid 0 not clunked
[  536.618950][   T33] audit: type=1326 audit(1755067310.479:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.0.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  536.641628][   T33] audit: type=1326 audit(1755067310.479:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.0.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  536.654576][   T33] audit: type=1326 audit(1755067310.489:15663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.0.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  536.665768][   T33] audit: type=1326 audit(1755067310.489:15664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.0.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  536.687362][   T33] audit: type=1326 audit(1755067310.489:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.0.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  536.713518][   T33] audit: type=1326 audit(1755067310.489:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.0.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  536.722754][   T33] audit: type=1326 audit(1755067310.489:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.0.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  536.730358][   T33] audit: type=1326 audit(1755067310.489:15668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.0.6530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d7f8ebe9 code=0x7ffc0000
[  536.788194][T21610] loop7: detected capacity change from 0 to 8
[  536.970617][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6540'.
[  537.127627][T21622] tmpfs: Bad value for 'mpol'
[  537.167659][T21624] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6543'.
[  537.270853][T21628] loop7: detected capacity change from 0 to 2048
[  537.748701][T21658] loop7: detected capacity change from 0 to 8192
[  537.776831][T21658] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  537.937879][T21677] loop7: detected capacity change from 0 to 4096
[  537.969689][T21677] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  537.995012][T21677] ntfs3(loop7): ino=19, mi_enum_attr
[  537.997372][T21677] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  538.018465][   T33] audit: type=1800 audit(1755067311.889:15669): pid=21677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6569" name="file0" dev="loop7" ino=0 res=0 errno=0
[  538.042747][   T33] audit: type=1804 audit(1755067311.889:15670): pid=21677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.6569" name="/newroot/326/file0/file0" dev="loop7" ino=0 res=1 errno=0
[  538.371216][T21698] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6575'.
[  538.457343][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6584'.
[  538.460936][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6584'.
[  538.463889][T21710] netlink: 50 bytes leftover after parsing attributes in process `syz.7.6584'.
[  538.469558][T21712] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.6585'.
[  538.574375][T21721] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.6588'.
[  538.578143][T21721] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6588'.
[  539.624621][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6605'.
[  540.336682][T21796] pim6reg: entered allmulticast mode
[  540.341375][T21796] pim6reg: left allmulticast mode
[  540.571753][T21794] loop7: detected capacity change from 0 to 32768
[  540.577653][T21794] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6620 (21794)
[  540.586175][T21811] netlink: 'syz.8.6628': attribute type 12 has an invalid length.
[  540.594215][T21811] netlink: 9472 bytes leftover after parsing attributes in process `syz.8.6628'.
[  540.607440][T21794] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  540.623751][T21794] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  540.631492][T21794] BTRFS info (device loop7): using free-space-tree
[  540.749843][T21832] Invalid ELF header magic: != ELF
[  540.888766][T18086] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  540.997558][T21851] netlink: 'syz.8.6639': attribute type 2 has an invalid length.
[  541.171228][T21861] nbd: must specify an index to disconnect
[  541.732010][T21881] syz.7.6653: attempt to access beyond end of device
[  541.732010][T21881] loop15: rw=0, sector=0, nr_sectors = 1 limit=0
[  541.749552][T21881] FAT-fs (loop15): unable to read boot sector
[  541.981232][T21902] Invalid source name
[  541.982675][T21902] UBIFS error (pid: 21902): cannot open "/dev/sg0", error -22
[  542.967565][T21928] loop7: detected capacity change from 0 to 736
[  544.039299][T21969] raw_sendmsg: syz.7.6690 forgot to set AF_INET. Fix it!
[  544.060993][T21971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6691'.
[  544.119412][T21977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6693'.
[  544.156618][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6693'.
[  547.152715][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  547.686498][T22138] loop7: detected capacity change from 0 to 512
[  547.771494][T22145] input: syz1 as /devices/virtual/input/input16
[  548.030510][T22159] sd 0:0:0:0: PR command failed: 1026
[  548.032434][T22159] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  548.036304][T22159] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  548.984529][   T33] audit: type=1326 audit(1755067322.841:15671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22196 comm="syz.8.6769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  548.995365][   T33] audit: type=1326 audit(1755067322.851:15672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22196 comm="syz.8.6769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  549.012003][   T33] audit: type=1326 audit(1755067322.851:15673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22196 comm="syz.8.6769" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1e2b8d550 code=0x7ffc0000
[  549.025698][   T33] audit: type=1326 audit(1755067322.851:15674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22196 comm="syz.8.6769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  549.037888][   T33] audit: type=1326 audit(1755067322.851:15675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22196 comm="syz.8.6769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  549.254040][T22207] batman_adv: batadv0: Adding interface: dummy0
[  549.256234][T22207] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.269666][T22207] batman_adv: batadv0: Interface activated: dummy0
[  549.280310][T22207] batadv0: mtu less than device minimum
[  549.282858][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.287129][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.291168][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.295082][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.298962][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.302862][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.306651][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.310618][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.314685][T22207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  549.331204][T18089] Bluetooth: hci1: command 0x0406 tx timeout
[  549.373587][   T55] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[  549.383755][   T55] Bluetooth: hci0: unexpected event for opcode 0x2039
[  550.541072][T22243] netlink: 'syz.0.6790': attribute type 10 has an invalid length.
[  550.657019][T22251] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  551.212266][   T33] audit: type=1326 audit(1755067325.071:15676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22278 comm="syz.7.6808" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  551.234828][   T33] audit: type=1326 audit(1755067325.071:15677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22278 comm="syz.7.6808" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  551.239164][T22281] futex_wake_op: syz.0.6809 tries to shift op by 32; fix this program
[  551.246753][T22279] loop7: detected capacity change from 0 to 1024
[  551.255312][   T33] audit: type=1326 audit(1755067325.091:15678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22278 comm="syz.7.6808" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  551.265165][T22279] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  551.277316][   T33] audit: type=1326 audit(1755067325.091:15679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22278 comm="syz.7.6808" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7782b8ec23 code=0x7ffc0000
[  551.290436][   T33] audit: type=1326 audit(1755067325.091:15680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22278 comm="syz.7.6808" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7782b8d69f code=0x7ffc0000
[  551.309004][T22279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  551.350647][T18086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.563715][T22297] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  551.568777][T22297] comedi comedi3: 8255: I/O port conflict (0x8000006,4)
[  551.571016][T22297] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  551.573054][T22297] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  551.584112][T22297] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  551.586413][T22297] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  551.589183][T22297] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  551.591982][T22297] comedi comedi3: 8255: I/O port conflict (0x3000000,4)
[  552.128535][   T55] Bluetooth: hci2: unexpected event for opcode 0x0c05
[  552.304863][T22327] vivid-000: disconnect
[  552.369145][T22328] random: crng reseeded on system resumption
[  552.401440][T22328] vivid-000: reconnect
[  553.444064][   T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  553.447278][   T55] Bluetooth: hci0: Injecting HCI hardware error event
[  553.456047][   T55] Bluetooth: hci0: hardware error 0x00
[  553.519988][ T5850] Bluetooth: hci3: sending frame failed (-49)
[  553.525094][T18089] Bluetooth: hci3: Opcode 0x1003 failed: -49
[  553.851283][T22388] loop7: detected capacity change from 0 to 512
[  553.858860][T22388] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  554.402162][T22413] libceph: resolve '400' (ret=-3): failed
[  555.202177][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6873'.
[  555.422642][T22432] netlink: 'syz.8.6876': attribute type 1 has an invalid length.
[  555.460809][T22428] loop7: detected capacity change from 0 to 32768
[  555.526611][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  555.575817][T22428] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  555.575833][T22428]   allowing incompatible features above 0.0: (unknown version)
[  555.575839][T22428]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  555.603155][T22428] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  555.610132][T22447] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6880'.
[  555.611735][T22428] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  555.621300][T22428] bcachefs (loop7): Version upgrade required:
[  555.621300][T22428] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  555.621300][T22428] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  555.621300][T22428]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  555.657632][T22428] bcachefs (loop7): dropping and reconstructing all alloc info
[  555.687348][T22428] bcachefs (loop7): accounting_read... done
[  555.691664][T22428] bcachefs (loop7): alloc_read... done
[  555.700402][T22428] bcachefs (loop7): snapshots_read... done
[  555.702814][T22428] bcachefs (loop7): check_allocations... done
[  555.746709][T22428] bcachefs (loop7): going read-write
[  555.748896][T22428] bcachefs (loop7): insufficient writeable journal devices available: have 0, need 1
[  555.748896][T22428] rw journal devs:
[  555.774061][T22428] bcachefs (loop7): done starting filesystem
[  555.778793][T22460] 9pnet_fd: Insufficient options for proto=fd
[  555.848660][T22463] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6886'.
[  555.898418][T18086] bcachefs (loop7): shutting down
[  555.900389][T18086] bcachefs (loop7): going read-only
[  555.902120][T18086] bcachefs (loop7): finished waiting for writes to stop
[  555.908239][T18086] bcachefs (loop7): flushing journal and stopping allocators, journal seq 10
[  555.911988][T18086] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 10
[  555.915767][T18086] bcachefs (loop7): unclean shutdown complete, journal seq 10
[  555.919020][T18086] bcachefs (loop7): done going read-only, filesystem not clean
[  555.943057][T18086] bcachefs (loop7): shutdown complete
[  556.554553][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6897'.
[  557.440099][T22522] overlayfs: missing 'lowerdir'
[  557.659232][T22514] loop7: detected capacity change from 0 to 32768
[  557.748165][T22531] lo speed is unknown, defaulting to 1000
[  557.804451][T22531] lo speed is unknown, defaulting to 1000
[  557.807532][T22531] lo speed is unknown, defaulting to 1000
[  557.884337][T22514] XFS (loop7): DAX unsupported by block device. Turning off DAX.
[  557.891350][T22514] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  558.293398][T22514] XFS (loop7): Ending clean mount
[  558.368351][T18086] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  558.717293][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6919'.
[  558.750560][T22531] infiniband sz1: set down
[  558.763041][T22531] infiniband sz1: added lo
[  558.766381][T22531] sz1: rxe_create_cq: returned err = -12
[  558.769008][T22531] infiniband sz1: Couldn't create ib_mad CQ
[  558.772199][T22531] infiniband sz1: Couldn't open port 1
[  558.831758][T22531] RDS/IB: sz1: added
[  558.834375][T22531] smc: adding ib device sz1 with port count 1
[  558.836975][T22531] smc:    ib device sz1 port 1 has pnetid 
[  558.849098][ T8570] lo speed is unknown, defaulting to 1000
[  559.264807][ T5910] lo speed is unknown, defaulting to 1000
[  559.267534][T22531] lo speed is unknown, defaulting to 1000
[  559.594229][T22531] lo speed is unknown, defaulting to 1000
[  559.721820][T22531] lo speed is unknown, defaulting to 1000
[  559.852872][T22531] lo speed is unknown, defaulting to 1000
[  560.664639][T22591] netlink: 3176 bytes leftover after parsing attributes in process `syz.8.6941'.
[  560.765456][T22596] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  561.342635][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6957'.
[  561.555589][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6962'.
[  562.465738][T22648] netlink: 'syz.8.6968': attribute type 1 has an invalid length.
[  562.469083][T22648] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6968'.
[  562.568773][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  562.570819][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  562.623103][T22660] loop7: detected capacity change from 0 to 16
[  562.631057][T22660] erofs (device loop7): mounted with root inode @ nid 36.
[  563.533459][   T33] kauditd_printk_skb: 15 callbacks suppressed
[  563.533478][   T33] audit: type=1800 audit(1755067337.402:15696): pid=22690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6986" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0
[  564.638636][   T33] audit: type=1326 audit(1755067338.502:15697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22709 comm="syz.7.6995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  564.653966][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  564.658447][   T33] audit: type=1326 audit(1755067338.502:15698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22709 comm="syz.7.6995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  564.666042][   T33] audit: type=1326 audit(1755067338.502:15699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22709 comm="syz.7.6995" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  564.674971][   T33] audit: type=1326 audit(1755067338.502:15700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22709 comm="syz.7.6995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  564.683536][   T33] audit: type=1326 audit(1755067338.502:15701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22709 comm="syz.7.6995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  564.691125][   T33] audit: type=1326 audit(1755067338.522:15702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22709 comm="syz.7.6995" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  564.714197][   T33] audit: type=1326 audit(1755067338.522:15703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22709 comm="syz.7.6995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  564.742539][   T33] audit: type=1326 audit(1755067338.522:15704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22709 comm="syz.7.6995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  564.798580][T22718] ptrace attach of "/syz-executor exec"[18086] was attempted by "\x22"[22718]
[  564.857075][T22718] loop7: detected capacity change from 0 to 4096
[  564.974674][   T33] audit: type=1800 audit(1755067338.842:15705): pid=22718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6999" name="file1" dev="loop7" ino=33 res=0 errno=0
[  565.018707][T22729] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7003'.
[  565.021642][T22729] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7003'.
[  565.172497][T22718] ntfs3(loop7): ino=1f, mi_enum_attr
[  565.415683][T18089] Bluetooth: hci2: Malformed HCI Event: 0x22
[  565.539504][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7023'.
[  565.639822][T22778] loop7: detected capacity change from 0 to 8192
[  566.913390][T22828] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7045'.
[  566.988987][T22834] tmpfs: Bad value for 'mpol'
[  567.161264][T22848] fuse: Invalid rootmode
[  568.211615][T22866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7062'.
[  569.327595][T22886] netlink: 'syz.0.7071': attribute type 13 has an invalid length.
[  569.381426][T22888] netlink: 'syz.0.7072': attribute type 62 has an invalid length.
[  570.405978][T22903] JFS: charset not found
[  570.528477][T22910] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7081'.
[  572.156732][T22996] loop7: detected capacity change from 0 to 32768
[  572.159874][T22996] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7122 (22996)
[  572.172070][T22996] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  572.175836][T22996] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  572.179141][T22996] BTRFS info (device loop7): using free-space-tree
[  572.319884][T22996] BTRFS info (device loop7): rebuilding free space tree
[  572.399612][T18086] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  572.558293][T23024] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7127'.
[  574.140262][T23072] netlink: 'syz.0.7150': attribute type 1 has an invalid length.
[  574.188376][T23072] 8021q: adding VLAN 0 to HW filter on device bond3
[  574.193193][T23072] bond2: (slave bond3): making interface the new active one
[  574.196338][T23072] bond2: (slave bond3): Enslaving as an active interface with an up link
[  575.078168][T23111] wg1 speed is unknown, defaulting to 1000
[  575.081845][T23111] lo speed is unknown, defaulting to 1000
[  575.795200][T23131] ip6tnl0: Caught tx_queue_len zero misconfig
[  576.927714][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7191'.
[  577.372061][T23184] syzkaller1: entered promiscuous mode
[  577.373817][T23184] syzkaller1: entered allmulticast mode
[  577.553978][T23196] netem: change failed
[  577.659549][T23198] loop7: detected capacity change from 0 to 4096
[  577.665714][T23198] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  577.688991][T23198] ntfs3(loop7): ino=19, mi_enum_attr
[  577.690655][T23198] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  577.716095][T23198] ntfs3(loop7): failed to convert "c46c" to macgreek
[  577.723705][T23198] ntfs3(loop7): ino=20, mi_enum_attr
[  577.978544][T23225] overlayfs: failed to clone upperpath
[  578.097326][T23234] loop7: detected capacity change from 0 to 256
[  578.109913][T23234] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  578.420638][T23253] input: syz1 as /devices/virtual/input/input17
[  579.442823][T23284] tipc: Started in network mode
[  579.444862][T23284] tipc: Node identity 7f000001, cluster identity 4711
[  579.448259][T23284] tipc: Enabled bearer <udp:syz2>, priority 10
[  579.674349][   T33] audit: type=1326 audit(1755067353.544:15706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.7.7258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  579.700713][   T33] audit: type=1326 audit(1755067353.544:15707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.7.7258" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  579.737637][   T33] audit: type=1326 audit(1755067353.544:15708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.7.7258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  579.772304][   T33] audit: type=1326 audit(1755067353.544:15709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.7.7258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  579.791859][   T33] audit: type=1326 audit(1755067353.544:15710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.7.7258" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  579.820406][   T33] audit: type=1326 audit(1755067353.544:15711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.7.7258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  579.833012][   T33] audit: type=1326 audit(1755067353.544:15712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23297 comm="syz.7.7258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7782b8ebe9 code=0x7ffc0000
[  580.568726][ T5911] tipc: Node number set to 2130706433
[  581.256965][T23326] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7270'.
[  581.266615][T23328] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.7269'.
[  581.270150][T23328] net_ratelimit: 11 callbacks suppressed
[  581.270160][T23328] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  581.323835][T23332] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7272'.
[  581.725320][T23343] loop7: detected capacity change from 0 to 32768
[  581.731795][T23343] 
[  581.731795][T23343]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.731795][T23343] 
[  581.747173][   T33] audit: type=1800 audit(1755067355.614:15713): pid=23343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7276" name="file1" dev="loop7" ino=4 res=0 errno=0
[  581.757149][T23343] 
[  581.757149][T23343]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.757149][T23343] 
[  581.764070][T23343] 
[  581.764070][T23343]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.764070][T23343] 
[  581.767351][T23343] 
[  581.767351][T23343]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.767351][T23343] 
[  581.773975][T23343] 
[  581.773975][T23343]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.773975][T23343] 
[  581.778188][T23343] 
[  581.778188][T23343]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.778188][T23343] 
[  581.796686][  T116] 
[  581.796686][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.796686][  T116] 
[  581.803303][T21273] 
[  581.803303][T21273]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.803303][T21273] 
[  581.808117][T21273] 
[  581.808117][T21273]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.808117][T21273] 
[  581.823361][  T115] 
[  581.823361][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.823361][  T115] 
[  581.826616][T23343] 
[  581.826616][T23343]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.826616][T23343] 
[  581.830629][T23343] 
[  581.830629][T23343]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.830629][T23343] 
[  581.872137][T18086] 
[  581.872137][T18086]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.872137][T18086] 
[  581.876479][T18086] 
[  581.876479][T18086]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.876479][T18086] 
[  582.078796][T23378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7295'.
[  582.202290][T23385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7298'.
[  582.207676][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7297'.
[  583.198363][T23411] netlink: 'syz.7.7307': attribute type 1 has an invalid length.
[  583.229997][T23411] bond2: entered promiscuous mode
[  583.232963][T23411] 8021q: adding VLAN 0 to HW filter on device bond2
[  583.262139][T23411] 8021q: adding VLAN 0 to HW filter on device bond2
[  583.265414][T23411] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  583.269679][T23411] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  583.284373][T23411] bond2: (slave ip6gre1): making interface the new active one
[  583.287650][T23411] ip6gre1: entered promiscuous mode
[  583.297177][T23411] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  583.538468][T23420] trusted_key: encrypted_key: key user:syz not found
[  583.857735][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7317'.
[  583.893514][T23435] loop7: detected capacity change from 0 to 128
[  583.899749][T23435] EXT4-fs: Ignoring removed nobh option
[  583.912892][T23435] EXT4-fs (loop7): Invalid log block size: 4294967295
[  584.289182][T23449] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  585.247937][T23484] bond3: entered promiscuous mode
[  585.251425][T23484] 8021q: adding VLAN 0 to HW filter on device bond3
[  585.654374][T23511] loop7: detected capacity change from 0 to 8192
[  586.701222][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7363'.
[  586.798674][T23537] loop7: detected capacity change from 0 to 512
[  586.828123][T23537] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.7365: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  586.840235][T23537] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.7365: Bad quota inode: 3, type: 0
[  586.844898][T23537] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  586.852204][T23537] EXT4-fs (loop7): mount failed
[  586.974865][T23548] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7369'.
[  587.241038][T23550] loop7: detected capacity change from 0 to 32768
[  587.278667][T23550] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  587.313794][T18086] (syz-executor,18086,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  587.319717][T18086] ocfs2: Unmounting device (7,7) on (node local)
[  587.334464][    C0] vcan0: j1939_tp_rxtimer: 0xffff888037457800: rx timeout, send abort
[  587.338050][    C0] vcan0: j1939_tp_rxtimer: 0xffff888037455800: rx timeout, send abort
[  587.341000][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888037457800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  587.349157][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888037455800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  588.094377][T23560] loop7: detected capacity change from 0 to 32768
[  588.122780][T23560] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  588.177266][T23560] XFS (loop7): Ending clean mount
[  588.269967][T18086] XFS (loop7): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  589.030232][   T33] audit: type=1326 audit(1755067362.895:15714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23602 comm="syz.8.7391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  589.039596][   T33] audit: type=1326 audit(1755067362.905:15715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23602 comm="syz.8.7391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  589.046443][   T33] audit: type=1326 audit(1755067362.905:15716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23602 comm="syz.8.7391" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  589.079240][   T33] audit: type=1326 audit(1755067362.905:15717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23602 comm="syz.8.7391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  589.103000][   T33] audit: type=1326 audit(1755067362.905:15718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23602 comm="syz.8.7391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e2b8ebe9 code=0x7ffc0000
[  589.140517][T18089] Bluetooth: hci2: unexpected event for opcode 0x2027
[  589.317261][T23627] bond_slave_0: entered promiscuous mode
[  589.319259][T23627] bond_slave_1: entered promiscuous mode
[  589.324349][T23627] macvtap1: entered allmulticast mode
[  589.326219][T23627] bond0: entered allmulticast mode
[  589.327895][T23627] bond_slave_0: entered allmulticast mode
[  589.330489][T23627] bond_slave_1: entered allmulticast mode
[  589.333622][T23627] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  589.337369][T23627] bond0: left allmulticast mode
[  589.338981][T23627] bond_slave_0: left allmulticast mode
[  589.341376][T23627] bond_slave_1: left allmulticast mode
[  589.343292][T23627] bond_slave_0: left promiscuous mode
[  589.345274][T23627] bond_slave_1: left promiscuous mode
[  589.813836][T23633] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  589.834077][T23635] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7406'.
[  589.874507][T23639] loop7: detected capacity change from 0 to 512
[  589.898338][T23639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.909387][T23639] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  589.945026][T18086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.030976][T23647] wg1 speed is unknown, defaulting to 1000
[  590.033817][T23647] lo speed is unknown, defaulting to 1000
[  590.268028][   T33] audit: type=1326 audit(1755067364.135:15719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.7415" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7782b8ebe9 code=0x0
[  590.755892][T23670] bond0: Caught tx_queue_len zero misconfig
[  590.758465][T23670] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7420'.
[  591.279173][T23691] netlink: 'syz.7.7429': attribute type 1 has an invalid length.
[  591.282768][T23691] netlink: 88 bytes leftover after parsing attributes in process `syz.7.7429'.
[  591.468437][T23700] delete_channel: no stack
[  591.715180][T23717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7441'.
[  591.799979][T23721] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7444'.
[  591.843713][T23725] veth1_macvtap: entered promiscuous mode
[  591.848987][T23725] macsec0: entered allmulticast mode
[  591.851554][T23725] veth1_macvtap: entered allmulticast mode
[  591.905681][T23731] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  592.311703][T18089] Bluetooth: hci2: unexpected event for opcode 0x0401
[  593.180874][T23781] /dev/nbd0: Can't lookup blockdev
[  593.579718][T23791] overlayfs: failed to clone upperpath
[  594.373589][T23809] netlink: 'syz.0.7485': attribute type 1 has an invalid length.
[  595.310446][T23846] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7501'.
[  595.935259][T23876] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7513'.
[  595.940233][T23876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  596.161601][T23889] loop7: detected capacity change from 0 to 512
[  596.167455][T23889] EXT4-fs: Ignoring removed oldalloc option
[  596.223394][T23889] EXT4-fs (loop7): 1 truncate cleaned up
[  596.226120][T23889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  596.298799][   T33] audit: type=1800 audit(1755067370.106:15720): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7518" name="file1" dev="loop7" ino=15 res=0 errno=0
[  596.307183][ T5910] wg1 speed is unknown, defaulting to 1000
[  596.342582][T18086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.415719][T23893] loop7: detected capacity change from 0 to 8
[  596.435494][T23893] SQUASHFS error: Unable to read directory block [2c0:35]
[  597.020280][T23904] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7524'.
[  597.141999][T23913] netlink: 'syz.8.7529': attribute type 32 has an invalid length.
[  597.506623][T23927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  597.635271][T23928] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.637974][T23928] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.656548][T23928] team_slave_0: left promiscuous mode
[  597.661577][T23928] team_slave_1: left promiscuous mode
[  597.667787][T23928] batman_adv: batadv0: Interface deactivated: dummy0
[  597.772110][T23928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.785318][T23928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  597.966235][   T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.970157][   T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.976559][   T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.977538][T23946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7542'.
[  597.984304][   T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  598.483524][T23976] wg2: entered promiscuous mode
[  598.485487][T23976] wg2: entered allmulticast mode
[  599.835491][T24027] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7580'.
[  599.841369][T24027] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7580'.
[  599.844290][T24027] tipc: MTU too low for tipc bearer
[  599.971756][T24038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7586'.
[  599.974705][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7586'.
[  599.977675][T24038] netlink: 'syz.7.7586': attribute type 18 has an invalid length.
[  600.824192][T24075] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  601.104820][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7611'.
[  601.184768][T24093] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7613'.
[  601.195562][T24093] 0{X: renamed from macvtap0 (while UP)
[  601.211895][T24093] 0{X: entered allmulticast mode
[  601.214262][T24093] veth0_macvtap: entered allmulticast mode
[  601.217159][T24093] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  603.197822][T24131] loop7: detected capacity change from 0 to 32768
[  603.213129][T24131] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  603.234562][T24131] 
[  603.235401][T24131] ======================================================
[  603.237596][T24131] WARNING: possible circular locking dependency detected
[  603.239742][T24131] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  603.242742][T24131] ------------------------------------------------------
[  603.245250][T24131] syz.7.7629/24131 is trying to acquire lock:
[  603.247130][T24131] ffff88810361dd60 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  603.250693][T24131] 
[  603.250693][T24131] but task is already holding lock:
[  603.252988][T24131] ffff88810361ddf8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  603.256167][T24131] 
[  603.256167][T24131] which lock already depends on the new lock.
[  603.256167][T24131] 
[  603.259333][T24131] 
[  603.259333][T24131] the existing dependency chain (in reverse order) is:
[  603.262141][T24131] 
[  603.262141][T24131] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  603.264607][T24131]        lock_acquire+0x120/0x360
[  603.266178][T24131]        down_read+0x46/0x2e0
[  603.267664][T24131]        ocfs2_init_acl+0x2f9/0x720
[  603.269297][T24131]        ocfs2_mknod+0x1321/0x2050
[  603.270907][T24131]        ocfs2_create+0x1a5/0x440
[  603.272503][T24131]        path_openat+0x14f4/0x3830
[  603.274136][T24131]        do_filp_open+0x1fa/0x410
[  603.275714][T24131]        do_sys_openat2+0x121/0x1c0
[  603.277337][T24131]        __x64_sys_openat+0x138/0x170
[  603.279080][T24131]        do_syscall_64+0xfa/0x3b0
[  603.280645][T24131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.282607][T24131] 
[  603.282607][T24131] -> #2 (jbd2_handle){++++}-{0:0}:
[  603.284905][T24131]        lock_acquire+0x120/0x360
[  603.286490][T24131]        start_this_handle+0x1fa7/0x21c0
[  603.288214][T24131]        jbd2__journal_start+0x2c1/0x5b0
[  603.289975][T24131]        __ext4_journal_start_sb+0x227/0x5c0
[  603.291864][T24131]        ext4_dirty_inode+0x93/0x110
[  603.291903][   T33] audit: type=1800 audit(1755067377.107:15721): pid=24131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7629" name="file1" dev="loop7" ino=17058 res=0 errno=0
[  603.293540][T24131]        __mark_inode_dirty+0x2d1/0xdf0
[  603.303545][T24131]        touch_atime+0x59b/0x6d0
[  603.305095][T24131]        ext4_file_mmap_prepare+0x24d/0x440
[  603.306940][T24131]        mmap_region+0xb41/0x20c0
[  603.308547][T24131]        do_mmap+0xc45/0x10d0
[  603.310026][T24131]        vm_mmap_pgoff+0x2a6/0x4d0
[  603.311642][T24131]        ksys_mmap_pgoff+0x51f/0x760
[  603.313307][T24131]        do_syscall_64+0xfa/0x3b0
[  603.314886][T24131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.316887][T24131] 
[  603.316887][T24131] -> #1 (&mm->mmap_lock){++++}-{4:4}:
[  603.319236][T24131]        lock_acquire+0x120/0x360
[  603.320824][T24131]        __might_fault+0xcc/0x130
[  603.322419][T24131]        _copy_to_user+0x2c/0xb0
[  603.324007][T24131]        fiemap_fill_next_extent+0x1c0/0x390
[  603.325892][T24131]        ocfs2_fiemap+0x9dc/0xc90
[  603.327691][T24131]        do_vfs_ioctl+0x1173/0x1430
[  603.329254][T24131]        __se_sys_ioctl+0x82/0x170
[  603.330851][T24131]        do_syscall_64+0xfa/0x3b0
[  603.332378][T24131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.334370][T24131] 
[  603.334370][T24131] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  603.337084][T24131]        validate_chain+0xb9b/0x2140
[  603.338731][T24131]        __lock_acquire+0xab9/0xd20
[  603.340282][T24131]        lock_acquire+0x120/0x360
[  603.341793][T24131]        down_write+0x96/0x1f0
[  603.343307][T24131]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  603.345249][T24131]        ocfs2_truncate_file+0xda0/0x1420
[  603.346913][T24131]        ocfs2_setattr+0x1520/0x1b40
[  603.348581][T24131]        notify_change+0xb36/0xe40
[  603.350171][T24131]        do_truncate+0x1a4/0x220
[  603.351734][T24131]        path_openat+0x306c/0x3830
[  603.353345][T24131]        do_filp_open+0x1fa/0x410
[  603.354931][T24131]        do_sys_openat2+0x121/0x1c0
[  603.356574][T24131]        __x64_sys_open+0x11e/0x150
[  603.358203][T24131]        do_syscall_64+0xfa/0x3b0
[  603.359782][T24131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.362031][T24131] 
[  603.362031][T24131] other info that might help us debug this:
[  603.362031][T24131] 
[  603.365383][T24131] Chain exists of:
[  603.365383][T24131]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  603.365383][T24131] 
[  603.370686][T24131]  Possible unsafe locking scenario:
[  603.370686][T24131] 
[  603.373007][T24131]        CPU0                    CPU1
[  603.374686][T24131]        ----                    ----
[  603.376406][T24131]   lock(&oi->ip_xattr_sem);
[  603.377938][T24131]                                lock(jbd2_handle);
[  603.379998][T24131]                                lock(&oi->ip_xattr_sem);
[  603.382221][T24131]   lock(&ocfs2_file_ip_alloc_sem_key);
[  603.383921][T24131] 
[  603.383921][T24131]  *** DEADLOCK ***
[  603.383921][T24131] 
[  603.386383][T24131] 3 locks held by syz.7.7629/24131:
[  603.387993][T24131]  #0: ffff888107d2a428 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  603.390817][T24131]  #1: ffff88810361e0c0 (&sb->s_type->i_mutex_key#27){+.+.}-{4:4}, at: do_truncate+0x171/0x220
[  603.393999][T24131]  #2: ffff88810361ddf8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  603.397232][T24131] 
[  603.397232][T24131] stack backtrace:
[  603.399115][T24131] CPU: 1 UID: 0 PID: 24131 Comm: syz.7.7629 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  603.399127][T24131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  603.399135][T24131] Call Trace:
[  603.399141][T24131]  <TASK>
[  603.399147][T24131]  dump_stack_lvl+0x189/0x250
[  603.399162][T24131]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.399171][T24131]  ? __pfx__printk+0x10/0x10
[  603.399183][T24131]  ? print_lock_name+0xde/0x100
[  603.399194][T24131]  print_circular_bug+0x2ee/0x310
[  603.399206][T24131]  check_noncircular+0x134/0x160
[  603.399216][T24131]  validate_chain+0xb9b/0x2140
[  603.399228][T24131]  __lock_acquire+0xab9/0xd20
[  603.399242][T24131]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  603.399250][T24131]  lock_acquire+0x120/0x360
[  603.399261][T24131]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  603.399271][T24131]  down_write+0x96/0x1f0
[  603.399284][T24131]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  603.399291][T24131]  ? __pfx_down_write+0x10/0x10
[  603.399303][T24131]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  603.399312][T24131]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  603.399320][T24131]  ? up_write+0x1c4/0x420
[  603.399329][T24131]  ocfs2_truncate_file+0xda0/0x1420
[  603.399343][T24131]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  603.399353][T24131]  ? do_raw_spin_unlock+0x4d/0x240
[  603.399362][T24131]  ? _raw_spin_unlock+0x28/0x50
[  603.399371][T24131]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  603.399385][T24131]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  603.399395][T24131]  ? ocfs2_rw_lock+0x13a/0x240
[  603.399406][T24131]  ? __pfx___dquot_initialize+0x10/0x10
[  603.399414][T24131]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  603.399424][T24131]  ? setattr_prepare+0x1e7/0xac0
[  603.399456][T24131]  ? inode_newsize_ok+0x11b/0x1c0
[  603.399466][T24131]  ocfs2_setattr+0x1520/0x1b40
[  603.399480][T24131]  ? __pfx_ocfs2_setattr+0x10/0x10
[  603.399489][T24131]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[  603.399501][T24131]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  603.399513][T24131]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[  603.399524][T24131]  ? current_time+0x222/0x370
[  603.399531][T24131]  ? evm_inode_setattr+0x1b6/0x7d0
[  603.399540][T24131]  ? __pfx_current_time+0x10/0x10
[  603.399548][T24131]  ? try_break_deleg+0x79/0x130
[  603.399557][T24131]  ? __pfx_ocfs2_setattr+0x10/0x10
[  603.399566][T24131]  notify_change+0xb36/0xe40
[  603.399578][T24131]  do_truncate+0x1a4/0x220
[  603.399590][T24131]  ? __pfx_do_truncate+0x10/0x10
[  603.399599][T24131]  ? apparmor_file_truncate+0x23e/0x2d0
[  603.399612][T24131]  path_openat+0x306c/0x3830
[  603.399622][T24131]  ? arch_stack_walk+0xfc/0x150
[  603.399635][T24131]  ? stack_depot_save_flags+0x40/0x860
[  603.399648][T24131]  ? __pfx_path_openat+0x10/0x10
[  603.399656][T24131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.399668][T24131]  do_filp_open+0x1fa/0x410
[  603.399680][T24131]  ? __lock_acquire+0xab9/0xd20
[  603.399694][T24131]  ? __pfx_do_filp_open+0x10/0x10
[  603.399707][T24131]  ? _raw_spin_unlock+0x28/0x50
[  603.399717][T24131]  ? alloc_fd+0x64c/0x6c0
[  603.399730][T24131]  do_sys_openat2+0x121/0x1c0
[  603.399740][T24131]  ? __se_sys_futex+0x36f/0x400
[  603.399754][T24131]  ? __pfx_do_sys_openat2+0x10/0x10
[  603.399764][T24131]  ? rcu_is_watching+0x15/0xb0
[  603.399776][T24131]  __x64_sys_open+0x11e/0x150
[  603.399785][T24131]  do_syscall_64+0xfa/0x3b0
[  603.399796][T24131]  ? lockdep_hardirqs_on+0x9c/0x150
[  603.399809][T24131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.399817][T24131]  ? exc_page_fault+0x9f/0xf0
[  603.399829][T24131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.399837][T24131] RIP: 0033:0x7f7782b8ebe9
[  603.399851][T24131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  603.399860][T24131] RSP: 002b:00007f778390f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  603.399869][T24131] RAX: ffffffffffffffda RBX: 00007f7782db5fa0 RCX: 00007f7782b8ebe9
[  603.399878][T24131] RDX: 0000000000000104 RSI: 0000000000084200 RDI: 0000200000000900
[  603.399883][T24131] RBP: 00007f7782c11e19 R08: 0000000000000000 R09: 0000000000000000
[  603.399888][T24131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  603.399893][T24131] R13: 00007f7782db6038 R14: 00007f7782db5fa0 R15: 00007ffda6c36e38
[  603.399902][T24131]  </TASK>
[  603.531294][   T33] audit: type=1804 audit(1755067377.107:15722): pid=24131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7629" name="/newroot/566/file1/file1" dev="loop7" ino=17058 res=1 errno=0
[  603.539800][   T33] audit: type=1800 audit(1755067377.107:15723): pid=24131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7629" name="file1" dev="loop7" ino=17058 res=0 errno=0
[  603.580088][T18086] ocfs2: Unmounting device (7,7) on (node local)

VM DIAGNOSIS:
06:30:08  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820aee51 RBX=1ffff11004814524 RCX=ffff88803728b980 RDX=0000000000000002
RSI=0000000000000000 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffc900065afa30
R8 =ffff888023ff5603 R9 =1ffff110047feac0 R10=dffffc0000000000 R11=ffffed10047feac1
R12=0000000000000014 R13=ffff88803728b980 R14=ffff8880240a2920 R15=ffff8880240a2900
RIP=ffffffff81bfabe7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f02d8d406c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2c60de CR3=0000000048858000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f02d8d3f5a0 00007f02d8d3f580
XMM02=00007f02d8d3f6e0 00007f02d8d3f560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f02d8d3f5a0 XMM05=0000000000000000 00007f02d8d3f6e0
XMM06=00007f02d8d3f6e0 00007f02d8d3f560 XMM07=00007f02d8d3f5a0 00007f02d8d3f580
XMM08=68681b8dffff0000 37fc8d8000000000 XMM09=0000000000000000 00007f02d8012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000276a RDI=000000000000276b RBP=00000000000003f8 RSP=ffffc90006186850
R8 =ffff8881080c0237 R9 =1ffff11021018046 R10=dffffc0000000000 R11=ffffffff854e7320
R12=dffffc0000000000 R13=ffffffff99af18d0 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e739c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f778390f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c33467a CR3=00000000489a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff818927ad ffffffff8189265f
XMM02=00007fe1e2d87498 ffffffff81892854 XMM03=00007fe1e2d874a8 00007fe1e2d874a0
XMM04=00007fe1e38ed100 00007fe1e2d87460 XMM05=00007fe1e2d87478 00007fe1e2d874c0
XMM06=00007fe1e2d874b8 00007fe1e2d874b0 XMM07=00007fe1e2d874a8 00007fe1e2d874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fe1e2c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
