last executing test programs:

777.873658ms ago: executing program 2 (id=409):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200000}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

719.719556ms ago: executing program 2 (id=411):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}}], 0x1, 0x20004040)
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4c66903511b1ce69)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0)

648.95978ms ago: executing program 1 (id=412):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x200204)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

569.088913ms ago: executing program 2 (id=414):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a)

568.980024ms ago: executing program 1 (id=415):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0)

510.575923ms ago: executing program 2 (id=416):
syz_emit_ethernet(0x6c, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [0x7, 0x7], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc}}}}}}, 0x0)

510.35571ms ago: executing program 1 (id=417):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4097"], 0xc0}}, 0x0)

510.193577ms ago: executing program 2 (id=418):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x3, 0xc4f, 0x1, 0x1}, 0x6d)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r0}, 0x38)

450.538901ms ago: executing program 0 (id=419):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}]}, 0x58}}, 0x2)

450.344876ms ago: executing program 0 (id=420):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000300)='E\\', 0x0}, 0x20)

399.305942ms ago: executing program 1 (id=421):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000cc0)="cd99a0036a5c", 0x6}], 0x2, &(0x7f0000000b40)=[@ip_retopts={{0x10}}], 0x10}, 0x24008004)

399.011792ms ago: executing program 2 (id=422):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setuid(0xee01)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48)

398.780403ms ago: executing program 0 (id=423):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x74}]}]}, 0x64}}, 0x0)

337.116421ms ago: executing program 0 (id=424):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000001000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b)

336.929458ms ago: executing program 0 (id=425):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x6, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

336.805209ms ago: executing program 1 (id=426):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

303.553µs ago: executing program 0 (id=427):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0)

0s ago: executing program 1 (id=428):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2200' (ED25519) to the list of known hosts.
syzkaller login: [   55.861632][ T5830] cgroup: Unknown subsys name 'net'
[   56.014608][ T5830] cgroup: Unknown subsys name 'cpuset'
[   56.020824][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.628881][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.189242][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.193166][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.196335][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.208170][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.211801][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.277092][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.280414][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.283814][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.287370][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.291607][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.350230][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.353517][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.356447][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.360708][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.363533][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.473436][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   62.595347][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   62.624442][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.628219][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.631442][ T5844] bridge_slave_0: entered allmulticast mode
[   62.635357][ T5844] bridge_slave_0: entered promiscuous mode
[   62.656320][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.660115][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.663225][ T5844] bridge_slave_1: entered allmulticast mode
[   62.667308][ T5844] bridge_slave_1: entered promiscuous mode
[   62.731504][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.745140][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.777101][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   62.782827][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.785884][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.790172][ T5849] bridge_slave_0: entered allmulticast mode
[   62.794114][ T5849] bridge_slave_0: entered promiscuous mode
[   62.809695][ T5844] team0: Port device team_slave_0 added
[   62.814980][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.818479][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.821540][ T5849] bridge_slave_1: entered allmulticast mode
[   62.825500][ T5849] bridge_slave_1: entered promiscuous mode
[   62.830277][ T5844] team0: Port device team_slave_1 added
[   62.887015][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.898235][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.900624][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.911937][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.919419][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.929690][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.932718][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.944142][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.989470][ T5849] team0: Port device team_slave_0 added
[   62.994268][ T5849] team0: Port device team_slave_1 added
[   63.061420][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.063955][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.075530][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.084039][ T5844] hsr_slave_0: entered promiscuous mode
[   63.087185][ T5844] hsr_slave_1: entered promiscuous mode
[   63.090964][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.093893][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.096325][ T5852] bridge_slave_0: entered allmulticast mode
[   63.099616][ T5852] bridge_slave_0: entered promiscuous mode
[   63.102993][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.106105][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.117643][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.123437][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.126003][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.129480][ T5852] bridge_slave_1: entered allmulticast mode
[   63.133049][ T5852] bridge_slave_1: entered promiscuous mode
[   63.203983][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.213554][ T5849] hsr_slave_0: entered promiscuous mode
[   63.217057][ T5849] hsr_slave_1: entered promiscuous mode
[   63.222478][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   63.224917][ T5849] Cannot create hsr debugfs directory
[   63.254665][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.299036][ T5852] team0: Port device team_slave_0 added
[   63.330349][ T5852] team0: Port device team_slave_1 added
[   63.412972][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.416073][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.429363][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.445907][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.451067][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.462024][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.581930][ T5852] hsr_slave_0: entered promiscuous mode
[   63.585278][ T5852] hsr_slave_1: entered promiscuous mode
[   63.589288][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   63.591812][ T5852] Cannot create hsr debugfs directory
[   63.670082][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.678372][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.695871][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.715204][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.791909][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.799648][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.824886][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.831494][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.919365][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.933398][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.940124][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.952455][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.029806][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.061255][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   64.078583][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.089519][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.092855][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.116128][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.119173][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.137872][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   64.160715][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.163114][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.184932][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.187998][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.216636][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.239366][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   64.249653][ T5854] Bluetooth: hci0: command tx timeout
[   64.258650][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.261761][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.266368][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.269261][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.319056][ T5854] Bluetooth: hci1: command tx timeout
[   64.397706][ T5854] Bluetooth: hci2: command tx timeout
[   64.403400][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.450459][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.462976][ T5844] veth0_vlan: entered promiscuous mode
[   64.482041][ T5844] veth1_vlan: entered promiscuous mode
[   64.501975][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.512904][ T5849] veth0_vlan: entered promiscuous mode
[   64.531420][ T5849] veth1_vlan: entered promiscuous mode
[   64.543914][ T5844] veth0_macvtap: entered promiscuous mode
[   64.552496][ T5844] veth1_macvtap: entered promiscuous mode
[   64.586076][ T5852] veth0_vlan: entered promiscuous mode
[   64.596127][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.601026][ T5849] veth0_macvtap: entered promiscuous mode
[   64.604901][ T5852] veth1_vlan: entered promiscuous mode
[   64.610533][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.626328][ T5849] veth1_macvtap: entered promiscuous mode
[   64.634338][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.643694][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.652458][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.656311][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.675036][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.681652][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.704867][ T5852] veth0_macvtap: entered promiscuous mode
[   64.710883][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.715436][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.719657][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.725028][ T5852] veth1_macvtap: entered promiscuous mode
[   64.731214][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.775823][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.809666][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.813011][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.820361][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.852438][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.855132][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.857352][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.862860][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.866417][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.877049][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.908136][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.911769][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.936799][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.940513][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.982504][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.004141][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.027735][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.070779][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.073933][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.461969][ T5941] loop2: detected capacity change from 0 to 8
[   65.484399][ T5941] SQUASHFS error: Unable to read directory block [2c0:35]
[   65.554750][ T5932] loop1: detected capacity change from 0 to 32768
[   65.563656][ T5932] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/255 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 3 3 4 5 5 5 5 5 5 6 6 6 6 8 8 10 11 32 33 83 108]
[   65.563656][ T5932] replicas_v0 (size 24):
[   65.563656][ T5932] btree: 1 [0] journal: 1 [0] user: 255 [0 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 2 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 
[   65.563761][ T5932] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[   66.324387][ T5854] Bluetooth: hci0: command tx timeout
[   66.397618][ T5854] Bluetooth: hci1: command tx timeout
[   66.634212][ T5854] Bluetooth: hci2: command tx timeout
[   67.468203][ T5875] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   67.794718][ T5996] syz.0.35 (5996) used greatest stack depth: 19352 bytes left
[   67.825577][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'.
[   67.851827][ T5875] usb 3-1: Using ep0 maxpacket: 32
[   67.872639][ T5875] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[   67.880543][ T5875] usb 3-1: config 0 has no interface number 0
[   67.893218][ T5875] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   67.896863][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.900334][ T5875] usb 3-1: Product: syz
[   67.902127][ T5875] usb 3-1: Manufacturer: syz
[   67.904109][ T5875] usb 3-1: SerialNumber: syz
[   67.933116][ T5875] usb 3-1: config 0 descriptor??
[   67.943093][ T5875] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   67.993336][ T6005] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.39'.
[   68.155230][ T5875] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   68.162866][ T5875] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   68.351108][ T6012] mmap: syz.1.42 (6012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   68.398919][ T5854] Bluetooth: hci0: command tx timeout
[   68.495865][ T5854] Bluetooth: hci1: command tx timeout
[   68.591950][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[   68.593820][   T51] usb 3-1: USB disconnect, device number 2
[   68.617095][ T6007] loop0: detected capacity change from 0 to 32768
[   68.620635][   T51] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   68.638152][ T5854] Bluetooth: hci2: command tx timeout
[   68.643370][   T51] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   68.666455][   T51] quatech2 3-1:0.51: device disconnected
[   68.691441][ T6007] syz.0.40: attempt to access beyond end of device
[   68.691441][ T6007] loop0: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[   68.757853][  T115] blkno = 8ed2c, nblocks = 1
[   68.759812][  T115] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[   68.759812][  T115] 
[   68.764242][  T115] ERROR: (device loop0): remounting filesystem as read-only
[   69.323146][ T5894] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1
[   69.329434][ T5894] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22
[   69.458151][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   69.626001][    T9] usb 3-1: Using ep0 maxpacket: 8
[   69.637976][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.654244][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.659995][    T9] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[   69.663589][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.674507][    T9] usb 3-1: config 0 descriptor??
[   69.890252][ T6031] loop0: detected capacity change from 0 to 1024
[   70.061621][ T6039] tipc: Started in network mode
[   70.063336][ T6039] tipc: Node identity 4ab0165a449d, cluster identity 4711
[   70.065866][ T6039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.071158][ T6039] syzkaller0: entered promiscuous mode
[   70.073034][ T6039] syzkaller0: entered allmulticast mode
[   70.086012][    T9] uclogic 0003:2179:0053.0002: interface is invalid, ignoring
[   70.099602][ T6039] tipc: Resetting bearer <eth:syzkaller0>
[   70.104126][ T6038] tipc: Resetting bearer <eth:syzkaller0>
[   70.114239][ T6038] tipc: Disabling bearer <eth:syzkaller0>
[   70.201516][ T6037] loop0: detected capacity change from 0 to 32768
[   70.206463][ T6037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.54 (6037)
[   70.221355][ T6037] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.225095][ T6037] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   70.229445][ T6037] BTRFS info (device loop0): using free-space-tree
[   70.265014][ T6053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'.
[   70.291070][ T5894] usb 3-1: USB disconnect, device number 3
[   70.376731][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.59'.
[   70.382733][ T6064] IPVS: Error connecting to the multicast addr
[   70.422025][ T5849] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.478508][ T5854] Bluetooth: hci0: command tx timeout
[   70.557544][ T5854] Bluetooth: hci1: command tx timeout
[   70.727614][ T5854] Bluetooth: hci2: command tx timeout
[   71.204008][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.208968][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.719747][ T6101] loop2: detected capacity change from 0 to 512
[   71.725514][ T6101] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   71.736648][ T6101] EXT4-fs (loop2): invalid journal inode
[   71.741986][ T6101] EXT4-fs (loop2): can't get journal size
[   71.750948][ T6101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002]
[   71.754095][ T6101] System zones: 1-12, 13-13
[   71.766677][ T6101] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.75: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   71.773384][ T6105] loop0: detected capacity change from 0 to 512
[   71.781044][ T6101] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.75: couldn't read orphan inode 15 (err -117)
[   71.819188][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.824319][ T6105] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.871686][   T33] audit: type=1800 audit(1755509421.489:2): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.76" name="file1" dev="loop0" ino=15 res=0 errno=0
[   71.887811][   T33] audit: type=1800 audit(1755509421.499:3): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.76" name="file2" dev="loop0" ino=16 res=0 errno=0
[   71.898523][   T33] audit: type=1800 audit(1755509421.499:4): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.76" name="file1" dev="loop0" ino=15 res=0 errno=0
[   71.938657][ T6101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.946099][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.300909][ T6107] loop1: detected capacity change from 0 to 131072
[   72.305445][ T6107] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[   72.308863][ T6107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   72.313870][ T6107] F2FS-fs (loop1): invalid crc value
[   72.326226][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.356105][ T6107] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.369141][ T6107] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   72.372302][ T6107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   72.871663][ T6124] loop2: detected capacity change from 0 to 32768
[   72.882550][ T6124] bcachefs: bch2_fs_parse_param() Error parsing option fix_errors: option_value
[   73.346080][ T6139] Bluetooth: MGMT ver 1.23
[   73.350233][ T6139] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[   73.453942][ T6141] loop0: detected capacity change from 0 to 4096
[   73.471565][ T6141] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   73.495669][ T6141] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[   73.632558][ T6153] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   73.738415][ T6162] loop1: detected capacity change from 0 to 8
[   73.755427][ T6162] SQUASHFS error: xz decompression failed, data probably corrupt
[   73.763228][ T6162] SQUASHFS error: Failed to read block 0x108: -5
[   73.765865][ T6162] SQUASHFS error: Unable to read metadata cache entry [106]
[   73.778091][ T6162] SQUASHFS error: Unable to read inode 0x11f
[   73.878221][  T972] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.037763][  T972] usb 1-1: Using ep0 maxpacket: 8
[   74.053759][  T972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.064737][  T972] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   74.069987][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.073370][  T972] usb 1-1: Product: syz
[   74.077896][  T972] usb 1-1: Manufacturer: syz
[   74.080156][  T972] usb 1-1: SerialNumber: syz
[   74.092378][  T972] usb 1-1: config 0 descriptor??
[   74.101570][  T972] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[   74.301835][   T51] usb 1-1: USB disconnect, device number 2
[   74.344069][ T6174] loop1: detected capacity change from 0 to 4096
[   74.415479][ T6175] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.466439][ T6173] netlink: 220 bytes leftover after parsing attributes in process `syz.1.103'.
[   74.483176][   T33] audit: type=1800 audit(1755509424.099:5): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file1" dev="loop1" ino=15 res=0 errno=0
[   74.973364][ T6179] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.998607][ T6224] input: syz0 as /devices/virtual/input/input4
[   77.133927][ T6233] capability: warning: `syz.0.126' uses deprecated v2 capabilities in a way that may be insecure
[   77.212240][ T5854] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   77.215644][ T5854] Bluetooth: hci2: Injecting HCI hardware error event
[   77.219761][ T5854] Bluetooth: hci2: hardware error 0x00
[   77.349284][ T6246] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[   77.392200][ T6246] netlink: 228 bytes leftover after parsing attributes in process `syz.1.131'.
[   77.733440][ T6256] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[   77.736323][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   77.740566][ T6256] vhci_hcd vhci_hcd.0: Device attached
[   77.856028][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'.
[   77.940146][  T972] vhci_hcd: vhci_device speed not set
[   78.009485][ T5999] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   78.012925][  T972] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[   78.169734][ T5999] usb 2-1: config 0 has no interfaces?
[   78.173341][ T5999] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   78.177112][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.187807][ T5999] usb 2-1: config 0 descriptor??
[   78.395858][ T6263] vhci_hcd: unknown pdu 2
[   78.399347][ T5874] vhci_hcd: stop threads
[   78.402111][ T5894] usb 2-1: USB disconnect, device number 2
[   78.409934][ T5874] vhci_hcd: release socket
[   78.415151][ T5874] vhci_hcd: disconnect device
[   78.468685][  T972] vhci_hcd: vhci_device speed not set
[   78.767145][ T6288] loop0: detected capacity change from 0 to 256
[   79.082658][ T6302] loop1: detected capacity change from 0 to 64
[   79.103511][ T6304] loop0: detected capacity change from 0 to 128
[   79.182727][ T6304] FAT-fs (loop0): error, corrupted directory (invalid i_start)
[   79.193371][ T6304] FAT-fs (loop0): Filesystem has been set read-only
[   79.288623][ T5854] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   80.465398][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'.
[   81.309170][ T6339] loop0: detected capacity change from 0 to 32768
[   81.564956][ T6349] loop1: detected capacity change from 0 to 512
[   81.596563][ T6349] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.177: casefold flag without casefold feature
[   81.614885][ T6349] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.177: couldn't read orphan inode 15 (err -117)
[   81.626369][ T6349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.654841][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.693950][ T6347] loop0: detected capacity change from 0 to 32768
[   81.701884][ T6347] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.176 (6347)
[   81.759125][ T6347] BTRFS info (device loop0): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[   81.771928][ T6347] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   81.775240][ T6347] BTRFS info (device loop0): using free-space-tree
[   81.903573][ T5849] BTRFS info (device loop0): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[   82.032862][ T6356] loop2: detected capacity change from 0 to 40427
[   82.067573][ T6356] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   82.070154][ T6356] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   82.107592][ T6356] F2FS-fs (loop2): build fault injection rate: 17008
[   82.115694][ T6356] F2FS-fs (loop2): build fault injection type: 0x7
[   82.122328][ T6356] F2FS-fs (loop2): invalid crc value
[   82.205907][ T6356] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   82.218038][ T6356] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   82.220744][ T6356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   82.250873][ T5852] syz-executor: attempt to access beyond end of device
[   82.250873][ T5852] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   82.256783][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   82.256796][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.256801][ T5852] Call Trace:
[   82.256805][ T5852]  <TASK>
[   82.256809][ T5852]  dump_stack_lvl+0x189/0x250
[   82.256823][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.256831][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[   82.256838][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   82.256848][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.256861][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[   82.256874][ T5852]  f2fs_write_end_io+0x886/0xb60
[   82.256889][ T5852]  __submit_merged_bio+0x27a/0x6a0
[   82.256901][ T5852]  __submit_merged_write_cond+0x255/0x530
[   82.256913][ T5852]  f2fs_write_data_pages+0x261d/0x3000
[   82.256937][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.256971][ T5852]  ? folios_put_refs+0x559/0x640
[   82.256984][ T5852]  ? __lock_acquire+0xab9/0xd20
[   82.256998][ T5852]  ? do_raw_spin_lock+0x121/0x290
[   82.257011][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   82.257019][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.257028][ T5852]  do_writepages+0x32e/0x550
[   82.257042][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   82.257052][ T5852]  filemap_fdatawrite+0x199/0x240
[   82.257061][ T5852]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   82.257090][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   82.257100][ T5852]  f2fs_sync_dirty_inodes+0x31f/0x830
[   82.257113][ T5852]  f2fs_write_checkpoint+0x95a/0x1df0
[   82.257131][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   82.257158][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[   82.257167][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[   82.257177][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[   82.257182][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[   82.257194][ T5852]  ? shrinker_free+0x2ce/0x3e0
[   82.257202][ T5852]  deactivate_locked_super+0xbc/0x130
[   82.257212][ T5852]  cleanup_mnt+0x425/0x4c0
[   82.257220][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.257230][ T5852]  task_work_run+0x1d4/0x260
[   82.257240][ T5852]  ? __pfx_task_work_run+0x10/0x10
[   82.257247][ T5852]  ? __x64_sys_umount+0x122/0x160
[   82.257257][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[   82.257277][ T5852]  exit_to_user_mode_loop+0xec/0x110
[   82.257286][ T5852]  do_syscall_64+0x2bd/0x3b0
[   82.257296][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.257303][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.257310][ T5852]  ? exc_page_fault+0x9f/0xf0
[   82.257319][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.257325][ T5852] RIP: 0033:0x7f82ac18ff17
[   82.257332][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   82.257338][ T5852] RSP: 002b:00007fff980ea5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   82.257346][ T5852] RAX: 0000000000000000 RBX: 00007f82ac211c05 RCX: 00007f82ac18ff17
[   82.257351][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff980ea680
[   82.257354][ T5852] RBP: 00007fff980ea680 R08: 0000000000000000 R09: 0000000000000000
[   82.257358][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff980eb710
[   82.257362][ T5852] R13: 00007f82ac211c05 R14: 00000000000140be R15: 00007fff980eb750
[   82.257375][ T5852]  </TASK>
[   82.257378][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   82.265370][ T6383] loop0: detected capacity change from 0 to 32768
[   82.412916][ T6383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.185 (6383)
[   82.450644][ T6383] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.455150][ T6383] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   82.467664][ T6383] BTRFS info (device loop0): using free-space-tree
[   82.487077][ T6386] loop1: detected capacity change from 0 to 32768
[   82.497219][ T6386] =======================================================
[   82.497219][ T6386] WARNING: The mand mount option has been deprecated and
[   82.497219][ T6386]          and is ignored by this kernel. Remove the mand
[   82.497219][ T6386]          option from the mount to silence this warning.
[   82.497219][ T6386] =======================================================
[   82.614697][ T6386] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   82.643651][ T6386] (syz.1.186,6386,1):ocfs2_verify_group_and_input:433 ERROR: the add group should be in chain 1
[   82.651232][ T6386] (syz.1.186,6386,1):ocfs2_group_add:511 ERROR: status = -22
[   82.688326][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.728017][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   82.823324][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'.
[   83.063587][ T6426] netlink: 136 bytes leftover after parsing attributes in process `syz.2.195'.
[   83.067082][ T6426] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   83.484564][ T6414] loop0: detected capacity change from 0 to 65536
[   83.504804][ T6414] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   83.520562][ T6414] XFS (loop0): Ending clean mount
[   83.525760][ T6414] XFS (loop0): Quotacheck needed: Please wait.
[   83.538710][ T3600] XFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0x12f/0x1f0, xfs_agi block 0x8002 
[   83.546309][ T3048] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[   83.549920][ T3600] XFS (loop0): Unmount and run xfs_repair
[   83.552859][ T3600] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   83.556083][ T3600] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00  XAGI..........@.
[   83.557558][ T3048] XFS (loop0): Unmount and run xfs_repair
[   83.560587][ T3600] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00  ................
[   83.566540][ T3600] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.566840][ T3048] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   83.571648][ T3600] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.577236][ T3600] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.578077][ T3048] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   83.581897][ T3600] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.588589][ T3600] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.592401][ T3600] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.596262][ T3600] XFS (loop0): metadata I/O error in "xfs_read_agi+0x272/0x5b0" at daddr 0x8002 len 1 error 74
[   83.597058][ T3048] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   83.605679][ T3048] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   83.619056][ T3048] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   83.622981][ T3048] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   83.626796][ T3048] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   83.630852][ T3048] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   83.634561][ T3048] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   83.638548][ T3048] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x6 len 2 error 74
[   83.645330][ T6414] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   83.692821][ T5849] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   83.703486][ T5849] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[   84.022810][ T6474] overlayfs: conflicting options: userxattr,metacopy=on
[   84.139402][ T6482] loop0: detected capacity change from 0 to 4096
[   84.220699][ T6482] ntfs3(loop0): try to read out of volume at offset 0x3fffffc7000
[   84.224896][ T6482] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB
[   84.324745][ T6479] loop1: detected capacity change from 0 to 32768
[   84.330737][ T6479] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.212 (6479)
[   84.380984][ T6479] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.384432][ T6479] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   84.389954][ T6487] loop2: detected capacity change from 0 to 22
[   84.393365][ T6487] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   84.398508][ T6479] BTRFS info (device loop1): disk space caching is enabled
[   84.401408][ T6479] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   84.406363][ T6487] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   84.443639][   T33] audit: type=1326 audit(1755509434.079:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31518ebe9 code=0x7ffc0000
[   84.463208][   T33] audit: type=1326 audit(1755509434.079:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31518ebe9 code=0x7ffc0000
[   84.475548][   T33] audit: type=1326 audit(1755509434.089:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.218" exe="/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fd31518ebe9 code=0x7ffc0000
[   84.485853][   T33] audit: type=1326 audit(1755509434.089:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31518ebe9 code=0x7ffc0000
[   84.493353][   T33] audit: type=1326 audit(1755509434.089:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31518ebe9 code=0x7ffc0000
[   84.512578][ T6506] loop2: detected capacity change from 0 to 512
[   84.529181][ T6506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.530519][ T6479] BTRFS info (device loop1): rebuilding free space tree
[   84.533871][ T6506] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.560339][ T6479] BTRFS info (device loop1): disabling free space tree
[   84.564301][ T6479] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.574834][ T6479] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.614065][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.647972][ T5844] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.779973][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   85.013225][   T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[   85.019230][   T24] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[   85.024709][   T24] usb 1-1: Product: syz
[   85.030500][   T24] usb 1-1: config 0 descriptor??
[   85.037117][   T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   85.040501][   T24] ftdi_sio ttyUSB0: unknown device type: 0xc698
[   85.282966][    T9] usb 1-1: USB disconnect, device number 3
[   85.285709][    T9] ftdi_sio 1-1:0.0: device disconnected
[   85.426103][ T6537] loop1: detected capacity change from 0 to 32768
[   85.429244][ T6537] XFS: ikeep mount option is deprecated.
[   85.437380][ T6537] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   85.455694][ T6537] XFS (loop1): Ending clean mount
[   85.461476][ T6537] XFS (loop1): Quotacheck needed: Please wait.
[   85.481177][ T6537] XFS (loop1): Quotacheck: Done.
[   85.501093][ T5844] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   85.875753][ T6559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.232'.
[   85.886826][ T6561] netlink: 'syz.2.233': attribute type 4 has an invalid length.
[   85.984892][ T6565] loop2: detected capacity change from 0 to 128
[   86.047822][ T6565] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.056737][ T6565] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.103770][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.174500][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[   86.532628][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'.
[   86.967053][  T791] cfg80211: failed to load regulatory.db
[   87.208933][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   87.369506][    T9] usb 3-1: Using ep0 maxpacket: 32
[   87.379307][    T9] usb 3-1: config 0 has an invalid interface number: 230 but max is 0
[   87.382620][    T9] usb 3-1: config 0 has no interface number 0
[   87.385267][    T9] usb 3-1: config 0 interface 230 has no altsetting 0
[   87.393639][    T9] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   87.397834][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.401388][    T9] usb 3-1: Product: syz
[   87.403184][    T9] usb 3-1: Manufacturer: syz
[   87.405181][    T9] usb 3-1: SerialNumber: syz
[   87.418120][    T9] usb 3-1: config 0 descriptor??
[   87.430631][    T9] ums-usbat 3-1:0.230: USB Mass Storage device detected
[   87.446912][    T9] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1
[   87.508550][ T6611] loop1: detected capacity change from 0 to 32768
[   87.520745][ T6611] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   87.536877][ T6611] XFS (loop1): Ending clean mount
[   87.552274][ T6611] XFS (loop1): Quotacheck needed: Please wait.
[   87.586289][ T6611] XFS (loop1): Quotacheck: Done.
[   87.645620][ T5844] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   87.816931][ T6628] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253
[   87.819800][ T6628] PKCS7: Only support pkcs7_signedData type
[   87.855212][ T6630] loop1: detected capacity change from 0 to 1024
[   87.872534][ T6630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.905560][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.167576][  T791] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   88.331330][  T791] usb 2-1: unable to get BOS descriptor or descriptor too short
[   88.336450][  T791] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[   88.340004][  T791] usb 2-1: config 6 has no interface number 0
[   88.342663][  T791] usb 2-1: config 6 interface 2 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[   88.346837][  T791] usb 2-1: config 6 interface 2 has no altsetting 0
[   88.359068][  T791] usb 2-1: New USB device found, idVendor=110a, idProduct=1151, bcdDevice=ce.71
[   88.362593][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.366222][  T791] usb 2-1: Product: syz
[   88.368137][  T791] usb 2-1: Manufacturer: syz
[   88.377317][  T791] usb 2-1: SerialNumber: syz
[   88.384633][ T6634] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   88.601810][  T791] ti_usb_3410_5052 2-1:6.2: TI USB 3410 1 port adapter converter detected
[   88.605880][  T791] ti_usb_3410_5052 2-1:6.2: missing endpoints
[   88.617977][  T791] usb 2-1: USB disconnect, device number 3
[   88.634786][ T6653] loop0: detected capacity change from 0 to 32768
[   88.676347][ T6653]  loop0: p9 p11 p16
[   89.392059][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'.
[   89.417492][ T5875] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   89.580574][ T5875] usb 2-1: Using ep0 maxpacket: 8
[   89.586526][ T5875] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[   89.591442][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.594943][ T5875] usb 2-1: Product: syz
[   89.596421][ T5875] usb 2-1: Manufacturer: syz
[   89.599575][ T5875] usb 2-1: SerialNumber: syz
[   89.605825][ T5875] usb 2-1: config 0 descriptor??
[   89.706330][    T9] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5
[   89.811858][ T5875] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[   89.893920][    T9] usb 3-1: USB disconnect, device number 4
[   90.213126][ T5875] usb write operation failed. (-71)
[   90.219100][ T5875] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   90.222943][ T5875] dvbdev: DVB: registering new adapter (Terratec H7)
[   90.225512][ T5875] usb 2-1: media controller created
[   90.228320][ T5875] usb read operation failed. (-71)
[   90.230340][ T5875] usb write operation failed. (-71)
[   90.236167][ T5875] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[   90.241824][ T5875] usb 2-1: USB disconnect, device number 4
[   90.590152][ T6694] syz.2.285: attempt to access beyond end of device
[   90.590152][ T6694] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   90.594331][ T6694] (syz.2.285,6694,1):ocfs2_get_sector:1714 ERROR: status = -5
[   90.596952][ T6694] (syz.2.285,6694,1):ocfs2_sb_probe:753 ERROR: status = -5
[   90.600835][ T6694] (syz.2.285,6694,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   90.604340][ T6694] (syz.2.285,6694,1):ocfs2_fill_super:1177 ERROR: status = -5
[   90.687544][  T791] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   90.837636][  T791] usb 1-1: Using ep0 maxpacket: 8
[   90.848034][  T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.852056][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[   90.858799][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[   90.871686][  T791] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   90.874824][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.887480][  T791] usb 1-1: Product: syz
[   90.889072][  T791] usb 1-1: Manufacturer: syz
[   90.890876][  T791] usb 1-1: SerialNumber: syz
[   90.894028][  T791] usb 1-1: config 0 descriptor??
[   90.896398][ T6684] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   90.955889][ T6702] loop1: detected capacity change from 0 to 32768
[   90.969292][ T6702] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.982038][ T6718] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   90.982038][ T6718] The task syz.2.292 (6718) triggered the difference, watch for misbehavior.
[   90.983402][ T6702] XFS (loop1): Ending clean mount
[   90.999295][ T6702] XFS (loop1): Quotacheck needed: Please wait.
[   91.015346][ T6702] XFS (loop1): Quotacheck: Done.
[   91.050164][ T5844] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.110329][  T791] usb 1-1: USB disconnect, device number 4
[   91.204176][ T6720] loop1: detected capacity change from 0 to 4096
[   91.216117][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[   91.219173][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[   91.222410][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[   91.225285][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[   91.229152][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00
[   91.231892][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00
[   91.234680][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00
[   91.238493][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00
[   91.241947][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00
[   91.245424][ T6720] ntfs3(loop1): try to read out of volume at offset 0x3fffffe0c00
[   91.296626][ T6722] loop1: detected capacity change from 0 to 128
[   91.323318][ T6722] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   91.329202][ T6722] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   91.360232][ T5844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.727955][  T972] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   91.859733][ T6732] loop0: detected capacity change from 0 to 32768
[   91.863192][ T6732] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.298 (6732)
[   91.970574][ T6742] loop2: detected capacity change from 0 to 32768
[   91.978189][  T972] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   91.983377][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.987498][ T6742] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   91.999536][ T6742] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[   92.004984][ T6742] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   92.008644][ T6742] OCFS2: Returning error to the calling process.
[   92.011051][ T6742] (syz.2.303,6742,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[   92.013817][ T6742] (syz.2.303,6742,0):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[   92.016713][ T6742] (syz.2.303,6742,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[   92.020374][ T6742] (syz.2.303,6742,0):ocfs2_mknod:309 ERROR: status = -5
[   92.023432][ T6742] (syz.2.303,6742,0):ocfs2_mknod:505 ERROR: status = -5
[   92.026319][ T6742] (syz.2.303,6742,0):ocfs2_mkdir:661 ERROR: status = -5
[   92.044146][  T972] usb 2-1: config 0 descriptor??
[   92.053165][ T6732] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.062014][  T972] cp210x 2-1:0.0: cp210x converter detected
[   92.065036][ T6732] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   92.069298][ T6732] BTRFS info (device loop0): using free-space-tree
[   92.076284][ T5852] ocfs2: Unmounting device (7,2) on (node local)
[   92.158255][ T6732] BTRFS info (device loop0): rebuilding free space tree
[   92.218621][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.478868][  T972] usb 2-1: cp210x converter now attached to ttyUSB0
[   92.672655][ T5875] usb 2-1: USB disconnect, device number 5
[   92.679572][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   92.688712][ T5875] cp210x 2-1:0.0: device disconnected
[   92.799696][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'.
[   92.803613][ T6786] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   92.807037][ T6786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.812769][  T972] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   92.886999][ T6790] overlayfs: conflicting options: userxattr,redirect_dir=follow
[   92.930724][ T6792] netlink: 'syz.0.318': attribute type 10 has an invalid length.
[   92.941983][ T6792] team0: Port device dummy0 added
[   92.949513][ T6792] netlink: 'syz.0.318': attribute type 10 has an invalid length.
[   92.953248][ T6792] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   92.962354][ T6792] team0: Failed to send options change via netlink (err -105)
[   92.965387][ T6792] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   92.967660][  T972] usb 3-1: Using ep0 maxpacket: 16
[   92.973225][ T6792] team0: Port device dummy0 removed
[   92.974519][  T972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.979066][ T6792] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   92.979877][  T972] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   92.989580][  T972] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   92.994722][  T972] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   92.999682][  T972] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   93.016454][  T972] usb 3-1: config 1 interface 1 has no altsetting 0
[   93.027212][  T972] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.033052][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.036288][  T972] usb 3-1: Product: syz
[   93.039632][  T972] usb 3-1: Manufacturer: syz
[   93.042661][  T972] usb 3-1: SerialNumber: syz
[   93.212878][ T6796] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   93.216450][ T6796] overlayfs: missing 'lowerdir'
[   93.255970][ T6798] loop1: detected capacity change from 0 to 8
[   93.267620][  T791] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.286259][  T972] usb 3-1: USB disconnect, device number 5
[   93.347108][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'.
[   93.419908][  T791] usb 1-1: Using ep0 maxpacket: 32
[   93.426149][  T791] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[   93.430017][  T791] usb 1-1: config 0 has no interface number 0
[   93.432212][  T791] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   93.435955][  T791] usb 1-1: config 0 interface 85 has no altsetting 0
[   93.444891][  T791] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   93.448676][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.453028][  T791] usb 1-1: Product: syz
[   93.461153][  T791] usb 1-1: Manufacturer: syz
[   93.462827][  T791] usb 1-1: SerialNumber: syz
[   93.466173][  T791] usb 1-1: config 0 descriptor??
[   93.523075][ T6812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.616539][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.330'.
[   93.676038][  T791] appletouch 1-1:0.85: Failed to read mode from device.
[   93.680704][  T791] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[   93.913400][  T791] usb 1-1: USB disconnect, device number 5
[   93.918464][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   94.088838][    T9] usb 2-1: Using ep0 maxpacket: 16
[   94.120574][    T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[   94.123784][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.126981][    T9] usb 2-1: Product: syz
[   94.130082][    T9] usb 2-1: Manufacturer: syz
[   94.131898][    T9] usb 2-1: SerialNumber: syz
[   94.139518][    T9] usb 2-1: config 0 descriptor??
[   94.376438][    T9] speedtch 2-1:0.0: speedtch_bind: wrong device class 68
[   94.382110][    T9] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[   94.396525][    T9] usb 2-1: USB disconnect, device number 6
[   94.986010][ T6839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.018153][ T6837] loop1: detected capacity change from 0 to 4096
[   95.029541][ T6837] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   95.044385][ T6837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.163867][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.205177][  T972] IPVS: starting estimator thread 0...
[   95.209582][ T6849] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   95.307686][ T6853] IPVS: using max 57 ests per chain, 136800 per kthread
[   95.383799][ T6858] loop0: detected capacity change from 0 to 512
[   95.391334][ T6858] EXT4-fs: Ignoring removed nomblk_io_submit option
[   95.393839][ T6858] EXT4-fs: Ignoring removed bh option
[   95.398670][ T6858] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   95.410757][ T6858] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   95.416246][ T6858] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.347: corrupted inode contents
[   95.423891][ T6858] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #11: comm syz.0.347: mark_inode_dirty error
[   95.428834][ T6858] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.347: invalid indirect mapped block 1 (level 1)
[   95.435400][ T6858] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.347: corrupted inode contents
[   95.441956][ T6858] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   95.445572][ T6858] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.347: corrupted inode contents
[   95.449823][ T6858] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.347: mark_inode_dirty error
[   95.464594][ T6858] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   95.477491][  T791] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   95.493135][ T6858] EXT4-fs (loop0): 1 truncate cleaned up
[   95.506259][ T6858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.637519][  T791] usb 2-1: Using ep0 maxpacket: 32
[   95.644019][  T791] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[   95.647828][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.651051][  T791] usb 2-1: Product: syz
[   95.652797][  T791] usb 2-1: Manufacturer: syz
[   95.654769][  T791] usb 2-1: SerialNumber: syz
[   95.766697][ T6863] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.347: path /129/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[   95.790815][  T791] empeg 2-1:1.0: empeg converter detected
[   95.906377][  T791] empeg 2-1:1.0: probe with driver empeg failed with error -71
[   95.929129][  T791] usb 2-1: USB disconnect, device number 7
[   96.140942][ T6874] overlayfs: missing 'lowerdir'
[   96.184313][ T6876] netlink: 5 bytes leftover after parsing attributes in process `syz.2.353'.
[   96.199144][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.288822][ T6882] loop2: detected capacity change from 0 to 1024
[   96.346174][ T6888] loop0: detected capacity change from 0 to 512
[   96.355931][ T6888] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   96.379502][ T6888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.384707][ T6888] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.394497][   T33] audit: type=1800 audit(1755509446.029:11): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.359" name="file1" dev="loop0" ino=15 res=0 errno=0
[   96.464976][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.493596][ T6886] loop2: detected capacity change from 0 to 32768
[   96.554012][ T6894] loop0: detected capacity change from 0 to 2048
[   96.570163][ T6894] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   96.581343][ T6514] udevd[6514]: incorrect nilfs2 checksum on /dev/loop0
[   96.595922][ T5848] udevd[5848]: incorrect nilfs2 checksum on /dev/loop0
[   96.620933][ T6897] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.763116][ T6901] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551613)
[   96.767324][ T6901] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   96.793830][ T6905] input: syz0 as /devices/virtual/input/input6
[   96.815028][ T6907] syz_tun: entered allmulticast mode
[   96.823540][ T6907] dvmrp1: entered allmulticast mode
[   96.832647][ T6906] syz_tun: left allmulticast mode
[   96.952475][ T6915] netlink: 'syz.0.371': attribute type 5 has an invalid length.
[   97.019577][   T33] audit: type=1326 audit(1755509446.659:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.2.372" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82ac18ebe9 code=0x0
[   97.104234][ T6925] 9pnet_fd: Insufficient options for proto=fd
[   97.225888][ T6931] loop2: detected capacity change from 0 to 4096
[   97.268409][ T6931] ntfs3(loop2): ino=1a, mi_enum_attr
[   97.335644][ T6935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.381'.
[   97.354740][ T6935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.381'.
[   97.391978][ T6930] loop0: detected capacity change from 0 to 40427
[   97.394601][ T6930] f2fs: Bad value for 'resgid'
[   97.396196][ T6930] f2fs: Bad value for 'resgid'
[   98.083843][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.087882][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.141998][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.154627][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.257142][ T5874] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.267983][ T5874] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.271061][ T5874] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.274394][ T5874] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.344713][ T6985] loop2: detected capacity change from 0 to 8192
[   98.361737][ T6985] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.561614][ T6997] loop0: detected capacity change from 0 to 1024
[   98.599859][ T6997] hfsplus: catalog searching failed
[   98.630609][ T1088] hfsplus: bad catalog file entry
[   98.635294][ T1088] hfsplus: b-tree write err: -5, ino 3
[   98.686723][ T7003] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[   98.812501][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.417'.
[   98.973986][ T7031] loop1: detected capacity change from 0 to 512
[   98.979239][ T7031] EXT4-fs: Ignoring removed i_version option
[   98.991777][ T7031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   99.003420][ T7031] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   99.010132][ T7031] EXT4-fs (loop1): 1 truncate cleaned up
[   99.013054][ T7031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.291536][ T5844] EXT4-fs warning (device loop1): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting
[   99.293387][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'.
[   99.298503][ T5844] ------------[ cut here ]------------
[   99.301545][ T5844] WARNING: CPU: 0 PID: 5844 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   99.305739][ T5844] Modules linked in:
[   99.308758][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   99.315977][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.320754][ T5844] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   99.323692][ T5844] Code: 8b 74 24 10 e9 d4 03 00 00 e8 ec b3 3a ff 48 89 df 48 c7 c6 8a c7 97 8d ba bd 05 00 00 48 c7 c1 c0 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[   99.332518][ T5844] RSP: 0018:ffffc90003e1f3e0 EFLAGS: 00010246
[   99.335091][ T5844] RAX: ad61edc30ff9bf00 RBX: ffff88810fe12000 RCX: ad61edc30ff9bf00
[   99.339116][ T5844] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   99.342576][ T5844] RBP: ffffc90003e1f570 R08: ffffc90003e1efc7 R09: 1ffff920007c3df8
[   99.345939][ T5844] R10: dffffc0000000000 R11: fffff520007c3df9 R12: 1ffff920007c3e90
[   99.349757][ T5844] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881122f6bf0
[   99.353063][ T5844] FS:  00005555662f8500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[   99.356927][ T5844] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.360402][ T5844] CR2: 0000555582281808 CR3: 000000002862a000 CR4: 00000000000006f0
[   99.363891][ T5844] Call Trace:
[   99.365387][ T5844]  <TASK>
[   99.366702][ T5844]  ? __pfx___might_resched+0x10/0x10
[   99.370147][ T5844]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[   99.373900][ T5844]  ? ext4_xattr_block_set+0xd6/0x2ac0
[   99.376287][ T5844]  ext4_xattr_block_set+0x223/0x2ac0
[   99.379037][ T5844]  ? __pfx___might_resched+0x10/0x10
[   99.381409][ T5844]  ? __pfx_check_xattrs+0x10/0x10
[   99.383572][ T5844]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[   99.386040][ T5844]  ? ext4_xattr_block_find+0x2d4/0x350
[   99.389060][ T5844]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[   99.391733][ T5844]  __ext4_expand_extra_isize+0x30d/0x400
[   99.394191][ T5844]  __ext4_mark_inode_dirty+0x46c/0x700
[   99.396106][ T5844]  ext4_dirty_inode+0xd0/0x110
[   99.397820][ T5844]  ? __pfx_ext4_dirty_inode+0x10/0x10
[   99.400043][ T5844]  __mark_inode_dirty+0x2d1/0xdf0
[   99.402021][ T5844]  iput+0x1ee/0x9d0
[   99.403504][ T5844]  __dentry_kill+0x209/0x660
[   99.405268][ T5844]  ? shrink_kill+0x8d/0x2c0
[   99.406983][ T5844]  shrink_kill+0xa9/0x2c0
[   99.408981][ T5844]  shrink_dentry_list+0x2e0/0x5e0
[   99.411091][ T5844]  shrink_dcache_parent+0xa1/0x2c0
[   99.413073][ T5844]  ? __pfx_shrink_dcache_parent+0x10/0x10
[   99.414880][ T5844]  ? call_rcu+0x6ff/0x9c0
[   99.416302][ T5844]  do_one_tree+0x23/0xe0
[   99.417873][ T5844]  shrink_dcache_for_umount+0xa0/0x170
[   99.419686][ T5844]  generic_shutdown_super+0x67/0x2c0
[   99.421739][ T5844]  kill_block_super+0x44/0x90
[   99.423599][ T5844]  ext4_kill_sb+0x68/0xb0
[   99.425116][ T5844]  deactivate_locked_super+0xbc/0x130
[   99.426966][ T5844]  cleanup_mnt+0x425/0x4c0
[   99.428616][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.430429][ T5844]  task_work_run+0x1d4/0x260
[   99.432183][ T5844]  ? __pfx_task_work_run+0x10/0x10
[   99.434438][ T5844]  ? __x64_sys_umount+0x122/0x160
[   99.436669][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[   99.439140][ T5844]  exit_to_user_mode_loop+0xec/0x110
[   99.441498][ T5844]  do_syscall_64+0x2bd/0x3b0
[   99.443589][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.445935][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.448902][ T5844]  ? exc_page_fault+0x9f/0xf0
[   99.451007][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.453650][ T5844] RIP: 0033:0x7f41fcd8ff17
[   99.455659][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   99.464101][ T5844] RSP: 002b:00007ffce15061b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   99.467742][ T5844] RAX: 0000000000000000 RBX: 00007f41fce11c05 RCX: 00007f41fcd8ff17
[   99.471567][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce1506270
[   99.474906][ T5844] RBP: 00007ffce1506270 R08: 0000000000000000 R09: 0000000000000000
[   99.479075][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce1507300
[   99.482478][ T5844] R13: 00007f41fce11c05 R14: 000000000001830e R15: 00007ffce1507340
[   99.485866][ T5844]  </TASK>
[   99.487197][ T5844] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   99.490275][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   99.495559][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.499682][ T5844] Call Trace:
[   99.501137][ T5844]  <TASK>
[   99.502456][ T5844]  dump_stack_lvl+0x99/0x250
[   99.504494][ T5844]  ? __asan_memcpy+0x40/0x70
[   99.506533][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.508802][ T5844]  ? __pfx__printk+0x10/0x10
[   99.510822][ T5844]  vpanic+0x281/0x750
[   99.512583][ T5844]  ? __pfx__printk+0x10/0x10
[   99.514601][ T5844]  ? __pfx_vpanic+0x10/0x10
[   99.516610][ T5844]  ? is_bpf_text_address+0x26/0x2b0
[   99.518816][ T5844]  panic+0xb9/0xc0
[   99.520460][ T5844]  ? __pfx_panic+0x10/0x10
[   99.522391][ T5844]  __warn+0x31b/0x4b0
[   99.524116][ T5844]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   99.526850][ T5844]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   99.529543][ T5844]  report_bug+0x2be/0x4f0
[   99.531207][ T5844]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   99.533282][ T5844]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   99.535288][ T5844]  ? ext4_xattr_inode_lookup_create+0xa82/0x1c20
[   99.537602][ T5844]  handle_bug+0x84/0x160
[   99.539100][ T5844]  exc_invalid_op+0x1a/0x50
[   99.540842][ T5844]  asm_exc_invalid_op+0x1a/0x20
[   99.542913][ T5844] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[   99.545601][ T5844] Code: 8b 74 24 10 e9 d4 03 00 00 e8 ec b3 3a ff 48 89 df 48 c7 c6 8a c7 97 8d ba bd 05 00 00 48 c7 c1 c0 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[   99.552448][ T5844] RSP: 0018:ffffc90003e1f3e0 EFLAGS: 00010246
[   99.554633][ T5844] RAX: ad61edc30ff9bf00 RBX: ffff88810fe12000 RCX: ad61edc30ff9bf00
[   99.557505][ T5844] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   99.560404][ T5844] RBP: ffffc90003e1f570 R08: ffffc90003e1efc7 R09: 1ffff920007c3df8
[   99.563517][ T5844] R10: dffffc0000000000 R11: fffff520007c3df9 R12: 1ffff920007c3e90
[   99.566495][ T5844] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881122f6bf0
[   99.569060][ T5844]  ? __pfx___might_resched+0x10/0x10
[   99.571173][ T5844]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[   99.573846][ T5844]  ? ext4_xattr_block_set+0xd6/0x2ac0
[   99.576145][ T5844]  ext4_xattr_block_set+0x223/0x2ac0
[   99.578345][ T5844]  ? __pfx___might_resched+0x10/0x10
[   99.580489][ T5844]  ? __pfx_check_xattrs+0x10/0x10
[   99.582509][ T5844]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[   99.584903][ T5844]  ? ext4_xattr_block_find+0x2d4/0x350
[   99.587056][ T5844]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[   99.589501][ T5844]  __ext4_expand_extra_isize+0x30d/0x400
[   99.591913][ T5844]  __ext4_mark_inode_dirty+0x46c/0x700
[   99.594333][ T5844]  ext4_dirty_inode+0xd0/0x110
[   99.596348][ T5844]  ? __pfx_ext4_dirty_inode+0x10/0x10
[   99.598630][ T5844]  __mark_inode_dirty+0x2d1/0xdf0
[   99.600836][ T5844]  iput+0x1ee/0x9d0
[   99.602519][ T5844]  __dentry_kill+0x209/0x660
[   99.604547][ T5844]  ? shrink_kill+0x8d/0x2c0
[   99.606510][ T5844]  shrink_kill+0xa9/0x2c0
[   99.608393][ T5844]  shrink_dentry_list+0x2e0/0x5e0
[   99.610540][ T5844]  shrink_dcache_parent+0xa1/0x2c0
[   99.612772][ T5844]  ? __pfx_shrink_dcache_parent+0x10/0x10
[   99.615269][ T5844]  ? call_rcu+0x6ff/0x9c0
[   99.617155][ T5844]  do_one_tree+0x23/0xe0
[   99.619037][ T5844]  shrink_dcache_for_umount+0xa0/0x170
[   99.621456][ T5844]  generic_shutdown_super+0x67/0x2c0
[   99.623767][ T5844]  kill_block_super+0x44/0x90
[   99.625838][ T5844]  ext4_kill_sb+0x68/0xb0
[   99.627773][ T5844]  deactivate_locked_super+0xbc/0x130
[   99.629964][ T5844]  cleanup_mnt+0x425/0x4c0
[   99.631896][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.634201][ T5844]  task_work_run+0x1d4/0x260
[   99.636271][ T5844]  ? __pfx_task_work_run+0x10/0x10
[   99.638502][ T5844]  ? __x64_sys_umount+0x122/0x160
[   99.640714][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[   99.642978][ T5844]  exit_to_user_mode_loop+0xec/0x110
[   99.645273][ T5844]  do_syscall_64+0x2bd/0x3b0
[   99.647301][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.649481][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.652047][ T5844]  ? exc_page_fault+0x9f/0xf0
[   99.654106][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.656703][ T5844] RIP: 0033:0x7f41fcd8ff17
[   99.658669][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   99.666510][ T5844] RSP: 002b:00007ffce15061b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   99.670053][ T5844] RAX: 0000000000000000 RBX: 00007f41fce11c05 RCX: 00007f41fcd8ff17
[   99.673301][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce1506270
[   99.676570][ T5844] RBP: 00007ffce1506270 R08: 0000000000000000 R09: 0000000000000000
[   99.679754][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce1507300
[   99.683066][ T5844] R13: 00007f41fce11c05 R14: 000000000001830e R15: 00007ffce1507340
[   99.686359][ T5844]  </TASK>
[   99.688425][ T5844] Kernel Offset: disabled
[   99.690206][ T5844] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:30:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=ad61edc30ff9bf00 RDX=0000000000000000
RSI=ffffffff8be333e0 RDI=ffffffff8be333a0 RBP=ffffffff8172c195 RSP=ffffc90000007678
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000007838 R11=ffffffff81ac3870
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555662f8500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555582281808 CR3=000000002862a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=616e612f3000323a 316563652f316963
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 00000000ff000000
XMM08=0000000000ff0000 0000000000000000 XMM09=706e692f3030323a 316963682f316963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=0000000000000000 RCX=0000000000000061 RDX=0000000000000007
RSI=ffffffff8ca12488 RDI=ffffffff8ca125e8 RBP=ffffffff8ca125e0 RSP=ffffc900075e6550
R8 =0000000000000000 R9 =000000008ca11f00 R10=ffff88810a868420 R11=ffffed102150d086
R12=725f747065636361 R13=000000000000000b R14=ffffffff8ca125e8 R15=dffffc0000000000
RIP=ffffffff8b7539bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd3160d86c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32321ff8 CR3=00000000272a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=687465760001000c 0012002800000000
XMM02=00007fd315387498 ffffffff823c6d62 XMM03=00007fd3153874a8 00007fd3153874a0
XMM04=00007fd315eed100 00007fd315387460 XMM05=00007fd315387478 00007fd3153874c0
XMM06=00007fd3153874b8 00007fd3153874b0 XMM07=00007fd3153874a8 00007fd3153874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd315212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
