last executing test programs:

3m30.747057753s ago: executing program 2 (id=226):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0x10000000, 0xdbe, 0x300}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)

3m30.697072303s ago: executing program 2 (id=227):
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)

3m30.696938023s ago: executing program 2 (id=228):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f00000001c0)={[{@rodir}, {@numtail}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@rodir}]}, 0x1, 0x27a, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

3m30.5862209s ago: executing program 2 (id=229):
statx(0xffffffffffffff9c, 0x0, 0x100, 0xb38dcf3f7bb4b8a7, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c9"], 0x7)

3m30.585887434s ago: executing program 2 (id=230):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xd33638f234726102, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

3m29.553671282s ago: executing program 2 (id=242):
r0 = timerfd_create(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0)

3m14.482643428s ago: executing program 32 (id=242):
r0 = timerfd_create(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0)

1m18.067775931s ago: executing program 0 (id=1607):
openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000080)=ANY=[], 0x1, 0xc5a, &(0x7f0000001040)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m17.998275865s ago: executing program 0 (id=1608):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @remote, @private1, [], "fafb17c133"}}}}}}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

1m17.997945848s ago: executing program 0 (id=1609):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

1m17.948805251s ago: executing program 0 (id=1610):
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000140)='./file1\x00', 0x218008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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")
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

1m17.520975171s ago: executing program 0 (id=1615):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x44}}, 0x0)

1m16.846903405s ago: executing program 0 (id=1621):
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0)

1m16.730905944s ago: executing program 33 (id=1621):
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0)

1.750749003s ago: executing program 1 (id=2507):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xcb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.610843643s ago: executing program 3 (id=2508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)

1.61050745s ago: executing program 3 (id=2509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0)

1.531748289s ago: executing program 3 (id=2510):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x3, 0x1, 0x4, 0x0, "8b1c075f3a1b842c"}, 0x10}, 0x2}, 0x810)

1.437334338s ago: executing program 3 (id=2511):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
setsockopt$sock_int(r0, 0x1, 0x1d, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0)
syz_usb_connect(0x0, 0x5b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001a75ed2099042e159ab4010203010902240001000010000904ff0002ffc3100009050602"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x93}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.331020172s ago: executing program 1 (id=2512):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf252300000008000200", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x50000}, 0x0)

1.330812235s ago: executing program 1 (id=2513):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080)=0x180001, 0x4)

1.248397238s ago: executing program 1 (id=2514):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xc84}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="dbaae2ee252de4f55efe950db02f2c3fc30a76209a599a411bc587f4fb12610e36eb231b870fefb67f76204e83ddb6081e7458f7dd78fd576c4c8373bc71baa7f4d92619342ab24ab5ecb97faa81cef87374025a4dfdb223bfa9b5544c830b67bbe703b04ec946e60297450847204810253c28a139829feb98a8c64b50d8f94390cb4a11c59d60c828e02ce67de9b5f325a5cb9af51d15d4843121c80d8b56ee120f55c3b1198678295e8cbbd125fb61ebe7636f49e9bd24f1c90449c2fd5ac8818d0ce0b551cfe8ce36225abf8d94153546fb", @ANYRES64=0x0], 0x20)
close(r2)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000740)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000004c0)=[{0x820000000, 0x0, 0x7}], 0x1, 0x5, 0x10, 0x40, 0x8, 0x6e})

941.623091ms ago: executing program 4 (id=2515):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000240)="051a00000e80006558", 0x9}], 0x2)

651.093325ms ago: executing program 3 (id=2516):
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)

530.93134ms ago: executing program 4 (id=2517):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

530.731965ms ago: executing program 4 (id=2518):
syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x22, 0x6, "5b671624"}]}}}}}}}}, 0x0)

461.059815ms ago: executing program 4 (id=2519):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0x1}}}, 0x24}}, 0x4000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0xbf, 0x316575}})

379.0268ms ago: executing program 4 (id=2520):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

342.499045ms ago: executing program 1 (id=2521):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x7ff, 0x4)

267.325648ms ago: executing program 4 (id=2522):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x40, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20000810)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
unshare(0x20040400)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)

200.994927ms ago: executing program 1 (id=2523):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f00000007c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca06fcbf3756ab0c1000b6cd9257f69726afcec2859414f3e35e002dcdf2b18b581c33cd87be229bc4302b017e3c3"], 0x1, 0x442a, &(0x7f0000008940)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0)
setxattr$security_ima(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000004c0)=ANY=[], 0x32, 0x0)

0s ago: executing program 3 (id=2524):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0)
sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

kernel console output (not intermixed with test programs):

  167.861194][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.861219][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.861230][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.861241][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.861255][ T6353]  process_scheduled_works+0xae1/0x17b0
[  167.861319][ T6353]  ? __pfx_process_scheduled_works+0x10/0x10
[  167.861350][ T6353]  worker_thread+0x8a0/0xda0
[  167.861366][ T6353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.861385][ T6353]  ? __kthread_parkme+0x7b/0x200
[  167.861407][ T6353]  kthread+0x711/0x8a0
[  167.861425][ T6353]  ? __pfx_worker_thread+0x10/0x10
[  167.861437][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.861454][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.861464][ T6353]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.861476][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.861492][ T6353]  ret_from_fork+0x439/0x7d0
[  167.861509][ T6353]  ? __pfx_ret_from_fork+0x10/0x10
[  167.861527][ T6353]  ? __switch_to_asm+0x39/0x70
[  167.861542][ T6353]  ? __switch_to_asm+0x33/0x70
[  167.861555][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.861571][ T6353]  ret_from_fork_asm+0x1a/0x30
[  167.861600][ T6353]  </TASK>
[  167.861606][ T6353] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  167.864405][ T8544] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.866441][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: kworker/u10:7 Not tainted syzkaller #0 PREEMPT(full) 
[  167.866456][ T6353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.866462][ T6353] Workqueue: writeback wb_workfn (flush-7:1)
[  167.866481][ T6353] Call Trace:
[  167.866487][ T6353]  <TASK>
[  167.866492][ T6353]  dump_stack_lvl+0x189/0x250
[  167.866512][ T6353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.866526][ T6353]  ? __pfx_queue_work_on+0x10/0x10
[  167.866538][ T6353]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  167.866550][ T6353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.866571][ T6353]  f2fs_handle_critical_error+0x37c/0x540
[  167.866590][ T6353]  f2fs_write_end_io+0x886/0xb60
[  167.866620][ T6353]  __submit_merged_bio+0x27a/0x6a0
[  167.866639][ T6353]  __submit_merged_write_cond+0x44c/0x530
[  167.866664][ T6353]  f2fs_write_data_pages+0x261d/0x3000
[  167.866707][ T6353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.866732][ T6353]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  167.866777][ T6353]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  167.866801][ T6353]  ? trace_f2fs_writepages+0x7f/0x200
[  167.866816][ T6353]  ? f2fs_write_node_pages+0x478/0x6e0
[  167.866833][ T6353]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  167.866850][ T6353]  ? __lock_acquire+0xab9/0xd20
[  167.866866][ T6353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.866880][ T6353]  do_writepages+0x32e/0x550
[  167.866901][ T6353]  ? reacquire_held_locks+0x127/0x1d0
[  167.866913][ T6353]  ? writeback_sb_inodes+0x384/0x1010
[  167.866935][ T6353]  __writeback_single_inode+0x145/0xff0
[  167.866951][ T6353]  ? do_raw_spin_unlock+0x4d/0x240
[  167.866969][ T6353]  writeback_sb_inodes+0x6c7/0x1010
[  167.867007][ T6353]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  167.867056][ T6353]  ? rcu_is_watching+0x15/0xb0
[  167.867076][ T6353]  wb_writeback+0x43b/0xaf0
[  167.867097][ T6353]  ? queue_io+0x311/0x590
[  167.867113][ T6353]  ? __pfx_wb_writeback+0x10/0x10
[  167.867134][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.867148][ T6353]  wb_workfn+0x409/0xef0
[  167.867174][ T6353]  ? __pfx_wb_workfn+0x10/0x10
[  167.867190][ T6353]  ? __lock_acquire+0xab9/0xd20
[  167.867216][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.867232][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.867241][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.867251][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.867262][ T6353]  process_scheduled_works+0xae1/0x17b0
[  167.867326][ T6353]  ? __pfx_process_scheduled_works+0x10/0x10
[  167.867354][ T6353]  worker_thread+0x8a0/0xda0
[  167.867369][ T6353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.867387][ T6353]  ? __kthread_parkme+0x7b/0x200
[  167.867409][ T6353]  kthread+0x711/0x8a0
[  167.867425][ T6353]  ? __pfx_worker_thread+0x10/0x10
[  167.867437][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.867453][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.867463][ T6353]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.867476][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.867490][ T6353]  ret_from_fork+0x439/0x7d0
[  167.867507][ T6353]  ? __pfx_ret_from_fork+0x10/0x10
[  167.867523][ T6353]  ? __switch_to_asm+0x39/0x70
[  167.867538][ T6353]  ? __switch_to_asm+0x33/0x70
[  167.867549][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.867563][ T6353]  ret_from_fork_asm+0x1a/0x30
[  167.867588][ T6353]  </TASK>
[  167.867593][ T6353] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  167.869724][ T8544] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  167.873069][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: kworker/u10:7 Not tainted syzkaller #0 PREEMPT(full) 
[  167.873085][ T6353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.873092][ T6353] Workqueue: writeback wb_workfn (flush-7:1)
[  167.873109][ T6353] Call Trace:
[  167.873113][ T6353]  <TASK>
[  167.873119][ T6353]  dump_stack_lvl+0x189/0x250
[  167.873137][ T6353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.873151][ T6353]  ? __pfx_queue_work_on+0x10/0x10
[  167.873161][ T6353]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  167.873174][ T6353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.873196][ T6353]  f2fs_handle_critical_error+0x37c/0x540
[  167.873222][ T6353]  f2fs_write_end_io+0x886/0xb60
[  167.873252][ T6353]  __submit_merged_bio+0x27a/0x6a0
[  167.873270][ T6353]  __submit_merged_write_cond+0x44c/0x530
[  167.873326][ T6353]  f2fs_write_data_pages+0x261d/0x3000
[  167.873369][ T6353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.873395][ T6353]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  167.873441][ T6353]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  167.873463][ T6353]  ? trace_f2fs_writepages+0x7f/0x200
[  167.873477][ T6353]  ? f2fs_write_node_pages+0x478/0x6e0
[  167.873493][ T6353]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  167.873512][ T6353]  ? __lock_acquire+0xab9/0xd20
[  167.873526][ T6353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.873541][ T6353]  do_writepages+0x32e/0x550
[  167.873561][ T6353]  ? reacquire_held_locks+0x127/0x1d0
[  167.873573][ T6353]  ? writeback_sb_inodes+0x384/0x1010
[  167.873596][ T6353]  __writeback_single_inode+0x145/0xff0
[  167.873612][ T6353]  ? do_raw_spin_unlock+0x4d/0x240
[  167.873630][ T6353]  writeback_sb_inodes+0x6c7/0x1010
[  167.873669][ T6353]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  167.873721][ T6353]  ? rcu_is_watching+0x15/0xb0
[  167.873742][ T6353]  wb_writeback+0x43b/0xaf0
[  167.873764][ T6353]  ? queue_io+0x311/0x590
[  167.873783][ T6353]  ? __pfx_wb_writeback+0x10/0x10
[  167.873806][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.873822][ T6353]  wb_workfn+0x409/0xef0
[  167.873848][ T6353]  ? __pfx_wb_workfn+0x10/0x10
[  167.873866][ T6353]  ? __lock_acquire+0xab9/0xd20
[  167.873886][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.873903][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.873914][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.873924][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  167.873938][ T6353]  process_scheduled_works+0xae1/0x17b0
[  167.873973][ T6353]  ? __pfx_process_scheduled_works+0x10/0x10
[  167.874000][ T6353]  worker_thread+0x8a0/0xda0
[  167.874015][ T6353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.874034][ T6353]  ? __kthread_parkme+0x7b/0x200
[  167.874055][ T6353]  kthread+0x711/0x8a0
[  167.874072][ T6353]  ? __pfx_worker_thread+0x10/0x10
[  167.874084][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.874098][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.874107][ T6353]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.874117][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.874132][ T6353]  ret_from_fork+0x439/0x7d0
[  167.874147][ T6353]  ? __pfx_ret_from_fork+0x10/0x10
[  167.874165][ T6353]  ? __switch_to_asm+0x39/0x70
[  167.874178][ T6353]  ? __switch_to_asm+0x33/0x70
[  167.874190][ T6353]  ? __pfx_kthread+0x10/0x10
[  167.874205][ T6353]  ret_from_fork_asm+0x1a/0x30
[  167.874243][ T6353]  </TASK>
[  167.874249][ T6353] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  168.045202][ T8544] BTRFS info (device loop0): enabling ssd optimizations
[  168.058549][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: kworker/u10:7 Not tainted syzkaller #0 PREEMPT(full) 
[  168.058567][ T6353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.058574][ T6353] Workqueue: writeback wb_workfn (flush-7:1)
[  168.058594][ T6353] Call Trace:
[  168.058599][ T6353]  <TASK>
[  168.058603][ T6353]  dump_stack_lvl+0x189/0x250
[  168.058622][ T6353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.058634][ T6353]  ? __pfx_queue_work_on+0x10/0x10
[  168.058645][ T6353]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  168.058657][ T6353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  168.058675][ T6353]  f2fs_handle_critical_error+0x37c/0x540
[  168.058691][ T6353]  f2fs_write_end_io+0x886/0xb60
[  168.058716][ T6353]  __submit_merged_bio+0x27a/0x6a0
[  168.058730][ T6353]  __submit_merged_write_cond+0x44c/0x530
[  168.058749][ T6353]  f2fs_write_data_pages+0x261d/0x3000
[  168.058781][ T6353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.058801][ T6353]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  168.058836][ T6353]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  168.058854][ T6353]  ? trace_f2fs_writepages+0x7f/0x200
[  168.058865][ T6353]  ? f2fs_write_node_pages+0x478/0x6e0
[  168.058878][ T6353]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  168.058892][ T6353]  ? __lock_acquire+0xab9/0xd20
[  168.058905][ T6353]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.058916][ T6353]  do_writepages+0x32e/0x550
[  168.058935][ T6353]  ? reacquire_held_locks+0x127/0x1d0
[  168.058944][ T6353]  ? writeback_sb_inodes+0x384/0x1010
[  168.058961][ T6353]  __writeback_single_inode+0x145/0xff0
[  168.058974][ T6353]  ? do_raw_spin_unlock+0x4d/0x240
[  168.058989][ T6353]  writeback_sb_inodes+0x6c7/0x1010
[  168.059019][ T6353]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  168.059059][ T6353]  ? rcu_is_watching+0x15/0xb0
[  168.059077][ T6353]  wb_writeback+0x43b/0xaf0
[  168.059095][ T6353]  ? queue_io+0x311/0x590
[  168.059109][ T6353]  ? __pfx_wb_writeback+0x10/0x10
[  168.059128][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.059141][ T6353]  wb_workfn+0x409/0xef0
[  168.059163][ T6353]  ? __pfx_wb_workfn+0x10/0x10
[  168.059179][ T6353]  ? __lock_acquire+0xab9/0xd20
[  168.059198][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  168.059213][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.059221][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  168.059230][ T6353]  ? process_scheduled_works+0x9ef/0x17b0
[  168.059242][ T6353]  process_scheduled_works+0xae1/0x17b0
[  168.059309][ T6353]  ? __pfx_process_scheduled_works+0x10/0x10
[  168.059334][ T6353]  worker_thread+0x8a0/0xda0
[  168.059347][ T6353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  168.059363][ T6353]  ? __kthread_parkme+0x7b/0x200
[  168.059382][ T6353]  kthread+0x711/0x8a0
[  168.059396][ T6353]  ? __pfx_worker_thread+0x10/0x10
[  168.059407][ T6353]  ? __pfx_kthread+0x10/0x10
[  168.059422][ T6353]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.059431][ T6353]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.059441][ T6353]  ? __pfx_kthread+0x10/0x10
[  168.059454][ T6353]  ret_from_fork+0x439/0x7d0
[  168.059473][ T6353]  ? __pfx_ret_from_fork+0x10/0x10
[  168.059489][ T6353]  ? __switch_to_asm+0x39/0x70
[  168.059502][ T6353]  ? __switch_to_asm+0x33/0x70
[  168.059513][ T6353]  ? __pfx_kthread+0x10/0x10
[  168.059526][ T6353]  ret_from_fork_asm+0x1a/0x30
[  168.059550][ T6353]  </TASK>
[  168.059555][ T6353] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  168.181581][ T8571] netlink: 'syz.3.1054': attribute type 1 has an invalid length.
[  168.183691][ T8544] BTRFS info (device loop0): enabling free space tree
[  168.233627][ T8571] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.455341][ T8573] bond1: (slave veth3): Enslaving as an active interface with a down link
[  168.478003][ T5819] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.531201][ T8574] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  168.670616][ T8576] U9: renamed from lo (while UP)
[  170.749081][ T8653] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1089'.
[  171.597979][ T8670] loop0: detected capacity change from 0 to 128
[  171.784677][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.784677][ T8670] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  171.791907][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.791907][ T8670] loop0: rw=2049, sector=185, nr_sectors = 16 limit=128
[  171.797613][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.797613][ T8670] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128
[  171.809964][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.809964][ T8670] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128
[  171.822948][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.822948][ T8670] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128
[  171.823571][ T8681] program syz.1.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.828652][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.828652][ T8670] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128
[  171.838685][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.838685][ T8670] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128
[  171.845915][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.845915][ T8670] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128
[  171.853046][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.853046][ T8670] loop0: rw=2049, sector=305, nr_sectors = 8 limit=128
[  171.864205][ T8670] syz.0.1096: attempt to access beyond end of device
[  171.864205][ T8670] loop0: rw=2049, sector=321, nr_sectors = 8 limit=128
[  172.038848][ T8691] loop0: detected capacity change from 0 to 512
[  172.059755][ T8691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.071386][ T8691] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  172.112146][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.251532][ T5856] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  172.400569][ T5856] usb 2-1: Using ep0 maxpacket: 32
[  172.408478][ T5856] usb 2-1: config 0 has an invalid interface number: 183 but max is 0
[  172.425127][ T5856] usb 2-1: config 0 has no interface number 0
[  172.443790][ T5856] usb 2-1: config 0 interface 183 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  172.462761][ T5856] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=92.53
[  172.466680][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.479939][ T5856] usb 2-1: Product: syz
[  172.482024][ T5856] usb 2-1: Manufacturer: syz
[  172.484054][ T5856] usb 2-1: SerialNumber: syz
[  172.790145][ T5856] usb 2-1: config 0 descriptor??
[  173.007140][ T5856] usb 2-1: USB disconnect, device number 13
[  173.092936][ T8714] loop0: detected capacity change from 0 to 40427
[  173.097293][ T8714] F2FS-fs (loop0): Image doesn't support compression
[  173.100856][ T8714] F2FS-fs (loop0): build fault injection rate: 690
[  173.103747][ T8714] F2FS-fs (loop0): build fault injection type: 0x2
[  173.109478][ T8714] F2FS-fs (loop0): invalid crc value
[  173.212907][ T8714] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.224407][ T8714] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  173.263311][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  173.263329][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.263335][ T5819] Call Trace:
[  173.263340][ T5819]  <TASK>
[  173.263345][ T5819]  dump_stack_lvl+0x189/0x250
[  173.263365][ T5819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.263378][ T5819]  ? __pfx_queue_work_on+0x10/0x10
[  173.263390][ T5819]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  173.263401][ T5819]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  173.263420][ T5819]  f2fs_handle_critical_error+0x37c/0x540
[  173.263438][ T5819]  f2fs_write_end_io+0x886/0xb60
[  173.263463][ T5819]  __submit_merged_bio+0x27a/0x6a0
[  173.263479][ T5819]  __submit_merged_write_cond+0x255/0x530
[  173.263503][ T5819]  f2fs_write_data_pages+0x261d/0x3000
[  173.263547][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  173.263598][ T5819]  ? folios_put_refs+0x559/0x640
[  173.263620][ T5819]  ? __lock_acquire+0xab9/0xd20
[  173.263638][ T5819]  ? do_raw_spin_lock+0x121/0x290
[  173.263660][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[  173.263673][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  173.263687][ T5819]  do_writepages+0x32e/0x550
[  173.263711][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[  173.263728][ T5819]  filemap_fdatawrite+0x199/0x240
[  173.263744][ T5819]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  173.263791][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[  173.263808][ T5819]  f2fs_sync_dirty_inodes+0x31f/0x830
[  173.263832][ T5819]  f2fs_write_checkpoint+0x95a/0x1df0
[  173.263862][ T5819]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  173.263909][ T5819]  ? kill_f2fs_super+0x298/0x6c0
[  173.263926][ T5819]  kill_f2fs_super+0x2c3/0x6c0
[  173.263942][ T5819]  ? __pfx_kill_f2fs_super+0x10/0x10
[  173.263954][ T5819]  ? radix_tree_delete_item+0x2b6/0x400
[  173.263971][ T5819]  ? shrinker_free+0x2ce/0x3e0
[  173.263987][ T5819]  deactivate_locked_super+0xbc/0x130
[  173.264003][ T5819]  cleanup_mnt+0x425/0x4c0
[  173.264016][ T5819]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.264030][ T5819]  task_work_run+0x1d4/0x260
[  173.264047][ T5819]  ? __pfx_task_work_run+0x10/0x10
[  173.264060][ T5819]  ? __x64_sys_umount+0x122/0x160
[  173.264079][ T5819]  ? exit_to_user_mode_loop+0x40/0x110
[  173.264098][ T5819]  exit_to_user_mode_loop+0xec/0x110
[  173.264114][ T5819]  do_syscall_64+0x2bd/0x3b0
[  173.264126][ T5819]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.264137][ T5819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.264148][ T5819]  ? exc_page_fault+0x9f/0xf0
[  173.264161][ T5819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.264171][ T5819] RIP: 0033:0x7fe787b8ff57
[  173.264182][ T5819] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  173.264192][ T5819] RSP: 002b:00007ffc4aeb44e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  173.264205][ T5819] RAX: 0000000000000000 RBX: 00007fe787c11c2d RCX: 00007fe787b8ff57
[  173.264212][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4aeb45a0
[  173.264220][ T5819] RBP: 00007ffc4aeb45a0 R08: 0000000000000000 R09: 0000000000000000
[  173.264226][ T5819] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4aeb5630
[  173.264232][ T5819] R13: 00007fe787c11c2d R14: 000000000002a44e R15: 00007ffc4aeb5670
[  173.264277][ T5819]  </TASK>
[  173.264284][ T5819] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  173.720053][ T8727] loop0: detected capacity change from 0 to 128
[  173.735424][ T8727] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  173.749642][ T8727] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  173.783852][ T5819] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  173.849883][ T5884] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  174.000272][ T5884] usb 2-1: Using ep0 maxpacket: 8
[  174.005532][ T5884] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  174.009232][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.012903][ T5884] usb 2-1: Product: syz
[  174.014646][ T5884] usb 2-1: Manufacturer: syz
[  174.020360][ T5884] usb 2-1: SerialNumber: syz
[  174.028606][ T5884] usb 2-1: config 0 descriptor??
[  174.237958][ T5884] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  175.056822][ T5884] usb write operation failed. (-71)
[  175.093940][ T5884] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  175.112842][ T5884] dvbdev: DVB: registering new adapter (Terratec H7)
[  175.115480][ T5884] usb 2-1: media controller created
[  175.120580][ T5884] usb read operation failed. (-71)
[  175.126506][ T5884] usb write operation failed. (-71)
[  175.140046][ T5884] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  175.161920][ T5884] usb 2-1: USB disconnect, device number 14
[  176.574773][ T8804] loop0: detected capacity change from 0 to 32768
[  176.581703][ T8804] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1151 (8804)
[  176.604636][ T8804] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  176.608677][ T8804] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  176.685109][ T8804] BTRFS info (device loop0): enabling ssd optimizations
[  176.695154][ T8804] BTRFS info (device loop0): enabling free space tree
[  176.702383][ T8804] BTRFS info (device loop0): use zstd compression, level 3
[  177.505859][ T5819] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  179.021898][ T8881] loop1: detected capacity change from 0 to 1024
[  179.499203][ T8888] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  179.841936][ T8903] loop1: detected capacity change from 0 to 1024
[  179.846925][ T8903] EXT4-fs: Ignoring removed nomblk_io_submit option
[  180.017402][ T8903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.372819][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.645044][ T5827] Bluetooth: hci0: command 0x0406 tx timeout
[  180.982982][ T5213] Bluetooth: hci3: unexpected event for opcode 0x2016
[  181.362689][ T8933] loop1: detected capacity change from 0 to 128
[  181.385488][ T8933] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  181.392807][ T8933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.356250][ T8953] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1205'.
[  182.448992][ T1270] libceph: connect (1)[c::]:6789 error -101
[  182.460026][ T1270] libceph: mon0 (1)[c::]:6789 connect error
[  182.470507][ T8951] ceph: No mds server is up or the cluster is laggy
[  182.479973][ T1270] libceph: connect (1)[c::]:6789 error -101
[  182.482594][ T1270] libceph: mon0 (1)[c::]:6789 connect error
[  182.661005][ T8943] loop1: detected capacity change from 0 to 131072
[  182.667401][ T8943] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  182.670787][ T8943] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  182.679173][ T8943] F2FS-fs (loop1): invalid crc value
[  182.729182][ T8943] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.741171][ T8943] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  182.744378][ T8943] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  183.127784][ T8991] overlayfs: failed to clone upperpath
[  183.246737][ T8995] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  183.308884][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'.
[  183.392076][ T9001] loop0: detected capacity change from 0 to 1024
[  183.443285][ T9001] EXT4-fs: Ignoring removed nobh option
[  183.445699][ T9001] EXT4-fs: Ignoring removed bh option
[  183.476262][ T9001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.580601][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.216549][ T9060] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1248'.
[  185.823957][ T9082] fuse: Bad value for 'fd'
[  186.537244][ T9104] loop1: detected capacity change from 0 to 8
[  186.547859][ T9104] SQUASHFS error: zlib decompression failed, data probably corrupt
[  186.556557][ T9104] SQUASHFS error: Failed to read block 0x9b: -5
[  186.558904][ T9104] SQUASHFS error: Unable to read metadata cache entry [99]
[  186.562775][ T9104] SQUASHFS error: Unable to read inode 0x127
[  187.485738][ T9147] binder: 9145:9147 ioctl c0306201 200000000000 returned -14
[  188.394422][ T9202] loop1: detected capacity change from 0 to 512
[  188.421139][ T9202] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  188.425347][ T9202] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  188.429667][ T9202] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829)
[  188.436290][ T9202] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  188.568454][ T9208] bond0: (slave bond_slave_0): Releasing backup interface
[  188.779754][ T9215] loop1: detected capacity change from 0 to 256
[  188.795347][ T9215] exfat: Deprecated parameter 'utf8'
[  188.797727][ T9215] exfat: Deprecated parameter 'utf8'
[  188.843838][ T9215] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  188.857396][ T9215] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  188.857396][ T9215] SȘȞZ6'
[  189.214281][ T9225] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1321'.
[  189.775456][ T9246] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1331'.
[  189.778493][ T9246] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  190.087780][   T33] audit: type=1800 audit(1759218026.998:18): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1322" name="/" dev="fuse" ino=5 res=0 errno=0
[  190.308823][ T9252] netlink: 'syz.1.1333': attribute type 4 has an invalid length.
[  190.562143][ T9264] loop1: detected capacity change from 0 to 512
[  190.573887][ T9264] EXT4-fs (loop1): orphan cleanup on readonly fs
[  190.576766][ T9264] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1339: corrupted in-inode xattr: overlapping e_value 
[  190.586272][ T9264] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1339: couldn't read orphan inode 15 (err -117)
[  190.592535][ T9264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  190.631581][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.747041][   T33] audit: type=1326 audit(1759218027.658:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.1.1342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f7b8ec29 code=0x7ffc0000
[  190.765199][   T33] audit: type=1326 audit(1759218027.658:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.1.1342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f7b8ec29 code=0x7ffc0000
[  190.778226][   T33] audit: type=1326 audit(1759218027.658:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.1.1342" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f30f7b8ec29 code=0x7ffc0000
[  190.787616][   T33] audit: type=1326 audit(1759218027.658:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.1.1342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f7b8ec29 code=0x7ffc0000
[  190.796298][   T33] audit: type=1326 audit(1759218027.658:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.1.1342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f7b8ec29 code=0x7ffc0000
[  190.953420][ T5213] Bluetooth: hci3: link tx timeout
[  190.958804][ T5213] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.969446][ T5213] Bluetooth: hci3: link tx timeout
[  190.971725][ T5213] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.975599][ T5213] Bluetooth: hci3: link tx timeout
[  190.977881][ T5213] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.981474][ T5213] Bluetooth: hci3: link tx timeout
[  190.983630][ T5213] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.986997][ T5213] Bluetooth: hci3: link tx timeout
[  190.990137][ T5213] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.993403][ T5213] Bluetooth: hci3: link tx timeout
[  190.995576][ T5213] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.998787][ T5213] Bluetooth: hci3: link tx timeout
[  191.000994][ T5213] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  191.118295][ T9301] 9pnet_fd: Insufficient options for proto=fd
[  192.062356][ T9318] kAFS: unable to lookup cell 'syz169@=R'
[  192.454230][ T9346] bridge0: port 3(syz_tun) entered disabled state
[  192.457389][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.460963][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.722217][ T9366] loop0: detected capacity change from 0 to 512
[  192.752598][ T9366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.756577][ T9366] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.793362][ T9366] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1386: bg 0: block 96: padding at end of block bitmap is not set
[  192.804027][ T9366] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  192.837718][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.019872][ T1270] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  193.039899][ T5213] Bluetooth: hci3: command 0x0405 tx timeout
[  193.179804][ T1270] usb 2-1: Using ep0 maxpacket: 8
[  193.184026][ T1270] usb 2-1: config 0 has an invalid interface number: 61 but max is 0
[  193.187479][ T1270] usb 2-1: config 0 has no interface number 0
[  193.193469][ T1270] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=9e.6c
[  193.197136][ T1270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.201481][ T1270] usb 2-1: Product: syz
[  193.203279][ T1270] usb 2-1: Manufacturer: syz
[  193.205231][ T1270] usb 2-1: SerialNumber: syz
[  193.213174][ T1270] usb 2-1: config 0 descriptor??
[  193.427581][ T1270] usb 2-1: USB disconnect, device number 15
[  193.933625][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.936488][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.663837][ T9446] team0: Cannot enslave team device to itself
[  194.680890][ T9448] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1424'.
[  194.763807][ T9454] loop1: detected capacity change from 0 to 1024
[  194.777897][ T9454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.861520][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.213710][ T9484] 9pnet_fd: Insufficient options for proto=fd
[  195.411550][ T9484] loop0: detected capacity change from 0 to 32768
[  195.446924][ T9484] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1440 (9484)
[  195.460755][ T9484] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.465110][ T9484] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  195.476471][ T9498] loop1: detected capacity change from 0 to 512
[  195.490789][ T9498] EXT4-fs: quotafile must be on filesystem root
[  195.534406][ T9484] BTRFS info (device loop0): enabling ssd optimizations
[  195.557726][ T9484] BTRFS info (device loop0): enabling free space tree
[  195.567828][ T9484] BTRFS info (device loop0): use zstd compression, level 3
[  195.614661][ T9520] netlink: 'syz.3.1447': attribute type 8 has an invalid length.
[  195.765092][ T5819] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  196.278469][   T33] audit: type=1326 audit(1759220611.191:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  196.347807][ T9546] loop0: detected capacity change from 0 to 256
[  196.380010][ T9546] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  196.787257][ T9568] loop1: detected capacity change from 0 to 1764
[  196.826264][ T9568] iso9660: Corrupted directory entry in block 2 of inode 1920
[  196.875397][ T9574] netlink: 'syz.0.1472': attribute type 3 has an invalid length.
[  196.938116][ T9579] ipvlan2: entered promiscuous mode
[  196.949337][   T33] audit: type=1326 audit(1759220611.862:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  196.967060][   T33] audit: type=1326 audit(1759220611.862:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  196.983977][   T33] audit: type=1326 audit(1759220611.862:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  196.993262][   T33] audit: type=1326 audit(1759220611.862:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  197.002542][   T33] audit: type=1326 audit(1759220611.862:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  197.011949][   T33] audit: type=1326 audit(1759220611.862:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  197.021086][   T33] audit: type=1326 audit(1759220611.862:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  197.029675][   T33] audit: type=1326 audit(1759220611.862:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  197.038077][   T33] audit: type=1326 audit(1759220611.862:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.1455" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7fc00000
[  197.350273][ T9597] loop0: detected capacity change from 0 to 40427
[  197.407637][ T9597] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.412734][ T9597] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  197.561843][ T5884] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  197.718216][ T9609] bio_check_eod: 99 callbacks suppressed
[  197.718296][ T9609] syz.0.1483: attempt to access beyond end of device
[  197.718296][ T9609] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  197.753690][ T9609] F2FS-fs (loop0): access invalid blkaddr:2048
[  197.756725][ T9609] CPU: 0 UID: 0 PID: 9609 Comm: syz.0.1483 Not tainted syzkaller #0 PREEMPT(full) 
[  197.756763][ T9609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.756771][ T9609] Call Trace:
[  197.756776][ T9609]  <TASK>
[  197.756782][ T9609]  dump_stack_lvl+0x189/0x250
[  197.756802][ T9609]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.756817][ T9609]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  197.756841][ T9609]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  197.756859][ T9609]  f2fs_map_blocks+0xd84/0x4130
[  197.756882][ T9609]  ? preempt_schedule_irq+0xde/0x150
[  197.756910][ T9609]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  197.756922][ T9609]  ? xa_load+0x60/0x210
[  197.756946][ T9609]  ? xa_load+0x1ea/0x210
[  197.756964][ T9609]  f2fs_mpage_readpages+0xc1b/0x1ba0
[  197.756992][ T9609]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  197.757011][ T9609]  ? __folio_batch_add_and_move+0x192/0xc60
[  197.757035][ T9609]  ? f2fs_readahead+0x177/0x330
[  197.757050][ T9609]  read_pages+0x17a/0x580
[  197.757065][ T9609]  ? __pfx_read_pages+0x10/0x10
[  197.757081][ T9609]  ? filemap_add_folio+0x1af/0x270
[  197.757096][ T9609]  page_cache_ra_unbounded+0x6b0/0x7b0
[  197.757151][ T9609]  f2fs_readdir+0x49b/0xa60
[  197.757184][ T9609]  ? __pfx_f2fs_readdir+0x10/0x10
[  197.757195][ T9609]  ? lock_acquire+0x175/0x360
[  197.757224][ T9609]  ? down_read_killable+0x1d1/0x350
[  197.757242][ T9609]  iterate_dir+0x399/0x570
[  197.757262][ T9609]  __se_sys_getdents+0xe4/0x250
[  197.757278][ T9609]  ? __pfx___se_sys_getdents+0x10/0x10
[  197.757292][ T9609]  ? __pfx_filldir+0x10/0x10
[  197.757308][ T9609]  ? rcu_is_watching+0x15/0xb0
[  197.757325][ T9609]  ? do_syscall_64+0xbe/0x3b0
[  197.757342][ T9609]  do_syscall_64+0xfa/0x3b0
[  197.757355][ T9609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.757366][ T9609]  ? asm_sysvec_call_function_single+0x1a/0x20
[  197.757380][ T9609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.757391][ T9609] RIP: 0033:0x7fe787b8ec29
[  197.757402][ T9609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.757413][ T9609] RSP: 002b:00007fe785df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  197.757425][ T9609] RAX: ffffffffffffffda RBX: 00007fe787dd6180 RCX: 00007fe787b8ec29
[  197.757432][ T9609] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000009
[  197.757439][ T9609] RBP: 00007fe787c11e41 R08: 0000000000000000 R09: 0000000000000000
[  197.757447][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.757453][ T9609] R13: 00007fe787dd6218 R14: 00007fe787dd6180 R15: 00007ffc4aeb5258
[  197.757471][ T9609]  </TASK>
[  197.875577][ T5884] usb 2-1: Using ep0 maxpacket: 32
[  197.882583][ T9609] syz.0.1483: attempt to access beyond end of device
[  197.882583][ T9609] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  197.888827][ T9609] syz.0.1483: attempt to access beyond end of device
[  197.888827][ T9609] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  197.895517][ T5884] usb 2-1: config 0 has an invalid interface number: 16 but max is 0
[  197.898938][ T5884] usb 2-1: config 0 has no interface number 0
[  197.901730][ T5884] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  197.906061][ T5884] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  197.917095][ T5884] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  197.921265][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.924765][ T5884] usb 2-1: Product: syz
[  197.926570][ T5884] usb 2-1: Manufacturer: syz
[  197.928552][ T5884] usb 2-1: SerialNumber: syz
[  197.935054][ T5884] usb 2-1: config 0 descriptor??
[  197.937850][ T9591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  197.941230][ T9591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  197.949908][ T5884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  198.095139][ T5819] syz-executor: attempt to access beyond end of device
[  198.095139][ T5819] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  198.110843][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  198.110859][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.110866][ T5819] Call Trace:
[  198.110870][ T5819]  <TASK>
[  198.110875][ T5819]  dump_stack_lvl+0x189/0x250
[  198.110896][ T5819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.110910][ T5819]  ? __pfx_queue_work_on+0x10/0x10
[  198.110920][ T5819]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  198.110932][ T5819]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  198.110952][ T5819]  f2fs_handle_critical_error+0x37c/0x540
[  198.110968][ T5819]  f2fs_write_end_io+0x886/0xb60
[  198.110993][ T5819]  __submit_merged_bio+0x27a/0x6a0
[  198.111010][ T5819]  __submit_merged_write_cond+0x255/0x530
[  198.111032][ T5819]  f2fs_write_data_pages+0x261d/0x3000
[  198.111067][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  198.111142][ T5819]  ? folios_put_refs+0x559/0x640
[  198.111164][ T5819]  ? __pfx_folios_put_refs+0x10/0x10
[  198.111174][ T5819]  ? rcu_is_watching+0x15/0xb0
[  198.111192][ T5819]  ? __lock_acquire+0xab9/0xd20
[  198.111214][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  198.111228][ T5819]  do_writepages+0x32e/0x550
[  198.111250][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[  198.111267][ T5819]  filemap_fdatawrite+0x199/0x240
[  198.111283][ T5819]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  198.111329][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[  198.111344][ T5819]  f2fs_sync_dirty_inodes+0x31f/0x830
[  198.111366][ T5819]  f2fs_write_checkpoint+0x95a/0x1df0
[  198.111397][ T5819]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  198.111444][ T5819]  ? kill_f2fs_super+0x298/0x6c0
[  198.111463][ T5819]  kill_f2fs_super+0x2c3/0x6c0
[  198.111479][ T5819]  ? __pfx_kill_f2fs_super+0x10/0x10
[  198.111490][ T5819]  ? radix_tree_delete_item+0x2b6/0x400
[  198.111507][ T5819]  ? shrinker_free+0x2ce/0x3e0
[  198.111522][ T5819]  deactivate_locked_super+0xbc/0x130
[  198.111538][ T5819]  cleanup_mnt+0x425/0x4c0
[  198.111551][ T5819]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.111564][ T5819]  task_work_run+0x1d4/0x260
[  198.111582][ T5819]  ? __pfx_task_work_run+0x10/0x10
[  198.111594][ T5819]  ? __x64_sys_umount+0x122/0x160
[  198.111611][ T5819]  ? exit_to_user_mode_loop+0x40/0x110
[  198.111630][ T5819]  exit_to_user_mode_loop+0xec/0x110
[  198.111647][ T5819]  do_syscall_64+0x2bd/0x3b0
[  198.111657][ T5819]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.111669][ T5819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.111678][ T5819]  ? exc_page_fault+0x9f/0xf0
[  198.111691][ T5819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.111702][ T5819] RIP: 0033:0x7fe787b8ff57
[  198.111712][ T5819] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  198.111722][ T5819] RSP: 002b:00007ffc4aeb44e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  198.111734][ T5819] RAX: 0000000000000000 RBX: 00007fe787c11c2d RCX: 00007fe787b8ff57
[  198.111742][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4aeb45a0
[  198.111749][ T5819] RBP: 00007ffc4aeb45a0 R08: 0000000000000000 R09: 0000000000000000
[  198.111756][ T5819] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4aeb5630
[  198.111763][ T5819] R13: 00007fe787c11c2d R14: 0000000000030500 R15: 00007ffc4aeb5670
[  198.111783][ T5819]  </TASK>
[  198.111788][ T5819] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  198.204930][ T1270] usb 2-1: USB disconnect, device number 16
[  199.029154][ T1270] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  199.181832][ T1270] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  199.185446][ T1270] usb 2-1: config 0 has no interface number 0
[  199.188078][ T1270] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  199.193679][ T1270] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  199.199680][ T1270] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  199.203678][ T1270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.210646][ T1270] usb 2-1: config 0 descriptor??
[  199.213633][ T9631] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  199.230392][ T1270] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  199.429846][ T1270] usb 2-1: USB disconnect, device number 17
[  199.432467][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  199.990947][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'.
[  200.357829][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'.
[  200.729844][ T9684] netlink: 'syz.1.1521': attribute type 10 has an invalid length.
[  200.745651][ T9684] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  200.750935][ T9684] team0: Failed to send options change via netlink (err -105)
[  200.753340][ T9684] team0: Port device dummy0 added
[  200.874202][ T9691] syzkaller0: tun_chr_ioctl cmd 1074025672
[  200.876745][ T9691] syzkaller0: ignored: set checksum enabled
[  200.936335][ T9695] netlink: 'syz.3.1526': attribute type 21 has an invalid length.
[  200.942212][ T9695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1526'.
[  201.693071][ T9717] netlink: 'syz.0.1536': attribute type 14 has an invalid length.
[  201.974825][ T9724] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  201.974825][ T9724] SȘȞZ6'
[  202.160585][ T9721] loop1: detected capacity change from 0 to 32768
[  202.877083][ T9756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.548531][ T1270] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  203.722806][ T1270] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  203.736071][ T1270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.759908][ T1270] usb 2-1: config 0 descriptor??
[  203.989462][ T1270] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  204.191580][ T1270] [drm:udl_init] *ERROR* Selecting channel failed
[  204.231663][ T1270] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  204.234431][ T1270] [drm] Initialized udl on minor 3
[  204.245537][ T1270] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  204.251072][ T1270] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  204.261938][ T1270] usb 2-1: USB disconnect, device number 18
[  204.267248][ T5883] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  204.289515][ T5883] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  205.089842][  T789] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  205.096879][ T9817] loop0: detected capacity change from 0 to 1024
[  205.141022][ T9817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.154414][ T9817] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 33: comm syz.0.1582: bad entry in directory: rec_len % 4 != 0 - offset=1024, inode=0, rec_len=2874, size=1024 fake=0
[  205.182204][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.256119][  T789] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  205.259989][  T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.272415][  T789] usb 2-1: config 0 descriptor??
[  205.350691][ T9828] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  205.628772][ T9830] loop0: detected capacity change from 0 to 32768
[  205.640666][ T9830] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  205.650512][ T9830] XFS (loop0): Ending clean mount
[  205.653969][ T9830] XFS (loop0): Quotacheck needed: Please wait.
[  205.682097][ T9830] XFS (loop0): Quotacheck: Done.
[  205.711555][ T5819] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.282659][  T789] usb 2-1: Cannot set autoneg
[  206.288612][  T789] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  206.307753][  T789] usb 2-1: USB disconnect, device number 19
[  206.876948][ T9857] can0: slcan on ttyS3.
[  206.970625][ T9857] can0 (unregistered): slcan off ttyS3.
[  206.974870][ T9857] Falling back ldisc for ttyS3.
[  207.243958][ T9876] netlink: 'syz.1.1601': attribute type 10 has an invalid length.
[  207.319276][ T9876] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  207.325292][ T9876] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  207.331620][ T9882] loop0: detected capacity change from 0 to 256
[  207.350421][ T9882] FAT-fs (loop0): Directory bread(block 64) failed
[  207.352969][ T9875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.353425][ T9882] FAT-fs (loop0): Directory bread(block 65) failed
[  207.364748][ T9882] FAT-fs (loop0): Directory bread(block 66) failed
[  207.367539][ T9882] FAT-fs (loop0): Directory bread(block 67) failed
[  207.371048][ T9882] FAT-fs (loop0): Directory bread(block 68) failed
[  207.373301][ T9882] FAT-fs (loop0): Directory bread(block 69) failed
[  207.375592][ T9882] FAT-fs (loop0): Directory bread(block 70) failed
[  207.377834][ T9882] FAT-fs (loop0): Directory bread(block 71) failed
[  207.381785][ T9882] FAT-fs (loop0): Directory bread(block 72) failed
[  207.384351][ T9882] FAT-fs (loop0): Directory bread(block 73) failed
[  207.436729][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  207.447677][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  207.460732][  T789] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  207.762998][ T9893] loop0: detected capacity change from 0 to 2048
[  207.772462][ T9893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.782055][ T9893] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  207.826857][ T9895] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1608'.
[  208.040697][ T9905] bridge0: port 4(veth0_to_bridge) entered blocking state
[  208.043861][ T9905] bridge0: port 4(veth0_to_bridge) entered disabled state
[  208.046771][ T9905] veth0_to_bridge: entered allmulticast mode
[  208.059099][ T9905] veth0_to_bridge: entered promiscuous mode
[  208.108172][  T789] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  208.140696][ T9899] loop0: detected capacity change from 0 to 40427
[  208.158458][ T9899] F2FS-fs (loop0): Image doesn't support compression
[  208.161106][ T9899] F2FS-fs (loop0): build fault injection rate: 690
[  208.177093][ T9899] F2FS-fs (loop0): invalid crc value
[  208.225124][ T9899] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  208.229393][ T9899] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  208.247512][ T5856] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  208.254370][   T33] kauditd_printk_skb: 44 callbacks suppressed
[  208.254381][   T33] audit: type=1800 audit(1759220623.173:78): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1610" name="bus" dev="loop0" ino=10 res=0 errno=0
[  208.269174][ T5819] syz-executor: attempt to access beyond end of device
[  208.269174][ T5819] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  208.275755][ T5819] syz-executor: attempt to access beyond end of device
[  208.275755][ T5819] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  208.312875][ T1088] Trying to write to read-only block-device loop0
[  208.315691][ T1088] kworker/u9:5: attempt to access beyond end of device
[  208.315691][ T1088] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  208.326205][ T1088] CPU: 0 UID: 0 PID: 1088 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  208.326220][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.326228][ T1088] Workqueue: writeback wb_workfn (flush-7:0)
[  208.326248][ T1088] Call Trace:
[  208.326254][ T1088]  <TASK>
[  208.326259][ T1088]  dump_stack_lvl+0x189/0x250
[  208.326278][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.326293][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  208.326306][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.326319][ T1088]  ? f2fs_hw_is_readonly+0x3a4/0x470
[  208.326335][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[  208.326352][ T1088]  f2fs_write_end_io+0x886/0xb60
[  208.326376][ T1088]  __submit_merged_bio+0x27a/0x6a0
[  208.326407][ T1088]  __submit_merged_write_cond+0x255/0x530
[  208.326429][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[  208.326464][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.326486][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  208.326521][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  208.326543][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[  208.326556][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[  208.326570][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  208.326580][ T1088]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  208.326603][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.326615][ T1088]  do_writepages+0x32e/0x550
[  208.326634][ T1088]  ? reacquire_held_locks+0x127/0x1d0
[  208.326646][ T1088]  ? writeback_sb_inodes+0x384/0x1010
[  208.326667][ T1088]  __writeback_single_inode+0x145/0xff0
[  208.326683][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[  208.326699][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[  208.326731][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  208.326793][ T1088]  ? rcu_is_watching+0x15/0xb0
[  208.326813][ T1088]  wb_writeback+0x43b/0xaf0
[  208.326833][ T1088]  ? queue_io+0x311/0x590
[  208.326849][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[  208.326867][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.326882][ T1088]  wb_workfn+0x409/0xef0
[  208.326905][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[  208.326921][ T1088]  ? __lock_acquire+0xab9/0xd20
[  208.326939][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  208.326954][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.326964][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  208.326993][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  208.327007][ T1088]  process_scheduled_works+0xae1/0x17b0
[  208.327038][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.327086][ T1088]  worker_thread+0x8a0/0xda0
[  208.327109][ T1088]  ? __kthread_parkme+0x7b/0x200
[  208.327128][ T1088]  kthread+0x711/0x8a0
[  208.327144][ T1088]  ? __pfx_worker_thread+0x10/0x10
[  208.327155][ T1088]  ? __pfx_kthread+0x10/0x10
[  208.327171][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.327182][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.327194][ T1088]  ? __pfx_kthread+0x10/0x10
[  208.327209][ T1088]  ret_from_fork+0x439/0x7d0
[  208.327224][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[  208.327241][ T1088]  ? __switch_to_asm+0x39/0x70
[  208.327256][ T1088]  ? __switch_to_asm+0x33/0x70
[  208.327269][ T1088]  ? __pfx_kthread+0x10/0x10
[  208.327284][ T1088]  ret_from_fork_asm+0x1a/0x30
[  208.327311][ T1088]  </TASK>
[  208.327783][ T1088] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  208.529242][ T1088] CPU: 1 UID: 0 PID: 1088 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  208.529256][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.529261][ T1088] Workqueue: writeback wb_workfn (flush-7:0)
[  208.529274][ T1088] Call Trace:
[  208.529277][ T1088]  <TASK>
[  208.529286][ T1088]  dump_stack_lvl+0x189/0x250
[  208.529298][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.529307][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  208.529314][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.529322][ T1088]  ? f2fs_hw_is_readonly+0x3a4/0x470
[  208.529331][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[  208.529341][ T1088]  f2fs_write_end_io+0x886/0xb60
[  208.529360][ T1088]  __submit_merged_bio+0x27a/0x6a0
[  208.529370][ T1088]  __submit_merged_write_cond+0x255/0x530
[  208.529383][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[  208.529403][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.529418][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  208.529449][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  208.529467][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[  208.529479][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[  208.529492][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  208.529502][ T1088]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  208.529523][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.529536][ T1088]  do_writepages+0x32e/0x550
[  208.529554][ T1088]  ? reacquire_held_locks+0x127/0x1d0
[  208.529565][ T1088]  ? writeback_sb_inodes+0x384/0x1010
[  208.529585][ T1088]  __writeback_single_inode+0x145/0xff0
[  208.529600][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[  208.529617][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[  208.529649][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  208.529694][ T1088]  ? rcu_is_watching+0x15/0xb0
[  208.529712][ T1088]  wb_writeback+0x43b/0xaf0
[  208.529733][ T1088]  ? queue_io+0x311/0x590
[  208.529750][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[  208.529771][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.529785][ T1088]  wb_workfn+0x409/0xef0
[  208.529806][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[  208.529822][ T1088]  ? __lock_acquire+0xab9/0xd20
[  208.529839][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  208.529854][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.529865][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  208.529874][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  208.529887][ T1088]  process_scheduled_works+0xae1/0x17b0
[  208.529916][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.529940][ T1088]  worker_thread+0x8a0/0xda0
[  208.529983][ T1088]  ? __kthread_parkme+0x7b/0x200
[  208.530005][ T1088]  kthread+0x711/0x8a0
[  208.530021][ T1088]  ? __pfx_worker_thread+0x10/0x10
[  208.530033][ T1088]  ? __pfx_kthread+0x10/0x10
[  208.530047][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.530081][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.530094][ T1088]  ? __pfx_kthread+0x10/0x10
[  208.530107][ T1088]  ret_from_fork+0x439/0x7d0
[  208.530121][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[  208.530137][ T1088]  ? __switch_to_asm+0x39/0x70
[  208.530151][ T1088]  ? __switch_to_asm+0x33/0x70
[  208.530163][ T1088]  ? __pfx_kthread+0x10/0x10
[  208.530177][ T1088]  ret_from_fork_asm+0x1a/0x30
[  208.530203][ T1088]  </TASK>
[  208.530362][ T1088] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  208.993012][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.000305][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.077125][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.081964][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.107849][ T1270] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  209.150698][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.154963][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.225710][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.232110][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.257790][ T1270] usb 2-1: Using ep0 maxpacket: 8
[  209.262780][ T1270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.267193][ T1270] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  209.274445][ T1270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.282822][ T1270] usb 2-1: config 0 descriptor??
[  209.289927][ T1270] gspca_main: vc032x-2.14.0 probing 046d:0892
[  209.331639][ T5213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.336668][ T5213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.341026][ T5213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.346404][ T5213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.358413][ T5213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.413163][   T12] bridge_slave_1: left allmulticast mode
[  209.418455][   T12] bridge_slave_1: left promiscuous mode
[  209.426209][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.439269][   T12] bridge_slave_0: left allmulticast mode
[  209.441773][   T12] bridge_slave_0: left promiscuous mode
[  209.444382][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.759861][   T12] bond1 (unregistering): (slave geneve2): Releasing active interface
[  209.798927][   T12] team0: Port device vxlan0 removed
[  210.035267][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.044130][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.049717][   T12] bond0 (unregistering): Released all slaves
[  210.145613][   T12] bond1 (unregistering): Released all slaves
[  210.473029][   T12] hsr_slave_0: left promiscuous mode
[  210.478029][   T12] hsr_slave_1: left promiscuous mode
[  210.480981][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.491573][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.498285][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.508543][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.546205][   T12] veth1_macvtap: left promiscuous mode
[  210.548734][   T12] veth0_macvtap: left promiscuous mode
[  210.552784][   T12] veth1_vlan: left promiscuous mode
[  210.555094][   T12] veth0_vlan: left promiscuous mode
[  210.706164][ T1270] gspca_vc032x: reg_w err -71
[  210.708232][ T1270] vc032x 2-1:0.0: probe with driver vc032x failed with error -71
[  210.713570][ T1270] usb 2-1: USB disconnect, device number 20
[  211.012697][   T12] team0 (unregistering): Port device team_slave_1 removed
[  211.045430][   T12] team0 (unregistering): Port device team_slave_0 removed
[  211.281072][ T9960] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  211.283575][ T9960] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  211.314498][ T9960] vhci_hcd vhci_hcd.0: Device attached
[  211.323980][ T9961] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0
[  211.329796][   T13] vhci_hcd: stop threads
[  211.332320][   T13] vhci_hcd: release socket
[  211.334218][   T13] vhci_hcd: disconnect device
[  211.439803][ T5213] Bluetooth: hci0: command tx timeout
[  211.576574][ T9923] chnl_net:caif_netlink_parms(): no params data found
[  211.785892][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.790882][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.793274][ T9923] bridge_slave_0: entered allmulticast mode
[  211.795918][ T9923] bridge_slave_0: entered promiscuous mode
[  211.802191][ T9923] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.804674][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.807252][ T9923] bridge_slave_1: entered allmulticast mode
[  211.810682][ T9923] bridge_slave_1: entered promiscuous mode
[  211.929026][ T9923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.941200][   T12] IPVS: stop unused estimator thread 0...
[  211.945939][ T9923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.011251][ T9923] team0: Port device team_slave_0 added
[  212.015913][ T9923] team0: Port device team_slave_1 added
[  212.243029][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.245380][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.258288][ T9923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.275877][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.281493][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.299101][ T9923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.412606][ T9923] hsr_slave_0: entered promiscuous mode
[  212.415211][ T9923] hsr_slave_1: entered promiscuous mode
[  212.415331][ T9994] loop1: detected capacity change from 0 to 8192
[  212.799270][ T9923] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  212.811467][ T9923] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  212.820940][ T9923] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  212.836018][ T9923] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  212.909442][ T9923] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.926135][ T9923] 8021q: adding VLAN 0 to HW filter on device team0
[  212.934806][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.937838][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.947708][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.950881][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.973793][T10013] loop1: detected capacity change from 0 to 32768
[  212.983906][ T9923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.988730][ T9923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.018911][T10013] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  213.036159][T10013] XFS (loop1): Ending clean mount
[  213.068914][ T5821] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  213.134286][ T9923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.292878][ T9923] veth0_vlan: entered promiscuous mode
[  213.300096][ T9923] veth1_vlan: entered promiscuous mode
[  213.320384][ T9923] veth0_macvtap: entered promiscuous mode
[  213.325542][ T9923] veth1_macvtap: entered promiscuous mode
[  213.341140][ T9923] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.348143][ T9923] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.358807][ T5887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.362344][ T5887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.368861][ T5887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.372694][ T5887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.455753][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.460276][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.493167][  T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.496955][  T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.527665][ T5213] Bluetooth: hci0: command tx timeout
[  213.844823][T10051] loop4: detected capacity change from 0 to 32768
[  213.898713][T10051] (syz.4.1622,10051,0):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  213.902671][T10051] (syz.4.1622,10051,0):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  213.912289][T10051] (syz.4.1622,10051,0):ocfs2_check_volume:2420 ERROR: status = -13
[  213.918106][T10051] (syz.4.1622,10051,0):ocfs2_check_volume:2432 ERROR: status = -13
[  213.927537][T10051] (syz.4.1622,10051,0):ocfs2_mount_volume:1764 ERROR: status = -13
[  213.961181][T10051] (syz.4.1622,10051,0):ocfs2_fill_super:1177 ERROR: status = -13
[  214.189861][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1656'.
[  214.212318][T10073] netlink: 'syz.1.1658': attribute type 2 has an invalid length.
[  214.214998][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'.
[  214.373999][T10089] loop4: detected capacity change from 0 to 256
[  214.377568][T10089] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.388300][T10089] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  214.411196][T10089] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  215.069676][T10108] netlink: 'syz.1.1669': attribute type 2 has an invalid length.
[  215.597277][ T5213] Bluetooth: hci0: command tx timeout
[  215.897863][T10123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.984959][T10127] loop1: detected capacity change from 0 to 1024
[  216.138904][ T5883] kernel read not supported for file /admmidi2 (pid: 5883 comm: kworker/1:5)
[  216.812324][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'.
[  217.824891][ T5213] Bluetooth: hci0: command tx timeout
[  218.059047][T10185] kAFS: Can only specify source 'none' with -o dyn
[  218.203998][T10198] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1708'.
[  218.387151][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  218.471138][T10218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.530230][ T5856] kernel write not supported for file /dsp1 (pid: 5856 comm: kworker/0:3)
[  218.536719][ T5884] usb 5-1: Using ep0 maxpacket: 8
[  218.542569][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  218.557629][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  218.565542][ T5884] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  218.570136][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.580182][T10218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.583965][ T5884] usb 5-1: Product: syz
[  218.585732][ T5884] usb 5-1: Manufacturer: syz
[  218.587804][ T5884] usb 5-1: SerialNumber: syz
[  218.601310][ T5884] usb 5-1: config 0 descriptor??
[  218.668592][T10218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.728540][T10224] loop1: detected capacity change from 0 to 2048
[  218.748784][T10218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.770492][T10226] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.813955][ T5884] usb 5-1: USB disconnect, device number 2
[  218.834725][T10226] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  218.841456][T10226] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  218.857081][T10226] Remounting filesystem read-only
[  218.862233][ T5821] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  218.915979][ T5700] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.936753][ T5700] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.964833][ T5700] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.969307][T10230] overlay: ./file0 is not a directory
[  218.982250][ T5700] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.011998][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'.
[  219.014918][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1722'.
[  220.112344][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'.
[  220.116164][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'.
[  220.279128][T10282] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609)
[  220.282409][T10282] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  220.567075][ T5884] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  220.721744][ T5884] usb 2-1: config 1 interface 0 has no altsetting 0
[  220.726663][ T5884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  220.730421][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.733848][ T5884] usb 2-1: Product: syz
[  220.735735][ T5884] usb 2-1: Manufacturer: syz
[  220.738552][ T5884] usb 2-1: SerialNumber: syz
[  220.766391][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  220.916378][    T9] usb 5-1: Using ep0 maxpacket: 8
[  220.920151][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.923685][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  220.930588][    T9] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  220.933677][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.936197][    T9] usb 5-1: Product: syz
[  220.939877][    T9] usb 5-1: Manufacturer: syz
[  220.941798][    T9] usb 5-1: SerialNumber: syz
[  220.946131][    T9] usb 5-1: config 0 descriptor??
[  220.953016][    T9] radioshark 5-1:0.0: Invalid radioSHARK device
[  220.956641][    T9] radioshark 5-1:0.0: probe with driver radioshark failed with error -22
[  220.961118][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  221.152522][    T9] usb 5-1: USB disconnect, device number 3
[  221.161888][ T5884] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  222.261253][T10326] netlink: 'syz.3.1764': attribute type 21 has an invalid length.
[  222.263900][T10326] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1764'.
[  222.267210][T10326] netlink: 'syz.3.1764': attribute type 5 has an invalid length.
[  222.270276][T10326] netlink: 'syz.3.1764': attribute type 6 has an invalid length.
[  222.273495][T10326] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1764'.
[  222.678343][T10349] netlink: 'syz.3.1774': attribute type 1 has an invalid length.
[  222.681035][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1774'.
[  222.960015][T10353] overlayfs: failed to clone upperpath
[  224.347815][    C0] usblp0: nonzero write bulk status received: -71
[  224.350201][ T5883] usb 2-1: USB disconnect, device number 21
[  224.362446][ T5883] usblp0: removed
[  224.536716][ T5856] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  224.559259][T10400] macvlan2: entered allmulticast mode
[  224.561426][T10400] veth1_vlan: entered allmulticast mode
[  224.696069][ T5856] usb 5-1: Using ep0 maxpacket: 32
[  224.700135][ T5856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  224.708910][ T5856] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  224.713435][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  224.719927][ T5856] usb 5-1: Product: syz
[  224.723093][ T5856] usb 5-1: Manufacturer: syz
[  224.725055][ T5856] usb 5-1: SerialNumber: syz
[  224.737564][ T5856] usb 5-1: config 0 descriptor??
[  224.740346][T10378] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  224.773024][T10414] input: syz1 as /devices/virtual/input/input11
[  225.126017][ T1270] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  225.305793][ T1270] usb 2-1: Using ep0 maxpacket: 32
[  225.309131][ T1270] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  225.311827][ T1270] usb 2-1: config 0 has no interface number 0
[  225.313947][ T1270] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  225.318231][ T1270] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  225.321702][ T1270] usb 2-1: config 0 interface 85 has no altsetting 0
[  225.325824][ T1270] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  225.328824][ T1270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.331428][ T1270] usb 2-1: Product: syz
[  225.332818][ T1270] usb 2-1: Manufacturer: syz
[  225.334757][ T1270] usb 2-1: SerialNumber: syz
[  225.338089][ T1270] usb 2-1: config 0 descriptor??
[  225.544347][ T1270] appletouch 2-1:0.85: Failed to read mode from device.
[  225.550880][ T1270] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  225.560355][ T1270] usb 2-1: USB disconnect, device number 22
[  227.322248][ T5987] usb 5-1: USB disconnect, device number 4
[  227.448280][T10466] loop4: detected capacity change from 0 to 47
[  227.491637][T10466] syz.4.1808: attempt to access beyond end of device
[  227.491637][T10466] loop4: rw=2049, sector=48, nr_sectors = 2 limit=47
[  227.499158][T10466] Buffer I/O error on dev loop4, logical block 24, lost async page write
[  227.502846][T10466] syz.4.1808: attempt to access beyond end of device
[  227.502846][T10466] loop4: rw=2049, sector=50, nr_sectors = 2 limit=47
[  227.512227][T10466] Buffer I/O error on dev loop4, logical block 25, lost async page write
[  227.608021][T10474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1811'.
[  227.629998][T10466] syz.4.1808: attempt to access beyond end of device
[  227.629998][T10466] loop4: rw=2049, sector=48, nr_sectors = 2 limit=47
[  227.636528][T10466] Buffer I/O error on dev loop4, logical block 24, lost async page write
[  227.640312][T10466] syz.4.1808: attempt to access beyond end of device
[  227.640312][T10466] loop4: rw=2049, sector=50, nr_sectors = 2 limit=47
[  227.648166][T10466] Buffer I/O error on dev loop4, logical block 25, lost async page write
[  227.848325][T10489] loop1: detected capacity change from 0 to 128
[  227.851945][T10489] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  227.859088][T10489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.671816][T10512] netlink: 'syz.1.1828': attribute type 27 has an invalid length.
[  228.878168][T10512] bond_slave_1: left promiscuous mode
[  228.880786][T10512] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  228.961571][T10512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.971308][T10512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.988853][T10517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1830'.
[  228.999731][T10512] hsr0: left promiscuous mode
[  229.085370][ T5884] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  229.141155][T10512] batadv1: left promiscuous mode
[  229.143305][T10512] batadv1: left allmulticast mode
[  229.203651][T10513] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.210591][T10513] 8021q: adding VLAN 0 to HW filter on device team0
[  229.219191][T10513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.228022][ T5700] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.231748][ T5700] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.235989][ T5884] usb 5-1: Using ep0 maxpacket: 16
[  229.241001][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.245608][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.250010][ T5700] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.253712][ T5700] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.260123][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  229.263984][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.267702][ T5700] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.271417][ T5884] usb 5-1: Product: syz
[  229.273180][ T5884] usb 5-1: Manufacturer: syz
[  229.275090][ T5884] usb 5-1: SerialNumber: syz
[  229.279506][ T5700] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.289713][ T5700] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.294920][ T5700] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.503863][ T5884] usb 5-1: 0:2 : does not exist
[  229.506133][ T5884] usb 5-1: unit 9 not found!
[  229.511660][ T5884] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4)
[  229.523113][ T5884] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4)
[  229.529849][ T5884] usb 5-1: 4:0: cannot get min/max values for control 6 (id 4)
[  229.546090][ T5884] usb 5-1: USB disconnect, device number 5
[  229.562119][ T6483] udevd[6483]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.833926][T10525] loop1: detected capacity change from 0 to 2048
[  229.849579][T10526] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.938184][T10530] loop1: detected capacity change from 0 to 1024
[  229.979513][T10530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  229.984627][T10530] ext4 filesystem being mounted at /644/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.994094][   T33] audit: type=1800 audit(1759220644.916:79): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1836" name="file1" dev="loop1" ino=15 res=0 errno=0
[  230.002745][   T33] audit: type=1800 audit(1759220644.926:80): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1836" name="file1" dev="loop1" ino=15 res=0 errno=0
[  230.009652][T10530] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1836: lblock 0 mapped to illegal pblock 0 (length 1)
[  230.023537][T10530] EXT4-fs (loop1): Remounting filesystem read-only
[  230.074108][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  230.212679][T10539] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  230.238558][T10539] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  230.309772][T10539] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  230.318269][T10539] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  230.343619][T10539] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  230.509144][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'.
[  231.376652][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'.
[  231.574347][T10568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.668906][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'.
[  231.970792][ T5987] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  232.061755][   T33] audit: type=1326 audit(1759220646.886:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7ffc0000
[  232.102287][   T33] audit: type=1326 audit(1759220646.886:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7ffc0000
[  232.158405][   T33] audit: type=1326 audit(1759220646.886:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7ffc0000
[  232.167455][   T33] audit: type=1326 audit(1759220646.886:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7ffc0000
[  232.174826][ T5987] usb 2-1: Using ep0 maxpacket: 8
[  232.176616][   T33] audit: type=1326 audit(1759220646.896:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1854" exe="/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f038978ec29 code=0x7ffc0000
[  232.176651][   T33] audit: type=1326 audit(1759220647.086:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7ffc0000
[  232.181267][ T5987] usb 2-1: unable to get BOS descriptor or descriptor too short
[  232.188565][   T33] audit: type=1326 audit(1759220647.086:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038978ec29 code=0x7ffc0000
[  232.210703][ T5987] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  232.214461][ T5987] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.232311][ T5987] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  232.238973][ T5213] Bluetooth: hci3: command 0x0405 tx timeout
[  232.241848][ T5987] usb 2-1: config 1 has no interface number 1
[  232.248985][ T5987] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  232.254346][ T5987] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  232.262777][ T5987] usb 2-1: config 1 interface 2 has no altsetting 0
[  232.271219][ T5987] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  232.279084][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.282552][ T5987] usb 2-1: Product: syz
[  232.284404][ T5987] usb 2-1: Manufacturer: syz
[  232.286695][ T5987] usb 2-1: SerialNumber: syz
[  232.315129][ T5213] Bluetooth: hci0: command 0x0c1a tx timeout
[  232.519918][T10589] loop4: detected capacity change from 0 to 32768
[  232.563326][T10589] JBD2: Ignoring recovery information on journal
[  232.572775][ T5987] usb 2-1: USB disconnect, device number 23
[  232.595661][ T6483] udevd[6483]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.602893][T10589] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  232.730041][ T9923] ocfs2: Unmounting device (7,4) on (node local)
[  232.834703][T10600] netlink: 'syz.4.1864': attribute type 1 has an invalid length.
[  232.837505][T10600] netlink: 'syz.4.1864': attribute type 2 has an invalid length.
[  232.863606][T10602] netlink: 'syz.4.1865': attribute type 4 has an invalid length.
[  233.102673][T10611] rdma_op ffff88802a2ed9f0 conn xmit_rdma 0000000000000000
[  233.521695][T10617] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1871'.
[  233.531225][T10617] netlink: 'syz.1.1871': attribute type 1 has an invalid length.
[  233.792362][T10628] raw_sendmsg: syz.1.1876 forgot to set AF_INET. Fix it!
[  234.419037][ T5213] Bluetooth: hci3: command 0x0405 tx timeout
[  234.422730][ T5213] Bluetooth: hci0: command 0x0c1a tx timeout
[  234.655974][ T5987] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  234.867481][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.897597][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.937814][ T5987] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  234.947514][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.957066][ T5987] usb 2-1: config 0 descriptor??
[  235.068563][T10662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.442374][ T5987] hid_parser_main: 1260 callbacks suppressed
[  235.442385][ T5987] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  235.495986][T10670] loop4: detected capacity change from 0 to 1024
[  235.507196][T10670] EXT4-fs: Ignoring removed orlov option
[  235.551750][T10670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.565891][   T33] audit: type=1800 audit(1759220650.496:88): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1892" name="file0" dev="loop4" ino=13 res=0 errno=0
[  235.589612][ T9923] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.647490][ T5987] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71
[  235.666814][ T5987] usb 2-1: USB disconnect, device number 24
[  235.691188][T10679] netlink: 'syz.4.1896': attribute type 4 has an invalid length.
[  236.154596][ T5987] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  236.315006][ T5987] usb 5-1: Using ep0 maxpacket: 32
[  236.319836][ T5987] usb 5-1: unable to get BOS descriptor or descriptor too short
[  236.324188][ T5987] usb 5-1: config 7 has an invalid interface number: 69 but max is 0
[  236.328200][ T5987] usb 5-1: config 7 has no interface number 0
[  236.330621][ T5987] usb 5-1: config 7 interface 69 has no altsetting 0
[  236.335965][ T5987] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=a5.97
[  236.339465][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.342609][ T5987] usb 5-1: Product: syz
[  236.344038][ T5987] usb 5-1: Manufacturer: syz
[  236.373216][ T5987] usb 5-1: SerialNumber: syz
[  236.712976][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout
[  236.737304][ T5987] kvaser_usb 5-1:7.69: error -ENODEV: Cannot get usb endpoint(s)
[  236.748420][ T5987] usb 5-1: USB disconnect, device number 6
[  237.422679][T10754] loop1: detected capacity change from 0 to 512
[  237.427721][T10754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  237.448847][T10754] EXT4-fs (loop1): 1 truncate cleaned up
[  237.451556][T10754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.492631][T10754] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  237.515635][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.796226][T10771] netlink: 'syz.3.1938': attribute type 56 has an invalid length.
[  237.839026][T10773] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  237.862089][T10775] netlink: 642 bytes leftover after parsing attributes in process `syz.3.1940'.
[  238.079235][T10764] loop1: detected capacity change from 0 to 131072
[  238.083839][T10764] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  238.087414][T10764] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  238.092489][T10764] F2FS-fs (loop1): invalid crc value
[  238.134759][ T5987] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  238.190565][T10764] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  238.197827][T10764] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  238.200264][T10764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  238.224856][   T33] audit: type=1800 audit(2000000000.880:89): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1935" name="file2" dev="loop1" ino=8 res=0 errno=0
[  238.304515][ T5987] usb 5-1: Using ep0 maxpacket: 16
[  238.310669][ T5987] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  238.313946][ T5987] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.320641][ T5987] usb 5-1: config 0 has no interface number 0
[  238.325843][ T5987] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  238.329485][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.332946][ T5987] usb 5-1: Product: syz
[  238.338613][ T5987] usb 5-1: Manufacturer: syz
[  238.340536][ T5987] usb 5-1: SerialNumber: syz
[  238.363972][ T5987] usb 5-1: config 0 descriptor??
[  238.576020][ T5987] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  238.578796][ T5987] usb 5-1: No valid video chain found.
[  238.592314][ T5987] usb 5-1: USB disconnect, device number 7
[  238.946568][T10791] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  239.282768][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'.
[  239.423502][   T33] audit: type=1804 audit(2000000002.090:90): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1962" name="/newroot/72/file1" dev="fuse" ino=1 res=1 errno=0
[  239.432691][   T33] audit: type=1800 audit(2000000002.100:91): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1962" name="/" dev="fuse" ino=1 res=0 errno=0
[  239.455330][   T33] audit: type=1800 audit(2000000002.100:92): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1962" name="/" dev="fuse" ino=1 res=0 errno=0
[  239.478971][T10833] netlink: 'syz.3.1966': attribute type 62 has an invalid length.
[  239.651731][T10846] loop4: detected capacity change from 0 to 1024
[  239.680283][T10846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.715512][T10841] loop1: detected capacity change from 0 to 32768
[  239.718696][ T9923] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.919522][T10864] loop1: detected capacity change from 0 to 8
[  240.499756][T10871] netlink: 'syz.1.1980': attribute type 4 has an invalid length.
[  242.953082][T10935] loop1: detected capacity change from 0 to 512
[  242.959788][T10935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  242.977494][T10935] EXT4-fs (loop1): 1 truncate cleaned up
[  243.011774][T10935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.157754][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.625045][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  244.656369][T10996] netlink: 'syz.3.2034': attribute type 10 has an invalid length.
[  244.794512][    T9] usb 5-1: Using ep0 maxpacket: 16
[  244.805389][    T9] usb 5-1: config 219 has an invalid interface number: 121 but max is 1
[  244.808881][    T9] usb 5-1: config 219 has no interface number 1
[  244.811563][    T9] usb 5-1: config 219 interface 121 has no altsetting 0
[  244.827539][    T9] usb 5-1: config 219 interface 0 has no altsetting 0
[  244.856209][    T9] usb 5-1: New USB device found, idVendor=413c, idProduct=81a2, bcdDevice=f0.77
[  244.860052][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.863493][    T9] usb 5-1: Product: syz
[  244.871770][    T9] usb 5-1: Manufacturer: syz
[  244.873885][    T9] usb 5-1: SerialNumber: syz
[  244.975749][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'.
[  244.998378][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'.
[  245.002671][ T5700] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  245.006819][ T5700] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  245.010782][ T5700] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  245.027623][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.125228][    T9] usb 5-1: selecting invalid altsetting 0
[  245.127728][    T9] usb 5-1: Could not set interface, error -22
[  245.138590][    T9] usb 5-1: USB disconnect, device number 8
[  245.247572][ T5700] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.313700][ T5700] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.370385][ T5700] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.438063][ T5700] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.547853][ T5213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.558963][ T5213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.562771][ T5213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.565845][ T5213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.568256][ T5213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.589164][ T5700] bridge_slave_1: left allmulticast mode
[  245.595281][ T5700] bridge_slave_1: left promiscuous mode
[  245.598045][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.836682][T11038] loop4: detected capacity change from 0 to 256
[  245.842111][T11038] exfat: Deprecated parameter 'utf8'
[  245.851348][T11038] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  245.957539][ T5700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.962842][ T5700] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  245.968177][ T5700] bond0 (unregistering): Released all slaves
[  246.180424][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2056'.
[  246.301568][T11028] chnl_net:caif_netlink_parms(): no params data found
[  246.351577][ T5700] tipc: Left network mode
[  246.966111][T11028] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.974430][T11028] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.977442][T11028] bridge_slave_0: entered allmulticast mode
[  246.981136][T11028] bridge_slave_0: entered promiscuous mode
[  246.995508][T11028] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.003578][T11028] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.008917][T11028] bridge_slave_1: entered allmulticast mode
[  247.018176][T11028] bridge_slave_1: entered promiscuous mode
[  247.058803][ T5700] hsr_slave_0: left promiscuous mode
[  247.066802][ T5700] hsr_slave_1: left promiscuous mode
[  247.072412][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.079274][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.412403][ T5700] team0 (unregistering): Port device team_slave_1 removed
[  247.561643][ T5700] team0 (unregistering): Port device dummy0 removed
[  247.596411][ T5827] Bluetooth: hci1: command tx timeout
[  247.698261][T11028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.703821][T11028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.733466][T11028] team0: Port device team_slave_0 added
[  247.739008][T11028] team0: Port device team_slave_1 added
[  247.766791][T11028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.769470][T11028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.781172][T11028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.786904][T11028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.789982][T11028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.801047][T11028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.849375][T11028] hsr_slave_0: entered promiscuous mode
[  247.851746][T11028] hsr_slave_1: entered promiscuous mode
[  247.854242][T11028] debugfs: 'hsr0' already exists in 'hsr'
[  247.857815][T11028] Cannot create hsr debugfs directory
[  248.298404][T11028] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  248.311753][T11028] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  248.317599][T11028] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  248.331153][T11028] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  248.349327][T11109] fuse: Bad value for 'fd'
[  248.403798][T11028] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.419299][T11028] 8021q: adding VLAN 0 to HW filter on device team0
[  248.426547][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.429946][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.436698][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.439496][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.549242][T11028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.579673][T11028] veth0_vlan: entered promiscuous mode
[  248.585322][T11028] veth1_vlan: entered promiscuous mode
[  248.600040][T11028] veth0_macvtap: entered promiscuous mode
[  248.603715][T11028] veth1_macvtap: entered promiscuous mode
[  248.617301][T11028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.629060][T11028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.643176][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.647597][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.653011][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.657577][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.725041][ T4669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.728971][ T4669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.762114][ T4669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.766760][ T4669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.813188][   T33] audit: type=1326 audit(2000000011.480:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  248.828555][   T33] audit: type=1326 audit(2000000011.490:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  248.934503][   T33] audit: type=1326 audit(2000000011.490:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  248.943433][   T33] audit: type=1326 audit(2000000011.490:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  248.955521][   T33] audit: type=1326 audit(2000000011.490:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  248.967149][   T33] audit: type=1326 audit(2000000011.500:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  248.979251][   T33] audit: type=1326 audit(2000000011.500:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  248.990018][   T33] audit: type=1326 audit(2000000011.500:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  248.999582][   T33] audit: type=1326 audit(2000000011.500:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  249.008896][   T33] audit: type=1326 audit(2000000011.500:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11129 comm="syz.1.2050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85838ec29 code=0x7ffc0000
[  249.032311][T11139] loop1: detected capacity change from 0 to 8192
[  249.568932][T11154] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  249.629053][T11160] loop1: detected capacity change from 0 to 256
[  249.639860][T11160] FAT-fs (loop1): Directory bread(block 64) failed
[  249.642309][T11160] FAT-fs (loop1): Directory bread(block 65) failed
[  249.645370][T11160] FAT-fs (loop1): Directory bread(block 66) failed
[  249.647808][T11160] FAT-fs (loop1): Directory bread(block 67) failed
[  249.650000][T11160] FAT-fs (loop1): Directory bread(block 68) failed
[  249.652301][T11160] FAT-fs (loop1): Directory bread(block 69) failed
[  249.654869][T11160] FAT-fs (loop1): Directory bread(block 70) failed
[  249.657149][T11160] FAT-fs (loop1): Directory bread(block 71) failed
[  249.659306][T11160] FAT-fs (loop1): Directory bread(block 72) failed
[  249.661483][T11160] FAT-fs (loop1): Directory bread(block 73) failed
[  249.674925][ T5827] Bluetooth: hci1: command tx timeout
[  249.768102][T11164] netlink: zone id is out of range
[  249.771785][T11164] netlink: zone id is out of range
[  249.856267][T11165] syz.1.2083: attempt to access beyond end of device
[  249.856267][T11165] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256
[  250.092153][T11171] loop4: detected capacity change from 0 to 16
[  250.119303][T11171] erofs (device loop4): mounted with root inode @ nid 36.
[  251.314569][T11196] loop1: detected capacity change from 0 to 4096
[  251.321401][T11196] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  251.328765][T11196] ntfs3(loop1): ino=0, mi_enum_attr
[  251.340377][T11196] ntfs3(loop1): mft corrupted
[  251.342210][T11196] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  251.345423][T11196] ntfs3(loop1): Failed to load $MFT (-22).
[  252.242097][T11202] loop4: detected capacity change from 0 to 32768
[  252.262817][T11202] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  252.284940][T11202] XFS (loop4): Ending clean mount
[  252.287961][T11202] XFS (loop4): Quotacheck needed: Please wait.
[  252.348630][T11202] XFS (loop4): Quotacheck: Done.
[  252.394540][T11224] netlink: 'syz.1.2109': attribute type 25 has an invalid length.
[  252.399277][T11224] netlink: 'syz.1.2109': attribute type 7 has an invalid length.
[  252.407088][ T9923] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  252.538773][T11228] loop4: detected capacity change from 0 to 256
[  252.586316][T11228] FAT-fs (loop4): Directory bread(block 64) failed
[  252.589200][T11228] FAT-fs (loop4): Directory bread(block 65) failed
[  252.592005][T11228] FAT-fs (loop4): Directory bread(block 66) failed
[  252.603312][T11228] FAT-fs (loop4): Directory bread(block 67) failed
[  252.607895][T11228] FAT-fs (loop4): Directory bread(block 68) failed
[  252.610528][T11228] FAT-fs (loop4): Directory bread(block 69) failed
[  252.613607][T11228] FAT-fs (loop4): Directory bread(block 70) failed
[  252.631176][T11228] FAT-fs (loop4): Directory bread(block 71) failed
[  252.633949][T11228] FAT-fs (loop4): Directory bread(block 72) failed
[  252.640681][T11228] FAT-fs (loop4): Directory bread(block 73) failed
[  253.394422][ T5987] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  253.556429][ T5987] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.561531][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  253.566566][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  253.570844][ T5987] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  253.576404][ T5987] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  253.580667][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.589028][ T5987] usb 5-1: config 0 descriptor??
[  253.754693][ T5827] Bluetooth: hci1: command tx timeout
[  253.850341][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2126'.
[  253.858145][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2126'.
[  254.005763][ T5987] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max
[  254.032949][ T5987] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  254.090562][T11275] loop1: detected capacity change from 0 to 2048
[  254.125549][T11275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.130647][T11275] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.142404][T11275] fs-verity (loop1, inode 13): Unknown hash algorithm number: 3
[  254.170139][T11028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.366089][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.374634][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.692078][T11310] 9pnet_fd: Insufficient options for proto=fd
[  255.841577][T11324] netlink: 'syz.1.2154': attribute type 1 has an invalid length.
[  255.844534][T11324] netlink: 'syz.1.2154': attribute type 1 has an invalid length.
[  255.847378][T11324] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2154'.
[  256.376672][ T5987] usb 5-1: USB disconnect, device number 9
[  256.753003][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'.
[  257.913384][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'.
[  257.932547][T11380] netlink: 'syz.3.2178': attribute type 1 has an invalid length.
[  257.959744][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2179'.
[  258.002289][T11375] loop1: detected capacity change from 0 to 32768
[  258.017058][T11375] (syz.1.2176,11375,1):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[  258.032946][T11375] (syz.1.2176,11375,0):ocfs2_fill_super:1177 ERROR: status = -22
[  258.508028][T11399] loop1: detected capacity change from 0 to 512
[  258.523451][T11399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.558686][T11028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.557074][T11438] loop1: detected capacity change from 0 to 256
[  259.570740][T11440] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.577754][T11440] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.610196][T11438] FAT-fs (loop1): Directory bread(block 64) failed
[  259.612908][T11438] FAT-fs (loop1): Directory bread(block 65) failed
[  259.617391][T11438] FAT-fs (loop1): Directory bread(block 66) failed
[  259.619116][T11440] netlink: 'syz.4.2204': attribute type 16 has an invalid length.
[  259.620364][T11438] FAT-fs (loop1): Directory bread(block 67) failed
[  259.623634][T11440] netlink: 'syz.4.2204': attribute type 17 has an invalid length.
[  259.628943][T11438] FAT-fs (loop1): Directory bread(block 68) failed
[  259.632340][T11438] FAT-fs (loop1): Directory bread(block 69) failed
[  259.635904][T11438] FAT-fs (loop1): Directory bread(block 70) failed
[  259.638695][T11438] FAT-fs (loop1): Directory bread(block 71) failed
[  259.641700][T11438] FAT-fs (loop1): Directory bread(block 72) failed
[  259.646255][T11440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.646560][T11438] FAT-fs (loop1): Directory bread(block 73) failed
[  262.418104][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'.
[  262.421795][T11511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2233'.
[  262.682947][T11516] loop1: detected capacity change from 0 to 32768
[  262.693484][T11516] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2235 (11516)
[  262.701505][T11516] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  262.705715][T11516] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  262.760405][T11516] BTRFS info (device loop1): enabling ssd optimizations
[  262.762877][T11516] BTRFS info (device loop1): enabling free space tree
[  263.033540][T11542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14)
[  263.035929][T11542] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  263.039107][T11542] vhci_hcd vhci_hcd.0: Device attached
[  263.257612][ T5987] vhci_hcd: vhci_device speed not set
[  263.344451][ T5987] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  263.407408][T11543] vhci_hcd: connection reset by peer
[  263.411340][ T5700] vhci_hcd: stop threads
[  263.415037][ T5700] vhci_hcd: release socket
[  263.419559][ T5700] vhci_hcd: disconnect device
[  263.438397][T11548] 9pnet_fd: Insufficient options for proto=fd
[  263.632948][T11558] netlink: 'syz.4.2245': attribute type 1 has an invalid length.
[  263.996917][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'.
[  264.067463][T11028] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  264.124498][   T33] kauditd_printk_skb: 18 callbacks suppressed
[  264.124551][   T33] audit: type=1326 audit(2000000026.780:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.4.2251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5998ec29 code=0x7ffc0000
[  264.171029][   T33] audit: type=1326 audit(2000000026.780:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.4.2251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5998ec29 code=0x7ffc0000
[  264.190844][   T33] audit: type=1326 audit(2000000026.790:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.4.2251" exe="/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f2f5998ec29 code=0x7ffc0000
[  264.239520][   T33] audit: type=1326 audit(2000000026.790:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.4.2251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5998ec29 code=0x7ffc0000
[  264.257289][   T33] audit: type=1326 audit(2000000026.790:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.4.2251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5998ec29 code=0x7ffc0000
[  264.417950][T11576] overlay: Bad value for 'workdir'
[  264.964373][ T1270] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  265.081646][T11615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2266'.
[  265.116094][ T1270] usb 5-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  265.120606][ T1270] usb 5-1: config 0 interface 0 has no altsetting 0
[  265.123368][ T1270] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00
[  265.132299][ T1270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.156515][ T1270] usb 5-1: config 0 descriptor??
[  265.159784][T11587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  265.431723][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'.
[  265.648657][ T1270] wacom 0003:056A:00DA.0009: unbalanced delimiter at end of report description
[  265.659690][ T1270] wacom 0003:056A:00DA.0009: parse failed
[  265.662683][ T1270] wacom 0003:056A:00DA.0009: probe with driver wacom failed with error -22
[  265.805813][ T1270] usb 5-1: USB disconnect, device number 10
[  265.901791][T11635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2275'.
[  265.932003][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'.
[  265.937607][T11637] veth1_macvtap: left promiscuous mode
[  266.137601][T11640] loop1: detected capacity change from 0 to 2048
[  266.141975][T11640] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  266.149209][T11640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.211633][   T33] audit: type=1326 audit(2000000028.880:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.1.2278" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc85838ec29 code=0x0
[  267.006024][T11678] 9pnet: p9_errstr2errno: server reported unknown error @cDB0xffffffffffffffff
[  267.184633][T11684] loop1: detected capacity change from 0 to 1024
[  268.040729][T11730] netlink: 'syz.3.2316': attribute type 30 has an invalid length.
[  268.043544][T11730] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  268.050415][T11730] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  268.465198][ T5987] vhci_hcd: vhci_device speed not set
[  268.798789][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'.
[  268.802087][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'.
[  268.809958][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'.
[  268.843654][T11776] loop1: detected capacity change from 0 to 512
[  268.855983][T11776] EXT4-fs: Ignoring removed bh option
[  268.860906][T11776] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  268.867346][T11776] EXT4-fs (loop1): invalid journal inode
[  268.874367][T11776] EXT4-fs (loop1): can't get journal size
[  268.880910][T11776] EXT4-fs (loop1): 1 truncate cleaned up
[  268.886174][T11776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.895587][T11776] Device name not specified.
[  268.895587][T11776] 
[  268.917546][T11028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.173078][T11796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.204394][ T5213] Bluetooth: hci1: command 0x0406 tx timeout
[  269.210373][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2346'.
[  270.418748][T11815] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  270.436407][T11815] CIFS mount error: No usable UNC path provided in device string!
[  270.436407][T11815] 
[  270.440896][T11815] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  270.728764][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2366'.
[  270.797829][ T5827] Bluetooth: hci1: unexpected event for opcode 0x0c6d
[  270.803212][T11843] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  270.805653][T11843] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  270.812510][T11843] vhci_hcd vhci_hcd.0: Device attached
[  270.817101][T11844] vhci_hcd: connection closed
[  270.819991][   T12] vhci_hcd: stop threads
[  270.824073][   T12] vhci_hcd: release socket
[  270.827023][   T12] vhci_hcd: disconnect device
[  271.370991][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'.
[  271.489802][   T33] audit: type=1400 audit(2000000034.160:127): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5D15F47DB2D pid=11862 comm="syz.4.2375"
[  271.563962][T11872] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  271.944072][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2385'.
[  272.601011][T11908] loop1: detected capacity change from 0 to 8
[  272.612294][T11908] unable to read fragment index table
[  272.632289][T11908] cgroup: release_agent respecified
[  272.804232][T11912] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  272.815928][T11912] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  273.081045][T11917] netlink: 'syz.1.2400': attribute type 4 has an invalid length.
[  273.114204][T11917] netlink: 'syz.1.2400': attribute type 4 has an invalid length.
[  273.274479][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.645306][T11925] bridge1: entered allmulticast mode
[  273.664564][T11925] team0: Port device bridge1 added
[  273.672624][T11927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2404'.
[  274.176238][T11940] RDS: rds_bind could not find a transport for fc01::4, load rds_tcp or rds_rdma?
[  274.992014][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2416'.
[  276.516629][T11994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2433'.
[  276.663916][ T5884] IPVS: starting estimator thread 0...
[  276.754373][T11999] IPVS: using max 82 ests per chain, 196800 per kthread
[  277.228050][T12019] loop1: detected capacity change from 0 to 4096
[  279.928247][T12040] 9pnet_fd: Insufficient options for proto=fd
[  280.142655][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2458'.
[  280.154361][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2458'.
[  280.165605][T12053] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2458'.
[  280.168536][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2458'.
[  281.258560][   T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  281.449707][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  281.457143][   T10] usb 2-1: config 0 has no interface number 0
[  281.459798][   T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  281.469722][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.484807][   T10] usb 2-1: config 0 descriptor??
[  281.495773][   T10] cp210x 2-1:0.1: cp210x converter detected
[  281.667652][T12091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2473'.
[  281.671817][T12091] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2473'.
[  281.678121][T12091] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2473'.
[  281.683795][T12091] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  281.904454][   T10] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32
[  282.122622][   T10] usb 2-1: cp210x converter now attached to ttyUSB0
[  282.301414][T12102] lo: entered promiscuous mode
[  282.305256][T12102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  282.340731][ T5883] usb 2-1: USB disconnect, device number 25
[  282.347169][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  282.376802][ T5883] cp210x 2-1:0.1: device disconnected
[  282.747305][T12112] overlayfs: failed to clone upperpath
[  283.201902][T12135] loop1: detected capacity change from 0 to 128
[  283.300682][T12139] netlink: 'syz.1.2494': attribute type 10 has an invalid length.
[  283.304097][T12139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2494'.
[  283.309334][T12139] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  283.312374][T12139] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  283.317239][T12139] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  283.425707][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2498'.
[  283.874419][ T5856] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  283.963904][T12166] loop1: detected capacity change from 0 to 32768
[  284.024843][ T5856] usb 5-1: Using ep0 maxpacket: 16
[  284.033875][ T5856] usb 5-1: config 0 has an invalid interface number: 102 but max is 0
[  284.038507][ T5856] usb 5-1: config 0 has no interface number 0
[  284.043449][ T5856] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=53.54
[  284.049994][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.053805][ T5856] usb 5-1: Product: syz
[  284.056036][ T5856] usb 5-1: Manufacturer: syz
[  284.058253][ T5856] usb 5-1: SerialNumber: syz
[  284.062198][ T5856] usb 5-1: config 0 descriptor??
[  284.280494][ T5856] snd-usb-audio 5-1:0.102: probe with driver snd-usb-audio failed with error -71
[  284.289772][ T5856] usb 5-1: USB disconnect, device number 11
[  284.588778][T12185] loop1: detected capacity change from 0 to 2048
[  284.592958][T12185] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  284.599789][T12185] NILFS (loop1): mounting unchecked fs
[  284.607702][ T6483] udevd[6483]: incorrect nilfs2 checksum on /dev/loop1
[  284.611999][T12185] NILFS (loop1): recovery complete
[  284.617427][T12186] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.500257][T12200] netlink: 'syz.4.2520': attribute type 33 has an invalid length.
[  285.503751][T12200] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2520'.
[  286.331409][T12207] loop1: detected capacity change from 0 to 32768
[  286.367077][T12207] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  286.396696][T12207] 
[  286.397776][T12207] ======================================================
[  286.400743][T12207] WARNING: possible circular locking dependency detected
[  286.403688][T12207] syzkaller #0 Not tainted
[  286.405844][T12207] ------------------------------------------------------
[  286.409697][T12207] syz.1.2523/12207 is trying to acquire lock:
[  286.412282][T12207] ffff8880293c09c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.417949][T12207] 
[  286.417949][T12207] but task is already holding lock:
[  286.421070][T12207] ffff88803a5cc0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  286.425009][T12207] 
[  286.425009][T12207] which lock already depends on the new lock.
[  286.425009][T12207] 
[  286.429341][T12207] 
[  286.429341][T12207] the existing dependency chain (in reverse order) is:
[  286.433108][T12207] 
[  286.433108][T12207] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  286.436316][T12207]        lock_acquire+0x120/0x360
[  286.438457][T12207]        down_read+0x46/0x2e0
[  286.440462][T12207]        ocfs2_init_acl+0x2f9/0x720
[  286.442663][T12207]        ocfs2_mknod+0x1321/0x2050
[  286.444781][T12207]        ocfs2_create+0x1a5/0x440
[  286.446879][T12207]        path_openat+0x14f4/0x3830
[  286.449068][T12207]        do_filp_open+0x1fa/0x410
[  286.451246][T12207]        do_sys_openat2+0x121/0x1c0
[  286.453477][T12207]        __x64_sys_openat+0x138/0x170
[  286.455812][T12207]        do_syscall_64+0xfa/0x3b0
[  286.457944][T12207]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.460670][T12207] 
[  286.460670][T12207] -> #4 (jbd2_handle){++++}-{0:0}:
[  286.463787][T12207]        lock_acquire+0x120/0x360
[  286.465921][T12207]        start_this_handle+0x1fa7/0x21c0
[  286.467886][T12207]        jbd2__journal_start+0x2c1/0x5b0
[  286.469857][T12207]        jbd2_journal_start+0x2a/0x40
[  286.471716][T12207]        ocfs2_start_trans+0x376/0x6d0
[  286.473509][T12207]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  286.475752][T12207]        ocfs2_dismount_volume+0x201/0x8d0
[  286.477769][T12207]        generic_shutdown_super+0x135/0x2c0
[  286.479793][T12207]        kill_block_super+0x44/0x90
[  286.481465][T12207]        deactivate_locked_super+0xbc/0x130
[  286.483598][T12207]        cleanup_mnt+0x425/0x4c0
[  286.485529][T12207]        task_work_run+0x1d4/0x260
[  286.487233][T12207]        exit_to_user_mode_loop+0xec/0x110
[  286.489341][T12207]        do_syscall_64+0x2bd/0x3b0
[  286.491287][T12207]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.493426][T12207] 
[  286.493426][T12207] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  286.496283][T12207]        lock_acquire+0x120/0x360
[  286.498036][T12207]        down_read+0x46/0x2e0
[  286.499616][T12207]        ocfs2_start_trans+0x36a/0x6d0
[  286.501480][T12207]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  286.503667][T12207]        ocfs2_dismount_volume+0x201/0x8d0
[  286.505667][T12207]        generic_shutdown_super+0x135/0x2c0
[  286.508047][T12207]        kill_block_super+0x44/0x90
[  286.509876][T12207]        deactivate_locked_super+0xbc/0x130
[  286.512206][T12207]        cleanup_mnt+0x425/0x4c0
[  286.514170][T12207]        task_work_run+0x1d4/0x260
[  286.516240][T12207]        exit_to_user_mode_loop+0xec/0x110
[  286.518452][T12207]        do_syscall_64+0x2bd/0x3b0
[  286.520423][T12207]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.522901][T12207] 
[  286.522901][T12207] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  286.525420][T12207]        lock_acquire+0x120/0x360
[  286.527547][T12207]        ocfs2_start_trans+0x26b/0x6d0
[  286.529892][T12207]        ocfs2_mknod+0xe93/0x2050
[  286.531532][T12207]        ocfs2_create+0x1a5/0x440
[  286.533278][T12207]        path_openat+0x14f4/0x3830
[  286.535262][T12207]        do_filp_open+0x1fa/0x410
[  286.537151][T12207]        do_sys_openat2+0x121/0x1c0
[  286.539001][T12207]        __x64_sys_openat+0x138/0x170
[  286.541063][T12207]        do_syscall_64+0xfa/0x3b0
[  286.543199][T12207]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.545738][T12207] 
[  286.545738][T12207] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  286.549901][T12207]        lock_acquire+0x120/0x360
[  286.551663][T12207]        down_write+0x96/0x1f0
[  286.553655][T12207]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  286.556144][T12207]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  286.558885][T12207]        ocfs2_mknod+0xe32/0x2050
[  286.560978][T12207]        ocfs2_create+0x1a5/0x440
[  286.563022][T12207]        path_openat+0x14f4/0x3830
[  286.565082][T12207]        do_filp_open+0x1fa/0x410
[  286.566926][T12207]        do_sys_openat2+0x121/0x1c0
[  286.569070][T12207]        __x64_sys_openat+0x138/0x170
[  286.571274][T12207]        do_syscall_64+0xfa/0x3b0
[  286.573346][T12207]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.575620][T12207] 
[  286.575620][T12207] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  286.579089][T12207]        validate_chain+0xb9b/0x2140
[  286.581123][T12207]        __lock_acquire+0xab9/0xd20
[  286.583269][T12207]        lock_acquire+0x120/0x360
[  286.585361][T12207]        down_write+0x96/0x1f0
[  286.587262][T12207]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.589467][T12207]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  286.592241][T12207]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  286.594808][T12207]        ocfs2_xattr_set+0xb70/0x11f0
[  286.596978][T12207]        __vfs_setxattr+0x43c/0x480
[  286.599128][T12207]        __vfs_setxattr_noperm+0x12d/0x660
[  286.601548][T12207]        vfs_setxattr+0x16b/0x2f0
[  286.603543][T12207]        filename_setxattr+0x274/0x600
[  286.605595][T12207]        path_setxattrat+0x364/0x3a0
[  286.607427][T12207]        __x64_sys_setxattr+0xbc/0xe0
[  286.609266][T12207]        do_syscall_64+0xfa/0x3b0
[  286.611263][T12207]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.613528][T12207] 
[  286.613528][T12207] other info that might help us debug this:
[  286.613528][T12207] 
[  286.617194][T12207] Chain exists of:
[  286.617194][T12207]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  286.617194][T12207] 
[  286.623781][T12207]  Possible unsafe locking scenario:
[  286.623781][T12207] 
[  286.626838][T12207]        CPU0                    CPU1
[  286.629080][T12207]        ----                    ----
[  286.631343][T12207]   lock(&oi->ip_xattr_sem);
[  286.633356][T12207]                                lock(jbd2_handle);
[  286.636111][T12207]                                lock(&oi->ip_xattr_sem);
[  286.639111][T12207]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  286.642190][T12207] 
[  286.642190][T12207]  *** DEADLOCK ***
[  286.642190][T12207] 
[  286.645588][T12207] 3 locks held by syz.1.2523/12207:
[  286.647745][T12207]  #0: ffff888024b9c428 (sb_writers#33){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  286.651585][T12207]  #1: ffff88803a5cc3c0 (&sb->s_type->i_mutex_key#39){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  286.655958][T12207]  #2: ffff88803a5cc0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  286.660076][T12207] 
[  286.660076][T12207] stack backtrace:
[  286.662415][T12207] CPU: 0 UID: 0 PID: 12207 Comm: syz.1.2523 Not tainted syzkaller #0 PREEMPT(full) 
[  286.662431][T12207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.662439][T12207] Call Trace:
[  286.662447][T12207]  <TASK>
[  286.662454][T12207]  dump_stack_lvl+0x189/0x250
[  286.662471][T12207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.662487][T12207]  ? __pfx__printk+0x10/0x10
[  286.662499][T12207]  ? print_lock_name+0xde/0x100
[  286.662518][T12207]  print_circular_bug+0x2ee/0x310
[  286.662535][T12207]  check_noncircular+0x134/0x160
[  286.662553][T12207]  validate_chain+0xb9b/0x2140
[  286.662567][T12207]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  286.662583][T12207]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  286.662600][T12207]  __lock_acquire+0xab9/0xd20
[  286.662612][T12207]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.662629][T12207]  lock_acquire+0x120/0x360
[  286.662667][T12207]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.662689][T12207]  down_write+0x96/0x1f0
[  286.662703][T12207]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.662720][T12207]  ? __pfx_down_write+0x10/0x10
[  286.662736][T12207]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  286.662752][T12207]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.662768][T12207]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  286.662778][T12207]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  286.662790][T12207]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  286.662809][T12207]  ? stack_depot_save_flags+0x41b/0x860
[  286.662824][T12207]  ? kasan_save_track+0x4f/0x80
[  286.662839][T12207]  ? kasan_save_track+0x3e/0x80
[  286.662854][T12207]  ? __kasan_kmalloc+0x93/0xb0
[  286.662868][T12207]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  286.662883][T12207]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  286.662897][T12207]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  286.662907][T12207]  ? ocfs2_xattr_set+0xb70/0x11f0
[  286.662916][T12207]  ? __vfs_setxattr+0x43c/0x480
[  286.662930][T12207]  ? __vfs_setxattr_noperm+0x12d/0x660
[  286.662944][T12207]  ? vfs_setxattr+0x16b/0x2f0
[  286.662959][T12207]  ? filename_setxattr+0x274/0x600
[  286.662969][T12207]  ? path_setxattrat+0x364/0x3a0
[  286.662981][T12207]  ? __x64_sys_setxattr+0xbc/0xe0
[  286.662991][T12207]  ? do_syscall_64+0xfa/0x3b0
[  286.663002][T12207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.663025][T12207]  ? __kasan_kmalloc+0x93/0xb0
[  286.663039][T12207]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  286.663056][T12207]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  286.663075][T12207]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  286.663091][T12207]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  286.663105][T12207]  ? __lock_acquire+0xab9/0xd20
[  286.663118][T12207]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  286.663131][T12207]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  286.663145][T12207]  ? ocfs2_xattr_set+0xb36/0x11f0
[  286.663157][T12207]  ? up_write+0x1c4/0x420
[  286.663171][T12207]  ? ocfs2_xattr_set+0x334/0x11f0
[  286.663181][T12207]  ocfs2_xattr_set+0xb70/0x11f0
[  286.663197][T12207]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  286.663207][T12207]  ? dput+0x37/0x2b0
[  286.663219][T12207]  ? dput+0x37/0x2b0
[  286.663228][T12207]  ? step_into+0x3ee/0xe80
[  286.663240][T12207]  ? step_into+0x3ee/0xe80
[  286.663254][T12207]  ? evm_protected_xattr_common+0x170/0x190
[  286.663269][T12207]  ? evm_protect_xattr+0x71d/0xa90
[  286.663283][T12207]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  286.663294][T12207]  ? __pfx_evm_protect_xattr+0x10/0x10
[  286.663305][T12207]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  286.663314][T12207]  __vfs_setxattr+0x43c/0x480
[  286.663330][T12207]  __vfs_setxattr_noperm+0x12d/0x660
[  286.663345][T12207]  vfs_setxattr+0x16b/0x2f0
[  286.663355][T12207]  ? __pfx_vfs_setxattr+0x10/0x10
[  286.663363][T12207]  ? mnt_get_write_access+0x223/0x2a0
[  286.663377][T12207]  filename_setxattr+0x274/0x600
[  286.663388][T12207]  ? __pfx_filename_setxattr+0x10/0x10
[  286.663398][T12207]  ? getname_flags+0x1e5/0x540
[  286.663410][T12207]  path_setxattrat+0x364/0x3a0
[  286.663425][T12207]  ? __pfx_path_setxattrat+0x10/0x10
[  286.663436][T12207]  ? do_futex+0x395/0x420
[  286.663460][T12207]  ? rcu_is_watching+0x15/0xb0
[  286.663473][T12207]  __x64_sys_setxattr+0xbc/0xe0
[  286.663484][T12207]  do_syscall_64+0xfa/0x3b0
[  286.663497][T12207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.663508][T12207]  ? asm_sysvec_call_function_single+0x1a/0x20
[  286.663520][T12207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.663531][T12207] RIP: 0033:0x7fc85838ec29
[  286.663544][T12207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.663555][T12207] RSP: 002b:00007fc859293038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  286.663568][T12207] RAX: ffffffffffffffda RBX: 00007fc8585d5fa0 RCX: 00007fc85838ec29
[  286.663577][T12207] RDX: 00002000000004c0 RSI: 0000200000000380 RDI: 0000200000000340
[  286.663586][T12207] RBP: 00007fc858411e41 R08: 0000000000000000 R09: 0000000000000000
[  286.663595][T12207] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000
[  286.663602][T12207] R13: 00007fc8585d6038 R14: 00007fc8585d5fa0 R15: 00007ffda85f94f8
[  286.663614][T12207]  </TASK>
[  286.998928][T11028] ocfs2: Unmounting device (7,1) on (node local)

VM DIAGNOSIS:
07:42:03  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff3311205 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=000000000000116c RDI=000000000000116d RBP=ffffc90004376690 RSP=ffffc900043764b8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff850b3f20
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99889380 R15=0000000000000000
RIP=ffffffff850b3f97 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc8592936c0 ffffffff 00c00000
GS =0000 ffff8880b8d7e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e519ff8 CR3=0000000039e48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 0000000000000000 XMM01=7973003273666724 6567616d695f746e
XMM02=0000010000000000 0000000000000000 XMM03=75663d79636e6572 65686f632c6c6c75
XMM04=692c736b636f6c66 6c61636f6c2c6c6c XMM05=0000000000000000 00007fc8592926e0
XMM06=00007fc8592926e0 00007fc859292560 XMM07=00007fc8592925a0 00007fc859292580
XMM08=0000000000000000 00001b7d1475bf98 XMM09=0000000000000000 00007fc858412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=7864c1a72c0ee100 RDX=0000000000000000
RSI=ffffffff8b9e6fc0 RDI=ffffffff8b9e6f80 RBP=ffffffff825c208c RSP=ffffc900025bf918
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff825c6430
R12=0000000000000002 R13=ffffffff8dd3aca0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff810014b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f316d093c80 ffffffff 00c00000
GS =0000 ffff8881a417e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055de8d6917e8 CR3=00000001074b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000000000ff00 0000000000000000 XMM05=000000000000022d 0000000032302f2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=303a312d352f312d 352f356273752f34
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
