last executing test programs:

3.829753528s ago: executing program 2 (id=657):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef)
write$FUSE_DIRENTPLUS(r0, 0x0, 0x148)

3.619808876s ago: executing program 2 (id=658):
socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x1, 0xa, 0xf4, 0x77, 0x5, [], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0xe8, 0x6, 0x95}}]}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2441, 0x0)
ioctl$TCSETAF(r0, 0x5408, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)

2.388045293s ago: executing program 2 (id=666):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1}, 0x9}], 0x1, 0x2, 0x0)

2.236068515s ago: executing program 2 (id=670):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000036000b63861538e186a697fc12b5fc60", 0x14}], 0x1}, 0x0)

2.09023882s ago: executing program 2 (id=672):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001440)={0x44, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00\a\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.768372277s ago: executing program 1 (id=678):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022)

1.699991068s ago: executing program 0 (id=681):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000633277fbac141416ac14141644189ffe4d2f8702890c6aab845013f2325f1a39000302038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

1.568767563s ago: executing program 0 (id=682):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x22, 0x0)

1.519412128s ago: executing program 0 (id=683):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.440321988s ago: executing program 0 (id=684):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0)

1.368676179s ago: executing program 0 (id=685):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@discard_size={'discard', 0x3d, 0x3}}, {@gid}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x6261, &(0x7f0000007fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

860.017269ms ago: executing program 1 (id=686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

226.582188ms ago: executing program 2 (id=687):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0xb, 0x4)

159.546075ms ago: executing program 1 (id=688):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

159.227373ms ago: executing program 0 (id=689):
setitimer(0x1, &(0x7f0000000040)={{0x1000000000}, {0x0, 0xea60}}, 0x0)
clock_gettime(0x0, &(0x7f00000006c0)={<r0=>0x0, <r1=>0x0})
setitimer(0x1, &(0x7f0000000700)={{}, {r0, r1/1000+10000}}, 0x0)

159.088294ms ago: executing program 1 (id=690):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0xe9, 0x81, 0x31364d4e, 0x7, 0xb, [{0x0, 0xf776}, {0x1000007, 0xb}, {0xa, 0x9}, {0x0, 0x3e0}, {0x0, 0x5e68}, {0x80000000, 0xfffffff9}, {0x9, 0x8}, {0x5b9}], 0x0, 0x5, 0x4, 0x1, 0x6}})

125.705389ms ago: executing program 1 (id=691):
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="1c00000034000701ffffff04feffffff017c000008000480040049"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c00000034000701fffffffffeffffff017c"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

0s ago: executing program 1 (id=692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33832' (ED25519) to the list of known hosts.
syzkaller login: [   49.146436][ T5777] cgroup: Unknown subsys name 'net'
[   49.220686][ T5777] cgroup: Unknown subsys name 'cpuset'
[   49.227766][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.941664][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.658327][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.661544][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.664590][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.668486][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.671626][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.680046][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.684911][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.687923][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.691502][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.694096][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.741141][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.744022][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.747063][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.750154][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.752786][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.997824][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   56.088469][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   56.128814][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.131443][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.134029][ T5839] bridge_slave_0: entered allmulticast mode
[   56.138118][ T5839] bridge_slave_0: entered promiscuous mode
[   56.151568][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.158317][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.161231][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.164037][ T5839] bridge_slave_1: entered allmulticast mode
[   56.167429][ T5839] bridge_slave_1: entered promiscuous mode
[   56.252135][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.255288][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.258440][ T5843] bridge_slave_0: entered allmulticast mode
[   56.262203][ T5843] bridge_slave_0: entered promiscuous mode
[   56.277446][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.281861][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.285603][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.288592][ T5843] bridge_slave_1: entered allmulticast mode
[   56.292498][ T5843] bridge_slave_1: entered promiscuous mode
[   56.306096][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.380943][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.386192][ T5839] team0: Port device team_slave_0 added
[   56.390410][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.426730][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.428931][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.431494][ T5848] bridge_slave_0: entered allmulticast mode
[   56.434324][ T5848] bridge_slave_0: entered promiscuous mode
[   56.439458][ T5839] team0: Port device team_slave_1 added
[   56.473449][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.477111][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.479486][ T5848] bridge_slave_1: entered allmulticast mode
[   56.482356][ T5848] bridge_slave_1: entered promiscuous mode
[   56.497840][ T5843] team0: Port device team_slave_0 added
[   56.514173][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.516989][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.528655][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.549468][ T5843] team0: Port device team_slave_1 added
[   56.552698][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.555014][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.567379][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.572314][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.604095][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.616710][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.619507][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.628186][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.632722][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.635350][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.643148][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.657323][ T5848] team0: Port device team_slave_0 added
[   56.660776][ T5848] team0: Port device team_slave_1 added
[   56.713833][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.716306][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.725772][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.733130][ T5839] hsr_slave_0: entered promiscuous mode
[   56.736045][ T5839] hsr_slave_1: entered promiscuous mode
[   56.747149][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.749232][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.757950][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.788857][ T5843] hsr_slave_0: entered promiscuous mode
[   56.792033][ T5843] hsr_slave_1: entered promiscuous mode
[   56.795983][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   56.798432][ T5843] Cannot create hsr debugfs directory
[   56.875884][ T5848] hsr_slave_0: entered promiscuous mode
[   56.878389][ T5848] hsr_slave_1: entered promiscuous mode
[   56.880744][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   56.882545][ T5848] Cannot create hsr debugfs directory
[   57.123575][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.131723][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.146306][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.159387][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.191170][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.207379][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.228704][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.240182][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.296264][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.302237][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.309661][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.321904][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.403118][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.439608][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   57.456765][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.459791][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.478350][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.481328][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.504065][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.527013][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.542074][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   57.560785][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.563036][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.577085][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.579397][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.590202][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   57.602024][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.605018][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.609939][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.612550][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.739029][   T54] Bluetooth: hci0: command tx timeout
[   57.739833][ T5842] Bluetooth: hci1: command tx timeout
[   57.751375][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.813472][ T5839] veth0_vlan: entered promiscuous mode
[   57.816736][ T5842] Bluetooth: hci2: command tx timeout
[   57.830143][ T5839] veth1_vlan: entered promiscuous mode
[   57.840452][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.853647][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.891867][ T5839] veth0_macvtap: entered promiscuous mode
[   57.907241][ T5839] veth1_macvtap: entered promiscuous mode
[   57.921545][ T5843] veth0_vlan: entered promiscuous mode
[   57.935059][ T5843] veth1_vlan: entered promiscuous mode
[   57.946148][ T5848] veth0_vlan: entered promiscuous mode
[   57.952202][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.964332][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.969376][ T5848] veth1_vlan: entered promiscuous mode
[   57.987177][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.995927][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.002430][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.009822][ T5843] veth0_macvtap: entered promiscuous mode
[   58.018384][ T5870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.023240][ T5843] veth1_macvtap: entered promiscuous mode
[   58.065910][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.069399][ T5848] veth0_macvtap: entered promiscuous mode
[   58.080409][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.088072][ T5848] veth1_macvtap: entered promiscuous mode
[   58.090934][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.093532][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.101538][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.115361][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.120421][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.131853][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.134437][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.140113][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.155312][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.157827][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.172179][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.177167][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.185682][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.203353][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.233410][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.253338][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.256852][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.288710][ T5911] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.303314][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.307045][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.333147][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.346343][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.351713][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.355250][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.476802][ T5923] loop0: detected capacity change from 0 to 512
[   58.497803][ T5923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   58.507155][ T5923] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.559383][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   58.665927][ T5935] loop0: detected capacity change from 0 to 512
[   58.683907][ T5935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.691913][ T5935] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.797580][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.891178][ T5951] loop0: detected capacity change from 0 to 8
[   58.893903][ T5951] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   59.342539][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'.
[   59.815799][ T5842] Bluetooth: hci0: command tx timeout
[   59.817857][ T5842] Bluetooth: hci1: command tx timeout
[   59.894845][   T54] Bluetooth: hci2: command tx timeout
[   61.462837][ T5997] syz_tun: entered allmulticast mode
[   61.473357][ T5997] syz_tun: left allmulticast mode
[   61.737338][ T5976] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   61.889299][ T5976] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   61.894076][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   61.899639][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   61.903514][ T5976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   61.908756][   T54] Bluetooth: hci1: command tx timeout
[   61.908798][ T5842] Bluetooth: hci0: command tx timeout
[   61.911267][ T5976] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   61.918503][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.927218][ T5976] usb 3-1: config 0 descriptor??
[   61.974835][ T5842] Bluetooth: hci2: command tx timeout
[   62.356406][ T5976] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   62.633192][ T6025] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   62.633192][ T6025] The task syz.1.45 (6025) triggered the difference, watch for misbehavior.
[   62.855521][ T2211] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   63.006580][ T2211] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[   63.009884][ T2211] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   63.013452][ T2211] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   63.018712][ T2211] usb 1-1: config 220 has no interface number 2
[   63.021195][ T2211] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   63.025777][ T2211] usb 1-1: config 220 interface 0 has no altsetting 0
[   63.028481][ T2211] usb 1-1: config 220 interface 76 has no altsetting 0
[   63.031193][ T2211] usb 1-1: config 220 interface 1 has no altsetting 0
[   63.036765][ T2211] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   63.040428][ T2211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.043661][ T2211] usb 1-1: Product: syz
[   63.045453][ T2211] usb 1-1: Manufacturer: syz
[   63.047289][ T2211] usb 1-1: SerialNumber: syz
[   63.188869][ T5844] usb 3-1: USB disconnect, device number 2
[   63.265384][ T2211] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[   63.268190][ T2211] usb 1-1: No valid video chain found.
[   63.270656][ T2211] usb 1-1: selecting invalid altsetting 0
[   63.281761][ T2211] usb 1-1: selecting invalid altsetting 0
[   63.284131][ T2211] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[   63.291883][ T2211] usb 1-1: USB disconnect, device number 2
[   63.440710][ T6033] loop1: detected capacity change from 0 to 512
[   63.476557][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.481686][ T6033] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   63.500054][ T6033] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.49: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   63.511675][ T6033] EXT4-fs (loop1): Remounting filesystem read-only
[   63.974121][ T6038] loop2: detected capacity change from 0 to 32768
[   63.984895][ T6038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.50 (6038)
[   63.993149][ T5842] Bluetooth: hci1: command tx timeout
[   63.995028][ T5842] Bluetooth: hci0: command tx timeout
[   64.065161][   T54] Bluetooth: hci2: command tx timeout
[   64.112504][ T6040] loop0: detected capacity change from 0 to 32768
[   64.127489][ T6040] 
[   64.127489][ T6040]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.127489][ T6040] 
[   64.180477][ T4626] ERROR: (device loop0): diWrite: ixpxd invalid
[   64.180477][ T4626] 
[   64.190542][ T4626] ERROR: (device loop0): txCommit: 
[   64.190542][ T4626] 
[   64.193134][ T4626] jfs_write_inode: jfs_commit_inode failed!
[   64.196200][ T5848] 
[   64.196200][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.196200][ T5848] 
[   64.201087][ T5848] 
[   64.201087][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.201087][ T5848] 
[   64.306851][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.310433][ T6038] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   64.313731][ T6038] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   64.461100][ T6038] BTRFS info (device loop2): enabling ssd optimizations
[   64.463434][ T6038] BTRFS info (device loop2): enabling free space tree
[   64.490872][ T5843] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   64.696367][ T6075] =======================================================
[   64.696367][ T6075] WARNING: The mand mount option has been deprecated and
[   64.696367][ T6075]          and is ignored by this kernel. Remove the mand
[   64.696367][ T6075]          option from the mount to silence this warning.
[   64.696367][ T6075] =======================================================
[   64.939850][ T6083] loop1: detected capacity change from 0 to 32768
[   64.974499][ T6083] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.001503][ T6083] XFS (loop1): Ending clean mount
[   65.006714][ T6083] XFS (loop1): Quotacheck needed: Please wait.
[   65.024766][ T6083] XFS (loop1): Quotacheck: Done.
[   65.107616][ T2211] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   65.144787][ T5844] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   65.273386][ T2211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   65.278245][ T2211] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   65.282113][ T2211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.294659][ T5844] usb 1-1: Using ep0 maxpacket: 8
[   65.306709][ T2211] usb 3-1: config 0 descriptor??
[   65.320927][ T5844] usb 1-1: unable to get BOS descriptor or descriptor too short
[   65.331219][ T6087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   65.337722][ T5844] usb 1-1: config 4 interface 0 has no altsetting 0
[   65.391210][ T5844] usb 1-1: string descriptor 0 read error: -22
[   65.394293][ T5844] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   65.399804][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.427124][ T5844] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   65.448810][ T5844] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   65.456209][ T5844] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   65.458795][ T5844] usb 1-1: media controller created
[   65.560371][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   65.792389][ T2211] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[   65.859013][ T2211] usb 1-1: USB disconnect, device number 3
[   66.068638][ T2211] usb 3-1: USB disconnect, device number 3
[   66.190294][ T5839] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   66.690796][ T6123] loop2: detected capacity change from 0 to 512
[   66.706139][ T6123] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   66.711308][ T6123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   66.759162][ T6123] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   66.773641][ T6123] EXT4-fs (loop2): 1 truncate cleaned up
[   66.777130][ T6123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.800233][ T6123] syz.2.72 (pid 6123) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   66.873442][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.196272][ T6154] loop0: detected capacity change from 0 to 128
[   67.216120][ T6154] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   67.231257][ T6154] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   67.492082][   T54] Bluetooth: hci2: Malformed MSFT vendor event: 0x02
[   67.632151][ T6198] loop1: detected capacity change from 0 to 256
[   67.663457][ T5848] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.680090][ T6198] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[   67.711935][ T6202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.715206][ T6202] IPv6: NLM_F_CREATE should be set when creating new route
[   67.718232][ T6202] IPv6: NLM_F_CREATE should be set when creating new route
[   68.004240][ T6212] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   68.406680][ T6219] loop2: detected capacity change from 0 to 512
[   68.417590][ T6219] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.445834][ T6219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.451160][ T6221] loop1: detected capacity change from 0 to 2048
[   68.479950][ T6221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.497358][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.555392][ T6225] loop2: detected capacity change from 0 to 2048
[   68.587915][ T6225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.693798][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.758319][ T6235] loop2: detected capacity change from 0 to 128
[   68.767118][ T6235] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.779235][ T6235] EXT4-fs (loop2): Test dummy encryption mode enabled
[   68.790242][ T6235] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   68.807108][ T6235] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   68.879204][ T5843] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.033335][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'.
[   69.292432][   T33] audit: type=1326 audit(1757964211.501:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[   69.310843][   T33] audit: type=1326 audit(1757964211.521:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[   69.318046][   T33] audit: type=1326 audit(1757964211.521:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.108" exe="/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[   69.333118][   T33] audit: type=1326 audit(1757964211.521:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[   69.352812][   T33] audit: type=1326 audit(1757964211.521:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[   70.377084][   T51] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   70.578657][   T51] usb 3-1: Using ep0 maxpacket: 16
[   70.678116][   T51] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   70.681037][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.685564][   T51] usb 3-1: Product: syz
[   70.687545][   T51] usb 3-1: Manufacturer: syz
[   70.689775][   T51] usb 3-1: SerialNumber: syz
[   70.742521][   T51] r8152-cfgselector 3-1: Unknown version 0x0000
[   70.769233][   T51] r8152-cfgselector 3-1: config 0 descriptor??
[   71.021017][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.023079][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.238910][   T51] r8152-cfgselector 3-1: USB disconnect, device number 4
[   71.313196][ T6306] loop0: detected capacity change from 0 to 40427
[   71.363121][ T6306] F2FS-fs (loop0): invalid crc value
[   71.467164][ T6306] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   71.475198][ T6306] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   71.501628][   T33] audit: type=1800 audit(1757964213.711:7): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.127" name="file1" dev="loop0" ino=10 res=0 errno=0
[   71.533068][ T5848] syz-executor: attempt to access beyond end of device
[   71.533068][ T5848] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   71.552307][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   71.552322][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.552328][ T5848] Call Trace:
[   71.552333][ T5848]  <TASK>
[   71.552338][ T5848]  dump_stack_lvl+0x189/0x250
[   71.552385][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.552394][ T5848]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   71.552408][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[   71.552416][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.552428][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.552445][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[   71.552461][ T5848]  f2fs_write_end_io+0x886/0xb60
[   71.552479][ T5848]  __submit_merged_bio+0x27a/0x6a0
[   71.552494][ T5848]  __submit_merged_write_cond+0x255/0x530
[   71.552509][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[   71.552533][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.552573][ T5848]  ? __pfx_preempt_schedule_irq+0x10/0x10
[   71.552584][ T5848]  ? irqentry_exit+0x74/0x90
[   71.552592][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.552603][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.552614][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.552622][ T5848]  do_writepages+0x32e/0x550
[   71.552640][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   71.552652][ T5848]  filemap_fdatawrite+0x199/0x240
[   71.552664][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   71.552697][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   71.552708][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[   71.552724][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[   71.552744][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   71.552774][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[   71.552785][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[   71.552797][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[   71.552804][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[   71.552815][ T5848]  ? shrinker_free+0x2ce/0x3e0
[   71.552826][ T5848]  deactivate_locked_super+0xbc/0x130
[   71.552837][ T5848]  cleanup_mnt+0x425/0x4c0
[   71.552850][ T5848]  task_work_run+0x1d4/0x260
[   71.552864][ T5848]  ? __pfx_task_work_run+0x10/0x10
[   71.552873][ T5848]  ? __x64_sys_umount+0x122/0x160
[   71.552886][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[   71.552900][ T5848]  exit_to_user_mode_loop+0xec/0x110
[   71.552912][ T5848]  do_syscall_64+0x2bd/0x3b0
[   71.552929][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.552937][ T5848]  ? asm_sysvec_call_function_single+0x1a/0x20
[   71.552948][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.552955][ T5848] RIP: 0033:0x7f795e38fed7
[   71.552965][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   71.552972][ T5848] RSP: 002b:00007ffe32550468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   71.552981][ T5848] RAX: 0000000000000000 RBX: 00007f795e411c05 RCX: 00007f795e38fed7
[   71.552986][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe32550520
[   71.552991][ T5848] RBP: 00007ffe32550520 R08: 0000000000000000 R09: 0000000000000000
[   71.552996][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe325515b0
[   71.553001][ T5848] R13: 00007f795e411c05 R14: 00000000000116da R15: 00007ffe325515f0
[   71.553015][ T5848]  </TASK>
[   71.553113][ T5848] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   72.184210][ T6321] loop0: detected capacity change from 0 to 512
[   72.203969][ T6321] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   72.209124][ T6322] loop1: detected capacity change from 0 to 2048
[   72.285567][ T6325] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.195429][ T6332] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   73.635717][ T6353] loop0: detected capacity change from 0 to 128
[   73.648557][ T6353] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   73.653808][ T6353] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   73.684734][ T5848] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.424673][ T5893] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   74.576575][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.580867][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.585247][ T5893] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   74.588822][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.603561][ T5893] usb 1-1: config 0 descriptor??
[   75.017727][ T5893] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   75.026831][ T6398] loop1: detected capacity change from 0 to 128
[   75.043048][ T5893] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[   75.213542][ T5893] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE
[   75.416699][ T5844] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.510823][ T6408] loop2: detected capacity change from 0 to 1024
[   75.561411][   T26] hfsplus: b-tree write err: -5, ino 8
[   75.568693][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.584303][ T5844] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   75.587312][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.593116][ T5844] usb 2-1: config 0 descriptor??
[   75.621467][ T6410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.623821][ T6410] IPv6: NLM_F_CREATE should be set when creating new route
[   75.760955][  T971] IPVS: starting estimator thread 0...
[   75.819774][ T5893] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71
[   75.829404][ T5893] usb 1-1: USB disconnect, device number 4
[   75.845554][ T6417] IPVS: using max 64 ests per chain, 153600 per kthread
[   76.104970][ T5844] lenovo 0003:17EF:6047.0004: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0
[   76.714846][ T5908] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[   76.890233][ T5908] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[   76.892978][ T5908] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[   76.896501][ T5908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[   76.897108][ T6436] loop2: detected capacity change from 0 to 512
[   76.899837][ T5908] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   76.903219][ T6436] EXT4-fs: Ignoring removed bh option
[   76.910941][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[   76.914435][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   76.920261][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   76.932483][ T5908] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   76.936755][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.939185][ T5908] usb 1-1: Manufacturer: и
[   76.941986][ T5908] usb 1-1: config 0 descriptor??
[   76.943830][ T6436] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   76.945209][ T5908] hub 1-1:0.0: bad descriptor, ignoring hub
[   76.949398][ T5908] hub 1-1:0.0: probe with driver hub failed with error -5
[   76.954458][ T5908] input: и as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[   76.986573][ T6436] EXT4-fs (loop2): 1 truncate cleaned up
[   76.989271][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.015213][ T5908] usb 2-1: USB disconnect, device number 2
[   77.050510][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.151514][ T5844] usb 1-1: USB disconnect, device number 5
[   77.259637][ T6443] mmap: syz.2.181 (6443) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   77.452824][ T6447] netlink: 52 bytes leftover after parsing attributes in process `syz.2.182'.
[   77.708357][ T6453] Zero length message leads to an empty skb
[   77.748429][ T6455] loop0: detected capacity change from 0 to 256
[   77.755295][ T6455] exfat: Deprecated parameter 'utf8'
[   77.774048][ T6455] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[   77.846931][ T5844] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   77.930217][ T6463] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2
[   77.933637][ T6463] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1
[   77.997699][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   78.001595][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.005357][ T5844] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   78.008707][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.014366][ T5844] usb 2-1: config 0 descriptor??
[   78.019559][ T5844] hub 2-1:0.0: USB hub found
[   78.221623][ T5844] hub 2-1:0.0: 1 port detected
[   78.834176][ T5844] hub 2-1:0.0: activate --> -90
[   79.209021][ T6475] process 'syz.0.195' launched './file0' with NULL argv: empty string added
[   79.242059][ T6475] autofs: Unknown parameter 'fd0x0000000000000000'
[   79.261588][ T5844] usb 2-1-port1: cannot reset (err = -71)
[   79.272980][ T5844] usb 2-1-port1: cannot reset (err = -71)
[   79.282883][ T5844] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad?
[   79.297210][ T5844] usb 2-1-port1: cannot disable (err = -71)
[   79.324957][ T5844] usb 2-1-port1: cannot reset (err = -71)
[   79.352084][ T5844] usb 2-1-port1: cannot reset (err = -71)
[   79.376996][ T5844] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad?
[   79.398656][ T5844] usb 2-1-port1: cannot disable (err = -71)
[   79.413485][ T5844] usb 2-1-port1: attempt power cycle
[   79.418613][ T6029] usb 2-1: USB disconnect, device number 3
[   79.943937][ T6482] syz.1.198 uses obsolete (PF_INET,SOCK_PACKET)
[   80.032264][ T6486] syz_tun: entered allmulticast mode
[   80.039460][ T6486] syz_tun: left allmulticast mode
[   80.444986][ T6508] loop1: detected capacity change from 0 to 32768
[   80.493207][ T6508] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.504725][  T971] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   80.522103][ T6508] XFS (loop1): Ending clean mount
[   80.524060][ T6521] loop2: detected capacity change from 0 to 4096
[   80.524976][ T6508] XFS (loop1): Quotacheck needed: Please wait.
[   80.536028][ T6521] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   80.546889][ T6508] XFS (loop1): Quotacheck: Done.
[   80.595545][ T6521] ntfs3(loop2): ino=19, mi_enum_attr
[   80.598138][ T6521] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   80.618633][ T6521] ntfs3(loop2): failed to convert "c46c" to koi8-u
[   80.626346][ T6521] ntfs3(loop2): ino=20, mi_enum_attr
[   80.654807][  T971] usb 1-1: Using ep0 maxpacket: 16
[   80.664448][  T971] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   80.669815][  T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   80.680484][  T971] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   80.683318][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.685969][  T971] usb 1-1: Product: syz
[   80.687339][  T971] usb 1-1: Manufacturer: syz
[   80.689322][  T971] usb 1-1: SerialNumber: syz
[   80.710488][  T971] usb 1-1: config 0 descriptor??
[   80.722334][  T971] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   80.725184][  T971] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[   81.124893][ T5844] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   81.258997][   T10] cfg80211: failed to load regulatory.db
[   81.274748][ T5844] usb 3-1: Using ep0 maxpacket: 32
[   81.280667][ T5844] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[   81.283885][ T5844] usb 3-1: config 0 has no interface number 0
[   81.291500][ T5844] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   81.295531][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.298046][ T5844] usb 3-1: Product: syz
[   81.299404][ T5844] usb 3-1: Manufacturer: syz
[   81.301331][ T5844] usb 3-1: SerialNumber: syz
[   81.307386][ T5844] usb 3-1: config 0 descriptor??
[   81.318605][ T5844] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   81.337182][  T971] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[   81.343370][  T971] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[   81.535827][ T5844] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   81.562600][ T5844] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   81.753181][  T971] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[   81.755585][  T971] em28xx 1-1:0.0: No AC97 audio processor
[   81.800332][  T971] usb 1-1: USB disconnect, device number 6
[   81.808337][  T971] em28xx 1-1:0.0: Disconnecting em28xx
[   81.843017][  T971] em28xx 1-1:0.0: Freeing device
[   81.849392][ T5839] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   82.003762][ T6533] loop1: detected capacity change from 0 to 256
[   82.012942][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[   82.013992][  T971] usb 3-1: USB disconnect, device number 5
[   82.031446][ T6533] FAT-fs (loop1): Directory bread(block 64) failed
[   82.037312][  T971] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   82.040812][ T6533] FAT-fs (loop1): Directory bread(block 65) failed
[   82.042915][ T6533] FAT-fs (loop1): Directory bread(block 66) failed
[   82.049000][ T6533] FAT-fs (loop1): Directory bread(block 67) failed
[   82.049329][  T971] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   82.057088][ T6533] FAT-fs (loop1): Directory bread(block 68) failed
[   82.059151][ T6533] FAT-fs (loop1): Directory bread(block 69) failed
[   82.062678][  T971] quatech2 3-1:0.51: device disconnected
[   82.063457][ T6533] FAT-fs (loop1): Directory bread(block 70) failed
[   82.068933][ T6533] FAT-fs (loop1): Directory bread(block 71) failed
[   82.071178][ T6533] FAT-fs (loop1): Directory bread(block 72) failed
[   82.073238][ T6533] FAT-fs (loop1): Directory bread(block 73) failed
[   82.206734][ T6536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   82.210850][ T6536] block device autoloading is deprecated and will be removed.
[   82.804624][ T5844] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   82.976607][ T5844] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   82.979988][ T5844] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   82.982826][ T5844] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   82.986150][ T5844] usb 3-1: config 220 has no interface number 2
[   82.988177][ T5844] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   82.992281][ T5844] usb 3-1: config 220 interface 0 has no altsetting 0
[   82.994460][ T5844] usb 3-1: config 220 interface 76 has no altsetting 0
[   82.997464][ T5844] usb 3-1: config 220 interface 1 has no altsetting 0
[   83.002196][ T5844] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   83.005213][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.007952][ T5844] usb 3-1: Product: syz
[   83.009267][ T5844] usb 3-1: Manufacturer: syz
[   83.010732][ T5844] usb 3-1: SerialNumber: syz
[   83.228048][ T5844] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[   83.230768][ T5844] usb 3-1: No valid video chain found.
[   83.233170][ T5844] usb 3-1: selecting invalid altsetting 0
[   83.243995][ T5844] usb 3-1: selecting invalid altsetting 0
[   83.246569][ T5844] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[   83.252089][ T5844] usb 3-1: USB disconnect, device number 6
[   83.364682][ T6029] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   83.528193][ T6029] usb 2-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.532420][ T6029] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.535257][ T6029] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[   83.539080][ T6029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.545804][ T6029] usb 2-1: config 0 descriptor??
[   83.793000][ T6559] loop2: detected capacity change from 0 to 16
[   83.841668][ T6559] erofs (device loop2): mounted with root inode @ nid 36.
[   83.974394][ T6557] loop0: detected capacity change from 0 to 40427
[   83.980952][ T6557] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[   83.983572][ T6557] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   83.989388][ T6029] sony 0003:054C:024B.0005: unbalanced delimiter at end of report description
[   83.993134][ T6029] sony 0003:054C:024B.0005: parse failed
[   83.998132][ T6029] sony 0003:054C:024B.0005: probe with driver sony failed with error -22
[   84.038843][ T6557] F2FS-fs (loop0): SIT is corrupted data# 5 7 vs 11
[   84.046112][ T6557] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117)
[   84.188751][ T6029] usb 2-1: USB disconnect, device number 8
[   84.391113][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'.
[   84.490418][ T6561] loop2: detected capacity change from 0 to 131072
[   84.494173][ T6561] F2FS-fs (loop2): Test dummy encryption mode enabled
[   84.497650][ T6561] F2FS-fs (loop2): invalid crc value
[   84.531454][ T6561] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.535858][ T6561] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   84.646953][ T6561] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   84.827376][ T6594] loop1: detected capacity change from 0 to 128
[   84.929853][ T6583] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   85.633309][ T6605] loop0: detected capacity change from 0 to 2048
[   85.650464][ T6605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.683475][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.125386][ T6622] loop1: detected capacity change from 0 to 512
[   86.457024][ T6626] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   87.518249][ T6645] loop0: detected capacity change from 0 to 1764
[   87.716506][ T6029] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   87.809002][ T5844] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   87.896425][ T6029] usb 2-1: Using ep0 maxpacket: 16
[   87.900574][ T6029] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   87.906071][ T6029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   87.913100][ T6029] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   87.918241][ T6029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.921487][ T6029] usb 2-1: Product: syz
[   87.923196][ T6029] usb 2-1: Manufacturer: syz
[   87.925334][ T6029] usb 2-1: SerialNumber: syz
[   87.929617][ T6029] usb 2-1: config 0 descriptor??
[   87.936573][ T6029] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   87.940152][ T6029] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[   87.977166][ T5844] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   87.980930][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.988030][ T5844] usb 1-1: config 0 descriptor??
[   87.993246][ T5844] cp210x 1-1:0.0: cp210x converter detected
[   88.104590][   T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   88.277084][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[   88.280568][   T10] usb 3-1: config 0 interface 0 has no altsetting 1
[   88.288178][   T10] usb 3-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=5a.70
[   88.291322][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.293895][   T10] usb 3-1: Product: syz
[   88.296520][   T10] usb 3-1: Manufacturer: syz
[   88.298070][   T10] usb 3-1: SerialNumber: syz
[   88.302550][   T10] usb 3-1: config 0 descriptor??
[   88.392523][ T5844] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   88.402186][ T5844] usb 1-1: cp210x converter now attached to ttyUSB0
[   88.521669][   T10] usb 3-1: USB disconnect, device number 7
[   88.543931][ T6029] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   88.547912][ T6029] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[   88.598198][ T5976] usb 1-1: USB disconnect, device number 7
[   88.605279][ T5976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   88.618386][ T5976] cp210x 1-1:0.0: device disconnected
[   88.953720][ T6029] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[   88.956126][ T6029] em28xx 2-1:0.0: No AC97 audio processor
[   88.961438][ T6029] usb 2-1: USB disconnect, device number 9
[   88.963987][ T6029] em28xx 2-1:0.0: Disconnecting em28xx
[   88.968710][ T6029] em28xx 2-1:0.0: Freeing device
[   89.567674][ T6029] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   89.715188][ T6029] usb 1-1: Using ep0 maxpacket: 32
[   89.718779][ T6029] usb 1-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config
[   89.723714][ T6029] usb 1-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5
[   89.726944][ T6029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.729741][ T6029] usb 1-1: Product: syz
[   89.731462][ T6029] usb 1-1: Manufacturer: syz
[   89.733344][ T6029] usb 1-1: SerialNumber: syz
[   89.742057][ T6029] pwc: Askey VC010 type 1 USB webcam detected.
[   89.905988][ T5976] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   89.948934][ T6029] pwc: send_video_command error -71
[   89.950606][ T6029] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   89.953081][ T6029] Philips webcam 1-1:76.0: probe with driver Philips webcam failed with error -71
[   89.964334][ T6029] usb 1-1: USB disconnect, device number 8
[   90.196486][ T5976] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[   90.200086][ T5976] usb 2-1: config 0 interface 0 has no altsetting 1
[   90.208342][ T5976] usb 2-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=5a.70
[   90.212016][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.216776][ T5976] usb 2-1: Product: syz
[   90.218527][ T5976] usb 2-1: Manufacturer: syz
[   90.220407][ T5976] usb 2-1: SerialNumber: syz
[   90.228553][ T5976] usb 2-1: config 0 descriptor??
[   90.483454][ T5976] usb 2-1: USB disconnect, device number 10
[   90.722731][ T6678] loop0: detected capacity change from 0 to 256
[   90.828215][ T6680] loop0: detected capacity change from 0 to 4096
[   90.997325][ T6682] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   91.307185][   T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   91.392673][ T6695] loop1: detected capacity change from 0 to 512
[   91.414813][ T6695] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.467026][ T6695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.472819][ T6695] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   91.498451][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   91.503155][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   91.504127][ T6695] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   91.512072][   T10] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[   91.515211][ T6695] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   91.517397][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.521074][ T6695] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.279: Failed to acquire dquot type 1
[   91.540284][   T10] usb 3-1: config 0 descriptor??
[   91.547842][ T6689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   91.635177][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.771888][ T6700] loop1: detected capacity change from 0 to 256
[   91.778807][ T6700] exfat: Deprecated parameter 'utf8'
[   91.781262][ T6700] exfat: Deprecated parameter 'utf8'
[   91.819938][ T6700] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8ecf9da9, utbl_chksum : 0xe619d30d)
[   91.985261][   T10] saitek 0003:06A3:0CCD.0006: item fetching failed at offset 0/2
[   91.989293][   T10] saitek 0003:06A3:0CCD.0006: parse failed
[   92.009689][   T10] saitek 0003:06A3:0CCD.0006: probe with driver saitek failed with error -22
[   92.223835][   T10] usb 3-1: USB disconnect, device number 8
[   92.224697][  T971] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   92.377003][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.381237][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.386117][  T971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   92.391452][  T971] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   92.395400][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.406702][  T971] usb 2-1: config 0 descriptor??
[   92.546258][ T6706] loop0: detected capacity change from 0 to 4096
[   92.650380][ T6708] warning: `syz.0.284' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.773452][ T6710] loop2: detected capacity change from 0 to 256
[   92.839788][  T971] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   92.879638][ T6714] loop0: detected capacity change from 0 to 1024
[   93.021770][ T6722] netlink: 'syz.0.290': attribute type 7 has an invalid length.
[   93.027849][ T6722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.290'.
[   93.062456][ T6725] loop0: detected capacity change from 0 to 47
[   93.314189][ T6742] loop0: detected capacity change from 0 to 1024
[   93.319865][ T6742] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.339682][ T6742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.339879][ T6746] loop2: detected capacity change from 0 to 1024
[   93.366155][ T5893] usb 2-1: USB disconnect, device number 11
[   93.369914][   T27] hfsplus: b-tree write err: -5, ino 4
[   93.498942][ T6750] comedi: No check for data length of config insn id 4095 is implemented
[   93.502293][ T6750] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[   93.507115][ T6750] comedi: Assuming n=15 is correct
[   93.699790][ T6752] loop2: detected capacity change from 0 to 4096
[   93.720000][ T6752] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   93.785920][ T6752] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   93.799482][ T6752] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   93.825233][ T6752] ntfs3(loop2): ino=1b, mi_enum_attr
[   94.634763][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.907811][ T6764] sctp: [Deprecated]: syz.0.309 (pid 6764) Use of int in max_burst socket option deprecated.
[   94.907811][ T6764] Use struct sctp_assoc_value instead
[   95.111965][ T6759] loop2: detected capacity change from 0 to 40427
[   95.116823][ T6759] F2FS-fs (loop2): build fault injection rate: 25
[   95.131804][ T6759] F2FS-fs (loop2): invalid crc value
[   95.216453][ T6768] nbd: couldn't find device at index 255
[   95.225331][ T6759] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.229912][ T6759] F2FS-fs (loop2): Start checkpoint disabled!
[   95.242082][ T6759] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   95.280367][   T33] audit: type=1800 audit(1757964237.491:8): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.307" name="file1" dev="overlay" ino=22 res=0 errno=0
[   95.312711][ T5843] syz-executor: attempt to access beyond end of device
[   95.312711][ T5843] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   95.318536][ T5843] syz-executor: attempt to access beyond end of device
[   95.318536][ T5843] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   95.349461][   T26] kworker/u9:0: attempt to access beyond end of device
[   95.349461][   T26] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   95.356728][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[   95.356742][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.356748][   T26] Workqueue: writeback wb_workfn (flush-7:2)
[   95.356763][   T26] Call Trace:
[   95.356768][   T26]  <TASK>
[   95.356772][   T26]  dump_stack_lvl+0x189/0x250
[   95.356787][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.356796][   T26]  ? __pfx_queue_work_on+0x10/0x10
[   95.356804][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   95.356816][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.356834][   T26]  f2fs_handle_critical_error+0x37c/0x540
[   95.356849][   T26]  f2fs_write_end_io+0x886/0xb60
[   95.356867][   T26]  __submit_merged_bio+0x27a/0x6a0
[   95.356891][   T26]  __submit_merged_write_cond+0x255/0x530
[   95.356906][   T26]  f2fs_write_data_pages+0x261d/0x3000
[   95.356931][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.356962][   T26]  ? unwind_next_frame+0xa5/0x2390
[   95.356972][   T26]  ? unwind_next_frame+0xa5/0x2390
[   95.357004][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.357012][   T26]  do_writepages+0x32e/0x550
[   95.357026][   T26]  ? reacquire_held_locks+0x127/0x1d0
[   95.357034][   T26]  ? writeback_sb_inodes+0x384/0x1010
[   95.357067][   T26]  __writeback_single_inode+0x145/0xff0
[   95.357078][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[   95.357089][   T26]  writeback_sb_inodes+0x6c7/0x1010
[   95.357113][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   95.357144][   T26]  ? rcu_is_watching+0x15/0xb0
[   95.357158][   T26]  wb_writeback+0x43b/0xaf0
[   95.357172][   T26]  ? queue_io+0x351/0x590
[   95.357183][   T26]  ? __pfx_wb_writeback+0x10/0x10
[   95.357197][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.357211][   T26]  wb_workfn+0x409/0xef0
[   95.357227][   T26]  ? __pfx_wb_workfn+0x10/0x10
[   95.357238][   T26]  ? __lock_acquire+0xab9/0xd20
[   95.357255][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   95.357266][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.357276][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   95.357283][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   95.357291][   T26]  process_scheduled_works+0xae1/0x17b0
[   95.357313][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.357330][   T26]  worker_thread+0x8a0/0xda0
[   95.357352][   T26]  kthread+0x711/0x8a0
[   95.357363][   T26]  ? __pfx_worker_thread+0x10/0x10
[   95.357371][   T26]  ? __pfx_kthread+0x10/0x10
[   95.357381][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.357413][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.357421][   T26]  ? __pfx_kthread+0x10/0x10
[   95.357430][   T26]  ret_from_fork+0x439/0x7d0
[   95.357440][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[   95.357451][   T26]  ? __switch_to_asm+0x39/0x70
[   95.357461][   T26]  ? __switch_to_asm+0x33/0x70
[   95.357469][   T26]  ? __pfx_kthread+0x10/0x10
[   95.357479][   T26]  ret_from_fork_asm+0x1a/0x30
[   95.357497][   T26]  </TASK>
[   95.358169][   T26] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   95.455159][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[   95.455170][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.455176][   T26] Workqueue: writeback wb_workfn (flush-7:2)
[   95.455192][   T26] Call Trace:
[   95.455195][   T26]  <TASK>
[   95.455200][   T26]  dump_stack_lvl+0x189/0x250
[   95.455214][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.455223][   T26]  ? __pfx_queue_work_on+0x10/0x10
[   95.455231][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   95.455243][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.455260][   T26]  f2fs_handle_critical_error+0x37c/0x540
[   95.455276][   T26]  f2fs_write_end_io+0x886/0xb60
[   95.455293][   T26]  __submit_merged_bio+0x27a/0x6a0
[   95.455308][   T26]  __submit_merged_write_cond+0x255/0x530
[   95.455322][   T26]  f2fs_write_data_pages+0x261d/0x3000
[   95.455347][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.455400][   T26]  ? unwind_next_frame+0xa5/0x2390
[   95.455413][   T26]  ? unwind_next_frame+0xa5/0x2390
[   95.455445][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.455453][   T26]  do_writepages+0x32e/0x550
[   95.455467][   T26]  ? reacquire_held_locks+0x127/0x1d0
[   95.455475][   T26]  ? writeback_sb_inodes+0x384/0x1010
[   95.455490][   T26]  __writeback_single_inode+0x145/0xff0
[   95.455501][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[   95.455514][   T26]  writeback_sb_inodes+0x6c7/0x1010
[   95.455537][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   95.455568][   T26]  ? rcu_is_watching+0x15/0xb0
[   95.455582][   T26]  wb_writeback+0x43b/0xaf0
[   95.455596][   T26]  ? queue_io+0x351/0x590
[   95.455607][   T26]  ? __pfx_wb_writeback+0x10/0x10
[   95.455621][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.455635][   T26]  wb_workfn+0x409/0xef0
[   95.455651][   T26]  ? __pfx_wb_workfn+0x10/0x10
[   95.455662][   T26]  ? __lock_acquire+0xab9/0xd20
[   95.455678][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   95.455689][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.455699][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   95.455706][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   95.455715][   T26]  process_scheduled_works+0xae1/0x17b0
[   95.455737][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.455754][   T26]  worker_thread+0x8a0/0xda0
[   95.455776][   T26]  kthread+0x711/0x8a0
[   95.455788][   T26]  ? __pfx_worker_thread+0x10/0x10
[   95.455795][   T26]  ? __pfx_kthread+0x10/0x10
[   95.455805][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.455815][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.455823][   T26]  ? __pfx_kthread+0x10/0x10
[   95.455833][   T26]  ret_from_fork+0x439/0x7d0
[   95.455843][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[   95.455854][   T26]  ? __switch_to_asm+0x39/0x70
[   95.455869][   T26]  ? __switch_to_asm+0x33/0x70
[   95.455877][   T26]  ? __pfx_kthread+0x10/0x10
[   95.455887][   T26]  ret_from_fork_asm+0x1a/0x30
[   95.455905][   T26]  </TASK>
[   95.455910][   T26] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   95.484780][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   95.635838][ T5870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.641830][   T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   95.646073][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[   95.656946][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   95.664498][   T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   95.668335][   T10] usb 2-1: Product: syz
[   95.669966][   T10] usb 2-1: Manufacturer: syz
[   95.673526][   T10] usb 2-1: SerialNumber: syz
[   95.678250][   T10] usb 2-1: config 0 descriptor??
[   95.690588][   T10] usb 2-1: selecting invalid altsetting 0
[   95.814394][ T5870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.899981][ T5870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.917308][  T971] usb 2-1: USB disconnect, device number 12
[   96.001048][ T6776] loop0: detected capacity change from 0 to 4096
[   96.015951][ T5870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.034812][ T6777] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.167605][ T5870] bridge_slave_1: left allmulticast mode
[   96.169540][ T5870] bridge_slave_1: left promiscuous mode
[   96.172999][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.191365][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.197438][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.200339][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.201163][ T5870] bridge_slave_0: left allmulticast mode
[   96.203376][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.208091][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.220991][ T5870] bridge_slave_0: left promiscuous mode
[   96.223494][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.508272][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.519187][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.523844][ T5870] bond0 (unregistering): Released all slaves
[   96.820195][ T5870] hsr_slave_0: left promiscuous mode
[   96.822317][ T5870] hsr_slave_1: left promiscuous mode
[   96.824385][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.827136][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.830599][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.832832][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.847688][ T5870] veth1_macvtap: left promiscuous mode
[   96.849610][ T5870] veth0_macvtap: left promiscuous mode
[   96.851435][ T5870] veth1_vlan: left promiscuous mode
[   96.853393][ T5870] veth0_vlan: left promiscuous mode
[   97.166271][ T5870] team0 (unregistering): Port device team_slave_1 removed
[   97.196507][ T5870] team0 (unregistering): Port device team_slave_0 removed
[   97.491045][ T6779] chnl_net:caif_netlink_parms(): no params data found
[   97.579488][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.581819][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.584090][ T6779] bridge_slave_0: entered allmulticast mode
[   97.589700][ T6779] bridge_slave_0: entered promiscuous mode
[   97.595549][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.598110][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.600670][ T6779] bridge_slave_1: entered allmulticast mode
[   97.609862][ T6779] bridge_slave_1: entered promiscuous mode
[   97.648579][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.653134][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.698893][ T6779] team0: Port device team_slave_0 added
[   97.702150][ T6779] team0: Port device team_slave_1 added
[   97.723112][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.730860][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.739239][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.744040][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.746330][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.754969][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.768101][ T5870] IPVS: stop unused estimator thread 0...
[   97.798260][ T6779] hsr_slave_0: entered promiscuous mode
[   97.800654][ T6779] hsr_slave_1: entered promiscuous mode
[   97.802694][ T6779] debugfs: 'hsr0' already exists in 'hsr'
[   97.804445][ T6779] Cannot create hsr debugfs directory
[   98.200179][ T6779] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.204438][ T6779] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.209931][ T6779] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.215355][ T6779] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.303815][ T5842] Bluetooth: hci1: command tx timeout
[   98.317672][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.337661][ T6779] 8021q: adding VLAN 0 to HW filter on device team0
[   98.350602][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.353602][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.367686][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.370710][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.567709][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.620782][ T6779] veth0_vlan: entered promiscuous mode
[   98.629792][ T6779] veth1_vlan: entered promiscuous mode
[   98.660787][ T6779] veth0_macvtap: entered promiscuous mode
[   98.670963][ T6779] veth1_macvtap: entered promiscuous mode
[   98.683788][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.690245][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.698571][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.714502][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.718349][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.729699][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.789650][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.795413][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.825558][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.829008][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.264674][ T6029] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   99.414998][ T6029] usb 3-1: Using ep0 maxpacket: 32
[   99.419814][ T6029] usb 3-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config
[   99.426541][ T6029] usb 3-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5
[   99.430339][ T6029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.433582][ T6029] usb 3-1: Product: syz
[   99.435554][ T6029] usb 3-1: Manufacturer: syz
[   99.437511][ T6029] usb 3-1: SerialNumber: syz
[   99.449499][ T6029] pwc: Askey VC010 type 1 USB webcam detected.
[   99.652009][ T6029] pwc: send_video_command error -71
[   99.653785][ T6029] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   99.660081][ T6029] Philips webcam 3-1:76.0: probe with driver Philips webcam failed with error -71
[   99.667234][ T6029] usb 3-1: USB disconnect, device number 9
[  100.201533][ T6854] netlink: 256 bytes leftover after parsing attributes in process `syz.0.324'.
[  100.242084][ T5842] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  100.249140][ T6857] Bluetooth: MGMT ver 1.23
[  100.376995][ T5842] Bluetooth: hci1: command tx timeout
[  100.645280][ T6029] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  100.739097][ T6894] loop1: detected capacity change from 0 to 2048
[  100.758013][ T6894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.806008][ T6029] usb 3-1: Using ep0 maxpacket: 16
[  100.809382][ T6029] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  100.816201][ T6029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.835241][ T6029] usb 3-1: config 0 has no interface number 0
[  100.841797][ T6029] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.1e
[  100.856403][ T6029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.873220][ T6029] usb 3-1: config 0 descriptor??
[  100.888142][ T6029] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22
[  101.158492][ T5976] usb 3-1: USB disconnect, device number 10
[  101.221005][ T6900] loop1: detected capacity change from 0 to 32768
[  101.465658][ T6906] netlink: 6 bytes leftover after parsing attributes in process `syz.1.342'.
[  101.518252][ T6908] loop1: detected capacity change from 0 to 1024
[  102.261024][ T6927] loop1: detected capacity change from 0 to 1024
[  102.267335][ T6927] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.281883][ T6927] EXT4-fs: Mount option(s) incompatible with ext3
[  102.455557][ T5842] Bluetooth: hci1: command tx timeout
[  103.054652][ T6029] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  103.219717][ T6942] loop1: detected capacity change from 0 to 256
[  103.255451][ T6029] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.258726][ T6029] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  103.277627][ T6029] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  103.280968][ T6029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.282912][ T6936] loop2: detected capacity change from 0 to 131072
[  103.295788][ T6936] F2FS-fs (loop2): invalid crc value
[  103.306636][ T6029] usb 1-1: config 0 descriptor??
[  103.312813][ T6029] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  103.335978][ T6029] dvb-usb: bulk message failed: -22 (3/0)
[  103.353781][ T6936] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  103.356317][ T6029] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  103.359586][ T6936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  103.391818][ T6029] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  103.401388][ T6029] usb 1-1: media controller created
[  103.404474][ T6950] veth0_to_bridge: entered promiscuous mode
[  103.407505][ T6950] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  103.408501][ T6029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  103.442539][ T6029] dvb-usb: bulk message failed: -22 (6/0)
[  103.454802][ T6029] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  103.464111][ T6029] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  103.476460][ T6029] dvb-usb: schedule remote query interval to 150 msecs.
[  103.478841][ T6029] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  103.518164][ T6029] usb 1-1: USB disconnect, device number 9
[  103.543639][ T6029] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  104.127063][ T6975] loop0: detected capacity change from 0 to 1024
[  104.147549][ T6975] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.171062][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.227122][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.584748][ T5842] Bluetooth: hci1: command tx timeout
[  104.924724][ T6029] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  105.087059][ T6029] usb 2-1: unable to get BOS descriptor or descriptor too short
[  105.096094][ T6029] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.100251][ T6029] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  105.103963][ T6029] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  105.186197][ T6029] usb 2-1: string descriptor 0 read error: -22
[  105.188767][ T6029] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  105.196036][ T6029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.213790][ T6029] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  105.217134][ T6029] cdc_ncm 2-1:1.0: bind() failure
[  105.427853][ T5976] usb 2-1: USB disconnect, device number 13
[  106.145184][ T7016] loop2: detected capacity change from 0 to 256
[  106.148667][ T7016] exfat: Deprecated parameter 'namecase'
[  106.151002][ T7016] exfat: Deprecated parameter 'namecase'
[  106.167105][ T7016] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  106.451057][ T7020] loop2: detected capacity change from 0 to 32768
[  106.680278][ T7031] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  107.296012][ T7047] loop1: detected capacity change from 0 to 4096
[  107.540440][   T33] audit: type=1326 audit(1757964249.751:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.1.401" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x0
[  108.567862][ T7078] loop0: detected capacity change from 0 to 32768
[  108.580210][ T7078] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.408 (7078)
[  108.608897][ T7078] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.613078][ T7078] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  108.645113][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  108.717259][ T7078] BTRFS info (device loop0): enabling ssd optimizations
[  108.719817][ T7078] BTRFS info (device loop0): using spread ssd allocation scheme
[  108.734230][ T7100] loop1: detected capacity change from 0 to 64
[  108.743120][ T7078] BTRFS info (device loop0): enabling free space tree
[  108.746955][ T7078] BTRFS info (device loop0): force zlib compression, level 3
[  108.795302][   T10] usb 3-1: Using ep0 maxpacket: 32
[  108.803363][   T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  108.809691][   T10] usb 3-1: config 0 has no interface number 0
[  108.812585][ T5848] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.823871][   T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  108.836084][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.848703][   T10] usb 3-1: Product: syz
[  108.850470][   T10] usb 3-1: Manufacturer: syz
[  108.859932][   T10] usb 3-1: SerialNumber: syz
[  108.883414][   T10] usb 3-1: config 0 descriptor??
[  108.910435][   T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  109.142793][   T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  109.163352][   T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  109.360484][ T7111] netlink: 'syz.0.416': attribute type 8 has an invalid length.
[  109.523562][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  109.529557][   T10] usb 3-1: USB disconnect, device number 11
[  109.539766][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  109.556499][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  109.567847][   T10] quatech2 3-1:0.51: device disconnected
[  110.124001][   T33] audit: type=1326 audit(1757964252.331:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[  110.156827][   T33] audit: type=1326 audit(1757964252.331:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[  110.172065][   T33] audit: type=1326 audit(1757964252.341:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.423" exe="/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[  110.184457][   T33] audit: type=1326 audit(1757964252.341:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x7ffc0000
[  110.254098][ T7131] loop1: detected capacity change from 0 to 4096
[  110.272548][ T7131] EXT4-fs (loop1): Test dummy encryption mode enabled
[  110.304339][ T7131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.398846][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.764162][ T7147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  111.569389][ T7133] kexec: Could not allocate control_code_buffer
[  111.601625][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'.
[  111.606458][ T7156] tipc: Started in network mode
[  111.608729][ T7156] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  111.613817][ T7156] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  111.830793][ T7160] netlink: 104 bytes leftover after parsing attributes in process `syz.2.434'.
[  111.870905][ T7162] syz.1.436 (7162): /proc/7157/oom_adj is deprecated, please use /proc/7157/oom_score_adj instead.
[  111.890547][ T7162] loop1: detected capacity change from 0 to 512
[  111.941310][ T7162] EXT4-fs: test_dummy_encryption requires encrypt feature
[  112.846676][ T7192] tmpfs: Bad value for 'mpol'
[  113.410356][ T7216] loop1: detected capacity change from 0 to 128
[  113.428545][ T7216] EXT4-fs (loop1): Test dummy encryption mode enabled
[  113.437862][ T7216] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.443055][ T7216] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.480624][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.484744][ T6029] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  113.665737][ T6029] usb 3-1: Using ep0 maxpacket: 8
[  113.670064][ T6029] usb 3-1: config 150 has an invalid interface number: 204 but max is 0
[  113.675985][ T6029] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  113.681450][ T6029] usb 3-1: config 150 has no interface number 0
[  113.684089][ T6029] usb 3-1: config 150 interface 204 has no altsetting 0
[  113.698017][ T6029] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=7f.eb
[  113.702173][ T6029] usb 3-1: New USB device strings: Mfr=234, Product=2, SerialNumber=3
[  113.705348][ T6029] usb 3-1: Product: syz
[  113.706789][ T6029] usb 3-1: Manufacturer: syz
[  113.708365][ T6029] usb 3-1: SerialNumber: syz
[  113.810036][ T7230] loop0: detected capacity change from 0 to 256
[  113.817272][ T7230] exfat: Deprecated parameter 'utf8'
[  113.824045][ T7230] exfat: Deprecated parameter 'namecase'
[  113.829121][ T7230] exfat: Deprecated parameter 'namecase'
[  113.831470][ T7230] exfat: Deprecated parameter 'utf8'
[  113.839383][ T7230] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  114.192751][ T6029] xr_serial 3-1:150.204: skipping garbage
[  114.200963][ T6029] usb 3-1: USB disconnect, device number 12
[  114.205020][ T7234] loop0: detected capacity change from 0 to 512
[  114.210489][ T7234] ext2: Unknown parameter 'euid<00000000000000000000'
[  114.810321][ T7239] loop1: detected capacity change from 0 to 65
[  114.822642][ T7239] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  114.823032][ T7241] io-wq is not configured for unbound workers
[  114.825340][ T7239] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  115.702348][ T7260] loop1: detected capacity change from 0 to 128
[  115.769466][ T7260] syz.1.476: attempt to access beyond end of device
[  115.769466][ T7260] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128
[  116.090315][ T7264] loop0: detected capacity change from 0 to 512
[  116.143861][ T7264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.148412][ T7264] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.418762][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.666293][ T7276] loop1: detected capacity change from 0 to 4096
[  116.679901][ T7276] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  116.740417][ T7274] loop0: detected capacity change from 0 to 40427
[  116.743448][ T7274] F2FS-fs: heap/no_heap options were deprecated
[  116.748010][ T7274] F2FS-fs (loop0): invalid crc value
[  116.749749][ T7274] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  116.786308][ T7274] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  116.790741][ T7274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.421767][ T7313] syzkaller1: entered promiscuous mode
[  118.427858][ T7313] syzkaller1: entered allmulticast mode
[  119.645080][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'.
[  119.799590][ T7338] loop2: detected capacity change from 0 to 128
[  119.813064][ T7338] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  119.869427][ T6197] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  119.932871][ T7341] erspan0: entered promiscuous mode
[  120.261373][ T7347] loop2: detected capacity change from 0 to 32768
[  120.272967][ T7347] (syz.2.513,7347,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  120.282013][ T7347] (syz.2.513,7347,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  120.309055][ T7347] JBD2: Ignoring recovery information on journal
[  120.354167][ T7347] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  120.371426][ T7347] (syz.2.513,7347,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xf53e8faf, computed 0xf6557595. Applying ECC.
[  120.428693][ T6779] ocfs2: Unmounting device (7,2) on (node local)
[  121.083845][ T7379] loop0: detected capacity change from 0 to 512
[  121.110953][ T7379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.313172][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.759268][ T7392] loop0: detected capacity change from 0 to 16
[  121.762195][ T7392] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  121.894964][   T54] Bluetooth: hci3: command 0xfc11 tx timeout
[  121.897792][ T5842] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  122.168833][ T7411] capability: warning: `syz.0.538' uses 32-bit capabilities (legacy support in use)
[  122.272711][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'.
[  122.534212][   T33] audit: type=1326 audit(1757964264.741:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.541" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f122bd8eba9 code=0x0
[  122.864795][ T7429] loop0: detected capacity change from 0 to 1024
[  122.892397][ T7429] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  122.897453][ T7429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.913513][ T7429] EXT4-fs: can't change dax mount option while remounting
[  122.934892][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.654751][   T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  123.804708][   T51] usb 2-1: Using ep0 maxpacket: 16
[  123.825215][   T51] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  123.828551][   T51] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.832159][   T51] usb 2-1: too many endpoints for config 1 interface 1 altsetting 48: 49, using maximum allowed: 30
[  123.846851][   T51] usb 2-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49
[  123.851539][   T51] usb 2-1: config 1 interface 1 has no altsetting 0
[  123.857195][   T51] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.861111][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.865501][   T51] usb 2-1: Product: syz
[  123.870399][   T51] usb 2-1: Manufacturer: syz
[  123.871936][   T51] usb 2-1: SerialNumber: syz
[  123.910821][   T51] usb 2-1: selecting invalid altsetting 1
[  123.919703][   T51] usb 2-1: selecting invalid altsetting 0
[  123.930651][   T51] usb 2-1: selecting invalid altsetting 0
[  123.936501][   T51] cdc_ncm 2-1:1.0: bind() failure
[  123.956620][ T7450] loop2: detected capacity change from 0 to 128
[  124.042794][   T33] audit: type=1800 audit(1757964266.251:15): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.552" name="file1" dev="loop2" ino=1048627 res=0 errno=0
[  124.113311][   T51] usb 2-1: selecting invalid altsetting 0
[  124.115874][   T51] usbtest 2-1:1.1: probe with driver usbtest failed with error -22
[  124.122788][   T51] usb 2-1: USB disconnect, device number 14
[  124.352659][ T7454] loop2: detected capacity change from 0 to 128
[  124.363089][ T7454] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  124.381734][ T7454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.116251][ T7468] loop2: detected capacity change from 0 to 4096
[  125.136356][ T7468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.150604][ T7474] block nbd0: Attempted send on invalid socket
[  125.155816][ T7474] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.161860][ T7474] block nbd0: Attempted send on invalid socket
[  125.166270][ T7474] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.172594][ T7468] EXT4-fs (loop2): shut down requested (2)
[  125.188535][ T7468] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=4096, device loop2 blocksize: 4096
[  125.193874][ T7468] grow_buffers: requested out-of-range block 144115188075855872 for device loop2
[  125.198334][ T7468] EXT4-fs warning (device loop2): ext4_resize_fs:2019: can't read last block, resize aborted
[  125.219253][ T6779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.352061][ T7488] loop1: detected capacity change from 0 to 128
[  125.387950][ T7490] loop0: detected capacity change from 0 to 256
[  125.410300][ T7490] FAT-fs (loop0): Directory bread(block 64) failed
[  125.417456][ T7490] FAT-fs (loop0): Directory bread(block 65) failed
[  125.419965][ T7490] FAT-fs (loop0): Directory bread(block 66) failed
[  125.422049][ T7490] FAT-fs (loop0): Directory bread(block 67) failed
[  125.424285][ T7490] FAT-fs (loop0): Directory bread(block 68) failed
[  125.430272][ T7490] FAT-fs (loop0): Directory bread(block 69) failed
[  125.432568][ T7490] FAT-fs (loop0): Directory bread(block 70) failed
[  125.439343][ T7490] FAT-fs (loop0): Directory bread(block 71) failed
[  125.441592][ T7490] FAT-fs (loop0): Directory bread(block 72) failed
[  125.443698][ T7490] FAT-fs (loop0): Directory bread(block 73) failed
[  125.572364][ T7497] loop1: detected capacity change from 0 to 4096
[  125.605020][ T7497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.631534][ T7497] EXT4-fs (loop1): shut down requested (2)
[  125.651951][ T7497] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=4096, device loop1 blocksize: 4096
[  125.660243][ T7497] grow_buffers: requested out-of-range block 144115188075855872 for device loop1
[  125.663663][ T7497] EXT4-fs warning (device loop1): ext4_resize_fs:2019: can't read last block, resize aborted
[  125.679111][ T7504] loop0: detected capacity change from 0 to 128
[  125.682671][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.703920][ T7504] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  125.709351][ T7504] hpfs: filesystem error: improperly stopped
[  125.712204][ T7504] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  125.714772][ T7505] loop2: detected capacity change from 0 to 256
[  125.721141][ T7504] hpfs: You really don't want any checks? You are crazy...
[  125.735072][ T7504] hpfs: hpfs_map_sector(): read error
[  125.737308][ T7504] hpfs: code page support is disabled
[  125.740517][ T7504] hpfs: hpfs_map_4sectors(): unaligned read
[  125.743211][ T7504] hpfs: hpfs_map_4sectors(): unaligned read
[  125.754218][ T7505] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  125.759602][ T7504] hpfs: filesystem error: unable to find root dir
[  125.763917][ T7504] hpfs: hpfs_map_4sectors(): unaligned read
[  126.465152][ T7513] loop2: detected capacity change from 0 to 32768
[  126.556529][ T7513] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  126.556544][ T7513]   allowing incompatible features above 0.0: (unknown version)
[  126.556549][ T7513]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  126.574047][ T7513] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  126.577059][ T7513] bcachefs (loop2): initializing new filesystem
[  126.587417][ T7513] bcachefs (loop2): going read-write
[  126.599884][ T7513] bcachefs (loop2): marking superblocks
[  126.602439][ T7519] loop1: detected capacity change from 0 to 32768
[  126.615564][ T7519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.585 (7519)
[  126.630664][ T7513] bcachefs (loop2): initializing freespace
[  126.637468][ T7519] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.640738][ T7519] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  126.643221][ T7513] bcachefs (loop2): done initializing freespace
[  126.653413][ T7513] bcachefs (loop2): reading snapshots table
[  126.655760][ T7513] bcachefs (loop2): reading snapshots done
[  126.690869][ T7519] BTRFS info (device loop1): enabling ssd optimizations
[  126.692710][ T7513] bcachefs (loop2): done starting filesystem
[  126.693910][ T7519] BTRFS info (device loop1): enabling free space tree
[  126.768380][ T7513] syz.2.583 (7513) used greatest stack depth: 17272 bytes left
[  126.816035][ T6779] bcachefs (loop2): shutting down
[  126.818570][ T6779] bcachefs (loop2): going read-only
[  126.820666][ T6779] bcachefs (loop2): finished waiting for writes to stop
[  126.850620][ T6779] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  126.949548][ T6779] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  126.971201][ T6779] bcachefs (loop2): clean shutdown complete, journal seq 4
[  126.987374][ T6779] bcachefs (loop2): marking filesystem clean
[  126.995252][ T5839] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.116752][ T6779] bcachefs (loop2): shutdown complete
[  127.651812][ T7571] loop0: detected capacity change from 0 to 32768
[  127.701953][ T7571] JBD2: Ignoring recovery information on journal
[  127.749278][ T7571] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  127.968844][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[  127.995101][   T51] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  128.147028][   T51] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  128.154720][   T51] usb 2-1: config 0 interface 0 has no altsetting 0
[  128.162263][   T51] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  128.167662][   T51] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  128.184788][   T51] usb 2-1: Product: syz
[  128.191615][   T51] usb 2-1: Manufacturer: syz
[  128.193552][   T51] usb 2-1: SerialNumber: syz
[  128.208410][   T51] usb 2-1: config 0 descriptor??
[  128.225906][   T51] usb 2-1: selecting invalid altsetting 0
[  128.437347][   T51] usb 2-1: USB disconnect, device number 15
[  128.572208][ T7591] loop0: detected capacity change from 0 to 40427
[  128.601244][ T7591] F2FS-fs (loop0): invalid crc value
[  128.669403][ T7591] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  128.685309][ T7591] F2FS-fs (loop0): Start checkpoint disabled!
[  128.694033][ T7591] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  128.718014][   T35] kworker/u10:1: attempt to access beyond end of device
[  128.718014][   T35] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.728217][   T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  128.728238][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.728247][   T35] Workqueue: writeback wb_workfn (flush-7:0)
[  128.728271][   T35] Call Trace:
[  128.728277][   T35]  <TASK>
[  128.728284][   T35]  dump_stack_lvl+0x189/0x250
[  128.728306][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.728321][   T35]  ? __pfx_queue_work_on+0x10/0x10
[  128.728333][   T35]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.728354][   T35]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.728383][   T35]  f2fs_handle_critical_error+0x37c/0x540
[  128.728409][   T35]  f2fs_write_end_io+0x886/0xb60
[  128.728439][   T35]  __submit_merged_bio+0x27a/0x6a0
[  128.728463][   T35]  __submit_merged_write_cond+0x255/0x530
[  128.728488][   T35]  f2fs_write_data_pages+0x261d/0x3000
[  128.728532][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.728558][   T35]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  128.728604][   T35]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  128.728622][   T35]  ? look_up_lock_class+0x74/0x170
[  128.728674][   T35]  ? trace_f2fs_writepages+0x7f/0x200
[  128.728693][   T35]  ? f2fs_write_node_pages+0x478/0x6e0
[  128.728716][   T35]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  128.728747][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.728761][   T35]  do_writepages+0x32e/0x550
[  128.728784][   T35]  ? reacquire_held_locks+0x127/0x1d0
[  128.728797][   T35]  ? writeback_sb_inodes+0x384/0x1010
[  128.728821][   T35]  __writeback_single_inode+0x145/0xff0
[  128.728838][   T35]  ? do_raw_spin_unlock+0x4d/0x240
[  128.728858][   T35]  writeback_sb_inodes+0x6c7/0x1010
[  128.728898][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  128.728953][   T35]  ? rcu_is_watching+0x15/0xb0
[  128.728976][   T35]  wb_writeback+0x43b/0xaf0
[  128.729000][   T35]  ? queue_io+0x351/0x590
[  128.729019][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  128.729044][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.729067][   T35]  wb_workfn+0x409/0xef0
[  128.729102][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  128.729121][   T35]  ? __lock_acquire+0xab9/0xd20
[  128.729149][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  128.729169][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.729186][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  128.729197][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  128.729212][   T35]  process_scheduled_works+0xae1/0x17b0
[  128.729252][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  128.729282][   T35]  worker_thread+0x8a0/0xda0
[  128.729321][   T35]  kthread+0x711/0x8a0
[  128.729340][   T35]  ? __pfx_worker_thread+0x10/0x10
[  128.729353][   T35]  ? __pfx_kthread+0x10/0x10
[  128.729371][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.729389][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.729400][   T35]  ? __pfx_kthread+0x10/0x10
[  128.729417][   T35]  ret_from_fork+0x439/0x7d0
[  128.729433][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  128.729453][   T35]  ? __switch_to_asm+0x39/0x70
[  128.729467][   T35]  ? __switch_to_asm+0x33/0x70
[  128.729482][   T35]  ? __pfx_kthread+0x10/0x10
[  128.729498][   T35]  ret_from_fork_asm+0x1a/0x30
[  128.729530][   T35]  </TASK>
[  128.729536][   T35] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  129.057218][ T7606] loop2: detected capacity change from 0 to 512
[  129.075443][ T7606] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.081458][ T7606] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.095075][ T7606] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  129.110987][ T7606] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  129.113839][ T7606] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  129.137860][ T7606] EXT4-fs (loop2): 1 truncate cleaned up
[  129.140907][ T7606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.158757][ T7606] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  129.186734][ T6779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.247894][ T7617] loop0: detected capacity change from 0 to 256
[  129.289021][ T7617] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  129.496150][ T7619] loop2: detected capacity change from 0 to 32768
[  129.510364][ T7619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.607 (7619)
[  129.547237][ T7619] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.551646][ T7619] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  129.648475][ T7619] BTRFS info (device loop2): setting nodatasum
[  129.650675][ T7619] BTRFS info (device loop2): setting nodatacow
[  129.652693][ T7619] BTRFS info (device loop2): enabling free space tree
[  129.662133][ T7649] loop0: detected capacity change from 0 to 1024
[  129.662423][ T7619] BTRFS info (device loop2): max_inline set to 0
[  129.766346][ T6779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.172182][ T7657] bridge1: entered allmulticast mode
[  130.239912][ T7661] loop2: detected capacity change from 0 to 1024
[  130.286710][ T6185] hfsplus: b-tree write err: -5, ino 4
[  131.576361][ T7687] loop1: detected capacity change from 0 to 8
[  131.607508][ T7687] SQUASHFS error: lzo decompression failed, data probably corrupt
[  131.610323][ T7687] SQUASHFS error: Failed to read block 0x82: -5
[  131.612421][ T7687] SQUASHFS error: Unable to read metadata cache entry [80]
[  131.634983][ T7687] SQUASHFS error: Unable to read inode 0x11f
[  131.699633][ T7680] loop0: detected capacity change from 0 to 32768
[  131.808017][ T7704] loop2: detected capacity change from 0 to 512
[  131.825563][ T7704] EXT4-fs: Mount option(s) incompatible with ext3
[  131.912840][ T7680] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  131.912864][ T7680]   allowing incompatible features above 0.0: (unknown version)
[  131.912872][ T7680]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  131.958747][ T7680] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  131.961397][ T7680] bcachefs (loop0): initializing new filesystem
[  131.969933][ T7680] bcachefs (loop0): going read-write
[  131.988540][ T7680] bcachefs (loop0): marking superblocks
[  132.122070][ T7715] loop2: detected capacity change from 0 to 1024
[  132.249583][ T7680] bcachefs (loop0): initializing freespace
[  132.266697][ T7680] bcachefs (loop0): done initializing freespace
[  132.287990][ T7680] bcachefs (loop0): reading snapshots table
[  132.289943][ T7680] bcachefs (loop0): reading snapshots done
[  132.327642][ T7680] bcachefs (loop0): done starting filesystem
[  132.352541][ T7720] loop1: detected capacity change from 0 to 4096
[  132.358450][ T7720] EXT4-fs: Ignoring removed mblk_io_submit option
[  132.395502][ T7720] EXT4-fs (loop1): Test dummy encryption mode enabled
[  132.422470][ T7720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.435068][ T5848] bcachefs (loop0): shutting down
[  132.439846][ T5848] bcachefs (loop0): going read-only
[  132.442580][ T5848] bcachefs (loop0): finished waiting for writes to stop
[  132.453298][ T5848] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  132.459780][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.462015][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.497446][ T5848] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  132.498625][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.502807][ T5848] bcachefs (loop0): clean shutdown complete, journal seq 4
[  132.507453][ T5848] bcachefs (loop0): marking filesystem clean
[  132.551578][ T5848] bcachefs (loop0): shutdown complete
[  132.745997][ T7726] loop1: detected capacity change from 0 to 4096
[  132.749048][ T7726] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  132.753220][ T7726] ntfs3(loop1): ino=3, mi_enum_attr
[  132.768718][ T7726] ntfs3(loop1): MFT: r=0, expect seq=1 instead of 0!
[  132.771211][ T7726] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  132.773929][ T7726] ntfs3(loop1): Failed to load $MFT (-22).
[  132.869452][ T7732] loop2: detected capacity change from 0 to 512
[  132.872075][ T7732] EXT4-fs: Ignoring removed mblk_io_submit option
[  132.878148][ T7732] EXT4-fs: inline encryption not supported
[  132.880681][ T7732] EXT4-fs: Ignoring removed mblk_io_submit option
[  132.891452][ T7732] EXT4-fs (loop2): Test dummy encryption mode enabled
[  132.899219][ T7732] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  132.906168][ T7732] EXT4-fs (loop2): 1 truncate cleaned up
[  132.915391][ T7732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.952827][ T7732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.232407][ T7745] loop1: detected capacity change from 0 to 32768
[  133.248495][ T7745] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.279948][ T7745] XFS (loop1): Ending clean mount
[  133.286966][ T7745] XFS (loop1): Quotacheck needed: Please wait.
[  133.314775][ T5844] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  133.329721][ T7745] XFS (loop1): Quotacheck: Done.
[  133.368983][ T5839] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.518211][ T5844] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  133.522349][ T5844] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  133.535788][ T5844] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  133.539860][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.693851][ T7758] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  134.377618][ T5844] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  134.558026][ T5844] usb 1-1: Using ep0 maxpacket: 16
[  134.604803][ T5844] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  134.624461][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  134.628653][ T5844] usb 1-1: Product: syz
[  134.630624][ T5844] usb 1-1: Manufacturer: syz
[  134.633444][ T5844] usb 1-1: SerialNumber: syz
[  134.663223][ T5844] usb 1-1: config 0 descriptor??
[  134.924381][ T5844] usb 1-1: USB disconnect, device number 10
[  135.053808][ T6438] udevd[6438]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  135.345735][ T5976] usb 3-1: USB disconnect, device number 13
[  135.496626][ T7764] loop1: detected capacity change from 0 to 32768
[  135.596732][ T7764] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names
[  135.596750][ T7764]   allowing incompatible features above 0.0: (unknown version)
[  135.596759][ T7764]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  135.608507][ T7764] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  135.611706][ T7764] bcachefs (loop1): recovering from clean shutdown, journal seq 14
[  135.614701][ T7764] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  135.614701][ T7764]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  135.641472][ T7764] bcachefs (loop1): accounting_read... done
[  135.647288][ T7764] bcachefs (loop1): alloc_read... done
[  135.649663][ T7764] bcachefs (loop1): snapshots_read... done
[  135.652285][ T7764] bcachefs (loop1): check_allocations...
[  135.653919][ T7775] capability: warning: `syz.0.654' uses deprecated v2 capabilities in a way that may be insecure
[  135.655495][ T7764] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  135.662952][ T7764]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  135.671270][ T7764] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  135.671315][ T7764]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  135.682296][ T7764] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  135.682314][ T7764]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  135.692396][ T7764] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  135.692407][ T7764]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  135.702683][ T7764] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  135.702693][ T7764]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  135.714806][ T7764] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  135.714824][ T7764]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  135.731166][ T7764]  done
[  135.736478][ T7764] bcachefs (loop1): going read-write
[  135.746658][ T7764] bcachefs (loop1): journal_replay... done
[  135.826197][ T7764] bcachefs (loop1): check_extents_to_backpointers...
[  135.827526][ T7764] bcachefs (loop1): scanning for missing backpointers in 6/128 buckets
[  135.835831][ T7764]  done
[  135.840997][ T7764] bcachefs (loop1): check_inodes... done
[  135.846600][ T7764] bcachefs (loop1): resume_logged_ops... done
[  135.850285][ T7764] bcachefs (loop1): delete_dead_inodes... done
[  135.860127][ T7764] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  135.864298][ T7764] bcachefs (loop1): check_extents_to_backpointers... done
[  135.869893][ T7764] bcachefs (loop1): check_inodes... done
[  135.873603][ T7764] bcachefs (loop1): resume_logged_ops... done
[  135.877318][ T7764] bcachefs (loop1): delete_dead_inodes... done
[  135.883967][ T7764] bcachefs (loop1): done starting filesystem
[  135.954953][ T7785] loop2: detected capacity change from 0 to 1024
[  136.035418][ T5976] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  136.042006][ T7785] hfsplus: b-tree write err: -5, ino 3
[  136.124736][ T7764] syz.1.652 (7764) used greatest stack depth: 14184 bytes left
[  136.137212][ T5839] bcachefs (loop1): shutting down
[  136.138978][ T5839] bcachefs (loop1): going read-only
[  136.142158][ T5839] bcachefs (loop1): finished waiting for writes to stop
[  136.147898][ T5839] bcachefs (loop1): flushing journal and stopping allocators, journal seq 23
[  136.153507][ T5839] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 24
[  136.160342][ T5839] bcachefs (loop1): clean shutdown complete, journal seq 25
[  136.163115][ T5839] bcachefs (loop1): marking filesystem clean
[  136.176964][ T5839] bcachefs (loop1): shutdown complete
[  136.214688][ T5976] usb 1-1: Using ep0 maxpacket: 32
[  136.218842][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  136.224313][ T5976] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  136.230415][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.233929][ T5976] usb 1-1: Product: syz
[  136.236658][ T5976] usb 1-1: Manufacturer: syz
[  136.238633][ T5976] usb 1-1: SerialNumber: syz
[  136.243687][ T5976] usb 1-1: config 0 descriptor??
[  136.254892][ T5976] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  136.271351][ T5976] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  136.293611][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  136.385148][   T51] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  136.468129][   T10] usb 1-1: USB disconnect, device number 11
[  136.537595][   T51] usb 3-1: config 7 has an invalid interface number: 252 but max is 0
[  136.541768][   T51] usb 3-1: config 7 has no interface number 0
[  136.545461][   T51] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4
[  136.549965][   T51] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0
[  136.554760][   T51] usb 3-1: config 7 interface 252 has no altsetting 0
[  136.562543][   T51] usb 3-1: string descriptor 0 read error: -22
[  136.568387][   T51] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  136.576232][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.589330][   T51] idmouse 3-1:7.252: Unable to find bulk-in endpoint.
[  136.798950][   T51] usb 3-1: USB disconnect, device number 14
[  137.321665][ T7798] loop1: detected capacity change from 0 to 4096
[  137.341069][ T7798] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  137.719072][ T7823] loop6: detected capacity change from 0 to 63
[  137.743160][ T7823] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  137.746925][ T7823] Buffer I/O error on dev loop6, logical block 1, lost async page write
[  137.750673][ T7823] Buffer I/O error on dev loop6, logical block 2, lost async page write
[  137.754214][ T7823] Buffer I/O error on dev loop6, logical block 3, lost async page write
[  137.758235][ T7823] Buffer I/O error on dev loop6, logical block 4, lost async page write
[  137.760808][ T7813] loop1: detected capacity change from 0 to 32768
[  137.761554][ T7823] Buffer I/O error on dev loop6, logical block 5, lost async page write
[  137.771145][ T7823] Buffer I/O error on dev loop6, logical block 6, lost async page write
[  137.873238][ T7825] netlink: 100 bytes leftover after parsing attributes in process `syz.0.676'.
[  137.895868][   T51] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  138.051557][   T51] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  138.056019][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.062248][   T51] usb 3-1: config 0 descriptor??
[  138.069377][   T51] cp210x 3-1:0.0: cp210x converter detected
[  138.311189][ T7845] IPVS: Error connecting to the multicast addr
[  138.479203][   T51] usb 3-1: cp210x converter now attached to ttyUSB0
[  138.586575][ T7847] loop0: detected capacity change from 0 to 32768
[  138.672711][   T51] usb 3-1: USB disconnect, device number 15
[  138.690620][   T51] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  138.698927][   T51] cp210x 3-1:0.0: device disconnected
[  139.627149][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  140.442051][  T115] ==================================================================
[  140.445396][  T115] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x74b/0xa90
[  140.448534][  T115] Read of size 4 at addr ffff88810f2cdc94 by task jfsCommit/115
[  140.452500][  T115] 
[  140.453858][  T115] CPU: 0 UID: 0 PID: 115 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  140.453874][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.453882][  T115] Call Trace:
[  140.453888][  T115]  <TASK>
[  140.453894][  T115]  dump_stack_lvl+0x189/0x250
[  140.453911][  T115]  ? __kasan_check_byte+0x12/0x40
[  140.453929][  T115]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.453942][  T115]  ? lock_release+0x4b/0x3e0
[  140.453960][  T115]  ? __virt_addr_valid+0x4a5/0x5c0
[  140.453976][  T115]  print_report+0xca/0x240
[  140.453988][  T115]  ? jfs_lazycommit+0x74b/0xa90
[  140.454000][  T115]  kasan_report+0x118/0x150
[  140.454014][  T115]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  140.454032][  T115]  ? jfs_lazycommit+0x74b/0xa90
[  140.454047][  T115]  jfs_lazycommit+0x74b/0xa90
[  140.454062][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  140.454074][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  140.454091][  T115]  ? __kthread_parkme+0x7b/0x200
[  140.454103][  T115]  ? __kthread_parkme+0x1a1/0x200
[  140.454116][  T115]  kthread+0x711/0x8a0
[  140.454130][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  140.454143][  T115]  ? __pfx_kthread+0x10/0x10
[  140.454156][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.454172][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.454183][  T115]  ? __pfx_kthread+0x10/0x10
[  140.454196][  T115]  ret_from_fork+0x439/0x7d0
[  140.454209][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  140.454222][  T115]  ? __switch_to_asm+0x39/0x70
[  140.454236][  T115]  ? __switch_to_asm+0x33/0x70
[  140.454249][  T115]  ? __pfx_kthread+0x10/0x10
[  140.454262][  T115]  ret_from_fork_asm+0x1a/0x30
[  140.454281][  T115]  </TASK>
[  140.454286][  T115] 
[  140.520816][  T115] Allocated by task 7847:
[  140.522538][  T115]  kasan_save_track+0x3e/0x80
[  140.524559][  T115]  __kasan_kmalloc+0x93/0xb0
[  140.526553][  T115]  __kmalloc_cache_noprof+0x230/0x3d0
[  140.528743][  T115]  jfs_fill_super+0xc2/0xd80
[  140.530633][  T115]  get_tree_bdev_flags+0x40e/0x4d0
[  140.532796][  T115]  vfs_get_tree+0x92/0x2b0
[  140.534603][  T115]  do_new_mount+0x2a2/0x9e0
[  140.536426][  T115]  __se_sys_mount+0x317/0x410
[  140.538413][  T115]  do_syscall_64+0xfa/0x3b0
[  140.540768][  T115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.543304][  T115] 
[  140.544299][  T115] Freed by task 5848:
[  140.545948][  T115]  kasan_save_track+0x3e/0x80
[  140.547898][  T115]  kasan_save_free_info+0x46/0x50
[  140.550017][  T115]  __kasan_slab_free+0x5b/0x80
[  140.552006][  T115]  kfree+0x18e/0x440
[  140.553555][  T115]  generic_shutdown_super+0x135/0x2c0
[  140.555824][  T115]  kill_block_super+0x44/0x90
[  140.557790][  T115]  deactivate_locked_super+0xbc/0x130
[  140.559920][  T115]  cleanup_mnt+0x425/0x4c0
[  140.561707][  T115]  task_work_run+0x1d4/0x260
[  140.563578][  T115]  exit_to_user_mode_loop+0xec/0x110
[  140.565820][  T115]  do_syscall_64+0x2bd/0x3b0
[  140.567788][  T115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.570290][  T115] 
[  140.571296][  T115] The buggy address belongs to the object at ffff88810f2cdc00
[  140.571296][  T115]  which belongs to the cache kmalloc-256 of size 256
[  140.576831][  T115] The buggy address is located 148 bytes inside of
[  140.576831][  T115]  freed 256-byte region [ffff88810f2cdc00, ffff88810f2cdd00)
[  140.582275][  T115] 
[  140.583340][  T115] The buggy address belongs to the physical page:
[  140.586128][  T115] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f2cc
[  140.589867][  T115] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  140.593491][  T115] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  140.597059][  T115] page_type: f5(slab)
[  140.599186][  T115] raw: 057ff00000000040 ffff88801a441b40 ffffea00041f9480 dead000000000007
[  140.602895][  T115] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  140.606380][  T115] head: 057ff00000000040 ffff88801a441b40 ffffea00041f9480 dead000000000007
[  140.609807][  T115] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  140.613229][  T115] head: 057ff00000000001 ffffea00043cb301 00000000ffffffff 00000000ffffffff
[  140.616801][  T115] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  140.620678][  T115] page dumped because: kasan: bad access detected
[  140.623477][  T115] page_owner tracks the page as allocated
[  140.625820][  T115] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 56123150415, free_ts 55983255122
[  140.634135][  T115]  post_alloc_hook+0x240/0x2a0
[  140.636497][  T115]  get_page_from_freelist+0x21e4/0x22c0
[  140.638942][  T115]  __alloc_frozen_pages_noprof+0x181/0x370
[  140.641519][  T115]  alloc_pages_mpol+0x232/0x4a0
[  140.643636][  T115]  allocate_slab+0x8a/0x370
[  140.645577][  T115]  ___slab_alloc+0xbeb/0x1420
[  140.647468][  T115]  __kmalloc_noprof+0x305/0x4f0
[  140.649370][  T115]  __register_sysctl_table+0xba1/0x1340
[  140.651551][  T115]  __devinet_sysctl_register+0x37f/0x470
[  140.653896][  T115]  devinet_sysctl_register+0x187/0x200
[  140.656234][  T115]  inetdev_init+0x2b4/0x500
[  140.658230][  T115]  inetdev_event+0x301/0x15b0
[  140.660247][  T115]  notifier_call_chain+0x1b6/0x3e0
[  140.662432][  T115]  register_netdevice+0x1608/0x1ae0
[  140.664595][  T115]  veth_newlink+0x5cc/0xa50
[  140.666504][  T115]  rtnl_newlink_create+0x310/0xb00
[  140.668554][  T115] page last free pid 5843 tgid 5843 stack trace:
[  140.671278][  T115]  __free_frozen_pages+0xbc4/0xd30
[  140.673532][  T115]  __slab_free+0x303/0x3c0
[  140.675493][  T115]  qlist_free_all+0x97/0x140
[  140.677375][  T115]  kasan_quarantine_reduce+0x148/0x160
[  140.679605][  T115]  __kasan_slab_alloc+0x22/0x80
[  140.681598][  T115]  __kmalloc_cache_noprof+0x1be/0x3d0
[  140.683842][  T115]  ref_tracker_alloc+0x133/0x460
[  140.685880][  T115]  net_rx_queue_update_kobjects+0x1a6/0x740
[  140.688321][  T115]  netdev_register_kobject+0x21f/0x310
[  140.690577][  T115]  register_netdevice+0x126c/0x1ae0
[  140.692603][  T115]  team_newlink+0x114/0x160
[  140.694497][  T115]  rtnl_newlink_create+0x310/0xb00
[  140.696623][  T115]  rtnl_newlink+0x16d6/0x1c70
[  140.698479][  T115]  rtnetlink_rcv_msg+0x7cf/0xb70
[  140.700544][  T115]  netlink_rcv_skb+0x208/0x470
[  140.702669][  T115]  netlink_unicast+0x82f/0x9e0
[  140.704730][  T115] 
[  140.705775][  T115] Memory state around the buggy address:
[  140.708110][  T115]  ffff88810f2cdb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  140.711306][  T115]  ffff88810f2cdc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  140.714631][  T115] >ffff88810f2cdc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  140.718281][  T115]                          ^
[  140.720334][  T115]  ffff88810f2cdd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  140.723703][  T115]  ffff88810f2cdd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  140.726935][  T115] ==================================================================
[  140.730103][  T115] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  140.733080][  T115] CPU: 0 UID: 0 PID: 115 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  140.737131][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.741323][  T115] Call Trace:
[  140.742722][  T115]  <TASK>
[  140.743931][  T115]  dump_stack_lvl+0x99/0x250
[  140.745843][  T115]  ? __asan_memcpy+0x40/0x70
[  140.747728][  T115]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.749807][  T115]  ? __pfx__printk+0x10/0x10
[  140.751611][  T115]  vpanic+0x281/0x750
[  140.753211][  T115]  ? __pfx_print_hex_dump+0x10/0x10
[  140.755362][  T115]  ? __pfx_vpanic+0x10/0x10
[  140.757311][  T115]  panic+0xb9/0xc0
[  140.758947][  T115]  ? __pfx_panic+0x10/0x10
[  140.760831][  T115]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.763193][  T115]  ? jfs_lazycommit+0x74b/0xa90
[  140.765180][  T115]  check_panic_on_warn+0x89/0xb0
[  140.767241][  T115]  ? jfs_lazycommit+0x74b/0xa90
[  140.769293][  T115]  end_report+0x78/0x160
[  140.771081][  T115]  kasan_report+0x129/0x150
[  140.772979][  T115]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  140.775151][  T115]  ? jfs_lazycommit+0x74b/0xa90
[  140.777029][  T115]  jfs_lazycommit+0x74b/0xa90
[  140.778512][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  140.780175][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  140.782009][  T115]  ? __kthread_parkme+0x7b/0x200
[  140.783810][  T115]  ? __kthread_parkme+0x1a1/0x200
[  140.785414][  T115]  kthread+0x711/0x8a0
[  140.786737][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  140.788439][  T115]  ? __pfx_kthread+0x10/0x10
[  140.789949][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.791751][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.793491][  T115]  ? __pfx_kthread+0x10/0x10
[  140.794968][  T115]  ret_from_fork+0x439/0x7d0
[  140.796467][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  140.798136][  T115]  ? __switch_to_asm+0x39/0x70
[  140.799721][  T115]  ? __switch_to_asm+0x33/0x70
[  140.801288][  T115]  ? __pfx_kthread+0x10/0x10
[  140.802833][  T115]  ret_from_fork_asm+0x1a/0x30
[  140.804443][  T115]  </TASK>
[  140.806157][  T115] Kernel Offset: disabled
[  140.807593][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:24:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900024cf590
R8 =ffff88801fe00237 R9 =1ffff11003fc0046 R10=dffffc0000000000 R11=ffffffff854fae30
R12=dffffc0000000000 R13=ffffffff99b00905 R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854faeac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffe70 CR3=00000001000aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f122bfa7498 00007f122bfa7470 XMM03=00007f122bfa74a8 00007f122bfa74a0
XMM04=00007f122cb0d100 00007f122bfa7460 XMM05=00007f122bfa7478 00007f122bfa74c0
XMM06=00007f122bfa74b8 00007f122bfa74b0 XMM07=00007f122bfa74a8 00007f122bfa74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f122be12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90004906508 RBX=0000000000000000 RCX=ffffffff8100176a RDX=0000000000000000
RSI=0000000000000000 RDI=ffffc90004906508 RBP=0000000000000000 RSP=ffffc90004906500
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b7a4e60 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f122cce96c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b10f8 CR3=000000002b374000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f122bfa7498 00007f122bfa7470 XMM03=00007f122bfa74a8 00007f122bfa74a0
XMM04=00007f122cb0d100 00007f122bfa7460 XMM05=00007f122bfa7478 00007f122bfa74c0
XMM06=00007f122bfa74b8 00007f122bfa74b0 XMM07=00007f122bfa74a8 00007f122bfa74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f122be12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
