last executing test programs:

20.590486841s ago: executing program 1 (id=685):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
close(r1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

19.003963702s ago: executing program 1 (id=697):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)={0x0, 0x23, 0x100, {0x100, 0xe, "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"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

16.535197527s ago: executing program 1 (id=714):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0090de404ce16edd8f86996c9180cfcb13cd80200dd8da1d3093e75254f9eda64e9ae6c9c59d786a629592778a97672cef880b53ec4f03f8ed32b55678b8c823aab57990fb536cafc3d9e78efac58deefb4fe78831e3936634fc59c0e1f9081207e19e65b8f5eb9e068e6dbd9bd0238eba2b8e855835fb46c04258461231196cc451f48ea25486801be08a833503ddb6e4"], 0xfd, 0x1a1, &(0x7f0000000000)="$eJzskLFrE1Ecxz+/dy93iVBrVBwi2IDFeKWY3CkOTsEpggcOLoIFQ5o2xURNL4NKC12kS7H/gk51FAcnEQXn4iA46Ll0k2YIDiIiJ3d5/hW+D9x93/fL+/3e771ePIw94M9ko0OTHIejfETQwJxMM6Wm+tr470Z3p8JV43eEfOcL4yuxy912v99dr16pUs6CR49NAPyoks4imCie45RiLDSRz5ONTlvuRKRNBmr5WNZN5z2H/lMqeoaTCofUgWuKoRSA2fpo8KAe/07TdNBe7a5274XhxcuNSw2PsL6yVsqqxUMUz9jEj/AiSv4mhSWe7OsjLAri91TiyMIYd4ndfef82cUxyj8kRXhXG+N91b2qusk5irezC7U4ITzHiZi/TkmhWVnrdxst5IZ6JYH+pH8WFMUtx7nQud9f3r6l5Je715TDogQHFGoB4UJANn2F47xnO2E+oZWwl3DwDZE32Sk75j31VvZ/adxpzoDLw/ZotB648EFqEWH2lWEmb6fyucrw1tQY4cu/hcVisVgsFovFYrFY/gP+BgAA//8LfF7g")
ioctl$TCSETS(0xffffffffffffffff, 0x5410, &(0x7f0000000040)={0xfffffffe, 0x1000, 0xfffffffc, 0x7, 0x0, "00000400000000000c00000008eaff00"})
ptrace$setregs(0xd, r0, 0x4b314952, &(0x7f0000000ac0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

16.205306965s ago: executing program 1 (id=716):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000440)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@utf8}]}, 0x0, 0x2aa, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

15.955901818s ago: executing program 1 (id=718):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x2}, {0xe0000, 0xffffff81, 0x0, 0xa, 0xa, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x7d0, 0x2, 0xffff}, {0x6, 0x0, 0x1}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810)

15.431525679s ago: executing program 1 (id=725):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

15.125555032s ago: executing program 32 (id=725):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

6.815911385s ago: executing program 5 (id=776):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0)

5.863298705s ago: executing program 4 (id=788):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0x1000, {0x0, 0x0, 0x0, r2, 0x21801, 0x1143}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

5.862739235s ago: executing program 5 (id=789):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000100)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)

5.67428905s ago: executing program 2 (id=790):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10)
sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2d023b82407fbb8ae52a24b445059869df6095b826013c10bb7745d9edc0ef211452945180b52cc3986fb74d70cdc0194be37b376d2d4798d4e4463d042b1a462e80d80915fcffca56f2e0f5a6b6bff7e43eb6c80c1a8e85c077f4e980c3aa7b4b34562044059224e7280a86d55356ca279765d0943a185ac585ba7355885a40b0f4d02e5afe7b154deb20048d62307273f7069b86987af5b7fd9272d1ed5a9891e493deafa8a98f30c86803d00028221b891d3ae3437e26e9e0bbb0c152036ffebc06c5aa3fe55480e68414e7283793c5f93bf95ee471bf2b70abf696bb304bbecce852fd81439df022489675c1827a96f824378a80ce5338143bbc8fc3b1955bba34f2121cf485212c7cd8b50d81382605d28573b46b376e1092560f6d76c8ee2c4ebd9cf88665cec5acd5c2bb34ed1ce0338a7c1c8583914be1ef3a054e91f35a82147c0ef819f7971e12c18c5314df9e06bbbea133f82e638fd4646fb6a517fe75130f65392e8e1456fff3ae5cc7298b7bd6e7ea141808b4b4ec6930e7ee97e802a9a5c37c7bfaf6f8fd113b1e713e9d07cf0ddddf91965c29dbcc7a6478a071efe498458ee8428baeacd171ca321a88863d747ae8ba633f835401e66c831bec8d66ede3a6be8c9d6cd2e543df191a661d934e115c49db11cd3382aa4c378ea27b37078e4dbd52d5237873388f0b114dbcd77332e3cae456d8a96465a763709b9e33255b9648f186ae462f585dd729676a66e5dcba00b76ef82b9926d820d1f81f2ef2bdedb9727bc9b8420a16af0a3d49bfabaf53637b5712cd1efcfecefea443d99749398406a15af44464330fcc7ae05bc1319a403f17320384adf670171b10572b7a3c29224327d4da0cc98605adb69b143b75f495c3ee34b0e2df6119cdecfc9c14adac77c00225ba394a33c2031f7fd6fd5c51603133fd282b714d0206a61dcbfd9826847751c0828c7258b75739fc0f26cb4f5037652f608bfd156660b8ca43069fdfd27dc658b768b0842a71bd2191064e7c343710b26b4f94900dea847881b9269a250b165aa5b32cb02e853e01df7283f5aae557f555cdd110ffa52c5c702cb214934c5aa8a99c87b2ec9dd6717693827029ad477fa822c84c83303d04a6db313af73b83ef53d0caae2a0de16e13746d092a2e6260638245c57bf2904740ef4d4385b3fd888ea17795c712dbce6a559c71a8425deab805f99ec9f16cf268c5c6cb6cbbefe71115e62c85e9a0940b96a19a49b4a9373250c5b7a2446b4393aaa144ba32a9a0fff5cffc515d48691911a84ef869af3c3b08db4d8e44279b8ecf0753e88e5405897b4050db08c254cf0ff5b69a045bc62049218a573c6a395148454953a72768ddbd4326a0d247a0a4571ea894875a2f899f47487c3d2b62e51d8239633d3421fd79b0c32d05b99256614accf64ee6e2d51a3bdd2210d000000e6ac68159923977200feba975e290d768d7255416a06c8f161fa39f7a04c4651d420f1d96703cb3773bd2a2a0c37b1603151c4cc47f0699900849509534f8ec5131cfee5d96d598e28d571328ca037a34ba31aa5e6d51fe2604f8316545f129f0ae8e0856888d3315ed22f6246852df12d67e3a64e7891df946b81495189341e9401406037cfb31490fcff4fc0406f2f70e2cabcd0fb8adeec4be909526dfa252a5aee0435df3a07e0897b86eaff8dd190f466b2a81e8a37ffb577bfb5feddefb292809c1d925c2f9cf27380dc78e74d74ceb1d31ebe84bbd2e6ce48dded3c55203966896ad1458d3d3095b9bacf250416ee27aa73a5c5d6ec6b2c9c323759ffe97df44481f796f4762e3245c0a88fd129dbafde688f2c57445665c623025a76748a9931a7f67c53faa4a155c9ba5caa38986462e48db7c580749bd372955244c9d4a17631f24b9b64036de9e97147b7056dcb54652fca36a037d0c3f754a303c594d8e04f706fe75e8f19607e6cc94ac60d83b4fc620a00b52605323391f3e005dcdb9be443b59d89760b605f32c07bef27a326863e07d770e7bb2853354f6404a83d099559e5a25849bd16c6381354ec45df14e3e16099a0cc299256118be93e47c025b01a2fe899c81411c8f6b74808562ecb2f91b8688b1617b93516b29162bf71db6e2dbee1ba98fba3cf6e7f56d90fbf017d2d81d2411515d73272bc167a55770deacb3d79dcfa1cb9c27e27585b521d3900e4fb280c1ba1f9e956bd1326bf162255f66b0189ae648a402e48cc61fdd20fd3a09070c88167730bf80b34cecfcb37a4046552d1b345f66c97fb67f1993990e55e43ee58372455864de62d636d836477fca1ca355bce2eed04ca30751ad642e61862d1e29886b9acc5be9d6ab7e6eab7c89a7ebde051116ae5f12432caa8228c4dddb5221f7f5fafeef8d397ee0c7d94dfcd2fade21947c98bd89b071f4e24dfb43b46f1db5f1276d8d71e3cccca479cb612be6bd02e6f188403b85022ed0e9d42f9c4531a11659bfd144b4a49b6659be2a548658a66d7faa44622742d7c42d7f90caa2ca3a24d10c993a9b1c814f4e0b735615cbd9c00d6bf444d0ae1071f2b74023d2e53b9d2b79f6ddaeadcef3bcc5d13971b7f9c7e72d1a431e1d79234e1dab13ee758f741777d836905c7873de0192ecda15d3a224331fc2222f6793edd69da51befe4f772ec696e4e4e5deba877b52b91d8b7de4fd151e1009134cebf4a353e6219b21f131487b3fba0f4b7e39626c5c7583ed5073086ff735ce19cb786e8d1bf359b4c3a7bc29bbf9d441d914d7e842b88f0868d0f6a6fd41624271ad5e166d677ea5109b6c8e9d2fdfff9e944e9c9ad50b3cde7e3f229e2bbf81c6aaa7b7c8e5700362000b6509942bbed25253e0833a5f7a71975b780472ed6f3da3a2ba162f20b3b90d4a084acbb137129bbd9b65f3e9ba6886241d80ee90dcf7d64050d52e8550f21262a88395ca06b83a5b5d9c05426582c86fe7753019a71ecc84c59fae3239d195246306f153b301629fbc6bd6e3fbc6aff7d35d79c5c8046b61ec70e2b7356c9400477778990364091be2b74bdab711f5561ff137021fdf9e82a35fd5bf85673bbb2944cf1f36a2e25fa4dd948525621f7a14dc3c8d1e1f1ec9d334dddcf7f9487f3d3ec60106becfddc15ece3850215aa3231a543264263757c6417adde58eb6b624096a9759c8f7a1c9add4d374a4301a86fcc5c7b96e4e294cc935ad9315669d03b80522e5b7f6207e325cc5e9a33cdd8d5512aa388e452674a936826d47f23097d33c4e4a1f2f0802a2b9be2a608f2f0ff27f6b041d70d268f848687d45e6e510691ad516c7d7038d4153fb30415e425a4cb9d879aee8ffbca65df46876151af9a583d9a3fb331fb1b616a8007fddba31bee77e420172cd2a2a140a3376db47d7336d958bfa6f4ae80f78310c9043a184258dbaa9bba0c2482d7eb70c2bd94d52587fb92fd80c58110b05ad6eb1623009cd263deb3cb219bfde713ef738dfed0b1c6254177d939e8c358cc69ddfa3e31aa4c3cbfe384d96749217ff3b2b45a15f34403fe327aa2f805d1eaf7ee7f187070032eceba18a11e4ccf7c2e3a4d5c72d1db7b0bb5dc2354ae7eb27dedb91a5571203835b482353950220ad39f21334135c6fdd22a71c6119ce5dfa292a71ad296b141663210872c192aa228e21068d717235f1186234de39e69e5904ead38314ef69b86a656371d9987d327a7064fc6e1acd7f822165b1e42da9bff573db1eaf2563552bf6dbb6591031883f5cf7e22d1f2e2522e5bb88fc4bdece187d7f2612886a7f314895d43dd2c9e1b731aec39014028590ea0c76f1cd7d71c96ed45ce31d5e38f38a36a95d54708875dd99d8612275450a700251c7f21742d31b9be6de5fcf63b7b639ff746f31537694b3005ddf6cc8375f25bd782bc784943b72bd19f938a449fe0a617b5b1430a4d506e3bf0a1f118b6e45e9e6a3515efd9ecd1a964c5459921b01a0cacf0d4e4659f06ee2e53123a2241b583072f91af6b82f51fa14622ead00697b2f511e7f54cc4e8b015bd03b4ebae849ec9f7738d945450ff8363aee60678b80a86e93326f6a87d73b1a114f6f6186e2a4365d66d5b74df15280c4060ec847da5a1baf1706e7a373f2ec73ad755bffdd5813cf5ce8cf8b07d4ac8b324293b7248145b35b13fe638f902c5e8147084c221591cefa221573080f49ed7b3479e9c81c4ec2e5e8df89ce0266f6023327aae85f74fc70085398ca9749a1b8467d3d2d7bdcfc4bb9af62721a4cf55a5d2600210eeda03de3b9353725eb991583d7226debf7e3d4b06d89c41599b3687d56571c6c810882e1060510b0e6480b4e3d8705c858e24897dd8bd936f9a16bd626b98dd55696aa2dea3c0a12a6b12f5befba90ea487134453b5a8e863b5446565730e9d84e019d664654568c3448bbddd8cccc15e4615addae0d732dafe6f54b229cd5689396720d0010dfea3f9e6d9793b51be5c4e39659e8eb604ec15ee7ae2a2961a8b815d9417795cdde0702d6cf7dcdc16f02365d7eee5dfc7a0a9ea3957672f00a209fb845e782777ef9e5c9e7aa7926bb93c3486a8612e222ddc9709d9a2acef6c60db859c4fd39f365bb22f90edd04f891fd3ccdff35c5eac56ec49d02063a7859aa14c938d575fb85cc26a3f3fb3ef4d8ce576e927dc54c27702aff904e133a6869ac4384ca6ce273d1a7f3b4ffb570dd097e607ade8eb8ca1d436733262b527c508e4ff7e09bb56432c36a38065c582210252efc06aa0d3fe0ea99e97e6ee88f80ad33bcb2cd0570b8f97488bfe09d4560b9ab44ec7ea5726d291460ab46d32922c1b37067425ff9abc8a4bf810879114dc266a575e1ddcbfd6ef2c51b624091b3ebe68ededfd94f883ae674b1f00be817a559b3c6376aa68f039628ae425191b7c7ba60e73b0fa3c4fe5533b4f8fe0b21f61a5f9e520e22cdbebd929048552b6d8d1d5c18fa9900b7786462e7e4d738e57485e9a6dd14a0fd37f0256613317df8ec3518c7eee50c59070a7276f8b0575426887f2cb5be122cc766a25a07132ef01611d0c2d3f16de29a8c0f39a3a5a3e9596b61fdd3dff97b95ff67b4798ddbc4b14e518bcc52cdd2d87605ce9d9c5f2a6d4e11d2f94575b0d5de72d0b97d0a2cf32b5465c6a4ddb62d61b97f2331341c9d448ec765180f858394f2c0b2ee982b9f867d73f97d0e0e3b275ef49c7c262c4d6f5fac787edafaa8b79410b1288a0b52afd93c8584ff9d61eddfa0cada98bd3c200fc708078098764bbe304c44d62eff132415a917c022c9f7466318017da7b4649eb0fae58fcb716a1f295d84dd9ec14218beb0372c041aaa4421a8f75eaef5115f0f32aca8fd30fde0e9e08972e23faf5381eb18c626c0ce920261461c3dfe7f1e8b35ca16f7283de3af4bba5c384e256cd369568214101a8e27c94531a81fe4fba595a4455f8724eebea716d1a4940b3d787fc4bd6ad8aa403fceb74f316fb5a816890646338efb6f13aba195f127aa1b1107bf303b1f997c74d6f4f664d708f58c3b3ca063825405ad7a61260debf4b220443b6537f5ae94820ec62901944cc9023e655f82e0e31a13f351ed0336cbcfda8ae0b20025fb33e49f011f6aa708140cffefbd06f9b90fefc6f9d79f67495ff0b1a2f1ff075eda3fdd800088fc0583dc0e1e9f7f02673da61cc4466a2559d70cd90e453b11449442eb11f444e1203bc38754f7ad0d93bb91e40f", 0xff3}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}], 0x1, 0x20049001)
recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/39, 0x27}], 0x1}, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)

5.672546409s ago: executing program 4 (id=791):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x586, &(0x7f0000000840)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"})
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0)

5.559962968s ago: executing program 5 (id=792):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00')

5.19594451s ago: executing program 4 (id=796):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x30, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x7, 0x4)

4.604130958s ago: executing program 2 (id=801):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f32098f400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x1c, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.18806133s ago: executing program 4 (id=803):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009)

4.156855344s ago: executing program 2 (id=804):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x700}, 0x50)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)

4.095788892s ago: executing program 2 (id=806):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000300)={0x7b, [0x1, 0xfffffffe], 0x1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

2.362253726s ago: executing program 0 (id=816):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x9, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
read$FUSE(r0, &(0x7f0000004900)={0x2020}, 0x2020)

2.292000112s ago: executing program 5 (id=817):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

2.023969322s ago: executing program 4 (id=820):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1, 0x0, 0xc00}, 0x80)
r1 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)

1.805720601s ago: executing program 3 (id=821):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3, 0x4)
sendto$inet6(r1, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c)

1.805367391s ago: executing program 4 (id=822):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@space_cache_v2}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000480))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.80352837s ago: executing program 2 (id=831):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
mknodat(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x8, 0x700)
chdir(&(0x7f0000000000)='./file0\x00')
stat(&(0x7f0000000200)='./bus\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000240)='./bus\x00', 0x10, 0x0, 0x5, 0x0, &(0x7f0000000280))

1.620018716s ago: executing program 3 (id=823):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x4, "fa02791d2a69a2610f0200", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r1, <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r5})

1.403986915s ago: executing program 3 (id=824):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.285918413s ago: executing program 3 (id=825):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000140)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])

1.209977489s ago: executing program 0 (id=826):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x50000600)

1.081684784s ago: executing program 0 (id=827):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xfc, 0x0, 0x1, 0x5}, {0x5000, 0x3000, 0x10, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0x0, 0x50000, 0xe, 0x7, 0x3, 0x7, 0x0, 0x6, 0x4, 0xa4, 0x5, 0x5}, {0x1, 0xdddd1000, 0x9, 0x7, 0x5, 0x42, 0x2, 0xff, 0x8, 0x7, 0xe, 0x40}, {0xffffffff, 0x3000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x19, 0x9, 0xf7, 0x3}, {0x8080000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x6, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0x1, 0x7, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x10024, 0x0, 0x41000, 0x2024, 0x2, 0x0, 0x100c00, [0x6800000000000000, 0x80000000004, 0x3, 0x8]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x4, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x4, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0xe41, 0x3, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x8}, {0x0, 0xc}, {0x0, 0x0, 0x4}, {0x0, 0x35, 0x1}, {0x1d, 0x3}, {0x0, 0x0, 0x5}, {0xfd, 0x5}, {0x2, 0x6}, {0x0, 0x81}, {0x73, 0x6, 0x1, '\x00', 0x8}, {0x0, 0xff, 0xfe}, {0x4, 0x0, 0x0, '\x00', 0x2}, {}, {0x0, 0x2, 0x0, '\x00', 0xfe}, {0x7, 0x2, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x1, 0x0, 0x5, '\x00', 0xff}, {0xff, 0x0, 0xf7, '\x00', 0x6}, {0x0, 0xfc, 0x0, '\x00', 0xfe}, {0xfd, 0x0, 0x3, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0xf7, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}})

979.907455ms ago: executing program 5 (id=828):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=""/152, 0x36, 0x98, 0x1}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x400, '\x00', r2, r0, 0x3, 0x0, 0x3}, 0x50)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005a00)=ANY=[@ANYBLOB="6163746976655f6c6f67733d322c686561702c6e6f696e6c696e655f64656e7472792c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303032332c6a71666d743d76667376302c616c6c6f635f6d6f64653d64656661756c742c6661756c745f747970653d30303030303030303030303031363737373231342c71756f74612c646973636172642c6a71666d743d76667376312c6673796e635f6d6f64653d706f7369782c696e6c696e655f646174612c67727071756f74613d6163746976655f6c6f67733d322c6c617a7974696d652c71756f74612c72657365727665725f726f6f743d30303030303030303030303030303030303030362c6d65615e7572652c7063723d30303030303030303030303030303030303034392c646f6e745f61707072616973652c00ff29d0fe17e4c4341c45671dd25dfa91a37c701b07211a12cd72f3186867d29073d5c363c29b4ca676972bf8f94697fab943ab1c6d7fa3a18d16d5e339f461016a1950fd58569021caba03d761f3ea76c27f97b8472cb94ebe242e118b5f1269b29ad902f9b17932c95626af588a06ce34c57c32ad59a72a3fda9a6463dbf665f435aed687bd95909d1f305ec0a2fae7420d7f112c385438f2959f370b3a9a24a59c3f28fa62acd9a57c8f5163f9"], 0x1, 0x5505, &(0x7f0000000340)="$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")
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, 0x0)

961.335371ms ago: executing program 3 (id=829):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0)

562.963636ms ago: executing program 0 (id=830):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0xfffff801, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
io_setup(0x4, &(0x7f0000000400))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(r1, &(0x7f0000005f00)={0x2020}, 0x2020)

232.046864ms ago: executing program 0 (id=832):
pipe2$watch_queue(&(0x7f0000001180)={<r0=>0xffffffffffffffff}, 0x80)
r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)

162.470131ms ago: executing program 5 (id=833):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0)
r2 = fanotify_init(0x4, 0x0)
fanotify_mark(r2, 0x39, 0x1a, r1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)

151.780619ms ago: executing program 2 (id=834):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r3 = dup(r2)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

667.231µs ago: executing program 0 (id=835):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2, 0x3, 0xff)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 3 (id=836):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000000)=[@request_death, @register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000280)=[@clear_death], 0x50, 0x0, &(0x7f00000005c0)="505947389919cee88171d519018a95ccebbabfc66dc862e9536f0270604a00b0d98053c54fdc688efa8e51c3554ec1e3f8504d48a1e7eedef35f84f524932d73d434fee5323d6f3ef0a108b842c9ec9c"})

kernel console output (not intermixed with test programs):

ists on: batadv_slave_0
[   59.532338][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.542285][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.553743][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.563593][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.574121][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.586748][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.605885][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.615817][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.625565][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.634186][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.642804][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.655195][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.664755][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.674314][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.683884][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.698884][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.707609][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.721217][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.737763][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.749713][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.761059][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.771257][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.781855][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.792217][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.802816][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.813970][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.843729][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.851680][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.860979][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.875643][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.889929][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.899514][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.908641][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.983074][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.990942][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.047193][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.083015][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.095812][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.107323][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.129021][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.143799][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.175054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.216464][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.247631][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.276543][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.315381][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.325415][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.339681][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.348537][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.381242][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.390553][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.401617][ T4351] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   60.430863][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.454163][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.462292][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.630703][ T4359] netlink: 'syz.0.1': attribute type 22 has an invalid length.
[   60.650227][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   60.686957][ T4359] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.696169][ T4359] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.705013][ T4359] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.714517][ T4359] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.731222][ T4359] netlink: 'syz.0.1': attribute type 22 has an invalid length.
[   60.740942][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   60.761464][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   60.772093][ T4359] Zero length message leads to an empty skb
[   60.782147][ T4358] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   60.801064][ T4361] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   60.995484][ T4275] Bluetooth: hci2: command 0x0419 tx timeout
[   61.072871][ T4275] Bluetooth: hci0: command 0x0419 tx timeout
[   61.078920][ T4275] Bluetooth: hci1: command 0x0419 tx timeout
[   61.085678][ T4271] Bluetooth: hci3: command 0x0419 tx timeout
[   61.154595][ T4275] Bluetooth: hci4: command 0x0419 tx timeout
[   61.191030][ T4373] netlink: 'syz.1.12': attribute type 3 has an invalid length.
[   61.210719][ T4373] netlink: 'syz.1.12': attribute type 8 has an invalid length.
[   61.221354][ T4373] netlink: 'syz.1.12': attribute type 4 has an invalid length.
[   61.247308][ T4373] netlink: 'syz.1.12': attribute type 7 has an invalid length.
[   61.267520][ T4373] netlink: 199012 bytes leftover after parsing attributes in process `syz.1.12'.
[   61.586623][   T26] audit: type=1326 audit(1772645030.136:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.0.20" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f828f99c799 code=0x0
[   62.055960][ T4387] loop1: detected capacity change from 0 to 40427
[   62.175589][ T4387] F2FS-fs (loop1): invalid crc value
[   62.204105][ T4387] F2FS-fs (loop1): Found nat_bits in checkpoint
[   62.345094][ T4387] F2FS-fs (loop1): Start checkpoint disabled!
[   62.416628][ T4387] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   62.602351][ T4387] syz.1.21: attempt to access beyond end of device
[   62.602351][ T4387] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   62.775703][ T4323] kworker/u4:6: attempt to access beyond end of device
[   62.775703][ T4323] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   62.948092][ T4413] loop0: detected capacity change from 0 to 1024
[   63.162746][ T4311] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   63.220494][ T4413] capability: warning: `syz.0.29' uses deprecated v2 capabilities in a way that may be insecure
[   63.356644][    T9] hfsplus: b-tree write err: -5, ino 3
[   63.365819][ T4311] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   63.382847][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.435446][ T4311] usb 5-1: config 0 descriptor??
[   63.563958][ T4410] loop3: detected capacity change from 0 to 32768
[   63.618276][ T4410] 
[   63.618276][ T4410]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   63.618276][ T4410] 
[   63.696492][ T4428] loop2: detected capacity change from 0 to 128
[   63.774995][ T4410] ERROR: (device loop3): diWrite: ixpxd invalid
[   63.774995][ T4410] 
[   63.817337][ T4428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   63.869279][ T4410] ERROR: (device loop3): txCommit: 
[   63.869279][ T4410] 
[   63.887946][ T4268] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   63.902905][ T4428] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.955882][ T4435] loop0: detected capacity change from 0 to 4096
[   63.957190][ T4268] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   63.963782][ T4435] EXT4-fs: Ignoring removed mblk_io_submit option
[   63.987151][ T4435] EXT4-fs: inline encryption not supported
[   64.000039][ T4435] EXT4-fs: Ignoring removed orlov option
[   64.006137][ T4435] ext4: Unknown parameter 'rootcontext'
[   64.042997][ T4269] 
[   64.042997][ T4269]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.042997][ T4269] 
[   64.076538][ T4269] 
[   64.076538][ T4269]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.076538][ T4269] 
[   64.249488][ T4276] EXT4-fs (loop2): unmounting filesystem.
[   64.680485][ T4311] usb 5-1: Cannot set autoneg
[   64.686070][ T4311] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[   64.712510][ T4342] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   64.772152][ T4311] usb 5-1: USB disconnect, device number 2
[   64.829703][ T4454] loop2: detected capacity change from 0 to 8192
[   64.913393][ T4342] usb 2-1: Using ep0 maxpacket: 8
[   64.932011][ T4342] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[   64.951324][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.966639][ T4342] usb 2-1: Product: syz
[   64.971025][ T4342] usb 2-1: Manufacturer: syz
[   64.982536][ T4342] usb 2-1: SerialNumber: syz
[   65.000713][ T4342] usb 2-1: config 0 descriptor??
[   65.227970][ T4342] gspca_main: sunplus-2.14.0 probing 04a5:3003
[   65.259294][   T26] audit: type=1326 audit(1772645033.806:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.0.50" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f828f99c799 code=0x0
[   65.472039][ T4480] loop2: detected capacity change from 0 to 512
[   65.490299][ T4480] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.516678][ T4480] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   65.591279][ T4480] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[   65.610871][ T4480] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   65.629735][ T4480] EXT4-fs (loop2): mount failed
[   65.720366][ T4487] loop3: detected capacity change from 0 to 256
[   65.770298][ T4487] exfat: Deprecated parameter 'utf8'
[   65.791096][ T4487] exfat: Deprecated parameter 'utf8'
[   65.811944][ T4487] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   65.965437][ T4496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.61'.
[   66.124655][ T4499] loop4: detected capacity change from 0 to 128
[   66.131893][ T4499] =======================================================
[   66.131893][ T4499] WARNING: The mand mount option has been deprecated and
[   66.131893][ T4499]          and is ignored by this kernel. Remove the mand
[   66.131893][ T4499]          option from the mount to silence this warning.
[   66.131893][ T4499] =======================================================
[   66.166797][    C1] vkms_vblank_simulate: vblank timer overrun
[   66.205451][ T4499] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   66.253392][ T4342] gspca_sunplus: reg_w_riv err -71
[   66.258695][ T4342] sunplus: probe of 2-1:0.0 failed with error -71
[   66.273203][ T4499] hpfs: filesystem error: improperly stopped
[   66.282073][ T4499] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   66.293642][ T4506] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.65'.
[   66.302803][ T4342] usb 2-1: USB disconnect, device number 2
[   66.337461][ T4499] hpfs: You really don't want any checks? You are crazy...
[   66.368057][ T4499] hpfs: hpfs_map_sector(): read error
[   66.377765][ T4499] hpfs: code page support is disabled
[   66.384165][ T4499] hpfs: hpfs_map_4sectors(): unaligned read
[   66.393058][ T4499] hpfs: hpfs_map_4sectors(): unaligned read
[   66.398978][ T4499] hpfs: filesystem error: unable to find root dir
[   67.163228][ T4537] Bluetooth: MGMT ver 1.22
[   67.558075][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'.
[   67.683206][ T4547] device hsr_slave_1 left promiscuous mode
[   67.695873][ T4556] syz.3.87 uses obsolete (PF_INET,SOCK_PACKET)
[   67.925246][ T4563] loop1: detected capacity change from 0 to 64
[   67.994412][ T4564] binder: 4562:4564 ioctl c0306201 200000000280 returned -14
[   68.709299][ T4591] syz.0.102 (4591) used greatest stack depth: 20728 bytes left
[   68.718499][ T4268] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   68.880998][ T4580] loop3: detected capacity change from 0 to 40427
[   68.911986][ T4580] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   68.932256][ T4268] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   68.952633][ T4580] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   68.967135][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.974193][ T4580] F2FS-fs (loop3): invalid crc value
[   68.985777][ T4268] usb 2-1: Product: syz
[   68.990892][ T4268] usb 2-1: Manufacturer: syz
[   68.998868][ T4268] usb 2-1: SerialNumber: syz
[   69.029014][ T4580] F2FS-fs (loop3): Found nat_bits in checkpoint
[   69.043009][ T4268] usb 2-1: config 0 descriptor??
[   69.168839][ T4580] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   69.218759][ T4580] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   69.273823][   T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.317615][   T41] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   69.460841][ T4268] usb 2-1: Firmware: major: 182, minor: 0, hardware type: ATUSB (0)
[   69.538861][ T4323] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   69.558943][ T4323] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   69.662306][ T4268] usb 2-1: Read permanent extended address 00:00:00:00:00:00:00:10 from device
[   69.903221][ T4268] usb 2-1: USB disconnect, device number 3
[   71.029321][ T4650] loop0: detected capacity change from 0 to 128
[   71.114039][ T4650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   71.134083][ T4650] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   71.171463][ T4650] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10)
[   71.184082][ T4654] netlink: 'syz.4.126': attribute type 2 has an invalid length.
[   71.240983][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[   71.247660][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[   71.290570][ T4264] EXT4-fs (loop0): unmounting filesystem.
[   71.621781][ T4665] loop2: detected capacity change from 0 to 2048
[   71.696657][ T4665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.905686][ T4268] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   72.048145][ T4661] loop4: detected capacity change from 0 to 32768
[   72.242509][ T4674] loop3: detected capacity change from 0 to 32768
[   72.248293][ T4677] loop2: detected capacity change from 0 to 256
[   72.263987][ T4677] exfat: Deprecated parameter 'namecase'
[   72.269668][ T4677] exfat: Deprecated parameter 'namecase'
[   72.288647][ T4674] (syz.3.135,4674,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   72.309822][ T4674] (syz.3.135,4674,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   72.319997][ T4677] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   72.325435][ T4268] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   72.359967][ T4268] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   72.366733][ T4661] XFS (loop4): Mounting V5 Filesystem
[   72.380505][ T4674] JBD2: Ignoring recovery information on journal
[   72.394573][ T4268] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   72.412324][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.424951][ T4684] bridge0: port 3(gretap0) entered blocking state
[   72.438322][ T4674] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   72.469260][ T4684] bridge0: port 3(gretap0) entered disabled state
[   72.477789][ T4667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   72.494572][ T4684] device gretap0 entered promiscuous mode
[   72.597701][ T4661] XFS (loop4): Ending clean mount
[   72.613926][ T4684] bridge0: port 3(gretap0) entered blocking state
[   72.620976][ T4684] bridge0: port 3(gretap0) entered forwarding state
[   72.639671][ T4661] XFS (loop4): Quotacheck needed: Please wait.
[   73.104206][ T4689] device gretap0 left promiscuous mode
[   73.163842][ T4689] bridge0: port 3(gretap0) entered disabled state
[   73.188749][ T4661] XFS (loop4): Quotacheck: Done.
[   73.251445][ T4268] usb 2-1: USB disconnect, device number 4
[   73.501454][ T4674] syz.3.135 (4674) used greatest stack depth: 20528 bytes left
[   73.718380][ T4265] XFS (loop4): Unmounting Filesystem
[   74.691354][ T4269] ocfs2: Unmounting device (7,3) on (node local)
[   74.828015][ T4728] 9pnet: p9_errstr2errno: server reported unknown error �è
[   74.977172][ T4732] netlink: 51 bytes leftover after parsing attributes in process `syz.3.139'.
[   75.147395][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'.
[   75.372660][  T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   75.575173][  T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.602608][  T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.623580][  T126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   75.666497][  T126] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   75.685284][  T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.701744][  T126] usb 5-1: config 0 descriptor??
[   75.796081][ T4773] loop0: detected capacity change from 0 to 256
[   75.840299][ T4773] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[   76.133386][  T126] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   76.161284][  T126] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   76.342104][ T4785] loop1: detected capacity change from 0 to 2048
[   76.364851][   T14] cfg80211: failed to load regulatory.db
[   76.391564][ T4785] UDF-fs: error (device loop1): udf_read_inode: (ino 1312) failed !bh
[   76.441261][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.480109][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.504201][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.530950][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.544480][ T4785] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   76.561377][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.618202][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.660713][ T4785] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   76.697612][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.761518][ T4785] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   76.809328][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.848572][ T4785] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   76.884713][ T4785] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[   76.896725][ T4798] loop2: detected capacity change from 0 to 512
[   76.973579][ T4798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   77.001602][ T4798] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   77.319717][ T4276] EXT4-fs (loop2): unmounting filesystem.
[   77.385610][ T4738] usb 5-1: string descriptor 0 read error: -2
[   77.571596][ T4794] loop3: detected capacity change from 0 to 32768
[   77.740215][ T4794] XFS (loop3): Mounting V5 Filesystem
[   77.848222][ T4794] XFS (loop3): Ending clean mount
[   78.218381][ T4269] XFS (loop3): Unmounting Filesystem
[   78.237198][  T126] usb 5-1: USB disconnect, device number 3
[   78.281617][ T4831] syz.3.175 (4831) used greatest stack depth: 20312 bytes left
[   78.424291][ T4844] loop0: detected capacity change from 0 to 1024
[   78.867749][ T4853] input: syz0 as /devices/virtual/input/input5
[   79.582136][ T4883] loop1: detected capacity change from 0 to 64
[   79.647453][   T26] audit: type=1326 audit(1772645048.196:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.2.203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c5099c799 code=0x0
[   79.740805][ T4883] hfs: request for non-existent node 24 in B*Tree
[   79.798943][ T4883] hfs: request for non-existent node 24 in B*Tree
[   79.819099][ T4891] hfs: request for non-existent node 25 in B*Tree
[   79.832819][ T4891] hfs: request for non-existent node 25 in B*Tree
[   79.856655][ T4883] hfs: request for non-existent node 26 in B*Tree
[   79.872624][ T4883] hfs: request for non-existent node 26 in B*Tree
[   79.915239][ T4883] hfs: request for non-existent node 27 in B*Tree
[   79.943942][ T4883] hfs: request for non-existent node 27 in B*Tree
[   80.246492][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'.
[   80.579953][ T4916] loop1: detected capacity change from 0 to 8
[   80.633291][ T4916] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   80.644831][ T4306] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   80.714719][ T4916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   80.729418][ T4692] udevd[4692]: incorrect cramfs checksum on /dev/loop1
[   80.815801][ T4916] cramfs: bad data blocksize 4294966936
[   80.834330][ T4306] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   80.844869][ T4916] cramfs: Error -3 while decompressing!
[   80.849849][ T4692] udevd[4692]: incorrect cramfs checksum on /dev/loop1
[   80.859030][ T4306] usb 5-1: config 0 has no interface number 0
[   80.869796][ T4306] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   80.874852][ T4916] cramfs: ffffffff96d8a080(428)->ffff88805303a000(4096)
[   80.895029][ T4306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.917450][ T4916] cramfs: bad data blocksize 4294966936
[   80.921729][ T4306] usb 5-1: config 0 descriptor??
[   80.950196][ T4306] cp210x 5-1:0.1: cp210x converter detected
[   80.992699][   T41] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   81.192612][   T41] usb 3-1: Using ep0 maxpacket: 32
[   81.209331][   T41] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   81.219702][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.262958][   T41] gspca_main: nw80x-2.14.0 probing 055f:d001
[   81.278014][ T4939] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[   81.286044][ T4944] loop0: detected capacity change from 0 to 128
[   81.346188][ T4306] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32
[   81.393425][ T4944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   81.440669][ T4944] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.484686][ T4952] loop1: detected capacity change from 0 to 128
[   81.504844][ T4952] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   81.521534][ T4952] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.575813][ T4306] usb 5-1: cp210x converter now attached to ttyUSB0
[   81.602013][ T4952] process 'syz.1.224' launched './file0' with NULL argv: empty string added
[   81.642725][ T4264] EXT4-fs (loop0): unmounting filesystem.
[   81.651488][ T4952] Invalid argument reading file caps for ./file0
[   81.707468][ T4342] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   81.766054][ T4279] EXT4-fs (loop1): unmounting filesystem.
[   81.786976][  T126] usb 5-1: USB disconnect, device number 4
[   81.817208][  T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   81.867212][  T126] cp210x 5-1:0.1: device disconnected
[   81.912872][ T4342] usb 4-1: Using ep0 maxpacket: 16
[   81.923015][ T4342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.953458][ T4342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.977033][ T4342] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   81.999546][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.016537][ T4342] usb 4-1: Product: syz
[   82.052698][ T4342] usb 4-1: Manufacturer: syz
[   82.057551][ T4342] usb 4-1: SerialNumber: syz
[   82.076741][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[   82.462669][  T126] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   82.472491][   T41] gspca_nw80x: reg_w err -71
[   82.477177][   T41] nw80x: probe of 3-1:3.0 failed with error -71
[   82.521608][   T41] usb 3-1: USB disconnect, device number 2
[   82.540242][ T4342] usb 4-1: 0:2 : does not exist
[   82.572321][ T4973] loop1: detected capacity change from 0 to 32768
[   82.607123][ T4973] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   82.615764][ T4973] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   82.671588][ T4973] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   82.683662][ T4306] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   82.694611][ T4306] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   82.729743][  T126] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   82.752227][ T4306] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 57ms
[   82.761172][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.772505][ T4306] gfs2: fsid=syz:syz.0: jid=0: Done
[   82.779440][ T4973] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   82.787921][  T126] usb 1-1: Product: syz
[   82.808794][  T126] usb 1-1: Manufacturer: syz
[   82.842161][  T126] usb 1-1: SerialNumber: syz
[   82.895062][  T126] usb 1-1: config 0 descriptor??
[   82.924831][  T126] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   82.932773][ T4343] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   82.964755][ T4342] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   83.040432][ T4342] usb 4-1: USB disconnect, device number 2
[   83.135578][ T4692] udevd[4692]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.173062][ T4343] usb 5-1: Using ep0 maxpacket: 32
[   83.189904][ T4343] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   83.243552][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.274377][ T4343] usb 5-1: config 0 descriptor??
[   83.325208][ T4343] gspca_main: sunplus-2.14.0 probing 041e:400b
[   83.867462][ T5002] loop2: detected capacity change from 0 to 256
[   83.927067][ T5002] FAT-fs (loop2): Directory bread(block 64) failed
[   83.949530][ T5002] FAT-fs (loop2): Directory bread(block 65) failed
[   83.967379][ T5002] FAT-fs (loop2): Directory bread(block 66) failed
[   83.985409][ T5002] FAT-fs (loop2): Directory bread(block 67) failed
[   83.992035][ T5002] FAT-fs (loop2): Directory bread(block 68) failed
[   84.035619][ T5002] FAT-fs (loop2): Directory bread(block 69) failed
[   84.042258][ T5002] FAT-fs (loop2): Directory bread(block 70) failed
[   84.097224][ T5002] FAT-fs (loop2): Directory bread(block 71) failed
[   84.118047][ T5002] FAT-fs (loop2): Directory bread(block 72) failed
[   84.121768][  T126] gspca_stk1135: reg_w 0xd err -71
[   84.139029][  T126] gspca_stk1135: serial bus timeout: status=0x00
[   84.141027][ T5002] FAT-fs (loop2): Directory bread(block 73) failed
[   84.155743][  T126] gspca_stk1135: Sensor write failed
[   84.161101][  T126] gspca_stk1135: serial bus timeout: status=0x00
[   84.187848][  T126] gspca_stk1135: Sensor write failed
[   84.193572][  T126] gspca_stk1135: serial bus timeout: status=0x00
[   84.242481][  T126] gspca_stk1135: Sensor read failed
[   84.258040][  T126] gspca_stk1135: serial bus timeout: status=0x00
[   84.279631][  T126] gspca_stk1135: Sensor read failed
[   84.299754][  T126] gspca_stk1135: Detected sensor type unknown (0x0)
[   84.316608][  T126] gspca_stk1135: serial bus timeout: status=0x00
[   84.324595][  T126] gspca_stk1135: Sensor read failed
[   84.329886][  T126] gspca_stk1135: serial bus timeout: status=0x00
[   84.352556][  T126] gspca_stk1135: Sensor read failed
[   84.357906][  T126] gspca_stk1135: serial bus timeout: status=0x00
[   84.378114][  T126] gspca_stk1135: Sensor write failed
[   84.388226][  T126] gspca_stk1135: serial bus timeout: status=0x00
[   84.408473][  T126] gspca_stk1135: Sensor write failed
[   84.414211][  T126] stk1135: probe of 1-1:0.0 failed with error -71
[   84.442314][  T126] usb 1-1: USB disconnect, device number 2
[   84.511470][ T4343] gspca_sunplus: reg_w_riv err -71
[   84.522668][ T4343] sunplus: probe of 5-1:0.0 failed with error -71
[   84.552101][ T4343] usb 5-1: USB disconnect, device number 5
[   85.733124][ T5020] loop2: detected capacity change from 0 to 131072
[   85.752771][ T5023] loop0: detected capacity change from 0 to 131072
[   85.756263][ T5015] sctp: failed to load transform for md5: -2
[   85.771616][ T5023] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[   85.779778][ T5023] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   85.789567][ T5020] F2FS-fs (loop2): invalid crc value
[   85.843564][ T5023] F2FS-fs (loop0): invalid crc value
[   85.843573][ T5020] F2FS-fs (loop2): Found nat_bits in checkpoint
[   85.897146][ T5020] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   85.932578][ T5020] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   85.938680][ T5023] F2FS-fs (loop0): Found nat_bits in checkpoint
[   86.010086][ T5023] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   86.017224][ T5023] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   87.219220][ T5034] loop3: detected capacity change from 0 to 40427
[   87.332259][ T5034] F2FS-fs (loop3): invalid crc value
[   87.345322][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'.
[   87.383918][ T5034] F2FS-fs (loop3): Found nat_bits in checkpoint
[   87.440228][ T5075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'.
[   87.536225][ T5077] loop0: detected capacity change from 0 to 1024
[   87.563298][ T5034] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   87.668216][ T5077] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   87.819938][ T5077] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.251: inode #647214379: comm syz.0.251: iget: illegal inode #
[   87.827246][ T5060] loop2: detected capacity change from 0 to 32768
[   87.941380][ T5077] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.251: error while reading EA inode 647214379 err=-117
[   88.057968][ T5060] XFS (loop2): Mounting V5 Filesystem
[   88.229907][ T5060] XFS (loop2): Ending clean mount
[   88.308986][ T4264] EXT4-fs (loop0): unmounting filesystem.
[   88.387992][ T4269] syz-executor: attempt to access beyond end of device
[   88.387992][ T4269] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   88.535744][ T4276] XFS (loop2): Unmounting Filesystem
[   90.452434][    C0] sched: RT throttling activated
[   90.572012][ T5141] loop4: detected capacity change from 0 to 512
[   90.593347][ T5110] loop0: detected capacity change from 0 to 262144
[   90.622906][ T5110] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.258 (5110)
[   90.661644][ T5141] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.269: inode #1: comm syz.4.269: iget: illegal inode #
[   90.693788][ T5110] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   90.704572][ T5110] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   90.714183][ T5110] BTRFS warning (device loop0): excessive commit interval 1657
[   90.721768][ T5110] BTRFS info (device loop0): using free space tree
[   90.746349][ T5141] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.269: error while reading EA inode 1 err=-117
[   90.835388][ T5141] EXT4-fs (loop4): 1 orphan inode deleted
[   90.849176][ T5141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   91.048945][ T5164] batman_adv: batadv0: Adding interface: dummy0
[   91.102108][ T5164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.169023][ T5164] batman_adv: batadv0: Interface activated: dummy0
[   91.218217][ T4265] EXT4-fs (loop4): unmounting filesystem.
[   91.242854][ T5110] BTRFS info (device loop0): enabling ssd optimizations
[   91.363611][ T5164] batadv0: mtu less than device minimum
[   91.371071][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.383814][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.395973][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.408186][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.420410][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.432608][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.444818][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.457023][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.469237][ T5164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.529231][ T5110] BTRFS error (device loop0): balance: invalid convert system profile raid6
[   91.633410][ T4264] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   92.537919][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.284'.
[   93.081820][   T26] audit: type=1326 audit(1772645061.626:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.2.278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c5099c799 code=0x0
[   93.694801][ T5221] loop1: detected capacity change from 0 to 32768
[   93.836989][ T5221] XFS (loop1): Mounting V5 Filesystem
[   93.944833][ T5221] XFS (loop1): Ending clean mount
[   93.985170][   T26] audit: type=1800 audit(1772645062.536:6): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.288" name="file1" dev="loop1" ino=6150 res=0 errno=0
[   94.095170][ T5252] XFS (loop1): User initiated shutdown received.
[   94.114590][ T5252] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[   94.198683][ T5252] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   94.265501][ T4306] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   94.369276][ T4279] XFS (loop1): Unmounting Filesystem
[   94.470934][ T4306] usb 3-1: Using ep0 maxpacket: 32
[   94.489194][ T4306] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   94.497886][ T4306] usb 3-1: config 0 has no interface number 0
[   94.550327][ T4306] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   94.569752][ T4306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.578165][ T4306] usb 3-1: Product: syz
[   94.592544][ T4306] usb 3-1: Manufacturer: syz
[   94.597287][ T4306] usb 3-1: SerialNumber: syz
[   94.620418][ T4306] usb 3-1: config 0 descriptor??
[   94.662533][ T4306] smsc95xx v2.0.0
[   94.937526][ T5256] loop4: detected capacity change from 0 to 32768
[   94.968008][ T5256] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.298 (5256)
[   94.970080][ T5268] capability: warning: `syz.3.303' uses 32-bit capabilities (legacy support in use)
[   95.021130][ T5256] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   95.048696][ T5256] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   95.063497][ T4306] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   95.067507][ T5256] BTRFS info (device loop4): force zlib compression, level 3
[   95.081548][ T4306] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   95.082328][ T5256] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   95.105002][ T5256] BTRFS info (device loop4): use zstd compression, level 3
[   95.143346][ T5256] BTRFS info (device loop4): enabling ssd optimizations
[   95.150469][ T5256] BTRFS info (device loop4): using free space tree
[   95.502534][ T5192] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   95.612040][ T4265] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   95.696184][ T5192] usb 4-1: Using ep0 maxpacket: 16
[   95.751158][ T5192] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[   95.766006][ T5192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.787161][ T5192] usb 4-1: Product: syz
[   95.791397][ T5192] usb 4-1: Manufacturer: syz
[   95.807315][ T5192] usb 4-1: SerialNumber: syz
[   95.820961][ T5192] usb 4-1: config 0 descriptor??
[   95.858880][ T5192] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[   95.915505][ T4306] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   95.932083][ T4306] smsc95xx: probe of 3-1:0.67 failed with error -71
[   95.950566][ T4306] usb 3-1: USB disconnect, device number 3
[   95.957524][  T128] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   95.994314][ T5303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'.
[   96.176450][  T128] usb 1-1: Using ep0 maxpacket: 16
[   96.184782][  T128] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.200355][  T128] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.227082][  T128] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.237641][  T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.252176][  T128] usb 1-1: Product: syz
[   96.256545][  T128] usb 1-1: Manufacturer: syz
[   96.262327][  T128] usb 1-1: SerialNumber: syz
[   96.423413][ T5308] loop4: detected capacity change from 0 to 32768
[   96.478860][ T5308] XFS (loop4): Mounting V5 Filesystem
[   96.551810][ T5308] XFS (loop4): Ending clean mount
[   96.577703][   T26] audit: type=1800 audit(1772645065.126:7): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.310" name="file1" dev="loop4" ino=6150 res=0 errno=0
[   96.636163][ T5322] XFS (loop4): User initiated shutdown received.
[   96.652684][ T5322] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[   96.667111][ T5322] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[   96.708439][  T128] usb 1-1: 0:2 : does not exist
[   96.778265][ T4265] XFS (loop4): Unmounting Filesystem
[   97.093266][ T5192] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[   97.122236][  T128] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   97.186011][  T128] usb 1-1: USB disconnect, device number 3
[   97.213624][ T4692] udevd[4692]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.329125][ T4306] usb 4-1: USB disconnect, device number 3
[   97.347238][ T4306] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[   97.376431][ T4306] ssu100 4-1:0.0: device disconnected
[   97.814254][ T5345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.321'.
[   98.048784][ T5338] loop4: detected capacity change from 0 to 40427
[   98.179471][ T5338] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff
[   98.220542][ T5338] F2FS-fs (loop4): invalid crc value
[   98.256125][ T5338] F2FS-fs (loop4): Found nat_bits in checkpoint
[   98.427677][ T5338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   98.766294][ T4265] syz-executor: attempt to access beyond end of device
[   98.766294][ T4265] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   99.154125][   T26] audit: type=1326 audit(1772645067.706:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.3.323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e4879c799 code=0x0
[   99.594408][ T5369] syz.1.331 sent an empty control message without MSG_MORE.
[   99.722336][ T5356] loop2: detected capacity change from 0 to 262144
[   99.735130][ T5356] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.325 (5356)
[  100.007346][ T5356] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  100.017781][ T5356] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  100.027164][ T5356] BTRFS warning (device loop2): excessive commit interval 1657
[  100.035080][ T5356] BTRFS info (device loop2): using free space tree
[  100.174140][ T5356] BTRFS info (device loop2): enabling ssd optimizations
[  100.207349][ T5356] BTRFS error (device loop2): balance: invalid convert system profile raid6
[  100.331507][ T4276] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  100.691171][ T4692] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 9 /dev/loop2 scanned by udevd (4692)
[  101.047789][ T5428] batman_adv: batadv0: Adding interface: dummy0
[  101.088535][ T5428] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.192545][ T5428] batman_adv: batadv0: Interface activated: dummy0
[  101.285973][ T5434] net_ratelimit: 10 callbacks suppressed
[  101.285991][ T5434] batadv0: mtu less than device minimum
[  101.376973][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.389247][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.401506][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.413731][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.425955][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.438145][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.450354][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.462546][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.474769][ T5434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.568996][ T5409] loop1: detected capacity change from 0 to 40427
[  101.674130][ T5409] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[  101.753161][ T5409] F2FS-fs (loop1): invalid crc value
[  101.800549][ T5409] F2FS-fs (loop1): Found nat_bits in checkpoint
[  102.002067][ T5409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  102.081722][ T5454] loop3: detected capacity change from 0 to 256
[  102.103066][   T26] audit: type=1326 audit(1772645070.656:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz.4.345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99ebb9c799 code=0x0
[  102.147569][ T5454] exfat: Deprecated parameter 'utf8'
[  102.178163][ T5454] exfat: Deprecated parameter 'namecase'
[  102.199855][ T5454] exfat: Deprecated parameter 'utf8'
[  102.268218][ T5454] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012037, chksum : 0x73f79feb, utbl_chksum : 0xe619d30d)
[  102.327629][ T4279] syz-executor: attempt to access beyond end of device
[  102.327629][ T4279] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  104.427691][ T5461] loop3: detected capacity change from 0 to 262144
[  104.466771][ T5461] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  104.905813][ T4415] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  105.243515][ T5485] loop4: detected capacity change from 0 to 32768
[  105.306706][ T5485] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.357 (5485)
[  105.339107][ T5512] loop1: detected capacity change from 0 to 164
[  105.378095][ T5485] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.430075][ T5485] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  105.473354][ T5485] BTRFS info (device loop4): allowing degraded mounts
[  105.520819][ T5485] BTRFS info (device loop4): enabling auto defrag
[  105.530947][ T5485] BTRFS info (device loop4): using free space tree
[  105.776081][ T5485] BTRFS info (device loop4): enabling ssd optimizations
[  106.032337][ T4265] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.686886][ T5598] loop4: detected capacity change from 0 to 128
[  107.808174][ T5603] netlink: 'syz.3.393': attribute type 3 has an invalid length.
[  107.826180][ T5603] netlink: 'syz.3.393': attribute type 8 has an invalid length.
[  107.850098][ T5603] netlink: 'syz.3.393': attribute type 4 has an invalid length.
[  107.867577][ T5603] netlink: 'syz.3.393': attribute type 7 has an invalid length.
[  107.889900][ T5603] netlink: 199012 bytes leftover after parsing attributes in process `syz.3.393'.
[  107.995574][ T5608] loop4: detected capacity change from 0 to 128
[  108.068749][ T5608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  108.091165][ T5608] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.351615][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  109.072552][ T5412] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  109.284638][ T5412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.304406][ T5412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.328129][ T5412] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  109.342081][ T5412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  109.351828][ T5412] usb 2-1: SerialNumber: syz
[  109.597374][ T5412] usb 2-1: 0:2 : does not exist
[  109.638924][ T5412] usb 2-1: USB disconnect, device number 5
[  109.873749][ T4692] udevd[4692]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  109.911768][ T5646] loop3: detected capacity change from 0 to 40427
[  109.933321][ T5646] F2FS-fs (loop3): invalid crc value
[  109.979368][ T5646] F2FS-fs (loop3): Found nat_bits in checkpoint
[  110.134933][ T5652] loop0: detected capacity change from 0 to 128
[  110.239747][ T5646] F2FS-fs (loop3): Start checkpoint disabled!
[  110.300533][ T5646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  110.409501][ T5646] syz.3.408: attempt to access beyond end of device
[  110.409501][ T5646] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  110.732178][ T5412] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  110.741915][ T4326] kworker/u4:7: attempt to access beyond end of device
[  110.741915][ T4326] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  110.761791][ T5412] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  110.885937][ T5672] loop4: detected capacity change from 0 to 4096
[  110.929369][ T5672] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.956508][ T5672] EXT4-fs: inline encryption not supported
[  111.024470][ T5672] EXT4-fs: Ignoring removed orlov option
[  111.030166][ T5672] ext4: Unknown parameter 'rootcontext'
[  111.283408][ T5560] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  111.361367][   T26] audit: type=1326 audit(1772645079.906:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e4879c799 code=0x0
[  111.483837][ T5560] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.499443][ T5691] fuse: root generation should be zero
[  111.504722][ T5560] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.526293][ T5560] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  111.542673][ T5560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  111.559044][ T5560] usb 3-1: SerialNumber: syz
[  111.695238][ T4306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  111.755841][ T4306] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  111.776735][ T5560] usb 3-1: 0:2 : does not exist
[  111.817224][ T5560] usb 3-1: USB disconnect, device number 4
[  111.860526][ T5693] loop1: detected capacity change from 0 to 4096
[  111.908315][ T5693] EXT4-fs: Ignoring removed mblk_io_submit option
[  111.935695][ T5693] EXT4-fs: inline encryption not supported
[  111.961773][ T5693] EXT4-fs: Ignoring removed orlov option
[  111.983377][ T5693] ext4: Unknown parameter 'rootcontext'
[  112.093565][ T4692] udevd[4692]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.750826][ T5695] loop4: detected capacity change from 0 to 40427
[  112.799287][ T5695] F2FS-fs (loop4): invalid crc value
[  112.811060][ T5712] loop3: detected capacity change from 0 to 128
[  112.827359][ T5695] F2FS-fs (loop4): Found nat_bits in checkpoint
[  112.900326][ T5712] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  112.949084][ T5695] F2FS-fs (loop4): Start checkpoint disabled!
[  112.960303][ T5712] hpfs: filesystem error: improperly stopped
[  112.987886][ T5712] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  112.992643][ T5695] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  113.032645][ T5712] hpfs: You really don't want any checks? You are crazy...
[  113.082882][ T5712] hpfs: hpfs_map_sector(): read error
[  113.088301][ T5712] hpfs: code page support is disabled
[  113.122808][ T5712] hpfs: hpfs_map_4sectors(): unaligned read
[  113.129018][ T5712] hpfs: hpfs_map_4sectors(): unaligned read
[  113.162689][ T5712] hpfs: filesystem error: unable to find root dir
[  113.192204][ T5695] syz.4.427: attempt to access beyond end of device
[  113.192204][ T5695] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  113.223785][ T5712] hpfs: hpfs_map_4sectors(): unaligned read
[  113.231024][ T5712] hpfs: hpfs_map_sector(): read error
[  113.306330][ T5712] hpfs: hpfs_map_4sectors(): unaligned read
[  113.312297][ T5712] hpfs: hpfs_map_sector(): read error
[  113.359226][ T5712] hpfs: hpfs_map_4sectors(): unaligned read
[  113.406426][ T5712] hpfs: hpfs_map_sector(): read error
[  113.500126][ T4326] kworker/u4:7: attempt to access beyond end of device
[  113.500126][ T4326] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  113.977754][ T5729] loop1: detected capacity change from 0 to 32768
[  114.007582][ T5729] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.439 (5729)
[  114.051523][ T5729] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  114.084583][ T5729] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  114.128828][ T5729] BTRFS info (device loop1): allowing degraded mounts
[  114.158913][ T5746] loop2: detected capacity change from 0 to 128
[  114.178014][ T5729] BTRFS info (device loop1): enabling auto defrag
[  114.208702][ T5729] BTRFS info (device loop1): using free space tree
[  114.250727][ T5746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  114.260298][ T5746] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.423437][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  114.558585][ T5729] BTRFS info (device loop1): enabling ssd optimizations
[  114.850529][ T5775] loop0: detected capacity change from 0 to 512
[  114.900670][ T4279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  114.916861][ T5775] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  114.957205][ T5775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  115.145935][ T5775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  115.168679][ T5775] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.215848][ T5775] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.450: corrupted inode contents
[  115.352598][ T5775] EXT4-fs (loop0): Remounting filesystem read-only
[  115.359159][ T5775] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.450: mark_inode_dirty error
[  115.449401][ T5775] EXT4-fs (loop0): Remounting filesystem read-only
[  115.487864][ T5775] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.450: corrupted inode contents
[  115.584906][ T5775] EXT4-fs (loop0): Remounting filesystem read-only
[  115.591466][ T5775] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.450: mark_inode_dirty error
[  115.675084][ T5775] EXT4-fs (loop0): Remounting filesystem read-only
[  115.861337][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  115.870425][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.882506][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  115.969730][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[  116.298957][ T5800] device hsr_slave_1 left promiscuous mode
[  116.594102][ T5820] loop4: detected capacity change from 0 to 128
[  116.642086][ T5820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  116.669453][ T5820] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.751636][ T5820] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10)
[  116.893328][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  117.360250][ T5188] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  117.413177][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[  117.572699][ T5188] usb 5-1: Using ep0 maxpacket: 8
[  117.579834][ T5845] device hsr_slave_1 left promiscuous mode
[  117.587648][ T5188] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  117.608821][ T5188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  117.625878][ T5188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  117.646199][ T5188] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.672856][ T5188] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  117.690878][ T5188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.940017][ T5188] usb 5-1: GET_CAPABILITIES returned 0
[  117.950751][ T5188] usbtmc 5-1:16.0: can't read capabilities
[  118.180987][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.194956][ T5857] loop2: detected capacity change from 0 to 128
[  118.202731][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.211851][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.220933][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.230365][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.239469][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.248587][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.257723][    C1] vkms_vblank_simulate: vblank timer overrun
[  118.264870][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.274061][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.283127][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.293517][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.302647][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.311737][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.320836][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.325965][ T5857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  118.329926][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.347840][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  118.356942][    C1] vkms_vblank_simulate: vblank timer overrun
[  118.364780][ T5857] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  118.422539][ T5552] usb 5-1: USB disconnect, device number 6
[  118.464813][ T5857] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10)
[  118.530932][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  119.070809][ T5883] loop7: detected capacity change from 0 to 16384
[  119.094694][ T5885] loop4: detected capacity change from 0 to 1024
[  119.119078][ T5885] EXT4-fs: Ignoring removed orlov option
[  119.170943][ T5885] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  119.281874][ T5885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  119.332778][ T5886] loop7: detected capacity change from 16384 to 0
[  119.543323][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  119.573505][ T5898] loop3: detected capacity change from 0 to 256
[  119.599592][ T5898] exfat: Deprecated parameter 'namecase'
[  119.636494][ T5898] exfat: Deprecated parameter 'namecase'
[  119.672540][ T5898] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  119.921309][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'.
[  120.078081][ T5909] device hsr_slave_1 left promiscuous mode
[  120.259056][ T5920] loop2: detected capacity change from 0 to 512
[  120.267237][ T5920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  120.279955][ T5920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  120.306325][ T5920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  120.321847][ T5920] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.373889][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.506: corrupted inode contents
[  120.391675][ T5920] EXT4-fs (loop2): Remounting filesystem read-only
[  120.398558][ T5920] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #2: comm syz.2.506: mark_inode_dirty error
[  120.414103][ T5917] bridge0: port 3(gretap0) entered blocking state
[  120.432653][ T5920] EXT4-fs (loop2): Remounting filesystem read-only
[  120.439393][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.506: corrupted inode contents
[  120.442786][ T5917] bridge0: port 3(gretap0) entered disabled state
[  120.458956][ T5920] EXT4-fs (loop2): Remounting filesystem read-only
[  120.459413][ T5917] device gretap0 entered promiscuous mode
[  120.472317][ T5917] bridge0: port 3(gretap0) entered blocking state
[  120.473050][ T5920] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.506: mark_inode_dirty error
[  120.478865][ T5917] bridge0: port 3(gretap0) entered forwarding state
[  120.495287][ T5920] EXT4-fs (loop2): Remounting filesystem read-only
[  120.503390][ T5919] device gretap0 left promiscuous mode
[  120.510738][ T5919] bridge0: port 3(gretap0) entered disabled state
[  120.522067][ T5923] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.506: corrupted inode contents
[  120.545304][ T5923] EXT4-fs (loop2): Remounting filesystem read-only
[  120.552052][ T5923] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #2: comm syz.2.506: mark_inode_dirty error
[  120.568996][ T5923] EXT4-fs (loop2): Remounting filesystem read-only
[  120.576636][ T5923] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.506: corrupted inode contents
[  120.605369][ T5923] EXT4-fs (loop2): Remounting filesystem read-only
[  120.616254][ T5924] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.506: corrupted inode contents
[  120.661851][ T5924] EXT4-fs (loop2): Remounting filesystem read-only
[  120.681895][ T5924] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.506: mark_inode_dirty error
[  120.693919][ T5924] EXT4-fs (loop2): Remounting filesystem read-only
[  120.713077][ T5924] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem
[  121.294662][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'.
[  121.481940][ T5953] device hsr_slave_1 left promiscuous mode
[  121.766139][ T5971] loop0: detected capacity change from 0 to 128
[  121.784553][ T5972] loop1: detected capacity change from 0 to 256
[  121.848513][ T5972] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[  121.877873][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  121.909643][ T5971] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  122.028223][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  122.214096][ T5981] loop1: detected capacity change from 0 to 1024
[  122.231524][ T5981] EXT4-fs: Ignoring removed orlov option
[  122.267852][ T5981] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  122.308462][ T5981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  122.530705][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  122.615000][ T5550] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  122.717751][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'.
[  122.831226][ T5550] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  122.866408][ T5550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.890470][ T5550] usb 3-1: Product: syz
[  122.899353][ T5550] usb 3-1: Manufacturer: syz
[  122.909756][ T5550] usb 3-1: SerialNumber: syz
[  122.930169][ T5550] usb 3-1: config 0 descriptor??
[  123.307256][ T6013] loop3: detected capacity change from 0 to 128
[  123.324769][ T6013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  123.346723][ T6013] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.347273][ T5550] usb 3-1: Firmware: major: 182, minor: 0, hardware type: ATUSB (0)
[  123.410453][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  123.567010][ T5550] usb 3-1: Read permanent extended address 00:00:00:00:00:00:00:10 from device
[  123.795278][ T5550] usb 3-1: USB disconnect, device number 5
[  123.906502][ T6027] loop4: detected capacity change from 0 to 2048
[  123.941138][ T6027] UDF-fs: error (device loop4): udf_read_inode: (ino 1312) failed !bh
[  123.972206][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.022078][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.061849][ T6021] loop3: detected capacity change from 0 to 32768
[  124.091834][ T6021] XFS (loop3): Mounting V5 Filesystem
[  124.100537][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.139450][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.153249][ T6027] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  124.163374][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.178382][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.213183][ T6027] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  124.229393][ T6021] XFS (loop3): Ending clean mount
[  124.250527][ T6021] XFS (loop3): Quotacheck needed: Please wait.
[  124.261653][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.323463][ T6027] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  124.380920][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.394110][ T6021] XFS (loop3): Quotacheck: Done.
[  124.427374][ T6027] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  124.447643][ T6045] netlink: 51 bytes leftover after parsing attributes in process `syz.1.551'.
[  124.459187][ T6027] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  124.616629][ T4269] XFS (loop3): Unmounting Filesystem
[  124.687948][ T6049] loop2: detected capacity change from 0 to 512
[  124.722547][ T5550] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.741809][ T6049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  124.768630][ T6053] input: syz0 as /devices/virtual/input/input6
[  124.809354][ T6049] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.554: bad orphan inode 11
[  124.823638][ T6049] ext4_test_bit(bit=10, block=4) = 1
[  124.829003][ T6049] is_bad_inode(inode)=0
[  124.904883][ T6049] NEXT_ORPHAN(inode)=2080374784
[  124.933767][ T6049] max_ino=32
[  124.936554][ T5550] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  124.937004][ T6049] i_nlink=0
[  124.937136][ T6049] EXT4-fs (loop2): 1 truncate cleaned up
[  124.952822][ T5550] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  124.968897][ T5550] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  124.988576][ T5550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.042112][ T6047] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  125.054547][ T6049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  125.167444][   T26] audit: type=1800 audit(1772645093.716:11): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="file1" dev="loop2" ino=15 res=0 errno=0
[  125.191895][ T6049] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.554: bg 0: block 393: padding at end of block bitmap is not set
[  125.322686][ T5560] usb 1-1: USB disconnect, device number 4
[  125.395391][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  125.677783][ T6080] netlink: 51 bytes leftover after parsing attributes in process `syz.4.565'.
[  125.836215][ T6088] loop3: detected capacity change from 0 to 2048
[  125.853786][ T6088] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh
[  125.884057][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  125.901170][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  125.932807][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  125.950653][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  125.988639][ T6088] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  126.007357][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  126.018336][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  126.035307][ T6088] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  126.047384][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  126.058927][ T6095] loop2: detected capacity change from 0 to 1024
[  126.073198][ T6095] EXT4-fs: Ignoring removed orlov option
[  126.090381][ T6088] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  126.105720][ T6095] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  126.113077][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  126.171926][ T6095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  126.174822][ T6088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  126.191745][ T6088] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  126.486428][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  126.658884][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'.
[  127.182683][ T5188] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  127.247384][ T5413] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  127.369415][ T6138] loop0: detected capacity change from 0 to 1024
[  127.378090][ T5188] usb 5-1: Using ep0 maxpacket: 16
[  127.391042][ T5188] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  127.400798][ T6138] EXT4-fs: Ignoring removed orlov option
[  127.406743][ T5188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.417687][ T5188] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.428843][ T6138] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  127.446777][ T5188] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.460322][ T5188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.470847][ T5188] usb 5-1: Product: syz
[  127.492600][ T5188] usb 5-1: Manufacturer: syz
[  127.497470][ T5413] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  127.516177][ T5188] usb 5-1: SerialNumber: syz
[  127.520901][ T5413] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  127.542898][ T6138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  127.562818][ T5413] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  127.574213][ T5413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.585836][ T6125] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  127.713398][ T6147] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  127.775502][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  127.963537][ T5188] usb 5-1: 0:2 : does not exist
[  128.242442][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  128.487723][ T6170] loop3: detected capacity change from 0 to 64
[  128.565647][ T6170] hfs: request for non-existent node 24 in B*Tree
[  128.594572][ T6170] hfs: request for non-existent node 24 in B*Tree
[  128.642159][ T6173] hfs: request for non-existent node 25 in B*Tree
[  128.658413][ T6173] hfs: request for non-existent node 25 in B*Tree
[  128.689034][ T6170] hfs: request for non-existent node 26 in B*Tree
[  128.726930][ T6170] hfs: request for non-existent node 26 in B*Tree
[  128.745172][ T6170] hfs: request for non-existent node 27 in B*Tree
[  128.764226][ T6170] hfs: request for non-existent node 27 in B*Tree
[  129.003456][ T5188] usb 5-1: 1:0: failed to get current value for ch 0 (-22)
[  129.050271][ T5188] usb 5-1: USB disconnect, device number 7
[  129.071125][ T5413] usb 3-1: USB disconnect, device number 6
[  129.118056][ T4692] udevd[4692]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.142534][ T5552] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  129.204750][ T4430] udevd[4430]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  129.332503][ T5552] usb 1-1: Using ep0 maxpacket: 32
[  129.339425][ T5552] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  129.348635][ T5552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.360943][ T5552] gspca_main: nw80x-2.14.0 probing 055f:d001
[  129.603991][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'.
[  129.626592][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[  129.690488][ T6187] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.699538][ T6187] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.708294][ T6187] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.717050][ T6187] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.736703][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'.
[  129.750803][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[  129.797545][ T6191] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  130.202209][   T26] audit: type=1326 audit(1772645098.746:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.1.613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0330b9c799 code=0x0
[  130.573052][ T5552] gspca_nw80x: reg_w err -71
[  130.578060][ T5552] nw80x: probe of 1-1:3.0 failed with error -71
[  130.605685][ T5552] usb 1-1: USB disconnect, device number 5
[  130.620977][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'.
[  130.631364][ T6219] netlink: 'syz.3.632': attribute type 21 has an invalid length.
[  130.656618][ T6219] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.665559][ T6219] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.674316][ T6219] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.683053][ T6219] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.701521][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'.
[  130.721243][ T6219] netlink: 'syz.3.632': attribute type 21 has an invalid length.
[  130.844801][ T6223] loop3: detected capacity change from 0 to 8
[  130.882987][ T6223] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  130.895038][ T4692] udevd[4692]: incorrect cramfs checksum on /dev/loop3
[  130.940032][ T6223] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  130.984727][ T6223] cramfs: bad data blocksize 4294966936
[  130.990321][ T6223] cramfs: Error -3 while decompressing!
[  130.996294][ T6223] cramfs: ffffffff96d8e080(428)->ffff888052929000(4096)
[  131.027120][ T6223] cramfs: bad data blocksize 4294966936
[  131.183016][ T6232] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  132.674775][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.681102][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.188657][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'.
[  133.342583][ T5552] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  133.399924][ T6304] loop4: detected capacity change from 0 to 256
[  133.462528][ T5560] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  133.470280][ T6304] FAT-fs (loop4): Directory bread(block 64) failed
[  133.486587][ T6304] FAT-fs (loop4): Directory bread(block 65) failed
[  133.501012][ T6304] FAT-fs (loop4): Directory bread(block 66) failed
[  133.528339][ T6304] FAT-fs (loop4): Directory bread(block 67) failed
[  133.548674][ T6304] FAT-fs (loop4): Directory bread(block 68) failed
[  133.552540][ T5552] usb 2-1: Using ep0 maxpacket: 16
[  133.581265][ T6304] FAT-fs (loop4): Directory bread(block 69) failed
[  133.592051][ T5552] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.612640][ T6304] FAT-fs (loop4): Directory bread(block 70) failed
[  133.626781][ T5552] usb 2-1: config 0 interface 0 has no altsetting 0
[  133.629554][ T6304] FAT-fs (loop4): Directory bread(block 71) failed
[  133.646394][ T5552] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  133.652154][ T6304] FAT-fs (loop4): Directory bread(block 72) failed
[  133.662576][ T5560] usb 1-1: Using ep0 maxpacket: 8
[  133.668812][ T6304] FAT-fs (loop4): Directory bread(block 73) failed
[  133.673304][ T5560] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  133.717019][ T5552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.725315][ T5560] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  133.748144][ T5552] usb 2-1: config 0 descriptor??
[  133.762471][ T5560] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  133.792527][ T5560] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  133.826082][ T5560] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  133.856698][ T5560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.089929][ T5560] usb 1-1: GET_CAPABILITIES returned 0
[  134.095647][ T5560] usbtmc 1-1:16.0: can't read capabilities
[  134.219890][ T5552] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  134.393385][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.402530][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.411644][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.420760][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.429874][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.438976][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.448825][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.457921][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.466968][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.476009][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.485053][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.494090][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.503138][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.512174][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.521210][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.530241][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  134.912123][ T5560] usb 2-1: USB disconnect, device number 6
[  134.973835][ T6338] loop3: detected capacity change from 0 to 32768
[  135.004113][ T5413] usb 1-1: USB disconnect, device number 6
[  135.017102][ T6338] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  135.025538][ T6338] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  135.085320][ T6338] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  135.096380][ T5188] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  135.103290][ T5188] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  135.165838][ T5188] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 62ms
[  135.176280][ T5188] gfs2: fsid=syz:syz.0: jid=0: Done
[  135.183384][ T6338] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  135.757973][ T6352] loop2: detected capacity change from 0 to 7
[  135.784861][ T6352] Dev loop2: unable to read RDB block 7
[  135.790774][ T6352]  loop2: unable to read partition table
[  135.812913][ T6352] loop2: partition table beyond EOD, truncated
[  135.851474][ T6352] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  135.928978][ T3638] Dev loop2: unable to read RDB block 7
[  135.948272][ T3638]  loop2: unable to read partition table
[  135.964722][ T3638] loop2: partition table beyond EOD, truncated
[  136.212956][ T6357] loop3: detected capacity change from 0 to 8192
[  136.266346][ T6357] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  136.355538][ T6357] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  136.402915][ T6357] REISERFS (device loop3): using ordered data mode
[  136.409696][ T6357] reiserfs: using flush barriers
[  136.422345][ T6357] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  136.448631][ T6357] REISERFS (device loop3): checking transaction log (loop3)
[  136.469944][ T6357] REISERFS (device loop3): Using r5 hash to sort names
[  136.487306][ T6357] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  136.852876][ T6362] loop4: detected capacity change from 0 to 32768
[  137.062595][ T6362] XFS (loop4): Mounting V5 Filesystem
[  137.143465][ T6362] XFS (loop4): Ending clean mount
[  137.176120][ T6377] loop0: detected capacity change from 0 to 40427
[  137.213013][ T6377] F2FS-fs (loop0): invalid crc value
[  137.244198][ T6377] F2FS-fs (loop0): Found nat_bits in checkpoint
[  137.299125][ T6377] F2FS-fs (loop0): Start checkpoint disabled!
[  137.344477][ T6377] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  137.557702][ T4265] XFS (loop4): Unmounting Filesystem
[  137.912555][ T5188] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  137.999381][ T6332] kworker/u4:11: attempt to access beyond end of device
[  137.999381][ T6332] loop0: rw=1, sector=77824, nr_sectors = 1736 limit=40427
[  138.068258][ T6332] kworker/u4:11: attempt to access beyond end of device
[  138.068258][ T6332] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  138.131110][ T5188] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  138.150489][ T5188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.175683][ T5188] usb 4-1: Product: syz
[  138.179926][ T5188] usb 4-1: Manufacturer: syz
[  138.227227][ T5188] usb 4-1: SerialNumber: syz
[  138.256930][ T5188] usb 4-1: config 0 descriptor??
[  138.295311][ T5188] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  139.501833][ T5188] gspca_stk1135: reg_w 0xd err -71
[  139.511379][ T5188] gspca_stk1135: serial bus timeout: status=0x00
[  139.532492][ T5188] gspca_stk1135: Sensor write failed
[  139.537834][ T5188] gspca_stk1135: serial bus timeout: status=0x00
[  139.549139][ T5188] gspca_stk1135: Sensor write failed
[  139.567257][ T5188] gspca_stk1135: serial bus timeout: status=0x00
[  139.573823][ T5188] gspca_stk1135: Sensor read failed
[  139.582615][ T5413] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  139.594088][ T5188] gspca_stk1135: serial bus timeout: status=0x00
[  139.600444][ T5188] gspca_stk1135: Sensor read failed
[  139.612863][ T5188] gspca_stk1135: Detected sensor type unknown (0x0)
[  139.619512][ T5188] gspca_stk1135: serial bus timeout: status=0x00
[  139.632608][ T5188] gspca_stk1135: Sensor read failed
[  139.637966][ T5188] gspca_stk1135: serial bus timeout: status=0x00
[  139.655123][ T5188] gspca_stk1135: Sensor read failed
[  139.660371][ T5188] gspca_stk1135: serial bus timeout: status=0x00
[  139.677371][ T5188] gspca_stk1135: Sensor write failed
[  139.694642][ T5188] gspca_stk1135: serial bus timeout: status=0x00
[  139.701214][ T5188] gspca_stk1135: Sensor write failed
[  139.714732][ T5188] stk1135: probe of 4-1:0.0 failed with error -71
[  139.748751][ T5188] usb 4-1: USB disconnect, device number 4
[  139.774813][ T5413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.816571][ T5413] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  139.848756][ T5413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.891887][ T5413] usb 5-1: config 0 descriptor??
[  140.027314][ T6431] loop1: detected capacity change from 0 to 512
[  140.116741][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.152882][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.221901][ T5413] usbhid 5-1:0.0: can't add hid device: -71
[  140.231806][ T5413] usbhid: probe of 5-1:0.0 failed with error -71
[  140.271578][ T5413] usb 5-1: USB disconnect, device number 8
[  140.300346][ T6431] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.682: inode #1: comm syz.1.682: iget: illegal inode #
[  140.321633][ T6431] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.682: error while reading EA inode 1 err=-117
[  140.340958][ T6431] EXT4-fs (loop1): 1 orphan inode deleted
[  140.347348][ T6431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  140.662301][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  140.852645][ T5413] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  141.043547][ T5413] usb 5-1: Using ep0 maxpacket: 32
[  141.050536][ T5413] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.087610][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0
[  141.100612][ T5413] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00
[  141.123898][ T6444] device syzkaller1 entered promiscuous mode
[  141.129984][ T5413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.158719][ T5413] usb 5-1: config 0 descriptor??
[  141.188984][ T5413] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  141.229349][ T5413] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  141.239315][ T6427] loop2: detected capacity change from 0 to 262144
[  141.249919][ T5551] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  141.269294][ T6427] F2FS-fs (loop2): invalid crc value
[  141.295796][ T6427] F2FS-fs (loop2): Found nat_bits in checkpoint
[  141.339479][ T6427] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  141.389684][ T5560] kernel write not supported for file bpf-prog (pid: 5560 comm: kworker/0:18)
[  141.489795][ T5551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.500781][ T5551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.510627][ T5551] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  141.532475][ T5551] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  141.552536][ T5551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.580338][ T5551] usb 1-1: config 0 descriptor??
[  141.585260][ T6417] ldusb 5-1:0.0: Read buffer overflow, 270 bytes dropped
[  141.586910][ T5188] usb 5-1: USB disconnect, device number 9
[  141.612214][ T5188] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  142.031089][ T5551] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  142.057476][ T5551] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  142.633503][ T4253] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  142.822616][ T4253] usb 2-1: Using ep0 maxpacket: 32
[  142.829733][ T4253] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  142.864513][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.901198][ T4253] usb 2-1: config 0 descriptor??
[  142.922170][ T4253] gspca_main: sunplus-2.14.0 probing 041e:400b
[  143.118647][ T6478] loop2: detected capacity change from 0 to 40427
[  143.149144][ T6478] F2FS-fs (loop2): invalid crc value
[  143.197679][ T6478] F2FS-fs (loop2): Found nat_bits in checkpoint
[  143.271969][ T6478] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  143.401236][ T6423] usb 1-1: string descriptor 0 read error: -71
[  143.793969][ T4276] syz-executor: attempt to access beyond end of device
[  143.793969][ T4276] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  144.137131][ T4253] gspca_sunplus: reg_w_riv err -71
[  144.157910][ T4253] sunplus: probe of 2-1:0.0 failed with error -71
[  144.187782][ T4253] usb 2-1: USB disconnect, device number 7
[  144.293171][ T5551] usb 1-1: reset high-speed USB device number 7 using dummy_hcd
[  144.322795][ T5551] usb 1-1: device reset changed ep0 maxpacket size!
[  144.343100][ T5188] usb 1-1: USB disconnect, device number 7
[  144.547685][ T5188] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  144.643848][ T6515] loop4: detected capacity change from 0 to 256
[  144.688253][ T6515] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  144.741178][ T6517] device syzkaller0 entered promiscuous mode
[  144.762681][ T5188] usb 1-1: Using ep0 maxpacket: 32
[  144.773750][ T5188] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  144.801923][ T6505] loop2: detected capacity change from 0 to 32768
[  144.812526][ T5188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.829265][ T6519] loop1: detected capacity change from 0 to 8
[  144.834126][ T5188] usb 1-1: Product: syz
[  144.839547][ T5188] usb 1-1: Manufacturer: syz
[  144.853431][ T5188] usb 1-1: SerialNumber: syz
[  144.899179][ T5188] usb 1-1: config 0 descriptor??
[  144.904325][ T6519] SQUASHFS error: lzo decompression failed, data probably corrupt
[  144.904445][ T6519] SQUASHFS error: Failed to read block 0x91: -5
[  144.904459][ T6519] SQUASHFS error: Unable to read metadata cache entry [8f]
[  144.904475][ T6519] SQUASHFS error: Unable to read inode 0x11f
[  144.916961][   T26] audit: type=1800 audit(1772645113.466:13): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.707" name="file1" dev="loop2" ino=7 res=0 errno=0
[  145.099221][ T6524] loop1: detected capacity change from 0 to 128
[  145.167260][ T5188] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 008
[  145.836278][ T6499] i2c i2c-1: failure reading status
[  145.849748][ T5412] usb 1-1: USB disconnect, device number 8
[  145.942669][ T6535] loop3: detected capacity change from 0 to 8192
[  146.003398][ T6535]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  146.013083][ T6535] loop3: partition table partially beyond EOD, truncated
[  146.033774][ T6535] loop3: p1 start 100663296 is beyond EOD, truncated
[  146.051422][ T6535] loop3: p2 size 134217732 extends beyond EOD, truncated
[  146.076861][ T6535] loop3: p4 size 14876672 extends beyond EOD, truncated
[  146.090211][ T6535] loop3: p5 size 134217732 extends beyond EOD, truncated
[  146.122718][ T6535] loop3: p6 size 14876672 extends beyond EOD, truncated
[  146.334637][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  146.335319][ T4690] udevd[4690]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  146.357363][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  146.375394][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  146.391947][ T4692] udevd[4692]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  146.739078][ T4271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  146.748271][ T4271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.760295][ T4271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.774932][ T6569] loop3: detected capacity change from 0 to 1764
[  146.783190][ T4271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.792323][ T4271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  146.799789][ T4271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.816235][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  146.823605][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.831821][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.840281][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.848588][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  146.856647][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.982820][ T5551] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  147.110640][ T6565] chnl_net:caif_netlink_parms(): no params data found
[  147.172562][ T5551] usb 1-1: Using ep0 maxpacket: 8
[  147.179116][ T5551] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  147.194553][ T5551] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  147.205980][ T5188] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  147.210112][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.220682][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.229471][ T5551] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  147.239717][ T5551] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  147.250214][ T5551] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  147.251645][ T6565] device bridge_slave_0 entered promiscuous mode
[  147.263885][ T5551] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  147.278967][ T5551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.288370][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.301095][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.322775][ T6565] device bridge_slave_1 entered promiscuous mode
[  147.403793][ T6565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.412965][ T5188] usb 5-1: Using ep0 maxpacket: 8
[  147.421720][ T5188] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  147.454163][ T6565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.469793][ T5188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.477942][ T5188] usb 5-1: Product: syz
[  147.482292][ T5188] usb 5-1: Manufacturer: syz
[  147.493500][ T5188] usb 5-1: SerialNumber: syz
[  147.500212][ T5188] usb 5-1: config 0 descriptor??
[  147.501086][ T5551] usb 1-1: usb_control_msg returned -32
[  147.513367][ T6565] team0: Port device team_slave_0 added
[  147.521898][ T5551] usbtmc 1-1:16.0: can't read capabilities
[  147.528296][ T6565] team0: Port device team_slave_1 added
[  147.593263][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.600385][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.627046][ T6565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.641181][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.648653][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.675592][ T6565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.714551][ T6565] device hsr_slave_0 entered promiscuous mode
[  147.715671][ T5188] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  147.729528][ T6565] device hsr_slave_1 entered promiscuous mode
[  147.736503][ T6565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.744321][ T6565] Cannot create hsr debugfs directory
[  147.902618][ T6565] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  147.914101][ T6565] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  147.936121][ T6565] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  147.984082][ T6565] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  148.021421][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.029021][ T6565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.038218][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.045400][ T6565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.066559][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.083553][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.100043][ T6587] loop3: detected capacity change from 0 to 32768
[  148.155338][ T5188] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  148.185542][ T5188] usb 5-1: USB disconnect, device number 10
[  148.196773][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.213188][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.221402][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.247626][ T6587] XFS (loop3): Mounting V5 Filesystem
[  148.285439][ T6587] XFS (loop3): Ending clean mount
[  148.303295][   T26] audit: type=1800 audit(1772645116.856:14): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.742" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  148.323965][ T6565] 8021q: adding VLAN 0 to HW filter on device team0
[  148.325403][ T6596] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 0
[  148.364329][ T6332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  148.374022][ T6332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.392935][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.400065][ T6332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.435325][ T6332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  148.450293][ T6332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.459511][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.466713][ T6332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.480883][ T6332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  148.501507][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  148.513350][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  148.524417][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  148.535385][ T4253] usb 1-1: USB disconnect, device number 9
[  148.556160][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  148.570012][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  148.580948][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  148.595435][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.597348][ T4269] XFS (loop3): Unmounting Filesystem
[  148.608256][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  148.618969][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  148.628446][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.642943][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  148.912588][ T4275] Bluetooth: hci4: command 0x0409 tx timeout
[  149.010478][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  149.018908][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  149.057034][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.163881][ T6618] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  149.163881][ T6618] The task syz.3.745 (6618) triggered the difference, watch for misbehavior.
[  149.527968][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'.
[  149.601326][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'.
[  149.800534][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  149.811484][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  149.856631][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  149.866627][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  149.877100][ T6565] device veth0_vlan entered promiscuous mode
[  149.889211][ T4342] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  149.897069][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  149.928641][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  149.979561][ T6565] device veth1_vlan entered promiscuous mode
[  150.036116][ T6565] device veth0_macvtap entered promiscuous mode
[  150.044177][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  150.057604][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  150.079983][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  150.088137][ T4342] usb 3-1: Using ep0 maxpacket: 8
[  150.094987][ T4342] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  150.112028][ T4342] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  150.122094][ T4342] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  150.127013][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.132211][ T4342] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  150.149936][ T4342] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.164017][ T4342] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  150.173162][ T4342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.208359][ T6565] device veth1_macvtap entered promiscuous mode
[  150.236074][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  150.293984][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  150.343136][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.388345][ T4342] usb 3-1: usb_control_msg returned -32
[  150.390907][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.404396][ T4342] usbtmc 3-1:16.0: can't read capabilities
[  150.428098][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.471691][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.496884][ T6652] loop3: detected capacity change from 0 to 4096
[  150.512254][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.568828][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.581030][ T6652] EXT4-fs (loop3): Test dummy encryption mode enabled
[  150.596145][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.612470][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.639994][ T6652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  150.665608][ T4253] usb 3-1: USB disconnect, device number 7
[  150.704406][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.770548][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.789183][ T6652] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  150.837680][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.885168][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  150.907998][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.990139][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.992597][ T4275] Bluetooth: hci4: command 0x041b tx timeout
[  151.025018][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  151.040376][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.059391][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.139054][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.178462][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.207632][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.237951][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.258596][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.270665][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.281813][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.314569][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.332657][ T6332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.346221][ T6332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.373624][ T6565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.388382][ T6565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.398726][ T6565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.451742][ T6565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.693382][ T6659] netlink: 280 bytes leftover after parsing attributes in process `syz.2.760'.
[  151.701495][ T6661] comedi: valid board names for 8255 driver are:
[  151.704850][ T6659] netlink: 280 bytes leftover after parsing attributes in process `syz.2.760'.
[  151.711986][ T6661]  8255
[  151.723998][ T6332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.738095][ T6661] comedi: valid board names for vmk80xx driver are:
[  151.747518][ T6332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.755850][ T6661]  vmk80xx
[  151.766265][ T6661] comedi: valid board names for usbduxsigma driver are:
[  151.774048][ T6661]  usbduxsigma
[  151.778715][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.786387][ T6661] comedi: valid board names for usbduxfast driver are:
[  151.796572][ T6661]  usbduxfast
[  151.800020][ T6661] comedi: valid board names for usbdux driver are:
[  151.826940][ T6661]  usbdux
[  151.830004][ T6661] comedi: valid board names for ni6501 driver are:
[  151.837289][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.848206][ T6661]  ni6501
[  151.851283][ T6661] comedi: valid board names for dt9812 driver are:
[  151.852017][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.869747][ T6661]  dt9812
[  151.874063][ T6661] comedi: valid board names for ni_labpc_cs driver are:
[  151.881124][ T6661]  ni_labpc_cs
[  151.918264][ T6661] comedi: valid board names for ni_daq_700 driver are:
[  151.928596][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  151.936716][ T6661]  ni_daq_700
[  151.940118][ T6661] comedi: valid board names for labpc_pci driver are:
[  151.968416][ T6661]  labpc_pci
[  151.971748][ T6661] comedi: valid board names for adl_pci9118 driver are:
[  151.985078][ T6661]  pci9118dg
[  151.988634][ T6661]  pci9118hg
[  151.992118][ T6661]  pci9118hr
[  152.008175][ T6661] comedi: valid board names for 8255_pci driver are:
[  152.015296][ T6661]  8255_pci
[  152.018513][ T6661] comedi: valid board names for s526 driver are:
[  152.025528][ T6661]  s526
[  152.028394][ T6661] comedi: valid board names for multiq3 driver are:
[  152.036410][ T6661]  multiq3
[  152.039540][ T6661] comedi: valid board names for pcmuio driver are:
[  152.049876][ T6661]  pcmuio48
[  152.060618][ T6661]  pcmuio96
[  152.064177][ T6661] comedi: valid board names for pcmmio driver are:
[  152.070790][ T6661]  pcmmio
[  152.075853][ T6661] comedi: valid board names for pcmda12 driver are:
[  152.152520][ T6661]  pcmda12
[  152.169437][ T6667] netlink: 'syz.3.763': attribute type 1 has an invalid length.
[  152.184088][ T6661] comedi: valid board names for pcmad driver are:
[  152.190631][ T6661]  pcmad12
[  152.206126][ T6661]  pcmad16
[  152.209199][ T6661] comedi: valid board names for ni_labpc driver are:
[  152.249286][ T6661]  lab-pc-1200
[  152.253371][ T6661]  lab-pc-1200ai
[  152.257484][ T6661]  lab-pc+
[  152.260609][ T6661] comedi: valid board names for atmio16 driver are:
[  152.265368][ T6671] device bond1 entered promiscuous mode
[  152.273778][ T6661]  atmio16
[  152.276968][ T6661]  atmio16d
[  152.280157][ T6661] comedi: valid board names for ni_at_ao driver are:
[  152.288292][ T6661]  at-ao-6
[  152.291419][ T6661]  at-ao-10
[  152.295231][ T6661] comedi: valid board names for ni_at_a2150 driver are:
[  152.302285][ T6661]  ni_at_a2150
[  152.306527][ T6661] comedi: valid board names for adq12b driver are:
[  152.313397][ T6661]  adq12b
[  152.316422][ T6661] comedi: valid board names for mpc624 driver are:
[  152.321625][ T6671] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.330185][ T6661]  mpc624
[  152.333814][ T6661] comedi: valid board names for c6xdigio driver are:
[  152.340577][ T6661]  c6xdigio
[  152.343778][ T6661] comedi: valid board names for aio_iiro_16 driver are:
[  152.348882][ T6671] net_ratelimit: 10 callbacks suppressed
[  152.348895][ T6671] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  152.374547][ T6661]  aio_iiro_16
[  152.378522][ T6661] comedi: valid board names for aio_aio12_8 driver are:
[  152.395799][ T6661]  aio_aio12_8
[  152.399370][ T6661]  aio_ai12_8
[  152.403183][ T6672] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check.
[  152.424088][ T6661]  aio_ao12_4
[  152.427744][ T6661] comedi: valid board names for fl512 driver are:
[  152.449316][ T6661]  fl512
[  152.455318][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.765'.
[  152.468899][ T6661] comedi: valid board names for dmm32at driver are:
[  152.522323][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.765'.
[  152.542853][ T6661]  dmm32at
[  152.560261][ T6661] comedi: valid board names for dt282x driver are:
[  152.567717][ T6661]  dt2821
[  152.570821][ T6661]  dt2821-f
[  152.597509][ T6661]  dt2821-g
[  152.624130][ T6661]  dt2823
[  152.627094][ T6661]  dt2824-pgh
[  152.630359][ T6661]  dt2824-pgl
[  152.682467][ T6661]  dt2825
[  152.685477][ T6661]  dt2827
[  152.688420][ T6661]  dt2828
[  152.717245][ T6661]  dt2829
[  152.720228][ T6661]  dt21-ez
[  152.724462][ T6661]  dt23-ez
[  152.727498][ T6661]  dt24-ez
[  152.730527][ T6661]  dt24-ez-pgl
[  152.762222][ T6661] comedi: valid board names for dt2817 driver are:
[  152.770328][ T6661]  dt2817
[  152.779261][ T6661] comedi: valid board names for dt2815 driver are:
[  152.786077][ T6661]  dt2815
[  152.795773][ T6661] comedi: valid board names for dt2814 driver are:
[  152.802616][ T6661]  dt2814
[  152.805576][ T6661] comedi: valid board names for dt2811 driver are:
[  152.812090][ T6661]  dt2811-pgh
[  152.828892][ T6661]  dt2811-pgl
[  152.832217][ T6661] comedi: valid board names for dt2801 driver are:
[  152.861685][ T6661]  dt2801
[  152.867488][ T6661] comedi: valid board names for das6402 driver are:
[  152.883197][ T6661]  das6402-12
[  152.889884][ T6661]  das6402-16
[  152.895733][ T6661] comedi: valid board names for das1800 driver are:
[  152.927375][ T6661]  das-1701st
[  152.932676][ T6661]  das-1701st-da
[  152.942701][ T6661]  das-1702st
[  152.946017][ T6661]  das-1702st-da
[  152.951601][ T6661]  das-1702hr
[  152.955724][ T6661]  das-1702hr-da
[  152.959652][ T6661]  das-1701ao
[  152.963764][ T6661]  das-1702ao
[  152.967221][ T6661]  das-1801st
[  152.970586][ T6661]  das-1801st-da
[  152.975562][ T6661]  das-1802st
[  152.979242][ T6661]  das-1802st-da
[  152.984980][ T6661]  das-1802hr
[  152.990079][ T6661]  das-1802hr-da
[  152.995050][ T6661]  das-1801hc
[  152.998495][ T6661]  das-1802hc
[  153.008441][ T6661]  das-1801ao
[  153.014027][ T6661]  das-1802ao
[  153.021806][ T6661] comedi: valid board names for das800 driver are:
[  153.036352][ T6661]  das-800
[  153.042655][ T6661]  cio-das800
[  153.063757][ T6661]  das-801
[  153.070177][ T6661]  cio-das801
[  153.074250][ T4275] Bluetooth: hci4: command 0x040f tx timeout
[  153.085118][ T6661]  das-802
[  153.091523][ T6661]  cio-das802
[  153.099675][ T6661]  cio-das802/16
[  153.103546][ T6661] comedi: valid board names for isa-das08 driver are:
[  153.110466][ T6661]  isa-das08
[  153.114013][ T6661]  das08-pgm
[  153.117292][ T6661]  das08-pgh
[  153.123858][ T6693] loop5: detected capacity change from 0 to 128
[  153.130185][ T6661]  das08-pgl
[  153.143837][ T6661]  das08-aoh
[  153.148840][ T6661]  das08-aol
[  153.157762][ T6693] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  153.164065][ T6661]  das08-aom
[  153.178697][ T6661]  das08/jr-ao
[  153.179336][ T6693] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  153.186539][ T6661]  das08jr-16-ao
[  153.212024][ T6661]  pc104-das08
[  153.235090][ T6661]  das08jr/16
[  153.241877][ T6661] comedi: valid board names for das16m1 driver are:
[  153.257642][ T6661]  das16m1
[  153.264036][ T6661] comedi: valid board names for dac02 driver are:
[  153.279494][ T6661]  dac02
[  153.283410][ T6661] comedi: valid board names for rti802 driver are:
[  153.289996][ T6661]  rti802
[  153.293481][ T6661] comedi: valid board names for rti800 driver are:
[  153.300068][ T6661]  rti800
[  153.303468][ T6661]  rti815
[  153.306527][ T6661] comedi: valid board names for pcm3724 driver are:
[  153.306901][ T6565] EXT4-fs (loop5): unmounting filesystem.
[  153.314458][ T6661]  pcm3724
[  153.322253][ T6661] comedi: valid board names for pcl818 driver are:
[  153.329396][ T6661]  pcl818l
[  153.332749][ T6661]  pcl818h
[  153.336051][ T6661]  pcl818hd
[  153.339506][ T6661]  pcl818hg
[  153.343081][ T6661]  pcl818
[  153.346089][ T6661]  pcl718
[  153.349096][ T6661]  pcm3718
[  153.352209][ T6661] comedi: valid board names for pcl816 driver are:
[  153.359856][ T6661]  pcl816
[  153.363361][ T6661]  pcl814b
[  153.366483][ T6661] comedi: valid board names for pcl812 driver are:
[  153.411573][ T6661]  pcl812
[  153.421827][ T6661]  pcl812pg
[  153.429865][ T6661]  acl8112pg
[  153.435888][ T6661]  acl8112dg
[  153.439212][ T6661]  acl8112hg
[  153.447646][ T6661]  a821pgl
[  153.450795][ T6661]  a821pglnda
[  153.456177][ T6661]  a821pgh
[  153.459318][ T6661]  a822pgl
[  153.463115][ T6661]  a822pgh
[  153.466214][ T6661]  a823pgl
[  153.469296][ T6661]  a823pgh
[  153.473242][ T6661]  pcl813
[  153.476264][ T6661]  pcl813b
[  153.479346][ T6661]  acl8113
[  153.483264][ T6661]  iso813
[  153.486660][ T6661]  acl8216
[  153.489772][ T6661]  a826pg
[  153.496070][ T6661] comedi: valid board names for pcl730 driver are:
[  153.507467][ T6661]  pcl730
[  153.510493][ T6661]  iso730
[  153.526002][ T6661]  acl7130
[  153.537329][ T6661]  pcm3730
[  153.540500][ T6661]  pcl725
[  153.544169][ T6661]  p8r8dio
[  153.547341][ T6661]  acl7225b
[  153.550515][ T6661]  p16r16dio
[  153.554574][ T6661]  pcl733
[  153.557661][ T6661]  pcl734
[  153.560664][ T6661]  opmm-1616-xt
[  153.565207][ T6661]  pearl-mm-p
[  153.568616][ T6661]  ir104-pbf
[  153.579917][ T6661] comedi: valid board names for pcl726 driver are:
[  153.590166][ T6661]  pcl726
[  153.593987][ T6661]  pcl727
[  153.597062][ T6661]  pcl728
[  153.610302][ T6661]  acl6126
[  153.616899][ T6661]  acl6128
[  153.623330][ T6661] comedi: valid board names for pcl724 driver are:
[  153.637542][ T6661]  pcl724
[  153.643872][ T6661]  pcl722
[  153.652626][ T6661]  pcl731
[  153.658930][ T6661]  acl7122
[  153.665329][ T6661]  acl7124
[  153.671745][ T6661]  pet48dio
[  153.706930][ T6661]  pcmio48
[  153.730221][ T6661]  onyx-mm-dio
[  153.740556][ T6661] comedi: valid board names for pcl711 driver are:
[  153.773006][ T6661]  pcl711
[  153.796773][ T6661]  pcl711b
[  153.799834][ T6661]  acl8112hg
[  153.803591][ T6661]  acl8112dg
[  153.810277][ T6661] comedi: valid board names for amplc_pc263 driver are:
[  153.820201][ T6661]  pc263
[  153.823390][ T6661] comedi: valid board names for amplc_pc236 driver are:
[  153.830864][ T6661]  pc36at
[  153.834612][ T6661] comedi: valid board names for amplc_dio200 driver are:
[  153.841732][ T6661]  pc212e
[  153.844988][ T6661]  pc214e
[  153.847989][ T6661]  pc215e
[  153.851561][ T6661]  pc218e
[  153.855718][ T6661]  pc272e
[  153.858794][ T6661] comedi: valid board names for comedi_parport driver are:
[  153.867197][ T6661]  comedi_parport
[  153.878916][ T6661] comedi: valid board names for comedi_test driver are:
[  153.891512][ T6661]  comedi_test
[  153.898260][ T6661] comedi: valid board names for comedi_bond driver are:
[  153.910890][ T6661]  comedi_bond
[  154.533465][ T6711] syz.2.777 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  154.707824][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'.
[  154.788264][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'.
[  154.997415][ T6724] loop2: detected capacity change from 0 to 512
[  155.016407][ T6726] input: syz1 as /devices/virtual/input/input7
[  155.104888][ T6724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  155.152704][ T4271] Bluetooth: hci4: command 0x0419 tx timeout
[  155.184754][ T6724] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.601371][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  155.711180][ T6738] loop4: detected capacity change from 0 to 1024
[  155.760278][ T6742] device gretap0 entered promiscuous mode
[  155.785014][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'.
[  155.802336][ T6742] device gretap0 left promiscuous mode
[  155.819803][ T6738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  156.020839][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  156.072493][ T5412] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  156.275582][ T5412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.297196][ T5412] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  156.314505][ T4332] Bluetooth: hci5: Frame reassembly failed (-84)
[  156.325374][ T5412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.341471][ T5412] usb 6-1: config 0 descriptor??
[  156.346961][ T6761] loop0: detected capacity change from 0 to 128
[  156.571566][ T5412] usbhid 6-1:0.0: can't add hid device: -71
[  156.583454][ T5412] usbhid: probe of 6-1:0.0 failed with error -71
[  156.622543][ T5412] usb 6-1: USB disconnect, device number 2
[  156.916243][ T6770] loop0: detected capacity change from 0 to 512
[  156.955564][ T6770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  156.967892][ T6770] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  157.162618][ T5412] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  157.175283][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  157.405027][ T5412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.422673][ T5412] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  157.447289][ T5412] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  157.459804][ T5412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.470706][ T5412] usb 6-1: config 0 descriptor??
[  157.583956][ T6789] loop0: detected capacity change from 0 to 4096
[  157.885102][ T5412] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  157.909634][ T5412] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  158.163628][    C1] plantronics 0003:047F:FFFF.0008: hid_field_extract() called with n (132) > 32! (kworker/u4:4)
[  158.352600][ T4266] Bluetooth: hci5: command 0x1003 tx timeout
[  158.352636][ T4271] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  158.373475][ T5188] usb 6-1: USB disconnect, device number 3
[  159.072822][ T4271] Bluetooth: hci6: command 0xfc11 tx timeout
[  159.081350][ T4275] Bluetooth: hci6: Entering manufacturer mode failed (-110)
[  159.232551][ T4277] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  159.232583][ T4275] Bluetooth: hci7: command 0x1003 tx timeout
[  160.152691][ T6818] loop2: detected capacity change from 0 to 32768
[  160.248294][ T6818] (syz.2.831,6818,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  160.297759][ T6818] (syz.2.831,6818,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  160.298067][ T6822] loop4: detected capacity change from 0 to 32768
[  160.376006][ T6822] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.822 (6822)
[  160.415567][ T6822] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  160.464653][ T6818] JBD2: Ignoring recovery information on journal
[  160.471270][ T6822] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  160.552936][ T6822] BTRFS info (device loop4): using free space tree
[  160.611340][ T6818] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  161.020268][ T6836] loop5: detected capacity change from 0 to 40427
[  161.032710][ T6822] BTRFS info (device loop4): enabling ssd optimizations
[  161.044849][ T6836] F2FS-fs (loop5): build fault injection attr: rate: 19, type: 0x3ffff
[  161.318537][ T6331] 
[  161.320907][ T6331] ======================================================
[  161.325028][ T4265] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  161.327916][ T6331] WARNING: possible circular locking dependency detected
[  161.327937][ T6331] syzkaller #0 Not tainted
[  161.349471][ T6331] ------------------------------------------------------
[  161.356502][ T6331] kworker/u4:10/6331 is trying to acquire lock:
[  161.362743][ T6331] ffff888029dba990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270
[  161.372360][ T6331] 
[  161.372360][ T6331] but task is already holding lock:
[  161.379727][ T6331] ffff888057506ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  161.390008][ T6331] 
[  161.390008][ T6331] which lock already depends on the new lock.
[  161.390008][ T6331] 
[  161.400418][ T6331] 
[  161.400418][ T6331] the existing dependency chain (in reverse order) is:
[  161.409438][ T6331] 
[  161.409438][ T6331] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  161.417970][ T6331]        down_read+0x42/0x2d0
[  161.422647][ T6331]        ocfs2_start_trans+0x3a4/0x6f0
[  161.428112][ T6331]        ocfs2_modify_bh+0xe0/0x4c0
[  161.433323][ T6331]        ocfs2_local_read_info+0x13c8/0x1750
[  161.439326][ T6331]        dquot_load_quota_sb+0x756/0xac0
[  161.444969][ T6331]        dquot_load_quota_inode+0x2d8/0x5d0
[  161.450872][ T6331]        ocfs2_enable_quotas+0x1c5/0x490
[  161.456512][ T6331]        ocfs2_fill_super+0x43b5/0x5090
[  161.462076][ T6331]        mount_bdev+0x287/0x3c0
[  161.466937][ T6331]        legacy_get_tree+0xe6/0x180
[  161.472142][ T6331]        vfs_get_tree+0x88/0x270
[  161.477071][ T6331]        do_new_mount+0x24a/0xa40
[  161.482083][ T6331]        __se_sys_mount+0x2e3/0x3d0
[  161.487261][ T6331]        do_syscall_64+0x4c/0xa0
[  161.492185][ T6331]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.498587][ T6331] 
[  161.498587][ T6331] -> #4 (sb_internal#2){.+.+}-{0:0}:
[  161.506062][ T6331]        ocfs2_start_trans+0x2a5/0x6f0
[  161.511502][ T6331]        ocfs2_acquire_dquot+0x681/0xb20
[  161.517118][ T6331]        dqget+0x778/0xeb0
[  161.521514][ T6331]        __dquot_initialize+0x3c3/0xcd0
[  161.527042][ T6331]        ocfs2_get_init_inode+0x144/0x1b0
[  161.532744][ T6331]        ocfs2_mknod+0x8c8/0x25b0
[  161.537750][ T6331]        ocfs2_create+0x1b6/0x4b0
[  161.542758][ T6331]        path_openat+0x1181/0x2ee0
[  161.547853][ T6331]        do_filp_open+0x1f1/0x430
[  161.552867][ T6331]        do_sys_openat2+0x150/0x4b0
[  161.558100][ T6331]        __x64_sys_openat+0x135/0x160
[  161.563464][ T6331]        do_syscall_64+0x4c/0xa0
[  161.568397][ T6331]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.574799][ T6331] 
[  161.574799][ T6331] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  161.583661][ T6331]        down_write+0x36/0x60
[  161.588326][ T6331]        ocfs2_create_local_dquot+0x1a5/0x18e0
[  161.594464][ T6331]        ocfs2_acquire_dquot+0x7c6/0xb20
[  161.600079][ T6331]        dqget+0x778/0xeb0
[  161.604482][ T6331]        __dquot_initialize+0x3c3/0xcd0
[  161.610014][ T6331]        ocfs2_get_init_inode+0x144/0x1b0
[  161.615810][ T6331]        ocfs2_mknod+0x8c8/0x25b0
[  161.620825][ T6331]        ocfs2_create+0x1b6/0x4b0
[  161.625838][ T6331]        path_openat+0x1181/0x2ee0
[  161.630931][ T6331]        do_filp_open+0x1f1/0x430
[  161.635972][ T6331]        do_sys_openat2+0x150/0x4b0
[  161.641157][ T6331]        __x64_sys_openat+0x135/0x160
[  161.646511][ T6331]        do_syscall_64+0x4c/0xa0
[  161.651432][ T6331]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.657835][ T6331] 
[  161.657835][ T6331] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  161.665461][ T6331]        __mutex_lock+0x12d/0xaf0
[  161.670480][ T6331]        dquot_commit+0x5a/0x410
[  161.675405][ T6331]        ext4_write_dquot+0x1f0/0x360
[  161.680760][ T6331]        mark_all_dquot_dirty+0xf9/0x400
[  161.686434][ T6331]        __dquot_free_space+0x7ec/0xbc0
[  161.691963][ T6331]        ext4_free_blocks+0x1bf3/0x26a0
[  161.697494][ T6331]        ext4_ext_remove_space+0x225f/0x44c0
[  161.703456][ T6331]        ext4_ext_truncate+0x211/0x370
[  161.708899][ T6331]        ext4_truncate+0xa23/0x1240
[  161.714085][ T6331]        ext4_setattr+0x10cb/0x19f0
[  161.719274][ T6331]        notify_change+0xc74/0xf40
[  161.724370][ T6331]        do_truncate+0x1ac/0x240
[  161.729291][ T6331]        path_openat+0x2861/0x2ee0
[  161.734384][ T6331]        do_filp_open+0x1f1/0x430
[  161.739388][ T6331]        do_sys_openat2+0x150/0x4b0
[  161.744573][ T6331]        __x64_sys_creat+0x8c/0xb0
[  161.749671][ T6331]        do_syscall_64+0x4c/0xa0
[  161.754594][ T6331]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.760991][ T6331] 
[  161.760991][ T6331] -> #1 (&ei->i_data_sem){++++}-{3:3}:
[  161.768628][ T6331]        down_write+0x36/0x60
[  161.773294][ T6331]        ext4_truncate+0x999/0x1240
[  161.778479][ T6331]        ext4_setattr+0x10cb/0x19f0
[  161.783657][ T6331]        notify_change+0xc74/0xf40
[  161.788753][ T6331]        do_truncate+0x1ac/0x240
[  161.793672][ T6331]        do_sys_ftruncate+0x312/0x3c0
[  161.799028][ T6331]        do_syscall_64+0x4c/0xa0
[  161.803954][ T6331]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.810421][ T6331] 
[  161.810421][ T6331] -> #0 (jbd2_handle){++++}-{0:0}:
[  161.817696][ T6331]        __lock_acquire+0x2d07/0x7d10
[  161.823058][ T6331]        lock_acquire+0x1bb/0x4a0
[  161.828067][ T6331]        wait_transaction_locked+0x1bf/0x270
[  161.834035][ T6331]        start_this_handle+0x7ec/0x2230
[  161.839564][ T6331]        jbd2__journal_start+0x2b7/0x5a0
[  161.845176][ T6331]        jbd2_journal_start+0x26/0x30
[  161.850537][ T6331]        ocfs2_start_trans+0x3b0/0x6f0
[  161.855988][ T6331]        ocfs2_release_dquot+0x47c/0xc70
[  161.861602][ T6331]        quota_release_workfn+0x35e/0x610
[  161.867301][ T6331]        process_one_work+0x8a2/0x1160
[  161.872744][ T6331]        worker_thread+0xaa2/0x1270
[  161.877923][ T6331]        kthread+0x29d/0x330
[  161.882504][ T6331]        ret_from_fork+0x1f/0x30
[  161.887428][ T6331] 
[  161.887428][ T6331] other info that might help us debug this:
[  161.887428][ T6331] 
[  161.897723][ T6331] Chain exists of:
[  161.897723][ T6331]   jbd2_handle --> sb_internal#2 --> &journal->j_trans_barrier
[  161.897723][ T6331] 
[  161.911114][ T6331]  Possible unsafe locking scenario:
[  161.911114][ T6331] 
[  161.918555][ T6331]        CPU0                    CPU1
[  161.923903][ T6331]        ----                    ----
[  161.929247][ T6331]   lock(&journal->j_trans_barrier);
[  161.934528][ T6331]                                lock(sb_internal#2);
[  161.941447][ T6331]                                lock(&journal->j_trans_barrier);
[  161.949231][ T6331]   lock(jbd2_handle);
[  161.953283][ T6331] 
[  161.953283][ T6331]  *** DEADLOCK ***
[  161.953283][ T6331] 
[  161.961404][ T6331] 7 locks held by kworker/u4:10/6331:
[  161.966754][ T6331]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  161.977794][ T6331]  #1: ffffc90003367d00 ((quota_release_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  161.988487][ T6331]  #2: ffff888071f164a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_release_dquot+0x260/0xc70
[  161.998519][ T6331]  #3: ffff888071d409c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290
[  162.011570][ T6331]  #4: ffff888071d40660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290
[  162.022875][ T6331]  #5: ffff88807deac650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_release_dquot+0x47c/0xc70
[  162.032692][ T6331]  #6: ffff888057506ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  162.043414][ T6331] 
[  162.043414][ T6331] stack backtrace:
[  162.049292][ T6331] CPU: 0 PID: 6331 Comm: kworker/u4:10 Not tainted syzkaller #0
[  162.056906][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  162.066942][ T6331] Workqueue: events_unbound quota_release_workfn
[  162.073270][ T6331] Call Trace:
[  162.076543][ T6331]  <TASK>
[  162.079461][ T6331]  dump_stack_lvl+0x188/0x24e
[  162.084136][ T6331]  ? load_image+0x400/0x400
[  162.088641][ T6331]  ? show_regs_print_info+0x12/0x12
[  162.093828][ T6331]  ? print_circular_bug+0x12b/0x1a0
[  162.099221][ T6331]  check_noncircular+0x296/0x330
[  162.104146][ T6331]  ? add_chain_block+0x940/0x940
[  162.109069][ T6331]  ? lockdep_lock+0xf1/0x1f0
[  162.113649][ T6331]  ? _find_first_zero_bit+0xcf/0x100
[  162.118920][ T6331]  __lock_acquire+0x2d07/0x7d10
[  162.123765][ T6331]  ? verify_lock_unused+0x140/0x140
[  162.128950][ T6331]  ? mark_lock+0x94/0x320
[  162.133270][ T6331]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  162.139237][ T6331]  lock_acquire+0x1bb/0x4a0
[  162.143727][ T6331]  ? wait_transaction_locked+0x1a6/0x270
[  162.149431][ T6331]  ? __lock_acquire+0x7d10/0x7d10
[  162.154441][ T6331]  ? ret_from_fork+0x1f/0x30
[  162.159031][ T6331]  ? read_lock_is_recursive+0x10/0x10
[  162.164397][ T6331]  ? prepare_to_wait_exclusive+0x7e/0x220
[  162.170113][ T6331]  ? wait_transaction_locked+0x1a6/0x270
[  162.175727][ T6331]  wait_transaction_locked+0x1bf/0x270
[  162.181167][ T6331]  ? wait_transaction_locked+0x1a6/0x270
[  162.186958][ T6331]  ? jbd2_journal_begin_ordered_truncate+0x150/0x150
[  162.193614][ T6331]  ? stack_trace_save+0xa6/0xf0
[  162.198449][ T6331]  ? wake_bit_function+0x200/0x200
[  162.203546][ T6331]  ? __lock_acquire+0x13cf/0x7d10
[  162.208559][ T6331]  start_this_handle+0x7ec/0x2230
[  162.213567][ T6331]  ? slab_post_alloc_hook+0x4b/0x480
[  162.218840][ T6331]  ? kmem_cache_alloc+0x123/0x2f0
[  162.223845][ T6331]  ? jbd2__journal_start+0x13c/0x5a0
[  162.229122][ T6331]  ? jbd2__journal_start+0x5a0/0x5a0
[  162.234395][ T6331]  ? __kasan_slab_alloc+0x6b/0x80
[  162.239411][ T6331]  ? slab_post_alloc_hook+0x67/0x480
[  162.244680][ T6331]  ? slab_pre_alloc_hook+0x59/0x310
[  162.249864][ T6331]  ? rcu_is_watching+0x11/0xa0
[  162.254629][ T6331]  ? kmem_cache_alloc+0x151/0x2f0
[  162.259637][ T6331]  ? jbd2__journal_start+0x13c/0x5a0
[  162.264905][ T6331]  jbd2__journal_start+0x2b7/0x5a0
[  162.270011][ T6331]  jbd2_journal_start+0x26/0x30
[  162.274845][ T6331]  ocfs2_start_trans+0x3b0/0x6f0
[  162.279766][ T6331]  ? down_write+0x42/0x60
[  162.284086][ T6331]  ? ocfs2_recovery_exit+0x50/0x50
[  162.289184][ T6331]  ocfs2_release_dquot+0x47c/0xc70
[  162.294282][ T6331]  ? ocfs2_acquire_dquot+0xb20/0xb20
[  162.299553][ T6331]  ? __lock_acquire+0x7d10/0x7d10
[  162.304563][ T6331]  ? do_raw_spin_lock+0x128/0x2f0
[  162.309573][ T6331]  ? __rwlock_init+0x140/0x140
[  162.314319][ T6331]  ? do_raw_spin_unlock+0x11d/0x230
[  162.319499][ T6331]  quota_release_workfn+0x35e/0x610
[  162.324694][ T6331]  ? dquot_quota_disable+0x380/0x380
[  162.329982][ T6331]  ? _raw_spin_unlock_irq+0x1f/0x40
[  162.335190][ T6331]  ? process_one_work+0x7b0/0x1160
[  162.340315][ T6331]  process_one_work+0x8a2/0x1160
[  162.345259][ T6331]  ? worker_detach_from_pool+0x240/0x240
[  162.350886][ T6331]  ? _raw_spin_lock_irq+0xb7/0xf0
[  162.355899][ T6331]  ? _raw_spin_lock_irqsave+0x100/0x100
[  162.361524][ T6331]  ? kthread_data+0x4b/0xc0
[  162.366016][ T6331]  worker_thread+0xaa2/0x1270
[  162.370686][ T6331]  kthread+0x29d/0x330
[  162.374735][ T6331]  ? worker_clr_flags+0x1a0/0x1a0
[  162.379749][ T6331]  ? kthread_blkcg+0xd0/0xd0
[  162.384324][ T6331]  ret_from_fork+0x1f/0x30
[  162.388743][ T6331]  </TASK>
[  162.394509][ T6875] loop3: detected capacity change from 0 to 16
SYZFAIL: failed to send rpc
fd=3 want=304 sent=0 n=-1 (errno 32: Broken pipe)
[  162.439144][ T6875] erofs: (device loop3): mounted with root inode @ nid 36.
[  162.453679][ T4276] ocfs2: Unmounting device (7,2) on (node local)
[  162.460615][ T4692] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 10 /dev/loop4 scanned by udevd (4692)
[  162.568719][ T6874] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  163.125217][ T4332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.138112][ T4332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.208125][ T4332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.218711][ T4332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.275161][ T4332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.285591][ T4332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.334941][ T4332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.345272][ T4332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.122001][ T4332] device hsr_slave_0 left promiscuous mode
[  164.128312][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.136340][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.144183][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.151602][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.162193][ T4332] device bridge_slave_1 left promiscuous mode
[  164.168581][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.179514][ T4332] device bridge_slave_0 left promiscuous mode
[  164.185859][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.199067][ T4332] device veth1_macvtap left promiscuous mode
[  164.205150][ T4332] device veth0_macvtap left promiscuous mode
[  164.211251][ T4332] device veth1_vlan left promiscuous mode
[  164.218899][ T4332] device veth0_vlan left promiscuous mode
[  164.408467][ T4332] bond1 (unregistering): Released all slaves
[  164.484501][ T4332] team0 (unregistering): Port device team_slave_1 removed
[  164.495601][ T4332] team0 (unregistering): Port device team_slave_0 removed
[  164.521066][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.549805][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.589412][ T4332] bond0 (unregistering): Released all slaves
[  165.079013][ T4332] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.129215][ T4332] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.166992][ T4332] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.218767][ T4332] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.318530][ T4332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.386079][ T4332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.435910][ T4332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.476182][ T4332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.556393][ T4332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.596565][ T4332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.635929][ T4332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.688088][ T4332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.903929][ T4332] device hsr_slave_0 left promiscuous mode
[  166.910212][ T4332] device hsr_slave_1 left promiscuous mode
[  166.916765][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.924705][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.933043][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.940465][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.948766][ T4332] device bridge_slave_1 left promiscuous mode
[  166.955192][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.963575][ T4332] device bridge_slave_0 left promiscuous mode
[  166.969767][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.980780][ T4332] device hsr_slave_0 left promiscuous mode
[  166.987299][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.995034][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.002904][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.010318][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.018675][ T4332] device bridge_slave_1 left promiscuous mode
[  167.025167][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.033588][ T4332] device bridge_slave_0 left promiscuous mode
[  167.039774][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.049901][ T4332] device hsr_slave_0 left promiscuous mode
[  167.056516][ T4332] batman_adv: batadv0: Interface deactivated: dummy0
[  167.063285][ T4332] batman_adv: batadv0: Removing interface: dummy0
[  167.069966][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.077496][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.085117][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.093049][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.100534][ T4332] device bridge_slave_1 left promiscuous mode
[  167.106725][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.114755][ T4332] device bridge_slave_0 left promiscuous mode
[  167.120879][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.131082][ T4332] device veth1_macvtap left promiscuous mode
[  167.138386][ T4332] device veth0_macvtap left promiscuous mode
[  167.144492][ T4332] device veth1_vlan left promiscuous mode
[  167.150238][ T4332] device veth0_vlan left promiscuous mode
[  167.156580][ T4332] device veth1_macvtap left promiscuous mode
[  167.162651][ T4332] device veth0_macvtap left promiscuous mode
[  167.168669][ T4332] device veth1_vlan left promiscuous mode
[  167.174625][ T4332] device veth0_vlan left promiscuous mode
[  167.180849][ T4332] device veth1_macvtap left promiscuous mode
[  167.187058][ T4332] device veth0_macvtap left promiscuous mode
[  167.193270][ T4332] device veth1_vlan left promiscuous mode
[  167.199008][ T4332] device veth0_vlan left promiscuous mode
[  167.393539][ T4332] team0 (unregistering): Port device team_slave_1 removed
[  167.418642][ T4332] team0 (unregistering): Port device team_slave_0 removed
[  167.442936][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.468880][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.535738][ T4332] bond0 (unregistering): Released all slaves
[  167.615351][ T4332] bond1 (unregistering): Released all slaves
[  167.687832][ T4332] team0 (unregistering): Port device team_slave_1 removed
[  167.711777][ T4332] team0 (unregistering): Port device team_slave_0 removed
[  167.738555][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.764621][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.805024][ T4332] bond0 (unregistering): Released all slaves
[  167.955531][ T4332] team0 (unregistering): Port device team_slave_1 removed
[  167.979478][ T4332] team0 (unregistering): Port device team_slave_0 removed
[  168.004685][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.031192][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.070611][ T4332] bond0 (unregistering): Released all slaves