last executing test programs:

34.688152553s ago: executing program 2 (id=754):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r0, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/4072, 0xfe8}], 0x1}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

34.573996306s ago: executing program 2 (id=755):
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r0, 0x0, 0x0)
request_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0)

34.366821011s ago: executing program 2 (id=756):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10000)

34.027392629s ago: executing program 2 (id=759):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000140)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00')

33.491500952s ago: executing program 2 (id=765):
syz_mount_image$fuse(0x0, 0x0, 0x40000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=sysadm_u,euid>', @ANYRESDEC, @ANYBLOB="2c61707072616973655f747970653dc5a409eb696d6173695d2c66736d616769633d3078303030303030303030303030303430312c6673"], 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000300)=[{0x3, 0x5, 0x10, 0x4}, {0x3, 0x5, 0x2, 0x1}, {0x3, 0x1, 0x8, 0xa}, {0x1, 0x4, 0x1, 0x9}, {0x4, 0x4, 0x5, 0x8}], 0x10, 0x3}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000019000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)

32.469424756s ago: executing program 2 (id=771):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

32.138367303s ago: executing program 32 (id=771):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4.851707855s ago: executing program 3 (id=1030):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x112)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
statfs(&(0x7f0000000200)='.\x00', 0x0)

4.24401407s ago: executing program 1 (id=1031):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2010018, &(0x7f0000000540)={[{@nodiscard}, {@nocheckpoint_merge}, {@resgid}, {@six_active_logs}, {@flush_merge}, {@grpjquota={'grpjquota', 0x3d, '!'}}, {@acl}, {@noacl}, {@nobarrier}, {@lfs_mode}, {@jqfmt_vfsold}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)

3.151695816s ago: executing program 0 (id=1041):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0x80001e1)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
truncate(&(0x7f0000000940)='./file1\x00', 0x1)

3.100424556s ago: executing program 3 (id=1042):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0)
rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./bus\x00')

2.928277611s ago: executing program 0 (id=1044):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r0, 0xe0ffff, 0x19, 0x3)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)

2.372500704s ago: executing program 0 (id=1047):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)

2.356786814s ago: executing program 1 (id=1048):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
unshare(0x60000600)

1.872792605s ago: executing program 3 (id=1052):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}], 0x10)
sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}]}, &(0x7f00000002c0)=0x10)

1.728976079s ago: executing program 0 (id=1055):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x130)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.632666311s ago: executing program 3 (id=1057):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x100, 0x7, 0xffffffff, 0x1000, 0x4, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x4, 0x8, 0x4, 0x100, 0xd, 0xfffffffb, 0x52, 0x5, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffffc]})
ioctl$COMEDI_SETRSUBD(r0, 0x6410)

1.452885235s ago: executing program 3 (id=1059):
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x17f)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0)
sendfile(r0, r0, &(0x7f00000000c0)=0x1, 0x9)

1.286479349s ago: executing program 3 (id=1062):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="200c490000009dd2946577ba5714a0c55b9a580289302874b5757d65cf019d79d0c7d0e352195d404db291a3a7c12dddaec0498a87c3c3a98e0103794a26f42516756c2e9566e785"], 0x0, 0x0, 0x0, 0x0})

1.27811353s ago: executing program 5 (id=1063):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1.136996633s ago: executing program 1 (id=1064):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})

1.136773053s ago: executing program 4 (id=1065):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$eJzs3U1sHGf9B/DvbnbX3vz/Sp02SQOqRNRIBRGROLGSYi4NCKFIVKgqB8TRSpzGyiatHBc5EYLwfuDCoXeKRG5cQOIeVM7AqVcfKyFx6SmAxKKZnbXXL7F3ndhri88nmp3nmedlnuc3Mzu7s4oc4H/WtXNpPE4t1869uVzkVx7NdFYezdzpp5NMJKknjd4qtbtJ7aPkanpLPlNsrLqrPW0/HyzMvv3xpyuf9HKNainr17drt8mV+hYbH1ZLziQ5Uq2fwbr+rm/orzVyd7XVGRYBO9sPHIxbM0l3ne+eWivZ0fDXLXBg1Xr3zU0X9FRyNMlk9Tmgd1fs3bMPtYfjHgAAAADsgxd+WX6FPzbucQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBhUv39/1q11PvpM6n1//5/q9qWKn2oPR73AAAAAAAAAABgdN/8/w0bPvckT7KcY/18t1b+5v9qmTlRvv5f3s+9zGcx57OcuSxlKYu5mGSqLG+Wr63luaWlxYtDtLy02jIDLS8NOYP27icPAAAAAAAAAIdFY/QmP861td//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIKglR3qrcjnRT0+l3kgymaRV1HuY/LWfPpB+/afBXPff3dKmao/3c0wAAAAwJi88yZMs51g/362V3/lPld/7J/N+7mYpC1lKJ/O5UT4L6H3rr688mumsPJq5Uyyb+/3qP0YaRtljes8ett7z6bJGOzezUG45n+t5N53cSL1sWTjdH8/W4/pRMabaG5UhR3ajWhcz/1WaI81qN2pD15wqI1KMqBeR6aptEY3j20dixKPT31M/9hdTX33yc+J5xny5t3r9t711MZ+fjxSTvbYxEpcGzr5T20ci+fwff/edW527tydu3jt3cKY0gomBJ2gbIzEzEImXh43ErcMaiUHTZSROruav5Rv5ds7lTN7KYhbyvcxlKfM5k69nLkcyV53PxevU9pG6ui731k4jaZXHpVm9iw4/pqXM5dWy7bEs5Ft5Nzcynyvlv0u5mNdzOZczO3CETw5x1ddHe6c9+4WBh8m/SNIert0+KAZ2fPXuNHjWT5fXwfF1W9ai9OLzvx81Plslin38pFofDBsjcXEgEi9tH4nflG8r9zp3by/emntvyP29Vq2L6+hnB+ouUZwvLxYHq8ytPzuKspc2lk324tWqfnHpla2/4xZlJ1fLdrpSW9VnuM09XSrLXt6ybKYsOz1Qtu7z1tXe5y0ADryjXzzaav+9/Zf2h+2ftm+135z82sSXJ15ppfnn5lca00deq79S+0M+zA/Wvv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7d+/+g9tznc784oZEt9v94VOK9jDRTtLfkuzUqpmd6+xNopWkTDT6idH6mRiqcmvt6Lzx+2cZc3PUVslzCVSjOsnuP7j9z263u++HaYtEc5tzfi3RrWwq6g7VfGyJf3WfX4djfmMC9tyFpTvvXbh3/8GXFu7MvTP/zvzd2cuXZ6dnL1/524WbC5356d7ruEcJ7IW1m/64RwIAAAAAAAAAAAAMaz/+W8JTdv2ffZ4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEhdOzdRpc5PF68rj2Y6xdJPr1Ysq9WT1L6f1D5Krqa3ZGqgu9rT9vPBwuzbH3+68kkv16iWsn59XbvmbmbxsFpyJsmRaj1o8hn6u16tdzWyUm11hkXAzvYDB+P23wAAAP//+B8RmQ==")
r0 = creat(&(0x7f0000000000)='./file3\x00', 0x0)
rename(&(0x7f0000000b40)='./file1\x00', &(0x7f0000000340)='./file3\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

1.125256333s ago: executing program 5 (id=1066):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000099, 0x0, 0x7e}]})

970.599437ms ago: executing program 5 (id=1067):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf20, &(0x7f0000001e80)="$eJzs3U9sHNX9APA3a6/txCZeAz8w8COk0IpAwQ5JpKa3IFBvRVx6B4WERhiKGnog4k/oAVEJUSTEqeJAxYVSKUVqJVClClU9tD216q0n1AuVqlQKqqoWKXFl+731+tnDrif27Hr385G+fvvmzc73O1nLmZmdfRuAkdVY/Xn8+HwRwtsfv/Xwi08Uv1pZdkd7jUOrP4vYa4UQmh39Itvep3HBlcsvnNqqLcLR1Z+pHx651H7udAjhQjgUPgmt8MHi0ufvv/PQ4Q9fnbrpjfNPvbRLu9+W7wcAAAyji39c+us9f//DfXNfXDx4Mky2l6fj81bsT8fj/iPxQDkdLzfCxn7REZ0msvXGYjSy9cay9cazPOMl+ZrZdpol6010yTfWsWyr/Vw9RQEAAIA9Jp3XtkLRWNjQbzQWFtbO+1d8OjtRLDxzdunMuT4VCgAAAFT2r5fjO9pCCCGEEKLGaA5ADbsezQGoQQghRjGmt1q+PNvvKxAAAADAqMnnC9vkws7O1NXeWqu3/JcebGz9fNgBdf/+y7+38r/3ir84AABUN6xHk2m/0nF0mscgn0dwLHvedo//G9l2xrdZZz7/4ZbLi8F9mcrqz/9dB1VZ/dt9HfulrP58PsxBVVZ/Pk/noCqrf7LmOqoqq3+q5jqqKqt/X811VFVW//6a66iqrP7pmuuoqqz+mZrrqKqs/utqrqOqsvoP1FxHVWX175Xbasvqb9VcR1Vl9c/VXEdVZfVfX3MdVZXVf0PNdVRVVv+NNdfRL7fHNv07HMzGO8+f83O6vXKOBwAAAKPuv+b/E0IIITbF6n0QA1CHEMMdxQDUIL4s2u/3DUAtQoiKseZ3K49f7tN1BwAAAGBwpM8FpA+gL0dpfKzL+Hj8LNHq+NT6Cmm82eX5E13GJ7uMAwAAACH8+rUzt7xZrH/O/1rnw+uYN+pqqDCPUT7R3XbzX+u8Z9eaf6/MWwYAAMBoKb71ydV7H373ubkvLh482XH2ezWe76Z5QMfjtYGPYj/dFzCT9Yt0Dn1yY55GyXr59YHryrb36DXuKAAAAIywdP7eCkVjoeO8uxUajYWF9fPx+dAszpxdOn0k9tP3s/x+tjm5svyBmusGAAAAerd+vr/1+X/6Ht/58O1/LzxzdunMubX+THt5s9F5XWB2fXnReV2glS0/WrL8WOyn7+/87uy+1eULp7639MRO7zwAAACMiHPPn3/q8aWl09/3wAMPPGg/6PdfJgAAYKd99tlbzR8cm/nN2uf/1+e/S5//PxT7rTi335/iCuk+gfQ5gE2f139sY57ZsvWe3bheK1tvLMZkVvdUx3ZW7MueN1eWr7VxOxMl+aazfDNZvnyegvFs/ZTvQLY8n58wrTebLc/nYRzPchRZ/jsDAAAAlFt87ulnF889f/7+s08//uTpJ08/c+zoiW+eOHHkgW88sLh6X/9i5939AAAAwF60ftNvvysBAAAAAAAAAAAAAAAAAACA0VXH14n1ex8BAABg1P3z5RDCBSGEqBzLk/2vQQghhBAjFcUA1CCGK+I3vteUb7zGXB3R6PPlBwAAAGAEXbn8wqkQpkIIK+0WLhQ7mq+9tdZac/XyWt7Uztz/l7mVSKtdenBsw/P372g1jLor8fcutZvs8O+//Hsr/3uv7Gz+qfSg579/2SXjk9Xy3r34s/nO/LeO95g/3/9Hq+U/nOW/O/SWf/ndLP9j1fLfk+Xf32P+Tfv/bLX898b887F/+K5e8298/Sdjm/ZjX4/5v57t/xOh1/zZ/rd6TJi5L+YHgFE0rDcApKOEdBw9Hftpf+PhZhjLnrfd4/9Gtp3xa65843bTcdDNsZ+Ol2ayvMl265/OtnddxTpzeV2Dqqz+nXodd1tZ/c2a66iqrP6Jmuuoqqz+yZrrqKqs/qma66iqrP5ez0P7raz+vXJduaz+6ZrrqKqs/pma66iqrP7t/j/eL2X1H6i5jqrK6p+tuY6qyuqveFmtdmX1z9VcR1Vl9V9fcx1VldV/Q811VFVW/40119Evt8W27Hw4nX/OxrHUb2X9yS3+LYf12gIAAADsNf8Y2fn/4pWOvtchhBBCiL0aU4N+LJHsyvbHd3n7ou74z/KaftchhNi9WF6u+4oDg2R3P80MwKDy93+0ef1Hm9d/tHn9+TLpHv4i6ydjXcbHu4w3u4xPZOP57+tkl/Ebsu0up+ua0Y1dxv+vy/iBLuM3dxmf7zJ+S5fxW7uM39ZlHAAAgNFwU2ydHwIAAMDwevHnH73+y7sfuzz3xcWDJ8PEpnnnj8T+ZHxv/bXYz+e9T5rxPf8fxv5PY/vb2P4tW9/9JwAAALD70vfEeP8fAAAAhlf6nlLn/wAAADC85mLr/B8AAACG1/Wxdf4PAAAAQ6yY2npxbNN1gTtj2+u8fgDA4Pv/2N4e24OxvSO2X4ltOg64K7Zfrak+AGDn/OQ7PzrxZrE+3/+xbPxKXJ7aTS6sXSkoGhtn8t8X2/2x/VqP9eTfB9Br/uRAj3l2K//sNeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIZHY/Xn8ePzRQhvf/zWwz+eeP3PK8vuaK9xaPVnEXutEEKz/bw0ut7/RVzxyuUXTnW2V2NbhKOhCEV7eXjkUjvTdAjhQjgUPgmt8MHi0ufvv/PQ4Q9fnbrpjfNPvbSL/wQb9g8AAACG0f8CAAD//wE9H4w=")
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x4084)
r0 = open(&(0x7f00000000c0)='.\x00', 0x20000, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000100)={0x5, 0x100000000, 0x10000, 0xffffffffffffff88, 0x4000040c, 0x4fe4, 0x2401})

888.882929ms ago: executing program 1 (id=1068):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x440d5}, 0xc090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

888.688059ms ago: executing program 4 (id=1069):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x8003, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

827.64991ms ago: executing program 0 (id=1070):
r0 = socket$inet(0x2, 0x2, 0x1)
unshare(0x22020600)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)

748.524192ms ago: executing program 4 (id=1071):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r2, 0x6, 0x6, 0x4, 0x8, 0x1}, 0x14)

612.909895ms ago: executing program 5 (id=1072):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debugfs\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="00ffffffffffff0031d8000000000000051e0103800000780a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000fd0030601e5a1402000a20202020202000"/128, 0x80)

612.659305ms ago: executing program 4 (id=1073):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x8000000, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x4, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x840)

612.529665ms ago: executing program 1 (id=1074):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x20, 0x7, "2ed2414e6ce393"}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0})

390.965611ms ago: executing program 5 (id=1075):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000})
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000440)="a86a066462c6", 0x0, 0x0, 0x0, 0x0, 0x0})

374.418071ms ago: executing program 1 (id=1076):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_continue}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@gid}], [{@flag='sync'}, {@flag='rw'}]}, 0x1, 0x1536, &(0x7f0000001700)="$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")
close(0xffffffffffffffff)
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

268.985414ms ago: executing program 4 (id=1077):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0)

236.005844ms ago: executing program 0 (id=1078):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x20000000)

198.466575ms ago: executing program 5 (id=1079):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000fc0)={0x6, 0x118, 0xfa00, {{0xffffffff, 0xf8, "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", 0xc7, 0x9, 0xa, 0x1c, 0xf, 0x6, 0x9, 0x1}}}, 0x120)

92.953258ms ago: executing program 4 (id=1080):
timer_settime(0x0, 0x1, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a20033000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @empty}}}}}}, 0x0)

0s ago: executing program 33 (id=1078):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x20000000)

kernel console output (not intermixed with test programs):

devsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.875821][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.884579][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.909610][ T4192] device veth0_macvtap entered promiscuous mode
[   72.921997][ T4192] device veth1_macvtap entered promiscuous mode
[   72.949981][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.962086][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.972987][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.996774][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.037984][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.049953][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.066049][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.076779][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.092535][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.106645][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.120980][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.138261][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.155295][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.191118][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.210717][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.243531][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.255609][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.282601][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.308187][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.334868][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.356963][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.379183][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.400403][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.431403][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.446878][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.468081][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.478604][ T4268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   73.511593][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.520723][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.520746][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.547216][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.570343][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.579172][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.610959][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.638228][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.665601][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.708949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.752378][ T4261] loop3: detected capacity change from 0 to 32768
[   73.790240][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.805206][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.869575][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.878459][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.917130][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.949128][ T4278] loop1: detected capacity change from 0 to 1024
[   73.999117][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.041491][ T4261] XFS (loop3): Mounting V5 Filesystem
[   74.088372][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.109136][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.124782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.170553][ T4174] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   74.248913][ T4261] XFS (loop3): Ending clean mount
[   74.412580][ T1324] Bluetooth: hci0: command 0x0419 tx timeout
[   74.432428][ T1324] Bluetooth: hci1: command 0x0419 tx timeout
[   74.440650][ T4194] XFS (loop3): Unmounting Filesystem
[   74.480844][ T1324] Bluetooth: hci3: command 0x0419 tx timeout
[   74.487122][ T1324] Bluetooth: hci2: command 0x0419 tx timeout
[   74.529112][ T4293] loop4: detected capacity change from 0 to 4096
[   74.536034][ T4174] usb 3-1: config 127 has an invalid interface number: 57 but max is 0
[   74.550915][ T4174] usb 3-1: config 127 has no interface number 0
[   74.557663][ T4174] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   74.572771][ T1324] Bluetooth: hci4: command 0x0419 tx timeout
[   74.657672][ T4293] ntfs: volume version 3.1.
[   74.740683][ T4174] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[   74.749865][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.789112][ T4174] usb 3-1: Product: syz
[   74.808906][ T4174] usb 3-1: Manufacturer: syz
[   74.833887][ T4174] usb 3-1: SerialNumber: syz
[   74.911476][ T4273] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   74.973136][ T4293] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[   74.988393][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'.
[   75.003595][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'.
[   75.118378][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.303967][ T4310] loop1: detected capacity change from 0 to 4096
[   75.341529][ T4312] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   75.349408][ T4312] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   75.372463][ T4273] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   75.383757][ T4312] iwpm_send_hello: Unable to send a nlmsg
[   75.419053][ T4310] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[   75.463967][ T4310] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,nodioread_nolock,quota,nombcache,journal_ioprio=0x0000000000000001,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[   75.600783][ T4174] asix 3-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random
[   75.611474][ T4322] loop3: detected capacity change from 0 to 512
[   75.695401][ T4322] EXT4-fs (loop3): 1 truncate cleaned up
[   75.702463][ T4321] loop0: detected capacity change from 0 to 4096
[   75.721950][ T4321] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   75.737901][ T4322] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,jqfmt=vfsv1,noblock_validity,noauto_da_alloc,errors=continue,discard,grpjquota=,errors=remount-ro,discard,. Quota mode: none.
[   75.805803][ T4310] syz.1.17 (4310) used greatest stack depth: 20912 bytes left
[   75.812191][ T4174] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   75.851393][ T4174] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   75.934809][ T4174] asix: probe of 3-1:127.57 failed with error -71
[   75.961713][ T4174] usb 3-1: USB disconnect, device number 2
[   76.487939][ T4324] loop4: detected capacity change from 0 to 32768
[   76.541098][ T4324] =======================================================
[   76.541098][ T4324] WARNING: The mand mount option has been deprecated and
[   76.541098][ T4324]          and is ignored by this kernel. Remove the mand
[   76.541098][ T4324]          option from the mount to silence this warning.
[   76.541098][ T4324] =======================================================
[   76.744636][ T4324] XFS (loop4): Mounting V5 Filesystem
[   76.927635][ T4324] XFS (loop4): Ending clean mount
[   76.938883][ T4369] tap0: tun_chr_ioctl cmd 2147767520
[   76.979193][ T4192] XFS (loop4): Unmounting Filesystem
[   77.040177][ T4373] i2c i2c-0: new_device: Can't parse I2C address
[   77.207720][ T4378] loop1: detected capacity change from 0 to 256
[   77.340169][   T26] audit: type=1800 audit(1788264940.335:2): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name="file1" dev="loop1" ino=1048590 res=0 errno=0
[   77.402188][ T4385] loop0: detected capacity change from 0 to 1024
[   77.475063][ T4385] EXT4-fs (loop0): Ignoring removed bh option
[   77.556854][ T4385] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[   77.622746][ T4385] process 'syz.0.44' launched './file1' with NULL argv: empty string added
[   77.644504][ T4385] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   77.663826][ T4385] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[   77.683103][ T4385] EXT4-fs (loop0): Unrecognized mount option "ext4" or missing value
[   77.744083][ T4396] netlink: 'syz.4.49': attribute type 32 has an invalid length.
[   77.856323][ T4401] loop0: detected capacity change from 0 to 128
[   77.860584][ T4174] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   78.099481][ T4408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'.
[   78.121492][ T4174] usb 3-1: Using ep0 maxpacket: 32
[   78.242726][ T4174] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[   78.265320][ T4174] usb 3-1: config 0 has no interface number 0
[   78.277515][ T4174] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   78.490427][ T4174] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   78.505232][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.526047][ T4174] usb 3-1: Product: syz
[   78.530261][ T4174] usb 3-1: Manufacturer: syz
[   78.554760][ T4429] capability: warning: `syz.1.63' uses deprecated v2 capabilities in a way that may be insecure
[   78.555045][ T4174] usb 3-1: SerialNumber: syz
[   78.585892][ T4174] usb 3-1: config 0 descriptor??
[   78.615096][ T4392] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.628606][ T4426] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.666393][ T4426] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   78.856591][ T4392] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.968830][ T4443] netlink: 36 bytes leftover after parsing attributes in process `syz.4.66'.
[   79.100805][ T4451] set_capacity_and_notify: 2 callbacks suppressed
[   79.100821][ T4451] loop3: detected capacity change from 0 to 1024
[   79.227542][ T4451] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   79.240549][ T4451] EXT4-fs (loop3): inline encryption not supported
[   79.256386][ T4451] EXT4-fs (loop3): Ignoring removed bh option
[   79.264653][ T4462] netlink: 220 bytes leftover after parsing attributes in process `syz.4.77'.
[   79.366256][ T4451] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noload,user_xattr,nolazytime,grpjquota=,nomblk_io_submit,inlinecrypt,nodiscard,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[   79.560648][ T4174] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   79.573742][ T4174] asix: probe of 3-1:0.188 failed with error -71
[   79.619854][ T4174] usb 3-1: USB disconnect, device number 3
[   79.758472][ T4482] loop1: detected capacity change from 0 to 512
[   80.040465][ T4223] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.335203][ T4474] loop0: detected capacity change from 0 to 32768
[   80.436488][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[   80.446141][ T4223] usb 4-1: unable to get BOS descriptor or descriptor too short
[   80.486748][ T4474] XFS (loop0): Mounting V5 Filesystem
[   80.540573][ T4223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.590920][ T4474] XFS (loop0): Ending clean mount
[   80.740692][ T4223] usb 4-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=af.98
[   80.749793][ T4223] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[   80.805062][ T4223] usb 4-1: Product: syz
[   80.809305][ T4223] usb 4-1: Manufacturer: syz
[   80.840263][ T4223] usb 4-1: SerialNumber: syz
[   80.903415][ T4185] XFS (loop0): Unmounting Filesystem
[   81.142665][ T4223] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f
[   81.190610][ T4223] gspca_sn9c20x: Write register 1000 failed -71
[   81.196934][ T4223] gspca_sn9c20x: Device initialization failed
[   81.245299][ T4223] gspca_sn9c20x: probe of 4-1:1.0 failed with error -71
[   81.286555][ T4223] usb 4-1: USB disconnect, device number 2
[   81.328534][ T4552] loop2: detected capacity change from 0 to 64
[   81.687298][ T4563] loop0: detected capacity change from 0 to 256
[   81.728832][ T4566] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   81.770737][ T4566] comedi comedi3: 8255: I/O port conflict (0x3,4)
[   81.787564][ T4566] comedi comedi3: 8255: I/O port conflict (0x4,4)
[   81.830711][ T4566] comedi comedi3: 8255: I/O port conflict (0xc9,4)
[   81.878103][ T4566] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[   81.923320][ T4566] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   81.988498][ T4566] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4)
[   82.013210][ T4545] loop1: detected capacity change from 0 to 32768
[   82.033259][ T4566] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   82.049471][ T4566] comedi comedi3: 8255: I/O port conflict (0x6,4)
[   82.107228][ T4566] comedi comedi3: 8255: I/O port conflict (0xc,4)
[   82.164105][ T4566] comedi comedi3: 8255: I/O port conflict (0x81,4)
[   82.180651][ T4566] comedi comedi3: 8255: I/O port conflict (0x4,4)
[   82.187531][ T4545] XFS (loop1): Mounting V5 Filesystem
[   82.199681][ T4566] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[   82.229879][ T4566] comedi comedi3: 8255: I/O port conflict (0x10000002,4)
[   82.243948][ T4566] comedi comedi3: 8255: I/O port conflict (0x8,4)
[   82.292803][ T4545] XFS (loop1): Ending clean mount
[   82.433652][ T4569] loop2: detected capacity change from 0 to 32768
[   82.528705][ T4597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.129'.
[   82.544021][ T4569] XFS (loop2): Mounting V5 Filesystem
[   82.572453][ T4189] XFS (loop1): Unmounting Filesystem
[   82.819254][ T4569] XFS (loop2): Ending clean mount
[   83.014871][ T4621] loop0: detected capacity change from 0 to 256
[   83.069229][ T4196] XFS (loop2): Unmounting Filesystem
[   83.720255][ T4661] loop0: detected capacity change from 0 to 64
[   83.766985][ T4660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.157'.
[   83.793931][ T4655] loop1: detected capacity change from 0 to 2048
[   83.839576][   T26] audit: type=1800 audit(1788264946.835:3): pid=4661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.154" name="file1" dev="loop0" ino=5 res=0 errno=0
[   83.881205][ T4665] Failed to get privilege flags for destination (handle=0x2:0x1)
[   83.945074][ T4667] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.200110][ T4682] loop0: detected capacity change from 0 to 512
[   84.289653][ T4686] Zero length message leads to an empty skb
[   84.318456][ T4682] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   84.488643][ T4682] Invalid ELF header len 10
[   84.535267][ T4696] loop2: detected capacity change from 0 to 256
[   84.774095][ T4703] netlink: 104 bytes leftover after parsing attributes in process `syz.2.176'.
[   84.966360][ T4715] loop2: detected capacity change from 0 to 256
[   85.018760][ T4715] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0x174015ec, utbl_chksum : 0xe619d30d)
[   85.126554][ T4722] loop3: detected capacity change from 0 to 256
[   85.182512][ T4722] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   85.218757][ T4715] exFAT-fs (loop2): error, invalid size(size(4096) > aligned(9223372036854777344)
[   85.218757][ T4715] 
[   85.278341][ T4715] exFAT-fs (loop2): Filesystem has been set read-only
[   85.705264][ T4746] loop4: detected capacity change from 0 to 256
[   85.752257][ T4748] netlink: 71 bytes leftover after parsing attributes in process `syz.0.197'.
[   85.762839][ T4746] FAT-fs (loop4): Unrecognized mount option "i0²sj#PêäJTÊ /—™s4êI‚¨’" or missing value
[   85.792352][ T4746] netlink: 112 bytes leftover after parsing attributes in process `syz.4.196'.
[   86.293369][ T4737] loop2: detected capacity change from 0 to 32768
[   86.414427][ T4737] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.191 (4737)
[   86.516538][ T4737] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   86.568335][ T4737] BTRFS info (device loop2): setting nodatacow, compression disabled
[   86.600327][ T4737] BTRFS info (device loop2): turning on flush-on-commit
[   86.627697][ T4737] BTRFS info (device loop2): using free space tree
[   86.662668][ T4737] BTRFS info (device loop2): has skinny extents
[   86.688057][ T4744] loop3: detected capacity change from 0 to 32768
[   86.714210][ T1107] cfg80211: failed to load regulatory.db
[   86.808003][ T4781] loop1: detected capacity change from 0 to 256
[   86.885531][ T4781] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   87.004846][ T4737] BTRFS info (device loop2): enabling ssd optimizations
[   87.158422][ T4796] loop1: detected capacity change from 0 to 512
[   87.356177][ T4796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   87.431782][ T4796] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   87.645220][ T4811] loop4: detected capacity change from 0 to 256
[   87.778038][ T4811] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   88.445061][ T4834] device erspan0 entered promiscuous mode
[   88.513845][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.721397][ T4850] EXT4-fs (loop3): orphan cleanup on readonly fs
[   88.731994][ T4850] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   88.842332][ T4850] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   88.876417][ T4850] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 57856(57856)
[   88.910671][ T4850] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.227: couldn't read orphan inode 13 (err -117)
[   88.951552][ T4850] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.002855][ T4850] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.227: inode #15: comm syz.3.227: iget: illegal inode #
[   89.082034][ T4870] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   89.222099][  T154] hfsplus: b-tree write err: -5, ino 3
[   89.243221][ T4872] set_capacity_and_notify: 4 callbacks suppressed
[   89.243237][ T4872] loop1: detected capacity change from 0 to 4096
[   89.260482][ T1110] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   89.344042][ T4872] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   89.421095][ T4872] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[   89.473675][  T154] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22.
[   89.506840][ T4872] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[   89.522432][ T4872] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   89.551042][ T4872] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[   89.583739][ T4272] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22.
[   89.722261][ T1110] usb 1-1: unable to get BOS descriptor or descriptor too short
[   89.810523][ T1110] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   90.015174][ T1110] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   90.034546][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.053417][ T4902] loop1: detected capacity change from 0 to 1024
[   90.062661][ T1110] usb 1-1: Product: syz
[   90.081816][ T1110] usb 1-1: Manufacturer: syz
[   90.107657][ T1110] usb 1-1: SerialNumber: syz
[   90.232232][ T4272] hfsplus: b-tree write err: -5, ino 8
[   90.316625][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'.
[   90.329499][ T4907] tipc: Started in network mode
[   90.359984][ T4907] tipc: Node identity 7, cluster identity 4711
[   90.376643][ T4907] tipc: Node number set to 7
[   90.435315][ T1110] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   90.608663][ T4919] loop3: detected capacity change from 0 to 2048
[   90.650887][ T1110] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   90.665668][ T1110] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[   90.706954][ T4919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.866607][ T4933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'.
[   90.899382][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'.
[   91.073279][ T4943] loop3: detected capacity change from 0 to 512
[   91.079926][ T1110] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[   91.165881][ T1110] usb 1-1: USB disconnect, device number 2
[   91.184645][ T4943] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   91.224889][ T4943] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.416141][ T4326] udevd[4326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.937700][ T4989] loop1: detected capacity change from 0 to 256
[   92.000403][ T4174] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   92.144292][ T4993] i2c i2c-0: delete_device: Can't parse I2C address
[   92.180500][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   92.220636][ T1110] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   92.260502][ T4174] usb 1-1: Using ep0 maxpacket: 8
[   92.311730][ T4999] loop3: detected capacity change from 0 to 64
[   92.350525][ T5001] loop1: detected capacity change from 0 to 1024
[   92.380737][ T4174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.400433][ T4174] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   92.415567][ T5001] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   92.420663][ T4228] usb 5-1: Using ep0 maxpacket: 32
[   92.460927][ T4174] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   92.474256][ T4999] attempt to access beyond end of device
[   92.474256][ T4999] loop3: rw=2049, want=162, limit=64
[   92.494437][ T4999] Buffer I/O error on dev loop3, logical block 161, lost async page write
[   92.503250][ T1110] usb 3-1: Using ep0 maxpacket: 16
[   92.509744][ T4999] attempt to access beyond end of device
[   92.509744][ T4999] loop3: rw=2049, want=163, limit=64
[   92.521597][ T5001] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[   92.522837][ T4999] Buffer I/O error on dev loop3, logical block 162, lost async page write
[   92.551186][    C0] vkms_vblank_simulate: vblank timer overrun
[   92.566833][ T4999] attempt to access beyond end of device
[   92.566833][ T4999] loop3: rw=2049, want=164, limit=64
[   92.578130][ T4999] Buffer I/O error on dev loop3, logical block 163, lost async page write
[   92.593311][ T4999] attempt to access beyond end of device
[   92.593311][ T4999] loop3: rw=2049, want=168, limit=64
[   92.604344][ T4228] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[   92.612866][ T4999] Buffer I/O error on dev loop3, logical block 167, lost async page write
[   92.621493][ T4228] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   92.631755][ T4999] attempt to access beyond end of device
[   92.631755][ T4999] loop3: rw=2049, want=170, limit=64
[   92.633014][ T4228] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   92.646579][ T4999] Buffer I/O error on dev loop3, logical block 169, lost async page write
[   92.656895][ T4174] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   92.671427][ T1110] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.672481][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.697750][ T4228] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   92.703235][ T1110] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.720444][ T4228] usb 5-1: config 0 interface 0 has no altsetting 0
[   92.728114][ T4999] attempt to access beyond end of device
[   92.728114][ T4999] loop3: rw=2049, want=172, limit=64
[   92.740620][ T4999] Buffer I/O error on dev loop3, logical block 171, lost async page write
[   92.746716][ T4174] usb 1-1: Product: syz
[   92.749279][ T1110] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   92.761832][ T4174] usb 1-1: Manufacturer: syz
[   92.770036][ T4999] attempt to access beyond end of device
[   92.770036][ T4999] loop3: rw=2049, want=173, limit=64
[   92.776280][ T5001] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   92.782905][ T1110] usb 3-1: config 0 interface 0 has no altsetting 0
[   92.805558][ T4174] usb 1-1: SerialNumber: syz
[   92.813271][ T4999] Buffer I/O error on dev loop3, logical block 172, lost async page write
[   92.830000][ T1110] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   92.849496][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.881355][ T1110] usb 3-1: config 0 descriptor??
[   92.900644][ T4228] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   92.920091][ T4228] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   92.934165][ T4228] usb 5-1: Product: syz
[   92.939002][ T4228] usb 5-1: Manufacturer: syz
[   92.946025][ T4228] usb 5-1: SerialNumber: syz
[   92.953233][ T4228] usb 5-1: config 0 descriptor??
[   93.008760][ T4228] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   93.034226][   T26] audit: type=1400 audit(1788264956.035:4): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=5006 comm="syz.1.299" name="p" offset=33
[   93.058854][ T4228] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   93.282430][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'.
[   93.293702][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'.
[   93.343528][ T5020] loop1: detected capacity change from 0 to 64
[   93.378753][ T5020] Trying to free block not in datazone
[   93.386804][ T5020] Trying to free block not in datazone
[   93.392827][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.435063][ T1110] usb 5-1: USB disconnect, device number 2
[   93.458053][ T1110] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[   93.671491][ T4258] usb 3-1: USB disconnect, device number 4
[   93.730576][ T4174] usb 1-1: 1:1: cannot get freq (v2/v3): err -71
[   93.750940][ T4174] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   93.760771][   T23] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.783652][   T23] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.809263][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[   93.842833][ T4174] usb 1-1: USB disconnect, device number 3
[   93.849029][   T23] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00
[   93.858675][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.881668][   T23] usb 4-1: config 0 descriptor??
[   93.992892][ T5032] kAFS: bad VL server IP address
[   94.049455][ T5029] loop1: detected capacity change from 0 to 32768
[   94.151957][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.239497][ T5029] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   94.290905][ T5044] loop2: detected capacity change from 0 to 2048
[   94.367503][   T23] input: HID 044f:b65a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:044F:B65A.0002/input/input5
[   94.380093][ T5044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.623585][ T4189] ocfs2: Unmounting device (7,1) on (node local)
[   94.665434][   T23] thrustmaster 0003:044F:B65A.0002: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b65a] on usb-dummy_hcd.3-1/input0
[   94.681846][   T23] thrustmaster 0003:044F:B65A.0002: ignoring unknown output usage 00010001
[   94.690852][   T23] thrustmaster 0003:044F:B65A.0002: ignoring unknown output usage 00080000
[   94.700972][   T23] thrustmaster 0003:044F:B65A.0002: can't find FF field in output reports
[   94.740730][   T23] usb 4-1: USB disconnect, device number 3
[   94.850915][ T5058] capability: warning: `syz.2.319' uses 32-bit capabilities (legacy support in use)
[   94.906454][ T5058] program syz.2.319 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   95.076299][ T5063] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   95.089825][ T5055] fido_id[5055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   95.152890][ T5061] loop4: detected capacity change from 0 to 4096
[   95.175657][ T5067] loop0: detected capacity change from 0 to 512
[   95.265603][ T5072] loop1: detected capacity change from 0 to 736
[   95.274680][ T5073] tipc: Started in network mode
[   95.279627][ T5073] tipc: Node identity 7f000001, cluster identity 4711
[   95.300598][ T5075] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.306105][ T5073] tipc: New replicast peer: 127.0.0.1
[   95.338040][ T5067] EXT4-fs (loop0): 1 truncate cleaned up
[   95.377132][ T5067] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nodiscard,. Quota mode: none.
[   95.401362][ T5073] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   95.467775][ T5073] tipc: Enabled bearer <udp:syz0>, priority 10
[   96.421816][ T4827] tipc: Node number set to 2130706433
[   96.586133][ T5128] loop2: detected capacity change from 0 to 512
[   96.668202][ T5129] loop4: detected capacity change from 0 to 4096
[   96.743392][ T5128] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.349: iget: bad i_size value: -1099511627766
[   96.806611][ T5128] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.349: couldn't read orphan inode 15 (err -117)
[   96.828470][ T5139] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.884683][ T5128] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   97.142966][ T5134] loop3: detected capacity change from 0 to 32768
[   97.305478][ T4236] JFS: metapage_get_blocks failed
[   97.324706][  T276] blkno = 5002c, nblocks = 4
[   97.329375][  T276] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   97.329375][  T276] 
[   97.340708][ T5134] JFS: metapage_get_blocks failed
[   97.346800][ T4236] JFS: metapage_get_blocks failed
[   97.389948][  T276] ERROR: (device loop3): remounting filesystem as read-only
[   97.478675][ T4194] JFS: metapage_get_blocks failed
[   97.992482][ T5181] pim6reg0: tun_chr_ioctl cmd 1074025677
[   97.998336][ T5181] pim6reg0: linktype set to 773
[   98.229031][ T5191] netlink: 'syz.3.370': attribute type 3 has an invalid length.
[   98.802831][ T5202] loop3: detected capacity change from 0 to 4096
[   98.830565][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.867150][ T5219] device netdevsim0 entered promiscuous mode
[   98.884781][ T5215] loop0: detected capacity change from 0 to 4096
[   98.902209][ T5219] device batadv0 entered promiscuous mode
[   98.928873][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[   99.034144][ T5215] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   99.210546][ T1110] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   99.245300][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.281651][ T1110] usb 2-1: config 0 descriptor??
[   99.382744][ T1110] cp210x 2-1:0.0: cp210x converter detected
[   99.563286][ T5241] loop4: detected capacity change from 0 to 512
[   99.624891][ T5241] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   99.642577][ T5246] input: syz0 as /devices/virtual/input/input6
[   99.650793][ T5241] EXT4-fs (loop4): inline encryption not supported
[   99.678319][ T5241] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   99.718298][ T5241] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   99.759610][ T5241] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   99.798937][ T5241] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   99.807524][ T1110] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[   99.838752][ T5241] EXT4-fs (loop4): orphan cleanup on readonly fs
[   99.918842][ T5241] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.387: bg 0: block 34: padding at end of block bitmap is not set
[  100.030836][ T5241] Quota error (device loop4): write_blk: dquota write failed
[  100.048411][ T5241] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  100.070672][ T5241] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.387: Failed to acquire dquot type 1
[  100.090495][   T26] audit: type=1326 audit(1788264963.087:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7bf62159 code=0x7ffc0000
[  100.090940][ T1110] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71
[  100.197758][ T1110] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  100.230880][   T26] audit: type=1326 audit(1788264963.157:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7bf62159 code=0x7ffc0000
[  100.255308][ T5241] EXT4-fs (loop4): 1 truncate cleaned up
[  100.280998][ T5241] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback.
[  100.292584][ T1110] usb 2-1: cp210x converter now attached to ttyUSB0
[  100.318272][   T26] audit: type=1326 audit(1788264963.157:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7bf62159 code=0x7ffc0000
[  100.359344][   T26] audit: type=1326 audit(1788264963.157:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3f7bf62159 code=0x7ffc0000
[  100.428447][ T1110] usb 2-1: USB disconnect, device number 2
[  100.442855][   T26] audit: type=1326 audit(1788264963.157:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7bf62159 code=0x7ffc0000
[  100.518690][ T1110] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  100.555879][ T1110] cp210x 2-1:0.0: device disconnected
[  100.563030][ T5280] loop0: detected capacity change from 0 to 1024
[  100.602000][   T26] audit: type=1326 audit(1788264963.157:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7bf62159 code=0x7ffc0000
[  100.726949][   T26] audit: type=1326 audit(1788264963.157:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7bf62159 code=0x7ffc0000
[  100.888081][   T26] audit: type=1326 audit(1788264963.157:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7bf62159 code=0x7ffc0000
[  100.953189][ T4236] hfsplus: b-tree write err: -5, ino 25
[  100.985969][ T4236] hfsplus: b-tree write err: -5, ino 4
[  101.016282][ T4236] hfsplus: b-tree write err: -5, ino 2
[  101.055770][ T4236] hfsplus: b-tree write err: -5, ino 17
[  101.190556][   T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  101.230179][ T5294] loop4: detected capacity change from 0 to 4096
[  101.342380][ T5308] loop2: detected capacity change from 0 to 512
[  101.373642][ T5294] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  101.417445][ T5309] loop0: detected capacity change from 0 to 4096
[  101.426932][ T5294] ntfs3: loop4: Failed to load $Extend.
[  101.538309][ T5316] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.549557][ T5309] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  101.551262][   T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  101.578783][ T5294] ntfs3: loop4: ino=5, "/" directory corrupted
[  101.589165][ T5309] NILFS (loop0): mounting fs with errors
[  101.650743][   T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.702749][   T21] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  101.746042][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.812095][   T21] usb 2-1: config 0 descriptor??
[  102.446962][ T5352] loop0: detected capacity change from 0 to 128
[  102.500585][   T21] usb 2-1: language id specifier not provided by device, defaulting to English
[  102.561577][ T5352] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  102.579040][ T5352] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  102.667811][ T5352] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes
[  102.730563][   T21] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71
[  102.739433][   T21] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  102.767585][   T21] uclogic: probe of 0003:256C:006D.0003 failed with error -71
[  102.796685][   T21] usb 2-1: USB disconnect, device number 3
[  103.163102][ T5354] loop4: detected capacity change from 0 to 32768
[  103.220535][ T4228] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  103.236088][ T5374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.243757][ T5374] IPv6: NLM_F_CREATE should be set when creating new route
[  103.251071][ T5374] IPv6: NLM_F_CREATE should be set when creating new route
[  103.258327][ T5374] IPv6: NLM_F_CREATE should be set when creating new route
[  103.480466][ T4228] usb 1-1: Using ep0 maxpacket: 32
[  103.534152][ T5356] loop3: detected capacity change from 0 to 40427
[  103.600706][ T4228] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  103.632635][ T4228] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.639882][ T5356] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  103.670488][ T5356] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  103.678825][ T4228] usb 1-1: config 0 interface 0 has no altsetting 0
[  103.716235][ T4228] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  103.742984][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.806235][ T5356] F2FS-fs (loop3): Found nat_bits in checkpoint
[  103.813257][ T4228] usb 1-1: config 0 descriptor??
[  104.031631][ T5356] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  104.039027][ T5356] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  104.175939][ T5405] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'fl' '(null)'
[  104.294491][ T4228] pyra 0003:1E7D:2C24.0004: hidraw0: USB HID v10.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0
[  104.356648][ T5381] loop2: detected capacity change from 0 to 32768
[  104.410982][ T5413] netlink: 'syz.4.438': attribute type 3 has an invalid length.
[  104.436939][ T5381] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.430 (5381)
[  104.452127][ T5413] netlink: 768 bytes leftover after parsing attributes in process `syz.4.438'.
[  104.522847][    T7] usb 1-1: USB disconnect, device number 4
[  104.556568][ T5381] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  104.577622][ T5414] fido_id[5414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  104.606813][ T5381] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  104.641147][ T5381] BTRFS info (device loop2): use zstd compression, level 3
[  104.648431][ T5381] BTRFS info (device loop2): using free space tree
[  104.666059][ T5381] BTRFS info (device loop2): has skinny extents
[  104.919592][ T5381] BTRFS info (device loop2): enabling ssd optimizations
[  105.158681][ T5456] netem: incorrect ge model size
[  105.189258][ T5456] netem: change failed
[  105.241148][ T5458] loop1: detected capacity change from 0 to 1024
[  105.304620][ T5458] EXT4-fs (loop1): Ignoring removed orlov option
[  105.446508][ T5458] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,minixdf,norecovery,,errors=continue. Quota mode: none.
[  105.470550][ T4827] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  105.731891][ T4827] usb 4-1: Using ep0 maxpacket: 32
[  105.876322][ T4827] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  106.106026][ T4827] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  106.124180][ T4827] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  106.176227][ T4827] usb 4-1: Product: syz
[  106.181839][ T4827] usb 4-1: Manufacturer: syz
[  106.186485][ T4827] usb 4-1: SerialNumber: syz
[  106.225300][ T4827] usb 4-1: config 0 descriptor??
[  106.276103][ T5454] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  106.308936][ T4827] hub 4-1:0.0: bad descriptor, ignoring hub
[  106.317235][ T4827] hub: probe of 4-1:0.0 failed with error -5
[  106.473746][ T5507] loop2: detected capacity change from 0 to 2048
[  106.535111][ T5507] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.664294][ T5482] loop0: detected capacity change from 0 to 32768
[  106.702315][   T21] usb 4-1: USB disconnect, device number 4
[  106.745615][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  106.745631][   T26] audit: type=1400 audit(1788264969.747:25): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=5518 comm="syz.1.467" name="p" offset=92
[  106.862019][ T5482] XFS (loop0): Mounting V5 Filesystem
[  107.101960][ T5482] XFS (loop0): Ending clean mount
[  107.158421][ T5482] XFS (loop0): Quotacheck needed: Please wait.
[  107.270785][ T5482] XFS (loop0): Quotacheck: Done.
[  107.278369][ T5546] mkiss: ax0: crc mode is auto.
[  107.436415][ T4185] XFS (loop0): Unmounting Filesystem
[  107.633891][ T5551] loop1: detected capacity change from 0 to 8192
[  107.703505][ T5551] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  107.751751][ T5551] REISERFS (device loop1): using ordered data mode
[  107.760659][ T5551] reiserfs: using flush barriers
[  107.767308][ T5558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.482'.
[  107.858533][ T5551] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  107.945075][ T5551] REISERFS (device loop1): checking transaction log (loop1)
[  107.995084][ T5551] REISERFS (device loop1): Using r5 hash to sort names
[  108.016280][ T5551] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  108.040655][ T5551] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  108.147110][ T5568] loop2: detected capacity change from 0 to 256
[  108.216870][ T5568] FAT-fs (loop2): Unrecognized mount option "0x00000000000000b3" or missing value
[  108.310139][ T5573] loop4: detected capacity change from 0 to 256
[  109.032184][ T5596] loop0: detected capacity change from 0 to 2048
[  109.155254][ T5597] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.219333][ T5589] loop3: detected capacity change from 0 to 32768
[  109.240362][ T4226] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  109.249691][   T26] audit: type=1800 audit(1788264972.247:26): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.497" name="file2" dev="loop0" ino=16 res=0 errno=0
[  109.356110][ T5589] JBD2: Ignoring recovery information on journal
[  109.419770][ T5589] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.554738][ T5589] (syz.3.495,5589,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=255, inode=0, rec_len=0, name_len=0
[  109.630651][ T4226] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.670197][ T4226] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  109.714969][ T5610] loop2: detected capacity change from 0 to 512
[  109.737584][ T4194] ocfs2: Unmounting device (7,3) on (node local)
[  109.865809][ T5610] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  109.871234][ T4226] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  109.919652][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  109.959160][ T4226] usb 5-1: Product: syz
[  109.969294][ T4226] usb 5-1: Manufacturer: syz
[  109.994630][ T4226] usb 5-1: SerialNumber: syz
[  110.037311][ T4226] usb 5-1: config 0 descriptor??
[  110.049380][ T5610] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  110.102619][ T4226] imon_raw 5-1:0.0: IR endpoint missing
[  110.137125][ T5610] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  110.284301][ T5625] loop0: detected capacity change from 0 to 128
[  110.332961][ T4226] usb 5-1: USB disconnect, device number 3
[  110.451290][ T5625] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.480151][ T5633] tipc: Enabled bearer <eth:gre0>, priority 10
[  110.512523][ T5625] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  111.534285][ T5667] loop2: detected capacity change from 0 to 512
[  111.693472][ T5667] EXT4-fs (loop2): 1 truncate cleaned up
[  111.716333][ T5667] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,jqfmt=vfsv1,noblock_validity,noauto_da_alloc,errors=continue,discard,grpjquota=,errors=remount-ro,discard,. Quota mode: none.
[  111.787049][ T5662] loop1: detected capacity change from 0 to 32768
[  111.788122][ T5658] loop4: detected capacity change from 0 to 32768
[  111.914725][ T5658] JBD2: Ignoring recovery information on journal
[  111.949578][ T5680] ip_tables: iptables: counters copy to user failed while replacing table
[  112.009003][ T5662] XFS (loop1): Mounting V5 Filesystem
[  112.281577][ T5658] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  112.309685][ T5662] XFS (loop1): Ending clean mount
[  112.410515][ T4827] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  112.485867][ T5658] (syz.4.521,5658,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  112.529549][ T5658] (syz.4.521,5658,0):update_backups:188 ERROR: status = -12
[  112.568644][ T5658] ocfs2: Failed to update super blocks on 7,4 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[  112.654522][ T4189] XFS (loop1): Unmounting Filesystem
[  112.728132][ T4192] ocfs2: Unmounting device (7,4) on (node local)
[  112.816259][ T4827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.850481][ T4827] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  112.894468][ T5691] loop0: detected capacity change from 0 to 32768
[  113.049946][ T5691] XFS (loop0): Mounting V5 Filesystem
[  113.090641][ T4827] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  113.100036][ T4827] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  113.108744][ T4827] usb 3-1: Product: syz
[  113.113499][ T4827] usb 3-1: Manufacturer: syz
[  113.118130][ T4827] usb 3-1: SerialNumber: syz
[  113.138344][ T4827] usb 3-1: config 0 descriptor??
[  113.143553][ T5703] loop4: detected capacity change from 0 to 2048
[  113.197399][ T5703] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  113.206190][ T4827] imon_raw 3-1:0.0: IR endpoint missing
[  113.331950][ T5703] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  113.354533][ T5691] XFS (loop0): Ending clean mount
[  113.371483][ T5703] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  113.379183][ T5703] UDF-fs: Scanning with blocksize 512 failed
[  113.405493][ T5703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.454895][ T4827] usb 3-1: USB disconnect, device number 6
[  113.460897][ T1110] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  113.527655][ T4185] XFS (loop0): Unmounting Filesystem
[  113.780578][ T5724] loop3: detected capacity change from 0 to 128
[  113.851107][ T5724] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.870980][ T5724] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.921266][ T1110] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.952621][ T1110] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  113.988449][ T5729] loop0: detected capacity change from 0 to 1024
[  113.996157][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.074104][ T1110] usb 2-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  114.095714][ T5729] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  114.172207][ T5737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.544'.
[  114.200147][ T5729] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[  114.296842][ T5739] loop2: detected capacity change from 0 to 256
[  114.341539][ T5739] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  114.500548][ T1110] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  114.545818][ T5751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.553'.
[  114.634330][ T5754] loop4: detected capacity change from 0 to 128
[  114.813596][ T5754] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  114.910381][   T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  114.925538][ T5754] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.939132][ T4825] usb 2-1: USB disconnect, device number 4
[  115.150382][   T21] usb 3-1: Using ep0 maxpacket: 32
[  115.271036][   T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  115.323800][ T5772] loop0: detected capacity change from 0 to 4096
[  115.460614][   T21] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  115.485544][   T21] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  115.514192][   T21] usb 3-1: Product: syz
[  115.518420][   T21] usb 3-1: Manufacturer: syz
[  115.557192][   T21] usb 3-1: SerialNumber: syz
[  115.601295][   T21] usb 3-1: config 0 descriptor??
[  115.630743][ T5755] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  115.676518][   T21] hub 3-1:0.0: bad descriptor, ignoring hub
[  115.685829][   T21] hub: probe of 3-1:0.0 failed with error -5
[  115.777500][ T5785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.567'.
[  115.918301][ T5787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.925724][ T5787] IPv6: NLM_F_CREATE should be set when creating new route
[  115.933024][ T5787] IPv6: NLM_F_CREATE should be set when creating new route
[  115.979272][ T5787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.020591][   T21] usb 3-1: USB disconnect, device number 7
[  116.149619][ T5778] loop1: detected capacity change from 0 to 32768
[  116.209593][ T5778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.564 (5778)
[  116.306314][ T5778] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  116.320774][ T5778] BTRFS info (device loop1): allowing degraded mounts
[  116.327953][ T5778] BTRFS info (device loop1): turning on flush-on-commit
[  116.342788][ T5778] BTRFS info (device loop1): max_inline at 0
[  116.349034][ T5778] BTRFS info (device loop1): setting nodatasum
[  116.359301][ T5778] BTRFS info (device loop1): turning on sync discard
[  116.369963][ T5778] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  116.386946][ T5778] BTRFS info (device loop1): trying to use backup root at mount time
[  116.396600][ T5778] BTRFS info (device loop1): using free space tree
[  116.409345][ T5778] BTRFS info (device loop1): has skinny extents
[  116.525391][ T5778] BTRFS info (device loop1): enabling ssd optimizations
[  116.701470][ T5819] loop2: detected capacity change from 0 to 128
[  116.874108][ T5819] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.892040][ T5823] loop3: detected capacity change from 0 to 1024
[  116.914644][ T5819] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.950561][ T4827] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  117.065911][ T5030] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (5030)
[  117.220617][ T4827] usb 1-1: Using ep0 maxpacket: 32
[  117.350752][ T4827] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  117.560783][ T4827] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  117.577119][ T5841] loop2: detected capacity change from 0 to 1024
[  117.583766][ T4827] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  117.610361][ T4827] usb 1-1: Product: syz
[  117.625551][ T4827] usb 1-1: Manufacturer: syz
[  117.640005][ T5841] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  117.650176][ T4827] usb 1-1: SerialNumber: syz
[  117.676406][ T4827] usb 1-1: config 0 descriptor??
[  117.720648][ T5818] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  117.742461][ T4827] hub 1-1:0.0: bad descriptor, ignoring hub
[  117.750750][ T4827] hub: probe of 1-1:0.0 failed with error -5
[  118.090607][ T5830] usb 1-1: USB disconnect, device number 5
[  118.136600][ T5836] loop3: detected capacity change from 0 to 32768
[  118.143400][ T4827] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  118.167303][ T5832] loop1: detected capacity change from 0 to 32768
[  118.187063][ T5836] XFS (loop3): Mounting V5 Filesystem
[  118.286165][ T5836] XFS (loop3): Ending clean mount
[  118.347708][ T5836] XFS (loop3): Quotacheck needed: Please wait.
[  118.520162][ T5836] XFS (loop3): Quotacheck: Done.
[  118.532415][ T5863] mkiss: ax0: crc mode is auto.
[  118.580672][ T4827] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  118.616930][ T4827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.632138][ T5867] loop4: detected capacity change from 0 to 1024
[  118.680484][ T5867] EXT4-fs (loop4): Ignoring removed orlov option
[  118.681951][ T4194] XFS (loop3): Unmounting Filesystem
[  118.821428][ T5867] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,minixdf,norecovery,,errors=continue. Quota mode: none.
[  118.844080][    C1] vkms_vblank_simulate: vblank timer overrun
[  119.060155][ T5877] loop1: detected capacity change from 0 to 4096
[  119.110204][ T5877] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  119.203528][ T4827] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0005/input/input7
[  119.218755][ T5877] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  119.236599][ T5877] ntfs3: loop1: mft corrupted
[  119.259198][ T5877] ntfs3: loop1: Failed to load $Extend.
[  119.334461][   T26] audit: type=1800 audit(1788264982.337:27): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.594" name="bus" dev="loop1" ino=33 res=0 errno=0
[  119.382622][ T4827] rc_core: IR keymap rc-rc6-mce not found
[  119.388410][ T4827] Registered IR keymap rc-empty
[  119.408073][ T4827] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0005/rc/rc0
[  119.451073][ T4827] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0005/rc/rc0/input8
[  119.694662][ T4827] hid-picolcd 0003:04D8:C002.0005: Unexpected FLASH access reports, please submit rdesc for review
[  119.950559][ T5897] loop4: detected capacity change from 0 to 256
[  120.112794][ T5897] FAT-fs (loop4): Directory bread(block 64) failed
[  120.135439][ T5897] FAT-fs (loop4): Directory bread(block 65) failed
[  120.168492][ T5897] FAT-fs (loop4): Directory bread(block 66) failed
[  120.188889][ T5897] FAT-fs (loop4): Directory bread(block 67) failed
[  120.198994][ T5896] ntfs: volume version 3.1.
[  120.224647][ T5897] FAT-fs (loop4): Directory bread(block 68) failed
[  120.255318][ T5897] FAT-fs (loop4): Directory bread(block 69) failed
[  120.275684][ T5897] FAT-fs (loop4): Directory bread(block 70) failed
[  120.296266][ T5897] FAT-fs (loop4): Directory bread(block 71) failed
[  120.350734][ T5897] FAT-fs (loop4): Directory bread(block 72) failed
[  120.396561][ T5897] FAT-fs (loop4): Directory bread(block 73) failed
[  120.439624][ T4825] usb 3-1: USB disconnect, device number 8
[  120.450547][    C0] hid-picolcd 0003:04D8:C002.0005: usb_submit_urb(ctrl) failed: -19
[  120.526889][ T5887] set_capacity_and_notify: 1 callbacks suppressed
[  120.526905][ T5887] loop1: detected capacity change from 0 to 32768
[  120.806994][ T5903] mkiss: ax0: crc mode is auto.
[  120.822115][ T4272] attempt to access beyond end of device
[  120.822115][ T4272] loop1: rw=1, want=2621800, limit=32768
[  120.854606][  T276] blkno = 5002c, nblocks = 1
[  120.864306][  T276] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  120.864306][  T276] 
[  120.927300][  T276] ERROR: (device loop1): remounting filesystem as read-only
[  121.216713][ T5917] loop2: detected capacity change from 0 to 164
[  121.306572][ T5917] rock: directory entry would overflow storage
[  121.329384][ T5917] rock: sig=0x4543, size=28, remaining=18
[  121.945007][ T5933] loop4: detected capacity change from 0 to 4096
[  122.006387][ T5941] netlink: 116 bytes leftover after parsing attributes in process `syz.0.619'.
[  122.045629][ T5943] loop3: detected capacity change from 0 to 64
[  122.974709][ T5964] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  123.035614][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.044999][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.385234][ T5951] loop4: detected capacity change from 0 to 32768
[  123.726814][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  123.783236][ T5982] loop3: detected capacity change from 0 to 4096
[  123.959865][ T4825] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  123.992090][   T26] audit: type=1800 audit(1788264986.997:28): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.639" name="file1" dev="loop3" ino=0 res=0 errno=0
[  124.043980][ T5995] bond0: no command found in slaves file - use +ifname or -ifname
[  124.230525][ T4825] usb 3-1: Using ep0 maxpacket: 8
[  124.353929][ T4825] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  124.382733][ T4825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.463188][ T4825] pvrusb2: Hardware description: Terratec Grabster AV400
[  124.490406][ T4825] pvrusb2: **********
[  124.500660][ T4825] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  124.549436][ T4825] pvrusb2: Important functionality might not be entirely working.
[  124.575641][ T4825] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  124.638019][ T4825] pvrusb2: **********
[  124.694304][ T2424] pvrusb2: Invalid write control endpoint
[  124.837647][ T2424] pvrusb2: Invalid write control endpoint
[  124.854558][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  124.910444][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  124.939732][ T6015] loop0: detected capacity change from 0 to 512
[  124.945521][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  124.977655][ T2424] pvrusb2: Device being rendered inoperable
[  125.008321][ T4826] usb 3-1: USB disconnect, device number 9
[  125.024606][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  125.047403][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  125.087638][ T6015] EXT4-fs (loop0): orphan cleanup on readonly fs
[  125.095747][ T2424] pvrusb2: Attached sub-driver cx25840
[  125.107975][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  125.123929][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  125.193900][ T6015] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  125.297032][ T6015] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  125.332525][ T6015] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.653: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  125.455794][ T6015] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.653: couldn't read orphan inode 13 (err -117)
[  125.539733][ T6023] loop3: detected capacity change from 0 to 4096
[  125.555097][ T6015] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  125.590180][ T6028] ip_tables: iptables: counters copy to user failed while replacing table
[  125.686365][ T6032] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.722508][ T6015] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  125.766279][   T26] audit: type=1800 audit(1788264988.767:29): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.656" name="bus" dev="loop3" ino=18 res=0 errno=0
[  125.835924][   T26] audit: type=1800 audit(1788264988.807:30): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.656" name="bus" dev="loop3" ino=18 res=0 errno=0
[  125.856048][    C0] vkms_vblank_simulate: vblank timer overrun
[  125.906900][ T6015] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  126.011982][ T6015] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  126.065148][ T6042] loop4: detected capacity change from 0 to 1024
[  126.131829][ T6046] loop3: detected capacity change from 0 to 256
[  126.160643][ T6042] EXT4-fs (loop4): Ignoring removed bh option
[  126.167541][ T6046] exfat: Deprecated parameter 'namecase'
[  126.199253][ T6046] exfat: Deprecated parameter 'utf8'
[  126.206408][ T6015] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0.
[  126.225590][ T6046] exfat: Deprecated parameter 'namecase'
[  126.233908][ T6046] exfat: Deprecated parameter 'utf8'
[  126.298996][ T6046] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  126.343316][ T6042] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,sysvgroups,noinit_itable,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none.
[  126.393971][ T6042] EXT4-fs (loop4): shut down requested (1)
[  126.590959][ T6026] loop1: detected capacity change from 0 to 32768
[  126.755880][ T6026] XFS (loop1): Mounting V5 Filesystem
[  126.959197][ T6052] loop2: detected capacity change from 0 to 32768
[  127.007038][ T6026] XFS (loop1): Ending clean mount
[  127.084740][ T6078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.675'.
[  127.110170][ T4189] XFS (loop1): Unmounting Filesystem
[  127.123734][ T6052] XFS (loop2): Mounting V5 Filesystem
[  127.319784][ T6052] XFS (loop2): Ending clean mount
[  127.368965][ T6093] netlink: 104 bytes leftover after parsing attributes in process `syz.3.678'.
[  127.385696][ T6052] XFS (loop2): Quotacheck needed: Please wait.
[  127.410421][ T4826] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  127.518652][ T6052] XFS (loop2): Quotacheck: Done.
[  127.697865][ T6103] overlayfs: upper fs does not support tmpfile.
[  127.715984][ T4196] XFS (loop2): Unmounting Filesystem
[  127.785080][ T4826] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.812561][ T4826] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.852873][ T4826] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  127.886267][ T4826] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.907634][ T6105] block2mtd: too many arguments
[  127.922737][ T5472] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  127.938213][ T4826] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  127.960523][ T4826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.014559][ T6107] loop1: detected capacity change from 0 to 1024
[  128.111702][ T6107] hfsplus: bad catalog entry type
[  128.340565][ T5472] usb 4-1: unable to get BOS descriptor or descriptor too short
[  128.408503][ T6120] loop2: detected capacity change from 0 to 64
[  128.417725][ T6122] netlink: 104 bytes leftover after parsing attributes in process `syz.1.692'.
[  128.427250][ T5472] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  128.510578][ T4826] gud 5-1:1.0: Unexpected status OK for failed transfer
[  128.521515][ T4826] gud: probe of 5-1:1.0 failed with error -32
[  128.590724][ T5472] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  128.610062][ T5472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.644138][ T5472] usb 4-1: Product: syz
[  128.648365][ T5472] usb 4-1: Manufacturer: syz
[  128.673271][ T5472] usb 4-1: SerialNumber: syz
[  128.716153][ T4825] usb 5-1: USB disconnect, device number 4
[  128.963379][ T5472] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  129.097253][ T6127] loop0: detected capacity change from 0 to 32768
[  129.113989][ T6127] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.696 (6127)
[  129.179010][ T6127] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  129.188081][ T5472] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  129.201681][ T5472] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  129.211250][ T6127] BTRFS info (device loop0): setting nodatacow, compression disabled
[  129.221038][ T6127] BTRFS info (device loop0): turning on flush-on-commit
[  129.228620][ T6127] BTRFS info (device loop0): using free space tree
[  129.289600][ T6127] BTRFS info (device loop0): has skinny extents
[  129.397317][ T6131] loop1: detected capacity change from 0 to 32768
[  129.486255][ T6127] BTRFS info (device loop0): enabling ssd optimizations
[  129.610493][ T5472] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  129.627588][ T6131] XFS (loop1): Mounting V5 Filesystem
[  129.712413][ T5472] usb 4-1: USB disconnect, device number 5
[  129.944387][ T5030] udevd[5030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.255835][ T6131] XFS (loop1): Ending clean mount
[  130.307948][ T6131] XFS (loop1): Quotacheck needed: Please wait.
[  130.427232][ T6131] XFS (loop1): Quotacheck: Done.
[  130.636948][ T4189] XFS (loop1): Unmounting Filesystem
[  130.836329][ T6164] loop4: detected capacity change from 0 to 40427
[  130.883867][ T6164] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  130.916047][ T6164] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  130.974531][ T6164] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff
[  131.003946][ T6164] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6
[  131.032201][ T6164] F2FS-fs (loop4): invalid crc value
[  131.054308][ T6205] loop2: detected capacity change from 0 to 64
[  131.112227][ T6164] F2FS-fs (loop4): Found nat_bits in checkpoint
[  131.180365][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  131.295246][ T6164] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  131.310243][ T6164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  131.543531][ T4192] attempt to access beyond end of device
[  131.543531][ T4192] loop4: rw=2049, want=45104, limit=40427
[  131.590640][ T5830] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  131.620129][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.960514][ T6178] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  132.036732][ T6211] loop2: detected capacity change from 0 to 32768
[  132.251963][ T5830] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0006/input/input9
[  132.425052][ T5830] rc_core: IR keymap rc-rc6-mce not found
[  132.432190][ T5830] Registered IR keymap rc-empty
[  132.444622][ T5830] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0006/rc/rc0
[  132.456666][ T6178] usb 2-1: unable to get BOS descriptor or descriptor too short
[  132.475147][ T5830] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0006/rc/rc0/input10
[  132.547130][ T5830] hid-picolcd 0003:04D8:C002.0006: Unexpected FLASH access reports, please submit rdesc for review
[  132.570931][ T6178] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  132.795919][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.802286][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.810672][ T6178] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  132.819779][ T6178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.839595][ T6178] usb 2-1: Product: syz
[  132.843919][ T6178] usb 2-1: Manufacturer: syz
[  132.848554][ T6178] usb 2-1: SerialNumber: syz
[  132.966463][ T6237] loop2: detected capacity change from 0 to 256
[  132.994685][ T6230] loop4: detected capacity change from 0 to 32768
[  133.002734][ T6237] exfat: Deprecated parameter 'utf8'
[  133.010399][ T6237] exfat: Deprecated parameter 'namecase'
[  133.016770][ T6237] exfat: Deprecated parameter 'namecase'
[  133.027800][ T6237] exfat: Deprecated parameter 'utf8'
[  133.044337][ T6237] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  133.141302][ T6230] XFS (loop4): Mounting V5 Filesystem
[  133.165574][ T6178] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  133.300741][ T6230] XFS (loop4): Ending clean mount
[  133.323817][ T6230] XFS (loop4): Quotacheck needed: Please wait.
[  133.382777][ T6178] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  133.400466][ T6178] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  133.409132][ T6230] XFS (loop4): Quotacheck: Done.
[  133.428883][ T6179] usb 4-1: USB disconnect, device number 6
[  133.450415][    C0] hid-picolcd 0003:04D8:C002.0006: usb_submit_urb(ctrl) failed: -19
[  133.573809][ T4192] XFS (loop4): Unmounting Filesystem
[  133.810515][ T6178] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  133.880532][ T6178] usb 2-1: USB disconnect, device number 5
[  134.121306][ T5030] udevd[5030]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.427811][ T6250] loop0: detected capacity change from 0 to 2048
[  134.452646][ T6252] loop3: detected capacity change from 0 to 1024
[  134.537164][ T6250] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  134.554464][ T6259] loop2: detected capacity change from 0 to 1024
[  134.613310][ T6250] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  134.650413][ T6250] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  134.678486][ T6250] UDF-fs: Scanning with blocksize 512 failed
[  134.695927][ T6250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.724717][ T6259] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  134.785369][ T6266] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  134.955479][ T6269] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  135.461747][ T6179] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  135.808549][ T6283] loop3: detected capacity change from 0 to 32768
[  135.818039][ T6305] loop1: detected capacity change from 0 to 1024
[  135.856159][ T6179] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  135.876339][ T6179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.969263][ T6305] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  136.054569][ T6283] XFS (loop3): Mounting V5 Filesystem
[  136.200404][ T6305] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback.
[  136.235262][ T6283] XFS (loop3): Ending clean mount
[  136.254296][ T6283] XFS (loop3): Quotacheck needed: Please wait.
[  136.441949][ T6179] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0007/input/input11
[  136.582174][ T6283] XFS (loop3): Quotacheck: Done.
[  136.699619][ T6339] loop2: detected capacity change from 0 to 1024
[  136.700460][ T6179] rc_core: IR keymap rc-rc6-mce not found
[  136.738897][ T6179] Registered IR keymap rc-empty
[  136.758447][ T6179] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0007/rc/rc0
[  136.780853][ T6339] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  136.814834][ T6179] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0007/rc/rc0/input12
[  136.859327][ T4194] XFS (loop3): Unmounting Filesystem
[  136.879706][ T6179] hid-picolcd 0003:04D8:C002.0007: Unexpected FLASH access reports, please submit rdesc for review
[  136.969827][ T6339] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  137.098457][ T6348] loop0: detected capacity change from 0 to 256
[  137.119762][ T4196] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  137.243281][ T4196] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz-executor: corrupted in-inode xattr
[  137.350818][ T4196] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz-executor: corrupted in-inode xattr
[  137.373407][ T6348] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  137.650066][ T5469] usb 5-1: USB disconnect, device number 5
[  137.650093][ T6353] loop1: detected capacity change from 0 to 256
[  137.662349][    C0] hid-picolcd 0003:04D8:C002.0007: usb_submit_urb(ctrl) failed: -19
[  137.688343][ T6355] loop3: detected capacity change from 0 to 256
[  137.710669][ T6348] attempt to access beyond end of device
[  137.710669][ T6348] loop0: rw=524288, want=408, limit=256
[  137.804119][ T6348] attempt to access beyond end of device
[  137.804119][ T6348] loop0: rw=524288, want=664, limit=256
[  137.816927][ T6348] attempt to access beyond end of device
[  137.816927][ T6348] loop0: rw=0, want=288, limit=256
[  137.838036][   T26] audit: type=1800 audit(1788265000.837:31): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.763" name="file1" dev="loop0" ino=1048619 res=0 errno=0
[  138.172155][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'.
[  138.253332][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.768'.
[  138.584978][ T6369] netem: change failed
[  138.990972][ T4825] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  139.240523][ T4825] usb 4-1: Using ep0 maxpacket: 32
[  139.360525][ T4825] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  139.372204][ T4825] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  139.400363][ T4825] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  139.418859][ T4825] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  139.432508][ T4825] usb 4-1: config 0 interface 0 has no altsetting 0
[  139.440467][ T5829] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  139.511766][ T6380] chnl_net:caif_netlink_parms(): no params data found
[  139.591040][ T4825] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  139.610365][ T4825] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  139.619019][ T4825] usb 4-1: Product: syz
[  139.623730][ T4825] usb 4-1: Manufacturer: syz
[  139.628360][ T4825] usb 4-1: SerialNumber: syz
[  139.653720][ T4825] usb 4-1: config 0 descriptor??
[  139.692979][ T4825] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  139.758065][ T4825] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  139.826154][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.842533][ T5829] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  139.855019][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.909382][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.954698][ T6380] device bridge_slave_0 entered promiscuous mode
[  140.028241][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.047915][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.063422][ T6380] device bridge_slave_1 entered promiscuous mode
[  140.172994][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.200828][ T6179] usb 4-1: USB disconnect, device number 7
[  140.216357][ T6179] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  140.229561][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.308491][ T6380] team0: Port device team_slave_0 added
[  140.342376][ T6380] team0: Port device team_slave_1 added
[  140.384864][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.403576][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.447889][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.456240][ T5829] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0008/input/input13
[  140.572300][ T6418] loop4: detected capacity change from 0 to 128
[  140.587490][ T4230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.680073][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.680427][ T5829] rc_core: IR keymap rc-rc6-mce not found
[  140.691825][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.739407][ T5829] Registered IR keymap rc-empty
[  140.752890][ T5829] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0008/rc/rc0
[  140.814508][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.841053][ T5829] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0008/rc/rc0/input14
[  140.914607][ T5829] hid-picolcd 0003:04D8:C002.0008: Unexpected FLASH access reports, please submit rdesc for review
[  140.948940][ T4230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.042022][ T5829] Bluetooth: hci4: command 0x0409 tx timeout
[  141.129779][ T6430] loop3: detected capacity change from 0 to 1024
[  141.199634][ T6380] device hsr_slave_0 entered promiscuous mode
[  141.231937][ T6380] device hsr_slave_1 entered promiscuous mode
[  141.264285][ T6380] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.308886][ T6380] Cannot create hsr debugfs directory
[  141.365077][ T4230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.502292][ T4230] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.618800][ T6418] loop4: detected capacity change from 0 to 32768
[  141.636817][ T4826] usb 2-1: USB disconnect, device number 6
[  141.640520][    C0] hid-picolcd 0003:04D8:C002.0008: usb_submit_urb(ctrl) failed: -19
[  142.031898][ T6380] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  142.109879][ T6380] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  142.126697][ T6446] loop3: detected capacity change from 0 to 4096
[  142.180865][ T6380] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  142.230056][ T6380] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  142.269537][ T6452] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.339464][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'.
[  142.725941][ T6469] device erspan0 entered promiscuous mode
[  142.840501][ T5830] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  142.921878][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.987767][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.031311][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.063014][ T6380] 8021q: adding VLAN 0 to HW filter on device team0
[  143.100703][ T5830] usb 5-1: Using ep0 maxpacket: 16
[  143.110582][ T5829] Bluetooth: hci4: command 0x041b tx timeout
[  143.192704][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.221339][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.240682][ T5830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  143.248939][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.256721][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.285656][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.316706][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.329005][ T6486] loop3: detected capacity change from 0 to 4096
[  143.345716][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.352924][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.361093][ T5469] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  143.401346][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  143.418786][ T6486] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  143.459896][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  143.470529][ T5830] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  143.476917][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  143.502730][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.534726][ T5830] usb 5-1: Product: syz
[  143.570329][ T5830] usb 5-1: Manufacturer: syz
[  143.579877][ T5830] usb 5-1: SerialNumber: syz
[  143.619665][ T5830] usb 5-1: config 0 descriptor??
[  143.661014][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  143.679678][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  143.690569][ T5830] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  143.698877][ T5830] usb 5-1: Detected FT232RL
[  143.716104][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  143.737051][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  143.748438][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  143.751366][ T5469] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  143.783157][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  143.792083][ T5469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.827451][ T6380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.858650][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  143.930677][ T5830] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  143.956359][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  143.972891][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  143.987908][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  144.199536][ T5830] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  144.404006][ T6179] usb 5-1: USB disconnect, device number 6
[  144.423015][ T5469] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0009/input/input15
[  144.477484][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  144.501197][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  144.528562][ T6179] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  144.544281][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.574931][ T6179] ftdi_sio 5-1:0.0: device disconnected
[  144.600578][ T5469] rc_core: IR keymap rc-rc6-mce not found
[  144.612271][ T5469] Registered IR keymap rc-empty
[  144.656487][ T5469] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0009/rc/rc0
[  144.714125][ T5469] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0009/rc/rc0/input16
[  144.792026][ T5469] hid-picolcd 0003:04D8:C002.0009: Unexpected FLASH access reports, please submit rdesc for review
[  144.844508][ T6504] loop1: detected capacity change from 0 to 32768
[  145.029521][ T6504] XFS (loop1): Mounting V5 Filesystem
[  145.043819][ T4230] device hsr_slave_0 left promiscuous mode
[  145.071868][ T4230] device hsr_slave_1 left promiscuous mode
[  145.112670][ T6543] loop4: detected capacity change from 0 to 1024
[  145.119936][ T4230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.138361][ T4230] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.150005][ T4230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.157613][ T4230] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.170064][ T4230] device bridge_slave_1 left promiscuous mode
[  145.178762][ T4230] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.193096][ T6179] Bluetooth: hci4: command 0x040f tx timeout
[  145.246169][ T4230] device bridge_slave_0 left promiscuous mode
[  145.252539][ T6504] XFS (loop1): Ending clean mount
[  145.273881][ T6504] XFS (loop1): Quotacheck needed: Please wait.
[  145.300469][ T4230] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.424116][ T4230] device veth1_macvtap left promiscuous mode
[  145.455896][ T4230] device veth0_macvtap left promiscuous mode
[  145.463159][ T6504] XFS (loop1): Quotacheck: Done.
[  145.544479][ T4230] device veth1_vlan left promiscuous mode
[  145.580424][ T4230] device veth0_vlan left promiscuous mode
[  145.606745][ T4226] usb 1-1: USB disconnect, device number 6
[  145.612744][    C1] hid-picolcd 0003:04D8:C002.0009: usb_submit_urb(ctrl) failed: -19
[  145.685362][ T4189] XFS (loop1): Unmounting Filesystem
[  146.026827][ T6179] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  146.143442][ T4230] team0 (unregistering): Port device team_slave_1 removed
[  146.164006][ T4230] team0 (unregistering): Port device team_slave_0 removed
[  146.181064][ T4230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.201099][ T4230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.373234][ T4230] bond0 (unregistering): Released all slaves
[  146.430558][ T6179] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.441008][ T6179] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  146.451969][ T6179] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.462105][ T6179] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  146.472239][ T6179] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  146.485631][ T6179] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  146.495040][ T6179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.528054][ T6557] netlink: 'syz.4.835': attribute type 1 has an invalid length.
[  146.552094][ T6557] device gretap0 entered promiscuous mode
[  146.570806][ T6559] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.579312][ T6560] netlink: 'syz.4.835': attribute type 1 has an invalid length.
[  146.593934][ T6179] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  146.616814][ T6179] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  146.634383][ T6179] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  146.664303][ T6179] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  146.684373][ T6179] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  146.699406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  146.740812][ T6179] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  146.760600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  146.775293][ T6380] device veth0_vlan entered promiscuous mode
[  146.781725][ T6560] syz.4.835 (6560) used greatest stack depth: 20496 bytes left
[  146.791066][ T6179] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  146.797012][ T6571] loop0: detected capacity change from 0 to 1024
[  146.821645][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  146.841135][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  146.896086][ T6380] device veth1_vlan entered promiscuous mode
[  146.930158][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  146.957220][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  146.990149][ T6571] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  146.998843][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  147.090931][ T6571] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,errors=continue,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000005,. Quota mode: none.
[  147.146288][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  147.161966][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  147.213031][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.276224][ T6178] Bluetooth: hci4: command 0x0419 tx timeout
[  147.295013][ T6380] device veth0_macvtap entered promiscuous mode
[  147.329761][ T6380] device veth1_macvtap entered promiscuous mode
[  147.370128][ T6594] loop1: detected capacity change from 0 to 512
[  147.396187][ T6592] input: syz1 as /devices/virtual/input/input17
[  147.444209][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.487192][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.551975][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.578046][ T6179] usb 4-1: USB disconnect, device number 8
[  147.586450][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.607446][ T6179] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  147.617184][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.640097][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.651197][ T6179] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  147.669147][ T6179] keyspan 4-1:1.0: device disconnected
[  147.675560][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.692431][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.710872][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.724176][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  147.751719][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  147.764075][ T6594] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  147.781403][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  147.789708][ T6594] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  147.810857][ T6594] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  147.831528][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.867298][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.887567][ T6594] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.845: Allocating blocks 41-42 which overlap fs metadata
[  147.908935][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.914902][ T6594] Quota error (device loop1): write_blk: dquota write failed
[  147.932979][ T6594] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  147.946084][ T6594] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.845: Allocating blocks 41-42 which overlap fs metadata
[  147.972677][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.984338][ T6594] Quota error (device loop1): write_blk: dquota write failed
[  148.002844][ T6594] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  148.018398][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.028568][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.039225][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.049406][ T6594] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.845: Failed to acquire dquot type 1
[  148.059657][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.073386][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.085320][ T6594] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  148.085553][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.115239][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  148.140870][ T6594] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.845: corrupted inode contents
[  148.172186][ T6594] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.845: mark_inode_dirty error
[  148.172216][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  148.194573][ T6380] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.207519][ T6380] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.216357][ T6380] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.226197][ T6594] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.845: corrupted inode contents
[  148.238945][ T6380] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.248612][ T6594] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.845: mark_inode_dirty error
[  148.265029][ T6594] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.845: corrupted inode contents
[  148.281788][ T6594] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  148.291918][ T6594] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.845: corrupted inode contents
[  148.323375][ T6594] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.845: mark_inode_dirty error
[  148.337229][ T6594] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  148.350183][ T6594] EXT4-fs (loop1): 1 truncate cleaned up
[  148.358069][ T6594] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback.
[  148.410549][ T6594] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  148.465439][ T6594] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  148.554596][ T6594] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  148.610226][ T6594] Quota error (device loop1): write_blk: dquota write failed
[  148.619144][ T6594] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  148.644330][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.660437][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.681025][ T6594] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.845: Failed to acquire dquot type 1
[  148.695121][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  148.753614][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.785061][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.807042][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.415360][ T6645] kAFS: Invalid Command on /proc/fs/afs/cells file
[  149.470508][ T5829] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  149.550003][ T6649] loop1: detected capacity change from 0 to 128
[  149.597054][ T6653] loop3: detected capacity change from 0 to 512
[  149.713331][ T6653] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  149.908329][ T5829] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  149.929600][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.240203][ T6679] loop1: detected capacity change from 0 to 128
[  150.398809][ T6673] loop0: detected capacity change from 0 to 4096
[  150.552006][ T5829] input: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.000A/input/input18
[  150.594764][ T6689] loop4: detected capacity change from 0 to 736
[  150.622138][ T6673] ntfs3: loop0: failed to convert "0080" to cp775
[  150.758580][ T6694] loop1: detected capacity change from 0 to 512
[  150.802667][ T5829] rc_core: IR keymap rc-rc6-mce not found
[  150.808654][ T5829] Registered IR keymap rc-empty
[  150.847459][ T5829] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.000A/rc/rc0
[  150.866074][ T6694] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (27202!=33349)
[  150.918272][ T6694] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none.
[  150.939046][ T5829] input: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.000A/rc/rc0/input19
[  150.987755][ T6694] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (27202!=33349)
[  151.193984][ T5829] hid-picolcd 0003:04D8:C002.000A: Unexpected FLASH access reports, please submit rdesc for review
[  151.713193][ T6683] loop3: detected capacity change from 0 to 32768
[  151.742539][ T6183] usb 6-1: USB disconnect, device number 2
[  151.750392][    C0] hid-picolcd 0003:04D8:C002.000A: usb_submit_urb(ctrl) failed: -19
[  151.880390][ T5829] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  152.059391][ T6724] loop4: detected capacity change from 0 to 512
[  152.076700][ T6683] non-latin1 character 0xffff found in JFS file name
[  152.126384][ T6683] mount with iocharset=utf8 to access
[  152.273348][ T6724] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.884: bad orphan inode 11862016
[  152.351738][ T6724] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  152.428417][ T6724] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.500785][ T5829] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  152.530305][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.553446][ T5829] usb 1-1: Product: syz
[  152.557683][ T5829] usb 1-1: Manufacturer: syz
[  152.598238][ T5829] usb 1-1: SerialNumber: syz
[  153.110666][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  153.157911][ T6760] loop1: detected capacity change from 0 to 4096
[  153.281278][ T6763] loop5: detected capacity change from 0 to 4096
[  153.287750][ T6760] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  153.348064][ T6763] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  153.410617][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71
[  153.453195][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  153.516177][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  153.551333][ T5829] lan78xx: probe of 1-1:1.0 failed with error -71
[  153.605037][ T5829] usb 1-1: USB disconnect, device number 7
[  153.660987][ T1198] ntfs3: loop5: ino=1b, Internal error
[  153.668831][ T1198] ntfs3: loop5: ntfs3_write_inode r=1b failed, -22.
[  154.400634][ T6179] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  154.509298][ T6787] loop5: detected capacity change from 0 to 128
[  154.604211][ T6770] loop1: detected capacity change from 0 to 131072
[  154.605907][ T6787] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  154.694332][ T6758] loop3: detected capacity change from 0 to 40427
[  154.718259][ T6770] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  154.725566][ T6770] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  154.739018][ T6770] F2FS-fs (loop1): invalid crc value
[  154.759448][ T6770] F2FS-fs (loop1): Found nat_bits in checkpoint
[  154.790725][ T6179] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  154.799847][ T6179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.833340][ T6758] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  154.839751][ T6758] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  154.851437][ T6770] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  154.858527][ T6770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  154.885715][ T6758] F2FS-fs (loop3): invalid crc value
[  154.932919][ T6758] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  155.265729][   T26] audit: type=1400 audit(1788265018.267:32): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=6809 comm="syz.5.908" name="foo" offset=60
[  155.287606][ T6758] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  155.307030][ T6758] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  155.380089][   T26] audit: type=1800 audit(1788265018.377:33): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.893" name="file1" dev="loop3" ino=10 res=0 errno=0
[  155.483716][ T6817] loop0: detected capacity change from 0 to 128
[  155.497219][ T4194] attempt to access beyond end of device
[  155.497219][ T4194] loop3: rw=2049, want=45104, limit=40427
[  155.512055][ T6179] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000B/input/input20
[  155.750571][ T6179] rc_core: IR keymap rc-rc6-mce not found
[  155.762259][ T6179] Registered IR keymap rc-empty
[  155.781619][ T6179] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000B/rc/rc0
[  155.835176][ T6179] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000B/rc/rc0/input21
[  155.937845][ T6833] loop5: detected capacity change from 0 to 512
[  155.947394][ T6179] hid-picolcd 0003:04D8:C002.000B: Unexpected FLASH access reports, please submit rdesc for review
[  156.096732][ T6833] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  156.191057][ T6833] EXT4-fs (loop5): 1 truncate cleaned up
[  156.196785][ T6833] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,jqfmt=vfsv1,grpjquota=,,errors=continue. Quota mode: none.
[  156.646570][ T4826] usb 5-1: USB disconnect, device number 7
[  156.660378][    C0] hid-picolcd 0003:04D8:C002.000B: usb_submit_urb(ctrl) failed: -19
[  156.745633][ T6860] kvm [6856]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x81
[  157.597726][ T6909] loop4: detected capacity change from 0 to 16
[  157.632003][ T6911] loop1: detected capacity change from 0 to 1024
[  157.714414][ T6909] erofs: (device loop4): mounted with root inode @ nid 36.
[  157.781351][ T6911] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.182863][ T6929] netlink: 192 bytes leftover after parsing attributes in process `syz.0.947'.
[  158.240910][ T6931] loop4: detected capacity change from 0 to 64
[  158.378795][ T6933] loop3: detected capacity change from 0 to 256
[  158.539896][ T6938] netlink: 6 bytes leftover after parsing attributes in process `syz.4.952'.
[  158.572662][ T6933] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  158.807046][ T6949] loop0: detected capacity change from 0 to 1024
[  158.855444][ T6912] loop5: detected capacity change from 0 to 40427
[  158.914104][ T6949] hfsplus: invalid length 1280 has been corrected to 255
[  158.937255][ T6956] ieee802154 phy0 wpan0: encryption failed: -22
[  158.980367][ T4826] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  159.005994][ T6912] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  159.019968][ T6912] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  159.117464][ T6912] F2FS-fs (loop5): Found nat_bits in checkpoint
[  159.201058][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'.
[  159.336303][ T6912] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  159.347117][ T6912] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  159.355807][ T4826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.376645][ T4826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.389707][ T4826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.403196][ T4826] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00
[  159.418571][ T4826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.434509][ T4826] usb 5-1: config 0 descriptor??
[  159.441166][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  159.967146][ T4826] apple 0003:05AC:024E.000C: unbalanced collection at end of report description
[  159.987006][ T4826] apple 0003:05AC:024E.000C: parse failed
[  160.003209][ T4826] apple: probe of 0003:05AC:024E.000C failed with error -22
[  160.017688][ T6996] loop3: detected capacity change from 0 to 256
[  160.087919][ T6996] exfat: Deprecated parameter 'namecase'
[  160.121865][ T6996] exfat: Deprecated parameter 'namecase'
[  160.160809][ T6996] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  160.179815][ T4826] usb 5-1: USB disconnect, device number 8
[  160.789834][ T7024] netlink: 'syz.1.980': attribute type 1 has an invalid length.
[  160.824962][ T7022] loop0: detected capacity change from 0 to 1024
[  160.835666][ T7025] loop4: detected capacity change from 0 to 512
[  160.863897][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'.
[  160.914944][ T7022] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  160.935503][ T7025] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61417200 (sector = 1)
[  160.960322][ T7022] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  161.017468][ T7022] jbd2_journal_init_inode: Cannot locate journal superblock
[  161.034650][ T7032] program syz.1.984 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.059131][ T7022] EXT4-fs (loop0): Could not load journal inode
[  161.351201][ T7044] netem: change failed
[  161.374691][ T7038] loop3: detected capacity change from 0 to 4096
[  161.387693][ T7046] loop0: detected capacity change from 0 to 1024
[  161.514472][ T7038] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  161.563515][ T7046] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.584633][ T7046] EXT4-fs error (device loop0): __ext4_new_inode:1082: comm syz.0.992: reserved inode found cleared - inode=1
[  161.998655][ T7073] __sock_release: fasync list not empty!
[  162.384607][ T7078] loop3: detected capacity change from 0 to 8192
[  162.473381][ T7078] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  162.531324][ T7078] REISERFS (device loop3): using ordered data mode
[  162.537993][ T7078] reiserfs: using flush barriers
[  162.559271][ T7078] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  162.576118][ T7078] REISERFS (device loop3): checking transaction log (loop3)
[  162.587000][ T7078] REISERFS (device loop3): Using r5 hash to sort names
[  162.594803][ T7078] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  162.628935][ T7078] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  163.520830][ T7101] set_capacity_and_notify: 1 callbacks suppressed
[  163.520849][ T7101] loop1: detected capacity change from 0 to 32768
[  163.658840][ T7104] loop5: detected capacity change from 0 to 32768
[  163.727735][ T7118] loop3: detected capacity change from 0 to 1024
[  163.755239][ T7106] loop0: detected capacity change from 0 to 32768
[  163.811903][ T7106] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1015 (7106)
[  163.837229][ T7118] EXT4-fs (loop3): Ignoring removed orlov option
[  163.868750][ T7104] XFS (loop5): Mounting V5 Filesystem
[  163.902206][ T7118] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000003,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,min_batch_time=0x0000000000000007,grpjquota=,,errors=continue. Quota mode: none.
[  164.009620][ T7106] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  164.059994][ T7104] XFS (loop5): Ending clean mount
[  164.112685][ T7106] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  164.181025][ T7106] BTRFS info (device loop0): use zstd compression, level 3
[  164.188341][ T7106] BTRFS info (device loop0): using free space tree
[  164.229469][ T7106] BTRFS info (device loop0): has skinny extents
[  164.340693][ T6380] XFS (loop5): Unmounting Filesystem
[  164.406640][ T7136] loop3: detected capacity change from 0 to 2048
[  164.454788][ T7112] loop4: detected capacity change from 0 to 40427
[  164.487647][ T7136] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.655747][ T7112] F2FS-fs (loop4): invalid crc value
[  164.741361][ T7112] F2FS-fs (loop4): Found nat_bits in checkpoint
[  164.820486][ T7106] BTRFS info (device loop0): enabling ssd optimizations
[  164.922108][   T26] audit: type=1800 audit(1788265027.927:34): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1015" name="file1" dev="loop0" ino=260 res=0 errno=0
[  165.030742][ T7112] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  165.579221][ T4192] attempt to access beyond end of device
[  165.579221][ T4192] loop4: rw=2049, want=45104, limit=40427
[  165.691415][ T7190] loop0: detected capacity change from 0 to 64
[  165.764952][ T7163] loop1: detected capacity change from 0 to 32768
[  165.847076][ T7190] attempt to access beyond end of device
[  165.847076][ T7190] loop0: rw=2049, want=162, limit=64
[  165.883131][ T7190] Buffer I/O error on dev loop0, logical block 161, lost async page write
[  165.913326][ T7190] attempt to access beyond end of device
[  165.913326][ T7190] loop0: rw=2049, want=163, limit=64
[  165.961163][ T7190] Buffer I/O error on dev loop0, logical block 162, lost async page write
[  166.013177][ T7190] attempt to access beyond end of device
[  166.013177][ T7190] loop0: rw=2049, want=164, limit=64
[  166.050429][ T7190] Buffer I/O error on dev loop0, logical block 163, lost async page write
[  166.084969][ T7190] attempt to access beyond end of device
[  166.084969][ T7190] loop0: rw=2049, want=168, limit=64
[  166.185910][ T7190] Buffer I/O error on dev loop0, logical block 167, lost async page write
[  166.215325][ T7190] attempt to access beyond end of device
[  166.215325][ T7190] loop0: rw=2049, want=170, limit=64
[  166.251131][ T7190] Buffer I/O error on dev loop0, logical block 169, lost async page write
[  166.292969][ T7190] attempt to access beyond end of device
[  166.292969][ T7190] loop0: rw=2049, want=172, limit=64
[  166.334603][ T7190] Buffer I/O error on dev loop0, logical block 171, lost async page write
[  166.381098][ T7190] attempt to access beyond end of device
[  166.381098][ T7190] loop0: rw=2049, want=173, limit=64
[  166.420329][ T7190] Buffer I/O error on dev loop0, logical block 172, lost async page write
[  166.833320][ T7213] loop5: detected capacity change from 0 to 512
[  166.852071][ T7212] loop0: detected capacity change from 0 to 512
[  166.901785][ T7212] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.984072][ T7213] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1034: inode has both inline data and extents flags
[  167.074096][ T7213] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1034: couldn't read orphan inode 15 (err -117)
[  167.101393][ T7213] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  167.202250][ T7195] XFS (loop3): Mounting V5 Filesystem
[  167.382371][ T7195] XFS (loop3): Ending clean mount
[  167.498278][ T4194] XFS (loop3): Unmounting Filesystem
[  167.531354][ T7198] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[  167.576471][ T7198] F2FS-fs (loop1): invalid crc value
[  167.626481][ T7198] F2FS-fs (loop1): Found nat_bits in checkpoint
[  167.802828][ T7248] hfsplus: invalid length 32517 has been corrected to 255
[  167.839408][ T7198] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  167.846452][ T7252] erofs: (device loop0): mounted with root inode @ nid 36.
[  167.974712][ T7252] attempt to access beyond end of device
[  167.974712][ T7252] loop0: rw=524288, want=48, limit=16
[  168.045589][ T7198] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  168.064497][ T7252] attempt to access beyond end of device
[  168.064497][ T7252] loop0: rw=524288, want=40, limit=16
[  168.367259][ T6419] hfsplus: b-tree write err: -5, ino 20
[  168.497810][ T7274] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  168.517814][ T7274] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  168.590216][ T7274] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  169.165433][ T7306] set_capacity_and_notify: 7 callbacks suppressed
[  169.165450][ T7306] loop0: detected capacity change from 0 to 512
[  169.284211][ T7306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  169.360069][ T7306] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  169.476438][ T7306] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1055: invalid indirect mapped block 9 (level 0)
[  169.532131][ T7329] loop4: detected capacity change from 0 to 1024
[  169.565960][ T7306] EXT4-fs (loop0): 1 truncate cleaned up
[  169.571902][ T7306] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  169.701114][   T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  169.758513][ T7335] loop5: detected capacity change from 0 to 4096
[  169.791587][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  169.802088][ T4185] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  169.837372][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[  169.859854][ T7337] netlink: 'syz.1.1068': attribute type 11 has an invalid length.
[  169.887463][ T7340] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.900445][ T7337] netlink: 'syz.1.1068': attribute type 13 has an invalid length.
[  170.096376][   T13] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  170.128304][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.146793][   T13] usb 4-1: config 0 descriptor??
[  170.207679][   T13] cp210x 4-1:0.0: cp210x converter detected
[  170.228175][ T7346] netlink: 'syz.4.1073': attribute type 1 has an invalid length.
[  170.320985][ T7350] loop1: detected capacity change from 0 to 256
[  170.471450][ T7350] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
[  170.650537][   T13] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  170.723947][   T13] usb 4-1: cp210x converter now attached to ttyUSB0
[  170.926334][ T6183] usb 4-1: USB disconnect, device number 9
[  170.970776][ T6183] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  171.011788][ T6183] cp210x 4-1:0.0: device disconnected
[  172.238313][ T1198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.309773][ T1198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.376947][ T1198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.457414][ T1198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.591589][ T1198] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.649031][ T1198] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.728509][ T1198] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.788062][ T1198] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.928841][ T1198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.992656][ T1198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.049681][ T1198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.098928][ T1198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.231802][ T1198] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.286421][ T1198] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.351727][ T1198] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.415964][ T1198] device netdevsim0 left promiscuous mode
[  173.433428][ T1198] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.567155][ T1198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.626869][ T1198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.708238][ T1198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.776443][ T1198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.035433][ T1198] tipc: Disabling bearer <udp:syz0>
[  174.058121][ T1198] tipc: Left network mode
[  174.088559][ T1198] tipc: Disabling bearer <eth:gre0>
[  174.094371][ T1198] tipc: Left network mode
[  175.685349][ T1198] device hsr_slave_0 left promiscuous mode
[  175.692208][ T1198] device hsr_slave_1 left promiscuous mode
[  175.699767][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.709037][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.717044][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.725660][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.733967][ T1198] device bridge_slave_1 left promiscuous mode
[  175.740195][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.752185][ T1198] device bridge_slave_0 left promiscuous mode
[  175.758440][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.774593][ T1198] device hsr_slave_0 left promiscuous mode
[  175.782579][ T1198] device hsr_slave_1 left promiscuous mode
[  175.788957][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.797393][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.805295][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.814227][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.822833][ T1198] device bridge_slave_1 left promiscuous mode
[  175.829265][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.850729][ T1198] device bridge_slave_0 left promiscuous mode
[  175.857010][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.876716][ T1198] device hsr_slave_0 left promiscuous mode
[  175.883238][ T1198] device hsr_slave_1 left promiscuous mode
[  175.889684][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.897371][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.908970][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.921727][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.930125][ T1198] device bridge_slave_1 left promiscuous mode
[  175.944195][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.958116][ T1198] device bridge_slave_0 left promiscuous mode
[  175.966927][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.978087][ T1198] device batadv0 left promiscuous mode
[  175.992891][ T1198] device hsr_slave_0 left promiscuous mode
[  175.999250][ T1198] device hsr_slave_1 left promiscuous mode
[  176.006127][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.013732][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.021772][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.029210][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.037482][ T1198] device bridge_slave_1 left promiscuous mode
[  176.044441][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.055727][ T1198] device bridge_slave_0 left promiscuous mode
[  176.063441][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.087216][ T1198] device hsr_slave_0 left promiscuous mode
[  176.095043][ T1198] device hsr_slave_1 left promiscuous mode
[  176.107579][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.115444][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.131720][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.139499][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.156907][ T1198] device bridge_slave_1 left promiscuous mode
[  176.167244][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.178269][ T1198] device bridge_slave_0 left promiscuous mode
[  176.185119][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.207325][ T1198] device veth1_macvtap left promiscuous mode
[  176.213547][ T1198] device veth0_macvtap left promiscuous mode
[  176.219617][ T1198] device veth1_vlan left promiscuous mode
[  176.225815][ T1198] device veth0_vlan left promiscuous mode
[  176.233325][ T1198] device veth1_macvtap left promiscuous mode
[  176.239399][ T1198] device veth0_macvtap left promiscuous mode
[  176.246112][ T1198] device veth1_vlan left promiscuous mode
[  176.252313][ T1198] device veth0_vlan left promiscuous mode
[  176.259922][ T1198] device veth1_macvtap left promiscuous mode
[  176.266431][ T1198] device veth0_macvtap left promiscuous mode
[  176.273841][ T1198] device veth1_vlan left promiscuous mode
[  176.280136][ T1198] device veth0_vlan left promiscuous mode
[  176.288052][ T1198] device veth1_macvtap left promiscuous mode
[  176.294498][ T1198] device veth0_macvtap left promiscuous mode
[  176.300953][ T1198] device veth1_vlan left promiscuous mode
[  176.306746][ T1198] device veth0_vlan left promiscuous mode
[  176.314842][ T1198] device veth1_macvtap left promiscuous mode
[  176.320981][ T1198] device veth0_macvtap left promiscuous mode
[  176.327063][ T1198] device veth1_vlan left promiscuous mode
[  176.333501][ T1198] device veth0_vlan left promiscuous mode
[  176.905688][ T1198] team0 (unregistering): Port device team_slave_1 removed
[  176.926622][ T1198] team0 (unregistering): Port device team_slave_0 removed
[  176.947386][ T1198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.962779][ T1198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.045017][ T1198] bond0 (unregistering): Released all slaves
[  177.194253][ T1198] team0 (unregistering): Port device team_slave_1 removed
[  177.208707][ T1198] team0 (unregistering): Port device team_slave_0 removed
[  177.225481][ T1198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.241944][ T1198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.311426][ T1198] bond0 (unregistering): Released all slaves
[  177.454269][ T1198] team0 (unregistering): Port device team_slave_1 removed
[  177.469331][ T1198] team0 (unregistering): Port device team_slave_0 removed
[  177.484608][ T1198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.498547][ T1198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.567126][ T1198] bond0 (unregistering): Released all slaves
[  177.713722][ T1198] team0 (unregistering): Port device team_slave_1 removed
[  177.731797][ T1198] team0 (unregistering): Port device team_slave_0 removed
[  177.747019][ T1198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.762790][ T1198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.836223][ T1198] bond0 (unregistering): Released all slaves
[  177.969665][ T1198] team0 (unregistering): Port device team_slave_1 removed
[  177.987350][ T1198] team0 (unregistering): Port device team_slave_0 removed
[  178.003249][ T1198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.017619][ T1198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.094133][ T1198] bond0 (unregistering): Released all slaves