last executing test programs:

1.260333295s ago: executing program 0 (id=122):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000100)={0x8, 0x442})

1.2601256s ago: executing program 0 (id=123):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x16}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0)

1.179078097s ago: executing program 0 (id=124):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1.178766445s ago: executing program 0 (id=125):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005"], 0x48}], 0x1, 0x40)

1.136838405s ago: executing program 0 (id=126):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0)

1.058362576s ago: executing program 0 (id=127):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000600)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

669.092592ms ago: executing program 1 (id=130):
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000004c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x65, 0x34]}}]})

619.013895ms ago: executing program 1 (id=131):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010003904ffffffff000000320c921beb", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24048080)

556.469383ms ago: executing program 1 (id=132):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000140)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xf9, 0x1501, &(0x7f00000002c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0x4a8e)

469.172927ms ago: executing program 1 (id=133):
mkdir(&(0x7f00000003c0)='./debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

468.900883ms ago: executing program 1 (id=134):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x5, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

409.414666ms ago: executing program 1 (id=135):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2})

311.830941ms ago: executing program 2 (id=136):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000001080)={0x2c}, 0x8)

220.240178ms ago: executing program 2 (id=137):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}], 0x18}], 0x1, 0x4040800)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x10000005, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

133.786281ms ago: executing program 2 (id=138):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000480)={'binder1\x00'})

65.704835ms ago: executing program 2 (id=139):
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0)
socket(0x3, 0xa, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

425.302µs ago: executing program 2 (id=140):
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, 0x0)

0s ago: executing program 2 (id=141):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800718, &(0x7f0000000240)={[{@delalloc}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@errors_remount}, {@resuid}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x754}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x20ad}}]}, 0x22, 0x4a7, &(0x7f00000010c0)="$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")

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56025' (ED25519) to the list of known hosts.
syzkaller login: [   57.911705][ T5618] cgroup: Unknown subsys name 'net'
[   58.002436][ T5618] cgroup: Unknown subsys name 'cpuset'
[   58.006162][ T5618] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.707333][ T5618] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.611456][ T5022] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.615281][ T5022] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.620761][ T5022] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.627817][ T5022] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.631933][ T5022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.651036][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.655108][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.659819][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.663153][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.666857][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.672433][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.675868][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.680267][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.688759][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.700646][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.332056][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.335833][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.340867][ T5637] bridge_slave_0: entered allmulticast mode
[   65.345023][ T5637] bridge_slave_0: entered promiscuous mode
[   65.375009][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.377641][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.380639][ T5637] bridge_slave_1: entered allmulticast mode
[   65.383779][ T5637] bridge_slave_1: entered promiscuous mode
[   65.433873][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.456835][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.486207][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.489410][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.492083][ T5634] bridge_slave_0: entered allmulticast mode
[   65.495132][ T5634] bridge_slave_0: entered promiscuous mode
[   65.520854][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.524027][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.526963][ T5634] bridge_slave_1: entered allmulticast mode
[   65.530801][ T5634] bridge_slave_1: entered promiscuous mode
[   65.536146][ T5637] team0: Port device team_slave_0 added
[   65.552155][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.555016][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.557924][ T5638] bridge_slave_0: entered allmulticast mode
[   65.561746][ T5638] bridge_slave_0: entered promiscuous mode
[   65.578734][ T5637] team0: Port device team_slave_1 added
[   65.592777][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.595894][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.599256][ T5638] bridge_slave_1: entered allmulticast mode
[   65.602880][ T5638] bridge_slave_1: entered promiscuous mode
[   65.637372][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.641654][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.644506][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.655149][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.674292][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.678362][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.681738][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.692406][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.707612][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.713778][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.754849][ T5634] team0: Port device team_slave_0 added
[   65.779566][ T5634] team0: Port device team_slave_1 added
[   65.783158][ T5638] team0: Port device team_slave_0 added
[   65.791192][ T5637] hsr_slave_0: entered promiscuous mode
[   65.794414][ T5637] hsr_slave_1: entered promiscuous mode
[   65.810778][ T5638] team0: Port device team_slave_1 added
[   65.855846][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.858788][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.866995][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.872592][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.874879][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.883093][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.892237][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.894679][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.903259][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.907335][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.909695][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.917422][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.005215][ T5638] hsr_slave_0: entered promiscuous mode
[   66.008337][ T5638] hsr_slave_1: entered promiscuous mode
[   66.011536][ T5638] debugfs: 'hsr0' already exists in 'hsr'
[   66.014443][ T5638] Cannot create hsr debugfs directory
[   66.028144][ T5634] hsr_slave_0: entered promiscuous mode
[   66.030770][ T5634] hsr_slave_1: entered promiscuous mode
[   66.033020][ T5634] debugfs: 'hsr0' already exists in 'hsr'
[   66.035150][ T5634] Cannot create hsr debugfs directory
[   66.296081][ T5637] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.305303][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.308584][ T5637] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.315274][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.325484][ T5637] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.330718][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.333666][ T5637] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.338129][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.404288][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.417506][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.421258][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.427993][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.435200][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.443414][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.451061][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.460435][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.544092][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.552627][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.556186][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.563257][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.572143][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.578422][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.582713][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.589087][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.652868][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.691532][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   66.699588][   T55] Bluetooth: hci0: command tx timeout
[   66.706633][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.709432][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.726136][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.729178][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.740686][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.768257][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.771302][   T55] Bluetooth: hci2: command tx timeout
[   66.771363][ T5640] Bluetooth: hci1: command tx timeout
[   66.777341][ T5634] 8021q: adding VLAN 0 to HW filter on device team0
[   66.792318][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.794672][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.813364][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.815754][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.820072][ T5638] 8021q: adding VLAN 0 to HW filter on device team0
[   66.833159][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.835819][ T2272] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.855791][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.858080][ T2272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.174624][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.197367][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.240698][ T5637] veth0_vlan: entered promiscuous mode
[   67.248095][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.271355][ T5637] veth1_vlan: entered promiscuous mode
[   67.301622][ T5638] veth0_vlan: entered promiscuous mode
[   67.320499][ T5638] veth1_vlan: entered promiscuous mode
[   67.360614][ T5637] veth0_macvtap: entered promiscuous mode
[   67.365086][ T5634] veth0_vlan: entered promiscuous mode
[   67.370469][ T5637] veth1_macvtap: entered promiscuous mode
[   67.394452][ T5638] veth0_macvtap: entered promiscuous mode
[   67.398239][ T5634] veth1_vlan: entered promiscuous mode
[   67.408043][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.427881][ T5638] veth1_macvtap: entered promiscuous mode
[   67.435020][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.470727][ T5692] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.474611][ T5692] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.491809][ T5692] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.496544][ T5692] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.528853][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.549269][ T5634] veth0_macvtap: entered promiscuous mode
[   67.555536][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.566169][ T5634] veth1_macvtap: entered promiscuous mode
[   67.594447][ T5692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.601698][ T5692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.605574][ T5692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.634693][ T5692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.657500][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.678037][ T2272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.685747][ T2272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.705222][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.764230][ T5692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.768698][ T5692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.783567][ T5692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.793838][ T5692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.820253][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.824401][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.882245][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.905110][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.975487][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.984490][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.997447][ T5637] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.020849][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.029682][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.106897][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.125533][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.261245][ T5746] vivid-000: disconnect
[   68.275978][ T5745] vivid-000: reconnect
[   68.516328][ T5757] loop0: detected capacity change from 0 to 4096
[   68.599990][ T5760] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.693750][ T5757] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[   68.718965][ T5757] Remounting filesystem read-only
[   68.724609][ T5757] NILFS error (device loop0): nilfs_readdir: bad page in #2
[   68.779302][ T5640] Bluetooth: hci0: command tx timeout
[   68.850344][ T5640] Bluetooth: hci2: command tx timeout
[   68.852771][ T5640] Bluetooth: hci1: command tx timeout
[   68.934526][ T5769] loop0: detected capacity change from 0 to 512
[   69.025121][ T5769] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   69.031013][ T5769] EXT4-fs (loop0): 1 truncate cleaned up
[   69.038078][ T5769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.050114][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   69.120069][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.195166][ T5773] netlink: 'syz.0.13': attribute type 9 has an invalid length.
[   69.227552][    T9] usb 2-1: config 1 has an invalid interface number: 93 but max is 0
[   69.241625][    T9] usb 2-1: config 1 has no interface number 0
[   69.246451][    T9] usb 2-1: config 1 interface 93 has no altsetting 0
[   69.254146][    T9] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02
[   69.265452][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.565000][ T5783] loop0: detected capacity change from 0 to 128
[   69.567545][    T9] usb 2-1: string descriptor 0 read error: -71
[   69.609224][ T5783] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   69.617002][    T9] gl620a 2-1:1.93: probe with driver gl620a failed with error -22
[   69.628805][ T5783] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.658280][    T9] usb 2-1: USB disconnect, device number 2
[   69.715542][ T5634] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.793291][ T5792] netlink: 56 bytes leftover after parsing attributes in process `syz.0.20'.
[   69.797827][ T5792] netlink: 56 bytes leftover after parsing attributes in process `syz.0.20'.
[   69.847637][ T5795] netlink: 'syz.0.22': attribute type 1 has an invalid length.
[   69.864472][ T5795] netlink: 76 bytes leftover after parsing attributes in process `syz.0.22'.
[   70.151699][ T5807] loop1: detected capacity change from 0 to 512
[   70.156659][ T5807] =======================================================
[   70.156659][ T5807] WARNING: The mand mount option has been deprecated and
[   70.156659][ T5807]          and is ignored by this kernel. Remove the mand
[   70.156659][ T5807]          option from the mount to silence this warning.
[   70.156659][ T5807] =======================================================
[   70.177433][ T5807] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.28: bad orphan inode 15
[   70.183313][ T5807] loop1: lost filesystem error report for type 5 error -117
[   70.184000][ T5807] ext4_test_bit(bit=14, block=5) = 0
[   70.188861][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   70.188889][    C1] EXT4-fs (loop1): initial error at time 1787670275: ext4_orphan_get:1425
[   70.188926][    C1] EXT4-fs (loop1): last error at time 1787670275: ext4_orphan_get:1425
[   70.211775][ T5807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.417752][ T5812] loop0: detected capacity change from 0 to 32768
[   70.426945][ T5812] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.29 (5812)
[   70.479700][   T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   70.484308][ T5812] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.489644][ T5812] BTRFS info (device loop0): using crc32c checksum algorithm
[   70.557812][ T5812] BTRFS info (device loop0): enabling ssd optimizations
[   70.563545][ T5812] BTRFS info (device loop0): turning on flush-on-commit
[   70.567190][ T5812] BTRFS info (device loop0): enabling free space tree
[   70.570867][ T5812] BTRFS info (device loop0): enabling auto defrag
[   70.573706][ T5812] BTRFS info (device loop0): use lzo compression, level 1
[   70.576556][ T5812] BTRFS info (device loop0): max_inline set to 4096
[   70.654249][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.664669][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.673343][   T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.693000][   T32] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   70.699967][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.716687][   T32] usb 2-1: config 0 descriptor??
[   70.771032][ T5634] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.849777][   T55] Bluetooth: hci0: command tx timeout
[   70.930142][   T55] Bluetooth: hci1: command tx timeout
[   70.930235][ T5640] Bluetooth: hci2: command tx timeout
[   70.998670][  T989] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   71.146398][   T32] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description
[   71.150219][  T989] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.150955][   T32] plantronics 0003:047F:FFFF.0001: parse failed
[   71.155290][  T989] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   71.156987][   T32] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22
[   71.164639][  T989] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   71.169360][  T989] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   71.173956][  T989] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   71.177183][  T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.357191][ T5807] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.28: invalid fast symlink length 39
[   71.366506][   T32] usb 2-1: USB disconnect, device number 3
[   71.493238][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[   71.495355][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[   71.596936][   T32] usb 3-1: USB disconnect, device number 2
[   71.892695][ T5638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.179318][   T32] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   72.189510][ T5848] batadv_slave_1: entered promiscuous mode
[   72.193605][ T5847] batadv_slave_1: left promiscuous mode
[   72.277798][ T5854] loop2: detected capacity change from 0 to 128
[   72.328714][   T32] usb 2-1: Using ep0 maxpacket: 16
[   72.332781][   T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.336731][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   72.342220][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   72.348660][   T32] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   72.354209][   T32] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   72.367068][   T32] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   72.376924][   T32] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   72.380811][   T32] usb 2-1: Manufacturer: syz
[   72.387906][   T32] usb 2-1: config 0 descriptor??
[   72.640872][   T32] rc_core: IR keymap rc-hauppauge not found
[   72.648292][   T32] Registered IR keymap rc-empty
[   72.656542][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   72.678982][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   72.701573][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   72.707429][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input4
[   72.729991][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   72.758628][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   72.780037][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   72.798824][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   72.818799][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   73.108756][ T5640] Bluetooth: hci0: command tx timeout
[   73.111216][ T5640] Bluetooth: hci2: command tx timeout
[   73.114531][ T5640] Bluetooth: hci1: command tx timeout
[   73.345212][ T5870] netlink: 60 bytes leftover after parsing attributes in process `syz.2.48'.
[   73.475435][ T5875] vhci_hcd vhci_hcd.0: failed to lookup sock
[   73.590856][ T5879] loop2: detected capacity change from 0 to 8
[   73.631696][ T5879] SQUASHFS error: lzo decompression failed, data probably corrupt
[   73.636705][ T5879] SQUASHFS error: Failed to read block 0x91: -5
[   73.641355][ T5879] SQUASHFS error: Unable to read metadata cache entry [8f]
[   73.645428][ T5879] SQUASHFS error: Unable to read inode 0x11f
[   73.772782][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   73.789248][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   73.808679][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   73.828999][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   73.849533][   T32] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   73.870119][   T32] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[   73.874008][   T32] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   73.882550][   T32] usb 2-1: USB disconnect, device number 4
[   74.510612][ T5915] loop2: detected capacity change from 0 to 2048
[   74.517134][ T5915] NILFS (loop2): invalid segment: Inconsistency found
[   74.521250][ T5915] NILFS (loop2): trying rollback from an earlier position
[   74.533579][ T5915] NILFS (loop2): recovery complete
[   74.536220][ T5916] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.556618][ T5907] loop1: detected capacity change from 0 to 40427
[   74.576439][ T5907] F2FS-fs (loop1): build fault injection rate: 174
[   74.584982][ T5907] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   74.596675][ T5907] F2FS-fs (loop1): invalid crc value
[   74.706824][ T5907] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   74.714259][ T5907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   74.775646][ T5907] syz.1.63: attempt to access beyond end of device
[   74.775646][ T5907] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.830217][ T5638] syz-executor: attempt to access beyond end of device
[   74.830217][ T5638] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[   74.844349][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   74.844373][ T5638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.844387][ T5638] Call Trace:
[   74.844394][ T5638]  <TASK>
[   74.844399][ T5638]  dump_stack_lvl+0xe8/0x150
[   74.844423][ T5638]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   74.844445][ T5638]  f2fs_write_end_io+0x124b/0x1710
[   74.844476][ T5638]  __submit_merged_bio+0x258/0x6a0
[   74.844490][ T5638]  ? rcu_is_watching+0x15/0xb0
[   74.844512][ T5638]  __submit_merged_write_cond+0x3c9/0x4e0
[   74.844532][ T5638]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   74.844561][ T5638]  f2fs_write_data_pages+0x2a27/0x36f0
[   74.844578][ T5638]  ? __lock_acquire+0x6df/0x2e50
[   74.844616][ T5638]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.844661][ T5638]  ? __pfx_hlock_conflict+0x10/0x10
[   74.844677][ T5638]  ? __bfs+0x153/0x290
[   74.844692][ T5638]  ? __pfx_hlock_conflict+0x10/0x10
[   74.844721][ T5638]  ? lockdep_unlock+0x5d/0xd0
[   74.844734][ T5638]  ? __lock_acquire+0x14b9/0x2e50
[   74.844766][ T5638]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.844783][ T5638]  do_writepages+0x338/0x560
[   74.844807][ T5638]  ? do_raw_spin_unlock+0x4d/0x210
[   74.844823][ T5638]  filemap_fdatawrite+0x1e9/0x2f0
[   74.844844][ T5638]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   74.844918][ T5638]  ? do_raw_spin_unlock+0x4d/0x210
[   74.844936][ T5638]  f2fs_sync_dirty_inodes+0x30e/0x830
[   74.844963][ T5638]  f2fs_write_checkpoint+0xa3d/0x2710
[   74.844979][ T5638]  ? __lock_acquire+0x6df/0x2e50
[   74.845014][ T5638]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   74.845065][ T5638]  kill_f2fs_super+0x2f6/0x700
[   74.845086][ T5638]  ? __pfx_kill_f2fs_super+0x10/0x10
[   74.845111][ T5638]  ? call_rcu+0x64b/0x8b0
[   74.845128][ T5638]  ? lockdep_hardirqs_on+0x7a/0x110
[   74.845150][ T5638]  deactivate_locked_super+0xbc/0x130
[   74.845171][ T5638]  cleanup_mnt+0x3d3/0x460
[   74.845188][ T5638]  task_work_run+0x1d9/0x270
[   74.845208][ T5638]  ? __pfx_task_work_run+0x10/0x10
[   74.845232][ T5638]  exit_to_user_mode_loop+0x1fa/0x730
[   74.845248][ T5638]  ? rcu_is_watching+0x15/0xb0
[   74.845266][ T5638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.845280][ T5638]  do_syscall_64+0x353/0x580
[   74.845292][ T5638]  ? trace_irq_disable+0x3b/0x140
[   74.845311][ T5638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.845324][ T5638] RIP: 0033:0x7febe899f317
[   74.845338][ T5638] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   74.845348][ T5638] RSP: 002b:00007ffe1fc44b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   74.845363][ T5638] RAX: 0000000000000000 RBX: 00007febe8a34474 RCX: 00007febe899f317
[   74.845371][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1fc44c10
[   74.845404][ T5638] RBP: 00007ffe1fc44c10 R08: 00007ffe1fc45c10 R09: 00000000ffffffff
[   74.845413][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1fc45ca0
[   74.845420][ T5638] R13: 00007febe8a34474 R14: 00000000000123cd R15: 00007ffe1fc45ce0
[   74.845440][ T5638]  </TASK>
[   74.845502][ T5638] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   74.980252][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   74.980268][ T5638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.980274][ T5638] Call Trace:
[   74.980279][ T5638]  <TASK>
[   74.980283][ T5638]  dump_stack_lvl+0xe8/0x150
[   74.980330][ T5638]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   74.980349][ T5638]  f2fs_write_end_io+0x124b/0x1710
[   74.980384][ T5638]  __submit_merged_bio+0x258/0x6a0
[   74.980395][ T5638]  ? rcu_is_watching+0x15/0xb0
[   74.980415][ T5638]  __submit_merged_write_cond+0x3c9/0x4e0
[   74.980433][ T5638]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   74.980459][ T5638]  f2fs_write_data_pages+0x2a27/0x36f0
[   74.980472][ T5638]  ? __lock_acquire+0x6df/0x2e50
[   74.980507][ T5638]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.980553][ T5638]  ? __pfx_hlock_conflict+0x10/0x10
[   74.980566][ T5638]  ? __bfs+0x153/0x290
[   74.980578][ T5638]  ? __pfx_hlock_conflict+0x10/0x10
[   74.980604][ T5638]  ? lockdep_unlock+0x5d/0xd0
[   74.980614][ T5638]  ? __lock_acquire+0x14b9/0x2e50
[   74.980645][ T5638]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.980659][ T5638]  do_writepages+0x338/0x560
[   74.980680][ T5638]  ? do_raw_spin_unlock+0x4d/0x210
[   74.980694][ T5638]  filemap_fdatawrite+0x1e9/0x2f0
[   74.980711][ T5638]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   74.980756][ T5638]  ? do_raw_spin_unlock+0x4d/0x210
[   74.980769][ T5638]  f2fs_sync_dirty_inodes+0x30e/0x830
[   74.980794][ T5638]  f2fs_write_checkpoint+0xa3d/0x2710
[   74.980807][ T5638]  ? __lock_acquire+0x6df/0x2e50
[   74.980840][ T5638]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   74.980924][ T5638]  kill_f2fs_super+0x2f6/0x700
[   74.980945][ T5638]  ? __pfx_kill_f2fs_super+0x10/0x10
[   74.980966][ T5638]  ? call_rcu+0x64b/0x8b0
[   74.980981][ T5638]  ? lockdep_hardirqs_on+0x7a/0x110
[   74.981001][ T5638]  deactivate_locked_super+0xbc/0x130
[   74.981019][ T5638]  cleanup_mnt+0x3d3/0x460
[   74.981035][ T5638]  task_work_run+0x1d9/0x270
[   74.981054][ T5638]  ? __pfx_task_work_run+0x10/0x10
[   74.981078][ T5638]  exit_to_user_mode_loop+0x1fa/0x730
[   74.981093][ T5638]  ? rcu_is_watching+0x15/0xb0
[   74.981129][ T5638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.981141][ T5638]  do_syscall_64+0x353/0x580
[   74.981153][ T5638]  ? trace_irq_disable+0x3b/0x140
[   74.981170][ T5638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.981181][ T5638] RIP: 0033:0x7febe899f317
[   74.981194][ T5638] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   74.981203][ T5638] RSP: 002b:00007ffe1fc44b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   74.981216][ T5638] RAX: 0000000000000000 RBX: 00007febe8a34474 RCX: 00007febe899f317
[   74.981223][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1fc44c10
[   74.981229][ T5638] RBP: 00007ffe1fc44c10 R08: 00007ffe1fc45c10 R09: 00000000ffffffff
[   74.981236][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1fc45ca0
[   74.981242][ T5638] R13: 00007febe8a34474 R14: 00000000000123cd R15: 00007ffe1fc45ce0
[   74.981262][ T5638]  </TASK>
[   74.982441][ T5638] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   74.998445][ T5931] loop2: detected capacity change from 0 to 32768
[   75.588743][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   76.698574][    T9] usb 2-1: Using ep0 maxpacket: 32
[   76.703977][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.708418][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.711721][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   76.715961][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.721398][    T9] usb 2-1: config 0 descriptor??
[   76.997791][ T5951] dlm: no local IP address has been set
[   77.001336][ T5951] dlm: cannot start dlm midcomms -107
[   77.441410][ T5959] loop2: detected capacity change from 0 to 32768
[   77.640828][    T9] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   77.758123][ T5788] usb 2-1: USB disconnect, device number 5
[   78.212567][ T5973] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   78.260585][ T5975] loop2: detected capacity change from 0 to 512
[   78.270473][ T5975] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   78.278408][ T5975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002]
[   78.282125][ T5975] EXT4-fs (loop2): orphan cleanup on readonly fs
[   78.285644][ T5975] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.91: bg 0: block 361: padding at end of block bitmap is not set
[   78.294101][ T5975] loop2: lost filesystem error report for type 5 error -117
[   78.296737][ T5975] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   78.299924][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   78.299940][    C1] EXT4-fs (loop2): initial error at time 1787670284: ext4_validate_block_bitmap:441
[   78.299955][    C1] EXT4-fs (loop2): last error at time 1787670284: ext4_validate_block_bitmap:441
[   78.316821][ T5975] loop2: lost filesystem error report for type 5 error -117
[   78.317861][ T5975] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.91: attempt to clear invalid blocks 33619980 len 1
[   78.334566][ T5975] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   78.335353][ T5975] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.91: invalid indirect mapped block 1811939328 (level 0)
[   78.351034][ T5975] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   78.351284][ T5975] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.91: invalid indirect mapped block 2185560079 (level 1)
[   78.363394][ T5975] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   78.366133][ T5975] EXT4-fs (loop2): 1 truncate cleaned up
[   78.373452][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   78.418034][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   78.516252][ T5986] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   78.660735][   T35] audit: type=1800 audit(1787670284.412:2): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.101" name="max_speed" dev="configfs" ino=7087 res=0 errno=0
[   78.744595][ T5992] loop2: detected capacity change from 0 to 32768
[   78.908568][ T5788] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   79.039097][ T5788] usb 2-1: device descriptor read/64, error -71
[   79.118619][ T5449] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   79.278597][ T5449] usb 3-1: Using ep0 maxpacket: 8
[   79.278596][ T5788] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   79.283296][ T5449] usb 3-1: unable to get BOS descriptor or descriptor too short
[   79.288636][ T5449] usb 3-1: config 3 interface 0 has no altsetting 0
[   79.296048][ T5449] usb 3-1: New USB device found, idVendor=13d3, idProduct=3432, bcdDevice=7f.18
[   79.299864][ T5449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.303182][ T5449] usb 3-1: Product: syz
[   79.304875][ T5449] usb 3-1: Manufacturer: syz
[   79.306766][ T5449] usb 3-1: SerialNumber: syz
[   79.408874][ T5788] usb 2-1: device descriptor read/64, error -71
[   79.519886][ T5788] usb usb2-port1: attempt power cycle
[   79.539431][ T5449] usb 3-1: USB disconnect, device number 3
[   79.869412][ T5788] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   79.889710][ T5788] usb 2-1: device descriptor read/8, error -71
[   80.076131][ T6000] futex_wake_op: syz.2.103 tries to shift op by -1; fix this program
[   80.128982][ T5788] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[   80.150695][ T5788] usb 2-1: device descriptor read/8, error -71
[   80.259144][ T5788] usb usb2-port1: unable to enumerate USB device
[   80.264999][ T6013] loop2: detected capacity change from 0 to 4096
[   80.269884][ T6013] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   80.299931][ T6013] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   80.462843][ T6023] Zero length message leads to an empty skb
[   80.493429][ T6025] netlink: 52 bytes leftover after parsing attributes in process `syz.2.112'.
[   80.517502][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   81.188605][ T5788] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   81.346145][ T5788] usb 3-1: unable to get BOS descriptor or descriptor too short
[   81.361345][ T5788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   81.365023][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.368131][ T5788] usb 3-1: Product: syz
[   81.378697][ T5788] usb 3-1: Manufacturer: syz
[   81.381035][ T5788] usb 3-1: SerialNumber: syz
[   81.601567][ T5788] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   81.605810][ T5788] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc
[   81.626750][ T5788] usb 3-1: USB disconnect, device number 4
[   81.647801][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   81.745468][   T34] cfg80211: failed to load regulatory.db
[   81.747651][ T6082] tmpfs: Bad value for 'grpquota_block_hardlimit'
[   81.800457][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'.
[   81.856669][ T6086] loop1: detected capacity change from 0 to 256
[   81.894343][ T6086] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   82.466665][ T6108] loop2: detected capacity change from 0 to 512
[   82.474306][ T6108] EXT4-fs: Ignoring removed mblk_io_submit option
[   82.486044][ T6108] EXT4-fs: Ignoring removed nobh option
[   82.525018][ T6108] 
[   82.526097][ T6108] ======================================================
[   82.528839][ T6108] WARNING: possible circular locking dependency detected
[   82.531606][ T6108] syzkaller #0 Not tainted
[   82.533484][ T6108] ------------------------------------------------------
[   82.536270][ T6108] syz.2.141/6108 is trying to acquire lock:
[   82.538650][ T6108] ffff888115c26c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[   82.542528][ T6108] 
[   82.542528][ T6108] but task is already holding lock:
[   82.545395][ T6108] ffff888115c20640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0
[   82.549008][ T6108] 
[   82.549008][ T6108] which lock already depends on the new lock.
[   82.549008][ T6108] 
[   82.553037][ T6108] 
[   82.553037][ T6108] the existing dependency chain (in reverse order) is:
[   82.556520][ T6108] 
[   82.556520][ T6108] -> #1 (sb_internal){.+.+}-{0:0}:
[   82.559445][ T6108]        percpu_down_read_internal+0x48/0x1c0
[   82.561971][ T6108]        ext4_evict_inode+0x426/0x10c0
[   82.564253][ T6108]        evict+0x624/0xb50
[   82.566063][ T6108]        ext4_ext_migrate+0xddf/0x10e0
[   82.568168][ T6108]        ext4_ioctl+0x2346/0x4b70
[   82.570225][ T6108]        __se_sys_ioctl+0xfc/0x170
[   82.572235][ T6108]        do_syscall_64+0x174/0x580
[   82.574289][ T6108]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.576866][ T6108] 
[   82.576866][ T6108] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[   82.580354][ T6108]        __lock_acquire+0x15ff/0x2e50
[   82.582572][ T6108]        lock_acquire+0x115/0x350
[   82.584577][ T6108]        percpu_down_read_internal+0x48/0x1c0
[   82.586537][ T6108]        ext4_writepages+0x205/0x3b0
[   82.588180][ T6108]        do_writepages+0x338/0x560
[   82.589933][ T6108]        __writeback_single_inode+0x12e/0xf90
[   82.591834][ T6108]        writeback_single_inode+0x4ef/0xe70
[   82.593917][ T6108]        write_inode_now+0x1c2/0x290
[   82.595828][ T6108]        iput+0x98b/0xf00
[   82.597301][ T6108]        ext4_xattr_block_set+0x1b0c/0x2a80
[   82.599097][ T6108]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[   82.601096][ T6108]        __ext4_expand_extra_isize+0x30d/0x400
[   82.603033][ T6108]        __ext4_mark_inode_dirty+0x455/0x700
[   82.605372][ T6108]        ext4_evict_inode+0x976/0x10c0
[   82.607223][ T6108]        evict+0x624/0xb50
[   82.608663][ T6108]        ext4_orphan_cleanup+0xc7a/0x14c0
[   82.610624][ T6108]        ext4_fill_super+0x5cb4/0x65c0
[   82.612461][ T6108]        get_tree_bdev_flags+0x430/0x4f0
[   82.614229][ T6108]        vfs_get_tree+0x92/0x2a0
[   82.615881][ T6108]        do_new_mount+0x319/0xdc0
[   82.617436][ T6108]        __se_sys_mount+0x31d/0x420
[   82.619034][ T6108]        do_syscall_64+0x174/0x580
[   82.620651][ T6108]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.622795][ T6108] 
[   82.622795][ T6108] other info that might help us debug this:
[   82.622795][ T6108] 
[   82.625970][ T6108]  Possible unsafe locking scenario:
[   82.625970][ T6108] 
[   82.628360][ T6108]        CPU0                    CPU1
[   82.630201][ T6108]        ----                    ----
[   82.632072][ T6108]   rlock(sb_internal);
[   82.633404][ T6108]                                lock(&sbi->s_writepages_rwsem);
[   82.635960][ T6108]                                lock(sb_internal);
[   82.638181][ T6108]   rlock(&sbi->s_writepages_rwsem);
[   82.639948][ T6108] 
[   82.639948][ T6108]  *** DEADLOCK ***
[   82.639948][ T6108] 
[   82.642973][ T6108] 3 locks held by syz.2.141/6108:
[   82.644929][ T6108]  #0: ffff888115c200d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: sget_fc+0x938/0x1900
[   82.648731][ T6108]  #1: ffff888115c20640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0
[   82.652056][ T6108]  #2: ffff8881b59e67e0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x700
[   82.655200][ T6108] 
[   82.655200][ T6108] stack backtrace:
[   82.657029][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) 
[   82.657039][ T6108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.657044][ T6108] Call Trace:
[   82.657048][ T6108]  <TASK>
[   82.657052][ T6108]  dump_stack_lvl+0xe8/0x150
[   82.657065][ T6108]  print_circular_bug+0x2e2/0x300
[   82.657079][ T6108]  check_noncircular+0x12f/0x150
[   82.657091][ T6108]  __lock_acquire+0x15ff/0x2e50
[   82.657105][ T6108]  lock_acquire+0x115/0x350
[   82.657114][ T6108]  ? ext4_writepages+0x205/0x3b0
[   82.657127][ T6108]  percpu_down_read_internal+0x48/0x1c0
[   82.657137][ T6108]  ? ext4_writepages+0x205/0x3b0
[   82.657147][ T6108]  ext4_writepages+0x205/0x3b0
[   82.657158][ T6108]  ? __pfx_ext4_writepages+0x10/0x10
[   82.657172][ T6108]  ? do_raw_spin_unlock+0x4d/0x210
[   82.657180][ T6108]  ? __pfx_ext4_writepages+0x10/0x10
[   82.657191][ T6108]  do_writepages+0x338/0x560
[   82.657201][ T6108]  ? do_raw_spin_lock+0x12b/0x2f0
[   82.657209][ T6108]  __writeback_single_inode+0x12e/0xf90
[   82.657220][ T6108]  writeback_single_inode+0x4ef/0xe70
[   82.657229][ T6108]  write_inode_now+0x1c2/0x290
[   82.657237][ T6108]  ? __pfx_write_inode_now+0x10/0x10
[   82.657252][ T6108]  ? do_raw_spin_unlock+0x4d/0x210
[   82.657259][ T6108]  iput+0x98b/0xf00
[   82.657270][ T6108]  ext4_xattr_block_set+0x1b0c/0x2a80
[   82.657284][ T6108]  ? __pfx_check_xattrs+0x10/0x10
[   82.657292][ T6108]  ? xattr_find_entry+0x126/0x280
[   82.657301][ T6108]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[   82.657311][ T6108]  ? ext4_xattr_block_find+0x2a1/0x320
[   82.657321][ T6108]  ext4_expand_extra_isize_ea+0x1342/0x1e70
[   82.657336][ T6108]  __ext4_expand_extra_isize+0x30d/0x400
[   82.657351][ T6108]  __ext4_mark_inode_dirty+0x455/0x700
[   82.657360][ T6108]  ext4_evict_inode+0x976/0x10c0
[   82.657368][ T6108]  ? __pfx_ext4_evict_inode+0x10/0x10
[   82.657375][ T6108]  ? do_raw_spin_unlock+0x4d/0x210
[   82.657382][ T6108]  ? __pfx_ext4_evict_inode+0x10/0x10
[   82.657389][ T6108]  evict+0x624/0xb50
[   82.657397][ T6108]  ? __pfx_evict+0x10/0x10
[   82.657404][ T6108]  ? do_raw_spin_unlock+0x4d/0x210
[   82.657412][ T6108]  ? _raw_spin_unlock+0x28/0x50
[   82.657422][ T6108]  ? iput+0xb84/0xf00
[   82.657433][ T6108]  ext4_orphan_cleanup+0xc7a/0x14c0
[   82.657441][ T6108]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   82.657450][ T6108]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[   82.657457][ T6108]  ? ext4_register_li_request+0x640/0x720
[   82.657464][ T6108]  ? errseq_check_and_advance+0x66/0x120
[   82.657476][ T6108]  ext4_fill_super+0x5cb4/0x65c0
[   82.657490][ T6108]  ? __pfx_ext4_fill_super+0x10/0x10
[   82.657501][ T6108]  ? snprintf+0xe8/0x140
[   82.657512][ T6108]  ? __pfx_snprintf+0x10/0x10
[   82.657521][ T6108]  ? set_blocksize+0x1c9/0x440
[   82.657531][ T6108]  ? sb_set_blocksize+0x155/0x240
[   82.657540][ T6108]  ? setup_bdev_super+0x4c1/0x5b0
[   82.657547][ T6108]  get_tree_bdev_flags+0x430/0x4f0
[   82.657555][ T6108]  ? __pfx_ext4_fill_super+0x10/0x10
[   82.657564][ T6108]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   82.657573][ T6108]  vfs_get_tree+0x92/0x2a0
[   82.657580][ T6108]  do_new_mount+0x319/0xdc0
[   82.657592][ T6108]  ? __pfx_do_new_mount+0x10/0x10
[   82.657601][ T6108]  ? ns_capable+0x89/0xe0
[   82.657609][ T6108]  ? path_mount+0x647/0x1040
[   82.657618][ T6108]  ? user_path_at+0xd4/0x160
[   82.657628][ T6108]  __se_sys_mount+0x31d/0x420
[   82.657638][ T6108]  ? __pfx___se_sys_mount+0x10/0x10
[   82.657648][ T6108]  ? __x64_sys_mount+0x20/0xc0
[   82.657657][ T6108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.657664][ T6108]  do_syscall_64+0x174/0x580
[   82.657671][ T6108]  ? trace_irq_disable+0x3b/0x140
[   82.657680][ T6108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.657688][ T6108] RIP: 0033:0x7f851379f34a
[   82.657697][ T6108] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.657704][ T6108] RSP: 002b:00007f85145c8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   82.657712][ T6108] RAX: ffffffffffffffda RBX: 00007f85145c8ee0 RCX: 00007f851379f34a
[   82.657718][ T6108] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007f85145c8ea0
[   82.657722][ T6108] RBP: 0000200000000180 R08: 00007f85145c8ee0 R09: 0000000000800718
[   82.657727][ T6108] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000080
[   82.657731][ T6108] R13: 00007f85145c8ea0 R14: 00000000000004a7 R15: 000000000000002c
[   82.657739][ T6108]  </TASK>
[   82.809273][ T6108] ------------[ cut here ]------------
[   82.811673][ T6108] EA inode 11 i_nlink=1026
[   82.811687][ T6108] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4cc/0x590, CPU#1: syz.2.141/6108
[   82.817465][ T6108] Modules linked in:
[   82.819383][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) 
[   82.823171][ T6108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.826980][ T6108] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590
[   82.829191][ T6108] Code: 08 4c 89 e7 e8 15 12 93 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 25 1e 2f 09 44 89 e9 80 e1 07 80
[   82.835852][ T6108] RSP: 0018:ffffc90007507120 EFLAGS: 00010246
[   82.837938][ T6108] RAX: 0000000000000000 RBX: ffffffff905ec950 RCX: dffffc0000000000
[   82.840948][ T6108] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff905ec950
[   82.843929][ T6108] RBP: ffffc90007507218 R08: ffff8881b59e4f2f R09: 1ffff11036b3c9e5
[   82.846792][ T6108] R10: dffffc0000000000 R11: ffffed1036b3c9e6 R12: 000000000000000b
[   82.850116][ T6108] R13: ffff8881b59e4d88 R14: 0000000000000000 R15: 1ffff11036b3c9b1
[   82.853227][ T6108] FS:  00007f85145c96c0(0000) GS:ffff8882a8f49000(0000) knlGS:0000000000000000
[   82.856672][ T6108] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   82.859359][ T6108] CR2: 00007f851384de68 CR3: 000000010d93a000 CR4: 00000000000006f0
[   82.862079][ T6108] Call Trace:
[   82.863328][ T6108]  <TASK>
[   82.864382][ T6108]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[   82.866467][ T6108]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[   82.869023][ T6108]  ? ext4_xattr_block_set+0x1c19/0x2a80
[   82.870910][ T6108]  ? ext4_xattr_inode_iget+0x3e7/0x600
[   82.872967][ T6108]  ext4_xattr_set_entry+0xb19/0x1ed0
[   82.875095][ T6108]  ext4_xattr_ibody_set+0x262/0x710
[   82.877161][ T6108]  ext4_expand_extra_isize_ea+0x138c/0x1e70
[   82.879571][ T6108]  __ext4_expand_extra_isize+0x30d/0x400
[   82.881772][ T6108]  __ext4_mark_inode_dirty+0x455/0x700
[   82.883936][ T6108]  ext4_evict_inode+0x976/0x10c0
[   82.885887][ T6108]  ? __pfx_ext4_evict_inode+0x10/0x10
[   82.887961][ T6108]  ? do_raw_spin_unlock+0x4d/0x210
[   82.890046][ T6108]  ? __pfx_ext4_evict_inode+0x10/0x10
[   82.892150][ T6108]  evict+0x624/0xb50
[   82.893697][ T6108]  ? __pfx_evict+0x10/0x10
[   82.895461][ T6108]  ? do_raw_spin_unlock+0x4d/0x210
[   82.897499][ T6108]  ? _raw_spin_unlock+0x28/0x50
[   82.899568][ T6108]  ? iput+0xb84/0xf00
[   82.901172][ T6108]  ext4_orphan_cleanup+0xc7a/0x14c0
[   82.903198][ T6108]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   82.905561][ T6108]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[   82.907763][ T6108]  ? ext4_register_li_request+0x640/0x720
[   82.910071][ T6108]  ? errseq_check_and_advance+0x66/0x120
[   82.911945][ T6108]  ext4_fill_super+0x5cb4/0x65c0
[   82.913535][ T6108]  ? __pfx_ext4_fill_super+0x10/0x10
[   82.915235][ T6108]  ? snprintf+0xe8/0x140
[   82.916561][ T6108]  ? __pfx_snprintf+0x10/0x10
[   82.918037][ T6108]  ? set_blocksize+0x1c9/0x440
[   82.919580][ T6108]  ? sb_set_blocksize+0x155/0x240
[   82.921169][ T6108]  ? setup_bdev_super+0x4c1/0x5b0
[   82.922712][ T6108]  get_tree_bdev_flags+0x430/0x4f0
[   82.924316][ T6108]  ? __pfx_ext4_fill_super+0x10/0x10
[   82.925956][ T6108]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   82.927702][ T6108]  vfs_get_tree+0x92/0x2a0
[   82.929201][ T6108]  do_new_mount+0x319/0xdc0
[   82.930550][ T6108]  ? __pfx_do_new_mount+0x10/0x10
[   82.932121][ T6108]  ? ns_capable+0x89/0xe0
[   82.933469][ T6108]  ? path_mount+0x647/0x1040
[   82.934910][ T6108]  ? user_path_at+0xd4/0x160
[   82.936342][ T6108]  __se_sys_mount+0x31d/0x420
[   82.937795][ T6108]  ? __pfx___se_sys_mount+0x10/0x10
[   82.939526][ T6108]  ? __x64_sys_mount+0x20/0xc0
[   82.941023][ T6108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.942914][ T6108]  do_syscall_64+0x174/0x580
[   82.944347][ T6108]  ? trace_irq_disable+0x3b/0x140
[   82.945908][ T6108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.947711][ T6108] RIP: 0033:0x7f851379f34a
[   82.949418][ T6108] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.955556][ T6108] RSP: 002b:00007f85145c8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   82.958178][ T6108] RAX: ffffffffffffffda RBX: 00007f85145c8ee0 RCX: 00007f851379f34a
[   82.960877][ T6108] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007f85145c8ea0
[   82.963566][ T6108] RBP: 0000200000000180 R08: 00007f85145c8ee0 R09: 0000000000800718
[   82.965963][ T6108] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000080
[   82.968490][ T6108] R13: 00007f85145c8ea0 R14: 00000000000004a7 R15: 000000000000002c
[   82.970957][ T6108]  </TASK>
[   82.971929][ T6108] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   82.974171][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) 
[   82.977295][ T6108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.981133][ T6108] Call Trace:
[   82.982458][ T6108]  <TASK>
[   82.983645][ T6108]  vpanic+0x56c/0xa60
[   82.985198][ T6108]  ? __pfx__printk+0x10/0x10
[   82.986965][ T6108]  ? __pfx_vpanic+0x10/0x10
[   82.988689][ T6108]  ? is_bpf_text_address+0x292/0x2b0
[   82.990756][ T6108]  ? is_bpf_text_address+0x26/0x2b0
[   82.992757][ T6108]  panic+0xc5/0xd0
[   82.994380][ T6108]  ? __pfx_panic+0x10/0x10
[   82.996184][ T6108]  __warn+0x315/0x4c0
[   82.997754][ T6108]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[   83.000087][ T6108]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[   83.002445][ T6108]  __report_bug+0x276/0x570
[   83.004224][ T6108]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[   83.006365][ T6108]  ? __pfx___report_bug+0x10/0x10
[   83.008318][ T6108]  ? __ext4_get_inode_loc+0x6b4/0xf40
[   83.010390][ T6108]  ? set_normalized_timespec64+0xf0/0x1a0
[   83.012589][ T6108]  ? __ext4_journal_get_write_access+0x84/0x590
[   83.014999][ T6108]  report_bug_entry+0x19a/0x290
[   83.016922][ T6108]  ? ext4_xattr_inode_update_ref+0x50c/0x590
[   83.019172][ T6108]  ? ext4_xattr_inode_update_ref+0x511/0x590
[   83.021491][ T6108]  handle_bug+0xce/0x200
[   83.023164][ T6108]  exc_invalid_op+0x1a/0x50
[   83.024943][ T6108]  asm_exc_invalid_op+0x1a/0x20
[   83.026841][ T6108] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590
[   83.029341][ T6108] Code: 08 4c 89 e7 e8 15 12 93 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 25 1e 2f 09 44 89 e9 80 e1 07 80
[   83.036337][ T6108] RSP: 0018:ffffc90007507120 EFLAGS: 00010246
[   83.038245][ T6108] RAX: 0000000000000000 RBX: ffffffff905ec950 RCX: dffffc0000000000
[   83.040863][ T6108] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff905ec950
[   83.043671][ T6108] RBP: ffffc90007507218 R08: ffff8881b59e4f2f R09: 1ffff11036b3c9e5
[   83.046754][ T6108] R10: dffffc0000000000 R11: ffffed1036b3c9e6 R12: 000000000000000b
[   83.049860][ T6108] R13: ffff8881b59e4d88 R14: 0000000000000000 R15: 1ffff11036b3c9b1
[   83.052900][ T6108]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[   83.054858][ T6108]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[   83.056914][ T6108]  ? ext4_xattr_block_set+0x1c19/0x2a80
[   83.058887][ T6108]  ? ext4_xattr_inode_iget+0x3e7/0x600
[   83.060676][ T6108]  ext4_xattr_set_entry+0xb19/0x1ed0
[   83.062549][ T6108]  ext4_xattr_ibody_set+0x262/0x710
[   83.064258][ T6108]  ext4_expand_extra_isize_ea+0x138c/0x1e70
[   83.066183][ T6108]  __ext4_expand_extra_isize+0x30d/0x400
[   83.067974][ T6108]  __ext4_mark_inode_dirty+0x455/0x700
[   83.069695][ T6108]  ext4_evict_inode+0x976/0x10c0
[   83.071262][ T6108]  ? __pfx_ext4_evict_inode+0x10/0x10
[   83.073030][ T6108]  ? do_raw_spin_unlock+0x4d/0x210
[   83.074697][ T6108]  ? __pfx_ext4_evict_inode+0x10/0x10
[   83.076412][ T6108]  evict+0x624/0xb50
[   83.077680][ T6108]  ? __pfx_evict+0x10/0x10
[   83.079092][ T6108]  ? do_raw_spin_unlock+0x4d/0x210
[   83.080715][ T6108]  ? _raw_spin_unlock+0x28/0x50
[   83.082283][ T6108]  ? iput+0xb84/0xf00
[   83.083516][ T6108]  ext4_orphan_cleanup+0xc7a/0x14c0
[   83.085116][ T6108]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   83.086995][ T6108]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[   83.088728][ T6108]  ? ext4_register_li_request+0x640/0x720
[   83.090539][ T6108]  ? errseq_check_and_advance+0x66/0x120
[   83.092269][ T6108]  ext4_fill_super+0x5cb4/0x65c0
[   83.093846][ T6108]  ? __pfx_ext4_fill_super+0x10/0x10
[   83.095515][ T6108]  ? snprintf+0xe8/0x140
[   83.096971][ T6108]  ? __pfx_snprintf+0x10/0x10
[   83.098881][ T6108]  ? set_blocksize+0x1c9/0x440
[   83.100677][ T6108]  ? sb_set_blocksize+0x155/0x240
[   83.102316][ T6108]  ? setup_bdev_super+0x4c1/0x5b0
[   83.103891][ T6108]  get_tree_bdev_flags+0x430/0x4f0
[   83.105530][ T6108]  ? __pfx_ext4_fill_super+0x10/0x10
[   83.107225][ T6108]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   83.109005][ T6108]  vfs_get_tree+0x92/0x2a0
[   83.110413][ T6108]  do_new_mount+0x319/0xdc0
[   83.111869][ T6108]  ? __pfx_do_new_mount+0x10/0x10
[   83.113591][ T6108]  ? ns_capable+0x89/0xe0
[   83.115291][ T6108]  ? path_mount+0x647/0x1040
[   83.117143][ T6108]  ? user_path_at+0xd4/0x160
[   83.118777][ T6108]  __se_sys_mount+0x31d/0x420
[   83.120333][ T6108]  ? __pfx___se_sys_mount+0x10/0x10
[   83.122014][ T6108]  ? __x64_sys_mount+0x20/0xc0
[   83.123532][ T6108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.125465][ T6108]  do_syscall_64+0x174/0x580
[   83.126991][ T6108]  ? trace_irq_disable+0x3b/0x140
[   83.128584][ T6108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.130466][ T6108] RIP: 0033:0x7f851379f34a
[   83.131891][ T6108] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.137865][ T6108] RSP: 002b:00007f85145c8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   83.140459][ T6108] RAX: ffffffffffffffda RBX: 00007f85145c8ee0 RCX: 00007f851379f34a
[   83.142929][ T6108] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007f85145c8ea0
[   83.145396][ T6108] RBP: 0000200000000180 R08: 00007f85145c8ee0 R09: 0000000000800718
[   83.147867][ T6108] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000080
[   83.150347][ T6108] R13: 00007f85145c8ea0 R14: 00000000000004a7 R15: 000000000000002c
[   83.152851][ T6108]  </TASK>
[   83.154620][ T6108] Kernel Offset: disabled
[   83.156017][ T6108] Rebooting in 86400 seconds..
