last executing test programs:

11m28.02354505s ago: executing program 32 (id=314):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

10m47.598140971s ago: executing program 33 (id=623):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100))

10m11.969438088s ago: executing program 34 (id=1253):
r0 = socket(0x10, 0x803, 0x0)
getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f0000000380))

10m10.413266015s ago: executing program 35 (id=1264):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", <r6=>0xffffffffffffffff})
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r6, <r9=>0xffffffffffffffff})
ppoll(&(0x7f0000000000)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0)

8m57.639807059s ago: executing program 36 (id=2072):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111cb00000000008510000002000000850000000000000095000000000000009500b0059d350000f8eb70c3d9330b16491e095815635bf7490c180e3be703966bd8fdc277008531ccb9d9ae8dc9e78d9dc5311486fd1d2bfab99b08b4d46852f103d4ed539d04b034d645e2ea69674b1749efdc6a03ab8d5c3d2a2ed722271db8f4b166d4a579abbfc27974"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)

8m31.008910634s ago: executing program 37 (id=2368):
r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r0, r1, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x80, 0x100, 0x2, 0x335}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r4, 0x0, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000000c0), 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x30}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
getgroups(0x3ffffffffffffc57, &(0x7f0000001200)=[0x0, 0xee01, 0x0])
connect$nfc_raw(r3, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10)

8m8.484679425s ago: executing program 38 (id=2670):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)

7m52.416306639s ago: executing program 39 (id=2933):
r0 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$invalidate(0x15, r0)
add_key(&(0x7f00000000c0)='encrypted\x00', 0x0, 0x0, 0x0, r0)

7m49.368380413s ago: executing program 40 (id=2961):
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)

7m44.715068345s ago: executing program 41 (id=3004):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x9c}}, 0x0)

7m4.705230765s ago: executing program 42 (id=3540):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r2, 0x0, 0x0}, 0x10)

7m1.942357599s ago: executing program 3 (id=3583):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3)

7m1.87247511s ago: executing program 3 (id=3584):
r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40300)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={"ab988255", 0x90, 0x6, 0x1, 0x4, 0x8001, "085815a0c4ecff63d44c0e70da9e54", "444ecf5c", "d4abb482", "2fe85f5c", ["0b59f8c11acdd3d69146606e", "4ad94e38f6991ce6d949b00d", "a9c7ec65bdc7de02b7d7f404", "95ffcc82157be3c5235cf170"]})

7m1.87215009s ago: executing program 3 (id=3585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

7m1.732783061s ago: executing program 3 (id=3586):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

7m1.724212201s ago: executing program 3 (id=3587):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003c00000095"], &(0x7f0000000240)='GPL\x00', 0x4}, 0x94)

7m0.233471854s ago: executing program 3 (id=3607):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/6, 0x6}], 0x1)

7m0.129507801s ago: executing program 43 (id=3607):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/6, 0x6}], 0x1)

6m39.362264742s ago: executing program 4 (id=3872):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

6m39.36210854s ago: executing program 4 (id=3873):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x280008a, &(0x7f000001c380)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c636f6465706167653d3837342c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c726f6469722c73686f72746e616d653d77696e6e742c646973636172642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d697865642c726f6469722c7569643d6e4ad8c43b1100c0344de5741a26aab12236c332332194bd77ef64fb4717db829730779da1ecad20a6cc9fce05bebfe6069c2be726472ef871d8ee192966e4932b15af666d4b1e6276e99d45706129bb5bd87be3c0c495d72155b0f4478eb0e8043c0799390cf1371a63f7eba9c846d0a0d12e041671ac7fc36b3d9ab0da8935c15000f2aadd2023d0122b2172a54dbef3f19d0912c8ec28868e8c957de4682b9578d4a642112b0082c497e263b2f17efe44900d41a04365d3a00ef997ff6464de4a454ca7c273d7a059038c6770931336f89068425b84a8ea1d81cc84a8cc4631c746", @ANYRESHEX=0x0, @ANYRESHEX=0x0], 0x97, 0x2b3, &(0x7f0000000840)="$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")
mount(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x204400d, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x103)

6m39.29357172s ago: executing program 4 (id=3874):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0)

6m39.293410138s ago: executing program 4 (id=3875):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})

6m39.237507296s ago: executing program 4 (id=3876):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0}, 0x94)

6m38.082480953s ago: executing program 4 (id=3887):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0x1)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f00000003c0)={0xa, 0x4e24, 0x1, @loopback, 0x3}, 0x1c)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7f, 0xc1, 0x0, 0x0, 0x1, 0x7f, 0xffffffec, 0x8000028, 0xffffffff, 0x0})

6m38.046873918s ago: executing program 44 (id=3887):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0x1)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f00000003c0)={0xa, 0x4e24, 0x1, @loopback, 0x3}, 0x1c)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7f, 0xc1, 0x0, 0x0, 0x1, 0x7f, 0xffffffec, 0x8000028, 0xffffffff, 0x0})

5m4.092123283s ago: executing program 0 (id=5155):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

5m4.030882804s ago: executing program 0 (id=5157):
recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0)

5m4.03048924s ago: executing program 0 (id=5159):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x1, 0xfffffc01}, 0x400, "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"}, 0x418})

5m3.96960405s ago: executing program 0 (id=5161):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]})
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

5m3.855214051s ago: executing program 0 (id=5169):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2)

5m3.640777894s ago: executing program 0 (id=5175):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)

5m3.588958649s ago: executing program 45 (id=5175):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)

3m11.263249249s ago: executing program 7 (id=7100):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4)
syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0)

3m11.175262376s ago: executing program 7 (id=7102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, 0x0, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x50800}, 0x0)

3m11.116934686s ago: executing program 7 (id=7103):
mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x5c}, {@metacopy_off}]})

3m11.116661653s ago: executing program 7 (id=7104):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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")
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100))

3m11.005711789s ago: executing program 7 (id=7105):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m10.727410301s ago: executing program 7 (id=7106):
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
fallocate(r0, 0x0, 0x400000000000000, 0x7)

3m10.655193246s ago: executing program 46 (id=7106):
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
fallocate(r0, 0x0, 0x400000000000000, 0x7)

2m39.936742047s ago: executing program 5 (id=7604):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m39.819937996s ago: executing program 5 (id=7605):
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8)
socket$rxrpc(0x21, 0x2, 0x2)
r0 = getpid()
sysfs$2(0x2, 0x80000001, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
process_mrelease(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000680)="adcd0e9a3fc364961ed0e41b0cd69500e2ec785e49cdeb1d7c17e785cc145057b46a35d570830c5a86e5fd40b7ec8d03e3dc83b955da225ce2866f27529bc455389d0eb2202be1e65e0091b0182f77b4f02fa951f3f7cb6c2abb629f56cf7290d94eb21e4c5b9837c68321aa127c1b51f244bdcf14306f6e83838dc7908c724580ec7fe1fe802d9ba76ecf7b53e1b3e8df2a84585a6b6e470a054452d6ee88617d", 0xa1)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000400)={0xa58, {{0x2, 0x4e23, @loopback}}}, 0x88)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r5, 0x104, 0x4b264316b88a3841, 0x0, &(0x7f00000000c0))
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4}, 0xe)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={r7, 0x5e6e5432}, &(0x7f0000000080)=0x8)
read$alg(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_io_uring_setup(0xe3e, &(0x7f0000000600)={0x0, 0xa9c8, 0x400, 0x2}, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r8, 0x0, 0x0, 0x7c, 0x5, 0x0, {0x0, r9, r8}})

2m38.972974755s ago: executing program 5 (id=7617):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x28)

2m38.866237888s ago: executing program 5 (id=7618):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

2m38.606979289s ago: executing program 5 (id=7619):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x1, @local, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)

2m38.396876284s ago: executing program 5 (id=7620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

2m38.344070575s ago: executing program 47 (id=7620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

2m5.717632814s ago: executing program 8 (id=8135):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)})

2m5.70937536s ago: executing program 8 (id=8136):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x801, &(0x7f00000002c0)=ANY=[], 0x1, 0x447e, &(0x7f0000004480)="$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")

2m5.480085549s ago: executing program 8 (id=8142):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x2c8ad000)

2m5.475401105s ago: executing program 8 (id=8145):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8e7})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0)

2m5.412396275s ago: executing program 8 (id=8148):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0x5, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10)
setsockopt$MRT_INIT(r0, 0x0, 0x5, 0x0, 0x0)

2m5.196462425s ago: executing program 8 (id=8149):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x6f2, &(0x7f0000000ac0)="$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")
read$msr(0xffffffffffffffff, 0x0, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x100003)

2m5.173947782s ago: executing program 48 (id=8149):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x6f2, &(0x7f0000000ac0)="$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")
read$msr(0xffffffffffffffff, 0x0, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x100003)

29.227953768s ago: executing program 2 (id=9676):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x0, 0x400)

29.154763207s ago: executing program 2 (id=9677):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x4, 0xad7, &(0x7f0000001900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@bsdgroups}, {@inlinecrypt}, {@nodioread_nolock}, {@test_dummy_encryption}, {@oldalloc}, {@quota}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbc9, &(0x7f0000001740)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x40006)

29.104970024s ago: executing program 2 (id=9678):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000105c0)='./file0\x00', 0x0, &(0x7f0000010600)=ANY=[@ANYBLOB='\x00'], 0x1, 0x105a8, &(0x7f0000020c00)="$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")
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)

28.714969445s ago: executing program 2 (id=9680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r1, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000)

28.413741837s ago: executing program 2 (id=9685):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)

28.413156626s ago: executing program 2 (id=9686):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0005"], 0x34}}, 0x0)

13.398225714s ago: executing program 49 (id=9686):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0005"], 0x34}}, 0x0)

1.980155432s ago: executing program 1 (id=10030):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000300)={0x4000001, 0xffffb1c4})
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000})
close(r0)

1.920030359s ago: executing program 1 (id=10031):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0xf, 0x31, 0x20000d, 0x16, 0xb, 0x63, 0x4, 0xb5, 0x1})

1.91987403s ago: executing program 1 (id=10032):
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="0c5e00871201020301090212000100ef00000904500000a34280"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a9000070d"], 0x0}, 0x0)

1.379636096s ago: executing program 1 (id=10046):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sys_enter\x00', r0, 0x0, 0x2}, 0x18)

1.37925974s ago: executing program 1 (id=10047):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x2})
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r0, 0xffffffffffffffff, 0x0)

1.377666272s ago: executing program 1 (id=10048):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x4000000e)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x6)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(0xffffffffffffffff, r3, 0x3, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

560.475762ms ago: executing program 9 (id=10060):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

450.123477ms ago: executing program 9 (id=10063):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0)

449.9846ms ago: executing program 9 (id=10064):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x81, 0xffffffff})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r0, 0x5600, &(0x7f00000001c0)=""/201)

449.787756ms ago: executing program 6 (id=10065):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7cb, &(0x7f0000000980)={&(0x7f0000000100)={{@hyper}, {@local}, 0x400, "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"}, 0x418})
close(0x3)

449.5732ms ago: executing program 9 (id=10066):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
setresgid(0xee00, 0xee01, 0x0)

449.35592ms ago: executing program 6 (id=10067):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
tee(r0, r0, 0x10001, 0x5)

401.134832ms ago: executing program 9 (id=10068):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x24}}, 0x0)

400.91198ms ago: executing program 6 (id=10069):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0xfe, "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"})

400.65465ms ago: executing program 9 (id=10070):
socket$kcm(0x10, 0x2, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

400.47779ms ago: executing program 6 (id=10071):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0)

329.645209ms ago: executing program 6 (id=10072):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00')

0s ago: executing program 6 (id=10073):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}}, 0x0)

kernel console output (not intermixed with test programs):

 63, changing to 9
[  648.480563][ T5311] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  648.485531][ T5311] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  648.490328][ T5311] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  648.494623][ T5311] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  648.500132][ T5311] usb 3-1: config 179 interface 65 has no altsetting 0
[  648.502960][ T5311] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  648.506897][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.514622][ T5311] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27
[  648.718473][ T6663] usb 3-1: USB disconnect, device number 15
[  648.879747][   T33] audit: type=1800 audit(867.746:518): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8177" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  649.315818][   T33] audit: type=1326 audit(868.196:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.2.8181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a178ebe9 code=0x7ffc0000
[  649.324661][   T33] audit: type=1326 audit(868.196:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.2.8181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a178ebe9 code=0x7ffc0000
[  649.337166][   T33] audit: type=1326 audit(868.216:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.2.8181" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f58a178ebe9 code=0x7ffc0000
[  649.348413][   T33] audit: type=1326 audit(868.216:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.2.8181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a178ebe9 code=0x7ffc0000
[  649.358290][   T33] audit: type=1326 audit(868.216:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.2.8181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a178ebe9 code=0x7ffc0000
[  649.367749][   T33] audit: type=1326 audit(868.226:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.2.8181" exe="/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f58a178ebe9 code=0x7ffc0000
[  649.376193][   T33] audit: type=1326 audit(868.226:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.2.8181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a178ebe9 code=0x7ffc0000
[  649.383628][   T33] audit: type=1326 audit(868.226:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26873 comm="syz.2.8181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a178ebe9 code=0x7ffc0000
[  649.463731][T26880] Bluetooth: MGMT ver 1.23
[  649.935140][T26899] netlink: 'syz.6.8193': attribute type 1 has an invalid length.
[  649.938112][T26899] nbd: error processing sock list
[  650.125252][T26899] block nbd0: shutting down sockets
[  650.144970][ T5233] Bluetooth: hci0: command tx timeout
[  650.718506][T26924] loop6: detected capacity change from 0 to 65536
[  650.766248][T26924] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  650.774189][T26924] XFS (loop6): Ending clean mount
[  651.041468][T26956] loop2: detected capacity change from 0 to 32768
[  651.104141][ T6586] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  651.111121][ T6586] XFS (loop6): Unmount and run xfs_repair
[  651.113978][ T6586] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  651.117563][ T6586] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  651.121147][ T6586] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  651.125007][ T6586] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04  ................
[  651.130237][ T6586] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  651.133932][ T6586] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  651.139771][ T6586] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  651.143805][ T6586] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  651.147795][ T6586] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  651.152066][ T6586] XFS (loop6): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  651.156417][ T6586] XFS (loop6): page discard on page ffffea0004d353c0, inode 0x29, pos 0.
[  651.165770][T25532] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  651.169744][T25532] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair.
[  651.381820][T26966] loop6: detected capacity change from 0 to 1024
[  651.385780][T26966] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  651.392723][T26966] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  651.396573][T26966] EXT4-fs (loop6): orphan cleanup on readonly fs
[  651.400014][T26966] Quota error (device loop6): v2_read_file_info: Can't read info structure
[  651.403854][T26966] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  651.409982][T26966] EXT4-fs (loop6): Cannot turn on quotas: error -5
[  651.416662][T26966] EXT4-fs (loop6): 1 truncate cleaned up
[  651.421210][T26966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  651.487568][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.607136][T26971] netlink: 'syz.6.8219': attribute type 1 has an invalid length.
[  651.610420][T26971] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.8219'.
[  651.773432][T26979] loop6: detected capacity change from 0 to 256
[  651.779434][T26979] exfat: Deprecated parameter 'utf8'
[  651.789686][T26981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8224'.
[  651.790469][T26979] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  651.794276][T26981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8224'.
[  651.969802][T26989] TCP: TCP_TX_DELAY enabled
[  652.065052][T26991] smc: net device bond0 applied user defined pnetid SYZ2
[  652.225852][ T5233] Bluetooth: hci0: command tx timeout
[  652.430999][T27011] netlink: 'syz.6.8239': attribute type 12 has an invalid length.
[  652.579221][T27031] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8249'.
[  652.610441][T27034] netlink: 'syz.1.8251': attribute type 12 has an invalid length.
[  652.613558][T27034] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.8251'.
[  653.705024][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  653.856945][   T24] usb 3-1: config index 0 descriptor too short (expected 8192, got 36)
[  653.860428][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  653.864491][   T24] usb 3-1: config 0 has no interfaces?
[  653.867146][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  653.871042][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.875607][   T24] usb 3-1: config 0 descriptor??
[  654.080720][T27065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.084678][T27065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.088872][ T5233] Bluetooth: hci0: Malformed LE Event: 0x0d
[  654.091910][   T24] usb 3-1: string descriptor 0 read error: -71
[  654.095285][   T24] usb 3-1: USB disconnect, device number 16
[  654.319338][T27091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8275'.
[  654.323336][T27091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8275'.
[  654.329098][T27091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8275'.
[  654.333002][T27091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8275'.
[  654.481169][T27093] loop6: detected capacity change from 0 to 32768
[  654.487592][T27093] JBD2: Ignoring recovery information on journal
[  654.505979][T27093] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  654.560567][T25532] ocfs2: Unmounting device (7,6) on (node local)
[  654.625992][ T5233] Bluetooth: hci0: command 0x0406 tx timeout
[  654.766346][T27140] netlink: 'syz.2.8298': attribute type 1 has an invalid length.
[  654.775873][T27142] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[  654.811483][T27151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8303'.
[  654.909385][T27147] loop2: detected capacity change from 0 to 32768
[  654.952309][T27147] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  654.952321][T27147]   allowing incompatible features above 0.0: (unknown version)
[  654.952326][T27147]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  654.968826][T27147] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  654.971713][T27147] bcachefs (loop2): initializing new filesystem
[  654.983119][T27147] bcachefs (loop2): going read-write
[  654.991524][T27147] bcachefs (loop2): marking superblocks
[  654.997384][T27147] bcachefs (loop2): initializing freespace
[  655.001817][T27147] bcachefs (loop2): done initializing freespace
[  655.006420][T27147] bcachefs (loop2): reading snapshots table
[  655.008629][T27147] bcachefs (loop2): reading snapshots done
[  655.017591][T27147] bcachefs (loop2): done starting filesystem
[  655.033029][T26785] bcachefs (loop2): shutting down
[  655.034816][T26785] bcachefs (loop2): going read-only
[  655.037337][T26785] bcachefs (loop2): finished waiting for writes to stop
[  655.041735][T26785] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  655.051103][T26785] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  655.054559][T26785] bcachefs (loop2): clean shutdown complete, journal seq 4
[  655.058336][T26785] bcachefs (loop2): marking filesystem clean
[  655.065466][T26785] bcachefs (loop2): shutdown complete
[  656.170924][T27225] netlink: 'syz.2.8333': attribute type 1 has an invalid length.
[  656.505137][ T6139] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  656.666446][ T6139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  656.670369][ T6139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  656.673674][ T6139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  656.677865][ T6139] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  656.681176][ T6139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.684869][ T6139] usb 3-1: config 0 descriptor??
[  657.093283][ T6139] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  657.293370][  T794] usb 3-1: USB disconnect, device number 17
[  657.382343][T27270] __nla_validate_parse: 6 callbacks suppressed
[  657.382354][T27270] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8351'.
[  657.387585][T27270] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8351'.
[  657.833357][T27294] bridge0: port 1(bridge_slave_0) entered listening state
[  657.880631][T27298] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8365'.
[  658.109138][T27322] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8376'.
[  658.116004][T27322] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8376'.
[  658.202890][T27330] loop2: detected capacity change from 0 to 8192
[  658.263013][T27340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8386'.
[  658.268205][T27330] Dev loop2: RDB in block 1 has bad checksum
[  658.577671][T27357] loop2: detected capacity change from 0 to 512
[  658.584715][T27357] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.8393: Invalid inode bitmap blk 4 in block_group 0
[  658.598996][T27357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  658.624873][T26785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.517333][T27373] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  659.519735][T27373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  659.524173][T27373] vhci_hcd vhci_hcd.0: Device attached
[  659.527332][T27373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  659.530654][T27373] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13)
[  659.533057][T27373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  659.543568][T27373] vhci_hcd vhci_hcd.0: Device attached
[  659.546497][T27373] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15)
[  659.548697][T27373] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  659.551930][T27373] vhci_hcd vhci_hcd.0: Device attached
[  659.558526][T27373] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17)
[  659.561273][T27373] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  659.564448][T27373] vhci_hcd vhci_hcd.0: Device attached
[  659.571741][T27373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  659.575188][T27373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  659.591123][T27384] vhci_hcd: connection closed
[  659.591202][T27378] vhci_hcd: connection closed
[  659.593234][T27382] vhci_hcd: connection closed
[  659.596344][T27376] vhci_hcd: connection closed
[  659.598833][ T5920] vhci_hcd: stop threads
[  659.602699][ T5920] vhci_hcd: release socket
[  659.604718][ T5920] vhci_hcd: disconnect device
[  659.607294][ T5920] vhci_hcd: stop threads
[  659.609648][ T5920] vhci_hcd: release socket
[  659.611623][ T5920] vhci_hcd: disconnect device
[  659.613871][ T5920] vhci_hcd: stop threads
[  659.616044][ T5920] vhci_hcd: release socket
[  659.617999][ T5920] vhci_hcd: disconnect device
[  659.620152][ T5920] vhci_hcd: stop threads
[  659.621989][ T5920] vhci_hcd: release socket
[  659.623925][ T5920] vhci_hcd: disconnect device
[  659.692245][T27399] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8409'.
[  659.833476][T27407] loop6: detected capacity change from 0 to 32768
[  660.773613][T27480] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8447'.
[  660.904511][   T33] audit: type=1326 audit(1392.770:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27495 comm="syz.1.8455" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce6cb8ebe9 code=0x0
[  661.747947][T27500] 9pnet_fd: Insufficient options for proto=fd
[  661.917369][T27522] openvswitch: netlink: Message has 4 unknown bytes.
[  661.919802][T27522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.466043][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  663.351396][T27562] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8486'.
[  663.376532][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8488'.
[  663.403954][T27570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8490'.
[  663.409277][T27570] netlink: 'syz.1.8490': attribute type 5 has an invalid length.
[  663.412560][T27570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8490'.
[  663.485612][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8493'.
[  663.539679][T27584] 8021q: adding VLAN 0 to HW filter on device bond5
[  663.572781][T27589] unsupported nla_type 52263
[  663.607729][T27584] bond_slave_0: entered promiscuous mode
[  663.610249][T27584] bond_slave_1: entered promiscuous mode
[  663.612926][T27584] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  663.617150][T27584] bond5: (slave macvlan2): Enslaving as a backup interface with an up link
[  663.625922][ T6663] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  663.703716][T27597] loop6: detected capacity change from 0 to 128
[  663.717095][T27597] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  663.740838][T25532] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  663.775917][ T6663] usb 3-1: Using ep0 maxpacket: 32
[  663.784680][ T6663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.788717][ T6663] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  663.792139][ T6663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.804977][ T6663] usb 3-1: config 0 descriptor??
[  664.116721][T27617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8508'.
[  664.312037][ T6663] usbhid 3-1:0.0: can't add hid device: -71
[  664.314747][ T6663] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  664.320085][ T6663] usb 3-1: USB disconnect, device number 18
[  664.943897][T27625] loop6: detected capacity change from 0 to 32768
[  664.954405][T27625] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  664.966846][T27625] OCFS2: ERROR (device loop6): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  664.976186][T27625] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  664.980200][T27625] OCFS2: File system is now read-only.
[  664.982501][T27625] (syz.6.8513,27625,1):ocfs2_find_entry_dx:1037 ERROR: status = -30
[  664.989524][T27637] input: syz1 as /devices/virtual/input/input29
[  665.015313][T25532] ocfs2: Unmounting device (7,6) on (node local)
[  665.234449][T27666] netlink: zone id is out of range
[  665.238341][T27666] netlink: zone id is out of range
[  665.240261][T27666] netlink: zone id is out of range
[  665.242140][T27666] netlink: zone id is out of range
[  665.244035][T27666] netlink: zone id is out of range
[  665.248971][T27666] netlink: zone id is out of range
[  665.250993][T27666] netlink: zone id is out of range
[  665.252666][T27666] netlink: zone id is out of range
[  666.114529][T27689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8540'.
[  666.196227][    C0] vkms_vblank_simulate: vblank timer overrun
[  666.569044][T27709] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8548'.
[  666.698659][T27716] fuse: Bad value for 'fd'
[  666.704503][T27716] loop6: detected capacity change from 0 to 16
[  666.713388][T27716] erofs (device loop6): mounted with root inode @ nid 36.
[  666.732991][T27716] erofs (device loop6): readahead error at folio 87 @ nid 36
[  666.735566][T27716] erofs (device loop6): readahead error at folio 86 @ nid 36
[  666.738408][T27716] erofs (device loop6): bogus lookback distance 363 @ lcn 82 of nid 36
[  666.741202][T27716] erofs (device loop6): readahead error at folio 83 @ nid 36
[  666.743765][T27716] erofs (device loop6): bogus lookback distance 363 @ lcn 82 of nid 36
[  666.746637][T27716] erofs (device loop6): readahead error at folio 82 @ nid 36
[  666.749352][T27716] erofs (device loop6): readahead error at folio 79 @ nid 36
[  666.752033][T27716] erofs (device loop6): readahead error at folio 78 @ nid 36
[  666.754575][T27716] erofs (device loop6): bogus lookback distance 1485 @ lcn 75 of nid 36
[  666.757367][T27716] erofs (device loop6): readahead error at folio 76 @ nid 36
[  666.759962][T27716] erofs (device loop6): bogus lookback distance 1485 @ lcn 75 of nid 36
[  666.763218][T27716] erofs (device loop6): readahead error at folio 75 @ nid 36
[  666.765788][T27716] erofs (device loop6): readahead error at folio 74 @ nid 36
[  666.768447][T27716] erofs (device loop6): readahead error at folio 72 @ nid 36
[  666.771042][T27716] erofs (device loop6): readahead error at folio 71 @ nid 36
[  666.774030][T27716] erofs (device loop6): readahead error at folio 70 @ nid 36
[  666.777422][T27716] erofs (device loop6): readahead error at folio 63 @ nid 36
[  666.780059][T27716] erofs (device loop6): readahead error at folio 61 @ nid 36
[  666.782653][T27716] erofs (device loop6): bogus lookback distance 1024 @ lcn 58 of nid 36
[  666.785655][T27716] erofs (device loop6): readahead error at folio 59 @ nid 36
[  666.788370][T27716] erofs (device loop6): bogus lookback distance 1024 @ lcn 58 of nid 36
[  666.791288][T27716] erofs (device loop6): readahead error at folio 58 @ nid 36
[  666.793987][T27716] erofs (device loop6): readahead error at folio 56 @ nid 36
[  666.796663][T27716] erofs (device loop6): bogus lookback distance 1586 @ lcn 46 of nid 36
[  666.799581][T27716] erofs (device loop6): readahead error at folio 47 @ nid 36
[  666.802060][T27716] erofs (device loop6): bogus lookback distance 1586 @ lcn 46 of nid 36
[  666.804942][T27716] erofs (device loop6): readahead error at folio 46 @ nid 36
[  666.807430][T27716] erofs (device loop6): readahead error at folio 45 @ nid 36
[  666.809911][T27716] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36
[  666.812854][T27716] erofs (device loop6): readahead error at folio 43 @ nid 36
[  666.815320][T27716] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36
[  666.818462][T27716] erofs (device loop6): readahead error at folio 42 @ nid 36
[  666.821268][T27716] erofs (device loop6): bogus lookback distance 774 @ lcn 40 of nid 36
[  666.824101][T27716] erofs (device loop6): readahead error at folio 41 @ nid 36
[  666.826814][T27716] erofs (device loop6): bogus lookback distance 774 @ lcn 40 of nid 36
[  666.829749][T27716] erofs (device loop6): readahead error at folio 40 @ nid 36
[  666.832589][T27716] erofs (device loop6): readahead error at folio 39 @ nid 36
[  666.835126][T27716] erofs (device loop6): readahead error at folio 38 @ nid 36
[  666.838147][T27716] erofs (device loop6): readahead error at folio 36 @ nid 36
[  666.841364][T27716] erofs (device loop6): bogus lookback distance 1468 @ lcn 31 of nid 36
[  666.844761][T27716] erofs (device loop6): readahead error at folio 31 @ nid 36
[  666.847953][T27716] erofs (device loop6): readahead error at folio 25 @ nid 36
[  666.850808][T27716] erofs (device loop6): readahead error at folio 24 @ nid 36
[  666.853404][T27716] erofs (device loop6): readahead error at folio 19 @ nid 36
[  666.856560][T27716] syz.6.8546: attempt to access beyond end of device
[  666.856560][T27716] loop6: rw=524288, sector=784, nr_sectors = 64 limit=16
[  666.861885][T27716] syz.6.8546: attempt to access beyond end of device
[  666.861885][T27716] loop6: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  666.868870][T27716] syz.6.8546: attempt to access beyond end of device
[  666.868870][T27716] loop6: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  666.874589][T27716] syz.6.8546: attempt to access beyond end of device
[  666.874589][T27716] loop6: rw=524288, sector=32, nr_sectors = 64 limit=16
[  666.880273][T27716] syz.6.8546: attempt to access beyond end of device
[  666.880273][T27716] loop6: rw=524288, sector=8, nr_sectors = 24 limit=16
[  666.885777][T27716] syz.6.8546: attempt to access beyond end of device
[  666.885777][T27716] loop6: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  667.086332][T27730] nbd: must specify a size in bytes for the device
[  667.397962][T27725] loop2: detected capacity change from 0 to 32768
[  667.449677][T27725] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  667.449724][T27725]   allowing incompatible features above 0.0: (unknown version)
[  667.449733][T27725]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  667.468807][T27725] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  667.472284][T27725] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  667.475775][T27725] bcachefs (loop2): Version upgrade required:
[  667.475775][T27725] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  667.475775][T27725] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  667.475775][T27725]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  667.507202][T27725] bcachefs (loop2): dropping and reconstructing all alloc info
[  667.518254][T27725] bcachefs (loop2): accounting_read... done
[  667.521002][T27725] bcachefs (loop2): alloc_read... done
[  667.523300][T27725] bcachefs (loop2): snapshots_read... done
[  667.525740][T27725] bcachefs (loop2): done starting filesystem
[  667.559998][T26785] bcachefs (loop2): shutting down
[  667.567502][T26785] bcachefs (loop2): shutdown complete
[  668.420942][T27766] net_ratelimit: 4 callbacks suppressed
[  668.420957][T27766] openvswitch: netlink: Flow key attribute not present in set flow.
[  668.506191][T27772] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8562'.
[  668.809210][T27784] netlink: 3176 bytes leftover after parsing attributes in process `syz.2.8579'.
[  669.092032][T27826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8600'.
[  669.150962][   T47] IPVS: starting estimator thread 0...
[  669.154700][T27833] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  669.248396][T27834] IPVS: using max 74 ests per chain, 177600 per kthread
[  670.236299][T27859] netlink: 'syz.1.8614': attribute type 3 has an invalid length.
[  670.240539][T27859] netlink: 'syz.1.8614': attribute type 3 has an invalid length.
[  670.361211][T27863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8616'.
[  670.521125][T27877] loop2: detected capacity change from 0 to 4096
[  670.534864][T27877] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  670.541952][T27877] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  670.546544][T27883] loop6: detected capacity change from 0 to 128
[  670.549079][T27877] ntfs3(loop2): Failed to load $Bitmap (-22).
[  670.565250][T27883] EXT4-fs (loop6): Test dummy encryption mode enabled
[  670.584738][T27883] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  670.687449][T25532] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  670.871641][T27910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8633'.
[  671.668830][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  671.829265][T27917] loop2: detected capacity change from 0 to 40427
[  671.835156][T27917] F2FS-fs (loop2): Image doesn't support compression
[  671.837787][T27917] F2FS-fs (loop2): build fault injection rate: 690
[  671.841330][T27917] F2FS-fs (loop2): invalid crc value
[  671.859813][T27917] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  671.864720][T27917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  671.898011][T26785] syz-executor: attempt to access beyond end of device
[  671.898011][T26785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  671.904098][T26785] CPU: 0 UID: 0 PID: 26785 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  671.904118][T26785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  671.904126][T26785] Call Trace:
[  671.904133][T26785]  <TASK>
[  671.904138][T26785]  dump_stack_lvl+0x189/0x250
[  671.904160][T26785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  671.904175][T26785]  ? __pfx_queue_work_on+0x10/0x10
[  671.904187][T26785]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  671.904205][T26785]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  671.904224][T26785]  f2fs_handle_critical_error+0x37c/0x540
[  671.904245][T26785]  f2fs_write_end_io+0x886/0xb60
[  671.904262][T26785]  __submit_merged_bio+0x27a/0x6a0
[  671.904281][T26785]  __submit_merged_write_cond+0x255/0x530
[  671.904300][T26785]  f2fs_write_data_pages+0x261d/0x3000
[  671.904318][T26785]  ? arch_stack_walk+0xfc/0x150
[  671.904344][T26785]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  671.904362][T26785]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  671.904380][T26785]  ? rcu_is_watching+0x15/0xb0
[  671.904411][T26785]  ? folios_put_refs+0x559/0x640
[  671.904429][T26785]  ? __pfx_folios_put_refs+0x10/0x10
[  671.904443][T26785]  ? rcu_is_watching+0x15/0xb0
[  671.904455][T26785]  ? lru_add+0xa2f/0xd80
[  671.904467][T26785]  ? lru_add+0x198/0xd80
[  671.904479][T26785]  ? do_raw_spin_lock+0x121/0x290
[  671.904498][T26785]  ? do_raw_spin_unlock+0x4d/0x240
[  671.904513][T26785]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  671.904532][T26785]  do_writepages+0x32e/0x550
[  671.904549][T26785]  ? rcu_is_watching+0x15/0xb0
[  671.904562][T26785]  ? do_raw_spin_unlock+0x4d/0x240
[  671.904578][T26785]  filemap_fdatawrite+0x199/0x240
[  671.904595][T26785]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  671.904624][T26785]  ? rcu_is_watching+0x15/0xb0
[  671.904660][T26785]  ? do_raw_spin_unlock+0x4d/0x240
[  671.904678][T26785]  f2fs_sync_dirty_inodes+0x31f/0x830
[  671.904695][T26785]  f2fs_write_checkpoint+0x95a/0x1df0
[  671.904715][T26785]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  671.904743][T26785]  ? kill_f2fs_super+0x298/0x6c0
[  671.904758][T26785]  kill_f2fs_super+0x2c3/0x6c0
[  671.904772][T26785]  ? __pfx_kill_f2fs_super+0x10/0x10
[  671.904783][T26785]  ? radix_tree_delete_item+0x2b6/0x400
[  671.904803][T26785]  ? shrinker_free+0x2ce/0x3e0
[  671.904817][T26785]  deactivate_locked_super+0xbc/0x130
[  671.904831][T26785]  cleanup_mnt+0x425/0x4c0
[  671.904848][T26785]  task_work_run+0x1d4/0x260
[  671.904865][T26785]  ? __pfx_task_work_run+0x10/0x10
[  671.904881][T26785]  ? __x64_sys_umount+0x122/0x160
[  671.904895][T26785]  ? __pfx___x64_sys_umount+0x10/0x10
[  671.904912][T26785]  ? rcu_is_watching+0x15/0xb0
[  671.904926][T26785]  exit_to_user_mode_loop+0xec/0x110
[  671.904944][T26785]  do_syscall_64+0x2bd/0x3b0
[  671.904962][T26785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.904973][T26785]  ? exc_page_fault+0x9f/0xf0
[  671.904990][T26785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.905002][T26785] RIP: 0033:0x7f58a178ff17
[  671.905015][T26785] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  671.905025][T26785] RSP: 002b:00007ffc5ef011a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  671.905041][T26785] RAX: 0000000000000000 RBX: 00007f58a1811c05 RCX: 00007f58a178ff17
[  671.905049][T26785] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5ef01260
[  671.905057][T26785] RBP: 00007ffc5ef01260 R08: 0000000000000000 R09: 0000000000000000
[  671.905065][T26785] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5ef022f0
[  671.905075][T26785] R13: 00007f58a1811c05 R14: 00000000000a4011 R15: 00007ffc5ef02330
[  671.905089][T26785]  </TASK>
[  671.905095][T26785] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  674.102371][T28005] binfmt_misc: register: failed to install interpreter file ./bus/file0
[  674.441038][T28044] tipc: Started in network mode
[  674.442681][T28044] tipc: Node identity ac14140f, cluster identity 4711
[  674.445002][T28044] tipc: New replicast peer: 255.255.255.255
[  674.447927][T28044] tipc: Enabled bearer <udp:syz2>, priority 7
[  674.790046][T28073] loop6: detected capacity change from 0 to 2048
[  674.795870][T28073] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=26504, location=26504
[  674.809745][T28073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  675.457503][   T24] tipc: Node number set to 2886997007
[  676.700838][T28120] loop2: detected capacity change from 0 to 32768
[  676.704634][T28120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8729 (28120)
[  676.712032][T28120] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  676.716537][T28120] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  676.731028][T28120] BTRFS info (device loop2): enabling ssd optimizations
[  676.734095][T28120] BTRFS info (device loop2): enabling free space tree
[  676.754663][T26785] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  676.948335][T28137] loop2: detected capacity change from 0 to 32768
[  676.973210][T28137] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  676.973229][T28137]   allowing incompatible features above 0.0: (unknown version)
[  676.973236][T28137]   features: 
[  676.987800][T28137] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  676.991201][T28137] bcachefs (loop2): initializing new filesystem
[  676.998356][T28137] bcachefs (loop2): going read-write
[  677.002133][T28137] bcachefs (loop2): marking superblocks
[  677.009075][T28137] bcachefs (loop2): initializing freespace
[  677.013560][T28137] bcachefs (loop2): done initializing freespace
[  677.018901][T28137] bcachefs (loop2): reading snapshots table
[  677.021333][T28137] bcachefs (loop2): reading snapshots done
[  677.030601][T28137] bcachefs (loop2): done starting filesystem
[  677.072399][T26785] bcachefs (loop2): shutting down
[  677.074875][T26785] bcachefs (loop2): going read-only
[  677.077156][T26785] bcachefs (loop2): finished waiting for writes to stop
[  677.080873][T26785] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  677.089520][T26785] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  677.092961][T26785] bcachefs (loop2): clean shutdown complete, journal seq 4
[  677.095788][T26785] bcachefs (loop2): marking filesystem clean
[  677.102097][T26785] bcachefs (loop2): shutdown complete
[  677.814352][T28149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8731'.
[  677.827672][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  677.850533][   T33] audit: type=1800 audit(1409.728:528): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8732" name="file0" dev="overlay" ino=903 res=0 errno=0
[  678.933072][T28169] loop2: detected capacity change from 0 to 32768
[  678.935954][T28169] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8740 (28169)
[  678.941641][T28169] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  678.945204][T28169] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  678.948051][T28169] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  678.961615][T28169] BTRFS info (device loop2): rebuilding free space tree
[  678.966211][T28169] BTRFS info (device loop2): disabling free space tree
[  678.969114][T28169] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  678.972677][T28169] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  678.977993][T28169] BTRFS info (device loop2): setting nodatasum
[  678.980072][T28169] BTRFS info (device loop2): setting nodatacow
[  678.982078][T28169] BTRFS info (device loop2): enabling ssd optimizations
[  678.984896][T28169] BTRFS info (device loop2): using spread ssd allocation scheme
[  678.988002][T28169] BTRFS info (device loop2): turning off barriers
[  678.990409][T28169] BTRFS info (device loop2): enabling disk space caching
[  678.992717][T28169] BTRFS info (device loop2): force clearing of disk cache
[  679.017456][T26785] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  679.093974][T28186] loop2: detected capacity change from 0 to 256
[  679.097302][T28186] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  679.101981][T28186] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  679.109547][T28186] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  679.414854][T28217] loop2: detected capacity change from 0 to 4096
[  679.417599][T28217] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  679.427286][T28217] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  679.430184][T28217] ntfs3(loop2): Failed to load $Extend (-22).
[  679.432327][T28217] ntfs3(loop2): Failed to initialize $Extend.
[  679.698489][   T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  679.850180][   T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  679.854073][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.858639][   T24] usb 3-1: config 0 descriptor??
[  679.862879][   T24] gspca_main: spca508-2.14.0 probing 8086:0110
[  679.994512][T28226] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8760'.
[  680.051889][T28232] netlink: 'syz.1.8763': attribute type 4 has an invalid length.
[  680.065341][   T24] gspca_spca508: reg_read err -32
[  680.070226][   T24] gspca_spca508: reg_read err -32
[  680.072492][   T24] gspca_spca508: reg_read err -32
[  680.275760][   T24] gspca_spca508: reg_read err -71
[  680.278769][   T24] gspca_spca508: reg write: error -71
[  680.281054][   T24] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[  680.284227][   T24] usb 3-1: USB disconnect, device number 19
[  680.803864][T28243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  681.014231][T28253] loop6: detected capacity change from 0 to 1024
[  681.017738][T28253] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  681.027702][T28253] hfsplus: filesystem is marked journaled, leaving read-only.
[  681.583444][T28257] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8775'.
[  681.777278][T28269] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  681.889627][   T33] audit: type=1326 audit(1413.767:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.6.8782" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdea0f8ebe9 code=0x0
[  682.078625][ T6139] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  682.240411][ T6139] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  682.244183][ T6139] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  682.248196][ T6139] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  682.253597][ T6139] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  682.256744][ T6139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  682.260175][ T6139] usb 3-1: SerialNumber: syz
[  682.468090][ T6139] rndis_host 3-1:253.0: RNDIS init failed, -71
[  682.472792][ T6139] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71
[  682.479907][ T6139] usb 3-1: USB disconnect, device number 20
[  682.908350][  T794] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  683.061803][  T794] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  683.066442][  T794] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  683.071154][  T794] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  683.077728][  T794] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  683.081871][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  683.085161][  T794] usb 3-1: SerialNumber: syz
[  683.216493][T28285] lo speed is unknown, defaulting to 1000
[  683.219399][T28285] lo speed is unknown, defaulting to 1000
[  683.221669][T28285] lo speed is unknown, defaulting to 1000
[  683.226081][T28285] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  683.233364][T28285] lo speed is unknown, defaulting to 1000
[  683.235644][T28285] lo speed is unknown, defaulting to 1000
[  683.237871][T28285] lo speed is unknown, defaulting to 1000
[  683.240215][T28285] lo speed is unknown, defaulting to 1000
[  683.242524][T28285] lo speed is unknown, defaulting to 1000
[  683.285231][T28292] loop6: detected capacity change from 0 to 8
[  683.309268][T28292] cramfs: Error -3 while decompressing!
[  683.311632][T28292] cramfs: ffffffff99bec628(26)->ffff88802a9d1000(4096)
[  683.314526][T28292] cramfs: Error -3 while decompressing!
[  683.355942][T28292] cramfs: ffffffff99bec642(26)->ffff88804666e000(4096)
[  683.359105][T28292] cramfs: Error -3 while decompressing!
[  683.361692][T28292] cramfs: ffffffff99bec65c(16)->ffff88804666f000(4096)
[  683.364854][T28292] cramfs: Error -3 while decompressing!
[  683.367451][T28292] cramfs: ffffffff99bec628(26)->ffff88802a9d1000(4096)
[  683.472721][T28297] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  684.438545][  T794] rndis_host 3-1:253.0: RNDIS init failed, -110
[  684.441626][  T794] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -110
[  684.454341][  T794] usb 3-1: USB disconnect, device number 21
[  684.701138][T28313] netlink: 'syz.2.8798': attribute type 4 has an invalid length.
[  684.710133][T28313] netlink: 'syz.2.8798': attribute type 4 has an invalid length.
[  684.773814][T28317] syzkaller1: tun_chr_ioctl cmd 1074025672
[  684.776391][T28317] syzkaller1: ignored: set checksum enabled
[  684.877033][T28319] loop2: detected capacity change from 0 to 4096
[  684.881435][T28319] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  684.884864][T28319] EXT4-fs (loop2): Test dummy encryption mode enabled
[  684.891437][T28319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.913663][T26785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.511784][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  685.513990][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  685.561772][T28342] netlink: 'syz.1.8811': attribute type 1 has an invalid length.
[  685.564655][T28342] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8811'.
[  686.096680][T28352] loop2: detected capacity change from 0 to 256
[  686.099464][T28352] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  686.102893][T28352] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  686.108039][T28352] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  686.150632][T28355] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8817'.
[  686.371916][T28374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8826'.
[  686.375730][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8826'.
[  686.383968][T28276] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  686.384008][T28374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8826'.
[  686.387681][T28276] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  686.395789][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8826'.
[  686.400158][T28276] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  686.403930][T28276] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  687.293205][T28395] loop6: detected capacity change from 0 to 32768
[  687.475136][T28395] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  687.475156][T28395]   allowing incompatible features above 0.0: (unknown version)
[  687.475163][T28395]   features: 
[  687.490319][T28395] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  687.493697][T28395] bcachefs (loop6): initializing new filesystem
[  687.500551][T28395] bcachefs (loop6): going read-write
[  687.506197][T28395] bcachefs (loop6): marking superblocks
[  687.512596][T28395] bcachefs (loop6): initializing freespace
[  687.516851][T28395] bcachefs (loop6): done initializing freespace
[  687.520835][T28395] bcachefs (loop6): reading snapshots table
[  687.523614][T28395] bcachefs (loop6): reading snapshots done
[  687.537025][T28395] bcachefs (loop6): done starting filesystem
[  687.678633][T25532] bcachefs (loop6): shutting down
[  687.681194][T25532] bcachefs (loop6): going read-only
[  687.683042][T25532] bcachefs (loop6): finished waiting for writes to stop
[  687.686847][T25532] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  687.700287][T25532] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4
[  687.704974][T25532] bcachefs (loop6): clean shutdown complete, journal seq 5
[  687.708409][T25532] bcachefs (loop6): marking filesystem clean
[  687.718730][T25532] bcachefs (loop6): shutdown complete
[  687.753668][T28419] loop2: detected capacity change from 0 to 32768
[  687.758690][T28419] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  687.773839][T28419] XFS (loop2): Ending clean mount
[  687.776588][T28419] XFS (loop2): Quotacheck needed: Please wait.
[  687.781566][T28419] XFS (loop2): Quotacheck: Done.
[  687.793698][T26785] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  688.010056][T28440] loop2: detected capacity change from 0 to 32768
[  688.014221][T28440] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  688.018576][T28440] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  688.032353][T26785] ocfs2: Unmounting device (7,2) on (node local)
[  688.101881][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8850'.
[  688.104844][T28448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8850'.
[  688.107802][T28448] netlink: 'syz.2.8850': attribute type 13 has an invalid length.
[  689.269181][   T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  689.439701][   T24] usb 3-1: Using ep0 maxpacket: 32
[  689.444627][   T24] usb 3-1: config 0 has an invalid interface number: 151 but max is 0
[  689.448112][   T24] usb 3-1: config 0 has no interface number 0
[  689.451153][   T24] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  689.456092][   T24] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  689.463163][   T24] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  689.467118][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.472513][   T24] usb 3-1: Product: syz
[  689.474352][   T24] usb 3-1: Manufacturer: syz
[  689.476272][   T24] usb 3-1: SerialNumber: syz
[  689.481953][   T24] usb 3-1: config 0 descriptor??
[  689.572340][T28482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8865'.
[  689.752178][   T24] usb 3-1: USB disconnect, device number 22
[  691.688502][T28573] syz.6.8903: attempt to access beyond end of device
[  691.688502][T28573] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0
[  691.693909][T28573] XFS (nbd6): SB validate failed with error -5.
[  691.778973][T28588] loop6: detected capacity change from 0 to 4096
[  691.870581][T28598] input: syz0 as /devices/virtual/input/input30
[  691.888864][T28600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8915'.
[  691.893605][T28600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8915'.
[  691.894288][T28602] loop6: detected capacity change from 0 to 512
[  691.929051][T28602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  691.938327][   T33] audit: type=1800 audit(1423.806:530): pid=28602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8916" name="file1" dev="loop6" ino=15 res=0 errno=0
[  691.947886][   T33] audit: type=1800 audit(1423.806:531): pid=28602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8916" name="file2" dev="loop6" ino=16 res=0 errno=0
[  691.960839][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.061911][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8924'.
[  693.234674][T28641] loop2: detected capacity change from 0 to 512
[  693.240101][T28641] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.8931: casefold flag without casefold feature
[  693.245740][T28641] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8931: couldn't read orphan inode 15 (err -117)
[  693.252951][T28641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  693.293348][T26785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.320784][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8933'.
[  693.346466][T28651] loop6: detected capacity change from 0 to 1024
[  693.390675][T28651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  693.415587][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.498670][T28652] loop2: detected capacity change from 0 to 32768
[  693.502560][T28652] 
[  693.502560][T28652]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  693.502560][T28652] 
[  693.513999][T26785] 
[  693.513999][T26785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  693.513999][T26785] 
[  693.517616][T26785] 
[  693.517616][T26785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  693.517616][T26785] 
[  693.635932][T28675] loop2: detected capacity change from 0 to 4096
[  693.638845][T28675] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  693.646991][T28675] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  693.650766][T28675] ntfs3(loop2): Failed to load $Extend (-22).
[  693.653133][T28675] ntfs3(loop2): Failed to initialize $Extend.
[  693.657896][   T33] audit: type=1800 audit(1425.526:532): pid=28675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8946" name="bus" dev="loop2" ino=33 res=0 errno=0
[  693.782756][T28679] loop2: detected capacity change from 0 to 32768
[  693.787849][T28679] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  693.800696][T28679] XFS (loop2): Ending clean mount
[  693.803014][T28679] XFS (loop2): Quotacheck needed: Please wait.
[  693.807807][T28679] XFS (loop2): Quotacheck: Done.
[  693.835564][T26785] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  693.880490][T28689] loop2: detected capacity change from 0 to 1024
[  693.887441][T28689] hfsplus: bad catalog entry type
[  693.900248][ T6571] hfsplus: b-tree write err: -5, ino 4
[  694.859472][T28719] 9pnet: p9_errstr2errno: server reported unknown error @cF	S+
[  695.045483][T28725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8962'.
[  695.059186][T28724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  695.062831][T28724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.092124][T28725] macvtap1: entered allmulticast mode
[  695.192463][T28724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  695.199629][T28724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.283242][T28724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  695.286871][T28724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.343897][T28724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  695.347470][T28724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.399596][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  695.403737][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.409625][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  695.413506][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.420970][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  695.424443][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.433079][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  695.437353][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  695.475123][T28728] netlink: 'syz.2.8966': attribute type 2 has an invalid length.
[  695.478382][T28728] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8966'.
[  695.612811][T28737] loop2: detected capacity change from 0 to 32768
[  695.629274][T28737] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  695.629290][T28737]   allowing incompatible features above 0.0: (unknown version)
[  695.629295][T28737]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  695.644838][T28737] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  695.647511][T28737] bcachefs (loop2): initializing new filesystem
[  695.652753][T28737] bcachefs (loop2): going read-write
[  695.655809][T28737] bcachefs (loop2): marking superblocks
[  695.661644][T28737] bcachefs (loop2): initializing freespace
[  695.664837][T28737] bcachefs (loop2): done initializing freespace
[  695.668505][T28737] bcachefs (loop2): reading snapshots table
[  695.671599][T28737] bcachefs (loop2): reading snapshots done
[  695.676763][T28737] bcachefs (loop2): done starting filesystem
[  695.721987][T26785] bcachefs (loop2): shutting down
[  695.723973][T26785] bcachefs (loop2): going read-only
[  695.725986][T26785] bcachefs (loop2): finished waiting for writes to stop
[  695.730478][T26785] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  695.743856][T26785] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  695.749831][T26785] bcachefs (loop2): clean shutdown complete, journal seq 5
[  695.758113][T26785] bcachefs (loop2): marking filesystem clean
[  695.776445][T26785] bcachefs (loop2): shutdown complete
[  697.236049][T28770] overlayfs: failed to clone upperpath
[  699.838809][T28840] loop2: detected capacity change from 0 to 32768
[  699.913999][T28840] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  699.914021][T28840]   allowing incompatible features above 0.0: (unknown version)
[  699.914030][T28840]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  699.933802][T28840] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  699.937340][T28840] bcachefs (loop2): initializing new filesystem
[  699.944224][T28840] bcachefs (loop2): going read-write
[  699.948060][T28840] bcachefs (loop2): marking superblocks
[  699.954420][T28840] bcachefs (loop2): initializing freespace
[  699.959087][T28840] bcachefs (loop2): done initializing freespace
[  699.963185][T28840] bcachefs (loop2): reading snapshots table
[  699.965678][T28840] bcachefs (loop2): reading snapshots done
[  699.973136][T28840] bcachefs (loop2): done starting filesystem
[  699.984893][T28840] bcachefs (loop2): shutdown by ioctl type 1emergency read only at seq 3
[  699.988606][ T5995] bcachefs (loop2): going read-only
[  699.995668][ T5995] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  699.999391][ T5995] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  700.006615][ T5995] bcachefs (loop2): unclean shutdown complete, journal seq 3
[  700.010038][ T5995] bcachefs (loop2): finished waiting for writes to stop
[  700.013418][T26785] bcachefs (loop2): shutting down
[  700.013769][ T5995] bcachefs (loop2): done going read-only, filesystem not clean
[  700.027119][T26785] bcachefs (loop2): shutdown complete
[  700.246063][T28860] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  701.583585][T28906] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  701.646116][T28912] netlink: 'syz.1.9045': attribute type 8 has an invalid length.
[  701.700436][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9051'.
[  702.747337][T28938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9058'.
[  702.751935][T28938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9058'.
[  702.793357][T28942] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9060'.
[  703.130781][   T47] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  703.282593][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  703.286292][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  703.290198][   T47] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  703.293726][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.297136][   T47] usb 3-1: config 0 descriptor??
[  703.302109][T28950] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  703.501376][T28962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9070'.
[  703.504581][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9070'.
[  703.507769][T28962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9070'.
[  703.512833][T28962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9070'.
[  703.713235][   T47] hid-rmi 0003:0461:4E72.0029: item fetching failed at offset 2/5
[  703.716085][   T47] hid-rmi 0003:0461:4E72.0029: parse failed
[  703.717987][   T47] hid-rmi 0003:0461:4E72.0029: probe with driver hid-rmi failed with error -22
[  703.918524][ T5995] usb 3-1: USB disconnect, device number 23
[  704.159959][T28972] netlink: 'syz.1.9075': attribute type 1 has an invalid length.
[  704.451657][T28982] syzkaller0: entered promiscuous mode
[  704.454012][T28982] syzkaller0: entered allmulticast mode
[  706.554349][T29036] loop2: detected capacity change from 0 to 128
[  707.473926][T29039] loop2: detected capacity change from 0 to 262144
[  707.483632][T29039] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9090 (29039)
[  707.494523][T29039] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  707.498787][T29039] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  707.601410][ T1127] BTRFS warning (device loop2): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[  707.608314][T29039] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040)
[  707.613157][T29039] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048)
[  707.618037][T29039] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056)
[  707.622807][T29039] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064)
[  707.633122][T29039] BTRFS info (device loop2): enabling ssd optimizations
[  707.636089][T29039] BTRFS info (device loop2): enabling free space tree
[  707.693533][T26785] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  708.127701][T29077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9100'.
[  708.131627][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9100'.
[  708.512093][T29083] loop2: detected capacity change from 0 to 32768
[  708.516102][T29083] (syz.2.9102,29083,1):ocfs2_initialize_super:2019 ERROR: Invalid number of node slots (0)
[  708.520415][T29083] (syz.2.9102,29083,1):ocfs2_fill_super:1177 ERROR: status = -22
[  708.961500][   T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  708.976870][T29096] fuse: Bad value for 'fd'
[  709.113032][   T47] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  709.116816][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.121171][   T47] usb 3-1: config 0 descriptor??
[  709.125066][   T47] gspca_main: cpia1-2.14.0 probing 0813:0001
[  710.059717][   T47] gspca_cpia1: usb_control_msg 02, error -71
[  710.063166][   T47] gspca_cpia1: usb_control_msg 05, error -71
[  710.068146][   T47] gspca_cpia1: usb_control_msg 04, error -71
[  710.073461][   T47] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71
[  710.077738][   T47] usb 3-1: USB disconnect, device number 24
[  710.133463][T29127] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  710.149769][T29129] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  710.406378][T29135] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9126'.
[  710.519710][T29139] loop6: detected capacity change from 0 to 32768
[  710.524746][T29139] JBD2: Ignoring recovery information on journal
[  710.538590][T29139] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  710.560483][T25532] ocfs2: Unmounting device (7,6) on (node local)
[  710.652699][T29148] netlink: 'syz.2.9131': attribute type 29 has an invalid length.
[  710.655278][T29148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9131'.
[  710.992449][T29168] bond0: (slave bond_slave_0): Releasing backup interface
[  710.997877][T29168] bond0: (slave bond_slave_1): Releasing backup interface
[  711.001400][T29168] bond_slave_1: left allmulticast mode
[  711.008467][T29168] team0: Port device C removed
[  711.012210][T29168] team0: Port device team_slave_1 removed
[  712.689288][T29212] : entered promiscuous mode
[  713.001987][   T47] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  713.164438][   T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  713.168008][   T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  713.172441][   T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  713.175717][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  713.182041][   T47] usb 3-1: SerialNumber: syz
[  713.190969][   T47] usb 3-1: bad CDC descriptors
[  713.194152][T29226] loop6: detected capacity change from 0 to 164
[  713.194400][   T47] usb-storage 3-1:1.0: USB Mass Storage device detected
[  713.200259][T29226] rock: directory entry would overflow storage
[  713.204835][   T47] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  713.205028][T29226] rock: sig=0x66, size=4, remaining=3
[  713.210326][   T47] scsi host6: usb-storage 3-1:1.0
[  713.213479][T29226] rock: directory entry would overflow storage
[  713.216303][T29226] rock: sig=0x66, size=4, remaining=3
[  713.218881][T29226] iso9660: Corrupted directory entry in block 4 of inode 1792
[  713.418485][  T794] usb 3-1: USB disconnect, device number 25
[  713.749727][T29236] sctp: [Deprecated]: syz.1.9167 (pid 29236) Use of int in max_burst socket option.
[  713.749727][T29236] Use struct sctp_assoc_value instead
[  714.460032][T29250] loop6: detected capacity change from 0 to 32768
[  714.466955][T29250] JBD2: Ignoring recovery information on journal
[  714.485076][T29250] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  714.500053][T29250] (syz.6.9174,29250,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[  714.506741][T29250] (syz.6.9174,29250,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  714.510303][T29250] (syz.6.9174,29250,1):ocfs2_mknod:301 ERROR: status = -2
[  714.514720][T29250] (syz.6.9174,29250,1):ocfs2_mknod:505 ERROR: status = -2
[  714.517701][T29250] (syz.6.9174,29250,1):ocfs2_create:678 ERROR: status = -2
[  714.534365][T25532] ocfs2: Unmounting device (7,6) on (node local)
[  714.593383][  T794] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  714.749253][  T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.765169][  T794] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  714.769070][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.773372][  T794] usb 3-1: Product: syz
[  714.775260][  T794] usb 3-1: Manufacturer: syz
[  714.777216][  T794] usb 3-1: SerialNumber: syz
[  714.783718][  T794] usb 3-1: config 0 descriptor??
[  714.822856][  T794] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  715.021784][   T47] usb 3-1: USB disconnect, device number 26
[  715.596793][T29276] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  715.916960][  T794] kernel write not supported for file bpf-prog (pid: 794 comm: kworker/0:2)
[  715.960899][T29317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9205'.
[  715.965951][T29317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9205'.
[  715.989560][T29320] sctp: [Deprecated]: syz.1.9206 (pid 29320) Use of struct sctp_assoc_value in delayed_ack socket option.
[  715.989560][T29320] Use struct sctp_sack_info instead
[  716.020544][T29323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9207'.
[  716.173026][T29336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9213'.
[  716.795862][T29348] loop6: detected capacity change from 0 to 512
[  716.798977][T29348] EXT4-fs: Ignoring removed i_version option
[  716.804028][T29348] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  716.810404][T29348] EXT4-fs (loop6): 1 truncate cleaned up
[  716.814648][T29348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  716.842619][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  717.159235][T29364] loop6: detected capacity change from 0 to 32768
[  717.176644][T29364] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  717.219987][T29364] XFS (loop6): Ending clean mount
[  717.263173][T25532] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  717.684951][T29398] nftables ruleset with unbound set
[  717.688713][T29390] loop2: detected capacity change from 0 to 32768
[  717.693086][T29390] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 33/0 []
[  717.693086][T29390] replicas (size 24):
[  717.693086][T29390] btree: 0/1 [2] sb: 33/0 [] (unknown data_type 144): 56/184 [0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0]
[  717.693086][T29390] 
[  717.716850][    C0] vkms_vblank_simulate: vblank timer overrun
[  717.719672][T29390] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  718.235503][T29412] overlayfs: failed to clone upperpath
[  718.397587][T29424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9247'.
[  718.401529][T29424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9247'.
[  718.832747][  T794] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  718.984385][  T794] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  718.987825][  T794] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  718.991952][  T794] usb 3-1: config 0 interface 0 has no altsetting 0
[  718.996663][  T794] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  719.000294][  T794] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  719.003972][  T794] usb 3-1: Product: syz
[  719.005815][  T794] usb 3-1: Manufacturer: syz
[  719.008443][  T794] usb 3-1: SerialNumber: syz
[  719.011448][  T794] usb 3-1: config 0 descriptor??
[  719.015225][  T794] hub 3-1:0.0: bad descriptor, ignoring hub
[  719.017774][  T794] hub 3-1:0.0: probe with driver hub failed with error -5
[  719.022276][  T794] usb 3-1: selecting invalid altsetting 0
[  719.172485][T29453] 9pnet_fd: Insufficient options for proto=fd
[  719.333069][   T47] usb 3-1: USB disconnect, device number 27
[  719.815778][T29464] loop2: detected capacity change from 0 to 4096
[  719.819200][T29464] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  719.823361][T29464] ntfs3(loop2): ino=0, mi_enum_attr
[  719.826357][T29464] ntfs3(loop2): Failed to load $MFT.
[  719.868875][T29466] loop2: detected capacity change from 0 to 2048
[  719.874626][T29466] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  720.105290][T29472] loop2: detected capacity change from 0 to 32768
[  720.112678][T29472] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  720.117408][T13891] (kworker/u8:5,13891,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  720.164561][T26785] ocfs2: Unmounting device (7,2) on (node local)
[  720.690658][T29496] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.9279'.
[  721.095352][  T794] libceph: connect (1)[c::]:6789 error -101
[  721.097949][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  721.149146][T29512] ceph: No mds server is up or the cluster is laggy
[  721.839544][T29573] netlink: 'syz.1.9312': attribute type 29 has an invalid length.
[  721.842864][T29573] netlink: 'syz.1.9312': attribute type 29 has an invalid length.
[  721.846426][T29573] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9312'.
[  722.100017][T29600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9325'.
[  722.358145][T29620] loop2: detected capacity change from 0 to 8
[  722.368871][T29620] SQUASHFS error: lzo decompression failed, data probably corrupt
[  722.372210][T29620] SQUASHFS error: Failed to read block 0x0: -5
[  722.375420][T29620] SQUASHFS error: lzo decompression failed, data probably corrupt
[  722.379094][T29620] SQUASHFS error: Failed to read block 0x0: -5
[  722.381828][   T33] audit: type=1800 audit(1454.242:533): pid=29620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9333" name="file2" dev="loop2" ino=3 res=0 errno=0
[  722.451304][T29624] loop2: detected capacity change from 0 to 1024
[  722.466761][T29624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  722.507415][T26785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.557748][T29635] netlink: 'syz.1.9339': attribute type 2 has an invalid length.
[  723.102165][T29663] loop2: detected capacity change from 0 to 512
[  723.107503][T29663] EXT4-fs: Ignoring removed orlov option
[  723.113949][T29663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  723.117706][T29663] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent
[  723.825893][T29662] bridge_slave_0: left allmulticast mode
[  723.827865][T29662] bridge_slave_0: left promiscuous mode
[  723.829925][T29662] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.834445][T29662] bridge_slave_1: left allmulticast mode
[  723.836694][T29662] bridge_slave_1: left promiscuous mode
[  723.839012][T29662] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.844615][T29662] bond0: (slave bond_slave_0): Releasing backup interface
[  723.849887][T29662] bond0: (slave bond_slave_1): Releasing backup interface
[  723.859057][T29662] team0: Port device team_slave_0 removed
[  723.876285][T29663] loop2: detected capacity change from 0 to 512
[  723.879353][T29663] EXT4-fs: Ignoring removed orlov option
[  723.883677][T29662] team0: Port device team_slave_1 removed
[  723.885893][T29662] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  723.888721][T29662] batman_adv: batadv0: Removing interface: batadv_slave_0
[  723.892549][T29662] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  723.895329][T29662] batman_adv: batadv0: Removing interface: batadv_slave_1
[  723.903713][T29663] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.9352: Attempting to read directory block (0) that is past i_size (256)
[  723.909825][T29663] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  723.914011][T29663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  724.001946][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9361'.
[  724.053485][T29673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  724.087090][T26785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.137647][T29693] loop2: detected capacity change from 0 to 4096
[  724.141170][T29693] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  724.246915][T29699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9369'.
[  724.250711][T29699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.543499][   T47] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  724.705841][   T47] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82
[  724.710673][   T47] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  724.715457][   T47] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  724.720758][   T47] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06
[  724.725309][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  724.728771][   T47] usb 3-1: SerialNumber: syz
[  724.860972][T29717] loop6: detected capacity change from 0 to 2048
[  724.864418][T29717] EXT4-fs: Ignoring removed mblk_io_submit option
[  724.876093][T29717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  724.894363][T29717] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9378: bg 0: block 234: padding at end of block bitmap is not set
[  724.900601][T29717] EXT4-fs (loop6): Remounting filesystem read-only
[  724.918277][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.936193][   T47] yealink 3-1:36.0: invalid payload size 0, expected 16
[  724.939934][   T47] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input31
[  724.947514][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  724.950584][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  724.953771][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  724.956906][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  724.960066][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  724.963127][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  724.966190][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  724.969337][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  724.972087][    C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  724.977567][   T47] usb 3-1: USB disconnect, device number 28
[  725.044406][T29730] loop6: detected capacity change from 0 to 4096
[  725.054309][T29730] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  725.061810][T29730] ntfs3(loop6): Failed to load $Extend (-22).
[  725.065234][T29730] ntfs3(loop6): Failed to initialize $Extend.
[  725.251971][T29757] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  725.259856][T29757] overlayfs: overlapping lowerdir path
[  725.281864][T29762] syzkaller1: entered promiscuous mode
[  725.285528][T29762] syzkaller1: entered allmulticast mode
[  725.312850][   T47] kernel write not supported for file bpf-map (pid: 47 comm: kworker/1:1)
[  725.369972][T29772] netlink: 'syz.1.9402': attribute type 1 has an invalid length.
[  725.386277][T29772] bond2: (slave geneve2): making interface the new active one
[  725.389491][T29772] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  725.392286][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  725.396770][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  725.400291][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  725.404232][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  725.547174][T29786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9407'.
[  725.600406][T29793] loop6: detected capacity change from 0 to 1024
[  725.803156][T29818] loop2: detected capacity change from 0 to 2048
[  725.808371][T29818] NILFS (loop2): couldn't mount RDWR because of unsupported optional features (40)
[  725.872243][T29826] loop2: detected capacity change from 0 to 2048
[  725.890499][T29826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  726.006784][T26785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.256143][   T33] audit: type=1326 audit(1459.122:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29866 comm="syz.2.9442" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58a178ebe9 code=0x0
[  727.320457][T29871] loop2: detected capacity change from 0 to 1024
[  727.329989][T29871] hfsplus: small file entry
[  727.858788][T29893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9453'.
[  727.872126][T29895] cgroup: Name too long
[  728.086311][T29903] loop2: detected capacity change from 0 to 32768
[  728.089452][T29903] btrfs: Deprecated parameter 'usebackuproot'
[  728.091955][T29903] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  728.096506][T29903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9458 (29903)
[  728.103226][T29903] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  728.107799][T29903] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  728.111222][T29903] BTRFS error (device loop2): ignorebadroots must be used with ro mount option
[  728.115046][T29903] BTRFS error (device loop2): open_ctree failed: -22
[  728.231482][T29914] dummy0: entered allmulticast mode
[  728.233430][T29914] dummy0: left allmulticast mode
[  728.492788][T29928] Invalid ELF header magic: != ELF
[  728.543012][T29932] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9472'.
[  728.547073][T29932] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9472'.
[  728.550151][T29932] netlink: 'syz.2.9472': attribute type 5 has an invalid length.
[  728.553342][T29932] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9472'.
[  728.587031][T29936] nfs4: Bad value for 'source'
[  728.655286][T29941] random: crng reseeded on system resumption
[  728.756938][T29947] loop6: detected capacity change from 0 to 1024
[  728.773010][T29947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  728.786669][T29947] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.9479: lblock 3 mapped to illegal pblock 3 (length 13)
[  728.791927][T29947] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  728.796363][T29947] EXT4-fs (loop6): This should not happen!! Data will be lost
[  728.796363][T29947] 
[  728.800509][T29947] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.9479: Freeing blocks not in datazone - block = 3, count = 10
[  728.821165][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.907363][T29962] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode
[  728.950294][T29966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9487'.
[  728.954097][T29966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9487'.
[  729.063933][   T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  729.215293][   T24] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  729.219717][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  729.222085][   T24] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  729.225525][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.229262][   T24] usb 3-1: config 0 descriptor??
[  729.636772][   T24] hid-thrustmaster 0003:044F:B65D.002A: hidraw0: USB HID v1.03 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  729.641381][   T24] hid-thrustmaster 0003:044F:B65D.002A: Wrong number of endpoints?
[  729.844672][    C1] hid-thrustmaster 0003:044F:B65D.002A: Unknown packet type 0x0, unable to proceed further with wheel init
[  730.046131][  T794] usb 3-1: USB disconnect, device number 29
[  730.409514][T29992] 9pnet: Unknown protocol version 9p20\++}
[  730.543350][T30003] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  731.456261][T30026] netlink: 'syz.2.9513': attribute type 1 has an invalid length.
[  731.459681][T30026] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9513'.
[  731.463575][T30026] NCSI netlink: No device for ifindex 0
[  732.254542][T30040] loop6: detected capacity change from 0 to 32768
[  732.263562][   T33] audit: type=1800 audit(1464.121:535): pid=30040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9519" name="file1" dev="loop6" ino=4 res=0 errno=0
[  732.438212][T30056] dvmrp5: entered allmulticast mode
[  732.502122][T30066] netem: change failed
[  732.517602][T30068] netlink: 'syz.1.9534': attribute type 3 has an invalid length.
[  732.623402][T30087] loop2: detected capacity change from 0 to 512
[  732.628281][T30087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  732.649978][T30087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  732.676218][T26785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  732.732047][T30106] CIFS mount error: No usable UNC path provided in device string!
[  732.732047][T30106] 
[  732.739823][T30106] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  732.771076][T30111] netlink: 'syz.2.9551': attribute type 29 has an invalid length.
[  732.783550][T30111] netlink: 'syz.2.9551': attribute type 29 has an invalid length.
[  732.967614][T30140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9567'.
[  733.076071][T30149] loop6: detected capacity change from 0 to 4096
[  733.227200][T30163] loop6: detected capacity change from 0 to 2048
[  733.231074][T30163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  733.543260][T30170] netlink: 'syz.2.9581': attribute type 10 has an invalid length.
[  733.571498][T30170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  733.587272][T30170] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  733.870502][T30175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9583'.
[  733.873696][T30175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9583'.
[  734.907942][T30190] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  735.037932][ T5233] Bluetooth: hci0: command 0x0406 tx timeout
[  735.132843][T30189] loop2: detected capacity change from 0 to 32768
[  735.138110][T30189] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  735.152474][T30189] XFS (loop2): Ending clean mount
[  735.740147][T30225] netlink: 'syz.6.9599': attribute type 17 has an invalid length.
[  735.743482][T30225] netlink: 148 bytes leftover after parsing attributes in process `syz.6.9599'.
[  736.096253][T26785] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  736.394999][ T5311] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  736.546771][ T5311] usb 3-1: unable to get BOS descriptor or descriptor too short
[  736.550385][ T5311] usb 3-1: not running at top speed; connect to a high speed hub
[  736.554456][ T5311] usb 3-1: config 7 has an invalid interface number: 6 but max is 0
[  736.557723][ T5311] usb 3-1: config 7 has no interface number 0
[  736.560204][ T5311] usb 3-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  736.563862][ T5311] usb 3-1: config 7 interface 6 has no altsetting 0
[  736.568638][ T5311] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  736.572372][ T5311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.575612][ T5311] usb 3-1: Product: syz
[  736.577375][ T5311] usb 3-1: Manufacturer: syz
[  736.579308][ T5311] usb 3-1: SerialNumber: syz
[  736.789794][ T5311] option 3-1:7.6: GSM modem (1-port) converter detected
[  736.794252][ T5311] usb 3-1: USB disconnect, device number 30
[  736.797219][ T5311] option 3-1:7.6: device disconnected
[  737.501008][T30251] loop2: detected capacity change from 0 to 32768
[  737.505816][T30251] lmLogInit: exit(-22)
[  737.507568][T30251] lmLogOpen: exit(-22)
[  737.624033][T30257] netlink: 'syz.2.9612': attribute type 5 has an invalid length.
[  738.784607][T30287] netlink: 'syz.1.9624': attribute type 13 has an invalid length.
[  738.795312][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  738.830225][T30291] loop2: detected capacity change from 0 to 8
[  738.880116][T30297] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  738.913178][T30299] loop2: detected capacity change from 0 to 16
[  738.920715][T30299] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  738.924003][T30299] cramfs: root is not a directory
[  739.016583][T30311] rtc_cmos 00:04: Alarms can be up to one day in the future
[  739.187301][T30331] loop6: detected capacity change from 0 to 512
[  739.191636][T30331] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.9645: bad orphan inode 13
[  739.195422][T30331] ext4_test_bit(bit=12, block=4) = 1
[  739.197433][T30331] is_bad_inode(inode)=0
[  739.198943][T30331] NEXT_ORPHAN(inode)=0
[  739.200359][T30331] max_ino=32
[  739.201482][T30331] i_nlink=1
[  739.202921][T30331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  739.216047][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  739.283886][T30335] loop2: detected capacity change from 0 to 32768
[  739.286924][T30335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9646 (30335)
[  739.293977][T30335] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  739.298652][T30335] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  739.455710][T30335] BTRFS info (device loop2): enabling ssd optimizations
[  739.458224][T30335] BTRFS info (device loop2): enabling free space tree
[  739.460127][T30337] loop6: detected capacity change from 0 to 40427
[  739.465926][T30337] F2FS-fs (loop6): build fault injection rate: 771
[  739.470634][T30337] F2FS-fs (loop6): invalid crc value
[  739.477421][T26785] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  739.510118][T30337] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  739.514446][T30337] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  739.547467][T25532] syz-executor: attempt to access beyond end of device
[  739.547467][T25532] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  739.554649][T25532] CPU: 1 UID: 0 PID: 25532 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  739.554669][T25532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  739.554676][T25532] Call Trace:
[  739.554682][T25532]  <TASK>
[  739.554687][T25532]  dump_stack_lvl+0x189/0x250
[  739.554709][T25532]  ? __pfx_dump_stack_lvl+0x10/0x10
[  739.554722][T25532]  ? __pfx_queue_work_on+0x10/0x10
[  739.554736][T25532]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  739.554753][T25532]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  739.554770][T25532]  f2fs_handle_critical_error+0x37c/0x540
[  739.554791][T25532]  f2fs_write_end_io+0x886/0xb60
[  739.554816][T25532]  __submit_merged_bio+0x27a/0x6a0
[  739.554833][T25532]  __submit_merged_write_cond+0x255/0x530
[  739.554848][T25532]  f2fs_write_data_pages+0x261d/0x3000
[  739.554900][T25532]  ? rcu_is_watching+0x15/0xb0
[  739.554921][T25532]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  739.554948][T25532]  ? ktime_get+0x3e/0x1f0
[  739.554961][T25532]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  739.554974][T25532]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  739.554986][T25532]  ? css_rstat_updated+0x23a/0x4f0
[  739.555001][T25532]  ? __resched_curr+0x202/0x3e0
[  739.555013][T25532]  ? do_raw_spin_lock+0x121/0x290
[  739.555029][T25532]  ? do_raw_spin_unlock+0x4d/0x240
[  739.555041][T25532]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  739.555056][T25532]  do_writepages+0x32e/0x550
[  739.555072][T25532]  ? rcu_is_watching+0x15/0xb0
[  739.555111][T25532]  ? do_raw_spin_unlock+0x4d/0x240
[  739.555127][T25532]  filemap_fdatawrite+0x199/0x240
[  739.555143][T25532]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  739.555171][T25532]  ? rcu_is_watching+0x15/0xb0
[  739.555185][T25532]  ? do_raw_spin_unlock+0x4d/0x240
[  739.555202][T25532]  f2fs_sync_dirty_inodes+0x31f/0x830
[  739.555221][T25532]  f2fs_write_checkpoint+0x95a/0x1df0
[  739.555239][T25532]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  739.555262][T25532]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  739.555273][T25532]  ? kfree+0x18e/0x440
[  739.555287][T25532]  ? kill_f2fs_super+0x298/0x6c0
[  739.555300][T25532]  kill_f2fs_super+0x2c3/0x6c0
[  739.555313][T25532]  ? __pfx_kill_f2fs_super+0x10/0x10
[  739.555323][T25532]  ? radix_tree_delete_item+0x2b6/0x400
[  739.555339][T25532]  ? shrinker_free+0x2ce/0x3e0
[  739.555352][T25532]  deactivate_locked_super+0xbc/0x130
[  739.555367][T25532]  cleanup_mnt+0x425/0x4c0
[  739.555381][T25532]  task_work_run+0x1d4/0x260
[  739.555397][T25532]  ? __pfx_task_work_run+0x10/0x10
[  739.555410][T25532]  ? __x64_sys_umount+0x122/0x160
[  739.555424][T25532]  ? __pfx___x64_sys_umount+0x10/0x10
[  739.555439][T25532]  ? rcu_is_watching+0x15/0xb0
[  739.555451][T25532]  exit_to_user_mode_loop+0xec/0x110
[  739.555466][T25532]  do_syscall_64+0x2bd/0x3b0
[  739.555483][T25532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.555494][T25532]  ? exc_page_fault+0x9f/0xf0
[  739.555509][T25532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.555521][T25532] RIP: 0033:0x7fdea0f8ff17
[  739.555533][T25532] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  739.555543][T25532] RSP: 002b:00007ffd3f7ba7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  739.555556][T25532] RAX: 0000000000000000 RBX: 00007fdea1011c05 RCX: 00007fdea0f8ff17
[  739.555564][T25532] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3f7ba870
[  739.555572][T25532] RBP: 00007ffd3f7ba870 R08: 0000000000000000 R09: 0000000000000000
[  739.555579][T25532] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3f7bb900
[  739.555587][T25532] R13: 00007fdea1011c05 R14: 00000000000b483d R15: 00007ffd3f7bb940
[  739.555599][T25532]  </TASK>
[  739.711964][T25532] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  739.790498][T30368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  740.058917][T30379] loop6: detected capacity change from 0 to 512
[  740.078664][T30379] EXT4-fs: Ignoring removed nobh option
[  740.099449][T30379] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.9656: iget: bad i_size value: 38620345925642
[  740.109372][T30379] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.9656: couldn't read orphan inode 15 (err -117)
[  740.114761][T30379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  740.178828][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.829417][T30398] loop2: detected capacity change from 0 to 1024
[  740.842961][ T1127] hfsplus: b-tree write err: -5, ino 4
[  741.001527][T30408] overlayfs: failed to clone upperpath
[  741.350655][T30412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9668'.
[  741.353822][T30412] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9668'.
[  741.403010][T30419] netlink: 'syz.1.9671': attribute type 5 has an invalid length.
[  741.475226][T30428] loop6: detected capacity change from 0 to 2048
[  741.480898][T30428] syz.6.9672: attempt to access beyond end of device
[  741.480898][T30428] loop6: rw=524288, sector=9007199254741068, nr_sectors = 2 limit=2048
[  741.488765][T30428] nilfs2: Unknown parameter ''
[  741.673860][T30421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9672'.
[  741.814466][T30435] loop2: detected capacity change from 0 to 2048
[  741.820164][T30436] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  741.826478][   T33] audit: type=1800 audit(1473.690:536): pid=30435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9677" name="file1" dev="loop2" ino=15 res=0 errno=0
[  741.849773][T30436] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  741.854475][T30436] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  741.858148][T30436] Remounting filesystem read-only
[  741.860498][T26785] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  742.199712][T30438] loop2: detected capacity change from 0 to 131072
[  742.203349][T30438] F2FS-fs (loop2): invalid crc value
[  742.221449][T30438] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  742.224660][T30438] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  742.230427][T30438] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[  745.533962][T30511] loop6: detected capacity change from 0 to 16
[  745.539127][T30511] erofs (device loop6): mounted with root inode @ nid 36.
[  745.544070][T30511] erofs (device loop6): read error -117 @ 72 of nid 36
[  745.637868][T30513] loop6: detected capacity change from 0 to 32768
[  745.655598][T30513] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  745.655616][T30513]   allowing incompatible features above 0.0: (unknown version)
[  745.655624][T30513]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  745.671771][T30513] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  745.675082][T30513] bcachefs (loop6): initializing new filesystem
[  745.683532][T30513] bcachefs (loop6): going read-write
[  745.692504][T30513] bcachefs (loop6): marking superblocks
[  745.700893][T30513] bcachefs (loop6): initializing freespace
[  745.706900][T30513] bcachefs (loop6): done initializing freespace
[  745.714288][T30513] bcachefs (loop6): reading snapshots table
[  745.717145][T30513] bcachefs (loop6): reading snapshots done
[  745.726941][T30513] bcachefs (loop6): done starting filesystem
[  745.783634][T25532] bcachefs (loop6): shutting down
[  745.787018][T25532] bcachefs (loop6): going read-only
[  745.789102][T25532] bcachefs (loop6): finished waiting for writes to stop
[  745.791973][T25532] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  745.804223][T25532] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  745.809749][T25532] bcachefs (loop6): clean shutdown complete, journal seq 4
[  745.813405][T25532] bcachefs (loop6): marking filesystem clean
[  745.824082][T25532] bcachefs (loop6): shutdown complete
[  746.879350][T30556] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  746.958371][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  746.961099][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  748.880684][T30590] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9741'.
[  750.010217][T30613] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9751'.
[  750.077942][T30617] netlink: 'syz.6.9753': attribute type 1 has an invalid length.
[  750.081112][T30617] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9753'.
[  750.115226][T30620] overlayfs: failed to clone upperpath
[  750.161678][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9757'.
[  750.172799][T30625] netlink: 'syz.1.9757': attribute type 30 has an invalid length.
[  750.176145][T30625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9757'.
[  750.332302][T30643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9763'.
[  750.414977][   T33] audit: type=1804 audit(1482.269:537): pid=30647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9765" name="file0" dev="tmpfs" ino=14187 res=1 errno=0
[  750.562950][T30649] ref_ctr increment failed for inode: 0x3771 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810e33ab00
[  751.226848][T30679] loop6: detected capacity change from 0 to 2048
[  751.239642][T30679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback.
[  751.275077][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  752.161166][T30723] loop6: detected capacity change from 0 to 512
[  752.164565][T30723] EXT4-fs (loop6): Test dummy encryption mode enabled
[  752.169529][T30723] EXT4-fs error (device loop6): __ext4_iget:5464: inode #11: block 1: comm syz.6.9799: invalid block
[  752.174172][T30723] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.9799: couldn't read orphan inode 11 (err -117)
[  752.180270][T30723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  752.192911][T30723] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  752.220476][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.232311][T30730] netlink: 452 bytes leftover after parsing attributes in process `syz.1.9803'.
[  752.260565][T30736] macvlan0: left allmulticast mode
[  752.262811][T30736] netlink: 'syz.1.9805': attribute type 1 has an invalid length.
[  752.265960][T30736] netlink: 'syz.1.9805': attribute type 2 has an invalid length.
[  752.411750][T30756] bridge4: entered promiscuous mode
[  752.451777][T30760] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0%NnyD (pid: 30760 comm: syz.1.9817)
[  752.457267][   T33] audit: type=1800 audit(1484.319:538): pid=30760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9817" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=93516 res=0 errno=0
[  754.879475][T30820] ptrace attach of "/syz-executor exec"[15409] was attempted by ""[30820]
[  755.696172][T30830] loop6: detected capacity change from 0 to 1024
[  755.710293][T29002] hfsplus: b-tree write err: -5, ino 4
[  755.793150][T30832] loop6: detected capacity change from 0 to 32768
[  755.795775][T30832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9837 (30832)
[  755.801360][T30832] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  755.804653][T30832] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  755.815037][T30832] BTRFS info (device loop6): enabling ssd optimizations
[  755.817718][T30832] BTRFS info (device loop6): enabling free space tree
[  755.845259][T25532] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  755.938568][T30851] overlayfs: empty lowerdir
[  755.963540][ T6663] IPVS: starting estimator thread 0...
[  756.057273][T30854] IPVS: using max 76 ests per chain, 182400 per kthread
[  756.109220][T30858] loop6: detected capacity change from 0 to 32768
[  756.121233][T30868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9845'.
[  756.129949][T30858] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  756.142724][T30858] XFS (loop6): Ending clean mount
[  756.165550][T25532] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  756.293055][T30882] loop6: detected capacity change from 0 to 2048
[  756.296276][T30882] EXT4-fs: Ignoring removed nomblk_io_submit option
[  756.320842][T30882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  756.344647][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.422451][T30892] tmpfs: Bad value for 'mpol'
[  756.449692][T30894] dlm: Unknown command passed to DLM device : 11
[  756.449692][T30894] 
[  756.560229][T30903] loop6: detected capacity change from 0 to 512
[  756.562834][T30903] EXT4-fs: Ignoring removed bh option
[  756.565088][T30903] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  756.570766][T30903] EXT4-fs (loop6): invalid journal inode
[  756.573379][T30903] EXT4-fs (loop6): can't get journal size
[  756.576904][T30903] EXT4-fs (loop6): 1 truncate cleaned up
[  756.580140][T30903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  756.589030][T30903] Device name not specified.
[  756.589030][T30903] 
[  756.604732][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.625383][T30906] syzkaller1: entered promiscuous mode
[  756.627545][T30906] syzkaller1: entered allmulticast mode
[  757.717391][   T33] audit: type=1326 audit(1489.568:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  757.748172][   T33] audit: type=1326 audit(1489.568:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  757.802432][   T33] audit: type=1326 audit(1489.568:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  757.818369][   T33] audit: type=1326 audit(1489.568:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  757.830861][   T33] audit: type=1326 audit(1489.568:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  757.840191][   T33] audit: type=1326 audit(1489.568:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  757.849892][   T33] audit: type=1326 audit(1489.578:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  757.867104][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  757.875145][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  757.882967][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  757.887713][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  757.993977][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  758.010070][   T33] audit: type=1326 audit(1489.588:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  758.031812][   T33] audit: type=1326 audit(1489.588:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  758.053555][   T33] audit: type=1326 audit(1489.588:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30927 comm="syz.6.9870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea0f8ebe9 code=0x7ffc0000
[  758.170230][T30933] chnl_net:caif_netlink_parms(): no params data found
[  758.209439][T30933] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.212345][T30933] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.215420][T30933] bridge_slave_0: entered allmulticast mode
[  758.218676][T30933] bridge_slave_0: entered promiscuous mode
[  758.222355][T30933] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.225233][T30933] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.228427][T30933] bridge_slave_1: entered allmulticast mode
[  758.231840][T30933] bridge_slave_1: entered promiscuous mode
[  758.248800][T30933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.254152][T30933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  758.272932][T28276] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  758.276353][T28276] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.282822][T30933] team0: Port device team_slave_0 added
[  758.286507][T30933] team0: Port device team_slave_1 added
[  758.302735][T28276] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  758.306830][T28276] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.314130][T30933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.316521][T30933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.325261][T30933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.330246][T30933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.332972][T30933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  758.342276][T30933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.347600][T28276] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  758.351764][T28276] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.378575][T30933] hsr_slave_0: entered promiscuous mode
[  758.381416][T30933] hsr_slave_1: entered promiscuous mode
[  758.384176][T30933] debugfs: 'hsr0' already exists in 'hsr'
[  758.386576][T30933] Cannot create hsr debugfs directory
[  758.398068][T28276] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  758.402187][T28276] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.521955][T28276] dvmrp5 (unregistering): left allmulticast mode
[  758.593543][T28276] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  758.602225][T28276] bond0 (unregistering): Released all slaves
[  758.700624][T28276] : left promiscuous mode
[  758.951851][T28276] tipc: Disabling bearer <udp:syz2>
[  758.956540][T28276] tipc: Left network mode
[  759.130360][T30933] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  759.136693][T30933] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  759.144407][T28276] hsr_slave_0: left promiscuous mode
[  759.147016][T28276] hsr_slave_1: left promiscuous mode
[  759.153364][T28276] veth1_macvtap: left promiscuous mode
[  759.155906][T28276] veth0_macvtap: left promiscuous mode
[  759.158721][T28276] veth1_vlan: left promiscuous mode
[  759.161272][T28276] veth0_vlan: left promiscuous mode
[  759.324859][T30933] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  759.334495][T30933] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  759.422642][T30933] 8021q: adding VLAN 0 to HW filter on device bond0
[  759.460846][T30933] 8021q: adding VLAN 0 to HW filter on device team0
[  759.513117][T29000] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.515513][T29000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  759.602377][T29000] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.605493][T29000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  759.815091][T30933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  759.934843][T30933] veth0_vlan: entered promiscuous mode
[  759.943805][T30933] veth1_vlan: entered promiscuous mode
[  759.961183][T30933] veth0_macvtap: entered promiscuous mode
[  759.965567][T30933] veth1_macvtap: entered promiscuous mode
[  759.975769][T30933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  759.983989][T30933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  759.992009][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  759.996712][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  760.002269][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  760.011557][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  760.044445][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  760.044747][T30976] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9878'.
[  760.051341][T30976] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  760.053836][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  760.054798][T30976] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  760.065795][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  760.069834][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  760.077980][ T5233] Bluetooth: hci3: command tx timeout
[  760.140739][T30986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9882'.
[  760.271043][T31004] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9892'.
[  760.349711][ T5995] kernel write not supported for file /media6 (pid: 5995 comm: kworker/0:4)
[  760.361374][T31010] loop9: detected capacity change from 0 to 4096
[  760.371789][T31010] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  760.376216][T31014] netlink: 'syz.6.9896': attribute type 16 has an invalid length.
[  760.386190][T31010] ntfs3(loop9): Failed to initialize $Extend/$ObjId.
[  760.390082][T31014] netlink: 'syz.6.9896': attribute type 3 has an invalid length.
[  760.397376][T31014] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9896'.
[  760.417234][T31010] ntfs3: Cannot load iocharset cp
[  760.417234][T31010] 
[  760.620534][T31047] loop6: detected capacity change from 0 to 64
[  760.704454][T31047] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9912'.
[  761.150497][T31052] loop6: detected capacity change from 0 to 32768
[  761.154283][T31052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9913 (31052)
[  761.162177][T31052] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  761.166525][T31052] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  761.196878][T31052] BTRFS info (device loop6): enabling ssd optimizations
[  761.200329][T31052] BTRFS info (device loop6): enabling free space tree
[  761.202847][T31052] BTRFS info (device loop6): use lzo compression, level 0
[  761.239665][T25532] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  761.383129][T31093] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9925'.
[  761.411991][T31095] binder: 31094:31095 unknown command 0
[  761.414029][T31095] binder: 31094:31095 ioctl c0306201 200000000080 returned -22
[  761.426750][T31095] syz.6.9926 (31095): drop_caches: 2
[  762.168022][ T5233] Bluetooth: hci3: command tx timeout
[  762.362068][T31112] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  762.366452][   T13] bond0: (slave bond_slave_0): interface is now down
[  762.369353][   T13] bond0: (slave bond_slave_1): interface is now down
[  762.372471][   T13] bond0: now running without any active interface!
[  762.392052][T31114] loop9: detected capacity change from 0 to 128
[  762.395145][T31114] ufs: You didn't specify the type of your ufs filesystem
[  762.395145][T31114] 
[  762.395145][T31114] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  762.395145][T31114] 
[  762.395145][T31114] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  762.407422][T31114] ufs: ufstype=old is supported read-only
[  762.411714][T31114] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  764.248223][ T5233] Bluetooth: hci3: command tx timeout
[  764.298606][T31142] loop9: detected capacity change from 0 to 256
[  764.305064][T31142] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  764.447288][T31154] netlink: 'syz.9.9950': attribute type 10 has an invalid length.
[  764.455000][T31154] 8021q: adding VLAN 0 to HW filter on device bond0
[  764.458818][T31154] team0: Port device bond0 added
[  764.515107][T31159] input: syz0 as /devices/virtual/input/input32
[  764.715510][T31167] loop6: detected capacity change from 0 to 32768
[  764.729361][T31167] ERROR: (device loop6): diAllocAG: error reading iag
[  764.729361][T31167] 
[  764.738527][T31167] ialloc: diAlloc returned -5!
[  764.991455][T31178] loop6: detected capacity change from 0 to 32768
[  765.000835][T31178] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  765.007368][T31178] OCFS2: ERROR (device loop6): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #2304 has bad signature 
[  765.014198][T31178] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  765.018877][T31178] OCFS2: File system is now read-only.
[  765.021296][T31178] (syz.6.9962,31178,1):ocfs2_xattr_block_find:2831 ERROR: status = -30
[  765.028305][   T47] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  765.059281][T25532] ocfs2: Unmounting device (7,6) on (node local)
[  765.178292][   T47] usb 10-1: Using ep0 maxpacket: 8
[  765.182668][   T47] usb 10-1: config 0 has an invalid interface number: 94 but max is 0
[  765.186313][   T47] usb 10-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[  765.191040][   T47] usb 10-1: config 0 has no interface number 0
[  765.194063][   T47] usb 10-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd
[  765.207680][   T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.224391][   T47] usb 10-1: config 0 descriptor??
[  765.233370][   T47] bfusb 10-1:0.94: probe with driver bfusb failed with error -5
[  765.275986][T31193] loop6: detected capacity change from 0 to 1024
[  765.294876][T31193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  765.321264][T25532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  765.339394][T31198] trusted_key: encrypted_key: key user:syz not found
[  765.433078][   T47] usb 10-1: USB disconnect, device number 15
[  765.968191][T31206] loop9: detected capacity change from 0 to 4096
[  765.971405][T31206] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  765.979020][T31206] ntfs3(loop9): ino=1a, mi_enum_attr
[  765.980971][T31206] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  765.991295][T31206] ntfs3(loop9): ino=1e, "file1" ntfs_sync_inode failed, -22.
[  766.005220][T29000] ntfs3(loop9): ino=1e, ntfs3_write_inode failed, -22.
[  766.318473][ T5233] Bluetooth: hci3: command tx timeout
[  766.924098][T31224] loop9: detected capacity change from 0 to 4096
[  766.928207][T31224] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  766.935089][T31224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  766.945326][T31224] EXT4-fs (loop9): shut down requested (2)
[  766.964204][T30933] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  766.987338][T31228] loop9: detected capacity change from 0 to 64
[  767.395751][T31259] loop9: detected capacity change from 0 to 32768
[  767.403722][T31259] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  767.433181][T30933] ocfs2: Unmounting device (7,9) on (node local)
[  767.494642][T31270] netlink: 'syz.9.10001': attribute type 2 has an invalid length.
[  767.498023][T31270] netlink: 'syz.9.10001': attribute type 2 has an invalid length.
[  767.830043][T31275] loop9: detected capacity change from 0 to 4096
[  767.833586][T31275] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  767.844247][T31275] ntfs3(loop9): ino=1a, mi_enum_attr
[  767.846987][T31275] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  767.853336][T31275] ntfs3(loop9): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  768.158668][ T6139] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  768.308678][ T6139] usb 10-1: Using ep0 maxpacket: 8
[  768.312705][ T6139] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  768.316977][ T6139] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  768.322215][ T6139] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  768.326811][ T6139] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  768.331757][ T6139] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  768.336402][ T6139] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  768.344361][ T6139] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  768.348296][ T6139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.351901][ T6139] usb 10-1: Product: syz
[  768.353827][ T6139] usb 10-1: Manufacturer: syz
[  768.355971][ T6139] usb 10-1: SerialNumber: syz
[  768.359802][ T6139] usb 10-1: config 0 descriptor??
[  768.362720][T31283] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  769.315587][T31347] loop9: detected capacity change from 0 to 32768
[  769.323439][T31347] JBD2: Ignoring recovery information on journal
[  769.341471][T31347] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  769.365358][T30933] ocfs2: Unmounting device (7,9) on (node local)
[  769.499499][T31359] netlink: 'syz.9.10042': attribute type 5 has an invalid length.
[  769.628996][ T6139] rc_core: IR keymap rc-snapstream-firefly not found
[  769.631347][ T6139] Registered IR keymap rc-empty
[  769.633565][ T6139] rc rc0: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  769.636847][ T6139] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input33
[  769.642565][ T6139] input: syz syz mouse as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input34
[  769.648658][ T6139] usb 10-1: USB disconnect, device number 16
[  769.650726][    C1] ati_remote 10-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  770.238546][T31381] loop6: detected capacity change from 0 to 32768
[  770.254646][T31381] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  770.277476][T31381] XFS (loop6): Ending clean mount
[  770.295640][T25532] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  770.301164][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  770.301178][   T33] audit: type=1326 audit(1502.167:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.315340][   T33] audit: type=1326 audit(1502.167:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.324397][   T33] audit: type=1326 audit(1502.177:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.337923][   T33] audit: type=1326 audit(1502.177:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.346959][   T33] audit: type=1326 audit(1502.177:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.356774][   T33] audit: type=1326 audit(1502.187:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.366158][   T33] audit: type=1326 audit(1502.187:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.378130][   T33] audit: type=1326 audit(1502.187:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.399034][   T33] audit: type=1326 audit(1502.197:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.407589][   T33] audit: type=1326 audit(1502.197:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31400 comm="syz.9.10058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b818ebe9 code=0x7ffc0000
[  770.603165][T31428] netlink: 80 bytes leftover after parsing attributes in process `syz.6.10071'.
[  770.737416][T31430] loop6: detected capacity change from 0 to 32768
[  770.944652][T25532] non-latin1 character 0x2e66 found in JFS file name
[  770.947943][T25532] mount with iocharset=utf8 to access
[  771.151392][  T117] ------------[ cut here ]------------
[  771.153426][  T117] WARNING: CPU: 1 PID: 117 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x454/0x4e0
[  771.156434][  T117] Modules linked in:
[  771.158506][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  771.162681][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  771.165928][  T117] RIP: 0010:dbAdjTree+0x454/0x4e0
[  771.167846][  T117] Code: 5a ff ff ff e8 ed 30 81 fe eb 05 e8 e6 30 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 43 e0 3d 08 cc e8 cd 30 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  771.174844][  T117] RSP: 0018:ffffc9000246f508 EFLAGS: 00010293
[  771.176897][  T117] RAX: ffffffff833e7ae3 RBX: ffff88812e7c9010 RCX: ffff8881059d9cc0
[  771.179984][  T117] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  771.183034][  T117] RBP: 0000000000020056 R08: ffffea0004b9f247 R09: 1ffffd4000973e48
[  771.185704][  T117] R10: dffffc0000000000 R11: fffff94000973e49 R12: ffff88812e7c9018
[  771.188956][  T117] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  771.192087][  T117] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  771.195108][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  771.197404][  T117] CR2: 00007fde97bff000 CR3: 000000003a4fe000 CR4: 00000000000006f0
[  771.200507][  T117] Call Trace:
[  771.201721][  T117]  <TASK>
[  771.202785][  T117]  ? __pfx_lock_metapage+0x10/0x10
[  771.204453][  T117]  dbJoin+0x238/0x300
[  771.205759][  T117]  ? do_read_cache_folio+0x4c6/0x590
[  771.207654][  T117]  dbFreeBits+0x4e1/0xdb0
[  771.209161][  T117]  dbFree+0x336/0x650
[  771.210644][  T117]  txFreeMap+0x9e6/0xde0
[  771.212029][  T117]  ? do_raw_spin_unlock+0x4d/0x240
[  771.213700][  T117]  xtTruncate+0xcea/0x2e70
[  771.215240][  T117]  ? __pfx_xtTruncate+0x10/0x10
[  771.217045][  T117]  ? do_raw_spin_lock+0x121/0x290
[  771.219110][  T117]  ? __asan_memset+0x22/0x50
[  771.220707][  T117]  ? __dquot_initialize+0x218/0xcb0
[  771.222507][  T117]  jfs_free_zero_link+0x33a/0x4a0
[  771.224404][  T117]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  771.226435][  T117]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  771.228539][  T117]  jfs_evict_inode+0x363/0x440
[  771.230377][  T117]  ? evict+0x4f8/0x9c0
[  771.231819][  T117]  ? __pfx_jfs_evict_inode+0x10/0x10
[  771.233595][  T117]  evict+0x504/0x9c0
[  771.234874][  T117]  ? __pfx_evict+0x10/0x10
[  771.236431][  T117]  ? do_raw_spin_unlock+0x4d/0x240
[  771.238163][  T117]  ? _raw_spin_unlock+0x28/0x50
[  771.240031][  T117]  ? iput+0x6d8/0x9d0
[  771.241368][  T117]  jfs_lazycommit+0x43f/0xa90
[  771.242987][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  771.244805][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  771.246794][  T117]  ? __kthread_parkme+0x7b/0x200
[  771.248456][  T117]  ? __kthread_parkme+0x1a1/0x200
[  771.250624][  T117]  kthread+0x711/0x8a0
[  771.252099][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  771.253812][  T117]  ? __pfx_kthread+0x10/0x10
[  771.255354][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[  771.257092][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  771.258782][  T117]  ? __pfx_kthread+0x10/0x10
[  771.260473][  T117]  ret_from_fork+0x3fc/0x770
[  771.262136][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  771.263766][  T117]  ? __switch_to_asm+0x39/0x70
[  771.265389][  T117]  ? __switch_to_asm+0x33/0x70
[  771.267087][  T117]  ? __pfx_kthread+0x10/0x10
[  771.268594][  T117]  ret_from_fork_asm+0x1a/0x30
[  771.270348][  T117]  </TASK>
[  771.271625][  T117] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  771.274215][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  771.277372][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  771.280944][  T117] Call Trace:
[  771.282062][  T117]  <TASK>
[  771.283095][  T117]  dump_stack_lvl+0x99/0x250
[  771.284641][  T117]  ? __asan_memcpy+0x40/0x70
[  771.286435][  T117]  ? __pfx_dump_stack_lvl+0x10/0x10
[  771.288158][  T117]  ? __pfx__printk+0x10/0x10
[  771.289699][  T117]  vpanic+0x281/0x750
[  771.291139][  T117]  ? __pfx__printk+0x10/0x10
[  771.292754][  T117]  ? __pfx_vpanic+0x10/0x10
[  771.294284][  T117]  ? is_bpf_text_address+0x26/0x2b0
[  771.296156][  T117]  panic+0xb9/0xc0
[  771.297508][  T117]  ? __pfx_panic+0x10/0x10
[  771.299064][  T117]  __warn+0x31b/0x4b0
[  771.300669][  T117]  ? dbAdjTree+0x454/0x4e0
[  771.302479][  T117]  ? dbAdjTree+0x454/0x4e0
[  771.304081][  T117]  report_bug+0x2be/0x4f0
[  771.305691][  T117]  ? dbAdjTree+0x454/0x4e0
[  771.307374][  T117]  ? dbAdjTree+0x454/0x4e0
[  771.308983][  T117]  ? dbAdjTree+0x456/0x4e0
[  771.310529][  T117]  handle_bug+0x84/0x160
[  771.311985][  T117]  exc_invalid_op+0x1a/0x50
[  771.313606][  T117]  asm_exc_invalid_op+0x1a/0x20
[  771.315340][  T117] RIP: 0010:dbAdjTree+0x454/0x4e0
[  771.316971][  T117] Code: 5a ff ff ff e8 ed 30 81 fe eb 05 e8 e6 30 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 43 e0 3d 08 cc e8 cd 30 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  771.324287][  T117] RSP: 0018:ffffc9000246f508 EFLAGS: 00010293
[  771.326367][  T117] RAX: ffffffff833e7ae3 RBX: ffff88812e7c9010 RCX: ffff8881059d9cc0
[  771.329384][  T117] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  771.332668][  T117] RBP: 0000000000020056 R08: ffffea0004b9f247 R09: 1ffffd4000973e48
[  771.335336][  T117] R10: dffffc0000000000 R11: fffff94000973e49 R12: ffff88812e7c9018
[  771.338059][  T117] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  771.340627][  T117]  ? dbAdjTree+0x453/0x4e0
[  771.342070][  T117]  ? dbAdjTree+0x453/0x4e0
[  771.343698][  T117]  ? __pfx_lock_metapage+0x10/0x10
[  771.345712][  T117]  dbJoin+0x238/0x300
[  771.347148][  T117]  ? do_read_cache_folio+0x4c6/0x590
[  771.348779][  T117]  dbFreeBits+0x4e1/0xdb0
[  771.350122][  T117]  dbFree+0x336/0x650
[  771.351383][  T117]  txFreeMap+0x9e6/0xde0
[  771.352832][  T117]  ? do_raw_spin_unlock+0x4d/0x240
[  771.354906][  T117]  xtTruncate+0xcea/0x2e70
[  771.356805][  T117]  ? __pfx_xtTruncate+0x10/0x10
[  771.358812][  T117]  ? do_raw_spin_lock+0x121/0x290
[  771.360890][  T117]  ? __asan_memset+0x22/0x50
[  771.362575][  T117]  ? __dquot_initialize+0x218/0xcb0
[  771.364632][  T117]  jfs_free_zero_link+0x33a/0x4a0
[  771.366807][  T117]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  771.369168][  T117]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  771.371769][  T117]  jfs_evict_inode+0x363/0x440
[  771.373833][  T117]  ? evict+0x4f8/0x9c0
[  771.375590][  T117]  ? __pfx_jfs_evict_inode+0x10/0x10
[  771.377838][  T117]  evict+0x504/0x9c0
[  771.379468][  T117]  ? __pfx_evict+0x10/0x10
[  771.381387][  T117]  ? do_raw_spin_unlock+0x4d/0x240
[  771.383206][  T117]  ? _raw_spin_unlock+0x28/0x50
[  771.385211][  T117]  ? iput+0x6d8/0x9d0
[  771.386845][  T117]  jfs_lazycommit+0x43f/0xa90
[  771.388899][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  771.391139][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  771.393683][  T117]  ? __kthread_parkme+0x7b/0x200
[  771.395723][  T117]  ? __kthread_parkme+0x1a1/0x200
[  771.397865][  T117]  kthread+0x711/0x8a0
[  771.399658][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  771.401890][  T117]  ? __pfx_kthread+0x10/0x10
[  771.403819][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[  771.405986][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  771.408154][  T117]  ? __pfx_kthread+0x10/0x10
[  771.410184][  T117]  ret_from_fork+0x3fc/0x770
[  771.412302][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  771.414360][  T117]  ? __switch_to_asm+0x39/0x70
[  771.416450][  T117]  ? __switch_to_asm+0x33/0x70
[  771.418520][  T117]  ? __pfx_kthread+0x10/0x10
[  771.420434][  T117]  ret_from_fork_asm+0x1a/0x30
[  771.422398][  T117]  </TASK>
[  771.424548][  T117] Kernel Offset: disabled
[  771.426408][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:02:31  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81ae5cc8 RBX=7fffffffffffffff RCX=ffffffff8de95100 RDX=0000000000010000
RSI=0000000000000007 RDI=0000000000000007 RBP=ffff88804b027ce8 RSP=ffffc90000007e28
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff81724e10
R12=000000b382afe86d R13=000000b3846d90ae R14=ffff88804b027ce8 R15=000000000002523a
RIP=ffffffff81ae5d8e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd3f7b5e48 CR3=00000000277c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99def670 RSP=ffffc9000246ec50
R8 =ffff8881083f8237 R9 =1ffff1102107f046 R10=dffffc0000000000 R11=ffffffff854f1c30
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1ca7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fde97bff000 CR3=000000003a4fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=8d1da7a11d39ed81 869a8201b00c3cee
XMM02=00007fce6cd87498 00007fce6cd87470 XMM03=00007fce6cd874a8 00007fce6cd874a0
XMM04=00007fce6d8ed100 00007fce6cd87460 XMM05=00007fce6cd87478 00007fce6cd874c0
XMM06=00007fce6cd874b8 00007fce6cd874b0 XMM07=00007fce6cd874a8 00007fce6cd874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fce6cc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
