last executing test programs:

2.192412248s ago: executing program 0 (id=74):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000140)="54c1", 0x2, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50)

1.954612719s ago: executing program 0 (id=75):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/234, 0xea}], 0x2000)

1.776588046s ago: executing program 0 (id=77):
unshare(0x2c020400)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x20, r0}, 0x0)

1.552764253s ago: executing program 0 (id=78):
r0 = syz_open_dev$video(&(0x7f0000000440), 0x8002, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x1, {0x0, 0x1000, 0xffffffff}})

1.160414249s ago: executing program 0 (id=79):
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

881.933002ms ago: executing program 0 (id=81):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0xba, 0x9f}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x9, "a39f"}, @main=@item_012={0x1, 0x0, 0x9, "ed"}]}}, 0x0}, 0x0)

693.880481ms ago: executing program 1 (id=86):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x16}], 0x1, 0x7000, 0x0, 0x0)

605.064815ms ago: executing program 2 (id=87):
unshare(0x2c020400)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
ppoll(&(0x7f00000001c0)=[{r0, 0x2002}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0)

589.755217ms ago: executing program 1 (id=88):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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")

464.370278ms ago: executing program 2 (id=89):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0)

391.221926ms ago: executing program 2 (id=90):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200160000000600002fb96dbcf706e105000700810000008100", 0x1c}, {&(0x7f0000002980)="bb08178d797d17619f51", 0xa}, {&(0x7f0000000240)="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", 0xfc}, {&(0x7f0000000340)="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", 0xe38}], 0x4}, 0xc0)

391.021765ms ago: executing program 1 (id=91):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

310.199391ms ago: executing program 2 (id=92):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r0, 0x540b, 0x2)

309.980303ms ago: executing program 1 (id=93):
unshare(0x22060480)
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)

259.482331ms ago: executing program 2 (id=94):
syz_open_dev$hiddev(0x0, 0x1, 0x4000)
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x800840, &(0x7f00000002c0)=ANY=[@ANYBLOB="73686f727461640000f8134223e5493e00006d653d303030303030303030303030308ef3139bb030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000000980)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
ftruncate(r0, 0x81fd)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])

154.80585ms ago: executing program 1 (id=95):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nolazytime}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
fallocate(r0, 0x40, 0x390, 0x2)

66.754496ms ago: executing program 2 (id=96):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

0s ago: executing program 1 (id=97):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28874' (ED25519) to the list of known hosts.
syzkaller login: [   56.686705][ T5832] cgroup: Unknown subsys name 'net'
[   56.787633][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.794321][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.183889][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.176543][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.183709][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.193208][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.198579][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.213547][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.228531][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.232440][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.237680][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.242341][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.247481][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.291048][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.294994][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.300255][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.305412][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.309050][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.586165][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   65.666040][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   65.774275][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.777675][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.780578][ T5851] bridge_slave_0: entered allmulticast mode
[   65.784717][ T5851] bridge_slave_0: entered promiscuous mode
[   65.796025][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.798911][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.801787][ T5851] bridge_slave_1: entered allmulticast mode
[   65.807787][ T5851] bridge_slave_1: entered promiscuous mode
[   65.811904][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   65.886907][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.894039][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.896909][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.899939][ T5846] bridge_slave_0: entered allmulticast mode
[   65.906271][ T5846] bridge_slave_0: entered promiscuous mode
[   65.911469][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.942063][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.945273][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.948050][ T5846] bridge_slave_1: entered allmulticast mode
[   65.950789][ T5846] bridge_slave_1: entered promiscuous mode
[   65.972731][ T5851] team0: Port device team_slave_0 added
[   66.002692][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.007678][ T5851] team0: Port device team_slave_1 added
[   66.011790][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.015640][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.018024][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.020238][ T5854] bridge_slave_0: entered allmulticast mode
[   66.023626][ T5854] bridge_slave_0: entered promiscuous mode
[   66.056682][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.059935][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.063576][ T5854] bridge_slave_1: entered allmulticast mode
[   66.067683][ T5854] bridge_slave_1: entered promiscuous mode
[   66.072039][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.076515][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.087554][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.120580][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.123628][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.133922][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.140054][ T5846] team0: Port device team_slave_0 added
[   66.166769][ T5846] team0: Port device team_slave_1 added
[   66.171518][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.180459][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.239493][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.242073][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.251584][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.258193][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.260956][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.271187][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.308982][ T5851] hsr_slave_0: entered promiscuous mode
[   66.312174][ T5851] hsr_slave_1: entered promiscuous mode
[   66.316592][ T5854] team0: Port device team_slave_0 added
[   66.350034][ T5854] team0: Port device team_slave_1 added
[   66.384563][ T5846] hsr_slave_0: entered promiscuous mode
[   66.387475][ T5846] hsr_slave_1: entered promiscuous mode
[   66.390114][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   66.392392][ T5846] Cannot create hsr debugfs directory
[   66.408459][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.411072][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.420132][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.425047][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.427324][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.435368][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.567573][ T5854] hsr_slave_0: entered promiscuous mode
[   66.569748][ T5854] hsr_slave_1: entered promiscuous mode
[   66.572457][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   66.575932][ T5854] Cannot create hsr debugfs directory
[   66.780613][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.787577][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.807307][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.814447][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.877336][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.884924][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.903714][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.910390][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.959201][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.979194][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.991095][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.999397][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.070687][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.104373][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   67.121174][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.123966][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.136504][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.148973][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.151774][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.197831][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.201159][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.213800][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   67.231953][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.234480][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.248121][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   67.266508][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.269009][ T4659] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.272558][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.274829][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.293516][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.296191][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.304184][   T54] Bluetooth: hci1: command tx timeout
[   67.306144][   T54] Bluetooth: hci0: command tx timeout
[   67.393680][ T5849] Bluetooth: hci2: command tx timeout
[   67.440853][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.498472][ T5851] veth0_vlan: entered promiscuous mode
[   67.504856][ T5851] veth1_vlan: entered promiscuous mode
[   67.530541][ T5851] veth0_macvtap: entered promiscuous mode
[   67.546845][ T5851] veth1_macvtap: entered promiscuous mode
[   67.580740][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.602076][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.616801][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.627081][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.630697][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.649646][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.662074][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.674502][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.760585][ T4659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.765376][ T4659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.788723][ T5854] veth0_vlan: entered promiscuous mode
[   67.804625][ T5846] veth0_vlan: entered promiscuous mode
[   67.814533][ T4040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.817441][ T4040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.821339][ T5846] veth1_vlan: entered promiscuous mode
[   67.828487][ T5854] veth1_vlan: entered promiscuous mode
[   67.880434][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.888652][ T5846] veth0_macvtap: entered promiscuous mode
[   67.909840][ T5854] veth0_macvtap: entered promiscuous mode
[   67.936705][ T5854] veth1_macvtap: entered promiscuous mode
[   67.949571][ T5846] veth1_macvtap: entered promiscuous mode
[   67.975131][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.994643][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.007281][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.025697][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.029637][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.049761][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.055252][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.073620][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.077145][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.080537][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.100896][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.110960][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.206397][  T496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.209410][  T496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.268445][  T496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.274867][  T496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.291072][  T496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.297064][  T496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.344071][  T496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.348378][  T496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.408445][ T5919] process 'syz.0.1' launched './file0' with NULL argv: empty string added
[   68.610434][ T5917] loop2: detected capacity change from 0 to 32768
[   68.618904][ T5917] XFS: noikeep mount option is deprecated.
[   68.654709][ T5917] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   68.701013][ T5917] XFS (loop2): Ending clean mount
[   68.707004][ T5917] XFS (loop2): Quotacheck needed: Please wait.
[   68.739576][ T5917] XFS (loop2): Quotacheck: Done.
[   68.781706][ T5947] netlink: 'syz.1.13': attribute type 1 has an invalid length.
[   68.784711][ T5947] netlink: 144 bytes leftover after parsing attributes in process `syz.1.13'.
[   68.790624][ T5851] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   68.800483][ T5947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13'.
[   69.174395][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.214234][ T5958] loop1: detected capacity change from 0 to 32768
[   69.319219][ T5958] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   69.319233][ T5958]   allowing incompatible features above 0.0: (unknown version)
[   69.319238][ T5958]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   69.332450][ T5958] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   69.335174][    T9] usb 1-1: Using ep0 maxpacket: 32
[   69.336937][ T5958] bcachefs (loop1): initializing new filesystem
[   69.341298][    T9] usb 1-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config
[   69.349755][    T9] usb 1-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5
[   69.352437][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.355087][    T9] usb 1-1: Product: syz
[   69.356637][    T9] usb 1-1: Manufacturer: syz
[   69.358222][ T5958] bcachefs (loop1): going read-write
[   69.360210][    T9] usb 1-1: SerialNumber: syz
[   69.371357][ T5958] bcachefs (loop1): marking superblocks
[   69.380299][    T9] pwc: Askey VC010 type 1 USB webcam detected.
[   69.384059][ T5849] Bluetooth: hci0: command tx timeout
[   69.385251][   T54] Bluetooth: hci1: command tx timeout
[   69.393876][ T5958] bcachefs (loop1): initializing freespace
[   69.399798][ T5958] bcachefs (loop1): done initializing freespace
[   69.406283][ T5958] bcachefs (loop1): reading snapshots table
[   69.408338][ T5958] bcachefs (loop1): reading snapshots done
[   69.424092][ T5958] bcachefs (loop1): done starting filesystem
[   69.463238][   T54] Bluetooth: hci2: command tx timeout
[   69.499194][ T5958] syz.1.19 (5958) used greatest stack depth: 17224 bytes left
[   69.519992][ T5846] bcachefs (loop1): shutting down
[   69.521790][ T5846] bcachefs (loop1): going read-only
[   69.526272][ T5846] bcachefs (loop1): finished waiting for writes to stop
[   69.530307][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   69.557387][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   69.561919][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[   69.565059][ T5846] bcachefs (loop1): marking filesystem clean
[   69.591637][    T9] pwc: send_video_command error -71
[   69.594473][    T9] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   69.601838][    T9] Philips webcam 1-1:76.0: probe with driver Philips webcam failed with error -71
[   69.606029][ T5846] bcachefs (loop1): shutdown complete
[   69.627674][    T9] usb 1-1: USB disconnect, device number 2
[   70.554466][ T5985] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   70.563312][ T5985] CIFS mount error: No usable UNC path provided in device string!
[   70.563312][ T5985] 
[   70.566817][ T5985] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   70.737363][ T5986] loop0: detected capacity change from 0 to 32768
[   70.753754][ T5986] 
[   70.753754][ T5986]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   70.753754][ T5986] 
[   70.761335][ T5986] JFS: metapage_get_blocks failed
[   70.763924][ T5986] ERROR: (device loop0): release_metapage: metapage_write_one() failed
[   70.763924][ T5986] 
[   70.768861][ T5986] ERROR: (device loop0): diWrite: ixpxd invalid
[   70.768861][ T5986] 
[   70.772351][ T5986] ERROR: (device loop0): txCommit: 
[   70.772351][ T5986] 
[   71.032368][ T5854] 
[   71.032368][ T5854]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   71.032368][ T5854] 
[   71.118963][ T5854] 
[   71.118963][ T5854]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   71.118963][ T5854] 
[   71.184995][ T5992] binder: 5989:5992 ioctl c018620c 2000000000c0 returned -1
[   71.321326][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.323931][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.539424][ T5849] Bluetooth: hci1: command tx timeout
[   71.544358][   T54] Bluetooth: hci0: command tx timeout
[   71.552954][   T54] Bluetooth: hci2: command tx timeout
[   72.080698][ T6014] loop0: detected capacity change from 0 to 512
[   72.099648][ T6014] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.106452][ T6014] EXT4-fs: inline encryption not supported
[   72.115452][ T6014] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   72.129454][ T6014] EXT4-fs (loop0): can't mount with both data=journal and delalloc
[   72.355988][ T6031] loop1: detected capacity change from 0 to 512
[   72.397224][ T6031] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.41: casefold flag without casefold feature
[   72.403697][ T6031] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.41: couldn't read orphan inode 15 (err -117)
[   72.409890][ T6031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.440547][  T975] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   72.613364][  T975] usb 3-1: Using ep0 maxpacket: 16
[   72.627514][  T975] usb 3-1: unable to get BOS descriptor or descriptor too short
[   72.637177][  T975] usb 3-1: config 1 has an invalid interface number: 231 but max is 0
[   72.641251][  T975] usb 3-1: config 1 has no interface number 0
[   72.644252][  T975] usb 3-1: config 1 interface 231 has no altsetting 0
[   72.711053][  T975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[   72.723737][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.731824][  T975] usb 3-1: Product: syz
[   72.737832][  T975] usb 3-1: Manufacturer: syz
[   72.742523][  T975] usb 3-1: SerialNumber: syz
[   72.845588][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.048250][  T975] usbtest 3-1:1.231: couldn't get endpoints, -71
[   73.054136][  T975] usbtest 3-1:1.231: probe with driver usbtest failed with error -71
[   73.070186][  T975] usb 3-1: USB disconnect, device number 2
[   73.229057][ T6049] loop0: detected capacity change from 0 to 16
[   73.237353][ T6049] erofs (device loop0): mounted with root inode @ nid 36.
[   73.243802][ T6049] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36
[   73.247078][ T6049] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36
[   73.250301][ T6049] erofs (device loop0): read error -117 @ 72 of nid 36
[   73.408676][  T792] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.545143][   T54] Bluetooth: hci1: command tx timeout
[   73.553725][  T792] usb 2-1: Using ep0 maxpacket: 16
[   73.558933][  T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.563422][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   73.567840][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   73.577471][  T792] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   73.591818][  T792] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   73.605705][  T792] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   73.609301][  T792] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   73.618705][  T792] usb 2-1: Manufacturer: syz
[   73.624380][ T5849] Bluetooth: hci0: command tx timeout
[   73.626641][   T54] Bluetooth: hci2: command tx timeout
[   73.643563][  T792] usb 2-1: config 0 descriptor??
[   73.795893][ T6066] loop2: detected capacity change from 0 to 512
[   73.819956][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.829016][ T6066] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   73.851482][ T6066] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 7: comm syz.2.55: lblock 12 mapped to illegal pblock 7 (length 22)
[   73.860195][ T6066] EXT4-fs (loop2): Remounting filesystem read-only
[   73.885022][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.914121][  T792] rc_core: IR keymap rc-hauppauge not found
[   73.917456][  T792] Registered IR keymap rc-empty
[   73.920830][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   73.921804][ T6071] loop2: detected capacity change from 0 to 8
[   73.943575][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   73.946249][ T6071] unable to read xattr id index table
[   73.966310][  T792] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   73.987964][  T792] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input4
[   74.007995][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.033663][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.054341][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.073029][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.093728][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.113061][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.133073][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.153486][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.173036][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.193029][  T792] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   74.217533][  T792] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[   74.220949][  T792] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   74.326258][  T792] usb 2-1: USB disconnect, device number 2
[   74.413037][  T975] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   74.573096][  T975] usb 3-1: Using ep0 maxpacket: 32
[   74.587079][  T975] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[   74.590190][  T975] usb 3-1: config 4 has no interface number 0
[   74.592593][  T975] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.603238][  T975] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.607419][  T975] usb 3-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[   74.613508][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.634384][  T975] hub 3-1:4.128: USB hub found
[   74.826410][  T975] hub 3-1:4.128: config failed, can't read hub descriptor (err -90)
[   74.850313][ T6096] loop0: detected capacity change from 0 to 32768
[   74.858249][ T6096] =======================================================
[   74.858249][ T6096] WARNING: The mand mount option has been deprecated and
[   74.858249][ T6096]          and is ignored by this kernel. Remove the mand
[   74.858249][ T6096]          option from the mount to silence this warning.
[   74.858249][ T6096] =======================================================
[   74.888559][ T6096] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas: bad nr_required in entry (unknown data_type 155): 239/36 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 8 26 41 44 51 70 73 87 93 102 106 112 120 128 144 184 203 237 245]
[   74.888559][ T6096] replicas (size 64):
[   74.888559][ T6096] (unknown data_type 155): 239/36 [237 106 112 73 203 144 87 44 70 41 26 120 93 128 0 0 0 0 0 0 0 0 0 0 1 8 0 0 0 184 245 51 102 0 0 0]
[   74.888559][ T6096] 
[   74.922627][ T6096] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[   75.133765][    T9] usb 3-1: USB disconnect, device number 3
[   75.277467][ T6109] loop0: detected capacity change from 0 to 1024
[   75.307554][ T6109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.430893][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.681857][ T6115] loop2: detected capacity change from 0 to 512
[   75.693565][ T6115] EXT4-fs: Ignoring removed mblk_io_submit option
[   75.696161][ T6115] EXT4-fs: inline encryption not supported
[   75.704498][ T6115] EXT4-fs: Ignoring removed mblk_io_submit option
[   75.723228][ T6115] EXT4-fs (loop2): Test dummy encryption mode enabled
[   75.729442][ T6115] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   75.773328][ T6115] EXT4-fs (loop2): 1 truncate cleaned up
[   75.780913][ T6115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.535499][ T6115] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   76.604123][ T6138] program syz.1.83 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.685760][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.747057][ T6142] loop1: detected capacity change from 0 to 4096
[   76.749743][ T6144] warning: `syz.2.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.769629][ T6142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.793232][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   76.827384][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.890038][ T6149] loop1: detected capacity change from 0 to 1024
[   76.904341][ T6149] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   76.911797][ T6149] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   76.916626][ T6149] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   76.920877][ T6149] JBD2: no valid journal superblock found
[   76.924207][ T6149] EXT4-fs (loop1): Could not load journal inode
[   76.953702][    T9] usb 1-1: Using ep0 maxpacket: 8
[   76.966366][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   76.969097][    T9] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[   76.977873][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.995232][    T9] usb 1-1: config 0 descriptor??
[   77.186753][ T6161] loop2: detected capacity change from 0 to 1024
[   77.197752][ T6161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.270504][ T6164] loop1: detected capacity change from 0 to 1024
[   77.276783][ T6164] EXT4-fs: Ignoring removed orlov option
[   77.307434][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.327549][   T33] audit: type=1800 audit(1755261517.151:2): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.95" name="file1" dev="loop1" ino=15 res=0 errno=0
[   77.384111][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.454360][    T9] hid-u2fzero 0003:20A0:4287.0001: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.0-1/input0
[   77.457885][ T6170] loop1: detected capacity change from 0 to 512
[   77.466759][ T6170] EXT4-fs: Ignoring removed i_version option
[   77.469179][    T9] hid-u2fzero 0003:20A0:4287.0001: NitroKey U2F LED initialised
[   77.469301][    T9] hid-u2fzero 0003:20A0:4287.0001: NitroKey U2F RNG initialised
[   77.487525][ T6170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   77.498522][ T6170] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   77.505263][ T6170] EXT4-fs (loop1): 1 truncate cleaned up
[   77.525602][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.566956][ T5846] EXT4-fs warning (device loop1): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting
[   77.572304][ T5846] ------------[ cut here ]------------
[   77.574907][ T5846] WARNING: CPU: 1 PID: 5846 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   77.578783][ T5846] Modules linked in:
[   77.581590][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   77.587688][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.591079][ T5846] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   77.593849][ T5846] Code: 8b 74 24 10 e9 d4 03 00 00 e8 4c b4 3a ff 48 89 df 48 c7 c6 5b c5 97 8d ba bd 05 00 00 48 c7 c1 80 e4 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[   77.600735][ T5846] RSP: 0018:ffffc900038ff3e0 EFLAGS: 00010246
[   77.603177][ T5846] RAX: 68d4eeb3ce416100 RBX: ffff88811a314000 RCX: 68d4eeb3ce416100
[   77.606125][ T5846] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   77.609590][ T5846] RBP: ffffc900038ff570 R08: ffffc900038fefc7 R09: 1ffff9200071fdf8
[   77.613338][ T5846] R10: dffffc0000000000 R11: fffff5200071fdf9 R12: 1ffff9200071fe90
[   77.615731][ T5846] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888038d23c20
[   77.618246][ T5846] FS:  0000555562194500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[   77.621286][ T5846] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.623950][ T5846] CR2: 00005555621af5c8 CR3: 0000000021e7e000 CR4: 00000000000006f0
[   77.626531][ T5846] Call Trace:
[   77.627576][ T5846]  <TASK>
[   77.628510][ T5846]  ? __pfx___might_resched+0x10/0x10
[   77.630168][ T5846]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[   77.632455][ T5846]  ? ext4_xattr_block_set+0xd6/0x2ac0
[   77.634283][ T5846]  ext4_xattr_block_set+0x223/0x2ac0
[   77.636097][ T5846]  ? __pfx___might_resched+0x10/0x10
[   77.638056][ T5846]  ? __pfx_check_xattrs+0x10/0x10
[   77.640014][ T5846]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[   77.642267][ T5846]  ? ext4_xattr_block_find+0x2d4/0x350
[   77.644414][ T5846]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[   77.646421][ T5846]  __ext4_expand_extra_isize+0x30d/0x400
[   77.648144][ T5846]  __ext4_mark_inode_dirty+0x46c/0x700
[   77.649782][ T5846]  ext4_dirty_inode+0xd0/0x110
[   77.651280][ T5846]  ? __pfx_ext4_dirty_inode+0x10/0x10
[   77.652986][ T5846]  __mark_inode_dirty+0x2d1/0xdf0
[   77.654986][ T5846]  iput+0x1ee/0x9d0
[   77.656185][ T5846]  __dentry_kill+0x209/0x660
[   77.657584][ T5846]  ? shrink_kill+0x8d/0x2c0
[   77.658968][ T5846]  shrink_kill+0xa9/0x2c0
[   77.660277][ T5846]  shrink_dentry_list+0x2e0/0x5e0
[   77.661938][ T5846]  shrink_dcache_parent+0xa1/0x2c0
[   77.663775][ T5846]  ? __pfx_shrink_dcache_parent+0x10/0x10
[   77.665827][ T5846]  ? call_rcu+0x6ff/0x9c0
[   77.667165][ T5846]  do_one_tree+0x23/0xe0
[   77.668468][ T5846]  shrink_dcache_for_umount+0xa0/0x170
[   77.670104][ T5846]  generic_shutdown_super+0x67/0x2c0
[   77.671701][ T5846]  kill_block_super+0x44/0x90
[   77.673026][    T9] usb 1-1: USB disconnect, device number 3
[   77.673212][ T5846]  ext4_kill_sb+0x68/0xb0
[   77.676540][ T5846]  deactivate_locked_super+0xbc/0x130
[   77.678517][ T5846]  cleanup_mnt+0x425/0x4c0
[   77.680007][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.682572][ T5846]  task_work_run+0x1d4/0x260
[   77.685397][ T5846]  ? __pfx_task_work_run+0x10/0x10
[   77.687421][ T5846]  ? __x64_sys_umount+0x122/0x160
[   77.689245][ T5846]  ? exit_to_user_mode_loop+0x40/0x110
[   77.691151][ T5846]  exit_to_user_mode_loop+0xec/0x110
[   77.693385][ T5846]  do_syscall_64+0x2bd/0x3b0
[   77.695156][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.696966][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.698991][ T5846]  ? exc_page_fault+0x9f/0xf0
[   77.700594][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.703167][ T5846] RIP: 0033:0x7f364458ff17
[   77.704892][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   77.711901][ T5846] RSP: 002b:00007fff7840ffc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   77.715063][ T5846] RAX: 0000000000000000 RBX: 00007f3644611c05 RCX: 00007f364458ff17
[   77.717655][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff78410080
[   77.720470][ T5846] RBP: 00007fff78410080 R08: 0000000000000000 R09: 0000000000000000
[   77.724140][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff78411110
[   77.726725][ T5846] R13: 00007f3644611c05 R14: 0000000000012e73 R15: 00007fff78411150
[   77.728820][  T792] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   77.729362][ T5846]  </TASK>
[   77.733388][ T5846] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   77.735973][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   77.740327][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.743946][ T5846] Call Trace:
[   77.745195][ T5846]  <TASK>
[   77.746226][ T5846]  dump_stack_lvl+0x99/0x250
[   77.747973][ T5846]  ? __asan_memcpy+0x40/0x70
[   77.749707][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.751667][ T5846]  ? __pfx__printk+0x10/0x10
[   77.753418][ T5846]  vpanic+0x281/0x750
[   77.754934][ T5846]  ? __pfx__printk+0x10/0x10
[   77.756680][ T5846]  ? __pfx_vpanic+0x10/0x10
[   77.758058][ T5846]  ? is_bpf_text_address+0x26/0x2b0
[   77.759778][ T5846]  panic+0xb9/0xc0
[   77.761017][ T5846]  ? __pfx_panic+0x10/0x10
[   77.762641][ T5846]  __warn+0x31b/0x4b0
[   77.764084][ T5846]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   77.766345][ T5846]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   77.768587][ T5846]  report_bug+0x2be/0x4f0
[   77.770225][ T5846]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   77.772610][ T5846]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   77.774910][ T5846]  ? ext4_xattr_inode_lookup_create+0xa82/0x1c20
[   77.777198][ T5846]  handle_bug+0x84/0x160
[   77.778681][ T5846]  exc_invalid_op+0x1a/0x50
[   77.780274][ T5846]  asm_exc_invalid_op+0x1a/0x20
[   77.781721][ T5846] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   77.783981][ T5846] Code: 8b 74 24 10 e9 d4 03 00 00 e8 4c b4 3a ff 48 89 df 48 c7 c6 5b c5 97 8d ba bd 05 00 00 48 c7 c1 80 e4 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[   77.790931][ T5846] RSP: 0018:ffffc900038ff3e0 EFLAGS: 00010246
[   77.793200][ T5846] RAX: 68d4eeb3ce416100 RBX: ffff88811a314000 RCX: 68d4eeb3ce416100
[   77.795921][ T5846] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   77.798431][ T5846] RBP: ffffc900038ff570 R08: ffffc900038fefc7 R09: 1ffff9200071fdf8
[   77.801435][ T5846] R10: dffffc0000000000 R11: fffff5200071fdf9 R12: 1ffff9200071fe90
[   77.804398][ T5846] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888038d23c20
[   77.807396][ T5846]  ? __pfx___might_resched+0x10/0x10
[   77.809361][ T5846]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[   77.811843][ T5846]  ? ext4_xattr_block_set+0xd6/0x2ac0
[   77.813931][ T5846]  ext4_xattr_block_set+0x223/0x2ac0
[   77.815864][ T5846]  ? __pfx___might_resched+0x10/0x10
[   77.817732][ T5846]  ? __pfx_check_xattrs+0x10/0x10
[   77.819492][ T5846]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[   77.821573][ T5846]  ? ext4_xattr_block_find+0x2d4/0x350
[   77.823222][ T5846]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[   77.824994][ T5846]  __ext4_expand_extra_isize+0x30d/0x400
[   77.826682][ T5846]  __ext4_mark_inode_dirty+0x46c/0x700
[   77.828390][ T5846]  ext4_dirty_inode+0xd0/0x110
[   77.829925][ T5846]  ? __pfx_ext4_dirty_inode+0x10/0x10
[   77.831741][ T5846]  __mark_inode_dirty+0x2d1/0xdf0
[   77.833274][ T5846]  iput+0x1ee/0x9d0
[   77.834609][ T5846]  __dentry_kill+0x209/0x660
[   77.836267][ T5846]  ? shrink_kill+0x8d/0x2c0
[   77.837978][ T5846]  shrink_kill+0xa9/0x2c0
[   77.839587][ T5846]  shrink_dentry_list+0x2e0/0x5e0
[   77.841483][ T5846]  shrink_dcache_parent+0xa1/0x2c0
[   77.843425][ T5846]  ? __pfx_shrink_dcache_parent+0x10/0x10
[   77.845528][ T5846]  ? call_rcu+0x6ff/0x9c0
[   77.847183][ T5846]  do_one_tree+0x23/0xe0
[   77.848783][ T5846]  shrink_dcache_for_umount+0xa0/0x170
[   77.850812][ T5846]  generic_shutdown_super+0x67/0x2c0
[   77.852791][ T5846]  kill_block_super+0x44/0x90
[   77.854580][ T5846]  ext4_kill_sb+0x68/0xb0
[   77.856129][ T5846]  deactivate_locked_super+0xbc/0x130
[   77.857904][ T5846]  cleanup_mnt+0x425/0x4c0
[   77.859242][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.860816][ T5846]  task_work_run+0x1d4/0x260
[   77.862453][ T5846]  ? __pfx_task_work_run+0x10/0x10
[   77.864314][ T5846]  ? __x64_sys_umount+0x122/0x160
[   77.866124][ T5846]  ? exit_to_user_mode_loop+0x40/0x110
[   77.867922][ T5846]  exit_to_user_mode_loop+0xec/0x110
[   77.869405][ T5846]  do_syscall_64+0x2bd/0x3b0
[   77.870999][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.873003][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.875267][ T5846]  ? exc_page_fault+0x9f/0xf0
[   77.876956][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.878921][ T5846] RIP: 0033:0x7f364458ff17
[   77.880467][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   77.887083][ T5846] RSP: 002b:00007fff7840ffc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   77.889957][ T5846] RAX: 0000000000000000 RBX: 00007f3644611c05 RCX: 00007f364458ff17
[   77.892642][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff78410080
[   77.895358][ T5846] RBP: 00007fff78410080 R08: 0000000000000000 R09: 0000000000000000
[   77.898098][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff78411110
[   77.900943][ T5846] R13: 00007f3644611c05 R14: 0000000000012e73 R15: 00007fff78411150
[   77.903835][ T5846]  </TASK>
[   77.905759][ T5846] Kernel Offset: disabled
[   77.907400][ T5846] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:38:37  Registers:
info registers vcpu 0

CPU#0
RAX=d24033426449fe00 RBX=ffffffff81968308 RCX=d24033426449fe00 RDX=0000000000000001
RSI=ffffffff8d9b6b97 RDI=ffffffff8be33500 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37d30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=0000000107046000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 000055558c4364a0
XMM02=10006c90030b8004 6c80036c800420a0 XMM03=b003038610006cb0 031c80046ca00310
XMM04=030fffffffffffff 0420c00304100020 XMM05=010880c010007010 0020800401000002
XMM06=0806080156fc0880 80080020e0030010 XMM07=0020d0030fffffff ffffff0420c00304
XMM08=100020b003038610 006cb0031c80046c XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900038feb90
R8 =ffff888020b48237 R9 =1ffff11004169046 R10=dffffc0000000000 R11=ffffffff854efc10
R12=dffffc0000000000 R13=ffffffff99af98dc R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efc8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555562194500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555621af5c8 CR3=0000000021e7e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f8596012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
