last executing test programs:

1m24.107405905s ago: executing program 2 (id=255):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4a20, @multicast2}, 0x10)

1m23.996804327s ago: executing program 2 (id=256):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="25329480324c"}]}, 0x50}}, 0x4008000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000040)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO")
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
pipe(&(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001a00)={0x2020}, 0x2020)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x660, 0x1a96, 0x0, 0x10000, 0xffffffff, 0x2})
rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000440)={0x0, 0x0, 0xfffffffb})
splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x1ff, 0x80)
ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000380)=""/123)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001980)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000001300000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000012003300", @ANYRES32=r8], 0xa0}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0)

1m22.287080668s ago: executing program 2 (id=259):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
open(0x0, 0x108843, 0x98)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0xa)
syz_clone3(&(0x7f000000dd80)={0x200a00500, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)

1m21.297664939s ago: executing program 2 (id=270):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x4]})
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

1m20.616859057s ago: executing program 2 (id=274):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[&(0x7f0000000440)='=rrors=continue']})

1m20.256778994s ago: executing program 2 (id=279):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1m19.780708287s ago: executing program 32 (id=279):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1m2.672799937s ago: executing program 0 (id=411):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x188, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)

1m2.392092721s ago: executing program 0 (id=415):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a001001000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195}, 0x23)

1m2.248865499s ago: executing program 0 (id=418):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14)

1m2.025110932s ago: executing program 0 (id=425):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2101000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x138, 0x4)

1m0.15484165s ago: executing program 0 (id=433):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7d, 0x20f})

59.425771226s ago: executing program 0 (id=438):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df0061114c0000000000850000005400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

59.308218998s ago: executing program 33 (id=438):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df0061114c0000000000850000005400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

24.172006253s ago: executing program 1 (id=882):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x4c, r1, 0x101, 0x0, 0xfffffff5, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c0"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x2, 0x0, 0x0, {0x40f3, 0x6c, 0x0, 0x50, 0x0, 0x0, 0x0, 0x2}, 0x6, 0xd, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044015}, 0x48040)

24.171715936s ago: executing program 1 (id=883):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0xfffffffd, 0x0, 0x2, 0x256}, &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})

23.286872458s ago: executing program 1 (id=896):
r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e55697298a0ae35e18d14dd4b6592fa14c0489b858840d12654fb8ddbd1563e581b6a29f56e6127a48c40b95af04e135572e6084e5706e88f02b4440c32e93c31603beb0bc2616de2e7f2a3936b7862df4bc4178710a61eb2e0e7b4ac16cde4477d10653b0d6afde80c950848626b7296ec902f7dc875cbb34a73638a2a48eec75667340826ad84022664c0039de213dc5054b5ecc2ea3c385fe8cdeb814e4eb6262fb39fb637c13a6c1b401f1eafc7a09d49980e60e5caca3520ffeeaf9b20a67d680c7ade66ff7398725ab5bfeed67b48888284c03f6c5331b33f5bd12b10f2c9f8a82549939fbf23caba0dfe1cd962f5e97d9a7dbfed7b25dfcd025cafb3c3b34bde13e2cf3684db786b56929bd381fa5e178b268005224cf7d79103524ec32d22509292501062fd2a907f9eb1a564bcb58da00933f9fb49af10ce55617b9edfad6ca5f9060623e0d6fb73aa68c9b5190dc671968ecbf752962f6e3f0ef6b3ff918603cd511ec00dc67ba004c6469380f5c5390226ccd5ebb934a63c103e4fb6b69c42a6e8e8aa434fd0c787de018fc1e25189ba81be91c80d5e3c9d021baa3cb3abaf755b79e41a8604392c68a018e1750ab6d54608969f3c9273b1a08c3b8d7d9b6f03f4bd3a6c64790617d72a891556cba509f21f992c59db9f78853421fb9ec4ddb2fe782f5da26c038626f26d1e4fda289cea520d44630b041e18ea2ecf56852c25f1ddf3bbaed2c17ba898575431134ee7c27fbf8548dfd63364b8beae267085bfa964786745134ae2b64c4a263f885c198952e795c17e04f0d9e4360de13ae3f2481e6d234bb5c54e03d5e0cb27e5b610ea2c0d85d21bc66e5c861f1e8ba66620cb6f590b2fe294013923b7fc9b170f449e7873bb9aa14cf7421e61feaaeb349a2acb5816a51325f45065b035be05f4498e77eb5e875c03b0c41061caadee14eb2764a5846ba0cab400e1676f533abc56930e5acccf331b0611af1e2947b11820d32e142ca885f4df233678ccbcfa63e5cfa708adcfefa34f059f81f14a5ef2538ef446feec5c78828c618576b18b86c7ee37d8182a8dee51d5dd199cd2ee915f5e25be2885822ab3e5b988786764e611f0bb1214bb9d825c9c4e15c061acf2b4e7361831e0fe9fc409e0004631ab31c42bfd962ba7a0e475f3a91643ce65d2efb94976b14fcf7d21c93bd9208b7bb7a3dfc4444cf14d127401c6892ba93ac786476e0885f028ae6141de817d3517cce625eebb50e2c1e5e64ffc50da4d2eaa605501769e4c1a40fd9da7da178b4bf468942514082773698770ef455ea263fefa4fb258c15afb076c7979296f901e84a2b71eb63cb3d9dfd9abb3e1f8f657070d75541c20476f37e14ca43014ef80b33eeca91ace604ec2051d73ec2f69ffa14bcd79ea577e9676825094606343d31874111fbc535d28fa7a9e379d38226001e241d3515e1d63ba56f1eebe8ea788c4d768f4c4fbbaf834ca3f21460613d768dacf2a27778dc2b4598726646b8c06b6e4d38162720c807724f92bdc9f0b0f5d303d5a5a3998aa270a6760c7651df601bc42c78dd9bd53ee960cf80a30a6b7a1a880d37ff31fb2c9bb0c591bba3ef8228a0506f45065c65b131aff8da8eebbd6754b9e5601632da39c329a229062a94833b23c97371d510a19e2d3b5bc516e3d3c8601495fbeecc16c5c50ba6c435974e8275d372add206964f29997b515f63f50121029e61f47db19fc63b07d0f059ca686e80fb6c294667affaea2daff241bdd0945bfbfe28643136bcea9aa345d482fc3b9d872b482463b92b25f0e5157be3fd8b7a328f327ddfa5c05a6f172deb795f19b9f2091386acb060f170540bfa898057c206d81afd85701b8ee030076bc3782d7d8f6673111baf80818aeca7e5944d91a7f4fce840303867ea18d2b92d74c67157284c787fcfde780fc9a53ae5560e101ef125ce707d34f957072958dc9916492e73a90a10f660a221a7c6730ac0ac01e37d54f058b64f41a46be5320800172e2c9fda248a2964548ddf1f53599027c29ede6079a72d454bcf4403808111d00cb4e3aadd060c333e57c64a70bdfbb572fe228538c82ab427416cdcce1dd643ece610ca7042e2a164d3dfdabb966f1a8fc875cd002920321dac62e25f38cb0031e4de6324b0db402b12c4b0e335898e21b7b326ebbeec0b4bc21ef2dd6f9755e8ff35602d30189ae3efe9c487aec2ce90dbbe790c919b77036240786f3fe9441204b81bc43b5f5cbede75702a1c28ab16d2f578dddb3624f596b5b82e2f26b63966ddc78c8ffa13a23b6c4ee2c741820b9738fe881ddeeeba60fa4221885be55a6fdaa0b90b246f5959b844afd6898bc8c0a75fc45fb968d6e8ea6831d15808b23904355c62a8590d1ba51cdb051bd5ccc1b62a8ca520af60daefae7f7f1dcc90a02ab3af5307fcd5fed9af7d9b192f080be6ded768c6d1d4ea0ba5cc996e5c24b8048eeaea09cabcf1c0488a357280395cfc5394ba160c439dda0a7f4ed182d3f33a4addb1c74d7d797179c633013b24c7e0cd2f4b86904bd1d70a4821c7ff619455953d820e1594c7136e66c260c868776129eddedfdec5ebb0da2e5207215f9c47d7bf74319661311232ca1d108da00df2d07ff5720c474981cb54bd185448ae0e3d9d3194614ae67bdb24122cb2207be610456c35ba6e11429a3a6c266b4bfd905c7534de4fe03ac5063cbb08b3a75137e59e3e8b3fee3989bfb0735ea6f948371a60efff49ea51d5825dd61ef9a0b735fc859c9b003325fe6e3a5fdb8d2cf51e2e9a4c73a8af3a702a83d57d3ddb81d5e9342c97f143ed28228c16a1625d8ba4f0ffddc968f37cb07ea09d35703f920cf4e7a1394b7f18e6f2508a4c90acc92710ddce1e7a9a22ad2d540f669411b263b3e20b07131cc17cf20ae8030de00862bdc33b7eb4f8122c47c833e73aed84199e5d584625570193e18c3d165dae7941d17cc07034a2a5c67c708d6c96f9c5595800dfb65f42c413716b952d42727e7117915b359d1f1c0a64f0ee4b4a0bfbc4e9fc794cd02369e9594acb7805a155ec03505df719aa47e5da38fd3ab736fa76acee10abd1b220b32436260f2ab86f7d0c20fd9b3a1e63b9b3dbd91e7579fec104f5a714f4d0a00a03a1848c58508e8ec27c7fa04d3baf64e1258bd1d72465f3a64c793b3e09a97ca1a2efbac7adb6228ef4588be15afc21c80905a26a22f4db7940b9369051dde4e24008a5f7b943d769578ffa46572435c2076c60096252f3b3b5fe6d8f4579d11c9c71cbf7444c661306fa07dd01e670fa8d24071b09d6e74a268a0d43aef3b7f8e126900bf2e21304785712f327275a2e16febd4faaaacce68b92dcc3c27ca035bb4210408a34103719c82d33c8b43dd9a46cc0420a533b906317fb817ef6164286b8ddacee6191027bfa9ed19746c8401bab93d08d028fd9e2203cccf56b22042c402e8a438ed226112fa71d02c4537d4156a3af28ab4ffcf19309d283902f1e70f42d6713782c5e468a086fdb5c8b3e15de36acc4469ec42ea23a1e5e8e399f4d4be71dd4b4c268db2ab91b68ceafb95cbba36228e59bc0cd7f987a2ad4bbd23b67acabb26a0f4c694ff320f2275042c85ef256aeef306cf5e2803d6c55827011e2f98d0e80819e0039a71cc9c59464f209afa7891a359a3f9efb4bba2a18fd013e8664a6bec7e717ffe2f0c06f7268862696cfae0fe6fab5b1a2921c0e29aaa8638f6a18d1cbaaa4aa0d76f66fa9f44511e631f2fde8024210eb39f545a648c1b77ab04a7d110edbd1dce3939b4dee867df3cb3107fffe5ab22fe5e32b38447d32094259cee40c9a5254df72cbd7a29188d7285facd6e2f5c78ee9d11645cf026e99162da9c2d148373018fe8e052ffccc4e3952e86228d7835a3bc9b4a5c6099dd3e802b059ef2225cbe4664458729c78032e184b61a089870c6b3c2bf2e5df6bd65bc195e1ccbe58b9a6dde49897ab59dd269a737f04e37e34d3d10c3b01c744a742d52da1bceca63fcbecc136a80bf3ca1df2f226de073b67a0b646674744acd14d5dab9929f2cb804637ebf211f2b3a8b959723808904e9044deb551b2613c1e501385693e7abff809b641c02107187cf1bd1c9571a9023942f0c78c467611193a7e6900eefc49fded206630336cd8d2849731b73798d9258be75b843f051679e6bd541c78457db5470d3d494f333a81b3ed26b57f9f7726275c12f192f4b1d9615c7fe3e0bb22fb47ae1effea3bd2a0a379593a25f933c8af1f14d08bd8ca692c9af3eaee136664e1829204c171ad6e50fa928a3c1f5ee2c14f984884c2cb0256acfa6172d030940f3f9f99443c730b0f070192d36fb83b3d470cf3098bd8b0f09eb6d1b58efbde00305c3a50e00df17b9963f1c06f26b48e4a166073f3f3119ed2b56af1f8c056c07f65ffc3f2e81efa22f97c66998b35bb2af3ce2d89af5f5b1368ce9148937f826c3ef81a116382bd3f53e26f210aed545f38c1e21400957b824eaa95bb401ef308852c7e5015b89244a403308de785a81739634161e33d79435f18cf378bd9f5eb59b40a55abe627f6944ec239f80fc15526e7f1b2c2949a85b8c15a299cee1c86f61746a4eae3dc5f347225f1965cf09d4457b1a1b692fb108a681607d6276c4a6cf35709dc95aa249ae245a0435c481cbae672037aefc82fee9f249e643e658d173aea1d99e361f383dd674a5f2a6525755eaba2d59928a8d9e2eb1aafd129cb4c2cefd5da0213d900efa938e937a7c4e62243eeb3f5f43be35323f63b0b1ac2a298fcfbf71129da3465e488f52b82ec725bdf2fd943e09004c62abf5332139fb38b797756c5e9de926da21f8d77408ea740cf5ec8a657eae110df0550c6ca2585e0cdd5de1e986da91ca1d112f0d5397fdc612b2163164dedddf60c1e3dcd94195b65f50a9c86fb7b67b91dc7c0b8ab3d1c254663fc09ad5fd2c97221f1c6032557ff0a2fc441b71b3a6a6c52efded4133c8d57ce15523550237e7fef838d66cd77c48a743b2a2cc7c1f0ef3d520eb7ce9c086d73c352fe311337b3558a6985660a19ac852edceed56e3e9bb49b8a788eaa3f9be70b3fd1e764888a35a6c874256f9a8e53790281e30fdc1ed35ef03e9bd805ba3ef6ad07c3eef31fadcaba39c9b793e15d04f096c62f6282e8fc4aa31b275bc7fe5dce144ba736151d046b1285b698422ae84ae222e835e2ea80791082cd1742385764a0b047fcadfd8da7acc8f820dd50444fbbecb18ff5c9df10e08609d4b0f76ce14dc8ab056227e3604b3933df593a1b961fba44678131c958b15246e5054465bfffba1cb05c8d4a3ce7a3473d88c9213b5d8fcef3c46f8650fec5077bffaf9b469051b0e5aa7b55f863f0919ca310505a063890b1560597aac6ca1ed9a7c7ed8e894597098cc9333d687bd8e1b4539bb9f74d034d2fc316ef806d67bcec412fb485a03f87cb89d122809fc55f1a7fb35a74440d661ee736340cdbe70141214e899cf9f907a2463f995d21e2d1d25fe92b47ea198f467bf5e775104bbb0ed11534ef25eabdd6b14e8961ee0534f5ab504151f1b2f1853f7229e07131696deb538114d51df2d5c4145bb53d7292e1544c3075806980d5d595528dcf1ce6d4d35470331f00a7bb00e4a1b38982f5dbd2114715a3bd23fa9dbadfe2970853a89d1abb9ae5d4f3bab355691c3ccbbe4bcb2e44425d6c2c3dc3ddd8d43872a6063f111c1c7e6ed4449b39bbd6df92ed4a0e4808ffad0391f89b509f683061bcbe06369e47d43e9", 0x1000, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096})

23.21455693s ago: executing program 1 (id=897):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

23.108994091s ago: executing program 1 (id=899):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="7c008dff00"})

22.86218603s ago: executing program 1 (id=901):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000100))

22.702603831s ago: executing program 34 (id=901):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000100))

4.43028555s ago: executing program 5 (id=1130):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '+'}, @global=@item_4={0x3, 0x1, 0x2}]}}, 0x0}, 0x0)

2.969562498s ago: executing program 4 (id=1144):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c)

2.820279289s ago: executing program 4 (id=1145):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x36, 0x8001, 0xc445, 0x3, 0xfa, 0x4}, 0xc)
listen(r0, 0x80000000)

2.819985582s ago: executing program 4 (id=1146):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002240)={0x10000000})

2.736756448s ago: executing program 4 (id=1148):
syz_open_dev$mouse(&(0x7f0000000700), 0x4, 0x90a41)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x14, 0x4, 0x8, 0x9, 0x23525, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x4}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
io_uring_setup(0xaae, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

1.647725813s ago: executing program 4 (id=1158):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009", @ANYBLOB="04"], 0x0)

1.478680776s ago: executing program 3 (id=1161):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x40)
sendmmsg$inet_sctp(r0, &(0x7f0000000a40)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="02", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x9}, 0x8)

1.377922877s ago: executing program 5 (id=1162):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x4, 0x101, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
socket$kcm(0xa, 0x922000000003, 0x11)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000040)={r4}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r4, 0x1cf, 0x7000, 0x3}, &(0x7f0000000180)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000010000f3ff000000000000000000"], 0x48)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x4b4b, &(0x7f0000000000))
r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="55bd053ab3150d"])
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x69, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})

528.729218ms ago: executing program 3 (id=1163):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@alg={0xe8, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {{'drbg_nopr_ctr_aes192\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

347.96329ms ago: executing program 3 (id=1164):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002480)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)

281.737802ms ago: executing program 4 (id=1165):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x121243, 0x20)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[], 0x2, 0x0)

258.820336ms ago: executing program 5 (id=1166):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x14, 0x0, 0x0})

168.534624ms ago: executing program 3 (id=1167):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
dup2(r1, r0)

168.204084ms ago: executing program 3 (id=1168):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x2)

167.959479ms ago: executing program 5 (id=1169):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0)

65.178423ms ago: executing program 5 (id=1170):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe2d, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)

64.785725ms ago: executing program 3 (id=1171):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0xffff, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0)

0s ago: executing program 5 (id=1172):
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
close_range(r4, 0xffffffffffffffff, 0x2)
dup3(r2, r4, 0x0)

kernel console output (not intermixed with test programs):

xpected cc 0x0c23 length: 249 > 4
[   64.477110][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.615233][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.619419][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.623685][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.632302][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.637279][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.809358][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.956780][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.994789][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.998820][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.002010][ T5847] bridge_slave_0: entered allmulticast mode
[   65.005907][ T5847] bridge_slave_0: entered promiscuous mode
[   65.033442][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.036188][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.039830][ T5847] bridge_slave_1: entered allmulticast mode
[   65.043757][ T5847] bridge_slave_1: entered promiscuous mode
[   65.119677][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.131277][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.194201][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.197243][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.200007][ T5850] bridge_slave_0: entered allmulticast mode
[   65.203851][ T5850] bridge_slave_0: entered promiscuous mode
[   65.226957][ T5847] team0: Port device team_slave_0 added
[   65.229751][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.233397][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.236348][ T5850] bridge_slave_1: entered allmulticast mode
[   65.241043][ T5850] bridge_slave_1: entered promiscuous mode
[   65.252291][ T5847] team0: Port device team_slave_1 added
[   65.314068][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.318578][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.328739][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.337630][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.344071][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.348343][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   65.356954][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.359624][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.369498][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.421512][ T5850] team0: Port device team_slave_0 added
[   65.455603][ T5850] team0: Port device team_slave_1 added
[   65.481524][ T5847] hsr_slave_0: entered promiscuous mode
[   65.484101][ T5847] hsr_slave_1: entered promiscuous mode
[   65.505949][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.509697][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.519806][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.525549][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.528479][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.538500][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.643080][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.646273][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.650082][ T5858] bridge_slave_0: entered allmulticast mode
[   65.653834][ T5858] bridge_slave_0: entered promiscuous mode
[   65.659305][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.662237][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.665154][ T5858] bridge_slave_1: entered allmulticast mode
[   65.670215][ T5858] bridge_slave_1: entered promiscuous mode
[   65.724681][ T5850] hsr_slave_0: entered promiscuous mode
[   65.728123][ T5850] hsr_slave_1: entered promiscuous mode
[   65.730706][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   65.732991][ T5850] Cannot create hsr debugfs directory
[   65.758709][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.793781][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.877663][ T5858] team0: Port device team_slave_0 added
[   65.884074][ T5858] team0: Port device team_slave_1 added
[   65.940027][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.942810][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.952947][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.977322][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.980064][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.997007][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.106226][ T5858] hsr_slave_0: entered promiscuous mode
[   66.109950][ T5858] hsr_slave_1: entered promiscuous mode
[   66.112903][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   66.115194][ T5858] Cannot create hsr debugfs directory
[   66.154804][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.191605][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.213367][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.234696][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.308466][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.315019][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.341844][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.363498][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.466331][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.471279][   T55] Bluetooth: hci0: command tx timeout
[   66.481363][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.490408][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.501966][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.547022][   T55] Bluetooth: hci1: command tx timeout
[   66.599963][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.651288][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.664588][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.667543][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.691488][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.694232][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.708820][   T55] Bluetooth: hci2: command tx timeout
[   66.722915][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.764372][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   66.800982][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.803932][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.811854][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.828155][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.831610][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.873150][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   66.908332][  T903] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.910545][  T903] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.931590][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.934377][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.069818][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.152256][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.160550][ T5847] veth0_vlan: entered promiscuous mode
[   67.176524][ T5847] veth1_vlan: entered promiscuous mode
[   67.192369][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.226121][ T5850] veth0_vlan: entered promiscuous mode
[   67.238755][ T5847] veth0_macvtap: entered promiscuous mode
[   67.244897][ T5850] veth1_vlan: entered promiscuous mode
[   67.254589][ T5847] veth1_macvtap: entered promiscuous mode
[   67.270909][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.290708][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.299510][ T5858] veth0_vlan: entered promiscuous mode
[   67.312616][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.317625][ T5850] veth0_macvtap: entered promiscuous mode
[   67.322382][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.325479][ T5858] veth1_vlan: entered promiscuous mode
[   67.330988][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.342260][ T5850] veth1_macvtap: entered promiscuous mode
[   67.347542][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.392206][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.398098][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.438872][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.453629][ T5858] veth0_macvtap: entered promiscuous mode
[   67.467516][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.470773][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.485186][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.489133][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.493026][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.497694][ T5858] veth1_macvtap: entered promiscuous mode
[   67.533007][  T903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.545369][  T903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.559605][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.572981][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.607056][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.611111][ T3616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.614142][ T3616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.618288][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.623299][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.640101][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.648829][ T5911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.688294][  T903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.691864][  T903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.762094][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.764607][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.807251][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.810021][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.891094][ T5920] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure
[   68.032189][ T5927] IPv4: Oversized IP packet from 127.202.26.0
[   68.552256][   T55] Bluetooth: hci0: command tx timeout
[   68.564649][ T5932] loop1: detected capacity change from 0 to 32768
[   68.589686][ T5932] =======================================================
[   68.589686][ T5932] WARNING: The mand mount option has been deprecated and
[   68.589686][ T5932]          and is ignored by this kernel. Remove the mand
[   68.589686][ T5932]          option from the mount to silence this warning.
[   68.589686][ T5932] =======================================================
[   68.628274][   T55] Bluetooth: hci1: command tx timeout
[   68.689052][ T5932] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   68.734982][ T5932] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   68.762736][ T5911] (kworker/u8:4,5911,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[   68.787095][   T55] Bluetooth: hci2: command tx timeout
[   68.828654][ T5932] (syz.1.9,5932,0):ocfs2_rename:1702 ERROR: status = -39
[   68.911515][ T5850] ocfs2: Unmounting device (7,1) on (node local)
[   68.996980][ T5971] netlink: 15 bytes leftover after parsing attributes in process `syz.2.21'.
[   69.000691][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[   69.087384][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   69.219638][ T5966] loop0: detected capacity change from 0 to 32768
[   69.245690][ T5966] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   69.307884][ T5966] (syz.0.19,5966,0):ocfs2_read_virt_blocks:1007 ERROR: Inode #65 contains a hole at offset 0
[   69.321761][ T5966] (syz.0.19,5966,0):ocfs2_read_dir_block:511 ERROR: status = -5
[   69.356801][ T5966] syz.0.19 (5966) used greatest stack depth: 17960 bytes left
[   69.376956][ T5858] ocfs2: Unmounting device (7,0) on (node local)
[   69.753947][ T6006] mmap: syz.1.33 (6006) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   69.773701][ T6010] loop2: detected capacity change from 0 to 512
[   69.803205][ T6010] EXT4-fs: Ignoring removed oldalloc option
[   69.839371][ T6010] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.36: Parent and EA inode have the same ino 15
[   69.845713][ T6010] EXT4-fs (loop2): 1 orphan inode deleted
[   69.881365][ T6010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.941588][ T6010] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.36: invalid indirect mapped block 234881024 (level 0)
[   69.958221][   T33] audit: type=1800 audit(1756523553.320:2): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="file0" dev="loop2" ino=13 res=0 errno=0
[   70.069015][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.084179][ T6017] Zero length message leads to an empty skb
[   70.519023][ T6026] process 'syz.0.40' launched './file0' with NULL argv: empty string added
[   70.627224][   T55] Bluetooth: hci0: command tx timeout
[   70.706775][   T55] Bluetooth: hci1: command tx timeout
[   70.866965][   T55] Bluetooth: hci2: command tx timeout
[   71.202704][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.205462][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.783209][ T6054] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   71.789993][ T6054] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   71.793175][ T6054] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.54'.
[   72.175615][ T6068] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.57'.
[   72.179539][ T6068] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.57'.
[   72.257774][ T6065] loop0: detected capacity change from 0 to 4096
[   72.292498][ T6065] ntfs3(loop0): ino=b, mi_enum_attr
[   72.297016][ T6065] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   72.308157][ T6065] ntfs3(loop0): Failed to load $Extend (-22).
[   72.310861][ T6065] ntfs3(loop0): Failed to initialize $Extend.
[   72.594261][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'.
[   72.707042][   T55] Bluetooth: hci0: command tx timeout
[   72.800318][   T55] Bluetooth: hci1: command tx timeout
[   72.947535][   T55] Bluetooth: hci2: command tx timeout
[   73.053342][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.062044][ T6086] netlink: 104 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.140788][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.308684][   T24] usb 1-1: Using ep0 maxpacket: 8
[   73.316253][   T24] usb 1-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config
[   73.330698][   T24] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[   73.333843][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.358133][   T24] usb 1-1: config 0 descriptor??
[   73.388254][   T24] usb 1-1: Found UVC 0.00 device <unnamed> (2833:0201)
[   73.398914][   T24] usb 1-1: No valid video chain found.
[   73.472764][ T6098] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.74'.
[   73.585400][   T24] usb 1-1: USB disconnect, device number 2
[   73.838341][   T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.848880][ T6073] loop2: detected capacity change from 0 to 262144
[   73.857309][ T6073] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.62 (6073)
[   73.879444][ T6073] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   73.883543][ T6073] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   73.997069][   T47] usb 2-1: Using ep0 maxpacket: 32
[   74.001806][   T47] usb 2-1: config 0 has an invalid interface number: 43 but max is 1
[   74.004417][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.016489][   T47] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[   74.019409][   T47] usb 2-1: config 0 has no interface number 0
[   74.024519][   T47] usb 2-1: config 0 interface 43 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   74.031126][   T47] usb 2-1: config 0 interface 43 has no altsetting 0
[   74.039215][   T47] usb 2-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a
[   74.042845][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.046240][   T47] usb 2-1: Product: syz
[   74.048304][   T47] usb 2-1: Manufacturer: syz
[   74.050596][   T47] usb 2-1: SerialNumber: syz
[   74.058488][   T47] usb 2-1: config 0 descriptor??
[   74.059557][ T6073] BTRFS info (device loop2): enabling ssd optimizations
[   74.062984][ T6073] BTRFS info (device loop2): using spread ssd allocation scheme
[   74.066155][ T6073] BTRFS info (device loop2): enabling free space tree
[   74.255396][ T5847] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   74.282596][   T47] keyspan_pda 2-1:0.43: required endpoints missing
[   74.296785][   T47] usb 2-1: USB disconnect, device number 2
[   74.878871][ T6128] loop2: detected capacity change from 0 to 32768
[   74.882218][ T6128] XFS: noikeep mount option is deprecated.
[   74.927976][ T6128] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.985695][ T6040] IPVS: starting estimator thread 0...
[   75.056702][ T6128] XFS (loop2): Ending clean mount
[   75.069363][ T6151] loop0: detected capacity change from 0 to 4096
[   75.076906][ T6149] IPVS: using max 45 ests per chain, 108000 per kthread
[   75.090247][ T6128] XFS (loop2): Quotacheck needed: Please wait.
[   75.187938][ T6128] XFS (loop2): Quotacheck: Done.
[   75.307549][ T5847] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.141471][ T6180] bpf: Bad value for 'mode'
[   76.146105][ T6166] loop2: detected capacity change from 0 to 32768
[   76.242554][ T6183] can0: slcan on ptm0.
[   76.490544][   T33] audit: type=1800 audit(1756523559.870:3): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.92" name="file1" dev="loop2" ino=4 res=0 errno=0
[   76.566129][ T6182] can0 (unregistered): slcan off ptm0.
[   76.630237][ T6187] loop1: detected capacity change from 0 to 1024
[   76.669764][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.680660][ T6187] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 16: comm syz.1.103: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1
[   76.711799][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.866694][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.056759][   T10] usb 3-1: Using ep0 maxpacket: 16
[   77.063531][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[   77.069706][   T10] usb 3-1: config 9 has an invalid interface number: 111 but max is 0
[   77.073058][   T10] usb 3-1: config 9 has no interface number 0
[   77.075429][   T10] usb 3-1: config 9 interface 111 has no altsetting 0
[   77.083321][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=2536, bcdDevice=e0.5e
[   77.087489][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.090607][   T10] usb 3-1: Product: syz
[   77.092411][   T10] usb 3-1: Manufacturer: syz
[   77.094465][   T10] usb 3-1: SerialNumber: syz
[   77.133354][ T6203] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   77.326176][   T10] usb 3-1: USB disconnect, device number 2
[   77.774438][   T33] audit: type=1326 audit(1756523561.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.1.111" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473198ebe9 code=0x0
[   77.871758][ T6214] loop2: detected capacity change from 0 to 512
[   77.906263][ T6214] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   77.911447][ T6214] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   77.920413][ T6214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0002]
[   77.925653][ T6214] EXT4-fs (loop2): 1 truncate cleaned up
[   77.929760][ T6214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.961480][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.102811][ T6222] loop2: detected capacity change from 0 to 256
[   78.115134][ T6222] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   78.125336][ T6222] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   78.147274][ T6222] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   78.728486][ T6232] JFS: discard option not supported on device
[   78.733397][ T6232] Mount JFS Failure: -22
[   78.739629][ T6232] jfs_mount failed w/return code = -22
[   79.358515][ T6246] netlink: 'syz.0.126': attribute type 6 has an invalid length.
[   80.091912][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'.
[   80.144459][ T6254] warning: `syz.0.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.200688][ T6252] loop1: detected capacity change from 0 to 32768
[   80.224017][ T6252] (syz.1.125,6252,1):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[   80.224017][ T6252] found = 2, set = 0, taken = 0, off = 0
[   80.231816][ T6252] (syz.1.125,6252,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[   80.235803][ T6252] (syz.1.125,6252,1):ocfs2_check_volume:2404 ERROR: status = -22
[   80.240354][ T6252] (syz.1.125,6252,1):ocfs2_check_volume:2432 ERROR: status = -22
[   80.243535][ T6252] (syz.1.125,6252,1):ocfs2_mount_volume:1764 ERROR: status = -22
[   80.248238][ T6256] loop2: detected capacity change from 0 to 128
[   80.252081][ T6252] (syz.1.125,6252,1):ocfs2_fill_super:1177 ERROR: status = -22
[   80.297416][ T6256] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   80.309118][ T6256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.593684][ T6263] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   81.317869][ T6284] raw_sendmsg: syz.2.142 forgot to set AF_INET. Fix it!
[   81.613412][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'.
[   82.438735][ T6318] loop2: detected capacity change from 0 to 32768
[   82.473924][ T6318] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   82.574797][ T5847] ocfs2: Unmounting device (7,2) on (node local)
[   82.848016][ T6328] loop2: detected capacity change from 0 to 256
[   82.865859][ T6328] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf059ff26, utbl_chksum : 0xe619d30d)
[   83.416376][ T6337] loop2: detected capacity change from 0 to 32768
[   83.421629][ T6337] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.164 (6337)
[   83.443844][ T6337] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   83.448326][ T6337] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   83.545038][ T6337] BTRFS info (device loop2): enabling ssd optimizations
[   83.553985][ T6337] BTRFS info (device loop2): enabling free space tree
[   83.559159][ T5315] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   83.661417][ T5847] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   83.708734][ T5315] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[   83.711155][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   83.714612][ T5315] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   83.740167][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   83.743887][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   83.782057][ T5315] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[   83.784440][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   83.794515][ T5315] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   83.799258][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   83.803588][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   83.819307][ T5315] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[   83.821567][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   83.824714][ T5315] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   83.828726][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   83.835847][ T5315] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   83.851007][ T5315] usb 1-1: string descriptor 0 read error: -22
[   83.854837][ T5315] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   83.858968][ T5315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.884247][ T5315] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   84.352158][   T10] usb 1-1: USB disconnect, device number 3
[   84.933968][ T6391] loop0: detected capacity change from 0 to 1024
[   84.967445][ T6391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.974664][ T6391] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.010328][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.072359][ T6402] netlink: 84 bytes leftover after parsing attributes in process `syz.1.185'.
[   85.076037][ T6402] netlink: 84 bytes leftover after parsing attributes in process `syz.1.185'.
[   85.095701][ T6402] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   85.470750][ T6410] loop0: detected capacity change from 0 to 32768
[   85.742106][ T6426] loop2: detected capacity change from 0 to 1024
[   85.779053][ T6420] loop1: detected capacity change from 0 to 32768
[   85.875236][   T27] hfsplus: b-tree write err: -5, ino 4
[   85.883874][ T6428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.396691][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[   86.474159][ T6453] vlan2: entered promiscuous mode
[   86.483413][ T6453] macvtap0: entered promiscuous mode
[   86.563113][  T792] cfg80211: failed to load regulatory.db
[   86.931286][ T6447] loop2: detected capacity change from 0 to 32768
[   86.995201][ T6447] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   87.059673][ T6447] OCFS2: ERROR (device loop2): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 8, 0)
[   87.101579][ T6447] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   87.131729][ T6447] OCFS2: File system is now read-only.
[   87.141164][ T6447] (syz.2.208,6447,0):ocfs2_seek_data_hole_offset:912 ERROR: status = -30
[   87.281075][ T5847] ocfs2: Unmounting device (7,2) on (node local)
[   87.334033][ T6464] netlink: 'syz.0.215': attribute type 2 has an invalid length.
[   87.815879][ T6471] IPv6: Can't replace route, no match found
[   88.148413][ T6040] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   88.319772][ T6040] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.336511][ T6040] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.342074][ T6040] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.344984][ T6040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.348090][ T6040] usb 1-1: Product: syz
[   88.350077][ T6040] usb 1-1: Manufacturer: syz
[   88.351853][ T6040] usb 1-1: SerialNumber: syz
[   88.621679][ T6040] usb 1-1: 0:2 : does not exist
[   88.635539][ T6040] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   88.674153][ T6040] usb 1-1: USB disconnect, device number 4
[   89.055702][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.453874][ T6503] loop1: detected capacity change from 0 to 1024
[   89.477066][   T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   89.489585][ T6503] hfsplus: failed to load root directory
[   89.638427][ T6040] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   89.649043][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   89.652474][   T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   89.656141][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   89.663757][   T10] usb 3-1: string descriptor 0 read error: -22
[   89.665787][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   89.671008][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.682199][   T10] usb 3-1: 0:2 : does not exist
[   89.705779][ T6512] Bluetooth: MGMT ver 1.23
[   89.800590][ T6040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.811901][ T6040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.815408][ T6040] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   89.826690][ T6040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.834326][ T6040] usb 1-1: config 0 descriptor??
[   89.889962][ T5315] usb 3-1: USB disconnect, device number 3
[   90.224086][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'.
[   90.228972][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'.
[   90.293417][ T6531] netlink: 'syz.1.245': attribute type 1 has an invalid length.
[   90.312364][ T6531] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.321533][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'.
[   90.438450][ T6531] bond2 (unregistering): Released all slaves
[   90.688241][ T6040] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[   90.818735][ T6040] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized
[   90.885956][ T6040] usb 1-1: USB disconnect, device number 5
[   91.113683][ T6538] loop1: detected capacity change from 0 to 40427
[   91.127610][ T6538] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   91.141534][ T6538] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   91.203369][ T6538] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   91.211764][ T6538] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   91.214769][ T6538] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   91.271798][ T5850] syz-executor: attempt to access beyond end of device
[   91.271798][ T5850] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   91.282303][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   91.282316][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.282322][ T5850] Call Trace:
[   91.282333][ T5850]  <TASK>
[   91.282338][ T5850]  dump_stack_lvl+0x189/0x250
[   91.282357][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.282366][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[   91.282377][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   91.282389][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   91.282404][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[   91.282421][ T5850]  f2fs_write_end_io+0x886/0xb60
[   91.282439][ T5850]  __submit_merged_bio+0x27a/0x6a0
[   91.282458][ T5850]  __submit_merged_write_cond+0x255/0x530
[   91.282509][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[   91.282547][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.282607][ T5850]  ? __lock_acquire+0xab9/0xd20
[   91.282632][ T5850]  ? do_raw_spin_lock+0x121/0x290
[   91.282652][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   91.282664][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.282680][ T5850]  do_writepages+0x32e/0x550
[   91.282704][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   91.282720][ T5850]  filemap_fdatawrite+0x199/0x240
[   91.282737][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   91.282779][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   91.282798][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[   91.282818][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[   91.282848][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   91.282884][ T5850]  ? call_rcu+0x6ff/0x9c0
[   91.282904][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.282925][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[   91.282939][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[   91.282959][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[   91.282969][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[   91.282992][ T5850]  ? shrinker_free+0x2ce/0x3e0
[   91.283010][ T5850]  deactivate_locked_super+0xbc/0x130
[   91.283026][ T5850]  cleanup_mnt+0x425/0x4c0
[   91.283042][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.283061][ T5850]  task_work_run+0x1d4/0x260
[   91.283082][ T5850]  ? __pfx_task_work_run+0x10/0x10
[   91.283096][ T5850]  ? __x64_sys_umount+0x122/0x160
[   91.283112][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[   91.283132][ T5850]  exit_to_user_mode_loop+0xec/0x110
[   91.283150][ T5850]  do_syscall_64+0x2bd/0x3b0
[   91.283168][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.283182][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.283194][ T5850]  ? exc_page_fault+0x9f/0xf0
[   91.283212][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.283225][ T5850] RIP: 0033:0x7f473198ff17
[   91.283237][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   91.283246][ T5850] RSP: 002b:00007ffdd5b76348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   91.283257][ T5850] RAX: 0000000000000000 RBX: 00007f4731a11c05 RCX: 00007f473198ff17
[   91.283265][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd5b76400
[   91.283271][ T5850] RBP: 00007ffdd5b76400 R08: 0000000000000000 R09: 0000000000000000
[   91.283278][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd5b77490
[   91.283285][ T5850] R13: 00007f4731a11c05 R14: 0000000000016408 R15: 00007ffdd5b774d0
[   91.283303][ T5850]  </TASK>
[   91.283308][ T5850] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   91.979765][ T6561] loop2: detected capacity change from 0 to 128
[   91.985863][ T6561] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   91.996316][ T6561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.426272][ T6557] loop1: detected capacity change from 0 to 32768
[   92.439598][ T6557] XFS: ikeep mount option is deprecated.
[   92.558701][ T6557] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.840687][ T6557] XFS (loop1): Ending clean mount
[   92.853652][ T6557] XFS (loop1): Quotacheck needed: Please wait.
[   92.913798][ T6557] XFS (loop1): Quotacheck: Done.
[   92.976765][ T6040] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   93.127163][ T6040] usb 1-1: Using ep0 maxpacket: 32
[   93.140944][ T6040] usb 1-1: config 0 has an invalid interface number: 169 but max is 0
[   93.144555][ T6040] usb 1-1: config 0 has no interface number 0
[   93.151543][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   93.159105][ T6040] usb 1-1: config 0 interface 169 has no altsetting 0
[   93.165202][ T6040] usb 1-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[   93.169073][ T6040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.172049][ T6040] usb 1-1: Product: syz
[   93.173665][ T6040] usb 1-1: Manufacturer: syz
[   93.175423][ T6040] usb 1-1: SerialNumber: syz
[   93.203642][ T6040] usb 1-1: config 0 descriptor??
[   93.239839][ T6040] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   93.439692][ T6040] usb 1-1: USB disconnect, device number 6
[   93.575990][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.729841][ T6586] loop1: detected capacity change from 0 to 1024
[   93.733474][ T6586] EXT4-fs: Ignoring removed oldalloc option
[   93.735787][ T6586] EXT4-fs: Ignoring removed bh option
[   93.790797][ T6586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.822110][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.368793][ T6596] openvswitch: netlink: Message has 4 unknown bytes.
[   94.371450][ T6596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.710817][ T6612] openvswitch: netlink: VXLAN extension 2 out of range max 1
[   94.712496][ T6614] loop2: detected capacity change from 0 to 1024
[   94.727133][ T6614] EXT4-fs: Ignoring removed orlov option
[   94.748209][ T6614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.197198][ T6614] loop2: detected capacity change from 1024 to 64
[   95.300504][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.306912][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.311776][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.316137][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.320811][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.325588][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.330504][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.334830][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.341117][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.346947][ T5847] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   95.623051][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.647887][ T6615] kmmpd-loop2: attempt to access beyond end of device
[   95.647887][ T6615] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[   95.653523][ T6615] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[   95.675569][ T5911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.072538][ T5911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.156903][ T5911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.226047][ T5911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.364557][ T5911] bridge_slave_1: left allmulticast mode
[   96.367269][ T5911] bridge_slave_1: left promiscuous mode
[   96.370427][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.382894][ T5911] bridge_slave_0: left allmulticast mode
[   96.395121][ T5911] bridge_slave_0: left promiscuous mode
[   96.409593][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.534074][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.541368][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.555769][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.562198][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.569140][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   97.151742][ T5911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.163649][ T5911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.177784][ T5911] bond0 (unregistering): Released all slaves
[   98.052617][ T5911] hsr_slave_0: left promiscuous mode
[   98.058228][ T5911] hsr_slave_1: left promiscuous mode
[   98.060819][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.063891][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.070148][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.073108][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.113447][ T5911] veth1_macvtap: left promiscuous mode
[   98.124979][ T5911] veth0_macvtap: left promiscuous mode
[   98.127732][ T5911] veth1_vlan: left promiscuous mode
[   98.130042][ T5911] veth0_vlan: left promiscuous mode
[   98.642483][ T5849] Bluetooth: hci0: command tx timeout
[   99.193120][ T5911] team0 (unregistering): Port device team_slave_1 removed
[   99.260087][ T5911] team0 (unregistering): Port device team_slave_0 removed
[   99.973155][ T6642] chnl_net:caif_netlink_parms(): no params data found
[  100.162191][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.164376][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.171173][ T6642] bridge_slave_0: entered allmulticast mode
[  100.173833][ T6642] bridge_slave_0: entered promiscuous mode
[  100.192146][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.194394][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.203815][ T6688] loop0: detected capacity change from 0 to 1024
[  100.206282][ T6642] bridge_slave_1: entered allmulticast mode
[  100.223494][ T6642] bridge_slave_1: entered promiscuous mode
[  100.227138][ T6688] EXT4-fs: Ignoring removed bh option
[  100.270775][ T6688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.370834][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.388409][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.510305][ T6642] team0: Port device team_slave_0 added
[  100.537235][ T6642] team0: Port device team_slave_1 added
[  100.579912][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.582997][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.607553][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.622797][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.625643][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.653340][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.718278][ T5849] Bluetooth: hci0: command tx timeout
[  100.721821][ T6642] hsr_slave_0: entered promiscuous mode
[  100.727298][ T6642] hsr_slave_1: entered promiscuous mode
[  100.828822][ T6684] afs: Unknown parameter 'dynquota'
[  100.921982][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.992809][ T6716] loop0: detected capacity change from 0 to 512
[  101.018414][ T6716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  101.031267][ T6716] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.298: inline data xattr refers to an external xattr inode
[  101.047314][ T6716] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.298: couldn't read orphan inode 17 (err -117)
[  101.059808][ T6716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.107750][ T6642] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  101.114833][ T6642] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  101.121821][ T6642] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  101.131988][ T6642] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  101.204278][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.218795][ T6642] 8021q: adding VLAN 0 to HW filter on device team0
[  101.221835][   T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  101.226719][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.229577][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.267878][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.271271][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.375012][ T6727] trusted_key: encrypted_key: key user:syz not found
[  101.464278][   T24] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  101.474773][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.485903][   T24] usb 2-1: Product: syz
[  101.494354][   T24] usb 2-1: Manufacturer: syz
[  101.503716][   T24] usb 2-1: SerialNumber: syz
[  101.607981][   T24] usb 2-1: config 0 descriptor??
[  101.653780][   T24] comedi comedi5: This driver needs USB 2.0 to operate. Aborting...
[  101.658025][   T24] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  101.814724][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.851804][ T6642] veth0_vlan: entered promiscuous mode
[  101.858851][   T24] usb 2-1: USB disconnect, device number 3
[  101.865573][ T6642] veth1_vlan: entered promiscuous mode
[  101.894182][ T6642] veth0_macvtap: entered promiscuous mode
[  101.899379][ T6642] veth1_macvtap: entered promiscuous mode
[  101.911204][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.946046][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.033771][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.043024][ T6737] netlink: 212 bytes leftover after parsing attributes in process `syz.0.299'.
[  102.074696][ T5911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.111301][ T5911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.145182][ T5911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.155699][ T5911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.417822][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.440079][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.681799][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.702472][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.786787][ T5849] Bluetooth: hci0: command tx timeout
[  103.042697][ T6748] loop3: detected capacity change from 0 to 4096
[  103.137980][ T6749] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.183825][ T6751] netlink: 'syz.1.303': attribute type 1 has an invalid length.
[  103.185477][ T6748] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  103.191328][ T6751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.193516][ T6748] Remounting filesystem read-only
[  103.922322][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'.
[  103.972912][ T6783] loop3: detected capacity change from 0 to 64
[  104.562133][ T6797] loop1: detected capacity change from 0 to 40427
[  104.598038][ T6797] F2FS-fs (loop1): invalid crc value
[  104.656112][   T33] audit: type=1326 audit(1756523588.030:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b53f8ebe9 code=0x7ffc0000
[  104.664996][   T33] audit: type=1326 audit(1756523588.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.328" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f9b53f8ebe9 code=0x7ffc0000
[  104.674020][   T33] audit: type=1326 audit(1756523588.030:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b53f8ebe9 code=0x7ffc0000
[  104.684317][   T33] audit: type=1326 audit(1756523588.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b53f8ebe9 code=0x7ffc0000
[  104.714491][ T6797] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  104.719407][ T6797] F2FS-fs (loop1): Start checkpoint disabled!
[  104.731723][ T6797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  104.739962][ T6815] loop3: detected capacity change from 0 to 1024
[  104.770396][   T33] audit: type=1800 audit(1756523588.150:9): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.322" name="file1" dev="loop1" ino=10 res=0 errno=0
[  104.818298][ T6820] evm: overlay not supported
[  104.876830][ T5849] Bluetooth: hci0: command tx timeout
[  104.907415][ T6822] macvlan0: entered promiscuous mode
[  104.924567][ T6822] bond0: entered promiscuous mode
[  104.926064][ T6822] bond_slave_0: entered promiscuous mode
[  104.960782][ T6822] bond_slave_1: entered promiscuous mode
[  104.978679][ T6822] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  105.003709][ T6822] hsr1: entered allmulticast mode
[  105.005812][ T6822] macvlan0: entered allmulticast mode
[  105.029056][ T6822] veth1_vlan: entered allmulticast mode
[  105.054352][ T6822] bond0: entered allmulticast mode
[  105.152067][ T6827] syz.1.322: attempt to access beyond end of device
[  105.152067][ T6827] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  105.168210][ T6827] syz.1.322: attempt to access beyond end of device
[  105.168210][ T6827] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  105.179482][ T6827] syz.1.322: attempt to access beyond end of device
[  105.179482][ T6827] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  105.189214][ T6827] syz.1.322: attempt to access beyond end of device
[  105.189214][ T6827] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  105.196110][ T6827] syz.1.322: attempt to access beyond end of device
[  105.196110][ T6827] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  105.202257][ T6827] syz.1.322: attempt to access beyond end of device
[  105.202257][ T6827] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  105.207354][ T6827] syz.1.322: attempt to access beyond end of device
[  105.207354][ T6827] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  105.215060][ T6827] syz.1.322: attempt to access beyond end of device
[  105.215060][ T6827] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  105.220312][ T6827] syz.1.322: attempt to access beyond end of device
[  105.220312][ T6827] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  105.226283][ T6827] syz.1.322: attempt to access beyond end of device
[  105.226283][ T6827] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  105.248989][ T6822] bond_slave_0: entered allmulticast mode
[  105.255621][ T6822] bond_slave_1: entered allmulticast mode
[  105.411808][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  105.411823][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.411829][   T36] Workqueue: writeback wb_workfn (flush-7:1)
[  105.411845][   T36] Call Trace:
[  105.411849][   T36]  <TASK>
[  105.411854][   T36]  dump_stack_lvl+0x189/0x250
[  105.411868][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.411878][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  105.411886][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  105.411896][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.411912][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  105.411928][   T36]  f2fs_write_end_io+0x886/0xb60
[  105.411945][   T36]  __submit_merged_bio+0x27a/0x6a0
[  105.411960][   T36]  __submit_merged_write_cond+0x255/0x530
[  105.411974][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  105.412004][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  105.412023][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  105.412049][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  105.412067][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  105.412078][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  105.412091][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  105.412109][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  105.412121][   T36]  do_writepages+0x32e/0x550
[  105.412167][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  105.412177][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  105.412193][   T36]  __writeback_single_inode+0x145/0xff0
[  105.412203][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  105.412215][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  105.412238][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  105.412270][   T36]  ? rcu_is_watching+0x15/0xb0
[  105.412283][   T36]  wb_writeback+0x43b/0xaf0
[  105.412297][   T36]  ? queue_io+0x3a1/0x590
[  105.412309][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  105.412323][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.412335][   T36]  wb_workfn+0x409/0xef0
[  105.412351][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  105.412362][   T36]  ? __lock_acquire+0xab9/0xd20
[  105.412379][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  105.412391][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.412400][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  105.412406][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  105.412414][   T36]  process_scheduled_works+0xae1/0x17b0
[  105.412437][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  105.412453][   T36]  worker_thread+0x8a0/0xda0
[  105.412476][   T36]  kthread+0x711/0x8a0
[  105.412488][   T36]  ? __pfx_worker_thread+0x10/0x10
[  105.412495][   T36]  ? __pfx_kthread+0x10/0x10
[  105.412505][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.412515][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.412526][   T36]  ? __pfx_kthread+0x10/0x10
[  105.412536][   T36]  ret_from_fork+0x3fc/0x770
[  105.412547][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  105.412558][   T36]  ? __switch_to_asm+0x39/0x70
[  105.412568][   T36]  ? __switch_to_asm+0x33/0x70
[  105.412577][   T36]  ? __pfx_kthread+0x10/0x10
[  105.412587][   T36]  ret_from_fork_asm+0x1a/0x30
[  105.412611][   T36]  </TASK>
[  105.412616][   T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  105.552314][ T6835] netlink: 'syz.0.338': attribute type 29 has an invalid length.
[  105.622052][ T6839] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.340'.
[  106.182235][ T6866] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  106.186918][ T5879] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  106.231561][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.236365][ T6868] batadv_slave_0: entered promiscuous mode
[  106.241091][ T6868] batadv_slave_0: entered allmulticast mode
[  106.250012][ T6868] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  106.337326][ T5879] usb 4-1: Using ep0 maxpacket: 32
[  106.349306][ T5879] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  106.353005][ T5879] usb 4-1: config 0 has no interface number 0
[  106.358768][ T5879] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  106.365577][ T5879] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  106.370123][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.373209][ T5879] usb 4-1: Product: syz
[  106.374989][ T5879] usb 4-1: Manufacturer: syz
[  106.378688][ T5879] usb 4-1: SerialNumber: syz
[  106.383179][ T5879] usb 4-1: config 0 descriptor??
[  106.391219][ T5879] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  106.395237][ T5879] em28xx 4-1:0.132: Video interface 132 found:
[  106.753205][ T6887] loop0: detected capacity change from 0 to 1024
[  106.797276][ T5879] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  106.829135][ T6889] syz_tun: entered allmulticast mode
[  106.845982][ T6889] dvmrp1: entered allmulticast mode
[  106.899357][ T6888] syz_tun: left allmulticast mode
[  107.250897][ T6896] hfsplus: invalid extended attribute record
[  107.585595][ T6900] loop1: detected capacity change from 0 to 32768
[  107.592451][ T5879] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  107.602913][ T5879] em28xx 4-1:0.132: board has no eeprom
[  107.643257][ T6900] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  107.663577][ T6900] XFS (loop1): Ending clean mount
[  107.666695][ T5879] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  107.674873][ T5879] em28xx 4-1:0.132: analog set to bulk mode.
[  107.681499][ T6900] XFS (loop1): Quotacheck needed: Please wait.
[  107.687744][  T792] em28xx 4-1:0.132: Registering V4L2 extension
[  107.699381][ T5879] usb 4-1: USB disconnect, device number 2
[  107.707621][ T1092] hfsplus: b-tree write err: -5, ino 8
[  107.708717][ T5879] em28xx 4-1:0.132: Disconnecting em28xx
[  107.753113][ T6900] XFS (loop1): Quotacheck: Done.
[  107.782159][ T6914] loop0: detected capacity change from 0 to 128
[  107.955786][  T792] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  107.959386][  T792] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  107.962180][  T792] em28xx 4-1:0.132: No AC97 audio processor
[  107.972347][  T792] usb 4-1: Decoder not found
[  107.974158][  T792] em28xx 4-1:0.132: failed to create media graph
[  107.977479][  T792] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  107.984805][  T792] em28xx 4-1:0.132: Remote control support is not available for this card.
[  107.993011][ T5879] em28xx 4-1:0.132: Closing input extension
[  108.010544][ T5879] em28xx 4-1:0.132: Freeing device
[  108.236364][ T6922] loop0: detected capacity change from 0 to 512
[  108.284776][ T6922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.305038][ T6922] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.363722][ T6900] syz.1.366 (6900): drop_caches: 2
[  108.385463][ T5850] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.459463][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.893077][ T7013] loop3: detected capacity change from 0 to 256
[  110.921596][ T7013] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  110.930709][ T7014] loop1: detected capacity change from 0 to 256
[  110.945084][ T7014] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.988772][ T7014] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  111.056205][ T7014] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  113.385668][ T7045] loop0: detected capacity change from 0 to 8
[  113.544174][ T7052] Bluetooth: MGMT ver 1.23
[  113.570492][ T7052] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  115.500260][ T7085] loop0: detected capacity change from 0 to 32768
[  115.561859][ T7095] loop1: detected capacity change from 0 to 40427
[  115.574209][ T7095] F2FS-fs (loop1): Image doesn't support compression
[  115.593210][ T7095] F2FS-fs (loop1): build fault injection rate: 690
[  115.593286][ T7085] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  115.622394][ T7095] F2FS-fs (loop1): invalid crc value
[  115.738383][ T5858] (syz-executor,5858,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  115.758940][ T7095] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  115.776586][ T7095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  115.969605][ T7106] loop3: detected capacity change from 0 to 32768
[  115.993727][ T7106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.432 (7106)
[  116.062511][ T7106] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.069654][ T7106] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  116.149259][ T6919] ocfs2: Unmounting device (7,0) on (node local)
[  116.167621][ T7106] BTRFS info (device loop3): enabling ssd optimizations
[  116.174241][ T7106] BTRFS info (device loop3): enabling free space tree
[  116.242991][ T6642] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.785274][ T7137] loop3: detected capacity change from 0 to 4096
[  116.801052][ T7137] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  116.828170][ T7137] ntfs3(loop3): ino=19, mi_enum_attr
[  116.829911][ T7137] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  116.964577][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  116.982231][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  116.985592][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  116.990170][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  116.994609][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  117.264380][ T7138] chnl_net:caif_netlink_parms(): no params data found
[  117.438130][   T33] audit: type=1326 audit(1756523600.820:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.444" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473198ebe9 code=0x0
[  117.467290][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.470172][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.472820][ T7138] bridge_slave_0: entered allmulticast mode
[  117.477042][ T7138] bridge_slave_0: entered promiscuous mode
[  117.481576][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.484448][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.489577][ T7138] bridge_slave_1: entered allmulticast mode
[  117.500949][ T7138] bridge_slave_1: entered promiscuous mode
[  117.537267][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.543684][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.599685][ T7138] team0: Port device team_slave_0 added
[  117.607732][ T7138] team0: Port device team_slave_1 added
[  117.746237][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.748783][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.764452][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.771792][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.774618][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.785849][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.208154][ T7138] hsr_slave_0: entered promiscuous mode
[  118.211487][ T7138] hsr_slave_1: entered promiscuous mode
[  118.214517][ T7138] debugfs: 'hsr0' already exists in 'hsr'
[  118.217592][ T7138] Cannot create hsr debugfs directory
[  118.268049][ T7173] netlink: 'syz.1.451': attribute type 11 has an invalid length.
[  118.271200][ T7173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.451'.
[  118.431411][ T7138] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  118.437291][ T7138] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  118.443650][ T7138] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  118.449773][ T7138] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  118.551703][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.589689][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[  118.592427][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[  118.596937][ T7186] loop3: detected capacity change from 0 to 2048
[  118.605073][ T7138] 8021q: adding VLAN 0 to HW filter on device team0
[  118.620258][ T7186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.628106][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.630438][ T6991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.660086][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.662947][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.679982][ T7189] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[  118.710293][ T7191] loop3: detected capacity change from 0 to 512
[  118.732816][ T7191] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  118.751679][ T7191] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  118.765544][ T7191] EXT4-fs (loop3): 1 truncate cleaned up
[  118.771334][ T7191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.781049][ T7191] EXT4-fs (loop3): shut down requested (1)
[  118.799581][ T6642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.849825][ T7200] loop3: detected capacity change from 0 to 512
[  118.902661][ T7200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.917946][ T7200] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.961186][   T33] audit: type=1804 audit(1756523602.340:11): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.460" name="/newroot/64/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  118.970648][ T7200] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  118.993988][ T7138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.000090][ T7200] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  119.014947][ T7200] EXT4-fs (loop3): This should not happen!! Data will be lost
[  119.014947][ T7200] 
[  119.022148][ T7200] EXT4-fs (loop3): Total free blocks count 0
[  119.027502][ T5851] Bluetooth: hci2: command tx timeout
[  119.034121][ T7200] EXT4-fs (loop3): Free/Dirty block details
[  119.036196][ T7200] EXT4-fs (loop3): free_blocks=65280
[  119.040646][ T7200] EXT4-fs (loop3): dirty_blocks=22
[  119.042473][ T7200] EXT4-fs (loop3): Block reservation details
[  119.050140][ T7200] EXT4-fs (loop3): i_reserved_data_blocks=22
[  119.098274][ T7214] loop1: detected capacity change from 0 to 16
[  119.113498][ T6642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.158623][ T7214] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  119.162745][ T7214] erofs (device loop1): mounted with root inode @ nid 36.
[  119.184113][ T7214] erofs (device loop1): corrupted dir block 0 @ nid 36
[  119.271540][ T7220] @: renamed from vlan0 (while UP)
[  119.361081][ T7138] veth0_vlan: entered promiscuous mode
[  119.370898][ T7138] veth1_vlan: entered promiscuous mode
[  119.470345][ T7224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  119.607786][ T7138] veth0_macvtap: entered promiscuous mode
[  119.614416][ T7138] veth1_macvtap: entered promiscuous mode
[  119.637980][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.649894][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.687925][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.692024][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.720917][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.724531][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.800635][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.803093][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.820989][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.824179][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.862672][ T7231] openvswitch: netlink: Key type 40 is out of range max 32
[  119.970635][ T7237] binder: 7236:7237 unknown command 0
[  119.973681][ T7237] binder: 7236:7237 ioctl c0306201 2000000005c0 returned -22
[  120.680051][ T7253] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.476'.
[  121.052441][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[  121.055724][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[  121.107096][ T5851] Bluetooth: hci2: command tx timeout
[  121.293194][ T7269] loop1: detected capacity change from 0 to 2048
[  121.296756][ T7269] udf: Unknown parameter 'adi|cb'
[  121.457218][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'.
[  121.474896][ T7267] loop3: detected capacity change from 0 to 32768
[  121.482164][ T7277] loop4: detected capacity change from 0 to 16
[  121.506566][ T7277] erofs (device loop4): mounted with root inode @ nid 36.
[  121.568013][ T7267] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  121.568037][ T7267]   allowing incompatible features above 0.0: (unknown version)
[  121.568045][ T7267]   features: 
[  121.582003][ T7267] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  121.585364][ T7267] bcachefs (loop3): initializing new filesystem
[  121.597346][ T7267] bcachefs (loop3): going read-write
[  121.744245][ T7267] bcachefs (loop3): marking superblocks
[  121.761402][ T7267] bcachefs (loop3): initializing freespace
[  121.765468][ T7267] bcachefs (loop3): done initializing freespace
[  121.770219][ T7267] bcachefs (loop3): reading snapshots table
[  121.772242][ T7267] bcachefs (loop3): reading snapshots done
[  122.028238][ T7267] bcachefs (loop3): done starting filesystem
[  122.056258][ T7292] ceph: No mds server is up or the cluster is laggy
[  122.063315][   T24] libceph: connect (1)[c::]:6789 error -101
[  122.066221][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  122.145348][ T7301] program syz.4.490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.365038][ T7267] syz.3.483 (7267) used greatest stack depth: 15384 bytes left
[  122.440940][ T6642] bcachefs (loop3): shutting down
[  122.443642][ T6642] bcachefs (loop3): going read-only
[  122.449608][ T6642] bcachefs (loop3): finished waiting for writes to stop
[  122.460441][ T6642] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  122.614102][ T6642] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  122.635704][ T6642] bcachefs (loop3): clean shutdown complete, journal seq 4
[  122.646639][ T6642] bcachefs (loop3): marking filesystem clean
[  122.772051][ T6642] bcachefs (loop3): shutdown complete
[  123.186655][ T5851] Bluetooth: hci2: command tx timeout
[  123.686544][ T7308] loop1: detected capacity change from 0 to 32768
[  123.771488][ T7308] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  123.819991][ T7308] (syz.1.493,7308,0):ocfs2_verify_group_and_input:433 ERROR: the add group should be in chain 1
[  123.824079][ T7308] (syz.1.493,7308,0):ocfs2_group_add:511 ERROR: status = -22
[  123.900698][ T5850] ocfs2: Unmounting device (7,1) on (node local)
[  124.282651][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'.
[  124.526755][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  124.617319][ T7344] syz.1.508 uses obsolete (PF_INET,SOCK_PACKET)
[  124.680303][ T5879] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  124.683744][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.695188][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  124.702368][ T5879] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.713207][ T5879] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  124.718597][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  124.723466][ T5879] usb 5-1: Product: syz
[  124.726046][ T5879] usb 5-1: Manufacturer: syz
[  124.739229][ T5879] cdc_wdm 5-1:1.0: skipping garbage
[  124.741302][ T5879] cdc_wdm 5-1:1.0: skipping garbage
[  124.743916][ T5879] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  124.832215][ T7353] loop1: detected capacity change from 0 to 1764
[  124.868218][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'.
[  124.945511][   T24] usb 5-1: USB disconnect, device number 2
[  125.003192][ T7361] loop1: detected capacity change from 0 to 512
[  125.016200][ T7361] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.516: corrupted in-inode xattr: invalid ea_ino
[  125.029156][ T7361] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.516: couldn't read orphan inode 15 (err -117)
[  125.048135][ T7361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.111195][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.268587][ T5849] Bluetooth: hci2: command tx timeout
[  125.338676][   T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  125.455591][ T7374] loop1: detected capacity change from 0 to 32768
[  125.464998][ T7374] bcachefs: bch2_fs_parse_param() Error parsing option background_compression: option_value
[  125.508893][   T47] usb 4-1: Using ep0 maxpacket: 8
[  125.541110][   T47] usb 4-1: unable to get BOS descriptor or descriptor too short
[  125.545231][   T47] usb 4-1: config 2 has an invalid interface number: 164 but max is 0
[  125.550454][   T47] usb 4-1: config 2 has no interface number 0
[  125.552970][   T47] usb 4-1: config 2 interface 164 has no altsetting 0
[  125.559173][ T7378] netlink: 'syz.4.522': attribute type 8 has an invalid length.
[  125.562050][ T7378] netem: change failed
[  125.571624][   T47] usb 4-1: New USB device found, idVendor=0424, idProduct=9730, bcdDevice=50.16
[  125.575090][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.586642][   T47] usb 4-1: Product: syz
[  125.588327][   T47] usb 4-1: Manufacturer: syz
[  125.590312][   T47] usb 4-1: SerialNumber: syz
[  125.811893][   T47] smsc95xx v2.0.0
[  125.813444][   T47] smsc95xx 4-1:2.164 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  125.827606][   T47] smsc95xx 4-1:2.164: probe with driver smsc95xx failed with error -22
[  125.850434][   T47] usb 4-1: USB disconnect, device number 3
[  125.972953][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888116256400: rx timeout, send abort
[  126.155769][ T7399] loop4: detected capacity change from 0 to 32768
[  126.477814][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888116256400: abort rx timeout. Force session deactivation
[  126.856925][   T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.042911][   T47] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  127.054279][   T47] usb 5-1: config 0 has no interface number 0
[  127.062249][   T47] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  127.074986][   T47] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  127.087650][   T47] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  127.102000][   T47] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  127.106074][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.126847][   T47] usb 5-1: config 0 descriptor??
[  127.148767][   T47] gspca_main: spca561-2.14.0 probing abcd:cdee
[  127.346917][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  127.357437][   T47] spca561 5-1:0.156: probe with driver spca561 failed with error -22
[  127.366541][   T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  127.369507][   T47] usb 5-1: MIDIStreaming interface descriptor not found
[  127.627770][   T47] usb 5-1: USB disconnect, device number 3
[  128.381592][ T7443] loop4: detected capacity change from 0 to 1024
[  129.101373][ T7457] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.556'.
[  129.506861][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'.
[  129.548676][ T7484] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  129.972976][ T7492] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  129.975805][ T7492] macvtap1: entered allmulticast mode
[  129.977730][ T7492] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  129.988308][ T7492] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  129.990622][ T7492] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  130.001081][ T7493] loop1: detected capacity change from 0 to 512
[  130.042406][ T7493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  130.168565][ T7493] EXT4-fs (loop1): 1 truncate cleaned up
[  130.171243][ T7493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.226677][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  130.376969][   T10] usb 5-1: Using ep0 maxpacket: 16
[  130.384760][   T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  130.394555][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.400123][   T10] usb 5-1: config 0 has no interface number 0
[  130.404494][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  130.410753][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.416562][   T10] usb 5-1: Product: syz
[  130.419836][   T10] usb 5-1: Manufacturer: syz
[  130.423632][   T10] usb 5-1: SerialNumber: syz
[  130.429641][   T10] usb 5-1: config 0 descriptor??
[  130.435647][   T10] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  130.438830][   T10] usb 5-1: No valid video chain found.
[  130.572316][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.670100][   T10] usb 5-1: USB disconnect, device number 4
[  130.762053][ T7519] virtio-fs: tag </dev/md0> not found
[  130.936637][   T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  130.974087][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'.
[  130.977960][ T7531] netlink: 31 bytes leftover after parsing attributes in process `syz.3.590'.
[  131.086619][   T47] usb 2-1: Using ep0 maxpacket: 32
[  131.090501][   T47] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  131.093805][   T47] usb 2-1: config 0 has no interface number 0
[  131.096182][   T47] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  131.109384][   T47] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  131.112950][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.125242][   T47] usb 2-1: Product: syz
[  131.127936][   T47] usb 2-1: Manufacturer: syz
[  131.130416][   T47] usb 2-1: SerialNumber: syz
[  131.136118][   T47] usb 2-1: config 0 descriptor??
[  131.146357][   T47] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  131.166596][   T47] em28xx 2-1:0.132: Video interface 132 found:
[  131.191733][ T7535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.503125][ T7537] loop4: detected capacity change from 0 to 32768
[  131.530929][ T7537] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  131.530929][ T7537] 
[  131.538739][ T7537] ERROR: (device loop4): remounting filesystem as read-only
[  131.563401][   T47] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  131.748548][ T7548] loop4: detected capacity change from 0 to 256
[  131.769771][ T7548] FAT-fs (loop4): Directory bread(block 64) failed
[  131.772071][ T7548] FAT-fs (loop4): Directory bread(block 65) failed
[  131.774142][ T7548] FAT-fs (loop4): Directory bread(block 66) failed
[  131.776173][ T7548] FAT-fs (loop4): Directory bread(block 67) failed
[  131.781514][ T7548] FAT-fs (loop4): Directory bread(block 68) failed
[  131.783508][ T7548] FAT-fs (loop4): Directory bread(block 69) failed
[  131.785497][ T7548] FAT-fs (loop4): Directory bread(block 70) failed
[  131.788885][ T7548] FAT-fs (loop4): Directory bread(block 71) failed
[  131.791879][ T7548] FAT-fs (loop4): Directory bread(block 72) failed
[  131.794310][ T7548] FAT-fs (loop4): Directory bread(block 73) failed
[  132.104993][   T47] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  132.110356][   T47] em28xx 2-1:0.132: board has no eeprom
[  132.197272][   T47] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  132.200643][   T47] em28xx 2-1:0.132: analog set to bulk mode.
[  132.203104][   T24] em28xx 2-1:0.132: Registering V4L2 extension
[  132.344826][   T47] usb 2-1: USB disconnect, device number 4
[  132.542801][   T47] em28xx 2-1:0.132: Disconnecting em28xx
[  132.608407][ T7565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.604'.
[  132.612295][   T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  132.620228][   T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  132.623200][   T24] em28xx 2-1:0.132: No AC97 audio processor
[  132.638473][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.639473][   T24] usb 2-1: Decoder not found
[  132.640789][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.645400][   T24] em28xx 2-1:0.132: failed to create media graph
[  132.648722][   T24] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  132.665038][   T24] em28xx 2-1:0.132: Remote control support is not available for this card.
[  132.669405][   T47] em28xx 2-1:0.132: Closing input extension
[  132.682272][   T47] em28xx 2-1:0.132: Freeing device
[  132.962870][ T7579] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253
[  132.965799][ T7579] PKCS7: Only support pkcs7_signedData type
[  133.038752][ T7585] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.613'.
[  133.240930][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'.
[  133.244301][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'.
[  133.463625][   T33] audit: type=1326 audit(1756523872.842:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.1.630" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473198ebe9 code=0x0
[  133.504476][ T7623] openvswitch: netlink: IP tunnel dst address not specified
[  133.646313][   T33] audit: type=1326 audit(1756523873.022:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.3.634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fbd8ebe9 code=0x7ffc0000
[  133.658689][   T33] audit: type=1326 audit(1756523873.032:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.3.634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fbd8ebe9 code=0x7ffc0000
[  133.678011][   T33] audit: type=1326 audit(1756523873.032:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.3.634" exe="/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f97fbd8ebe9 code=0x7ffc0000
[  133.702416][   T33] audit: type=1326 audit(1756523873.042:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.3.634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fbd8ebe9 code=0x7ffc0000
[  133.711424][   T33] audit: type=1326 audit(1756523873.042:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.3.634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fbd8ebe9 code=0x7ffc0000
[  134.026776][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  134.074681][ T7657] loop4: detected capacity change from 0 to 1024
[  134.123128][ T7657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.162988][ T7138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.198210][   T10] usb 2-1: Using ep0 maxpacket: 32
[  134.212868][   T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  134.216027][   T10] usb 2-1: config 0 has no interface number 0
[  134.226941][   T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.231266][   T10] usb 2-1: config 0 interface 85 has no altsetting 0
[  134.250344][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  134.254503][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.265315][   T10] usb 2-1: Product: syz
[  134.270610][   T10] usb 2-1: Manufacturer: syz
[  134.272321][   T10] usb 2-1: SerialNumber: syz
[  134.283506][   T10] usb 2-1: config 0 descriptor??
[  134.898187][   T10] appletouch 2-1:0.85: Geyser mode initialized.
[  134.903706][   T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5
[  135.106257][   T10] usb 2-1: USB disconnect, device number 5
[  135.130038][   T10] appletouch 2-1:0.85: input: appletouch disconnected
[  135.386165][ T7699] netlink: 277 bytes leftover after parsing attributes in process `syz.3.661'.
[  135.417632][ T7701] 9pnet_fd: Insufficient options for proto=fd
[  135.422659][ T7693] loop4: detected capacity change from 0 to 32768
[  135.462579][ T7693] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.494403][ T7693] XFS (loop4): Ending clean mount
[  135.499229][ T7693] XFS (loop4): Quotacheck needed: Please wait.
[  135.532740][ T7693] XFS (loop4): Quotacheck: Done.
[  135.570529][ T7138] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.096364][ T7717] loop4: detected capacity change from 0 to 32768
[  136.158056][ T7717] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.192504][ T7717] XFS (loop4): Ending clean mount
[  136.246573][ T7138] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.292604][ T7761] netlink: 'syz.1.681': attribute type 11 has an invalid length.
[  137.342100][ T7764] fuse: Bad value for 'fd'
[  137.417058][   T10] IPVS: starting estimator thread 0...
[  137.516899][ T7769] IPVS: using max 43 ests per chain, 103200 per kthread
[  137.845202][ T5911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.963780][ T5911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.045278][ T5911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.079777][   T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  138.160123][ T5911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.273905][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  138.286662][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.295586][   T24] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  138.306330][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.331853][   T24] usb 2-1: config 0 descriptor??
[  138.363873][   T24] usbhid 2-1:0.0: can't add hid device: -22
[  138.374699][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  138.533206][ T5911] bridge_slave_1: left allmulticast mode
[  138.535981][ T5911] bridge_slave_1: left promiscuous mode
[  138.538529][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.559302][ T5911] bridge_slave_0: left allmulticast mode
[  138.561257][ T5911] bridge_slave_0: left promiscuous mode
[  138.568285][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.609558][   T47] usb 2-1: USB disconnect, device number 6
[  139.077011][ T5911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.083407][ T5911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.089162][ T5911] bond0 (unregistering): Released all slaves
[  139.323670][ T7797] loop4: detected capacity change from 0 to 512
[  139.335535][ T7797] EXT4-fs: Ignoring removed nobh option
[  139.367885][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.419907][ T7797] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.694: iget: bad i_size value: 15393162788874
[  139.464270][ T5849] Bluetooth: hci2: unexpected event for opcode 0x0c7d
[  139.543707][ T7138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.854407][ T5911] hsr_slave_0: left promiscuous mode
[  139.867708][ T5911] hsr_slave_1: left promiscuous mode
[  139.869800][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.872122][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.912620][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.915289][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.974204][ T5911] veth1_macvtap: left promiscuous mode
[  139.976331][ T5911] veth0_macvtap: left promiscuous mode
[  140.000489][ T5911] veth1_vlan: left promiscuous mode
[  140.002241][ T5911] veth0_vlan: left promiscuous mode
[  140.068449][ T7840] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  140.456055][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'.
[  140.565729][ T7856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.904450][ T5911] team0 (unregistering): Port device team_slave_1 removed
[  140.938887][ T5911] team0 (unregistering): Port device team_slave_0 removed
[  141.409928][ T7870] netlink: 'syz.4.723': attribute type 3 has an invalid length.
[  141.790949][ T5911] IPVS: stop unused estimator thread 0...
[  142.482174][ T7916] tipc: Started in network mode
[  142.484259][ T7916] tipc: Node identity 4, cluster identity 4711
[  142.493431][ T7916] tipc: Node number set to 4
[  143.333601][ T7937] loop1: detected capacity change from 0 to 256
[  143.507612][ T5849] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  143.511065][ T5849] Bluetooth: hci2: Injecting HCI hardware error event
[  143.518068][ T5851] Bluetooth: hci2: hardware error 0x00
[  143.643973][ T7945] netlink: 35 bytes leftover after parsing attributes in process `syz.3.748'.
[  143.651424][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.748'.
[  143.866072][ T7968] loop4: detected capacity change from 0 to 24
[  143.871421][ T7968] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  143.891787][ T7968] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  143.920241][ T7968] romfs: read error for inode 0x70040
[  144.021088][ T5879] kernel write not supported for file bpf-prog (pid: 5879 comm: kworker/0:4)
[  144.154768][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'.
[  144.161152][ T7989] loop1: detected capacity change from 0 to 128
[  144.164211][ T7989] EXT4-fs: Ignoring removed nobh option
[  144.222443][ T7989] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.238884][ T7989] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  144.339046][ T7998] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  144.342560][ T5911] bond0: (slave bond_slave_0): interface is now down
[  144.344856][ T5911] bond0: (slave bond_slave_1): interface is now down
[  144.354930][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.377992][ T5911] bond0: (slave bond_slave_0): interface is now down
[  144.380627][ T5911] bond0: (slave bond_slave_1): interface is now down
[  144.385343][ T5911] bond0: now running without any active interface!
[  144.450031][ T8002] netlink: 52 bytes leftover after parsing attributes in process `syz.4.774'.
[  144.453620][ T8002] netlink: 'syz.4.774': attribute type 1 has an invalid length.
[  144.502752][ T8006] loop1: detected capacity change from 0 to 2048
[  144.518875][ T8006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.535101][   T33] audit: type=1804 audit(1756523883.912:18): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.776" name="/newroot/277/file0/bus" dev="loop1" ino=1436 res=1 errno=0
[  144.551567][   T33] audit: type=1804 audit(1756523883.922:19): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.776" name="/newroot/277/file0/bus" dev="loop1" ino=1436 res=1 errno=0
[  145.049606][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  145.068041][ T8023] loop1: detected capacity change from 0 to 2048
[  145.087548][ T8024] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.222649][   T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  145.225942][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.234285][   T24] usb 5-1: config 0 descriptor??
[  145.246111][   T24] pwc: Creative Labs Webcam Pro Ex detected.
[  145.550991][   T24] pwc: Failed to set LED on/off time (-71)
[  145.558611][   T24] pwc: send_video_command error -71
[  145.560631][   T24] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  145.564067][   T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  145.570644][   T24] usb 5-1: USB disconnect, device number 5
[  145.626775][ T5851] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  146.120715][ T8039] overlayfs: empty lowerdir
[  146.425048][ T8049] : entered promiscuous mode
[  146.517668][ T8056] tmpfs: Bad value for 'mpol'
[  146.557511][ T8053] loop1: detected capacity change from 0 to 4096
[  147.802215][ T8084] netlink: 188 bytes leftover after parsing attributes in process `syz.1.810'.
[  148.088644][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.818'.
[  148.388510][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  148.550467][   T10] usb 5-1: Using ep0 maxpacket: 8
[  148.560458][   T10] usb 5-1: config 162 has an invalid interface number: 97 but max is 0
[  148.567414][   T10] usb 5-1: config 162 has no interface number 0
[  148.569942][   T10] usb 5-1: config 162 interface 97 has no altsetting 0
[  148.574958][   T10] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  148.583719][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.587461][   T10] usb 5-1: Product: syz
[  148.589106][   T10] usb 5-1: Manufacturer: syz
[  148.591256][   T10] usb 5-1: SerialNumber: syz
[  148.820300][   T10] metro_usb 5-1:162.97: interrupt-out endpoint missing
[  148.838224][   T10] usb 5-1: USB disconnect, device number 6
[  148.890931][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'.
[  148.894526][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'.
[  149.251332][ T8176] netlink: 256 bytes leftover after parsing attributes in process `syz.3.852'.
[  149.401673][ T8180] netlink: 'syz.4.854': attribute type 1 has an invalid length.
[  149.404872][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'.
[  149.514369][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'.
[  149.580655][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'.
[  150.443826][ T8193] loop4: detected capacity change from 0 to 128
[  150.463711][ T8193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  150.466381][ T8193] System zones: 1-3, 19-19, 35-36
[  150.480383][ T8193] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  150.489535][ T8193] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  150.549508][ T7138] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.658489][ T8207] loop4: detected capacity change from 0 to 512
[  150.898880][ T8207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.903715][ T8207] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.921036][ T8207] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.865: iget: bad i_size value: 2533274857506816
[  150.944067][ T7138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.652451][ T8245] netlink: 'syz.1.879': attribute type 4 has an invalid length.
[  152.143122][ T8263] syz_tun: entered allmulticast mode
[  152.150562][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'.
[  152.179389][ T8263] syz_tun (unregistering): left allmulticast mode
[  152.383123][ T8274] loop4: detected capacity change from 0 to 512
[  152.401366][ T8274] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  152.404760][ T8274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  152.408446][ T8274] System zones: 0-1, 15-15, 18-18, 34-34
[  152.411115][ T8274] EXT4-fs (loop4): orphan cleanup on readonly fs
[  152.413879][ T8274] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  152.418407][ T8274] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  152.424317][ T8274] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  152.429576][ T8274] EXT4-fs (loop4): 1 truncate cleaned up
[  152.433248][ T8274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  152.449811][ T8274] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  152.453678][ T8274] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  152.479276][ T7138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.688826][ T8282] netlink: 'syz.4.895': attribute type 10 has an invalid length.
[  152.699285][ T8282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.709491][ T5871] bond0: (slave batadv0): interface is now down
[  152.712240][ T8282] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  152.728167][   T12] bond0: (slave batadv0): interface is now down
[  152.736187][   T12] bond0: now running without any active interface!
[  153.101709][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.107977][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  153.195490][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.277946][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  153.280540][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  153.294584][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.321320][   T10] usb 5-1: config 0 descriptor??
[  153.361877][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.509648][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.743525][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.752107][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.753432][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'.
[  153.760777][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.770429][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.775571][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.969167][   T12] bridge_slave_1: left allmulticast mode
[  153.976698][   T12] bridge_slave_1: left promiscuous mode
[  153.980657][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.992074][   T12] bridge_slave_0: left allmulticast mode
[  153.994355][   T12] bridge_slave_0: left promiscuous mode
[  153.999637][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.033746][ T8318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.908'.
[  154.321790][   T12] dvmrp1 (unregistering): left allmulticast mode
[  154.354055][   T10] video4linux radio48: keene_cmd_set failed (-71)
[  154.357679][   T10] radio-keene 5-1:0.0: V4L2 device registered as radio48
[  154.361331][   T10] usb 5-1: USB disconnect, device number 7
[  154.747635][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.755949][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.764585][   T12] bond0 (unregistering): Released all slaves
[  154.778956][   T12] bond1 (unregistering): Released all slaves
[  155.029810][ T8335] loop4: detected capacity change from 0 to 128
[  155.218549][   T24] IPVS: starting estimator thread 0...
[  155.306703][ T8347] IPVS: using max 63 ests per chain, 151200 per kthread
[  155.404009][   T12] hsr_slave_0: left promiscuous mode
[  155.438643][   T12] hsr_slave_1: left promiscuous mode
[  155.445578][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.451472][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.454242][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.483259][   T12] veth1_macvtap: left promiscuous mode
[  155.485228][   T12] veth0_macvtap: left promiscuous mode
[  155.488968][   T12] veth1_vlan: left promiscuous mode
[  155.491072][   T12] veth0_vlan: left promiscuous mode
[  155.838277][ T5851] Bluetooth: hci1: command tx timeout
[  156.257500][   T12] team0 (unregistering): Port device team_slave_1 removed
[  156.301490][   T12] team0 (unregistering): Port device team_slave_0 removed
[  156.902984][ T8309] chnl_net:caif_netlink_parms(): no params data found
[  157.037955][ T8309] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.040620][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.042941][ T8309] bridge_slave_0: entered allmulticast mode
[  157.059180][ T8309] bridge_slave_0: entered promiscuous mode
[  157.074091][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.077446][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.086582][ T8309] bridge_slave_1: entered allmulticast mode
[  157.089440][ T8309] bridge_slave_1: entered promiscuous mode
[  157.173775][ T8309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.205298][ T8309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.210481][   T12] IPVS: stop unused estimator thread 0...
[  157.267720][ T8309] team0: Port device team_slave_0 added
[  157.271629][ T8309] team0: Port device team_slave_1 added
[  157.328594][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.330867][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.344490][ T8309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.354919][ T8395] loop4: detected capacity change from 0 to 4096
[  157.359640][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.362629][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.383611][ T8309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.396706][ T8395] EXT4-fs (loop4): Test dummy encryption mode enabled
[  157.418972][ T8395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.670202][ T8395] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  157.823379][ T8309] hsr_slave_0: entered promiscuous mode
[  157.831620][ T8309] hsr_slave_1: entered promiscuous mode
[  157.836412][ T8309] debugfs: 'hsr0' already exists in 'hsr'
[  157.840709][ T8309] Cannot create hsr debugfs directory
[  157.890311][ T7138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.909692][ T5851] Bluetooth: hci1: command tx timeout
[  158.123165][ T8418] netlink: 176 bytes leftover after parsing attributes in process `syz.4.936'.
[  158.128983][ T8418] netlink: 176 bytes leftover after parsing attributes in process `syz.4.936'.
[  158.220698][ T8309] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  158.242948][ T8309] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  158.248403][ T8309] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  158.253068][ T8309] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  158.274291][ T8424] tipc: Started in network mode
[  158.280485][ T8424] tipc: Node identity ac14140f, cluster identity 4711
[  158.283824][ T8424] tipc: New replicast peer: 255.255.255.255
[  158.294683][ T8424] tipc: Enabled bearer <udp:syz2>, priority 10
[  158.493224][ T8309] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.523588][ T8309] 8021q: adding VLAN 0 to HW filter on device team0
[  158.542998][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.545511][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.573998][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.576725][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.669182][ T8309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.753215][ T8462] loop4: detected capacity change from 0 to 128
[  158.840306][ T8309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.864870][ T8462] bio_check_eod: 176 callbacks suppressed
[  158.864900][ T8462] syz.4.948: attempt to access beyond end of device
[  158.864900][ T8462] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128
[  158.891954][ T8462] syz.4.948: attempt to access beyond end of device
[  158.891954][ T8462] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128
[  158.913142][ T8469] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.950'.
[  158.917274][ T8462] syz.4.948: attempt to access beyond end of device
[  158.917274][ T8462] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128
[  158.940155][ T8462] syz.4.948: attempt to access beyond end of device
[  158.940155][ T8462] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128
[  158.954968][ T8462] syz.4.948: attempt to access beyond end of device
[  158.954968][ T8462] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[  158.979673][ T8462] syz.4.948: attempt to access beyond end of device
[  158.979673][ T8462] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[  158.986757][ T8462] syz.4.948: attempt to access beyond end of device
[  158.986757][ T8462] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[  159.125928][ T8483] netlink: 204 bytes leftover after parsing attributes in process `syz.3.953'.
[  159.132974][ T8309] veth0_vlan: entered promiscuous mode
[  159.139522][ T8481] loop4: detected capacity change from 0 to 1024
[  159.167746][ T8309] veth1_vlan: entered promiscuous mode
[  159.180494][ T8481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.208768][ T8309] veth0_macvtap: entered promiscuous mode
[  159.215695][ T8309] veth1_macvtap: entered promiscuous mode
[  159.218546][ T7138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.245234][ T8309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.274508][ T8309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.306714][ T5911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.310140][ T5911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.349606][ T5911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.353679][ T5911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.419985][ T5879] tipc: Node number set to 2886997007
[  159.532371][  T903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.534038][ T8498] Device name not specified.
[  159.534038][ T8498] 
[  159.535437][  T903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.606644][  T903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.615963][  T903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.811183][ T8508] loop4: detected capacity change from 0 to 4096
[  159.836371][ T8508] EXT4-fs (loop4): Test dummy encryption mode enabled
[  159.846275][ T8514] binder: 8512:8514 ioctl c0306201 200000000080 returned -14
[  159.860699][ T8508] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  159.868338][ T8508] System zones: 0-5
[  159.882523][ T8508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.967809][ T8508] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  160.018685][ T5851] Bluetooth: hci1: command tx timeout
[  160.183128][ T7138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.049891][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.974'.
[  161.069515][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.974'.
[  161.072833][ T8540] netlink: 'syz.5.974': attribute type 5 has an invalid length.
[  161.878303][ T8559] netlink: 277 bytes leftover after parsing attributes in process `syz.5.980'.
[  162.066858][ T5851] Bluetooth: hci1: command tx timeout
[  163.691740][ T8601] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  163.765830][ T8605] capability: warning: `syz.4.1000' uses 32-bit capabilities (legacy support in use)
[  164.405660][ T8646] loop5: detected capacity change from 0 to 512
[  164.436003][ T8648] overlayfs: failed to clone upperpath
[  164.474209][ T8646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  164.504672][ T8646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.537444][ T8646] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.610548][ T8309] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.682390][ T8666] netlink: 'syz.5.1028': attribute type 10 has an invalid length.
[  164.688825][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.692312][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.714491][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.717146][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.719746][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.722539][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.752382][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1028'.
[  164.764459][ T8666] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  164.777901][ T8670] bridge_slave_1: left allmulticast mode
[  164.784716][ T8670] bridge_slave_1: left promiscuous mode
[  164.795132][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.818547][ T8670] bridge_slave_0: left allmulticast mode
[  164.820944][ T8670] bridge_slave_0: left promiscuous mode
[  164.823381][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.868487][ T8670] bond0: (slave bridge0): Releasing backup interface
[  165.015179][ T8668] loop4: detected capacity change from 0 to 40427
[  165.087942][ T8668] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  165.095492][ T8668] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  165.136144][ T8668] F2FS-fs (loop4): invalid crc value
[  165.242774][ T8687] delete_channel: no stack
[  165.411921][ T8668] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.416159][ T8668] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  165.416891][ T8668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  165.815790][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'.
[  165.819720][ T8701] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1038'.
[  166.156527][  T792] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  166.290152][ T8729] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  166.306983][  T792] usb 5-1: Using ep0 maxpacket: 16
[  166.310457][  T792] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  166.313770][  T792] usb 5-1: config 0 interface 0 has no altsetting 0
[  166.319481][  T792] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  166.323356][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.339666][  T792] usb 5-1: config 0 descriptor??
[  167.002844][  T792] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.06 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  167.030435][ T8749] loop5: detected capacity change from 0 to 64
[  167.081448][  T792] usb 5-1: USB disconnect, device number 8
[  167.112574][ T8309] Trying to free block not in datazone
[  167.122603][ T8309] Trying to free block not in datazone
[  167.135995][ T8309] Trying to free block not in datazone
[  167.138864][ T8309] Trying to free block not in datazone
[  167.141000][ T8309] Trying to free block not in datazone
[  167.143258][ T8309] Trying to free block not in datazone
[  167.145379][ T8309] Trying to free block not in datazone
[  167.149003][ T8309] Trying to free block not in datazone
[  167.152662][ T8309] Trying to free block not in datazone
[  167.154986][ T8309] Trying to free block not in datazone
[  167.157222][ T8309] Trying to free block not in datazone
[  167.159353][ T8309] Trying to free block not in datazone
[  167.161434][ T8309] Trying to free block not in datazone
[  167.166651][ T8309] Trying to free block not in datazone
[  167.561732][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'.
[  167.864650][ T8780] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1077'.
[  168.197764][ T8782] loop4: detected capacity change from 0 to 32768
[  168.247755][ T8782] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.263111][ T8782] XFS (loop4): Ending clean mount
[  168.293947][ T7138] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.422736][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'.
[  168.560766][ T8809] loop4: detected capacity change from 0 to 2048
[  168.579522][ T8809] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.730467][ T8817] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1092'.
[  168.733412][ T8817] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1092'.
[  168.986575][ T2318] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  169.138379][ T2318] usb 5-1: Using ep0 maxpacket: 32
[  169.142395][ T2318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.148529][ T2318] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  169.152375][ T2318] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  169.158886][ T2318] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  169.162929][ T2318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  169.166056][ T2318] usb 5-1: SerialNumber: syz
[  169.173504][ T8819] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  169.179744][ T2318] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  169.387739][ T2318] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  169.398516][ T2318] usb 5-1: USB disconnect, device number 9
[  170.101080][ T8852] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1106'.
[  170.471781][ T8873] loop4: detected capacity change from 0 to 8192
[  170.536235][ T8873] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  170.540522][ T8873] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  170.544062][ T8873]  loop4: unable to read partition table
[  170.546851][ T8873] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  170.558528][ T5297] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  170.562448][ T5297] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  170.565863][ T5297]  loop4: unable to read partition table
[  170.694202][ T8876] loop4: detected capacity change from 0 to 2048
[  170.720890][ T8876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.731168][ T8876] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.615280][ T7138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.976642][  T792] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  172.130998][  T792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.135450][  T792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.143077][  T792] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  172.148697][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  172.152280][  T792] usb 5-1: SerialNumber: syz
[  172.365658][  T792] usb 5-1: 0:2 : does not exist
[  172.378479][  T792] usb 5-1: USB disconnect, device number 10
[  172.409415][ T6542] udevd[6542]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.061651][ T8955] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  173.062396][  T792] IPVS: starting estimator thread 0...
[  173.166547][ T8957] IPVS: using max 38 ests per chain, 91200 per kthread
[  174.110031][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'.
[  174.574416][  T792] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  174.733920][  T792] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  174.745408][  T792] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  174.754966][  T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.764578][  T792] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  174.769476][  T792] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  174.772992][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.790139][  T792] usb 5-1: config 0 descriptor??
[  174.799029][  T792] usb-storage 5-1:0.0: USB Mass Storage device detected
[  174.813161][  T792] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  175.045530][   T10] usb 5-1: USB disconnect, device number 11
[  175.880955][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1170'.
[  175.946137][ T9004] loop4: detected capacity change from 0 to 32768
[  175.964743][ T9004] JBD2: Ignoring recovery information on journal
[  176.009842][ T9004] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  176.042132][ T9004] 
[  176.043160][ T9004] ======================================================
[  176.045828][ T9004] WARNING: possible circular locking dependency detected
[  176.048470][ T9004] syzkaller #0 Not tainted
[  176.050219][ T9004] ------------------------------------------------------
[  176.053516][ T9004] syz.4.1165/9004 is trying to acquire lock:
[  176.055839][ T9004] ffff888022e06f40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  176.060309][ T9004] 
[  176.060309][ T9004] but task is already holding lock:
[  176.062970][ T9004] ffff888022e09578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  176.066309][ T9004] 
[  176.066309][ T9004] which lock already depends on the new lock.
[  176.066309][ T9004] 
[  176.069995][ T9004] 
[  176.069995][ T9004] the existing dependency chain (in reverse order) is:
[  176.072821][ T9004] 
[  176.072821][ T9004] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  176.075324][ T9004]        lock_acquire+0x120/0x360
[  176.076939][ T9004]        down_read+0x46/0x2e0
[  176.078449][ T9004]        ocfs2_init_acl+0x2f9/0x720
[  176.080095][ T9004]        ocfs2_mknod+0x1321/0x2050
[  176.081711][ T9004]        ocfs2_mkdir+0x191/0x440
[  176.083357][ T9004]        vfs_mkdir+0x306/0x510
[  176.084884][ T9004]        do_mkdirat+0x247/0x590
[  176.086427][ T9004]        __x64_sys_mkdirat+0x87/0xa0
[  176.088143][ T9004]        do_syscall_64+0xfa/0x3b0
[  176.089740][ T9004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.091934][ T9004] 
[  176.091934][ T9004] -> #4 (jbd2_handle){++++}-{0:0}:
[  176.094829][ T9004]        lock_acquire+0x120/0x360
[  176.096702][ T9004]        start_this_handle+0x1fa7/0x21c0
[  176.098755][ T9004]        jbd2__journal_start+0x2c1/0x5b0
[  176.100613][ T9004]        jbd2_journal_start+0x2a/0x40
[  176.102201][ T9004]        ocfs2_start_trans+0x376/0x6d0
[  176.103953][ T9004]        ocfs2_mknod+0xe93/0x2050
[  176.105529][ T9004]        ocfs2_mkdir+0x191/0x440
[  176.107000][ T9004]        vfs_mkdir+0x306/0x510
[  176.108572][ T9004]        do_mkdirat+0x247/0x590
[  176.110006][ T9004]        __x64_sys_mkdirat+0x87/0xa0
[  176.111644][ T9004]        do_syscall_64+0xfa/0x3b0
[  176.113358][ T9004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.115483][ T9004] 
[  176.115483][ T9004] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  176.118083][ T9004]        lock_acquire+0x120/0x360
[  176.119662][ T9004]        down_read+0x46/0x2e0
[  176.121239][ T9004]        ocfs2_start_trans+0x36a/0x6d0
[  176.123110][ T9004]        ocfs2_mknod+0xe93/0x2050
[  176.124805][ T9004]        ocfs2_mkdir+0x191/0x440
[  176.126453][ T9004]        vfs_mkdir+0x306/0x510
[  176.127906][ T9004]        do_mkdirat+0x247/0x590
[  176.129365][ T9004]        __x64_sys_mkdirat+0x87/0xa0
[  176.131413][ T9004]        do_syscall_64+0xfa/0x3b0
[  176.133480][ T9004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.135862][ T9004] 
[  176.135862][ T9004] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  176.138443][ T9004]        lock_acquire+0x120/0x360
[  176.140248][ T9004]        ocfs2_start_trans+0x26b/0x6d0
[  176.142133][ T9004]        ocfs2_mknod+0xe93/0x2050
[  176.143751][ T9004]        ocfs2_mkdir+0x191/0x440
[  176.145559][ T9004]        vfs_mkdir+0x306/0x510
[  176.147383][ T9004]        do_mkdirat+0x247/0x590
[  176.149006][ T9004]        __x64_sys_mkdirat+0x87/0xa0
[  176.150526][ T9004]        do_syscall_64+0xfa/0x3b0
[  176.151989][ T9004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.154013][ T9004] 
[  176.154013][ T9004] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  176.157982][ T9004]        lock_acquire+0x120/0x360
[  176.159887][ T9004]        down_write+0x96/0x1f0
[  176.162023][ T9004]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  176.164636][ T9004]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  176.166608][ T9004]        ocfs2_mknod+0xe32/0x2050
[  176.168063][ T9004]        ocfs2_mkdir+0x191/0x440
[  176.169544][ T9004]        vfs_mkdir+0x306/0x510
[  176.170943][ T9004]        do_mkdirat+0x247/0x590
[  176.172646][ T9004]        __x64_sys_mkdirat+0x87/0xa0
[  176.174252][ T9004]        do_syscall_64+0xfa/0x3b0
[  176.175855][ T9004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.177951][ T9004] 
[  176.177951][ T9004] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  176.181108][ T9004]        validate_chain+0xb9b/0x2140
[  176.182626][ T9004]        __lock_acquire+0xab9/0xd20
[  176.184528][ T9004]        lock_acquire+0x120/0x360
[  176.186165][ T9004]        down_write+0x96/0x1f0
[  176.187557][ T9004]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  176.189370][ T9004]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  176.191611][ T9004]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  176.193518][ T9004]        ocfs2_xattr_set+0xb70/0x11f0
[  176.195154][ T9004]        __vfs_setxattr+0x43c/0x480
[  176.196775][ T9004]        __vfs_setxattr_noperm+0x12d/0x660
[  176.198587][ T9004]        vfs_setxattr+0x16b/0x2f0
[  176.200138][ T9004]        filename_setxattr+0x274/0x600
[  176.201805][ T9004]        path_setxattrat+0x364/0x3a0
[  176.203425][ T9004]        __x64_sys_lsetxattr+0xbf/0xe0
[  176.205077][ T9004]        do_syscall_64+0xfa/0x3b0
[  176.206606][ T9004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.208787][ T9004] 
[  176.208787][ T9004] other info that might help us debug this:
[  176.208787][ T9004] 
[  176.212584][ T9004] Chain exists of:
[  176.212584][ T9004]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  176.212584][ T9004] 
[  176.218301][ T9004]  Possible unsafe locking scenario:
[  176.218301][ T9004] 
[  176.220738][ T9004]        CPU0                    CPU1
[  176.222915][ T9004]        ----                    ----
[  176.224893][ T9004]   lock(&oi->ip_xattr_sem);
[  176.226351][ T9004]                                lock(jbd2_handle);
[  176.228405][ T9004]                                lock(&oi->ip_xattr_sem);
[  176.230625][ T9004]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  176.232934][ T9004] 
[  176.232934][ T9004]  *** DEADLOCK ***
[  176.232934][ T9004] 
[  176.235895][ T9004] 3 locks held by syz.4.1165/9004:
[  176.237858][ T9004]  #0: ffff8881240b4428 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  176.241080][ T9004]  #1: ffff888022e09840 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  176.244969][ T9004]  #2: ffff888022e09578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  176.248765][ T9004] 
[  176.248765][ T9004] stack backtrace:
[  176.251071][ T9004] CPU: 0 UID: 0 PID: 9004 Comm: syz.4.1165 Not tainted syzkaller #0 PREEMPT(full) 
[  176.251090][ T9004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.251100][ T9004] Call Trace:
[  176.251108][ T9004]  <TASK>
[  176.251117][ T9004]  dump_stack_lvl+0x189/0x250
[  176.251139][ T9004]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.251156][ T9004]  ? __pfx__printk+0x10/0x10
[  176.251177][ T9004]  ? print_lock_name+0xde/0x100
[  176.251191][ T9004]  print_circular_bug+0x2ee/0x310
[  176.251207][ T9004]  check_noncircular+0x134/0x160
[  176.251224][ T9004]  validate_chain+0xb9b/0x2140
[  176.251247][ T9004]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  176.251271][ T9004]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  176.251296][ T9004]  __lock_acquire+0xab9/0xd20
[  176.251317][ T9004]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  176.251327][ T9004]  lock_acquire+0x120/0x360
[  176.251345][ T9004]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  176.251367][ T9004]  down_write+0x96/0x1f0
[  176.251380][ T9004]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  176.251395][ T9004]  ? __pfx_down_write+0x10/0x10
[  176.251410][ T9004]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  176.251432][ T9004]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  176.251445][ T9004]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.251461][ T9004]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.251505][ T9004]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.251523][ T9004]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  176.251541][ T9004]  ? stack_depot_save_flags+0x41b/0x860
[  176.251566][ T9004]  ? kasan_save_track+0x4f/0x80
[  176.251583][ T9004]  ? kasan_save_track+0x3e/0x80
[  176.251593][ T9004]  ? __kasan_kmalloc+0x93/0xb0
[  176.251608][ T9004]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  176.251626][ T9004]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  176.251638][ T9004]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  176.251655][ T9004]  ? ocfs2_xattr_set+0xb70/0x11f0
[  176.251671][ T9004]  ? __vfs_setxattr+0x43c/0x480
[  176.251689][ T9004]  ? __vfs_setxattr_noperm+0x12d/0x660
[  176.251705][ T9004]  ? vfs_setxattr+0x16b/0x2f0
[  176.251717][ T9004]  ? filename_setxattr+0x274/0x600
[  176.251736][ T9004]  ? path_setxattrat+0x364/0x3a0
[  176.251750][ T9004]  ? __x64_sys_lsetxattr+0xbf/0xe0
[  176.251759][ T9004]  ? do_syscall_64+0xfa/0x3b0
[  176.251776][ T9004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.251802][ T9004]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  176.251819][ T9004]  ? __kasan_kmalloc+0x93/0xb0
[  176.251832][ T9004]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  176.251845][ T9004]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  176.251861][ T9004]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  176.251877][ T9004]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  176.251894][ T9004]  ? __lock_acquire+0xab9/0xd20
[  176.251917][ T9004]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  176.251936][ T9004]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  176.251960][ T9004]  ? ocfs2_xattr_set+0xb36/0x11f0
[  176.251978][ T9004]  ? up_write+0x1c4/0x420
[  176.251993][ T9004]  ? ocfs2_xattr_set+0x334/0x11f0
[  176.252009][ T9004]  ocfs2_xattr_set+0xb70/0x11f0
[  176.252035][ T9004]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  176.252054][ T9004]  ? dput+0x37/0x2b0
[  176.252075][ T9004]  ? dput+0x37/0x2b0
[  176.252088][ T9004]  ? step_into+0x435/0xf30
[  176.252099][ T9004]  ? step_into+0x435/0xf30
[  176.252112][ T9004]  ? evm_protected_xattr_common+0x170/0x190
[  176.252129][ T9004]  ? evm_protect_xattr+0x71d/0xa90
[  176.252142][ T9004]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  176.252155][ T9004]  ? __pfx_evm_protect_xattr+0x10/0x10
[  176.252172][ T9004]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  176.252192][ T9004]  __vfs_setxattr+0x43c/0x480
[  176.252212][ T9004]  __vfs_setxattr_noperm+0x12d/0x660
[  176.252232][ T9004]  vfs_setxattr+0x16b/0x2f0
[  176.252253][ T9004]  ? __pfx_vfs_setxattr+0x10/0x10
[  176.252270][ T9004]  ? mnt_get_write_access+0x223/0x2a0
[  176.252287][ T9004]  filename_setxattr+0x274/0x600
[  176.252310][ T9004]  ? __pfx_filename_setxattr+0x10/0x10
[  176.252331][ T9004]  ? getname_flags+0x1e5/0x540
[  176.252341][ T9004]  path_setxattrat+0x364/0x3a0
[  176.252358][ T9004]  ? __pfx_path_setxattrat+0x10/0x10
[  176.252371][ T9004]  ? do_futex+0x395/0x420
[  176.252398][ T9004]  ? rcu_is_watching+0x15/0xb0
[  176.252412][ T9004]  __x64_sys_lsetxattr+0xbf/0xe0
[  176.252426][ T9004]  do_syscall_64+0xfa/0x3b0
[  176.252446][ T9004]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.252463][ T9004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.252471][ T9004]  ? exc_page_fault+0x9f/0xf0
[  176.252520][ T9004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.252535][ T9004] RIP: 0033:0x7fa4b438ebe9
[  176.252550][ T9004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.252562][ T9004] RSP: 002b:00007fa4b51d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  176.252575][ T9004] RAX: ffffffffffffffda RBX: 00007fa4b45c5fa0 RCX: 00007fa4b438ebe9
[  176.252585][ T9004] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 00002000000002c0
[  176.252596][ T9004] RBP: 00007fa4b4411e19 R08: 0000000000000000 R09: 0000000000000000
[  176.252606][ T9004] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  176.252615][ T9004] R13: 00007fa4b45c6038 R14: 00007fa4b45c5fa0 R15: 00007fff8dc20628
[  176.252631][ T9004]  </TASK>
[  176.473372][ T7138] ocfs2: Unmounting device (7,4) on (node local)

VM DIAGNOSIS:
03:14:19  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000122d RDI=000000000000122e RBP=00000000000003f8 RSP=ffffc90003b9e4b0
R8 =ffff88801f4f0237 R9 =1ffff11003e9e046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8ff R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa4b51d86c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f97fbd18590 CR3=0000000026ac6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=79636e657265686f 632c6c6c75663d79
XMM04=6b636f6c666c6163 6f6c2c6c6c75663d XMM05=0000000000000000 00007fa4b51d76e0
XMM06=00007fa4b51d76e0 00007fa4b51d7560 XMM07=00007fa4b51d75a0 00007fa4b51d7580
XMM08=0000000000000000 000036fa28eb7f30 XMM09=0000000000000000 00007fa4b4412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=086d59336b930600 RBX=ffffffff819683c8 RCX=086d59336b930600 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683c8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38a30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b79a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555836e2808 CR3=000000012108a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc95de12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
