last executing test programs:

2m23.567480166s ago: executing program 32 (id=1057):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20)

2m0.98350319s ago: executing program 33 (id=1271):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x6e22, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0)

1m50.382914692s ago: executing program 4 (id=1415):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x33]}}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0)
fallocate(r0, 0x0, 0x0, 0x1000f4)

1m50.297787986s ago: executing program 4 (id=1416):
syz_usb_connect(0x0, 0x2d2, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008b216740420709204661010203010902c002010000000009047500efd08de70009050201"], 0x0)

1m49.088401955s ago: executing program 4 (id=1433):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00f8ff0000000000180012"], 0x38}}, 0x0)

1m49.08809491s ago: executing program 4 (id=1434):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4iv2e136xNfb+2V5/n/T89s0bz3szOx6PZ+a9F4CJVWm8Li3NFSFcffPV4/984B+zd6Y82pqj1nidbktVQwhFTE9ny3tvqhnfev+lM93iIiw2XlM6PHmz9d7tIYRL4UC4Fmph79Xrr7y9+MTJyyeuHHzntaM31mftAQBgsnzr2tGlPX/7875dH7x+37GwpTU9nZ/XYnpHPO8/Fk/80/l/JXSmi7bQbiabbzqGSjbfVJf52supZvNN9yh/JltutZW/r2O+LSXlT7VN67beMM7SflwLRWW+I12pzM83f5OHxu/6mWL+wrnzz1wcUkWBNffv+0MIB4RBQ71e/3FjA45AXdY/3KgPvw7CeoT6zmEfgQCa8vuFd7mUX1lYndbSpvsr/+Zjle7vhzWw0fu/8ser/F9fjuWf+uu61oPJsFm/v9J6pc/RjpjO7yPkzy8N+vlPy5uKL9PZ8sv0uo8wLvcXetVzaoPrsVK96p/vF5vV12OctsM3svz2z0/+Px2X/zHQ3X8m7Pr/gRGow6YO1RGog9B3qA/7AASMrOXn5prqUcrPn+vL87eU5G8tyZ8tyd9Wkr+9JB8m2e+f/2l4uVj+nZ//ph/0eli6zvaRGH90wPrk1yMHLT9/7ndQqy0/f54YRtkbp586+5WnT11vPv9ftPb/23F/PxDTtfjZuhZnSNcL8+vqrWf/a53lVHrMd09Wn3TcqGxJ89ebJe7unK/Yvbyc0Hacuasec53v29lrvv2d89Wy+WZj2JrVNz8/2Za9L51/pONq2l7T2fpWs/WYyeqRjiu7YpzXA1Yi7Y+9nv9P++dcqBbPnDt/9pGYTvvpn6aqW+5MP9S+0N9sTN2B1em3/c9c6Gz/s6M1vVppPy7sXJ5etB8Xatn0xWaydZs8TT8c0+l77jtTs43p82e+d/7ptV55mHAXX3jxu6fPnz/7A3+kP2ZtFn/4Y9hHJmC9LTz/3PcXLr7w4sPnnjv97Nlnz144fOTI4cXFI189vLTQOK9faD+7BzaT5S/9YdcEAAAAAAAAAAAA6NcPTxy//pe3vvxus/3/cvu/1P4/Pfmb2v//JGv/n7eTT+3gUzvAXV3yG+PuvdFZj5lsvmoMH8vquzsrZ0/2vo/HuDWOX2z/n9rb5/26pvrcm03P++9N82XdCdzVX8pM1gdJPl7gp2J8Jca/CjBExWz3yTHu6N863N2/ddrXU/8U+qUYT+n/lvaG1I9Jav/dq1+ndPzftQF1ZO1tRHPCYa8j0N2/Rr7/77Yz8aHXZQKC7TxRoV43igcwGoY9/me67pniC3/85tY7Ic1287HO42XefymsxqiPP6n8URj/s1izSrTGv+vr+Neld/WOfp77H13hvz+/8W5bsWFvv8ffy9mqp36gd5eX2e6DWH5a/wdDf+XXf5mVn98Q6tP/svK39Vn+Xeu/f2Xl/z+WnzbbQ5/ut/xmjYtKZz3y68bp/l9+3Ti5la1/6ttz4PVf4UCNt2P5MMl6jzPb7wi2o2ko4/92uT+6UvlzGF+K6XQgTM855N/Ig9Y/PV+Rvgf2ZMsvSr7fxmWc4l4mffzfr8W47POQxv9N+2OtS7rSlq522bbjvq/AZvPeyN//G7NwaQTqIIxomB2BOnSGer2+vhe0Sgy1cIa+/Yd993nY5Q97+5fJx//Nz+Hz8X8r2Q+IfPzf/P35+L95fj6+Xp6fj/+bb898/N88/95sufkV7LmS/E+U5O8tyd+3nD/bLX9/yfs/WZJ/MMRzkh7595W8//6S/HtK8qdK8j9Tkv/ZkvwHSvIfKsn/XEn+Zpfao0zq+sMky9vn+fzD5Ej3f3p9/neX5APj62evH3r81O++XWu2/59p/V5L9/GOxXQ1/nb+UUzn971DW/pO3lsx/fcsf9Svd8AkyfvPyL/fHyzJB8ZXes7L5xsmUNG9x55++63qdZ7PePl8jL8Q4y/G+OEYz8d4IcaHYry4QfVjfTz+2z8cfblY/r2/M8vv93nyvD1Q3k/U4T7rk18fGPR59rwfv0GttvwVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmkrjdWlprgjh6puvHn/q5LmFO1Mebc1Ra7xOt6WqrfeF8EiMp2L8i/jHrfdfOtMe345xERZDEYrW9PDkzVZJ20MIl8KBcC3Uwt6r1195e/GJk5dPXDn4zmtHb6zfFgAAAIDN78MAAAD//+bcHCE=")
r0 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0)
ftruncate(r1, 0x2008000)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x1000200201005)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ftruncate(r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_pidfd_open(0x0, 0x0)

1m48.120238004s ago: executing program 4 (id=1439):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

1m47.308480646s ago: executing program 4 (id=1446):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4}, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffe7}, 0x6d)

1m47.176078733s ago: executing program 34 (id=1446):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4}, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffe7}, 0x6d)

1m36.702417857s ago: executing program 5 (id=1521):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x21, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x4)

1m36.607471795s ago: executing program 5 (id=1522):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES32=r0], 0x1c}}, 0x0)

1m36.487201347s ago: executing program 5 (id=1523):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000440)={[{@uid}, {@nointegrity}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@noquota}, {}, {@nointegrity}, {@uid}, {@discard_size={'discard', 0x3d, 0x2}}]}, 0x1, 0x6255, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
getdents64(r0, 0x0, 0x22)

1m35.785079213s ago: executing program 5 (id=1526):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}])

1m34.249657223s ago: executing program 5 (id=1535):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

1m33.923515239s ago: executing program 5 (id=1540):
syz_usb_connect$uac1(0x5, 0x9d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x80, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x50}, [@extension_unit={0x8, 0x24, 0x8, 0x13, 0xff, 0xfa, "b0"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd, "82ab09"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x81, 0x4, 0xc, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7c, 0x9, {0x7, 0x25, 0x1, 0x82, 0x8, 0xdcad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x972, 0x7, 0x2}, @as_header={0x7, 0x24, 0x1, 0x4, 0x12, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8e, 0x8e, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})

1m33.921519107s ago: executing program 2 (id=1541):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0)

1m33.599830003s ago: executing program 35 (id=1540):
syz_usb_connect$uac1(0x5, 0x9d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x80, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x50}, [@extension_unit={0x8, 0x24, 0x8, 0x13, 0xff, 0xfa, "b0"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd, "82ab09"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x81, 0x4, 0xc, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7c, 0x9, {0x7, 0x25, 0x1, 0x82, 0x8, 0xdcad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x972, 0x7, 0x2}, @as_header={0x7, 0x24, 0x1, 0x4, 0x12, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8e, 0x8e, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})

1m33.537225171s ago: executing program 2 (id=1545):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x6, 0xd}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

1m33.416135593s ago: executing program 2 (id=1546):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0xffffffd9}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800)

1m32.929816663s ago: executing program 2 (id=1547):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000e40)={[{@block_validity}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000d80)='./bus\x00', 0xa37e, 0x186)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0)
ftruncate(r0, 0x2008000)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r2 = open(&(0x7f0000000b40)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000200201005)

1m32.377383404s ago: executing program 2 (id=1550):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
eventfd(0x4)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)

1m32.135248311s ago: executing program 6 (id=1543):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)

1m31.894966769s ago: executing program 36 (id=1543):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)

1m30.333336225s ago: executing program 2 (id=1555):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00', <r1=>0x0})
sendto(r0, &(0x7f0000000680)="ca", 0x1, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x8, r1}, 0x80)

1m30.167564947s ago: executing program 37 (id=1555):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00', <r1=>0x0})
sendto(r0, &(0x7f0000000680)="ca", 0x1, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x8, r1}, 0x80)

1m27.811460241s ago: executing program 8 (id=1565):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4448}}, 0x40048c4)

1m27.747020234s ago: executing program 8 (id=1566):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000540)={0x0, 0x3f, 0x4})

1m27.686051701s ago: executing program 8 (id=1567):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1m27.625495616s ago: executing program 8 (id=1568):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@nouid32}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

1m27.513942036s ago: executing program 8 (id=1569):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x70, 0x32, 0x37, 0x0, 0x32, 0x36, 0x32, 0x36, 0x2d, 0x37]}}, {@nodatacow}], [{@dont_hash}, {@subj_type={'subj_type', 0x3d, 'autodefrag'}}, {@hash}, {@context={'context', 0x3d, 'system_u'}}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xa2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r0, &(0x7f0000000040)=""/61, 0x3d)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1m25.99681365s ago: executing program 8 (id=1581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m25.855662299s ago: executing program 38 (id=1581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m13.27579718s ago: executing program 0 (id=1711):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r1, 0xc11, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7}, {0x10, 0x1}, {0x34, 0x7}, {}], "3829b70b8285f0c2"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

1m13.27555528s ago: executing program 0 (id=1712):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x10092d2, 0x4)

1m13.226405172s ago: executing program 0 (id=1713):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x88}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)

1m13.12678161s ago: executing program 0 (id=1715):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$eJzsmL9rFEEUx78zu7feiog2KWwsDBjR7GX3UNIcGkGwEiHxV6WHWUPMJieXFUxANNjYaGchpLHwH7BIkcrCzn9A0EIFwcIrLGxsRmZndm9yc3HDcla+TzF8Z9+befPezbziQBDEf8vXL78+Pzs/PXcKwAGMY5/+/t0BGFOaG/6fXt4/+aJ1YfPNx9fvVg4+3B7cTy4RYueH+l/iuwDezjhIi0jF6t9SjOvJHHihr4DjhNbXwBBofQscV7WOwXBD67uG7kj/ILizmMTB7U4yL8WUHEI5RHJoDp6vt8Ewr+dCCMEM++ra+lI7SeKuIVxtG2KqJIpgS2NW/Wrw0JvhaBnnk1W8/vTJhpzntZky6heCI9RJNMEwq79PYzOvjSqJkf8Rt7+/Y+U/JFumLwNQlmRdidbPkRTLFIcnqy2fkOmcs02HUOUY2Lmqhr5JVnK0KVtXJxNu+V08q3/QCrEuDWYhHg1/AM99AP8oU1NUyiIXY73t97bpmxJ81/ssWHkItvf7U9/rmfOHWL1iPmReI/8tgA9bqn+IVwzHjf7kGv2jkS7fa6yurU8uLrcX4oV4JYqaZxjw+HTUyBqRGq2+1+/Pftaf9hv713bx9biHB+007YZq9JgHH2najbJ5ZDyb2a3Oj5t6WYqLAI6piWxpXrGjY8VgnvLhma9UE7YTQRAEQRAEQRAEQRAEQRBEJY6CZf+ClhBdzrz/BAAA//9oglvV")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000040)='./file2\x00', 0x141042, 0xc0)

1m12.963318303s ago: executing program 0 (id=1717):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0/../file0\x00'}, 0x6e)

1m12.634015454s ago: executing program 0 (id=1718):
syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m12.37154571s ago: executing program 39 (id=1718):
syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94)

27.162689065s ago: executing program 7 (id=2098):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="fb6bba8839", 0x5}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1})
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x7, 0x5, 0xfc000000})
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)

27.082658977s ago: executing program 7 (id=2099):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023893)
shutdown(r0, 0x2)
recvmmsg(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1, &(0x7f0000003780)=""/4078, 0xfee}, 0x404}], 0x1, 0x0, 0x0)

27.012418108s ago: executing program 7 (id=2101):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./mnt\x00', 0x88, &(0x7f0000000080)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x5bf01be}}, {@bh}, {@errors_remount}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x8001, 0x4, 0xd92, 0x0, 0x2401})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffa1, 0x2007bb})

26.750793446s ago: executing program 7 (id=2102):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

26.642893423s ago: executing program 7 (id=2103):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)

26.351894882s ago: executing program 7 (id=2104):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="2f00000000000000000043d8e00000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x2, 0x69f, &(0x7f00000015c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x584b1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(r2, 0xffffffffffffffff, 0x2)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

26.083248901s ago: executing program 40 (id=2104):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="2f00000000000000000043d8e00000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x2, 0x69f, &(0x7f00000015c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x584b1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(r2, 0xffffffffffffffff, 0x2)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

3.196308921s ago: executing program 1 (id=2309):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@bsdgroups}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@prjquota}, {@noload}, {@block_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

3.000981821s ago: executing program 1 (id=2313):
syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000040)='./file0\x00', 0x1000808, &(0x7f0000000700), 0x1, 0x665, &(0x7f0000000dc0)="$eJzs3d9uE9kZAPDPLFGjVEJVW1GEWHYWWgkkNtjOEhTtlTsZJ7Nre6wZZwVXK7SEFSLsVrCVCnfcbFupfYi97UO0T7TqI1B57LABkjj8KY7Q72fBOfF8c843jjVfJvHMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQjXS92Ww1opcPtm4kB0vXy6J/yPLd8f7zXHPIvBGN8b9YXIwzk6fO/PbnxafH/12Ic5OvzsXiuFmMx788/avPfnPyxO76hyT0Tjx89PjerZ2d7QfzTmRONrJBXhV5v7ORJXlVJGurq82rm90q6ea9rLpZjbJ+kpZZZ1SUyaX0ctJaW1tJsuWbxdZgY73Ty3afvP5Ju9lcTT5fHmadsioGVz9frtLNvNfLBxt1zHjxOOb6+I34RT5KRlmnnyR37u5sr8xKchzUOkpQe1ZQu9lut1rtdmv12tq1683myZeeaL4gXoqY/5uW+XrLe3B4fSem9T96kccgtuJGJPs+0liPMoroH7B8arf+/+Fqdui8e+v/bpU/8/Pis1HX//OTr84fVP8PyOXdPR7Go3gc9+JW7MRObMeDuWf0bh8bkcUg8qiiiDz60amfSabPJLEWq7EazfgqNqMbVSTRjTx6kUUVN6OKUWT1OyqNMrLoxCiKKCOJS5HG5UiiFWuxFiuRRBbLcTOK2IpBbMR6dOpR7sTd+nVfOSTHZ0GtowS1DwlS/3lzb38nDq/p6W79BwAAAN5bjfq37+Pj/4X4sO51817WnHdaAAAAwFtU/+X/3LhZGPc+jIbjfwAAAHjfNOpz7BoRsRQfTXq7Z0L5JQAAAAC8J+q//58fN0vj3kfRcPwPAAAA75u/zbzGfjX8RePf/42yXGg8Gd74feN+ZxzXuf/BZL0PXhxx1D3beDpVj7V6cjpkmp1rTK9++ewimD9Nmzuz8mi8kMCzEfZN4NR07ecTiH/Ex5OYj29P2tu7SyazLHXzXracFr3PWtHpnDoxym6M/vzt3b9Evfl/H/RPNeLO3Z3t5a+/27ld5/JkPMqT+9MLKL50HcVDcvm+vt5Cfc7Fvlu8UJ+IMZ13aTJvc+834MRk9ROvMOcPcWESc2Fp0i49v/2L4zlbywdt/TSL1htu+Q9xcRJz8dLFSbNPFu1ZWbT3ZvFar8URsliZlcXKG2YBMC93ZlShxsuF/zX2cq9c3Q//8eLAPfqlScyls/WO9eTZffbozVl79OYbVrd/xeVJzOXd4INq7Hjef75QVX8cr/DjgfNWvXZj/BJ+8P39P8Xph48ef3L3/q1vtr/Z/rbdXlltftpsXmvHQr0Z00btAWAfs++xMzOi8emMo+pfP/tIwXJ8Hd/FTtyOK/XZBvUnDvYddWnPxxCuzDhqXdpzh5crM47qlvbc6OXosSvv4DsBAO/OhRl1+Cj1/8qM4+7na/nhR8d7azkA8P+RlT81YvGvjbLMh1+11tZandFmlpRF+kVS5usbWZIPRlmZbnYGG1kyLItRkRa9cefLfD2rkmprOCzKUdItymRYVPmN+s7vyfTW71XW7wxGeVoNe1mnypK0GIw66ShZz6s0GW79sZdXm1lZr1wNszTv5mlnlBeDpCq2yjRbTpIqy/YE5uvZYJR383F3kAzLvN8pbyZfFr2tfpasZ1Va5sNRMRlwd6580C3Kfj3s8rxfbAA4Jh4+enzv1s7O9oMjdH73KsF7OvPeRgDgeao0AAAAAAAAAAAAAAAcf695Sp/OETsLcSzS0DkGnafHI40jdua9ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAl/0vAAD//zMiXVk=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x0)
getdents64(r0, &(0x7f0000000180)=""/105, 0x69)
lseek(r0, 0x40000003, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

2.310040093s ago: executing program 3 (id=2318):
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)

1.92108261s ago: executing program 1 (id=2322):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x400000009)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x1018084, &(0x7f000000cfc0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f696e6c696e655f646174612c6261636b67726f756e645f67633d6f6e2c6661756c745f747970653d30303030303030303030303030303030303030362c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6e6f696e6c696e655f78617474722c6a71666d743d7666736f6c642c6e6f61636c2c00a1a75ac439087a5b11ab7891dd39dd9bc0d7"], 0x1, 0x5509, &(0x7f00000079c0)="$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")
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$getown(0xffffffffffffffff, 0x9)
shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
prlimit64(0x0, 0x7, 0x0, &(0x7f0000000100))
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)

1.001296352s ago: executing program 3 (id=2329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

909.797388ms ago: executing program 9 (id=2330):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x3, 0x11ad, 0x0, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x800000100, 0x4, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]})

757.958481ms ago: executing program 3 (id=2331):
msgget(0x1, 0x213)
msgget(0x1, 0x171)

757.719667ms ago: executing program 9 (id=2332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0)

600.316643ms ago: executing program 3 (id=2333):
r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0xb54, &(0x7f0000000080)={0x0, 0x28ba1, 0x1000, 0x3, 0x1ad})
ptrace(0x10, r0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0})

511.235801ms ago: executing program 9 (id=2334):
clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0)

393.797354ms ago: executing program 3 (id=2335):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)

255.583321ms ago: executing program 9 (id=2336):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c7465"], 0xc4}}, 0x0)

244.521163ms ago: executing program 1 (id=2337):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1)

139.687406ms ago: executing program 9 (id=2338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

139.467133ms ago: executing program 1 (id=2339):
rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020)

77.917258ms ago: executing program 3 (id=2340):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
fchown(r0, 0x0, 0x0)

236.919µs ago: executing program 1 (id=2341):
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100004a2401000001020c"], 0x0)

0s ago: executing program 9 (id=2342):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904"], 0x0)

kernel console output (not intermixed with test programs):

T10163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.226789][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.236500][T10163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.242636][ T5885] Bluetooth: hci1: command tx timeout
[  237.269018][T10163] hsr_slave_0: entered promiscuous mode
[  237.271335][T10163] hsr_slave_1: entered promiscuous mode
[  237.273444][T10163] debugfs: 'hsr0' already exists in 'hsr'
[  237.275521][T10163] Cannot create hsr debugfs directory
[  237.372358][   T13] bridge_slave_1: left allmulticast mode
[  237.374287][   T13] bridge_slave_1: left promiscuous mode
[  237.376262][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.379942][T10168] netlink: 'syz.7.1585': attribute type 4 has an invalid length.
[  237.384259][   T13] bridge_slave_0: left allmulticast mode
[  237.386383][   T13] bridge_slave_0: left promiscuous mode
[  237.390130][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.431671][T10179] netlink: 'syz.7.1585': attribute type 4 has an invalid length.
[  237.703915][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.712170][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.716318][   T13] bond0 (unregistering): Released all slaves
[  237.761280][ T7121] usb 8-1: USB disconnect, device number 3
[  237.935653][T10163] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  237.943494][T10163] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  237.949054][T10163] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  237.953861][T10163] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  238.001690][   T13] hsr_slave_0: left promiscuous mode
[  238.003782][   T13] hsr_slave_1: left promiscuous mode
[  238.005753][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.008526][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.011826][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.014549][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.027540][   T13] veth1_macvtap: left promiscuous mode
[  238.030013][   T13] veth0_macvtap: left promiscuous mode
[  238.031846][   T13] veth1_vlan: left promiscuous mode
[  238.033937][   T13] veth0_vlan: left promiscuous mode
[  238.529954][   T13] team0 (unregistering): Port device team_slave_1 removed
[  238.568285][   T13] team0 (unregistering): Port device team_slave_0 removed
[  238.683470][ T5885] Bluetooth: hci2: command tx timeout
[  239.017778][T10163] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.072560][T10163] 8021q: adding VLAN 0 to HW filter on device team0
[  239.089603][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.092479][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.130713][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.133514][ T4683] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.318063][ T5885] Bluetooth: hci1: command tx timeout
[  239.774225][T10163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.278895][   T24] Process accounting resumed
[  240.324226][T10163] veth0_vlan: entered promiscuous mode
[  240.371234][T10163] veth1_vlan: entered promiscuous mode
[  240.409945][T10163] veth0_macvtap: entered promiscuous mode
[  240.415402][T10163] veth1_macvtap: entered promiscuous mode
[  240.436531][T10163] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.450125][T10163] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.548252][ T5892] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.551540][ T5892] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.554308][ T5892] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.557076][ T5892] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.783873][ T5885] Bluetooth: hci2: command tx timeout
[  240.828744][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.833212][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.871647][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.874049][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.893545][T10225] loop7: detected capacity change from 0 to 1764
[  240.975271][T10229] netlink: 65051 bytes leftover after parsing attributes in process `syz.7.1599'.
[  241.115054][T10236] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1602'.
[  241.572656][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1605'.
[  242.171709][T10256] loop7: detected capacity change from 0 to 32768
[  242.175840][T10264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.181321][T10256] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1611 (10256)
[  242.205172][T10256] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.214234][T10256] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  242.218430][T10256] BTRFS info (device loop7): using free-space-tree
[  242.325195][T10256] BTRFS info (device loop7): rebuilding free space tree
[  242.340392][T10256] BTRFS info (device loop7): checking UUID tree
[  242.444349][T10288] netlink: 176 bytes leftover after parsing attributes in process `syz.9.1617'.
[  242.483321][   T33] audit: type=1804 audit(1755547366.214:58): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1611" name="/newroot/29/bus/bus" dev="loop7" ino=263 res=1 errno=0
[  242.604281][T10292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1618'.
[  242.895728][ T5885] Bluetooth: hci2: command tx timeout
[  243.175667][T10043] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.497593][T10314] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1628'.
[  243.661240][ T1271] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  243.701320][T10327] IPv6: NLM_F_CREATE should be specified when creating new route
[  243.748616][T10331] loop7: detected capacity change from 0 to 1024
[  243.776738][T10331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.808449][ T1271] usb 10-1: Using ep0 maxpacket: 32
[  243.817819][ T1271] usb 10-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  243.821646][ T1271] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.835295][ T1271] usb 10-1: Product: syz
[  243.837075][ T1271] usb 10-1: Manufacturer: syz
[  243.844036][ T1271] usb 10-1: SerialNumber: syz
[  244.172044][ T1271] usb 10-1: palm_os_4_probe - error -110 getting connection info
[  244.184752][ T1271] visor 10-1:1.0: Handspring Visor / Palm OS converter detected
[  244.304683][ T1271] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  244.310060][ T1271] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  244.316333][ T1271] usb 10-1: USB disconnect, device number 2
[  244.321102][ T1271] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  244.327539][ T1271] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  244.330990][ T1271] visor 10-1:1.0: device disconnected
[  244.918900][ T5885] Bluetooth: hci2: command tx timeout
[  245.089877][T10369] loop7: detected capacity change from 0 to 512
[  245.092666][T10369] EXT4-fs: Ignoring removed nobh option
[  245.104023][T10369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  245.113429][T10368] geneve2: entered promiscuous mode
[  245.117274][T10368] geneve2: entered allmulticast mode
[  245.125026][T10369] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1652: iget: bad i_size value: 38620345925642
[  245.139978][T10369] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1652: couldn't read orphan inode 15 (err -117)
[  245.146106][T10369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.170804][ T1089] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u9:5: bg 0: block 5: invalid block bitmap
[  245.179130][ T1089] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  245.183217][ T1089] EXT4-fs (loop7): This should not happen!! Data will be lost
[  245.183217][ T1089] 
[  245.186990][ T1089] EXT4-fs (loop7): Total free blocks count 0
[  245.195381][ T1089] EXT4-fs (loop7): Free/Dirty block details
[  245.197644][ T1089] EXT4-fs (loop7): free_blocks=0
[  245.201503][ T1089] EXT4-fs (loop7): dirty_blocks=64
[  245.204363][ T1089] EXT4-fs (loop7): Block reservation details
[  245.206475][ T1089] EXT4-fs (loop7): i_reserved_data_blocks=64
[  245.214956][T10043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.362236][T10387] nftables ruleset with unbound set
[  245.412797][T10393] loop7: detected capacity change from 0 to 512
[  245.420091][T10391] loop9: detected capacity change from 0 to 1764
[  245.422246][T10393] EXT4-fs (loop7): #blocks per group too big: 65535
[  245.629484][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1667'.
[  245.632525][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1667'.
[  245.693824][T10405] batman_adv: batadv0: Adding interface: gretap1
[  245.696374][T10405] batman_adv: batadv0: Interface activated: gretap1
[  245.900477][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1675'.
[  246.076195][T10429] loop7: detected capacity change from 0 to 256
[  246.081070][T10429] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  246.370143][T10444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.383118][T10444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.663666][T10448] loop9: detected capacity change from 0 to 1024
[  246.667778][T10448] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  246.694021][T10448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.240133][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.243160][    C1] bridge0: topology change detected, propagating
[  247.249265][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.252128][    C1] bridge0: topology change detected, propagating
[  247.338263][   T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  247.491630][   T24] usb 8-1: config 0 has an invalid interface number: 48 but max is 0
[  247.497978][   T24] usb 8-1: config 0 has no interface number 0
[  247.500506][   T24] usb 8-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  247.504819][   T24] usb 8-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  247.511312][   T24] usb 8-1: config 0 interface 48 has no altsetting 0
[  247.519476][   T24] usb 8-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  247.523017][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.526094][   T24] usb 8-1: Product: syz
[  247.527747][   T24] usb 8-1: Manufacturer: syz
[  247.531721][   T24] usb 8-1: SerialNumber: syz
[  247.532988][T10163] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.541943][   T24] usb 8-1: config 0 descriptor??
[  247.642401][T10460] loop9: detected capacity change from 0 to 2048
[  247.671213][T10461] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  247.772848][   T24] usb 8-1: USB disconnect, device number 4
[  247.878402][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.161103][T10479] loop9: detected capacity change from 0 to 4096
[  248.375873][T10486] loop7: detected capacity change from 0 to 1024
[  248.382816][T10486] EXT4-fs: Ignoring removed nomblk_io_submit option
[  248.421049][T10486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  248.653387][T10486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.692043][T10043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.910536][T10496] loop7: detected capacity change from 0 to 40427
[  248.916041][T10496] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  248.918767][T10496] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  248.958620][T10496] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  248.962422][T10496] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  248.964586][T10496] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  249.061973][T10509] syz.7.1709: attempt to access beyond end of device
[  249.061973][T10509] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  249.067812][T10509] syz.7.1709: attempt to access beyond end of device
[  249.067812][T10509] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  249.084554][T10511] loop0: detected capacity change from 0 to 16
[  249.099361][T10511] erofs (device loop0): mounted with root inode @ nid 36.
[  249.129765][T10511] overlayfs: failed to get redirect (-117)
[  249.163746][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8881149ac800: rx timeout, send abort
[  249.498011][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1716'.
[  249.668604][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8881149ac800: abort rx timeout. Force session deactivation
[  249.676108][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.830307][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.999488][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.220949][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.354069][T10522] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1721'.
[  250.423845][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.428448][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.431456][T10526] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  250.439826][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.445611][T10526] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  250.452546][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.458699][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.507497][T10528] cifs: Bad value for 'port'
[  250.735459][   T12] bridge_slave_1: left allmulticast mode
[  250.737771][   T12] bridge_slave_1: left promiscuous mode
[  250.977134][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.986016][   T12] bridge_slave_0: left allmulticast mode
[  250.989275][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.777468][T10535] loop7: detected capacity change from 0 to 40427
[  251.789940][T10535] F2FS-fs (loop7): build fault injection rate: 690
[  251.816060][T10535] F2FS-fs (loop7): invalid crc value
[  251.903214][T10535] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  251.911734][T10535] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  251.985017][T10043] syz-executor: attempt to access beyond end of device
[  251.985017][T10043] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  251.990744][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  251.990768][T10043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.990779][T10043] Call Trace:
[  251.990785][T10043]  <TASK>
[  251.990791][T10043]  dump_stack_lvl+0x189/0x250
[  251.990818][T10043]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.990835][T10043]  ? __pfx_queue_work_on+0x10/0x10
[  251.990880][T10043]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  251.990899][T10043]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  251.990927][T10043]  f2fs_handle_critical_error+0x37c/0x540
[  251.990953][T10043]  f2fs_write_end_io+0x886/0xb60
[  251.990980][T10043]  __submit_merged_bio+0x27a/0x6a0
[  251.991005][T10043]  __submit_merged_write_cond+0x255/0x530
[  251.991028][T10043]  f2fs_write_data_pages+0x261d/0x3000
[  251.991078][T10043]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  251.991137][T10043]  ? __mod_zone_page_state+0xd7/0x140
[  251.991163][T10043]  ? folios_put_refs+0x560/0x640
[  251.991188][T10043]  ? __pfx_folios_put_refs+0x10/0x10
[  251.991201][T10043]  ? rcu_is_watching+0x15/0xb0
[  251.991220][T10043]  ? __lock_acquire+0xab9/0xd20
[  251.991251][T10043]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  251.991279][T10043]  do_writepages+0x32e/0x550
[  251.991308][T10043]  ? do_raw_spin_unlock+0x4d/0x240
[  251.991329][T10043]  filemap_fdatawrite+0x199/0x240
[  251.991350][T10043]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  251.991412][T10043]  ? do_raw_spin_unlock+0x4d/0x240
[  251.991432][T10043]  f2fs_sync_dirty_inodes+0x31f/0x830
[  251.991461][T10043]  f2fs_write_checkpoint+0x95a/0x1df0
[  251.991498][T10043]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  251.991551][T10043]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  251.991565][T10043]  ? kfree+0x18e/0x440
[  251.991584][T10043]  ? kill_f2fs_super+0x298/0x6c0
[  251.991604][T10043]  kill_f2fs_super+0x2c3/0x6c0
[  251.991624][T10043]  ? __pfx_kill_f2fs_super+0x10/0x10
[  251.991635][T10043]  ? radix_tree_delete_item+0x2b6/0x400
[  251.991662][T10043]  ? shrinker_free+0x2ce/0x3e0
[  251.991681][T10043]  deactivate_locked_super+0xbc/0x130
[  251.991701][T10043]  cleanup_mnt+0x425/0x4c0
[  251.991717][T10043]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.991739][T10043]  task_work_run+0x1d4/0x260
[  251.991762][T10043]  ? __pfx_task_work_run+0x10/0x10
[  251.991777][T10043]  ? __x64_sys_umount+0x122/0x160
[  251.991801][T10043]  ? exit_to_user_mode_loop+0x40/0x110
[  251.991825][T10043]  exit_to_user_mode_loop+0xec/0x110
[  251.991845][T10043]  do_syscall_64+0x2bd/0x3b0
[  251.991893][T10043]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.991911][T10043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.991925][T10043]  ? exc_page_fault+0x9f/0xf0
[  251.991945][T10043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.991959][T10043] RIP: 0033:0x7f4448b8ff17
[  251.991973][T10043] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  251.991985][T10043] RSP: 002b:00007ffccda63638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  251.992002][T10043] RAX: 0000000000000000 RBX: 00007f4448c11c05 RCX: 00007f4448b8ff17
[  251.992012][T10043] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccda636f0
[  251.992020][T10043] RBP: 00007ffccda636f0 R08: 0000000000000000 R09: 0000000000000000
[  251.992028][T10043] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccda64780
[  251.992038][T10043] R13: 00007f4448c11c05 R14: 000000000003d79c R15: 00007ffccda647c0
[  251.992064][T10043]  </TASK>
[  251.992071][T10043] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  252.543785][   T55] Bluetooth: hci0: command tx timeout
[  252.763596][T10550] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1730'.
[  252.865731][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.868954][   T12] bond_slave_0: left promiscuous mode
[  252.872883][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.876553][   T12] bond_slave_1: left promiscuous mode
[  252.879625][   T12] bond0 (unregistering): Released all slaves
[  252.977734][T10555] loop7: detected capacity change from 0 to 512
[  253.002016][T10555] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  253.018604][T10555] EXT4-fs (loop7): orphan cleanup on readonly fs
[  253.028277][T10555] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1731: iget: bad i_size value: 360287970189639680
[  253.051111][T10555] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1731: couldn't read orphan inode 15 (err -117)
[  253.071876][T10555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  253.109332][T10555] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.281953][T10523] chnl_net:caif_netlink_parms(): no params data found
[  253.400105][T10564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  253.554080][   T12] hsr_slave_0: left promiscuous mode
[  253.570475][   T12] hsr_slave_1: left promiscuous mode
[  253.573453][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.576401][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.583509][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.586505][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.615663][   T12] veth1_macvtap: left promiscuous mode
[  253.621281][   T12] veth0_macvtap: left promiscuous mode
[  253.624786][   T12] veth1_vlan: left promiscuous mode
[  253.626881][   T12] veth0_vlan: left promiscuous mode
[  253.702035][T10575] loop9: detected capacity change from 0 to 32768
[  253.786522][T10575] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  253.786540][T10575]   allowing incompatible features above 0.0: (unknown version)
[  253.786546][T10575]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  253.800718][T10575] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  253.803696][T10575] bcachefs (loop9): initializing new filesystem
[  253.813843][T10575] bcachefs (loop9): going read-write
[  253.821254][T10575] bcachefs (loop9): marking superblocks
[  253.827186][T10575] bcachefs (loop9): initializing freespace
[  253.831398][T10575] bcachefs (loop9): done initializing freespace
[  253.834579][T10575] bcachefs (loop9): reading snapshots table
[  253.836625][T10575] bcachefs (loop9): reading snapshots done
[  253.871383][T10575] bcachefs (loop9): done starting filesystem
[  253.941005][T10575] bcachefs (loop9): going read-only
[  253.943045][T10575] bcachefs (loop9): finished waiting for writes to stop
[  253.945891][   T12] pim6reg (unregistering): left allmulticast mode
[  253.949378][T10575] bcachefs (loop9): flushing journal and stopping allocators, journal seq 2
[  253.989001][T10575] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 2
[  253.993292][T10575] bcachefs (loop9): clean shutdown complete, journal seq 3
[  253.995967][T10575] bcachefs (loop9): marking filesystem clean
[  254.034975][T10163] bcachefs (loop9): shutting down
[  254.107680][T10163] bcachefs (loop9): shutdown complete
[  254.171912][T10589] loop7: detected capacity change from 0 to 32768
[  254.224836][T10589] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  254.303814][T10043] ocfs2: Unmounting device (7,7) on (node local)
[  254.587024][   T12] team0 (unregistering): Port device team_slave_1 removed
[  254.598234][   T55] Bluetooth: hci0: command tx timeout
[  254.624108][   T12] team0 (unregistering): Port device team_slave_0 removed
[  254.872268][   T12] batadv0 (unregistering): left allmulticast mode
[  255.052057][T10523] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.054897][T10523] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.057374][T10523] bridge_slave_0: entered allmulticast mode
[  255.060381][T10523] bridge_slave_0: entered promiscuous mode
[  255.064083][T10523] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.067011][T10523] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.072292][T10523] bridge_slave_1: entered allmulticast mode
[  255.075553][T10523] bridge_slave_1: entered promiscuous mode
[  255.111307][T10523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.116083][T10523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.204747][T10523] team0: Port device team_slave_0 added
[  255.209659][T10523] team0: Port device team_slave_1 added
[  255.230556][T10523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.232771][T10523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.242145][T10523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.248171][T10523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.250589][T10523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.263404][T10523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.337025][T10523] hsr_slave_0: entered promiscuous mode
[  255.340443][T10523] hsr_slave_1: entered promiscuous mode
[  255.342745][T10523] debugfs: 'hsr0' already exists in 'hsr'
[  255.344722][T10523] Cannot create hsr debugfs directory
[  255.422083][T10599] loop7: detected capacity change from 0 to 128
[  255.479415][   T12] IPVS: stop unused estimator thread 0...
[  255.562774][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.606196][T10607] loop9: detected capacity change from 0 to 256
[  255.924275][T10609] loop7: detected capacity change from 0 to 32768
[  255.933181][T10609] 
[  255.933181][T10609]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  255.933181][T10609] 
[  255.993677][T10043] 
[  255.993677][T10043]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  255.993677][T10043] 
[  255.999871][T10043] 
[  255.999871][T10043]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  255.999871][T10043] 
[  256.325088][T10632] loop9: detected capacity change from 0 to 2048
[  256.344884][T10633] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  256.352070][T10523] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  256.377283][   T33] audit: type=1800 audit(1755547380.114:59): pid=10632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1759" name="file1" dev="loop9" ino=15 res=0 errno=0
[  256.395096][T10523] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  256.405447][T10523] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  256.415310][T10523] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  256.447442][T10635] loop9: detected capacity change from 0 to 164
[  256.464708][T10635] Unable to read rock-ridge attributes
[  256.472045][T10635] Unable to read rock-ridge attributes
[  256.475466][T10626] loop7: detected capacity change from 0 to 40427
[  256.497839][T10626] F2FS-fs (loop7): invalid crc value
[  256.597500][T10626] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  256.601449][T10626] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  256.605173][T10523] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.624943][T10523] 8021q: adding VLAN 0 to HW filter on device team0
[  256.627101][   T33] audit: type=1804 audit(1755547380.364:60): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1754" name="/newroot/81/file0/bus" dev="loop7" ino=10 res=1 errno=0
[  256.640065][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.642339][ T6970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.655912][T10043] syz-executor: attempt to access beyond end of device
[  256.655912][T10043] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  256.663239][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  256.663252][T10043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.663258][T10043] Call Trace:
[  256.663262][T10043]  <TASK>
[  256.663266][T10043]  dump_stack_lvl+0x189/0x250
[  256.663284][T10043]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.663292][T10043]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  256.663305][T10043]  ? __pfx_queue_work_on+0x10/0x10
[  256.663314][T10043]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  256.663323][T10043]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  256.663339][T10043]  f2fs_handle_critical_error+0x37c/0x540
[  256.663355][T10043]  f2fs_write_end_io+0x886/0xb60
[  256.663373][T10043]  __submit_merged_bio+0x27a/0x6a0
[  256.663387][T10043]  __submit_merged_write_cond+0x255/0x530
[  256.663402][T10043]  f2fs_write_data_pages+0x261d/0x3000
[  256.663431][T10043]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  256.663471][T10043]  ? folios_put_refs+0x559/0x640
[  256.663488][T10043]  ? __pfx_folios_put_refs+0x10/0x10
[  256.663496][T10043]  ? rcu_is_watching+0x15/0xb0
[  256.663518][T10043]  ? __lock_acquire+0xab9/0xd20
[  256.663575][T10043]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  256.663595][T10043]  do_writepages+0x32e/0x550
[  256.663625][T10043]  ? do_raw_spin_unlock+0x4d/0x240
[  256.663646][T10043]  filemap_fdatawrite+0x199/0x240
[  256.663666][T10043]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  256.663723][T10043]  ? do_raw_spin_unlock+0x4d/0x240
[  256.663738][T10043]  f2fs_sync_dirty_inodes+0x31f/0x830
[  256.663755][T10043]  f2fs_write_checkpoint+0x95a/0x1df0
[  256.663776][T10043]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  256.663808][T10043]  ? kill_f2fs_super+0x298/0x6c0
[  256.663820][T10043]  kill_f2fs_super+0x2c3/0x6c0
[  256.663831][T10043]  ? __pfx_kill_f2fs_super+0x10/0x10
[  256.663843][T10043]  ? radix_tree_delete_item+0x2b6/0x400
[  256.663859][T10043]  ? shrinker_free+0x2ce/0x3e0
[  256.663871][T10043]  deactivate_locked_super+0xbc/0x130
[  256.663884][T10043]  cleanup_mnt+0x425/0x4c0
[  256.663894][T10043]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.663906][T10043]  task_work_run+0x1d4/0x260
[  256.663920][T10043]  ? __pfx_task_work_run+0x10/0x10
[  256.663929][T10043]  ? __x64_sys_umount+0x122/0x160
[  256.663942][T10043]  ? exit_to_user_mode_loop+0x40/0x110
[  256.663956][T10043]  exit_to_user_mode_loop+0xec/0x110
[  256.663967][T10043]  do_syscall_64+0x2bd/0x3b0
[  256.663979][T10043]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.663988][T10043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.663996][T10043]  ? exc_page_fault+0x9f/0xf0
[  256.664006][T10043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.664014][T10043] RIP: 0033:0x7f4448b8ff17
[  256.664023][T10043] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  256.664030][T10043] RSP: 002b:00007ffccda63638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  256.664039][T10043] RAX: 0000000000000000 RBX: 00007f4448c11c05 RCX: 00007f4448b8ff17
[  256.664045][T10043] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccda636f0
[  256.664050][T10043] RBP: 00007ffccda636f0 R08: 0000000000000000 R09: 0000000000000000
[  256.664055][T10043] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccda64780
[  256.664060][T10043] R13: 00007f4448c11c05 R14: 000000000003e9f8 R15: 00007ffccda647c0
[  256.664075][T10043]  </TASK>
[  256.664079][T10043] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  256.664175][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.669271][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  256.669284][T10043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.669290][T10043] Call Trace:
[  256.669293][T10043]  <TASK>
[  256.669297][T10043]  dump_stack_lvl+0x189/0x250
[  256.669312][T10043]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.669321][T10043]  ? __pfx_queue_work_on+0x10/0x10
[  256.669329][T10043]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  256.669339][T10043]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  256.669355][T10043]  f2fs_handle_critical_error+0x37c/0x540
[  256.669369][T10043]  f2fs_write_end_io+0x886/0xb60
[  256.669386][T10043]  __submit_merged_bio+0x27a/0x6a0
[  256.669400][T10043]  __submit_merged_write_cond+0x255/0x530
[  256.669414][T10043]  f2fs_write_data_pages+0x261d/0x3000
[  256.669444][T10043]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  256.669484][T10043]  ? folios_put_refs+0x559/0x640
[  256.669498][T10043]  ? __pfx_folios_put_refs+0x10/0x10
[  256.669506][T10043]  ? rcu_is_watching+0x15/0xb0
[  256.669519][T10043]  ? __lock_acquire+0xab9/0xd20
[  256.669575][T10043]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  256.669594][T10043]  do_writepages+0x32e/0x550
[  256.669621][T10043]  ? do_raw_spin_unlock+0x4d/0x240
[  256.669640][T10043]  filemap_fdatawrite+0x199/0x240
[  256.669659][T10043]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  256.669714][T10043]  ? do_raw_spin_unlock+0x4d/0x240
[  256.669727][T10043]  f2fs_sync_dirty_inodes+0x31f/0x830
[  256.669744][T10043]  f2fs_write_checkpoint+0x95a/0x1df0
[  256.669764][T10043]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  256.669797][T10043]  ? kill_f2fs_super+0x298/0x6c0
[  256.669807][T10043]  kill_f2fs_super+0x2c3/0x6c0
[  256.669818][T10043]  ? __pfx_kill_f2fs_super+0x10/0x10
[  256.669825][T10043]  ? radix_tree_delete_item+0x2b6/0x400
[  256.669845][T10043]  ? shrinker_free+0x2ce/0x3e0
[  256.669855][T10043]  deactivate_locked_super+0xbc/0x130
[  256.669866][T10043]  cleanup_mnt+0x425/0x4c0
[  256.669875][T10043]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.669887][T10043]  task_work_run+0x1d4/0x260
[  256.669900][T10043]  ? __pfx_task_work_run+0x10/0x10
[  256.669908][T10043]  ? __x64_sys_umount+0x122/0x160
[  256.669921][T10043]  ? exit_to_user_mode_loop+0x40/0x110
[  256.669934][T10043]  exit_to_user_mode_loop+0xec/0x110
[  256.669945][T10043]  do_syscall_64+0x2bd/0x3b0
[  256.669955][T10043]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.669964][T10043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.669972][T10043]  ? exc_page_fault+0x9f/0xf0
[  256.669983][T10043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.669990][T10043] RIP: 0033:0x7f4448b8ff17
[  256.669999][T10043] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  256.670006][T10043] RSP: 002b:00007ffccda63638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  256.670015][T10043] RAX: 0000000000000000 RBX: 00007f4448c11c05 RCX: 00007f4448b8ff17
[  256.670020][T10043] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccda636f0
[  256.670025][T10043] RBP: 00007ffccda636f0 R08: 0000000000000000 R09: 0000000000000000
[  256.670030][T10043] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccda64780
[  256.670035][T10043] R13: 00007f4448c11c05 R14: 000000000003e9f8 R15: 00007ffccda647c0
[  256.670049][T10043]  </TASK>
[  256.670053][T10043] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  256.672482][ T6970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.912402][   T55] Bluetooth: hci0: command tx timeout
[  257.073651][T10654] loop7: detected capacity change from 0 to 512
[  257.076529][T10654] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  257.091268][T10654] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1762: invalid indirect mapped block 4294967295 (level 0)
[  257.105017][T10654] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1762: invalid indirect mapped block 4294967295 (level 1)
[  257.126266][T10523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.129612][T10654] EXT4-fs (loop7): 1 orphan inode deleted
[  257.131577][T10654] EXT4-fs (loop7): 1 truncate cleaned up
[  257.139909][T10654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.155252][T10654] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  257.178314][T10523] veth0_vlan: entered promiscuous mode
[  257.193886][T10043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.207557][T10523] veth1_vlan: entered promiscuous mode
[  257.224211][T10658] loop7: detected capacity change from 0 to 1024
[  257.302612][T10523] veth0_macvtap: entered promiscuous mode
[  257.315698][T10523] veth1_macvtap: entered promiscuous mode
[  257.357177][T10523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.389870][T10523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.402020][ T5909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.407801][ T5909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.411666][ T5909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.414431][ T5909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.478802][T10666] loop7: detected capacity change from 0 to 32768
[  257.498763][T10666] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  257.755158][ T6974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.762862][ T6974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.920062][ T6974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.925056][ T6974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.101217][T10672] loop9: detected capacity change from 0 to 512
[  258.165788][T10676] loop1: detected capacity change from 0 to 512
[  258.166630][T10672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.172953][T10672] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.180932][T10676] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  258.204893][T10676] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  258.240780][T10676] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1719: corrupted in-inode xattr: e_value size too large
[  258.287703][T10676] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1719: couldn't read orphan inode 15 (err -117)
[  258.309877][   T33] audit: type=1800 audit(1755547382.044:61): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1768" name="file1" dev="loop9" ino=15 res=0 errno=0
[  258.334358][T10676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.436626][T10523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.520082][T10163] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.561791][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'.
[  258.770798][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1770'.
[  258.798442][T10685] netlink: 'syz.1.1772': attribute type 12 has an invalid length.
[  258.918525][   T55] Bluetooth: hci0: command tx timeout
[  259.319636][ T5916] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  259.488683][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  259.498004][ T5916] usb 2-1: config 252 has an invalid interface number: 104 but max is 0
[  259.501199][ T5916] usb 2-1: config 252 has no interface number 0
[  259.504372][ T5916] usb 2-1: config 252 interface 104 has no altsetting 0
[  259.511827][ T5916] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= b.c7
[  259.515523][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.519152][ T5916] usb 2-1: Product: syz
[  259.520853][ T5916] usb 2-1: Manufacturer: syz
[  259.522524][ T5916] usb 2-1: SerialNumber: syz
[  259.532894][ T5916] gspca_main: spca501-2.14.0 probing 0497:c001
[  259.561487][T10043] ocfs2: Unmounting device (7,7) on (node local)
[  259.745524][ T5916] gspca_spca501: reg write: error -71
[  259.755352][ T5916] spca501 2-1:252.104: Reg write failed for 0x02,0x07,0x05
[  259.762650][ T5916] spca501 2-1:252.104: probe with driver spca501 failed with error -22
[  259.770212][ T5916] usb 2-1: USB disconnect, device number 7
[  259.931063][T10700] loop7: detected capacity change from 0 to 32768
[  259.966261][T10700] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.019939][T10700] XFS (loop7): Ending clean mount
[  260.030156][T10700] XFS (loop7): Quotacheck needed: Please wait.
[  260.070731][T10700] XFS (loop7): Quotacheck: Done.
[  260.109197][T10043] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.191666][T10702] loop9: detected capacity change from 0 to 32768
[  260.195543][T10702] bcachefs (/dev/loop9): error validating superblock: Invalid option invalid compression opt 240
[  260.204539][T10702] bcachefs: bch2_fs_get_tree() error: invalid_sb_opt_compression
[  260.442135][T10718] loop7: detected capacity change from 0 to 256
[  260.555308][T10716] netlink: 'syz.1.1782': attribute type 10 has an invalid length.
[  260.571668][T10716] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  260.679486][T10725] loop7: detected capacity change from 0 to 8192
[  260.733074][T10733] loop1: detected capacity change from 0 to 256
[  260.792020][T10733] FAT-fs (loop1): Directory bread(block 64) failed
[  260.794656][T10733] FAT-fs (loop1): Directory bread(block 65) failed
[  260.797045][T10733] FAT-fs (loop1): Directory bread(block 66) failed
[  260.804683][T10733] FAT-fs (loop1): Directory bread(block 67) failed
[  260.807578][T10733] FAT-fs (loop1): Directory bread(block 68) failed
[  260.813211][T10733] FAT-fs (loop1): Directory bread(block 69) failed
[  260.817489][T10733] FAT-fs (loop1): Directory bread(block 70) failed
[  260.824388][T10733] FAT-fs (loop1): Directory bread(block 71) failed
[  260.826644][T10733] FAT-fs (loop1): Directory bread(block 72) failed
[  260.840980][T10733] FAT-fs (loop1): Directory bread(block 73) failed
[  260.899055][T10739] veth1_vlan: entered allmulticast mode
[  260.905531][T10739] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  260.975818][T10744] loop9: detected capacity change from 0 to 2048
[  260.990031][T10744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.152351][T10751] loop1: detected capacity change from 0 to 1024
[  261.166913][T10751] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  261.183662][T10751] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  261.187683][T10751] EXT4-fs (loop1): orphan cleanup on readonly fs
[  261.192535][T10751] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1800: Freeing blocks not in datazone - block = 0, count = 4096
[  261.210245][T10751] EXT4-fs (loop1): 1 orphan inode deleted
[  261.215757][T10751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  261.240549][T10523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.299257][T10761] loop9: detected capacity change from 0 to 2048
[  261.304473][T10761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.377012][   T33] audit: type=1800 audit(1755547385.074:62): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1803" name="file1" dev="loop9" ino=1367 res=0 errno=0
[  261.380380][T10166] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  261.396184][   T33] audit: type=1800 audit(1755547385.134:63): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1803" name="file1" dev="loop9" ino=1367 res=0 errno=0
[  261.899595][T10166] usb 8-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  261.912012][T10166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.921843][T10166] usb 8-1: Product: syz
[  261.925798][T10166] usb 8-1: Manufacturer: syz
[  261.933700][T10166] usb 8-1: SerialNumber: syz
[  261.946085][T10166] usb 8-1: config 0 descriptor??
[  261.981737][T10166] gm12u320 8-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  261.985377][T10166] gm12u320 8-1:0.0: probe with driver gm12u320 failed with error -5
[  261.998567][T10166] usb-storage 8-1:0.0: USB Mass Storage device detected
[  262.010573][T10166] usb-storage 8-1:0.0: device ignored
[  262.213132][T10166] usb 8-1: USB disconnect, device number 5
[  262.390080][T10784] loop9: detected capacity change from 0 to 4096
[  262.415287][T10784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.442218][T10163] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.628361][ T5944] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  264.706968][T10827] loop1: detected capacity change from 0 to 2048
[  264.726021][T10827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  264.802110][ T5944] usb 10-1: Using ep0 maxpacket: 16
[  264.813237][ T5944] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.832442][ T5944] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.849228][ T5944] usb 10-1: config 0 interface 0 has no altsetting 0
[  264.858759][ T5944] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  264.873376][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.952527][T10831] loop1: detected capacity change from 0 to 256
[  264.979496][ T5944] usb 10-1: config 0 descriptor??
[  265.158503][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.254996][T10836] /dev/nullb0: Can't open blockdev
[  265.457536][ T5944] hid (null): unknown global tag 0xe
[  265.674483][ T5916] usb 10-1: USB disconnect, device number 3
[  265.976397][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1834'.
[  267.286607][T10862] 8021q: adding VLAN 0 to HW filter on device bond1
[  267.527538][   T33] audit: type=1800 audit(1755547391.264:64): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1850" name="/" dev="9p" ino=2 res=0 errno=0
[  267.588759][T10884] loop7: detected capacity change from 0 to 512
[  267.619891][T10884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.632627][T10884] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  268.090277][T10043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.613196][T10905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1858'.
[  268.616613][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1858'.
[  268.792136][T10911] Bluetooth: MGMT ver 1.23
[  269.111963][T10920] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  269.336297][T10930] wg1 speed is unknown, defaulting to 1000
[  269.341934][T10930] wg1 speed is unknown, defaulting to 1000
[  269.346861][T10930] wg1 speed is unknown, defaulting to 1000
[  269.362368][T10930] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  269.377723][T10930] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  269.409479][T10930] wg1 speed is unknown, defaulting to 1000
[  269.414526][T10930] wg1 speed is unknown, defaulting to 1000
[  269.418641][T10930] wg1 speed is unknown, defaulting to 1000
[  269.422192][T10930] wg1 speed is unknown, defaulting to 1000
[  269.489892][T10932] geneve2: entered promiscuous mode
[  269.492232][T10932] geneve2: entered allmulticast mode
[  269.721389][T10945] loop9: detected capacity change from 0 to 1024
[  269.724794][T10945] EXT4-fs: Ignoring removed bh option
[  269.754484][T10945] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  269.771957][   T33] audit: type=1800 audit(1755547393.514:65): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1873" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  269.800320][T10945] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.987212][T10163] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.052227][T10956] loop9: detected capacity change from 0 to 512
[  270.056712][T10956] EXT4-fs: Ignoring removed bh option
[  270.065877][T10956] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  270.076839][T10956] EXT4-fs (loop9): 1 truncate cleaned up
[  270.084336][T10956] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.019750][T10163] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.287119][T10977] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  271.302772][T10975] erspan1: entered allmulticast mode
[  271.519409][T10971] loop9: detected capacity change from 0 to 32768
[  271.523471][T10971] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1882 (10971)
[  271.581456][T10971] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  271.588210][T10971] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  271.599012][T10971] BTRFS info (device loop9): using free-space-tree
[  272.091290][T11001] netlink: 'syz.1.1890': attribute type 10 has an invalid length.
[  272.310021][   T12] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared)
[  272.482221][T10163] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.615148][T11010] loop7: detected capacity change from 0 to 512
[  272.634230][T11010] EXT4-fs: Ignoring removed orlov option
[  272.733533][T11010] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  272.792530][T11010] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1894: corrupted in-inode xattr: e_value size too large
[  272.816394][T11010] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1894: couldn't read orphan inode 15 (err -117)
[  272.845511][T11010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.988567][T10043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.223245][T11016] loop7: detected capacity change from 0 to 1764
[  273.800519][T11025] loop9: detected capacity change from 0 to 128
[  273.817839][T11025] EXT4-fs warning (device loop9): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  273.825618][T11025] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  273.858086][ T5944] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  274.145784][ T5944] usb 8-1: Using ep0 maxpacket: 32
[  274.155098][ T5944] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.168081][ T5944] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  274.171242][ T5944] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.174411][ T5944] usb 8-1: Product: syz
[  274.176206][ T5944] usb 8-1: Manufacturer: syz
[  274.178535][ T5944] usb 8-1: SerialNumber: syz
[  274.194071][ T5944] usb 8-1: config 0 descriptor??
[  274.307564][   T33] audit: type=1326 audit(1755547397.994:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.362943][   T33] audit: type=1326 audit(1755547397.994:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.404003][ T5944] usb 8-1: bad CDC descriptors
[  274.406440][   T33] audit: type=1326 audit(1755547397.994:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.422042][ T5944] usb 8-1: unsupported MDLM descriptors
[  274.433632][   T33] audit: type=1326 audit(1755547398.004:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.472211][   T33] audit: type=1326 audit(1755547398.004:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.605979][   T33] audit: type=1326 audit(1755547398.004:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.608388][ T5916] usb 8-1: USB disconnect, device number 6
[  274.614615][   T33] audit: type=1326 audit(1755547398.004:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.650423][   T33] audit: type=1326 audit(1755547398.004:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.662557][   T33] audit: type=1326 audit(1755547398.014:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  274.671518][   T33] audit: type=1326 audit(1755547398.014:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.9.1899" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25d878ebe9 code=0x7ffc0000
[  275.013217][T11041] loop9: detected capacity change from 0 to 512
[  275.023551][T11041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  275.069972][T11041] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.074804][T11041] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.230517][T10163] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.851404][T11058] loop1: detected capacity change from 0 to 512
[  275.901650][T11058] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  275.942867][T11058] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  275.946013][T11058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[  275.969639][T11058] System zones: 0-1, 15-15, 18-18, 34-34
[  275.971856][T11058] EXT4-fs (loop1): orphan cleanup on readonly fs
[  275.974414][T11058] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  275.982628][T11058] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  276.000030][T11058] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1911: bg 0: block 40: padding at end of block bitmap is not set
[  276.005820][T11058] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  276.012433][T11058] EXT4-fs (loop1): 1 truncate cleaned up
[  276.015950][T11058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  276.027614][T11058] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.1911: bad symlink.
[  276.036684][T11058] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.1911: bad symlink.
[  276.065523][T10523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.113793][T11063] loop1: detected capacity change from 0 to 256
[  276.126878][T11063] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  276.244484][T11065] loop1: detected capacity change from 0 to 512
[  276.258926][T11065] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1913: corrupted in-inode xattr: overlapping e_value 
[  276.265532][T11065] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1913: couldn't read orphan inode 15 (err -117)
[  276.283385][T11065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.341859][T10523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.945108][T11072] loop7: detected capacity change from 0 to 32768
[  277.014994][T11076] loop1: detected capacity change from 0 to 32768
[  277.027454][T11076] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1918 (11076)
[  277.079357][T11076] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  277.083718][T11076] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  277.087368][T11076] BTRFS info (device loop1): disk space caching is enabled
[  277.113607][T11076] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  277.193551][T11080] loop9: detected capacity change from 0 to 32768
[  277.235689][T11076] BTRFS info (device loop1): rebuilding free space tree
[  277.261309][T11080] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  277.264894][T11076] BTRFS info (device loop1): disabling free space tree
[  277.271274][T11076] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  277.280613][T11076] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  277.324636][T11076] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same
[  277.330768][T11080] XFS (loop9): Ending clean mount
[  277.431428][T10523] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  277.477629][T10163] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.640962][T11134] loop9: detected capacity change from 0 to 32768
[  278.643934][T11134] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1933 (11134)
[  278.650089][T11134] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  278.653296][T11134] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm
[  278.656082][T11134] BTRFS info (device loop9): using free-space-tree
[  278.658504][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  278.702423][T11134] BTRFS info (device loop9): rebuilding free space tree
[  278.731118][T11134] BTRFS info (device loop9): balance: start -susage=34359738372,drange=7..526332,limit=4294967292..6
[  278.734402][T11134] BTRFS info (device loop9): balance: ended with status: 0
[  278.759442][T10163] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  278.808258][    T9] usb 8-1: Using ep0 maxpacket: 32
[  278.819319][    T9] usb 8-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  278.823065][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.848239][    T9] usb 8-1: Product: syz
[  278.849926][    T9] usb 8-1: Manufacturer: syz
[  278.852003][    T9] usb 8-1: SerialNumber: syz
[  279.122408][    T9] visor 8-1:1.0: Handspring Visor / Palm OS converter detected
[  279.149226][    T9] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  279.172686][    T9] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  279.352653][    T9] usb 8-1: USB disconnect, device number 7
[  279.358134][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  279.385931][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  279.399771][    T9] visor 8-1:1.0: device disconnected
[  279.629257][T11173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1943'.
[  280.424726][T11192] netlink: 'syz.7.1951': attribute type 8 has an invalid length.
[  280.667165][T11200] syzkaller1: entered promiscuous mode
[  280.678136][T11200] syzkaller1: entered allmulticast mode
[  280.692438][T11196] loop7: detected capacity change from 0 to 32768
[  280.708703][T11196] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1953 (11196)
[  280.736184][T11196] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.740366][T11196] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  280.745382][T11196] BTRFS info (device loop7): disk space caching is enabled
[  280.747841][T11196] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  280.856145][T11196] BTRFS info (device loop7): rebuilding free space tree
[  280.898718][T11196] BTRFS info (device loop7): disabling free space tree
[  280.901466][T11196] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  280.907152][T11196] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  281.126354][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'.
[  281.492225][T10043] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.444116][T11254] loop1: detected capacity change from 0 to 4096
[  282.614148][T11259] loop9: detected capacity change from 0 to 128
[  282.943372][T11263] loop7: detected capacity change from 0 to 2048
[  282.964103][ T5889] udevd[5889]: incorrect nilfs2 checksum on /dev/loop7
[  282.967708][T11263] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  282.981306][ T5889] udevd[5889]: incorrect nilfs2 checksum on /dev/loop7
[  282.990408][T11266] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.095193][T11268] random: crng reseeded on system resumption
[  283.168685][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1979'.
[  283.184263][T11265] loop9: detected capacity change from 0 to 32768
[  283.206567][T11265] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1977 (11265)
[  283.346019][T11265] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  283.364668][T11265] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  283.367645][T11265] BTRFS info (device loop9): using free-space-tree
[  283.596032][   T33] kauditd_printk_skb: 8 callbacks suppressed
[  283.596050][   T33] audit: type=1804 audit(1755547407.334:83): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1977" name="/newroot/150/file0/file1" dev="loop9" ino=260 res=1 errno=0
[  283.666941][   T33] audit: type=1804 audit(1755547407.404:84): pid=11265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1977" name="/newroot/150/file0/file1" dev="loop9" ino=260 res=1 errno=0
[  283.880773][T10163] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  283.925611][T11315] loop7: detected capacity change from 0 to 128
[  284.505067][T11332] loop7: detected capacity change from 0 to 32768
[  284.512325][T11332] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1998 (11332)
[  284.527371][T11332] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  284.531827][T11332] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  284.535232][T11332] BTRFS info (device loop7): using free-space-tree
[  284.700788][T11350] loop1: detected capacity change from 0 to 8192
[  285.039204][T11332] btrfs: Deprecated parameter 'usebackuproot'
[  285.041642][T11332] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  285.045577][T11332] btrfs: Deprecated parameter 'usebackuproot'
[  285.048741][T11332] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  285.052794][T11332] BTRFS info (device loop7 state M): disabling tree log
[  285.055493][T11332] BTRFS info (device loop7 state M): turning on sync discard
[  285.058436][T11332] BTRFS info (device loop7 state M): force clearing of disk cache
[  285.061406][T11332] BTRFS info (device loop7 state M): trying to use backup root at mount time
[  285.064809][T11332] BTRFS info (device loop7 state M): not using ssd optimizations
[  285.115147][T10043] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  285.609691][ T7121] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  285.662727][T11373] loop9: detected capacity change from 0 to 4096
[  285.800028][ T7121] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.804026][ T7121] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  285.807576][ T7121] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  285.832726][ T7121] usb 8-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  285.836380][ T7121] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.840179][ T7121] usb 8-1: Product: syz
[  285.841926][ T7121] usb 8-1: Manufacturer: syz
[  285.843821][ T7121] usb 8-1: SerialNumber: syz
[  285.855470][ T7121] usb 8-1: config 0 descriptor??
[  285.875727][T11385] loop1: detected capacity change from 0 to 128
[  286.023096][T11389] loop1: detected capacity change from 0 to 1024
[  286.026611][T11389] EXT4-fs: Ignoring removed orlov option
[  286.031904][T11389] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  286.067557][ T7121] usb 8-1: Found UVC 34.00 device syz (8086:0b5b)
[  286.072554][ T7121] usb 8-1: No valid video chain found.
[  286.076896][T11389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.080412][ T7121] usb 8-1: USB disconnect, device number 8
[  286.903755][T10523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.320709][T11410] loop1: detected capacity change from 0 to 32768
[  287.329585][T11410] bcachefs: bch2_fs_parse_param() Error parsing option fix_errors: option_value
[  287.396922][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2028'.
[  287.405591][T11416] netlink: 'syz.9.2028': attribute type 14 has an invalid length.
[  287.426112][   T12] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.426158][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2028'.
[  287.436575][   T12] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.446698][T11418] netlink: 'syz.1.2027': attribute type 12 has an invalid length.
[  287.448179][T11416] netlink: 'syz.9.2028': attribute type 14 has an invalid length.
[  287.463498][   T12] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.467102][   T12] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.633134][T11420] loop9: detected capacity change from 0 to 32768
[  287.653138][T11420] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  287.672048][T11420] ieee802154 phy0 wpan0: encryption failed: -22
[  287.675646][   T33] audit: type=1804 audit(1755547411.414:85): pid=11420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2030" name="/newroot/168/file1/cgroup.controllers" dev="loop9" ino=17058 res=1 errno=0
[  287.740972][T10163] ocfs2: Unmounting device (7,9) on (node local)
[  287.859577][T11428] loop1: detected capacity change from 0 to 2048
[  287.863768][T11414] loop7: detected capacity change from 0 to 32768
[  287.870082][T11428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.930619][T11414] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  287.951506][T11414] XFS (loop7): Ending clean mount
[  287.960827][T11414] XFS (loop7): Quotacheck needed: Please wait.
[  287.983211][T10339] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1807 dinode
[  287.998067][T10339] XFS (loop7): Unmount and run xfs_repair
[  288.000001][T10339] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  288.002317][T10339] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  288.005025][T10339] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  288.018031][T10339] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  288.021145][T10339] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00  4.Xh....|.......
[  288.023859][T10339] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01  ................
[  288.026569][T10339] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5  .............6..
[  288.048648][T10339] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06  ......Ty........
[  288.051523][T10339] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  288.085186][T11414] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  288.265843][T10043] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  288.361327][T10043] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair.
[  288.530814][T11430] loop9: detected capacity change from 0 to 32768
[  288.621165][T11430] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  288.723457][T11430] XFS (loop9): Ending clean mount
[  288.735800][T11430] XFS (loop9): Quotacheck needed: Please wait.
[  288.774192][T11430] XFS (loop9): Quotacheck: Done.
[  288.911234][T11430] XFS (loop9): User initiated shutdown received.
[  288.914434][T11430] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  288.919982][T11430] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[  288.954728][T10163] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  289.018516][ T7121] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  289.102890][T11455] loop7: detected capacity change from 0 to 32768
[  289.168427][T11455] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  289.183234][ T7121] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  289.186586][ T7121] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  289.201830][ T7121] usb 2-1: config 220 has no interface number 2
[  289.204521][ T7121] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  289.209800][T11455] XFS (loop7): Ending clean mount
[  289.231857][T11455] XFS (loop7): Quotacheck needed: Please wait.
[  289.235477][ T7121] usb 2-1: config 220 interface 0 has no altsetting 0
[  289.239707][ T7121] usb 2-1: config 220 interface 76 has no altsetting 0
[  289.246883][ T7121] usb 2-1: config 220 interface 1 has no altsetting 0
[  289.266345][ T7121] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  289.277080][ T7121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.301948][ T7121] usb 2-1: Product: syz
[  289.304691][ T7121] usb 2-1: Manufacturer: syz
[  289.306636][ T7121] usb 2-1: SerialNumber: syz
[  289.314010][T11455] XFS (loop7): Quotacheck: Done.
[  289.417371][T10043] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  289.426391][T11466] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.432407][T11466] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.664265][T11466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.730488][T11466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.800710][T11466] veth1_vlan: left allmulticast mode
[  289.901158][T11466] batman_adv: batadv0: Interface deactivated: gretap1
[  289.912027][   T12] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.915679][   T12] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.927646][   T12] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.931086][   T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.934975][   T12] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.937781][   T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.944653][   T12] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.951334][   T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.008196][ T5944] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  290.013388][T11472] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  290.158125][ T5944] usb 8-1: Using ep0 maxpacket: 16
[  290.162874][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.172554][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.176552][ T5944] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  290.183928][ T5944] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  290.189801][ T5944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.196280][ T5944] usb 8-1: config 0 descriptor??
[  290.617528][ T5944] microsoft 0003:045E:07DA.0007: item 0 4 0 8 parsing failed
[  290.628800][ T5944] microsoft 0003:045E:07DA.0007: parse failed
[  290.631314][ T5944] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22
[  290.821465][   T24] usb 8-1: USB disconnect, device number 9
[  291.110006][ T7121] usb 2-1: selecting invalid altsetting 0
[  291.112989][ T7121] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  291.115617][ T7121] usb 2-1: No valid video chain found.
[  291.162427][ T7121] usb 2-1: selecting invalid altsetting 0
[  291.164751][ T7121] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  291.186536][ T7121] usb 2-1: USB disconnect, device number 8
[  291.202218][T11494] ieee802154 phy0 wpan0: encryption failed: -22
[  291.270471][T11496] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  291.331281][T11502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2054'.
[  291.696896][T11512] loop7: detected capacity change from 0 to 4096
[  291.726074][T11512] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  291.733755][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2058'.
[  291.910877][T11517] bridge_slave_1: left allmulticast mode
[  291.943279][T11517] bridge_slave_1: left promiscuous mode
[  291.966319][T11517] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.059547][T11517] bridge_slave_0: left allmulticast mode
[  292.061858][T11517] bridge_slave_0: left promiscuous mode
[  292.069103][T11517] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.177530][T11512] ntfs3(loop7): ino=1a, mi_enum_attr
[  292.184688][T11512] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  292.212785][T11512] ntfs3(loop7): ino=1a, mi_enum_attr
[  292.220047][T11512] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  292.313184][T11512] ntfs3(loop7): ino=5, "/" ntfs_readdir
[  292.525984][T11531] C: renamed from team_slave_0 (while UP)
[  292.534433][T11531] netlink: 'syz.7.2067': attribute type 2 has an invalid length.
[  292.537573][T11531] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2067'.
[  292.547318][T11531] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  292.882973][ T5916] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  292.894164][    T9] IPVS: starting estimator thread 0...
[  292.921528][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2072'.
[  292.988182][T11542] IPVS: using max 63 ests per chain, 151200 per kthread
[  293.048664][ T5916] usb 10-1: Using ep0 maxpacket: 16
[  293.056491][ T5916] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  293.059852][ T5916] usb 10-1: config 0 has no interface number 0
[  293.062357][ T5916] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  293.066814][ T5916] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024
[  293.081089][ T5916] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  293.084780][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  293.088274][ T5916] usb 10-1: Product: syz
[  293.089993][ T5916] usb 10-1: SerialNumber: syz
[  293.094343][ T5916] usb 10-1: config 0 descriptor??
[  293.110101][ T5916] cm109 10-1:0.8: invalid payload size 1024, expected 4
[  293.114995][ T5916] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input10
[  293.335826][    C1] cm109 10-1:0.8: cm109_urb_irq_callback: urb status -71
[  293.534048][    C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  293.536575][    C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  293.539228][    C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  293.541603][    C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  293.544009][    C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  293.546311][ T5916] usb 10-1: USB disconnect, device number 4
[  293.548274][    C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  293.548284][    C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  293.564658][ T5916] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  294.838257][ T5944] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  294.952830][T11599] loop9: detected capacity change from 0 to 40427
[  294.961102][T11599] F2FS-fs (loop9): build fault injection rate: 771
[  294.970796][T11599] F2FS-fs (loop9): invalid crc value
[  295.007805][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.014317][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0
[  295.021655][T11599] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  295.025797][T11599] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  295.030162][ T5944] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  295.035148][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.040462][ T5944] usb 2-1: Product: syz
[  295.041980][ T5944] usb 2-1: Manufacturer: syz
[  295.043735][ T5944] usb 2-1: SerialNumber: syz
[  295.049018][T11599] F2FS-fs (loop9): Unexpected flush for atomic writes: ino=10, npages=1
[  295.053598][T11599] syz.9.2097: attempt to access beyond end of device
[  295.053598][T11599] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  295.073313][ T5944] usb 2-1: config 0 descriptor??
[  295.081488][ T5944] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  295.096417][T10163] syz-executor: attempt to access beyond end of device
[  295.096417][T10163] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  295.096955][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  295.106051][ T5944] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  295.106841][T10163] CPU: 1 UID: 0 PID: 10163 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  295.106855][T10163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.106861][T10163] Call Trace:
[  295.106866][T10163]  <TASK>
[  295.106870][T10163]  dump_stack_lvl+0x189/0x250
[  295.106888][T10163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.106898][T10163]  ? __pfx_queue_work_on+0x10/0x10
[  295.106930][T10163]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  295.106943][T10163]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  295.106958][T10163]  f2fs_handle_critical_error+0x37c/0x540
[  295.106975][T10163]  f2fs_write_end_io+0x886/0xb60
[  295.106993][T10163]  __submit_merged_bio+0x27a/0x6a0
[  295.107008][T10163]  __submit_merged_write_cond+0x255/0x530
[  295.107022][T10163]  f2fs_write_data_pages+0x261d/0x3000
[  295.107051][T10163]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  295.107070][T10163]  ? kernel_text_address+0xa5/0xe0
[  295.107098][T10163]  ? stack_depot_save_flags+0x40/0x860
[  295.107118][T10163]  ? cleanup_mnt+0x425/0x4c0
[  295.107126][T10163]  ? task_work_run+0x1d4/0x260
[  295.107134][T10163]  ? exit_to_user_mode_loop+0xec/0x110
[  295.107151][T10163]  ? __lock_acquire+0xab9/0xd20
[  295.107172][T10163]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  295.107183][T10163]  do_writepages+0x32e/0x550
[  295.107201][T10163]  ? do_raw_spin_unlock+0x4d/0x240
[  295.107213][T10163]  filemap_fdatawrite+0x199/0x240
[  295.107225][T10163]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  295.107261][T10163]  ? do_raw_spin_unlock+0x4d/0x240
[  295.107272][T10163]  f2fs_sync_dirty_inodes+0x31f/0x830
[  295.107288][T10163]  f2fs_write_checkpoint+0x95a/0x1df0
[  295.107309][T10163]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  295.107339][T10163]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  295.107346][T10163]  ? kfree+0x18e/0x440
[  295.107362][T10163]  ? kill_f2fs_super+0x298/0x6c0
[  295.107374][T10163]  kill_f2fs_super+0x2c3/0x6c0
[  295.107385][T10163]  ? __pfx_kill_f2fs_super+0x10/0x10
[  295.107391][T10163]  ? radix_tree_delete_item+0x2b6/0x400
[  295.107406][T10163]  ? shrinker_free+0x2ce/0x3e0
[  295.107417][T10163]  deactivate_locked_super+0xbc/0x130
[  295.107429][T10163]  cleanup_mnt+0x425/0x4c0
[  295.107437][T10163]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.107450][T10163]  task_work_run+0x1d4/0x260
[  295.107462][T10163]  ? __pfx_task_work_run+0x10/0x10
[  295.107470][T10163]  ? __x64_sys_umount+0x122/0x160
[  295.107484][T10163]  ? exit_to_user_mode_loop+0x40/0x110
[  295.107497][T10163]  exit_to_user_mode_loop+0xec/0x110
[  295.107507][T10163]  do_syscall_64+0x2bd/0x3b0
[  295.107518][T10163]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.107527][T10163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.107535][T10163]  ? exc_page_fault+0x9f/0xf0
[  295.107546][T10163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.107553][T10163] RIP: 0033:0x7f25d878ff17
[  295.107563][T10163] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  295.107570][T10163] RSP: 002b:00007ffe8bb593c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  295.107580][T10163] RAX: 0000000000000000 RBX: 00007f25d8811c05 RCX: 00007f25d878ff17
[  295.107585][T10163] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8bb59480
[  295.107589][T10163] RBP: 00007ffe8bb59480 R08: 0000000000000000 R09: 0000000000000000
[  295.107594][T10163] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8bb5a510
[  295.107600][T10163] R13: 00007f25d8811c05 R14: 0000000000048033 R15: 00007ffe8bb5a550
[  295.107616][T10163]  </TASK>
[  295.107620][T10163] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  295.113809][ T5944] usb 2-1: media controller created
[  295.258889][T11608] loop7: detected capacity change from 0 to 512
[  295.262247][T11608] EXT4-fs: Ignoring removed bh option
[  295.264893][T11608] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  295.291316][T11608] EXT4-fs (loop7): 1 truncate cleaned up
[  295.295768][T11608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.303731][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  295.365523][T10043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.390083][ T5944] DVB: Unable to find symbol tda10046_attach()
[  295.392017][ T5944] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  295.394674][ T5944] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  295.605112][ T5944] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  295.615019][ T5944] usb 2-1: USB disconnect, device number 9
[  295.667456][T11615] loop9: detected capacity change from 0 to 32768
[  295.677028][T11615] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2100 (11615)
[  295.690136][T11615] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  295.693678][T11615] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  295.697475][T11615] BTRFS info (device loop9): using free-space-tree
[  295.775073][   T33] audit: type=1800 audit(1755547419.514:86): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2100" name="file1" dev="loop9" ino=263 res=0 errno=0
[  295.862050][T10163] BTRFS info (device loop9): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  296.210171][T11641] loop9: detected capacity change from 0 to 2048
[  296.225559][T11641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.621992][ T5885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  296.630182][ T5885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  296.635651][ T5885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  296.641566][ T5885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  296.645066][ T5885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  296.805501][T11650] chnl_net:caif_netlink_parms(): no params data found
[  296.839835][T11646] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  296.897550][T11650] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.908065][T11650] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.911133][T11650] bridge_slave_0: entered allmulticast mode
[  296.915396][T11650] bridge_slave_0: entered promiscuous mode
[  296.921017][T11650] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.925737][T11650] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.929450][T11650] bridge_slave_1: entered allmulticast mode
[  296.933350][T11650] bridge_slave_1: entered promiscuous mode
[  296.996600][T11650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.007155][T11650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.083475][T11650] team0: Port device team_slave_0 added
[  297.102138][T11650] team0: Port device team_slave_1 added
[  297.179943][T11666] loop9: detected capacity change from 0 to 512
[  297.211600][T11650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.214951][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.234498][T11650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.239843][T11666] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.244533][T11666] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.249929][T11650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.252290][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.267988][T11650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.283797][T11666] EXT4-fs error (device loop9): ext4_add_entry:2417: inode #12: comm syz.9.2115: Directory hole found for htree leaf block 0
[  297.332488][T10163] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.361564][T11650] hsr_slave_0: entered promiscuous mode
[  297.366687][T11650] hsr_slave_1: entered promiscuous mode
[  297.385670][T11650] debugfs: 'hsr0' already exists in 'hsr'
[  297.392277][T11650] Cannot create hsr debugfs directory
[  297.672320][T11683] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2122'.
[  298.217373][T11696] loop1: detected capacity change from 0 to 128
[  298.224571][T11696] FAT-fs (loop1): bogus number of FAT structure
[  298.226733][T11696] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  298.240252][T11696] FAT-fs (loop1): Can't find a valid FAT filesystem
[  298.568890][    T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  298.627138][T11650] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  298.627408][T11705] loop9: detected capacity change from 0 to 164
[  298.642925][T11650] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  298.660868][T11650] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  298.678232][   T55] Bluetooth: hci1: command tx timeout
[  298.689181][T11650] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  298.720819][    T9] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  298.724028][    T9] usb 2-1: config 0 has no interface number 0
[  298.736136][    T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  298.743169][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.746717][    T9] usb 2-1: Product: syz
[  298.755590][    T9] usb 2-1: Manufacturer: syz
[  298.758349][    T9] usb 2-1: SerialNumber: syz
[  298.763915][    T9] usb 2-1: config 0 descriptor??
[  298.930131][T11650] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.950266][T11650] 8021q: adding VLAN 0 to HW filter on device team0
[  298.972062][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.974784][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.008579][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.011130][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.078095][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.182429][T11650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.186984][T11729] netlink: 'syz.9.2139': attribute type 10 has an invalid length.
[  299.200428][T11729] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  299.250063][T11650] veth0_vlan: entered promiscuous mode
[  299.268851][T11650] veth1_vlan: entered promiscuous mode
[  299.293178][T11650] veth0_macvtap: entered promiscuous mode
[  299.299423][T11650] veth1_macvtap: entered promiscuous mode
[  299.315833][T11650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.326570][T11650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.335008][ T5909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.343789][ T5909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.347396][T11733] program syz.9.2141 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  299.392289][ T5909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.399682][    T9] usb 2-1: Firmware version (0.0) predates our first public release.
[  299.402913][    T9] usb 2-1: Please update to version 0.2 or newer
[  299.413706][ T5909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.520731][    T9] usb 2-1: USB disconnect, device number 10
[  299.581124][T10339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.585864][T10339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.652535][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.656008][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.811960][T11736] loop9: detected capacity change from 0 to 32768
[  299.823708][T11736] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2142 (11736)
[  299.837425][T11736] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  299.842914][T11736] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  299.983156][T11736] BTRFS info (device loop9): rebuilding free space tree
[  300.026752][T11736] BTRFS info (device loop9): disabling free space tree
[  300.032155][T11762] loop3: detected capacity change from 0 to 512
[  300.037292][T11762] EXT4-fs (loop3): Test dummy encryption mode enabled
[  300.040423][T11736] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  300.044182][T11736] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  300.057735][T11762] EXT4-fs (loop3): Encoding requested by superblock is unknown
[  300.123741][   T33] audit: type=1800 audit(1755547423.854:87): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2142" name="bus" dev="loop9" ino=263 res=0 errno=0
[  300.306671][T10339] BTRFS error (device loop9): attempting to add another ref for an existing ref on a tree block
[  300.310639][T10339] BTRFS error (device loop9): dumping block entry [6881280 4096], num_refs 1, metadata 1, from disk 0
[  300.314084][T10339] BTRFS error (device loop9):   ref root 5, parent 0, owner 263, offset 0, num_refs 1
[  300.316940][T10339] BTRFS error (device loop9):   root entry 5, num_refs 0
[  300.320240][T10339] BTRFS error (device loop9):   root entry 10, num_refs 18446744073709551615
[  300.323008][T10339] BTRFS error (device loop9):   Ref action 3, root 5, ref_root 5, parent 0, owner 263, offset 0, num_refs 1
[  300.327148][T10339]    btrfs_insert_replace_extent+0x849/0x9d0
[  300.330023][T10339]    btrfs_replace_file_extents+0xcc9/0x1e00
[  300.331915][T10339]    __btrfs_prealloc_file_range+0x48d/0xcf0
[  300.333887][T10339]    btrfs_prealloc_file_range+0x40/0x60
[  300.335589][T10339]    btrfs_fallocate+0x1647/0x1ba0
[  300.337037][T10339]    vfs_fallocate+0x669/0x7e0
[  300.339202][T10339]    __x64_sys_fallocate+0xc0/0x110
[  300.341000][T10339]    do_syscall_64+0xfa/0x3b0
[  300.342484][T10339]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.344504][T10339] BTRFS error (device loop9):   Ref action 1, root 5, ref_root 5, parent 0, owner 263, offset 0, num_refs 1
[  300.348497][T10339]    btrfs_mark_extent_written+0x85d/0x21f0
[  300.350341][T10339]    btrfs_finish_one_ordered+0x95e/0x1fd0
[  300.352109][T10339]    btrfs_work_helper+0x39c/0xc20
[  300.353749][T10339]    process_scheduled_works+0xae1/0x17b0
[  300.355510][T10339]    worker_thread+0x8a0/0xda0
[  300.356982][T10339]    kthread+0x711/0x8a0
[  300.359144][T10339]    ret_from_fork+0x3fc/0x770
[  300.361495][T10339]    ret_from_fork_asm+0x1a/0x30
[  300.386165][T10163] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  300.769559][   T55] Bluetooth: hci1: command tx timeout
[  301.075694][T11786] RDS: rds_bind could not find a transport for fe88::a, load rds_tcp or rds_rdma?
[  302.840209][   T55] Bluetooth: hci1: command tx timeout
[  303.514908][T11776] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  303.520307][T11776] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  303.692261][T11799] tipc: Started in network mode
[  303.695013][T11799] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  303.703732][T11799] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  304.352495][T11826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.918563][   T55] Bluetooth: hci1: command tx timeout
[  305.596441][ T7121] libceph: connect (1)[c::]:6789 error -101
[  305.599729][ T7121] libceph: mon0 (1)[c::]:6789 connect error
[  305.787364][T11841] ceph: No mds server is up or the cluster is laggy
[  305.834819][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'.
[  306.180387][T11862] sp0: Synchronizing with TNC
[  306.263925][T11858] loop9: detected capacity change from 0 to 32768
[  306.469594][T11877] loop3: detected capacity change from 0 to 512
[  306.496934][T11877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.503526][T11877] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  306.522636][T11877] EXT4-fs (loop3): shut down requested (2)
[  306.605822][T11886] loop1: detected capacity change from 0 to 128
[  306.831998][T11886] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  306.836945][T11886] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  306.846901][ T5698] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.887076][T11886] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  306.916906][T10523] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  306.942941][ T5698] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.322521][ T5698] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.328908][T11650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.470384][ T5698] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.649616][ T5885] Bluetooth: hci1: command 0x0405 tx timeout
[  307.693816][T11891] loop1: detected capacity change from 0 to 32768
[  307.710790][ T5698] bridge_slave_1: left allmulticast mode
[  307.712537][ T5698] bridge_slave_1: left promiscuous mode
[  307.714372][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.732024][ T5698] bridge_slave_0: left allmulticast mode
[  307.734292][ T5698] bridge_slave_0: left promiscuous mode
[  307.738866][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.756086][T11891] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  307.801979][T11891] XFS (loop1): Ending clean mount
[  307.938967][T10523] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  308.021086][T11897] loop9: detected capacity change from 0 to 32768
[  308.051135][T11901] loop3: detected capacity change from 0 to 40427
[  308.053977][T11901] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  308.056597][T11901] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  308.082283][ T5888]  loop9: p9 p11 p16
[  308.135385][T11897]  loop9: p9 p11 p16
[  308.189119][T11901] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  308.195742][T11901] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  308.200877][T11901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  308.418530][   T33] audit: type=1800 audit(1755547432.124:88): pid=11901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2204" name="$" dev="loop3" ino=10 res=0 errno=0
[  308.442215][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop9p9, 10) failed: No such file or directory
[  308.555057][T11919] loop9: detected capacity change from 0 to 8
[  308.682869][T11919] SQUASHFS error: Failed to read block 0xe000000000001ea: -5
[  308.694842][T11919] unable to read xattr id index table
[  308.811040][   T33] audit: type=1326 audit(1755547432.554:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.1.2205" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92f578ebe9 code=0x0
[  309.017379][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.261768][T11930] o2cb: This node has not been configured.
[  309.263906][T11930] o2cb: Cluster check failed. Fix errors before retrying.
[  309.266268][T11930] (syz.9.2210,11930,1):user_dlm_register:674 ERROR: status = -22
[  309.268882][T11930] (syz.9.2210,11930,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  309.534366][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.599941][ T5698] bond0 (unregistering): Released all slaves
[  309.939868][T11935] loop1: detected capacity change from 0 to 40427
[  309.946262][T11935] F2FS-fs (loop1): invalid crc value
[  310.093683][T11935] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  310.097731][T11935] F2FS-fs (loop1): Start checkpoint disabled!
[  310.108674][T11935] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  310.149727][   T33] audit: type=1800 audit(1755547433.874:90): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2211" name="file1" dev="loop1" ino=10 res=0 errno=0
[  310.353294][ T5698] hsr_slave_0: left promiscuous mode
[  310.355762][ T5698] hsr_slave_1: left promiscuous mode
[  310.357735][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.365195][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.368510][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.372166][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.488040][T11955] syz.1.2211: attempt to access beyond end of device
[  310.488040][T11955] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  310.498189][T11955] syz.1.2211: attempt to access beyond end of device
[  310.498189][T11955] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  310.508272][T11955] syz.1.2211: attempt to access beyond end of device
[  310.508272][T11955] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  310.515128][T11955] syz.1.2211: attempt to access beyond end of device
[  310.515128][T11955] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  310.523100][T11955] syz.1.2211: attempt to access beyond end of device
[  310.523100][T11955] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  310.531890][T11955] syz.1.2211: attempt to access beyond end of device
[  310.531890][T11955] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  310.540933][T11955] syz.1.2211: attempt to access beyond end of device
[  310.540933][T11955] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  310.549407][T11955] syz.1.2211: attempt to access beyond end of device
[  310.549407][T11955] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  310.557538][T11955] syz.1.2211: attempt to access beyond end of device
[  310.557538][T11955] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  310.564935][T11955] syz.1.2211: attempt to access beyond end of device
[  310.564935][T11955] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  310.684135][ T5698] veth1_macvtap: left promiscuous mode
[  310.684439][T11959] loop9: detected capacity change from 0 to 512
[  310.686404][ T5698] veth0_macvtap: left promiscuous mode
[  310.691169][ T5698] veth1_vlan: left promiscuous mode
[  310.693244][ T5698] veth0_vlan: left promiscuous mode
[  310.696892][T11959] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2220: iget: bad extended attribute block 1
[  310.704837][T11959] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2220: couldn't read orphan inode 15 (err -117)
[  310.730550][T11959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.806115][T11959] EXT4-fs warning (device loop9): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  310.840170][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  310.840192][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  310.840201][   T36] Workqueue: writeback wb_workfn (flush-7:1)
[  310.840224][   T36] Call Trace:
[  310.840230][   T36]  <TASK>
[  310.840236][   T36]  dump_stack_lvl+0x189/0x250
[  310.840256][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.840271][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  310.840283][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  310.840301][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  310.840323][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  310.840348][   T36]  f2fs_write_end_io+0x886/0xb60
[  310.840372][   T36]  __submit_merged_bio+0x27a/0x6a0
[  310.840394][   T36]  __submit_merged_write_cond+0x255/0x530
[  310.840417][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  310.840460][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  310.840489][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  310.840529][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  310.840556][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  310.840574][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  310.840595][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  310.840619][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  310.840638][   T36]  do_writepages+0x32e/0x550
[  310.840662][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  310.840676][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  310.840699][   T36]  __writeback_single_inode+0x145/0xff0
[  310.840716][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  310.840736][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  310.840772][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  310.840822][   T36]  ? rcu_is_watching+0x15/0xb0
[  310.840875][   T36]  wb_writeback+0x43b/0xaf0
[  310.840899][   T36]  ? queue_io+0x3b1/0x590
[  310.840917][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  310.840940][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  310.840960][   T36]  wb_workfn+0x409/0xef0
[  310.840986][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  310.841003][   T36]  ? __lock_acquire+0xab9/0xd20
[  310.841031][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  310.841050][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  310.841064][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  310.841076][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  310.841090][   T36]  process_scheduled_works+0xae1/0x17b0
[  310.841131][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  310.841158][   T36]  worker_thread+0x8a0/0xda0
[  310.841193][   T36]  kthread+0x711/0x8a0
[  310.841213][   T36]  ? __pfx_worker_thread+0x10/0x10
[  310.841226][   T36]  ? __pfx_kthread+0x10/0x10
[  310.841244][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  310.841259][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.841276][   T36]  ? __pfx_kthread+0x10/0x10
[  310.841292][   T36]  ret_from_fork+0x3fc/0x770
[  310.841310][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  310.841329][   T36]  ? __switch_to_asm+0x39/0x70
[  310.841345][   T36]  ? __switch_to_asm+0x33/0x70
[  310.841359][   T36]  ? __pfx_kthread+0x10/0x10
[  310.841376][   T36]  ret_from_fork_asm+0x1a/0x30
[  310.841405][   T36]  </TASK>
[  310.841411][   T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  310.994499][T10163] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.371446][T11963] loop9: detected capacity change from 0 to 32768
[  311.376300][T11963] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2223 (11963)
[  311.395699][T11963] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  311.401063][T11963] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  311.566235][T11963] BTRFS info (device loop9): rebuilding free space tree
[  311.592533][T11963] BTRFS info (device loop9): disabling free space tree
[  311.595344][T11963] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  311.599768][T11963] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  311.676978][T10163] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  311.825436][ T5698] team0 (unregistering): Port device team_slave_1 removed
[  311.956132][ T5698] team0 (unregistering): Port device C removed
[  312.000612][T11988] loop9: detected capacity change from 0 to 1024
[  312.633908][T11991] input: syz0 as /devices/virtual/input/input11
[  312.759486][T12001] loop1: detected capacity change from 0 to 1024
[  312.766505][T12001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  312.780303][T12001] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  312.789290][T12001] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  312.798209][T12001] EXT4-fs (loop1): orphan cleanup on readonly fs
[  312.834269][T12001] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 3: comm syz.1.2231: lblock 3 mapped to illegal pblock 3 (length 1)
[  312.840626][T12001] Quota error (device loop1): write_blk: dquota write failed
[  312.842890][T12001] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3
[  312.846345][T12001] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  312.861684][T12001] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2231: Failed to acquire dquot type 0
[  312.878317][T12001] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 3: comm syz.1.2231: lblock 3 mapped to illegal pblock 3 (length 1)
[  312.903327][T12001] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  312.929938][T12001] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2231: Failed to acquire dquot type 0
[  312.934730][T12001] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2231: Freeing blocks not in datazone - block = 0, count = 4096
[  312.980586][T12001] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 3: comm syz.1.2231: lblock 3 mapped to illegal pblock 3 (length 1)
[  313.007609][ T5698] IPVS: stop unused estimator thread 0...
[  313.032084][T12001] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  313.036191][T12001] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2231: Failed to acquire dquot type 0
[  313.057336][T12001] EXT4-fs (loop1): 1 orphan inode deleted
[  313.059400][T12006] loop9: detected capacity change from 0 to 32768
[  313.063565][T12001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  313.124067][T10523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.118118][T12032] netlink: 495 bytes leftover after parsing attributes in process `syz.1.2242'.
[  314.182649][T12038] sit0: entered promiscuous mode
[  314.184816][T12038] netlink: 21 bytes leftover after parsing attributes in process `syz.9.2247'.
[  314.242487][T12040] loop1: detected capacity change from 0 to 256
[  314.281100][T12040] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  314.283712][T12044] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2250'.
[  314.439446][T12050] loop3: detected capacity change from 0 to 1024
[  314.482887][T12050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.517327][T12048] loop1: detected capacity change from 0 to 8192
[  314.596946][T12043] loop9: detected capacity change from 0 to 32768
[  314.611396][T12043] btrfs: Deprecated parameter 'usebackuproot'
[  314.614444][T12048] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  314.627987][T12043] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  314.631121][T12048] FAT-fs (loop1): Filesystem has been set read-only
[  314.664399][T12043] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2249 (12043)
[  314.675784][T12043] BTRFS info (device loop9 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  314.680170][T12043] BTRFS info (device loop9 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  314.683883][T12043] BTRFS info (device loop9 state S): disk space caching is enabled
[  314.686713][T12043] BTRFS warning (device loop9 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  314.691771][T12043] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  314.698544][T12043] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  314.976383][T12043] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  314.986793][T12043] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  314.993795][T12043] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  315.000713][T12043] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  315.010002][T12043] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[  315.035795][T10339] BTRFS warning (device loop9 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xf965c027f6d77b9b4c342b08291e847dd441e9aad90b1a136fd7cdfc868701cd level 0, ignored
[  315.063324][   T53] BTRFS warning (device loop9 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x70d0bf4416057dec1c405852a49d2c6d902d8b71010d18d8d723d3736d6a6d44 level 0, ignored
[  315.075318][ T6965] BTRFS warning (device loop9 state CS): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0x40de0d5385bab233876729785d53dcfc8423daa8a61a4fd383291ab23ffba869 level 0, ignored
[  315.159304][T10163] BTRFS info (device loop9 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  315.275441][T12063] loop1: detected capacity change from 0 to 32768
[  315.415712][T11650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.523333][T12063] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  315.523360][T12063]   allowing incompatible features above 0.0: (unknown version)
[  315.523370][T12063]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  315.586251][T12063] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  315.627997][T12063] bcachefs (loop1): initializing new filesystem
[  315.657792][T12063] bcachefs (loop1): going read-write
[  315.690554][T12063] bcachefs (loop1): marking superblocks
[  315.705417][T12063] bcachefs (loop1): initializing freespace
[  315.748183][T12063] bcachefs (loop1): done initializing freespace
[  315.775115][T12063] bcachefs (loop1): reading snapshots table
[  315.777184][T12063] bcachefs (loop1): reading snapshots done
[  315.881913][T12063] bcachefs (loop1): done starting filesystem
[  316.018310][T10523] bcachefs (loop1): shutting down
[  316.020289][T10523] bcachefs (loop1): going read-only
[  316.022286][T10523] bcachefs (loop1): finished waiting for writes to stop
[  316.033003][T10523] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  316.043321][T12091] loop9: detected capacity change from 0 to 40427
[  316.047092][T12091] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  316.067058][T12091] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  316.094147][T10523] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  316.100180][T10523] bcachefs (loop1): clean shutdown complete, journal seq 4
[  316.105910][T10523] bcachefs (loop1): marking filesystem clean
[  316.121983][T12091] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  316.126465][T12091] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  316.131973][T10523] bcachefs (loop1): shutdown complete
[  316.132259][T12091] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  316.200401][T12090] bio_check_eod: 176 callbacks suppressed
[  316.200432][T12090] syz.9.2258: attempt to access beyond end of device
[  316.200432][T12090] loop9: rw=524288, sector=49168, nr_sectors = 256 limit=40427
[  316.211156][T12090] syz.9.2258: attempt to access beyond end of device
[  316.211156][T12090] loop9: rw=0, sector=49168, nr_sectors = 8 limit=40427
[  316.219067][T12090] syz.9.2258: attempt to access beyond end of device
[  316.219067][T12090] loop9: rw=0, sector=49168, nr_sectors = 8 limit=40427
[  316.226986][T12091] syz.9.2258: attempt to access beyond end of device
[  316.226986][T12091] loop9: rw=0, sector=49168, nr_sectors = 8 limit=40427
[  316.232766][T12091] syz.9.2258: attempt to access beyond end of device
[  316.232766][T12091] loop9: rw=0, sector=49168, nr_sectors = 8 limit=40427
[  316.238829][T12091] syz.9.2258: attempt to access beyond end of device
[  316.238829][T12091] loop9: rw=0, sector=49168, nr_sectors = 8 limit=40427
[  316.244249][T12091] syz.9.2258: attempt to access beyond end of device
[  316.244249][T12091] loop9: rw=0, sector=49168, nr_sectors = 8 limit=40427
[  316.962496][T12132] loop3: detected capacity change from 0 to 4096
[  317.014894][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.018987][T12132] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  317.026189][T12136] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  317.037710][T12132] NILFS (loop3): mounting fs with errors
[  317.658561][T12154] netlink: 'syz.1.2284': attribute type 237 has an invalid length.
[  317.762834][T12159] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2286'.
[  318.123750][T12160] loop9: detected capacity change from 0 to 32768
[  318.143040][T12160] JBD2: Ignoring recovery information on journal
[  318.175512][T12173] netlink: 3 bytes leftover after parsing attributes in process `+}[@'.
[  318.189660][T12160] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  318.263105][T12166] loop1: detected capacity change from 0 to 32768
[  318.271912][T12166] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  318.388624][T10163] ocfs2: Unmounting device (7,9) on (node local)
[  318.485798][T12182] batman_adv: batadv0: Adding interface: dummy0
[  318.515134][T12182] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.556781][T12182] batman_adv: batadv0: Interface activated: dummy0
[  318.621586][T12182] batadv0: mtu less than device minimum
[  318.625213][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.630782][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.636005][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.641295][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.646483][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.651866][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.657169][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.662448][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.667607][T12182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  318.790114][T12194] loop9: detected capacity change from 0 to 256
[  318.805649][T12194] exfat: Deprecated parameter 'utf8'
[  318.819855][T12194] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  318.942074][T12204] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2307'.
[  319.015329][T12209] loop1: detected capacity change from 0 to 512
[  319.052039][T12209] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2309: Invalid inode bitmap blk 4 in block_group 0
[  319.069462][T12209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.122406][T10523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.634741][T12230] loop1: detected capacity change from 0 to 764
[  319.696843][T12230] netlink: 'syz.1.2313': attribute type 27 has an invalid length.
[  319.923703][T12230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.930318][T12230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.102290][T12230] erspan1: left allmulticast mode
[  320.109041][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  320.134770][T12233] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.138936][T12233] 8021q: adding VLAN 0 to HW filter on device team0
[  320.147519][ T5698] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  320.153245][ T5698] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  320.159059][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2321'.
[  320.163983][T12241] tc_dump_action: action bad kind
[  320.168446][ T5698] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  320.172517][ T5698] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  320.262455][T12245] loop1: detected capacity change from 0 to 512
[  320.273844][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  320.279262][    T9] usb 4-1: config 0 has no interface number 0
[  320.286444][    T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  320.297387][T12245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.302767][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.305939][    T9] usb 4-1: Product: syz
[  320.307648][    T9] usb 4-1: Manufacturer: syz
[  320.319921][T12245] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  320.324544][    T9] usb 4-1: SerialNumber: syz
[  320.333160][    T9] usb 4-1: config 0 descriptor??
[  320.456137][T12251] loop9: detected capacity change from 0 to 128
[  320.463514][T12251] EXT4-fs: Ignoring removed nobh option
[  320.543452][    T9] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  320.566434][    T9] usb 4-1: USB disconnect, device number 4
[  320.597730][T12251] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  320.602886][T12251] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  320.654988][T10163] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  320.733155][T12254] netlink: 'syz.9.2326': attribute type 9 has an invalid length.
[  320.736772][T12254] netlink: 'syz.9.2326': attribute type 6 has an invalid length.
[  321.235818][T12261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2329'.
[  321.250668][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'.
[  321.926040][T10523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.294929][T12285] loop3: detected capacity change from 0 to 32768
[  322.315760][T12285] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  322.346845][T12285] 
[  322.347890][T12285] ======================================================
[  322.350561][T12285] WARNING: possible circular locking dependency detected
[  322.353234][T12285] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  322.356378][T12285] ------------------------------------------------------
[  322.359920][T12285] syz.3.2340/12285 is trying to acquire lock:
[  322.362110][T12285] ffff888105c289c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  322.366401][T12285] 
[  322.366401][T12285] but task is already holding lock:
[  322.368677][T12285] ffff8881036686f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  322.371771][T12285] 
[  322.371771][T12285] which lock already depends on the new lock.
[  322.371771][T12285] 
[  322.374892][T12285] 
[  322.374892][T12285] the existing dependency chain (in reverse order) is:
[  322.377582][T12285] 
[  322.377582][T12285] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  322.380012][T12285]        lock_acquire+0x120/0x360
[  322.381582][T12285]        down_read+0x46/0x2e0
[  322.383033][T12285]        ocfs2_init_acl+0x2f9/0x720
[  322.384657][T12285]        ocfs2_mknod+0x1321/0x2050
[  322.386238][T12285]        ocfs2_create+0x1a5/0x440
[  322.387812][T12285]        path_openat+0x14f4/0x3830
[  322.389433][T12285]        do_filp_open+0x1fa/0x410
[  322.391146][T12285]        do_sys_openat2+0x121/0x1c0
[  322.392794][T12285]        __x64_sys_openat+0x138/0x170
[  322.394525][T12285]        do_syscall_64+0xfa/0x3b0
[  322.396342][T12285]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.398827][ T7121] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  322.398849][T12285] 
[  322.398849][T12285] -> #3 (jbd2_handle){++++}-{0:0}:
[  322.404476][T12285]        lock_acquire+0x120/0x360
[  322.406447][T12285]        start_this_handle+0x1fa7/0x21c0
[  322.408669][T12285]        jbd2__journal_start+0x2c1/0x5b0
[  322.410863][T12285]        jbd2_journal_start+0x2a/0x40
[  322.412957][T12285]        ocfs2_start_trans+0x376/0x6d0
[  322.415040][T12285]        ocfs2_mknod+0xe93/0x2050
[  322.417015][T12285]        ocfs2_create+0x1a5/0x440
[  322.419012][T12285]        path_openat+0x14f4/0x3830
[  322.420780][T12285]        do_filp_open+0x1fa/0x410
[  322.422759][T12285]        do_sys_openat2+0x121/0x1c0
[  322.424613][T12285]        __x64_sys_open+0x11e/0x150
[  322.426579][T12285]        do_syscall_64+0xfa/0x3b0
[  322.428501][T12285]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.430949][T12285] 
[  322.430949][T12285] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  322.434084][T12285]        lock_acquire+0x120/0x360
[  322.435647][T12285]        down_read+0x46/0x2e0
[  322.437220][T12285]        ocfs2_start_trans+0x36a/0x6d0
[  322.439249][T12285]        ocfs2_mknod+0xe93/0x2050
[  322.441273][T12285]        ocfs2_create+0x1a5/0x440
[  322.443294][T12285]        path_openat+0x14f4/0x3830
[  322.445304][T12285]        do_filp_open+0x1fa/0x410
[  322.446988][T12285]        do_sys_openat2+0x121/0x1c0
[  322.448674][T12285]        __x64_sys_open+0x11e/0x150
[  322.450573][T12285]        do_syscall_64+0xfa/0x3b0
[  322.452595][T12285]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.454876][T12285] 
[  322.454876][T12285] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  322.457551][T12285]        lock_acquire+0x120/0x360
[  322.459358][T12285]        ocfs2_start_trans+0x26b/0x6d0
[  322.461332][T12285]        ocfs2_create_refcount_tree+0x349/0x1250
[  322.463473][T12285]        ocfs2_reflink_remap_blocks+0x2ea/0x1930
[  322.465557][T12285]        ocfs2_remap_file_range+0x4b7/0x730
[  322.467486][T12285]        vfs_copy_file_range+0xd56/0x1310
[  322.469344][T12285]        __se_sys_copy_file_range+0x2fb/0x470
[  322.471171][T12285]        do_syscall_64+0xfa/0x3b0
[  322.472803][T12285]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.475101][T12285] 
[  322.475101][T12285] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  322.478775][T12285]        validate_chain+0xb9b/0x2140
[  322.480565][T12285]        __lock_acquire+0xab9/0xd20
[  322.482412][T12285]        lock_acquire+0x120/0x360
[  322.484257][T12285]        down_write+0x96/0x1f0
[  322.486075][T12285]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  322.488252][T12285]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  322.490839][T12285]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  322.493198][T12285]        ocfs2_xattr_set+0xb70/0x11f0
[  322.495103][T12285]        __vfs_setxattr+0x43c/0x480
[  322.496852][T12285]        __vfs_setxattr_noperm+0x12d/0x660
[  322.498897][T12285]        vfs_setxattr+0x16b/0x2f0
[  322.500803][T12285]        filename_setxattr+0x274/0x600
[  322.502832][T12285]        path_setxattrat+0x364/0x3a0
[  322.504794][T12285]        __x64_sys_lsetxattr+0xbf/0xe0
[  322.506885][T12285]        do_syscall_64+0xfa/0x3b0
[  322.508774][T12285]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.511095][T12285] 
[  322.511095][T12285] other info that might help us debug this:
[  322.511095][T12285] 
[  322.514605][T12285] Chain exists of:
[  322.514605][T12285]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  322.514605][T12285] 
[  322.519768][T12285]  Possible unsafe locking scenario:
[  322.519768][T12285] 
[  322.521872][T12285]        CPU0                    CPU1
[  322.523528][T12285]        ----                    ----
[  322.525324][T12285]   lock(&oi->ip_xattr_sem);
[  322.526737][T12285]                                lock(jbd2_handle);
[  322.528692][T12285]                                lock(&oi->ip_xattr_sem);
[  322.530760][T12285]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  322.532979][T12285] 
[  322.532979][T12285]  *** DEADLOCK ***
[  322.532979][T12285] 
[  322.535566][T12285] 3 locks held by syz.3.2340/12285:
[  322.537122][T12285]  #0: ffff88803e6c8428 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  322.540172][T12285]  #1: ffff8881036689c0 (&sb->s_type->i_mutex_key#28){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  322.544086][T12285]  #2: ffff8881036686f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  322.547605][T12285] 
[  322.547605][T12285] stack backtrace:
[  322.550022][T12285] CPU: 0 UID: 0 PID: 12285 Comm: syz.3.2340 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  322.550067][T12285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  322.550075][T12285] Call Trace:
[  322.550080][T12285]  <TASK>
[  322.550085][T12285]  dump_stack_lvl+0x189/0x250
[  322.550099][T12285]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.550108][T12285]  ? __pfx__printk+0x10/0x10
[  322.550121][T12285]  ? print_lock_name+0xde/0x100
[  322.550133][T12285]  print_circular_bug+0x2ee/0x310
[  322.550144][T12285]  check_noncircular+0x134/0x160
[  322.550153][T12285]  validate_chain+0xb9b/0x2140
[  322.550161][T12285]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  322.550173][T12285]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  322.550186][T12285]  __lock_acquire+0xab9/0xd20
[  322.550198][T12285]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  322.550207][T12285]  lock_acquire+0x120/0x360
[  322.550216][T12285]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  322.550227][T12285]  down_write+0x96/0x1f0
[  322.550234][T12285]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  322.550242][T12285]  ? __pfx_down_write+0x10/0x10
[  322.550256][T12285]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  322.550268][T12285]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  322.550277][T12285]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.550287][T12285]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  322.550296][T12285]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  322.550305][T12285]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  322.550314][T12285]  ? stack_depot_save_flags+0x41b/0x860
[  322.550326][T12285]  ? kasan_save_track+0x4f/0x80
[  322.550335][T12285]  ? kasan_save_track+0x3e/0x80
[  322.550344][T12285]  ? __kasan_kmalloc+0x93/0xb0
[  322.550361][T12285]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  322.550373][T12285]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  322.550381][T12285]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  322.550392][T12285]  ? ocfs2_xattr_set+0xb70/0x11f0
[  322.550401][T12285]  ? __vfs_setxattr+0x43c/0x480
[  322.550413][T12285]  ? __vfs_setxattr_noperm+0x12d/0x660
[  322.550424][T12285]  ? vfs_setxattr+0x16b/0x2f0
[  322.550433][T12285]  ? filename_setxattr+0x274/0x600
[  322.550444][T12285]  ? path_setxattrat+0x364/0x3a0
[  322.550452][T12285]  ? __x64_sys_lsetxattr+0xbf/0xe0
[  322.550458][T12285]  ? do_syscall_64+0xfa/0x3b0
[  322.550468][T12285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.550483][T12285]  ? __kasan_kmalloc+0x93/0xb0
[  322.550493][T12285]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  322.550502][T12285]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  322.550511][T12285]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  322.550519][T12285]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  322.550531][T12285]  ? __lock_acquire+0xab9/0xd20
[  322.550543][T12285]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  322.550555][T12285]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  322.550566][T12285]  ? ocfs2_xattr_set+0xb36/0x11f0
[  322.550576][T12285]  ? up_write+0x1c4/0x420
[  322.550583][T12285]  ? ocfs2_xattr_set+0x334/0x11f0
[  322.550592][T12285]  ocfs2_xattr_set+0xb70/0x11f0
[  322.550607][T12285]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  322.550617][T12285]  ? dput+0x37/0x2b0
[  322.550624][T12285]  ? dput+0x37/0x2b0
[  322.550630][T12285]  ? step_into+0x435/0xf30
[  322.550637][T12285]  ? step_into+0x435/0xf30
[  322.550646][T12285]  ? evm_protected_xattr_common+0x170/0x190
[  322.550656][T12285]  ? evm_protect_xattr+0x71d/0xa90
[  322.550666][T12285]  ? __pfx_evm_protect_xattr+0x10/0x10
[  322.550674][T12285]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  322.550684][T12285]  __vfs_setxattr+0x43c/0x480
[  322.550697][T12285]  __vfs_setxattr_noperm+0x12d/0x660
[  322.550709][T12285]  vfs_setxattr+0x16b/0x2f0
[  322.550720][T12285]  ? __pfx_vfs_setxattr+0x10/0x10
[  322.550730][T12285]  ? mnt_get_write_access+0x223/0x2a0
[  322.550740][T12285]  filename_setxattr+0x274/0x600
[  322.550753][T12285]  ? __pfx_filename_setxattr+0x10/0x10
[  322.550764][T12285]  ? getname_flags+0x1e5/0x540
[  322.550772][T12285]  path_setxattrat+0x364/0x3a0
[  322.550782][T12285]  ? __pfx_path_setxattrat+0x10/0x10
[  322.550790][T12285]  ? do_futex+0x395/0x420
[  322.550804][T12285]  ? rcu_is_watching+0x15/0xb0
[  322.550813][T12285]  __x64_sys_lsetxattr+0xbf/0xe0
[  322.550820][T12285]  do_syscall_64+0xfa/0x3b0
[  322.550831][T12285]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.550840][T12285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.550848][T12285]  ? exc_page_fault+0x9f/0xf0
[  322.550857][T12285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.550865][T12285] RIP: 0033:0x7fe15d98ebe9
[  322.550874][T12285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.550882][T12285] RSP: 002b:00007fe15e885038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  322.550892][T12285] RAX: ffffffffffffffda RBX: 00007fe15dbb5fa0 RCX: 00007fe15d98ebe9
[  322.550899][T12285] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000080
[  322.550905][T12285] RBP: 00007fe15da11e19 R08: 0000000000000000 R09: 0000000000000000
[  322.550910][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.550915][T12285] R13: 00007fe15dbb6038 R14: 00007fe15dbb5fa0 R15: 00007ffd67228e48
[  322.550925][T12285]  </TASK>
[  322.727612][    C0] vkms_vblank_simulate: vblank timer overrun
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  322.745624][    T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  322.761842][ T7121] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  322.766699][ T7121] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  322.775142][ T7121] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  322.778759][ T7121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  322.781989][ T7121] usb 2-1: SerialNumber: syz
[  322.942703][T12270] ocfs2: Unmounting device (7,3) on (node local)
[  323.012347][    T9] usb 10-1: device descriptor read/all, error -71
[  323.126933][ T7121] usb 2-1: USB disconnect, device number 11
[  323.397520][   T12] bridge_slave_1: left allmulticast mode
[  323.401205][   T12] bridge_slave_1: left promiscuous mode
[  323.403547][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.407504][   T12] bridge_slave_0: left allmulticast mode
[  323.410565][   T12] bridge_slave_0: left promiscuous mode
[  323.412923][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.522214][   T12] batman_adv: batadv0: Removing interface: gretap1
[  323.579268][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  323.739210][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  323.742573][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  323.745606][   T12] bond0 (unregistering): Released all slaves
[  323.996322][   T12] hsr_slave_0: left promiscuous mode
[  323.999031][   T12] hsr_slave_1: left promiscuous mode
[  324.001505][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.004635][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.369891][   T12] team0 (unregistering): Port device team_slave_1 removed
[  324.406742][   T12] team0 (unregistering): Port device team_slave_0 removed
[  326.623391][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.683450][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.734977][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.802783][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.146800][   T12] bridge_slave_1: left allmulticast mode
[  327.150094][   T12] bridge_slave_1: left promiscuous mode
[  327.152403][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.156418][   T12] bridge_slave_0: left allmulticast mode
[  327.160396][   T12] bridge_slave_0: left promiscuous mode
[  327.162684][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.267694][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.272424][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.276595][   T12] bond0 (unregistering): Released all slaves
[  327.668545][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.671914][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.675570][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  327.678746][   T12] bond0 (unregistering): Released all slaves
[  327.814541][   T12] bond1 (unregistering): Released all slaves
[  327.905357][   T12] tipc: Left network mode
[  328.189873][   T12] hsr_slave_0: left promiscuous mode
[  328.192328][   T12] hsr_slave_1: left promiscuous mode
[  328.194580][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.197271][   T12] net_ratelimit: 11 callbacks suppressed
[  328.197281][   T12] batadv0: mtu less than device minimum
[  328.202144][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.206336][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.210640][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.214941][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.219220][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.223363][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.227515][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.231834][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.236001][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  328.246246][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.251292][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.265109][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.269691][   T12] batman_adv: batadv0: Interface deactivated: dummy0
[  328.271998][   T12] batman_adv: batadv0: Removing interface: dummy0
[  328.277267][   T12] hsr_slave_0: left promiscuous mode
[  328.280141][   T12] hsr_slave_1: left promiscuous mode
[  328.282727][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.286168][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.293200][   T12] veth1_macvtap: left promiscuous mode
[  328.295536][   T12] veth0_macvtap: left promiscuous mode
[  328.298323][   T12] veth1_vlan: left promiscuous mode
[  328.300570][   T12] veth0_vlan: left promiscuous mode
[  328.494575][   T12] team0 (unregistering): Port device team_slave_1 removed
[  328.530498][   T12] team0 (unregistering): Port device team_slave_0 removed
[  329.081330][   T12] team0 (unregistering): Port device team_slave_1 removed
[  329.123832][   T12] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
20:04:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000125f RDI=0000000000001260 RBP=00000000000003f8 RSP=ffffc90003fde4b0
R8 =ffff888106a60237 R9 =1ffff11020d4c046 R10=dffffc0000000000 R11=ffffffff854f00f0
R12=dffffc0000000000 R13=ffffffff99af98c5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f016c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe15e8856c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe15d9733e0 CR3=0000000121650000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=1360034e5d53002c 74696d6d6f635f63 XMM05=5cf3945eb98408b4 4938eecd7e6e9eec
XMM06=0000000000000000 00b0be19cd0096ec XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00001b7d1475bf98 XMM09=0000000000000000 00007fe15da12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ef0760c287ca7000 RBX=ffffffff81968308 RCX=ef0760c287ca7000 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34023ffc CR3=00000001179c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fe15da12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
