last executing test programs:

2.639924083s ago: executing program 2 (id=208):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="e231", 0x2}], 0x1, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/72, 0x48}], 0x1}, 0x0)

2.527663689s ago: executing program 2 (id=209):
mkdir(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f00000002c0)='FREEZING\x00', 0x9)

2.055270119s ago: executing program 2 (id=210):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000940)={[{@jqfmt_vfsv1}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc78c}}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0x0, 0x45d, &(0x7f00000004c0)="$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")

1.949980925s ago: executing program 2 (id=212):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)={0x2008})

1.876839042s ago: executing program 2 (id=215):
syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

882.238121ms ago: executing program 2 (id=228):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r0, 0x1)

318.982133ms ago: executing program 0 (id=239):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002680), 0x80000)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000026c0)={0xf, 0x0, 0x45})

259.632231ms ago: executing program 0 (id=241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r1, 0xfc5, 0x0, 0x25dfcbff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

190.396911ms ago: executing program 0 (id=243):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100}, 0x94)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0})

190.139841ms ago: executing program 1 (id=244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000008000000001a00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

125.161292ms ago: executing program 0 (id=245):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4)

125.018171ms ago: executing program 1 (id=246):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000080)={0x2, &(0x7f0000000040)})

124.854791ms ago: executing program 1 (id=247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0)

124.755411ms ago: executing program 0 (id=248):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x2, 0x2000}, 0x4)

60.15028ms ago: executing program 1 (id=249):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

59.865493ms ago: executing program 0 (id=250):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=ascii,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB='8\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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")
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x1)

277.91µs ago: executing program 1 (id=251):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000020003000000000002000100", @ANYRES32=0x0, @ANYBLOB="0400000000000000100005000000000020"], 0x2c, 0x0)

0s ago: executing program 1 (id=252):
r0 = syz_create_resource$binfmt(&(0x7f0000000600)='./file0\x00')
r1 = inotify_init()
r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x400008bf)
close(r2)
r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4682010503fcffffffffffffff02003e0005000000010500000000000040000000000000004401000000000000000000003e003800010007002500010003000000000000000900000000000000ff030000000000000101000000000000b4"], 0x78)
close(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
execveat$binfmt(r4, r0, 0x0, 0x0, 0x1000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7050' (ED25519) to the list of known hosts.
syzkaller login: [   55.370853][ T5828] cgroup: Unknown subsys name 'net'
[   55.466257][ T5828] cgroup: Unknown subsys name 'cpuset'
[   55.470388][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.811009][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.684829][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.689166][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.693151][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.696902][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.702177][ T5931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.707823][ T5931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.711406][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.753831][ T5931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.763695][ T5931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.768907][ T5931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.821146][ T5931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.826846][ T5931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.831558][ T5931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.837610][ T5931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.841431][ T5931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.134011][ T5927] chnl_net:caif_netlink_parms(): no params data found
[   70.196594][ T5930] chnl_net:caif_netlink_parms(): no params data found
[   70.279492][ T5935] chnl_net:caif_netlink_parms(): no params data found
[   70.303576][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.306610][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.309550][ T5927] bridge_slave_0: entered allmulticast mode
[   70.313961][ T5927] bridge_slave_0: entered promiscuous mode
[   70.337529][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.340573][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.343799][ T5927] bridge_slave_1: entered allmulticast mode
[   70.347624][ T5927] bridge_slave_1: entered promiscuous mode
[   70.406104][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.409081][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.412006][ T5930] bridge_slave_0: entered allmulticast mode
[   70.417096][ T5930] bridge_slave_0: entered promiscuous mode
[   70.435236][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.449971][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.453211][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.455893][ T5930] bridge_slave_1: entered allmulticast mode
[   70.458773][ T5930] bridge_slave_1: entered promiscuous mode
[   70.474519][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.511748][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.518151][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.521843][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.525080][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.527794][ T5935] bridge_slave_0: entered allmulticast mode
[   70.531513][ T5935] bridge_slave_0: entered promiscuous mode
[   70.536727][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.539629][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.542512][ T5935] bridge_slave_1: entered allmulticast mode
[   70.546863][ T5935] bridge_slave_1: entered promiscuous mode
[   70.596350][ T5927] team0: Port device team_slave_0 added
[   70.599478][ T5930] team0: Port device team_slave_0 added
[   70.603125][ T5927] team0: Port device team_slave_1 added
[   70.621443][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.626891][ T5930] team0: Port device team_slave_1 added
[   70.631217][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.683533][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.686216][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.696458][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.725390][ T5935] team0: Port device team_slave_0 added
[   70.727616][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.729724][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.739648][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.745687][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.748152][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.758999][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.765431][ T5935] team0: Port device team_slave_1 added
[   70.774620][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.776877][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.787322][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.828835][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.831136][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.840004][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.874714][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.877398][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.886671][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.896168][ T5927] hsr_slave_0: entered promiscuous mode
[   70.899483][ T5927] hsr_slave_1: entered promiscuous mode
[   70.922953][ T5930] hsr_slave_0: entered promiscuous mode
[   70.926134][ T5930] hsr_slave_1: entered promiscuous mode
[   70.929122][ T5930] debugfs: 'hsr0' already exists in 'hsr'
[   70.931623][ T5930] Cannot create hsr debugfs directory
[   70.996604][ T5935] hsr_slave_0: entered promiscuous mode
[   70.999450][ T5935] hsr_slave_1: entered promiscuous mode
[   71.002543][ T5935] debugfs: 'hsr0' already exists in 'hsr'
[   71.005303][ T5935] Cannot create hsr debugfs directory
[   71.118657][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.120835][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.257705][ T5927] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.267960][ T5927] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.280773][ T5927] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.287976][ T5927] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.346275][ T5935] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.366292][ T5935] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.374381][ T5935] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.386152][ T5935] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.426617][ T5930] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.439263][ T5930] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.448363][ T5930] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.454204][ T5930] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.519538][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.541976][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[   71.566650][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.569201][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.586177][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.588858][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.600378][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.644612][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[   71.665612][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.668046][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.675002][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.696931][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.699597][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.721602][ T5930] 8021q: adding VLAN 0 to HW filter on device team0
[   71.747682][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.750665][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.754573][ T5931] Bluetooth: hci0: command tx timeout
[   71.758281][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.760740][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.833133][ T5931] Bluetooth: hci1: command tx timeout
[   71.842196][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.909774][ T5927] veth0_vlan: entered promiscuous mode
[   71.914135][ T5931] Bluetooth: hci2: command tx timeout
[   71.929874][ T5927] veth1_vlan: entered promiscuous mode
[   71.976045][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.992533][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.007807][ T5927] veth0_macvtap: entered promiscuous mode
[   72.026243][ T5927] veth1_macvtap: entered promiscuous mode
[   72.042384][ T5930] veth0_vlan: entered promiscuous mode
[   72.060990][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.067323][ T5930] veth1_vlan: entered promiscuous mode
[   72.076489][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.095179][ T5935] veth0_vlan: entered promiscuous mode
[   72.098251][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.107054][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.116697][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.122433][ T5935] veth1_vlan: entered promiscuous mode
[   72.126300][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.165995][ T5930] veth0_macvtap: entered promiscuous mode
[   72.185923][ T5930] veth1_macvtap: entered promiscuous mode
[   72.236012][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.241007][ T5935] veth0_macvtap: entered promiscuous mode
[   72.241459][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.250812][ T5935] veth1_macvtap: entered promiscuous mode
[   72.258142][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.270960][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.294334][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.324206][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.328564][  T633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.333346][  T633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.334500][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.339155][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.349988][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.358153][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.398754][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.401461][ T5927] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.402316][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.425438][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.428853][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.490469][ T5991] dvmrp8: entered allmulticast mode
[   72.537690][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.541077][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.602175][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.609476][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.665468][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.668716][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.680630][ T5997] (syz.1.73,5997,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   72.695792][  T633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.699067][  T633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.762318][   T33] audit: type=1326 audit(1759062468.040:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.74" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59b958ec29 code=0x0
[   72.891315][ T6009] sctp: [Deprecated]: syz.0.77 (pid 6009) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.891315][ T6009] Use struct sctp_sack_info instead
[   73.552381][ T6028] warning: `syz.0.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.833144][ T5931] Bluetooth: hci0: command tx timeout
[   73.922472][ T5931] Bluetooth: hci1: command tx timeout
[   73.993013][ T5931] Bluetooth: hci2: command tx timeout
[   74.776510][ T6046] capability: warning: `syz.0.93' uses deprecated v2 capabilities in a way that may be insecure
[   75.280373][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[   75.495359][ T6064] loop2: detected capacity change from 0 to 1024
[   75.503713][ T6064] =======================================================
[   75.503713][ T6064] WARNING: The mand mount option has been deprecated and
[   75.503713][ T6064]          and is ignored by this kernel. Remove the mand
[   75.503713][ T6064]          option from the mount to silence this warning.
[   75.503713][ T6064] =======================================================
[   75.518518][ T6064] hfsplus: Bad value for 'gid'
[   75.913768][ T5931] Bluetooth: hci0: command tx timeout
[   75.999085][ T5931] Bluetooth: hci1: command tx timeout
[   76.082875][ T5931] Bluetooth: hci2: command tx timeout
[   76.194937][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'.
[   76.342025][ T6094] syzkaller0: entered allmulticast mode
[   76.353034][ T6094] syzkaller0: entered promiscuous mode
[   76.370958][ T6094] syzkaller0 (unregistering): left allmulticast mode
[   76.374313][ T6094] syzkaller0 (unregistering): left promiscuous mode
[   76.380138][ T6098] loop2: detected capacity change from 0 to 8
[   76.414445][ T6098] SQUASHFS error: Unable to read directory block [2c0:35]
[   76.911575][ T6111] batadv_slave_1: entered promiscuous mode
[   76.925359][ T6110] batadv_slave_1: left promiscuous mode
[   77.058503][ T6115] process 'syz.0.121' launched './file1' with NULL argv: empty string added
[   77.992799][ T5931] Bluetooth: hci0: command tx timeout
[   78.073718][ T5931] Bluetooth: hci1: command tx timeout
[   78.163414][ T5931] Bluetooth: hci2: command tx timeout
[   79.336190][ T6158] PKCS8: Unsupported PKCS#8 version
[   79.653705][ T5976] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   79.802673][ T5976] usb 1-1: Using ep0 maxpacket: 32
[   79.808751][ T5976] usb 1-1: config 7 has an invalid interface number: 41 but max is 0
[   79.812312][ T5976] usb 1-1: config 7 has no interface number 0
[   79.815092][ T5976] usb 1-1: config 7 interface 41 has no altsetting 0
[   79.820989][ T5976] usb 1-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice=e6.1d
[   79.824759][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.828255][ T5976] usb 1-1: Product: syz
[   79.830069][ T5976] usb 1-1: Manufacturer: syz
[   79.832045][ T5976] usb 1-1: SerialNumber: syz
[   80.058081][ T5976] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   80.075729][ T5976] snd-usb-audio 1-1:7.41: probe with driver snd-usb-audio failed with error -2
[   80.085087][ T5976] usb 1-1: USB disconnect, device number 2
[   80.096736][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.41/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   80.488575][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'.
[   80.634363][ T5236] Bluetooth: hci3: command 0x1003 tx timeout
[   80.637633][ T5931] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   81.379294][ T1269] cfg80211: failed to load regulatory.db
[   82.133394][ T6200] netlink: 272 bytes leftover after parsing attributes in process `syz.2.159'.
[   82.774012][ T6217] loop1: detected capacity change from 0 to 512
[   82.781176][ T6217] EXT4-fs: Ignoring removed nobh option
[   82.791443][ T6217] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   82.804899][ T6217] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.166: iget: bad i_size value: 38620345925642
[   82.811213][ T6217] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.166: couldn't read orphan inode 15 (err -117)
[   82.823192][ T6217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.887628][ T5927] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.227737][ T6238] loop0: detected capacity change from 0 to 4096
[   83.245963][ T6238] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   83.490918][ T6240] loop2: detected capacity change from 0 to 32768
[   83.534522][   T33] audit: type=1800 audit(1759062478.820:3): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="file1" dev="loop2" ino=4 res=0 errno=0
[   83.557360][ T6240] read_mapping_page failed!
[   83.560103][ T6240] read_mapping_page failed!
[   83.695740][ T6246] loop1: detected capacity change from 0 to 2048
[   83.717001][ T6246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.734289][ T6246] EXT4-fs (loop1): shut down requested (1)
[   83.752220][ T5927] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.870177][ T6254] loop1: detected capacity change from 0 to 128
[   83.876867][ T6254] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   83.884099][ T6254] hpfs: filesystem error: improperly stopped
[   83.886828][ T6254] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   83.890670][ T6254] hpfs: You really don't want any checks? You are crazy...
[   83.894693][ T6254] hpfs: hpfs_map_sector(): read error
[   83.897154][ T6254] hpfs: code page support is disabled
[   83.900084][ T6254] hpfs: hpfs_map_4sectors(): unaligned read
[   83.903199][ T6254] hpfs: hpfs_map_4sectors(): unaligned read
[   83.905870][ T6254] hpfs: filesystem error: unable to find root dir
[   85.298244][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[   85.423405][ T6272] loop2: detected capacity change from 0 to 2048
[   85.459409][ T6272] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[   85.645701][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   85.815062][   T10] usb 1-1: Using ep0 maxpacket: 8
[   85.819264][   T10] usb 1-1: config 0 has an invalid interface number: 200 but max is 0
[   85.822988][   T10] usb 1-1: config 0 has no interface number 0
[   85.827810][   T10] usb 1-1: config 0 interface 200 has no altsetting 0
[   85.840344][   T10] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[   85.844491][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.847967][   T10] usb 1-1: Product: syz
[   85.849961][   T10] usb 1-1: Manufacturer: syz
[   85.852039][   T10] usb 1-1: SerialNumber: syz
[   85.858569][   T10] usb 1-1: config 0 descriptor??
[   85.930133][ T6279] loop2: detected capacity change from 0 to 32768
[   85.936975][ T6279] xfs: Unknown parameter 'attr2'
[   86.087563][   T10] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input5
[   86.138635][   T10] usb 1-1: USB disconnect, device number 3
[   86.665115][ T6308] syzkaller0: entered promiscuous mode
[   86.667362][ T6308] syzkaller0: entered allmulticast mode
[   86.794919][   T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   86.963551][   T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[   86.967093][   T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   86.971687][   T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[   86.979898][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'.
[   86.983032][   T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[   86.997353][   T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   87.003260][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[   87.019756][   T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   87.028149][   T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   87.034640][   T10] usb 2-1: Product: syz
[   87.042707][   T10] usb 2-1: Manufacturer: syz
[   87.044655][   T10] usb 2-1: SerialNumber: syz
[   87.053489][   T10] usb 2-1: config 0 descriptor??
[   87.060019][ T6306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   87.066380][   T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   87.101910][   T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   87.294821][   T10] usb 2-1: USB disconnect, device number 2
[   87.309440][   T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[   87.697680][ T6324] loop2: detected capacity change from 0 to 512
[   87.716250][ T6324] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.210: inode #16777216: comm syz.2.210: iget: illegal inode #
[   87.730904][ T6324] EXT4-fs (loop2): Remounting filesystem read-only
[   87.733798][ T6324] EXT4-fs (loop2): no journal found
[   87.737958][ T6324] EXT4-fs (loop2): can't get journal size
[   87.741348][ T6324] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   87.746040][ T6324] EXT4-fs (loop2): failed to initialize system zone (-22)
[   87.749143][ T6324] EXT4-fs (loop2): mount failed
[   87.798432][ T6327] input: syz0 as /devices/virtual/input/input6
[   87.920257][ T6337] loop0: detected capacity change from 0 to 512
[   87.952529][ T6337] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   87.971123][ T6337] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   87.982842][ T6337] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   87.986747][ T6337] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.216: Failed to acquire dquot type 1
[   87.995198][ T6337] EXT4-fs (loop0): 1 truncate cleaned up
[   87.998579][ T6337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.006389][ T6344] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   88.021678][ T6337] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   88.026481][ T6337] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   88.030436][ T6344] CIFS: Unable to determine destination address
[   88.032832][ T6337] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.216: Failed to acquire dquot type 1
[   88.065085][ T5930] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.109963][ T6346] loop1: detected capacity change from 0 to 512
[   88.130914][ T6348] loop0: detected capacity change from 0 to 512
[   88.140175][ T6346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.156628][ T6346] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.157202][ T6335] loop2: detected capacity change from 0 to 32768
[   88.227550][ T5927] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.316205][ T6335] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   88.316220][ T6335]   allowing incompatible features above 0.0: (unknown version)
[   88.316224][ T6335]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   88.332165][ T6335] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   88.336195][ T6335] bcachefs (loop2): initializing new filesystem
[   88.418408][ T6367] loop1: detected capacity change from 0 to 512
[   88.429492][ T6367] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   88.453284][ T6335] bcachefs (loop2): going read-write
[   88.478031][ T6335] bcachefs (loop2): marking superblocks
[   88.517146][ T6335] bcachefs (loop2): initializing freespace
[   88.776395][ T6335] bcachefs (loop2): done initializing freespace
[   88.793268][ T6335] bcachefs (loop2): reading snapshots table
[   88.795243][ T6335] bcachefs (loop2): reading snapshots done
[   88.823963][ T6335] bcachefs (loop2): done starting filesystem
[   88.882146][ T6335] syz.2.215 (6335) used greatest stack depth: 17064 bytes left
[   88.891674][ T5935] bcachefs (loop2): shutting down
[   88.897905][ T5935] bcachefs (loop2): going read-only
[   88.900971][ T5935] bcachefs (loop2): finished waiting for writes to stop
[   88.906395][ T5935] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[   88.929256][ T5935] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   88.935556][ T5935] bcachefs (loop2): clean shutdown complete, journal seq 4
[   88.938292][ T5935] bcachefs (loop2): marking filesystem clean
[   88.979386][ T5935] bcachefs (loop2): shutdown complete
[   89.268600][ T6388] evm: overlay not supported
[   89.725870][ T6424] loop0: detected capacity change from 0 to 256
[   89.729392][ T6424] exfat: Deprecated parameter 'utf8'
[   89.760099][ T6424] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   89.814510][ T5930] BUG: sleeping function called from invalid context at fs/inode.c:1928
[   89.818103][ T5930] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5930, name: syz-executor
[   89.821584][ T5930] preempt_count: 1, expected: 0
[   89.825062][ T5930] RCU nest depth: 0, expected: 0
[   89.827109][ T5930] 2 locks held by syz-executor/5930:
[   89.829719][ T5930]  #0: ffff88810ebe80e0 (&type->s_umount_key#91){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[   89.834266][ T5930]  #1: ffff88810ebe8998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbd0
[   89.837617][ T5930] Preemption disabled at:
[   89.837624][ T5930] [<0000000000000000>] 0x0
[   89.841282][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   89.841291][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.841295][ T5930] Call Trace:
[   89.841299][ T5930]  <TASK>
[   89.841302][ T5930]  dump_stack_lvl+0x189/0x250
[   89.841313][ T5930]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.841321][ T5930]  ? __pfx__printk+0x10/0x10
[   89.841331][ T5930]  ? print_lock_name+0xde/0x100
[   89.841340][ T5930]  __might_resched+0x495/0x610
[   89.841353][ T5930]  ? __pfx___might_resched+0x10/0x10
[   89.841361][ T5930]  ? __lock_acquire+0xab9/0xd20
[   89.841375][ T5930]  iput+0x2b/0xc50
[   89.841384][ T5930]  ? hook_sb_delete+0x1a8/0xbd0
[   89.841393][ T5930]  hook_sb_delete+0x6b5/0xbd0
[   89.841399][ T5930]  ? hook_sb_delete+0x1a8/0xbd0
[   89.841408][ T5930]  ? __pfx_hook_sb_delete+0x10/0x10
[   89.841414][ T5930]  ? evict_inodes+0x67d/0x6d0
[   89.841422][ T5930]  ? __pfx_evict_inodes+0x10/0x10
[   89.841433][ T5930]  security_sb_delete+0x80/0x150
[   89.841441][ T5930]  generic_shutdown_super+0xaa/0x2c0
[   89.841448][ T5930]  kill_block_super+0x44/0x90
[   89.841456][ T5930]  exfat_kill_sb+0x41/0x80
[   89.841465][ T5930]  deactivate_locked_super+0xbc/0x130
[   89.841476][ T5930]  cleanup_mnt+0x425/0x4c0
[   89.841485][ T5930]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.841494][ T5930]  task_work_run+0x1d4/0x260
[   89.841503][ T5930]  ? __pfx_task_work_run+0x10/0x10
[   89.841510][ T5930]  ? __x64_sys_umount+0x122/0x160
[   89.841518][ T5930]  ? exit_to_user_mode_loop+0x40/0x130
[   89.841528][ T5930]  exit_to_user_mode_loop+0xe9/0x130
[   89.841537][ T5930]  do_syscall_64+0x2bd/0xfa0
[   89.841545][ T5930]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.841552][ T5930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.841558][ T5930]  ? exc_page_fault+0xab/0x100
[   89.841566][ T5930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.841573][ T5930] RIP: 0033:0x7fdbfab8ff57
[   89.841579][ T5930] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   89.841585][ T5930] RSP: 002b:00007fffc04cb598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   89.841592][ T5930] RAX: 0000000000000000 RBX: 00007fdbfac11c2d RCX: 00007fdbfab8ff57
[   89.841596][ T5930] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc04cb650
[   89.841600][ T5930] RBP: 00007fffc04cb650 R08: 0000000000000000 R09: 0000000000000000
[   89.841604][ T5930] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc04cc6e0
[   89.841608][ T5930] R13: 00007fdbfac11c2d R14: 0000000000015e3d R15: 00007fffc04cc720
[   89.841618][ T5930]  </TASK>
[   89.967017][ T6430] loop0: detected capacity change from 0 to 2048
[   89.977779][ T6430] syz.0.253: attempt to access beyond end of device
[   89.977779][ T6430] loop0: rw=0, sector=562949953421394, nr_sectors = 2 limit=2048
[   89.983457][ T6430] NILFS (loop0): I/O error reading meta-data file (ino=5, block-offset=0)
[   89.987350][ T6430] NILFS (loop0): error -5 while loading super root

VM DIAGNOSIS:
12:28:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003f673f0
R8 =ffff8880212e8237 R9 =1ffff1100425d046 R10=dffffc0000000000 R11=ffffffff8556d2d0
R12=dffffc0000000000 R13=ffffffff99d198f4 R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556d34c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555579fbe500 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffc04cade8 CR3=0000000026cd8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6235356638666166 3637383564663935
XMM06=3264616135393039 3361633430353435 XMM07=3536613566613834 3130303031326266
XMM08=0000000000000000 00007fdbfac12f0f XMM09=0000000000000000 00007fdbfac12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000110c2a8000 RBX=00007f59ba305720 RCX=0000000000000002 RDX=0000000000001252
RSI=0000000000000049 RDI=0000000000000004 RBP=ffffffff82101252 RSP=00007ffe3e804200
R8 =00007f59b97d6038 R9 =00007f59b97c2000 R10=00007f59b8fff008 R11=0000000000000009
R12=0000000000000009 R13=000000000000000f R14=ffffffff82101252 R15=000000000000241e
RIP=00007f59b946ec7c RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555afa4500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2db03b CR3=000000010ea01000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000501 00000005003e0002
XMM02=0000000000000144 0000000000000040 XMM03=0001002500070001 0038003e00000000
XMM04=b400000000000001 0100000000000003 XMM05=ff00000000000000 0900000000000000
XMM06=0300010025000700 010038003e000000 XMM07=0000000000000001 4400000000000000
XMM08=0000000000000000 00007f59b9612f0f XMM09=0000000000000000 00007f59b9612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
