last executing test programs:

2m3.038400714s ago: executing program 0 (id=950):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x1b, 0x1, 0x2, "e36bcaf012684f1625fecd1ad335fc208de6c538f46fe953f33e28cbbeb27edc", 0x20343059})

2m3.036984568s ago: executing program 0 (id=952):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x7fffffff, 0x1b)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

2m2.986934471s ago: executing program 0 (id=953):
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)

2m2.922196585s ago: executing program 0 (id=955):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

2m2.851683349s ago: executing program 0 (id=956):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40), 0x20100, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, 0x0)

2m2.398597664s ago: executing program 0 (id=960):
fsopen(&(0x7f0000000180)='qnx6\x00', 0x0)

2m2.308666829s ago: executing program 32 (id=960):
fsopen(&(0x7f0000000180)='qnx6\x00', 0x0)

3.435948499s ago: executing program 3 (id=2538):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)

3.36995956s ago: executing program 3 (id=2540):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x7, 0x4)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x3ff, 0x4)
recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/159, 0x9f}, 0xfffffffc}], 0x1, 0x2, 0x0)

2.409268725s ago: executing program 3 (id=2572):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e23, 0x6, @mcast2, 0xb9}}, {{0xa, 0x4ea3, 0x5, @mcast1, 0x7}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451)

2.408924433s ago: executing program 3 (id=2573):
syz_mount_image$f2fs(&(0x7f0000000300), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@nodiscard}, {@disable_ext_identify}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@background_gc_on}, {@nogc_merge}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@noinline_dentry}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000980)='./bus\x00', 0x1b2c00, 0x1c4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000009c0)={@id={0x2, 0x0, @b}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.976354887s ago: executing program 3 (id=2579):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0)

1.242713416s ago: executing program 3 (id=2585):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0xffffffffffffffff, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x20000000000b}, 0x10004, 0x6e6baf, 0xc819129d1ef8b85c}, {{@in=@empty, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0x3502}}, 0xe8)

1.178235609s ago: executing program 33 (id=2585):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0xffffffffffffffff, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x20000000000b}, 0x10004, 0x6e6baf, 0xc819129d1ef8b85c}, {{@in=@empty, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0x3502}}, 0xe8)

409.53209ms ago: executing program 1 (id=2595):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xa8, 0x0, 0x0, {}, 0x3810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0xffffffffffffffb0, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e)

409.349218ms ago: executing program 2 (id=2596):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080)

312.735483ms ago: executing program 2 (id=2597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040)

312.621862ms ago: executing program 1 (id=2598):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x4b3a, 0x3)

236.697337ms ago: executing program 2 (id=2599):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003780)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/167, 0xa7}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0)

236.508078ms ago: executing program 1 (id=2600):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x50}}, 0x0)

152.850366ms ago: executing program 2 (id=2601):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000100)=0xffffff83)

152.563837ms ago: executing program 1 (id=2602):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)={0x24, 0x12, 0x9, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x4, 0xe, 0x0, 0x0, @binary}]}, 0x24}], 0x1}, 0x0)

86.268011ms ago: executing program 2 (id=2603):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x44051)
rt_tgsigqueueinfo(0x0, 0x0, 0x25, &(0x7f0000000000)={0x28, 0xe, 0x9})

86.042042ms ago: executing program 1 (id=2604):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1})

85.90894ms ago: executing program 2 (id=2605):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000bc0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
mkdir(&(0x7f00000002c0)='./control\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000180))
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
unlink(&(0x7f0000000080)='./bus/file0\x00')

0s ago: executing program 1 (id=2606):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setpriority(0x1, 0x0, 0x3)

kernel console output (not intermixed with test programs):

e team_slave_0 added
[  128.822655][ T8095] team0: Port device team_slave_1 added
[  128.897268][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.899405][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.905974][ T8147] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  128.921237][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.949085][ T8147] 8021q: adding VLAN 0 to HW filter on device bond2
[  128.952346][ T8147] bond0: (slave bond2): Enslaving as an active interface with an up link
[  128.957663][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.959792][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.972896][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.027664][ T8095] hsr_slave_0: entered promiscuous mode
[  129.031239][ T8095] hsr_slave_1: entered promiscuous mode
[  129.033390][ T8095] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.035651][ T8095] Cannot create hsr debugfs directory
[  129.116906][ T8157] futex_wake_op: syz.1.978 tries to shift op by 36; fix this program
[  129.137098][ T5942] Bluetooth: hci3: command tx timeout
[  129.258345][ T8095] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  129.293721][ T8095] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  129.300193][ T8170] loop2: detected capacity change from 0 to 1024
[  129.315622][ T8095] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  129.333451][ T8170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.337387][ T8170] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.343268][ T8095] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  129.361566][   T33] audit: type=1800 audit(1753211222.896:89): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.982" name="file2" dev="loop2" ino=16 res=0 errno=0
[  129.418040][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.481043][ T8184] loop2: detected capacity change from 0 to 512
[  129.488057][ T8095] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.491475][ T8184] EXT4-fs: inline encryption not supported
[  129.494253][ T8184] EXT4-fs: Ignoring removed nobh option
[  129.505577][ T8184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.534923][ T8095] 8021q: adding VLAN 0 to HW filter on device team0
[  129.558491][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.560797][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.571015][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.588548][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.590686][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.779682][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.812842][ T8095] veth0_vlan: entered promiscuous mode
[  129.818428][ T8095] veth1_vlan: entered promiscuous mode
[  129.845226][ T8095] veth0_macvtap: entered promiscuous mode
[  129.998651][ T8206] loop2: detected capacity change from 0 to 40427
[  130.004684][ T8206] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  130.006998][ T8206] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  130.009585][ T8206] F2FS-fs (loop2): build fault injection rate: 17008
[  130.011539][ T8206] F2FS-fs (loop2): build fault injection type: 0x6
[  130.016446][ T8206] F2FS-fs (loop2): invalid crc value
[  130.061793][ T8095] veth1_macvtap: entered promiscuous mode
[  130.062984][ T8206] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  130.066200][ T8206] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  130.082723][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.103477][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.117988][ T8095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.122604][ T8095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.126241][ T8095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.136492][ T8095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.151441][ T5943] syz-executor: attempt to access beyond end of device
[  130.151441][ T5943] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  130.164489][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  130.164505][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.164510][ T5943] Call Trace:
[  130.164515][ T5943]  <TASK>
[  130.164542][ T5943]  dump_stack_lvl+0x189/0x250
[  130.164566][ T5943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.164574][ T5943]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  130.164584][ T5943]  ? __pfx_queue_work_on+0x10/0x10
[  130.164596][ T5943]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.164603][ T5943]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.164611][ T5943]  ? f2fs_hw_is_readonly+0x39b/0x470
[  130.164622][ T5943]  f2fs_handle_critical_error+0x37c/0x540
[  130.164633][ T5943]  f2fs_write_end_io+0x495/0x810
[  130.164643][ T5943]  ? blkg_put+0x22/0x240
[  130.164664][ T5943]  __submit_merged_bio+0x27a/0x6a0
[  130.164675][ T5943]  __submit_merged_write_cond+0x255/0x530
[  130.164718][ T5943]  f2fs_write_data_pages+0x261d/0x3000
[  130.164726][ T5943]  ? unwind_get_return_address+0x4d/0x90
[  130.164737][ T5943]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  130.164764][ T5943]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.164771][ T5943]  ? lockdep_unlock+0x89/0x120
[  130.164784][ T5943]  ? sched_clock+0x3f/0x60
[  130.164797][ T5943]  ? sched_clock_cpu+0x74/0x430
[  130.164820][ T5943]  ? check_path+0x21/0x40
[  130.164829][ T5943]  ? check_noncircular+0xe0/0x160
[  130.164860][ T5943]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.164868][ T5943]  do_writepages+0x32e/0x550
[  130.164885][ T5943]  ? do_raw_spin_unlock+0x4d/0x240
[  130.164898][ T5943]  filemap_fdatawrite+0x191/0x230
[  130.164909][ T5943]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  130.164940][ T5943]  ? do_raw_spin_unlock+0x4d/0x240
[  130.164952][ T5943]  f2fs_sync_dirty_inodes+0x31f/0x830
[  130.164969][ T5943]  f2fs_write_checkpoint+0x94a/0x1de0
[  130.164989][ T5943]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  130.165019][ T5943]  ? kill_f2fs_super+0x298/0x6c0
[  130.165033][ T5943]  kill_f2fs_super+0x2c3/0x6c0
[  130.165045][ T5943]  ? __pfx_kill_f2fs_super+0x10/0x10
[  130.165053][ T5943]  ? radix_tree_delete_item+0x2b6/0x400
[  130.165066][ T5943]  ? shrinker_free+0x2ce/0x3e0
[  130.165076][ T5943]  deactivate_locked_super+0xbc/0x130
[  130.165088][ T5943]  cleanup_mnt+0x425/0x4c0
[  130.165115][ T5943]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.165126][ T5943]  task_work_run+0x1d4/0x260
[  130.165140][ T5943]  ? __pfx_task_work_run+0x10/0x10
[  130.165150][ T5943]  ? __x64_sys_umount+0x122/0x160
[  130.165163][ T5943]  ? exit_to_user_mode_loop+0x40/0x110
[  130.165174][ T5943]  exit_to_user_mode_loop+0xec/0x110
[  130.165182][ T5943]  do_syscall_64+0x2bd/0x3b0
[  130.165192][ T5943]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.165200][ T5943]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.165208][ T5943]  ? exc_page_fault+0x9f/0xf0
[  130.165217][ T5943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.165224][ T5943] RIP: 0033:0x7f4eecd8fcd7
[  130.165234][ T5943] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  130.165240][ T5943] RSP: 002b:00007fff3e518988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  130.165249][ T5943] RAX: 0000000000000000 RBX: 00007f4eece10b55 RCX: 00007f4eecd8fcd7
[  130.165254][ T5943] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3e518a40
[  130.165259][ T5943] RBP: 00007fff3e518a40 R08: 0000000000000000 R09: 0000000000000000
[  130.165263][ T5943] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3e519ad0
[  130.165268][ T5943] R13: 00007f4eece10b55 R14: 000000000001f4f2 R15: 00007fff3e519b10
[  130.165280][ T5943]  </TASK>
[  130.165331][ T5943] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  130.381950][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.384386][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.429226][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.445954][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.925055][ T8228] loop2: detected capacity change from 0 to 32768
[  131.016654][ T8228] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  131.177301][ T5943] ocfs2: Unmounting device (7,2) on (node local)
[  131.371366][ T5942] Bluetooth: hci3: command tx timeout
[  131.486778][ T8258] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.995'.
[  132.308426][ T5987] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  132.484923][ T5987] usb 3-1: unable to get BOS descriptor or descriptor too short
[  132.488060][ T5987] usb 3-1: not running at top speed; connect to a high speed hub
[  132.491783][ T5987] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  132.498152][ T5987] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.501502][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.504110][ T5987] usb 3-1: Product: syz
[  132.505949][ T5987] usb 3-1: Manufacturer: syz
[  132.507653][ T5987] usb 3-1: SerialNumber: syz
[  132.736677][ T5987] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  132.754041][ T5987] usb 3-1: USB disconnect, device number 9
[  132.777069][ T7856] udevd[7856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.061842][ T8296] IPv6: addrconf: prefix option has invalid lifetime
[  133.379662][ T8314] sctp: [Deprecated]: syz.1.1020 (pid 8314) Use of int in max_burst socket option.
[  133.379662][ T8314] Use struct sctp_assoc_value instead
[  133.589277][ T5942] Bluetooth: hci3: command tx timeout
[  134.179217][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'.
[  134.216250][ T8345] loop3: detected capacity change from 0 to 256
[  134.224865][ T8345] exfat: Deprecated parameter 'utf8'
[  134.246598][ T8345] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  134.349615][ T8354] loop2: detected capacity change from 0 to 1024
[  134.360963][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  134.363004][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  134.665075][ T8374] netlink: 'syz.2.1046': attribute type 1 has an invalid length.
[  134.668045][ T8374] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1046'.
[  135.808686][ T5942] Bluetooth: hci3: command tx timeout
[  136.005886][ T8405] loop2: detected capacity change from 0 to 128
[  136.025089][ T8405] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /syz-executor /syz-executor /newroot/292/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  136.191812][ T8415] loop3: detected capacity change from 0 to 4096
[  136.268124][ T8415] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  136.283782][ T8415] ntfs3(loop3): ino=b, mi_enum_attr
[  136.285410][ T8415] ntfs3(loop3): Failed to load $Extend (-22).
[  136.295869][ T8415] ntfs3(loop3): Failed to initialize $Extend.
[  136.460702][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'.
[  136.710393][ T8448] vivid-000: disconnect
[  136.724046][ T8447] vivid-000: reconnect
[  136.986538][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1079'.
[  136.994511][ T6000] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  137.170447][ T6000] usb 4-1: config 7 has an invalid interface number: 101 but max is 0
[  137.173444][ T6000] usb 4-1: config 7 has no interface number 0
[  137.179032][ T6000] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  137.182085][ T6000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.184785][ T6000] usb 4-1: Product: syz
[  137.186227][ T6000] usb 4-1: Manufacturer: syz
[  137.187956][ T6000] usb 4-1: SerialNumber: syz
[  137.467229][ T6000] as10x_usb: device has been detected
[  137.484720][ T6000] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  137.530416][ T6000] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  137.579542][ T6000] as10x_usb: error during firmware upload part1
[  137.582735][ T6000] Registered device Elgato EyeTV DTT Deluxe
[  137.588991][ T6000] usb 4-1: USB disconnect, device number 2
[  137.688693][ T6000] Unregistered device Elgato EyeTV DTT Deluxe
[  137.694979][ T6000] as10x_usb: device has been disconnected
[  138.101007][  T791] IPVS: starting estimator thread 0...
[  138.223057][ T8459] IPVS: using max 68 ests per chain, 163200 per kthread
[  138.966969][ T8482] loop2: detected capacity change from 0 to 64
[  139.044623][ T5943] syz-executor: attempt to access beyond end of device
[  139.044623][ T5943] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  139.050234][ T5943] Buffer I/O error on dev loop2, logical block 134217734, async page read
[  139.053963][ T5943] syz-executor: attempt to access beyond end of device
[  139.053963][ T5943] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  139.061218][ T5943] Buffer I/O error on dev loop2, logical block 134217734, async page read
[  139.066522][ T5943] Trying to free block not in datazone
[  140.063180][  T791] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  140.394079][  T791] usb 3-1: Using ep0 maxpacket: 8
[  140.399136][  T791] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  140.401523][  T791] usb 3-1: config 0 has no interface number 0
[  140.403351][  T791] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  140.407733][  T791] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  140.412906][  T791] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  140.417369][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.419805][  T791] usb 3-1: Product: syz
[  140.421140][  T791] usb 3-1: Manufacturer: syz
[  140.422608][  T791] usb 3-1: SerialNumber: syz
[  140.425658][  T791] usb 3-1: config 0 descriptor??
[  140.429381][ T8498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  140.873444][  T791] ath6kl: Failed to submit usb control message: -71
[  140.876021][  T791] ath6kl: unable to send the bmi data to the device: -71
[  140.878331][  T791] ath6kl: Unable to send get target info: -71
[  140.890742][  T791] ath6kl: Failed to init ath6kl core: -71
[  140.895032][  T791] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71
[  140.901804][  T791] usb 3-1: USB disconnect, device number 10
[  145.046183][  T791] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  145.218160][  T791] usb 3-1: config 0 has an invalid interface number: 228 but max is 0
[  145.220789][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.223831][  T791] usb 3-1: config 0 has no interface number 0
[  145.225723][  T791] usb 3-1: too many endpoints for config 0 interface 228 altsetting 77: 249, using maximum allowed: 30
[  145.229449][  T791] usb 3-1: config 0 interface 228 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 249
[  145.233456][  T791] usb 3-1: config 0 interface 228 has no altsetting 0
[  145.235573][  T791] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  145.239570][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.243689][  T791] usb 3-1: config 0 descriptor??
[  145.262997][  T791] usb 3-1: selecting invalid altsetting 0
[  145.357275][ T8670] loop3: detected capacity change from 0 to 32768
[  145.380066][ T8670] 
[  145.380066][ T8670]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.380066][ T8670] 
[  145.400016][ T8095] 
[  145.400016][ T8095]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.400016][ T8095] 
[  145.405260][ T8095] 
[  145.405260][ T8095]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.405260][ T8095] 
[  145.465922][  T791] usb 3-1: USB disconnect, device number 11
[  145.531249][ T8674] loop3: detected capacity change from 0 to 256
[  145.559229][ T8674] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  145.659505][ T8678] loop3: detected capacity change from 0 to 256
[  145.680358][ T8678] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  145.700738][ T8678] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  145.711283][ T8678] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  145.721705][   T33] audit: type=1800 audit(1753211238.208:90): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1149" name="file1" dev="loop3" ino=1048674 res=0 errno=0
[  145.773715][ T8682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1151'.
[  146.312302][ T8711] loop2: detected capacity change from 0 to 4096
[  146.332757][ T8711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.365347][   T33] audit: type=1800 audit(1753211238.797:91): pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1164" name="file2" dev="loop2" ino=16 res=0 errno=0
[  146.384300][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.463842][   T33] audit: type=1326 audit(1753211238.891:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.2.1167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  146.471649][   T33] audit: type=1326 audit(1753211238.900:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.2.1167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  146.478795][   T33] audit: type=1326 audit(1753211238.900:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.2.1167" exe="/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  146.485478][   T33] audit: type=1326 audit(1753211238.900:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.2.1167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  146.493076][   T33] audit: type=1326 audit(1753211238.900:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.2.1167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  146.773388][ T8725] loop2: detected capacity change from 0 to 1024
[  146.777853][ T8725] EXT4-fs: Ignoring removed nomblk_io_submit option
[  146.785402][ T8727] loop3: detected capacity change from 0 to 1024
[  146.812716][ T5942] Bluetooth: hci3: unknown advertising packet type: 0x72
[  146.812765][ T5942] Bluetooth: hci3: unknown advertising packet type: 0x30
[  146.816938][ T5942] Bluetooth: hci3: unknown advertising packet type: 0x6b
[  146.818725][ T8725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.845164][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.881602][ T8731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  146.992723][ T8736] loop2: detected capacity change from 0 to 4096
[  147.004791][ T8736] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  147.299906][ T8747] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1177'.
[  147.362949][  T139] hfsplus: b-tree write err: -5, ino 4
[  147.512747][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1185'.
[  147.520375][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1185'.
[  147.877598][ T6000] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  147.939667][ T8796] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  147.942266][ T8796] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  147.946315][ T8796] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  147.948538][ T8796] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  147.950651][ T8796] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  147.952956][ T8796] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  147.959520][ T8796] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  147.961704][ T8796] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  147.969233][ T8796] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  147.971671][ T8796] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  148.042006][ T6000] usb 3-1: config 0 has an invalid interface number: 95 but max is 0
[  148.044685][ T6000] usb 3-1: config 0 has no interface number 0
[  148.046658][ T6000] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  148.063834][ T6000] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  148.067147][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.074477][ T6000] usb 3-1: Product: syz
[  148.075788][ T6000] usb 3-1: Manufacturer: syz
[  148.080583][ T6000] usb 3-1: SerialNumber: syz
[  148.091706][ T6000] usb 3-1: config 0 descriptor??
[  148.094182][ T8774] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  148.137093][ T8806] loop3: detected capacity change from 0 to 764
[  148.409128][ T6000] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  148.411316][ T6000] usb 3-1: MIDIStreaming interface descriptor not found
[  148.461454][ T6000] usb 3-1: USB disconnect, device number 12
[  149.239836][ T8827] loop2: detected capacity change from 0 to 32768
[  149.257753][ T8827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1214 (8827)
[  149.279744][ T8835] input: syz0 as /devices/virtual/input/input7
[  149.285257][ T8827] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.295089][ T8827] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  149.297907][ T8827] BTRFS info (device loop2): using free-space-tree
[  149.516611][ T5943] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.559454][ T8851] loop3: detected capacity change from 0 to 32768
[  149.581884][ T8851] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  149.596822][ T8851] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  149.692167][ T8851] syz.3.1220 (8851) used greatest stack depth: 19496 bytes left
[  149.776687][ T8095] ocfs2: Unmounting device (7,3) on (node local)
[  149.832579][ T8870] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[  149.894773][ T8874] loop2: detected capacity change from 0 to 128
[  149.897386][ T8874] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  149.922182][ T8874] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  150.040838][  T139] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  150.845930][ T8908] netlink: 'syz.1.1245': attribute type 21 has an invalid length.
[  151.646984][ T8918] loop3: detected capacity change from 0 to 32768
[  151.678476][ T8918] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.731158][ T8918] XFS (loop3): Ending clean mount
[  151.736413][ T8918] XFS (loop3): Quotacheck needed: Please wait.
[  151.773535][ T8918] XFS (loop3): Quotacheck: Done.
[  151.824950][ T8095] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.493538][ T8948] loop3: detected capacity change from 0 to 2048
[  152.516824][ T8948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.119751][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'.
[  153.417031][ T8980] batadv_slave_1: entered promiscuous mode
[  154.048505][ T9000] loop3: detected capacity change from 0 to 16
[  154.058621][ T9000] erofs (device loop3): mounted with root inode @ nid 36.
[  154.076923][ T8969] batadv_slave_1: left promiscuous mode
[  154.084113][ T9000] erofs (device loop3): invalid logical cluster 0 at nid 36
[  154.086917][ T9000] syz.3.1279: attempt to access beyond end of device
[  154.086917][ T9000] loop3: rw=0, sector=296, nr_sectors = 8 limit=16
[  154.096126][ T9000] erofs (device loop3): read error -5 @ 0 of nid 36
[  154.098172][ T9000] erofs (device loop3): failed to readdir of logical block 0 of nid 36
[  154.602134][ T5987] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  154.762389][ T5987] usb 3-1: Using ep0 maxpacket: 32
[  154.768444][ T5987] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  154.772254][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.841844][ T5987] usb 3-1: config 0 descriptor??
[  155.070495][ T5987] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  155.079630][ T5987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  155.088136][ T5987] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  155.091861][ T5987] usb 3-1: media controller created
[  155.115109][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  155.290661][ T5987] az6027: usb out operation failed. (-71)
[  155.296784][ T5987] az6027: usb out operation failed. (-71)
[  155.298501][ T5987] stb0899_attach: Driver disabled by Kconfig
[  155.300247][ T5987] az6027: no front-end attached
[  155.300247][ T5987] 
[  155.307501][ T5987] az6027: usb out operation failed. (-71)
[  155.309250][ T5987] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  155.312447][ T5987] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  155.321662][ T5987] dvb-usb: schedule remote query interval to 400 msecs.
[  155.323725][ T5987] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  155.339705][ T5987] usb 3-1: USB disconnect, device number 13
[  155.360674][ T7856] udevd[7856]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  155.414099][ T5987] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  155.512616][ T9031] loop3: detected capacity change from 0 to 32768
[  155.829131][ T9048] loop3: detected capacity change from 0 to 32768
[  155.853355][ T9048] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.895147][ T9048] XFS (loop3): Ending clean mount
[  155.901112][ T9048] XFS (loop3): Quotacheck needed: Please wait.
[  155.926105][ T9048] XFS (loop3): Quotacheck: Done.
[  155.978530][ T8095] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.152696][ T9065] netlink: 'syz.3.1304': attribute type 27 has an invalid length.
[  156.278607][ T9074] bridge0: entered promiscuous mode
[  156.526275][  T791] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  156.691630][  T791] usb 3-1: Using ep0 maxpacket: 16
[  156.694985][  T791] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  156.701714][  T791] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.711122][  T791] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.713918][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.723179][  T791] usb 3-1: Product: syz
[  156.724460][  T791] usb 3-1: Manufacturer: syz
[  156.725940][  T791] usb 3-1: SerialNumber: syz
[  156.911044][ T5988] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  157.010972][  T791] usb 3-1: 0:2 : does not exist
[  157.023628][  T791] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  157.046693][  T791] usb 3-1: USB disconnect, device number 14
[  157.075482][ T7856] udevd[7856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.083609][ T5988] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  157.086787][ T5988] usb 4-1: config 0 has no interface number 0
[  157.090615][ T5988] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  157.101077][ T5988] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  157.116291][ T5988] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  157.119145][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  157.132046][ T5988] usb 4-1: Product: syz
[  157.133857][ T5988] usb 4-1: SerialNumber: syz
[  157.140251][ T5988] usb 4-1: config 0 descriptor??
[  157.144053][ T5988] cm109 4-1:0.8: invalid payload size 0, expected 4
[  157.154621][ T5988] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9
[  157.360274][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  157.364207][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  157.364514][ T6000] usb 4-1: USB disconnect, device number 3
[  157.366340][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  157.379202][ T6000] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  158.078551][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'.
[  159.377620][ T9141] loop3: detected capacity change from 0 to 8192
[  160.040978][ T9144] loop2: detected capacity change from 0 to 128
[  160.081984][ T9144] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  160.090468][ T9144] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.215558][ T5943] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.293385][ T9148] xt_hashlimit: max too large, truncated to 1048576
[  160.370537][ T9150] loop2: detected capacity change from 0 to 4096
[  160.423189][ T9151] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.610850][ T9157] loop3: detected capacity change from 0 to 1024
[  160.791130][   T36] hfsplus: b-tree write err: -5, ino 4
[  160.911799][  T974] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  160.918478][ T9163] net_ratelimit: 1052 callbacks suppressed
[  160.918487][ T9163] openvswitch: netlink: VXLAN extension 173 out of range max 1
[  161.074028][  T974] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  161.081795][  T974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.084916][  T974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  161.094001][  T974] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  161.099328][  T974] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  161.104888][  T974] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  161.107392][  T974] usb 3-1: Product: syz
[  161.108712][  T974] usb 3-1: Manufacturer: syz
[  161.115910][  T974] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  161.234227][ T9170] loop3: detected capacity change from 0 to 32768
[  161.339376][ T5988] usb 3-1: USB disconnect, device number 15
[  161.944564][ T9189] loop2: detected capacity change from 0 to 8
[  161.952757][ T9189] SQUASHFS error: lzo decompression failed, data probably corrupt
[  161.959904][ T9189] SQUASHFS error: Failed to read block 0x62b: -5
[  161.962018][ T9189] SQUASHFS error: Unable to read metadata cache entry [629]
[  161.965877][ T9189] SQUASHFS error: Unable to read inode 0x11f
[  162.395662][  T791] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  162.579888][  T791] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  162.582745][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.596507][  T791] pwc: Logitech/Cisco VT Camera webcam detected.
[  162.989113][ T9215] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1371'.
[  163.029796][  T791] pwc: send_video_command error -71
[  163.035062][  T791] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  163.038292][  T791] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -71
[  163.047164][  T791] usb 3-1: USB disconnect, device number 16
[  163.513795][ T9247] loop3: detected capacity change from 0 to 256
[  163.805386][ T9264] netlink: 'syz.2.1395': attribute type 1 has an invalid length.
[  163.935956][ T9276] loop2: detected capacity change from 0 to 1
[  163.943784][ T9276] syz.2.1401: attempt to access beyond end of device
[  163.943784][ T9276] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1
[  163.951784][ T9278] loop3: detected capacity change from 0 to 256
[  163.954222][ T9278] exfat: Deprecated parameter 'utf8'
[  163.959015][ T9276] SQUASHFS error: Failed to read block 0x0: -5
[  163.960884][ T9276] unable to read squashfs_super_block
[  163.970957][ T9278] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  164.034816][ T9282] loop2: detected capacity change from 0 to 1024
[  164.037435][ T9282] EXT4-fs: Ignoring removed nobh option
[  164.040102][ T9282] EXT4-fs: Ignoring removed bh option
[  164.056763][ T9282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.082611][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.142526][ T9289] program syz.2.1406 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  164.195202][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  164.266160][ T6000] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  164.314806][ T9302] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1413'.
[  164.438812][ T6000] usb 4-1: Using ep0 maxpacket: 16
[  164.441812][ T9315] loop2: detected capacity change from 0 to 16
[  164.445332][ T6000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.448749][ T6000] usb 4-1: config 0 has no interfaces?
[  164.453596][ T9315] erofs (device loop2): mounted with root inode @ nid 36.
[  164.459938][ T6000] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  164.462774][ T6000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.477978][ T6000] usb 4-1: config 0 descriptor??
[  164.698893][ T5988] usb 4-1: USB disconnect, device number 4
[  164.818562][ T9330] loop2: detected capacity change from 0 to 32768
[  164.868515][ T9330] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=data_checksum=none,compression=lz4,background_compression=lz4,degraded=yes,norecovery,recovery_pass_last=resume_logged_ops,nojournal_transaction_names
[  164.868529][ T9330]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  164.880142][ T9330] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  164.882787][ T9330] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  164.885199][ T9330] bcachefs (loop2): superblock requires following recovery passes to be run:
[  164.885199][ T9330]   recovery_pass_empty,check_unreachable_inodes,lookup_root_inode
[  164.890380][ T9330] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  164.890380][ T9330]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  164.915194][ T9330] bcachefs (loop2): accounting_read... done
[  164.919562][ T9330] bcachefs (loop2): alloc_read... done
[  164.921467][ T9330] bcachefs (loop2): snapshots_read... done
[  164.923888][ T9330] bcachefs (loop2): done starting filesystem
[  164.974183][ T5943] bcachefs (loop2): shutting down
[  164.991147][ T5943] bcachefs (loop2): shutdown complete
[  165.532960][ T9357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.574127][ T9360] delete_channel: no stack
[  165.627040][ T9366] loop3: detected capacity change from 0 to 2048
[  165.642500][ T9366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.647813][ T9366] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.684242][ T9366] overlayfs: failed to verify upper (/file0, ino=19, err=-28)
[  165.694847][ T9366] overlayfs: failed to verify index dir 'upper' xattr
[  165.697095][ T9366] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  165.751575][ T8095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.743038][ T9435] loop3: detected capacity change from 0 to 16
[  167.747356][ T9435] erofs (device loop3): mounted with root inode @ nid 36.
[  167.777398][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1469'.
[  167.819983][ T9439] loop3: detected capacity change from 0 to 512
[  167.822515][ T9439] EXT4-fs: Ignoring removed nomblk_io_submit option
[  167.830166][ T9439] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  167.832638][ T9439] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  167.840503][ T9439] EXT4-fs (loop3): 1 truncate cleaned up
[  167.843109][ T9439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.850627][ T9439] EXT4-fs (loop3): shut down requested (2)
[  167.875396][ T8095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.080799][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'.
[  168.259308][ T9461] loop2: detected capacity change from 0 to 32768
[  168.275190][  T791] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  168.324804][ T9461] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  168.324820][ T9461]   allowing incompatible features above 0.0: (unknown version)
[  168.324825][ T9461]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  168.340981][ T9461] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  168.343571][ T9461] bcachefs (loop2): initializing new filesystem
[  168.352715][ T9461] bcachefs (loop2): going read-write
[  168.366658][ T9461] bcachefs (loop2): marking superblocks
[  168.389142][ T9461] bcachefs (loop2): initializing freespace
[  168.402649][ T9461] bcachefs (loop2): done initializing freespace
[  168.410468][ T9461] bcachefs (loop2): reading snapshots table
[  168.412337][ T9461] bcachefs (loop2): reading snapshots done
[  168.426864][ T9461] bcachefs (loop2): done starting filesystem
[  168.460773][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.467637][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.470750][  T791] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  168.485716][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.492044][  T791] usb 4-1: config 0 descriptor??
[  168.522335][ T9461] syz.2.1480 (9461) used greatest stack depth: 16408 bytes left
[  168.525815][ T5943] bcachefs (loop2): shutting down
[  168.527738][ T5943] bcachefs (loop2): going read-only
[  168.529807][ T5943] bcachefs (loop2): finished waiting for writes to stop
[  168.536083][ T5943] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4
[  168.562321][ T5943] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5
[  168.568984][ T5943] bcachefs (loop2): clean shutdown complete, journal seq 6
[  168.571819][ T5943] bcachefs (loop2): marking filesystem clean
[  168.592342][ T5943] bcachefs (loop2): shutdown complete
[  168.936075][  T791] steelseries 0003:1038:12B6.0002: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0
[  169.148815][  T791] steelseries 0003:1038:12B6.0002: hid_hw_raw_request() failed with -71
[  169.165586][  T791] usb 4-1: USB disconnect, device number 5
[  169.310190][ T9511] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1499'.
[  169.763082][ T9534] loop2: detected capacity change from 0 to 1024
[  169.779260][ T9534] hfsplus: bad catalog entry type
[  169.801221][   T36] hfsplus: b-tree write err: -5, ino 4
[  169.876687][ T9538] loop2: detected capacity change from 0 to 4096
[  169.925121][ T9538] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  169.938120][ T9538] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  170.273219][ T9553] loop2: detected capacity change from 0 to 40427
[  170.279471][ T9553] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  170.281821][ T9553] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  170.303262][ T9553] F2FS-fs (loop2): invalid crc value
[  170.364776][ T9553] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  170.366947][ T9553] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  170.925873][ T9578] netlink: 'syz.1.1527': attribute type 33 has an invalid length.
[  170.931267][ T9578] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1527'.
[  170.934587][ T9578] netlink: 'syz.1.1527': attribute type 10 has an invalid length.
[  170.998751][ T9580] netlink: 'syz.3.1528': attribute type 4 has an invalid length.
[  171.196568][ T9591] loop3: detected capacity change from 0 to 256
[  171.415955][ T9599] loop2: detected capacity change from 0 to 256
[  171.491738][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1540'.
[  171.559231][ T9612] loop3: detected capacity change from 0 to 128
[  171.786579][ T9630] tun0: tun_chr_ioctl cmd 1074025677
[  171.788469][ T9630] tun0: linktype set to 778
[  172.840620][ T9644] loop3: detected capacity change from 0 to 32768
[  172.843600][ T9644] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1557 (9644)
[  172.903929][ T9644] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  172.907621][ T9644] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  172.915174][ T9644] BTRFS info (device loop3): disk space caching is enabled
[  172.917587][ T9644] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  172.972870][ T9644] BTRFS info (device loop3): rebuilding free space tree
[  172.989330][ T9644] BTRFS info (device loop3): disabling free space tree
[  172.992375][ T9644] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  172.995584][ T9644] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  173.022657][ T9644] BTRFS info (device loop3): balance: start -susage=0..0,drange=0..0,vrange=18446744073709551614..0,limit=0..0,stripes=0..0
[  173.026909][ T9644] BTRFS info (device loop3): balance: ended with status: 0
[  173.052370][ T8095] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  173.161051][ T6000] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  173.331816][ T6000] usb 3-1: Using ep0 maxpacket: 16
[  173.335894][ T6000] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  173.338658][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.343654][ T6000] usb 3-1: config 0 descriptor??
[  173.351818][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'.
[  173.513676][ T5987] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  173.675663][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.679030][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.681958][ T5987] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  173.685054][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.695951][ T5987] usb 4-1: config 0 descriptor??
[  173.784322][ T6000] koneplus 0003:1E7D:2E22.0003: item fetching failed at offset 3/5
[  173.787306][ T6000] koneplus 0003:1E7D:2E22.0003: parse failed
[  173.789301][ T6000] koneplus 0003:1E7D:2E22.0003: probe with driver koneplus failed with error -22
[  173.920105][ T5987] usbhid 4-1:0.0: can't add hid device: -71
[  173.922071][ T5987] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  173.925791][ T5987] usb 4-1: USB disconnect, device number 6
[  173.997263][ T6000] usb 3-1: USB disconnect, device number 17
[  174.881088][ T9703] loop2: detected capacity change from 0 to 2048
[  174.910812][ T9703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.416455][   T33] audit: type=1326 audit(1753211265.971:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  175.428471][   T33] audit: type=1326 audit(1753211265.971:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  175.435156][   T33] audit: type=1326 audit(1753211265.989:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  175.442387][   T33] audit: type=1326 audit(1753211265.989:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  175.450170][   T33] audit: type=1326 audit(1753211265.989:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x7ffc0000
[  175.660073][ T9747] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  175.878073][ T9758] xt_HMARK: proto mask must be zero with L3 mode
[  175.919094][ T9752] loop3: detected capacity change from 0 to 32768
[  175.923345][ T9762] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  175.923345][ T9762] SȘȞZ6'
[  175.958091][ T7856]  loop3: p1 p3 < >
[  175.966083][ T9752]  loop3: p1 p3 < >
[  176.037556][ T9769] netlink: 'syz.3.1606': attribute type 1 has an invalid length.
[  176.039877][ T9769] netlink: 'syz.3.1606': attribute type 1 has an invalid length.
[  176.076299][ T9771] loop2: detected capacity change from 0 to 4096
[  176.087256][ T9771] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  176.136884][   T33] audit: type=1800 audit(1753211266.644:102): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1607" name="bus" dev="loop2" ino=33 res=0 errno=0
[  176.145168][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  176.152111][ T7856] udevd[7856]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  176.172316][ T9777] loop3: detected capacity change from 0 to 256
[  176.210313][ T7856] udevd[7856]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  176.210325][ T6109] udevd[6109]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  176.231329][ T9777] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  176.938784][ T9798] loop3: detected capacity change from 0 to 256
[  177.415194][ T9816] loop2: detected capacity change from 0 to 8192
[  177.434093][ T9816] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  177.438298][ T9816] FAT-fs (loop2): Filesystem has been set read-only
[  177.441120][ T9816] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  177.542442][ T9826] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  177.555770][ T9826] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  177.560936][ T9826] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  177.579796][ T9812] loop3: detected capacity change from 0 to 32768
[  177.586280][ T9812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1623 (9812)
[  177.596032][ T9812] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.600422][ T9812] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  177.603146][ T9812] BTRFS info (device loop3): using free-space-tree
[  177.724351][ T8095] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.035298][ T9854] loop3: detected capacity change from 0 to 32768
[  178.046033][ T9854] btrfs: Deprecated parameter 'usebackuproot'
[  178.049706][ T9854] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  178.052633][ T9854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1634 (9854)
[  178.062603][ T9854] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.065668][ T9854] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[  178.078677][ T9854] BTRFS info (device loop3): disk space caching is enabled
[  178.080853][ T9854] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  178.156293][ T9854] btrfs: Deprecated parameter 'usebackuproot'
[  178.158209][ T9854] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  178.164259][ T9854] BTRFS info (device loop3 state M): rebuilding free space tree
[  178.201887][ T9854] BTRFS info (device loop3 state M): disabling free space tree
[  178.204301][ T9854] BTRFS info (device loop3 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  178.215857][ T9854] BTRFS info (device loop3 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  178.235171][ T9854] BTRFS info (device loop3 state M): force clearing of disk cache
[  178.237524][ T9854] BTRFS info (device loop3 state M): trying to use backup root at mount time
[  178.288293][ T8095] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.375920][ T9821] overlayfs: statfs failed on './file0'
[  178.470578][ T9896] loop3: detected capacity change from 0 to 4096
[  178.473228][ T9896] EXT4-fs: Conflicting test_dummy_encryption options
[  178.655051][ T9908] loop2: detected capacity change from 0 to 4096
[  178.669371][ T9911] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.053538][ T9942] loop3: detected capacity change from 0 to 8
[  179.079252][ T9942] SQUASHFS error: xz decompression failed, data probably corrupt
[  179.082075][ T9942] SQUASHFS error: Failed to read block 0x108: -5
[  179.085469][ T9942] SQUASHFS error: Unable to read metadata cache entry [106]
[  179.088079][ T9942] SQUASHFS error: Unable to read inode 0x11f
[  180.065625][ T9991] loop2: detected capacity change from 0 to 128
[  180.095694][ T9991] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.105745][ T9991] ext4 filesystem being mounted at /473/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.146775][ T5943] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.815581][  T791] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  180.975743][  T791] usb 4-1: Using ep0 maxpacket: 32
[  180.984004][  T791] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52
[  180.987765][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.990537][  T791] usb 4-1: Product: syz
[  180.992063][  T791] usb 4-1: Manufacturer: syz
[  180.993701][  T791] usb 4-1: SerialNumber: syz
[  181.002259][  T791] usb 4-1: config 0 descriptor??
[  181.018988][  T791] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32
[  181.188924][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  181.200430][T10025] loop2: detected capacity change from 0 to 256
[  181.228015][  T791] usb 4-1: USB disconnect, device number 7
[  181.475998][T10049] loop2: detected capacity change from 0 to 256
[  181.478812][T10049] exfat: Deprecated parameter 'namecase'
[  181.483654][T10049] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  181.694767][T10053] loop2: detected capacity change from 0 to 32768
[  181.697398][T10053] XFS: attr2 mount option is deprecated.
[  181.716767][T10053] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  181.720695][T10053] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.740774][T10053] XFS (loop2): Ending clean mount
[  181.743750][T10053] XFS (loop2): Quotacheck needed: Please wait.
[  181.768468][T10053] XFS (loop2): Quotacheck: Done.
[  181.786271][ T5943] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.964698][T10068] loop3: detected capacity change from 0 to 128
[  181.986311][T10068] EXT4-fs: Ignoring removed nobh option
[  182.027579][T10070] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  182.185550][T10068] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  182.194553][T10068] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  182.221664][ T8095] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.557793][  T974] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  182.718197][  T974] usb 3-1: Using ep0 maxpacket: 32
[  182.721744][  T974] usb 3-1: config 1 has an invalid interface number: 242 but max is 0
[  182.724913][  T974] usb 3-1: config 1 has no interface number 0
[  182.727134][  T974] usb 3-1: config 1 interface 242 has no altsetting 0
[  182.732205][  T974] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df
[  182.735887][  T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.739233][  T974] usb 3-1: Product: syz
[  182.741159][  T974] usb 3-1: Manufacturer: syz
[  182.743043][  T974] usb 3-1: SerialNumber: syz
[  182.984776][  T974] aqc111 3-1:1.242: probe with driver aqc111 failed with error -71
[  182.990200][  T974] usb 3-1: USB disconnect, device number 18
[  183.767957][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'.
[  184.582001][T10134] loop3: detected capacity change from 0 to 256
[  184.837567][T10157] sctp: [Deprecated]: syz.1.1764 (pid 10157) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.837567][T10157] Use struct sctp_sack_info instead
[  184.908297][   T33] audit: type=1400 audit(1753211274.857:103): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=10159 comm="syz.2.1765"
[  184.922198][T10147] loop3: detected capacity change from 0 to 32768
[  184.957530][T10147] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  184.971409][T10147] XFS (loop3): Ending clean mount
[  184.979088][T10172] loop2: detected capacity change from 0 to 2048
[  185.004086][T10172] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  185.020192][T10172] UDF-fs: Scanning with blocksize 512 failed
[  185.033969][T10172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.074393][ T8095] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.272913][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'.
[  185.476326][  T791] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  185.554690][T10204] overlayfs: failed to clone upperpath
[  185.668766][  T791] usb 4-1: Using ep0 maxpacket: 8
[  185.673238][  T791] usb 4-1: unable to get BOS descriptor or descriptor too short
[  185.676639][  T791] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  185.679544][  T791] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  185.701432][  T791] usb 4-1: config 1 has no interface number 1
[  185.703465][  T791] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  185.707258][  T791] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  185.713652][  T791] usb 4-1: string descriptor 0 read error: -22
[  185.715677][  T791] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  185.718388][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.738988][  T791] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  185.741533][  T791] usb 4-1: 2:1 : sample bitwidth 141 in over sample bytes 2
[  185.744129][  T791] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  185.980573][  T791] usb 4-1: USB disconnect, device number 8
[  186.821464][T10233] loop3: detected capacity change from 0 to 128
[  186.853423][   T33] audit: type=1800 audit(1753211276.672:104): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1794" name="bus" dev="loop3" ino=1048690 res=0 errno=0
[  186.868083][   T33] audit: type=1800 audit(1753211276.690:105): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1794" name="bus" dev="loop3" ino=1048690 res=0 errno=0
[  186.900330][T10233] syz.3.1794: attempt to access beyond end of device
[  186.900330][T10233] loop3: rw=0, sector=121, nr_sectors = 896 limit=128
[  186.983485][  T138] kworker/u9:2: attempt to access beyond end of device
[  186.983485][  T138] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[  187.031116][T10237] loop3: detected capacity change from 0 to 512
[  187.067487][T10237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.073170][T10237] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.090769][   T33] audit: type=1800 audit(1753211276.906:106): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1796" name="file1" dev="loop3" ino=15 res=0 errno=0
[  187.202566][ T8095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.597606][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1804'.
[  187.600423][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1804'.
[  187.603115][T10257] netlink: 'syz.3.1804': attribute type 6 has an invalid length.
[  188.088240][T10270] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  189.190179][T10335] loop3: detected capacity change from 0 to 128
[  189.651954][T10349] loop3: detected capacity change from 0 to 1024
[  189.683470][T10349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.702578][T10349] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.3.1847: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  189.717265][T10349] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1713: Corrupt filesystem
[  189.754482][ T8095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.121055][ T5968] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  191.281354][ T5968] usb 4-1: Using ep0 maxpacket: 8
[  191.287540][ T5968] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  191.290634][ T5968] usb 4-1: config 0 interface 0 has no altsetting 0
[  191.297548][ T5968] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  191.300298][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.303274][ T5968] usb 4-1: Product: syz
[  191.304549][ T5968] usb 4-1: Manufacturer: syz
[  191.306944][ T5968] usb 4-1: SerialNumber: syz
[  191.328094][ T5968] usb 4-1: config 0 descriptor??
[  191.333312][ T5968] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  191.735876][ T5968] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[  191.738400][ T5968] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  191.743328][ T5968] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  191.823339][ T5987] usb 4-1: USB disconnect, device number 9
[  192.334267][T10411] input: syz1 as /devices/virtual/input/input10
[  192.683912][T10419] loop3: detected capacity change from 0 to 1764
[  192.754719][T10422] loop3: detected capacity change from 0 to 2048
[  192.761516][T10422] EXT4-fs: Ignoring removed mblk_io_submit option
[  192.778995][T10422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.804413][ T5968] Process accounting resumed
[  192.813438][ T8587] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u9:5: bg 0: block 234: padding at end of block bitmap is not set
[  192.822590][ T8587] EXT4-fs (loop3): Remounting filesystem read-only
[  192.837690][ T8095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.595110][T10438] loop2: detected capacity change from 0 to 4096
[  193.618612][T10438] NILFS (loop2): invalid segment: Checksum error in segment payload
[  193.622045][T10438] NILFS (loop2): trying rollback from an earlier position
[  193.632106][T10438] NILFS (loop2): recovery complete
[  193.637156][T10439] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.352591][T10474] loop2: detected capacity change from 0 to 2048
[  194.357826][T10474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.392539][  T974] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  194.416472][T10476] syz.2.1899 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  194.552754][  T974] usb 4-1: Using ep0 maxpacket: 8
[  194.557369][  T974] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  194.560640][  T974] usb 4-1: config 179 has no interface number 0
[  194.563108][  T974] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  194.584910][  T974] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  194.589241][  T974] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  194.593447][  T974] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  194.598227][  T974] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  194.603318][  T974] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  194.607059][  T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.613450][T10458] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  194.704085][ T5968] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  194.862095][  T974] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11
[  194.864878][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  194.884145][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.887952][ T5968] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  194.892208][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.920128][ T5968] usb 3-1: config 0 descriptor??
[  195.055642][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.059318][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.288008][  T974] usb 4-1: USB disconnect, device number 10
[  195.289938][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  195.289964][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  195.367289][ T5968] logitech-djreceiver 0003:046D:C52F.0004: unbalanced delimiter at end of report description
[  195.370770][ T5968] logitech-djreceiver 0003:046D:C52F.0004: logi_dj_probe: parse failed
[  195.373295][ T5968] logitech-djreceiver 0003:046D:C52F.0004: probe with driver logitech-djreceiver failed with error -22
[  195.587316][ T5968] usb 3-1: USB disconnect, device number 19
[  195.886562][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'.
[  195.890895][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'.
[  196.432374][T10501] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1909'.
[  196.443424][T10501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.487642][  T974] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  196.648156][  T974] usb 3-1: Using ep0 maxpacket: 16
[  196.652525][  T974] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  196.655953][  T974] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  196.659649][  T974] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  196.665171][  T974] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  196.667922][  T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.672000][  T974] usb 3-1: Product: syz
[  196.673368][  T974] usb 3-1: Manufacturer: syz
[  196.674849][  T974] usb 3-1: SerialNumber: syz
[  197.058400][ T5942] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  197.061291][ T5942] Bluetooth: hci1: Injecting HCI hardware error event
[  197.066350][ T5942] Bluetooth: hci1: hardware error 0x00
[  197.114607][  T974] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  197.206154][T10528] cgroup: fork rejected by pids controller in /syz3
[  197.809891][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  197.817130][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  197.821168][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  197.825435][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  197.829263][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.979833][  T974] usb 3-1: 2:1: cannot get freq at ep 0x82
[  198.018720][  T974] usb 3-1: USB disconnect, device number 20
[  198.042665][ T6238] udevd[6238]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.072363][T10543] chnl_net:caif_netlink_parms(): no params data found
[  198.167175][T10543] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.169576][T10543] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.173145][T10543] bridge_slave_0: entered allmulticast mode
[  198.173202][T10557] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1932'.
[  198.175903][T10543] bridge_slave_0: entered promiscuous mode
[  198.183461][T10543] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.185658][T10543] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.188567][T10543] bridge_slave_1: entered allmulticast mode
[  198.191491][T10543] bridge_slave_1: entered promiscuous mode
[  198.223809][T10543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.225586][T10559] overlayfs: conflicting options: userxattr,metacopy=on
[  198.228200][T10543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.257880][T10543] team0: Port device team_slave_0 added
[  198.263979][T10543] team0: Port device team_slave_1 added
[  198.292171][T10543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.294772][T10543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.302822][T10543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.308267][T10543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.310583][T10543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.318452][T10543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.346509][T10543] hsr_slave_0: entered promiscuous mode
[  198.348972][T10543] hsr_slave_1: entered promiscuous mode
[  198.351278][T10543] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.353481][T10543] Cannot create hsr debugfs directory
[  198.510836][T10543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.595409][T10543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.684730][T10543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.775669][T10579] loop2: detected capacity change from 0 to 512
[  198.778519][T10579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  198.787556][T10543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.804382][T10579] EXT4-fs (loop2): 1 truncate cleaned up
[  198.807032][T10579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.836588][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.963545][T10543] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  198.992960][T10543] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  198.997988][T10543] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  198.998740][T10592] loop2: detected capacity change from 0 to 1024
[  199.015787][T10592] EXT4-fs: Invalid commit interval -2147483647, must be smaller than 21474836
[  199.017945][T10543] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  199.168841][T10599] loop2: detected capacity change from 0 to 4096
[  199.177600][T10599] ntfs3(loop2): Primary boot: invalid bytes per MFT record 12288 (3).
[  199.186415][T10599] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[  199.235960][T10543] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.247435][T10543] 8021q: adding VLAN 0 to HW filter on device team0
[  199.260411][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.263231][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.268385][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.271275][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.272539][ T5942] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  199.423443][T10543] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.479877][T10543] veth0_vlan: entered promiscuous mode
[  199.487130][T10543] veth1_vlan: entered promiscuous mode
[  199.504491][T10543] veth0_macvtap: entered promiscuous mode
[  199.509594][T10543] veth1_macvtap: entered promiscuous mode
[  199.526097][T10543] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.532368][T10543] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.540316][T10543] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.543699][T10543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.547560][T10543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.550303][T10543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.608145][ T8587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.612723][ T8587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.636336][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.639436][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.644103][T10621] netlink: 'syz.2.1955': attribute type 1 has an invalid length.
[  199.647041][T10621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1955'.
[  200.017175][T10640] loop2: detected capacity change from 0 to 32768
[  200.037873][ T5942] Bluetooth: hci3: command tx timeout
[  200.040758][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  200.048377][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  200.050496][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  200.065724][T10640] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  200.104408][ T5987] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  200.117899][   T33] audit: type=1800 audit(1753211289.066:107): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1963" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  200.139949][ T5943] ocfs2: Unmounting device (7,2) on (node local)
[  200.242896][T10646] netlink: 'syz.2.1965': attribute type 10 has an invalid length.
[  200.308180][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.311544][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.314530][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  200.326331][ T5987] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  200.329168][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.337081][ T5987] usb 4-1: config 0 descriptor??
[  200.464344][T10648] loop2: detected capacity change from 0 to 32768
[  200.473185][T10648] 
[  200.473185][T10648]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  200.473185][T10648] 
[  200.504901][T10648] ERROR: (device loop2): dtSearch: stack overrun!
[  200.504901][T10648] 
[  200.513262][T10648] ERROR: (device loop2): remounting filesystem as read-only
[  200.515801][T10648] btstack dump:
[  200.516856][T10648] bn = 0, index = 0
[  200.520216][T10648] bn = 0, index = 0
[  200.521456][T10648] bn = 0, index = 0
[  200.522783][T10648] bn = 0, index = 0
[  200.523994][T10648] bn = 0, index = 0
[  200.525369][T10648] bn = 0, index = 0
[  200.526536][T10648] bn = 0, index = 0
[  200.527760][T10648] bn = 0, index = 0
[  200.530676][T10648] jfs_lookup: dtSearch returned -5
[  200.672683][T10656] loop2: detected capacity change from 0 to 4096
[  200.786190][ T5987] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  200.890038][T10658] xt_CT: You must specify a L4 protocol and not use inversions on it
[  201.134007][ T5987] usb 4-1: USB disconnect, device number 11
[  202.200511][T10677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  202.261974][ T5942] Bluetooth: hci3: command tx timeout
[  202.462309][ T5987] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  202.805914][ T5987] usb 4-1: Using ep0 maxpacket: 16
[  202.817654][ T5987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.820781][ T5987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  202.823466][ T5987] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  202.826372][ T5987] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  202.832037][ T5987] usb 4-1: config 1 interface 0 has no altsetting 0
[  202.836892][ T5987] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0201, bcdDevice= 0.40
[  202.848592][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.851026][ T5987] usb 4-1: Product: syz
[  202.852311][ T5987] usb 4-1: Manufacturer: syz
[  202.853742][ T5987] usb 4-1: SerialNumber: syz
[  203.078526][ T5987] usb 4-1: 0:2 : does not exist
[  203.080395][ T5987] usb 4-1: unit 3 not found!
[  203.095186][ T5987] usb 4-1: USB disconnect, device number 12
[  203.109928][ T7856] udevd[7856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.327964][T10697] loop2: detected capacity change from 0 to 1024
[  203.331695][T10697] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.370761][T10697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.759256][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'.
[  204.324814][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.484431][ T5942] Bluetooth: hci3: command tx timeout
[  204.794734][   T47] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  204.959482][   T47] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  204.962661][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.972937][   T47] usb 3-1: config 0 descriptor??
[  204.982792][   T47] gspca_main: cpia1-2.14.0 probing 0813:0001
[  205.416944][   T47] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  206.168808][   T47] gspca_cpia1: usb_control_msg 05, error -71
[  206.172232][   T47] cpia1 3-1:0.0: unexpected systemstate: 00
[  206.179700][   T47] usb 3-1: USB disconnect, device number 21
[  206.533501][T10784] lo speed is unknown, defaulting to 1000
[  206.535535][T10784] lo speed is unknown, defaulting to 1000
[  206.540508][T10784] lo speed is unknown, defaulting to 1000
[  206.552913][T10784] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  206.577552][T10784] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98
[  206.597655][T10784] lo speed is unknown, defaulting to 1000
[  206.604889][T10784] lo speed is unknown, defaulting to 1000
[  206.609121][T10784] lo speed is unknown, defaulting to 1000
[  206.612779][T10784] lo speed is unknown, defaulting to 1000
[  206.717774][ T5942] Bluetooth: hci3: command tx timeout
[  207.170517][T10804] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2034'.
[  208.238446][T10845] loop3: detected capacity change from 0 to 256
[  208.254497][T10845] FAT-fs (loop3): Directory bread(block 64) failed
[  208.256506][T10845] FAT-fs (loop3): Directory bread(block 65) failed
[  208.261481][T10845] FAT-fs (loop3): Directory bread(block 66) failed
[  208.263901][T10845] FAT-fs (loop3): Directory bread(block 67) failed
[  208.266078][T10845] FAT-fs (loop3): Directory bread(block 68) failed
[  208.268384][T10845] FAT-fs (loop3): Directory bread(block 69) failed
[  208.271045][T10845] FAT-fs (loop3): Directory bread(block 70) failed
[  208.273104][T10845] FAT-fs (loop3): Directory bread(block 71) failed
[  208.275158][T10845] FAT-fs (loop3): Directory bread(block 72) failed
[  208.277162][T10845] FAT-fs (loop3): Directory bread(block 73) failed
[  208.541094][T10864] loop2: detected capacity change from 0 to 128
[  208.551659][T10864] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  208.568159][T10864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.940955][T10876] loop2: detected capacity change from 0 to 32768
[  208.948592][T10876] (syz.2.2067,10876,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  208.953893][T10876] (syz.2.2067,10876,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  208.978064][T10876] JBD2: Ignoring recovery information on journal
[  209.021481][T10876] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  209.162604][ T5943] ocfs2: Unmounting device (7,2) on (node local)
[  209.490354][T10900] netlink: 'syz.2.2077': attribute type 2 has an invalid length.
[  209.494192][T10900] netlink: 'syz.2.2077': attribute type 1 has an invalid length.
[  209.504694][T10902] Bluetooth: MGMT ver 1.23
[  209.699797][   T33] audit: type=1326 audit(1753211298.046:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21fdd85967 code=0x7ffc0000
[  209.710479][   T33] audit: type=1326 audit(1753211298.046:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fdd2ab89 code=0x7ffc0000
[  209.719917][   T33] audit: type=1326 audit(1753211298.046:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21fdd85967 code=0x7ffc0000
[  209.726424][   T33] audit: type=1326 audit(1753211298.046:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fdd2ab89 code=0x7ffc0000
[  209.732890][   T33] audit: type=1326 audit(1753211298.046:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21fdd85967 code=0x7ffc0000
[  209.739437][   T33] audit: type=1326 audit(1753211298.046:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fdd2ab89 code=0x7ffc0000
[  209.746107][   T33] audit: type=1326 audit(1753211298.046:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21fdd85967 code=0x7ffc0000
[  209.753388][   T33] audit: type=1326 audit(1753211298.046:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fdd2ab89 code=0x7ffc0000
[  209.764242][   T33] audit: type=1326 audit(1753211298.046:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21fdd85967 code=0x7ffc0000
[  209.775572][   T33] audit: type=1326 audit(1753211298.046:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21fdd2ab89 code=0x7ffc0000
[  209.939508][T10925] loop3: detected capacity change from 0 to 128
[  209.942467][T10925] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.945059][T10925] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.949875][T10925] EXT4-fs (loop3): Test dummy encryption mode enabled
[  210.003150][T10925] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  210.007156][T10925] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  210.091829][T10543] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  210.298671][T10938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2089'.
[  211.931772][T10981] overlayfs: overlapping lowerdir path
[  211.948385][T10981] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  213.982538][T11026] overlay: ./file1 is not a directory
[  214.415855][ T5987] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  214.666228][T11042] loop3: detected capacity change from 0 to 32768
[  214.675652][T11042] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  214.730585][T11042] XFS (loop3): Ending clean mount
[  214.757567][T10543] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  215.210564][ T5987] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  215.213399][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.215762][ T5987] usb 3-1: Product: syz
[  215.217190][ T5987] usb 3-1: Manufacturer: syz
[  215.225165][ T5987] usb 3-1: SerialNumber: syz
[  215.228360][ T5987] usb 3-1: config 0 descriptor??
[  215.469414][  T791] usb 3-1: USB disconnect, device number 22
[  215.549103][ T5988] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  215.714035][ T5988] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  215.717808][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.720993][ T5988] usb 4-1: Product: syz
[  215.722816][ T5988] usb 4-1: Manufacturer: syz
[  215.724805][ T5988] usb 4-1: SerialNumber: syz
[  215.736051][ T5988] usb 4-1: config 0 descriptor??
[  215.964609][  T791] usb 4-1: USB disconnect, device number 13
[  216.157550][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'.
[  217.320235][T11114] loop2: detected capacity change from 0 to 512
[  217.323798][T11114] journal_path: Non-blockdev passed as './bus'
[  217.326371][T11114] EXT4-fs: error: could not find journal device path
[  217.662152][T11137] loop3: detected capacity change from 0 to 1024
[  217.673231][T11137] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  217.689888][T11137] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  217.697030][T11137] EXT4-fs (loop3): orphan cleanup on readonly fs
[  217.713718][T11137] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2175: bg 0: block 10: padding at end of block bitmap is not set
[  217.728459][T11143] loop2: detected capacity change from 0 to 256
[  217.733279][T11137] __quota_error: 77 callbacks suppressed
[  217.733307][T11137] Quota error (device loop3): write_blk: dquota write failed
[  217.739689][T11137] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3
[  217.746847][T11137] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  217.749895][T11137] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2175: Failed to acquire dquot type 0
[  217.753758][T11137] Quota error (device loop3): write_blk: dquota write failed
[  217.755971][T11137] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3
[  217.758835][T11137] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  217.768374][T11137] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2175: Failed to acquire dquot type 0
[  217.777432][T11137] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.2175: Freeing blocks not in datazone - block = 0, count = 4096
[  217.787119][T11137] Quota error (device loop3): write_blk: dquota write failed
[  217.800347][T11137] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3
[  217.808553][T11137] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  217.811675][T11137] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2175: Failed to acquire dquot type 0
[  217.825701][T11137] EXT4-fs (loop3): 1 orphan inode deleted
[  217.832351][T11137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  217.857304][T10543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.908460][T11151] loop3: detected capacity change from 0 to 256
[  217.920828][T11151] MINIX-fs: mounting file system with errors, running fsck is recommended
[  217.966747][ T6109] udevd[6109]: Failed to create symlink /run/udev/watch/1929: File exists
[  217.975243][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2184'.
[  218.069451][T11149] loop2: detected capacity change from 0 to 40427
[  218.076432][T11157] loop3: detected capacity change from 0 to 128
[  218.079785][T11149] F2FS-fs (loop2): invalid crc value
[  218.092231][T11157] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  218.128239][   T33] audit: type=1800 audit(1753211305.931:195): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2186" name="file1" dev="loop3" ino=89 res=0 errno=0
[  218.140115][T11149] F2FS-fs (loop2): Start checkpoint disabled!
[  218.155120][T11149] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  218.228307][  T139] kworker/u9:3: attempt to access beyond end of device
[  218.228307][  T139] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  218.245171][  T139] CPU: 0 UID: 0 PID: 139 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  218.245185][  T139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.245192][  T139] Workqueue: writeback wb_workfn (flush-7:2)
[  218.245211][  T139] Call Trace:
[  218.245215][  T139]  <TASK>
[  218.245219][  T139]  dump_stack_lvl+0x189/0x250
[  218.245234][  T139]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.245242][  T139]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  218.245252][  T139]  ? __pfx_queue_work_on+0x10/0x10
[  218.245272][  T139]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  218.245279][  T139]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  218.245288][  T139]  ? f2fs_hw_is_readonly+0x39b/0x470
[  218.245299][  T139]  f2fs_handle_critical_error+0x37c/0x540
[  218.245310][  T139]  f2fs_write_end_io+0x495/0x810
[  218.245319][  T139]  ? blkg_put+0x22/0x240
[  218.245339][  T139]  __submit_merged_bio+0x27a/0x6a0
[  218.245346][  T139]  ? up_write+0x1c4/0x420
[  218.245360][  T139]  __submit_merged_write_cond+0x44c/0x530
[  218.245376][  T139]  f2fs_sync_node_pages+0x1869/0x1a00
[  218.245399][  T139]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  218.245411][  T139]  ? __percpu_counter_sum+0x1c2/0x1e0
[  218.245434][  T139]  ? rcu_is_watching+0x15/0xb0
[  218.245444][  T139]  ? blk_start_plug+0x52/0x1b0
[  218.245457][  T139]  f2fs_write_node_pages+0x303/0x6e0
[  218.245471][  T139]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  218.245490][  T139]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  218.245502][  T139]  do_writepages+0x32e/0x550
[  218.245516][  T139]  ? reacquire_held_locks+0x127/0x1d0
[  218.245553][  T139]  ? writeback_sb_inodes+0x372/0x1000
[  218.245569][  T139]  __writeback_single_inode+0x145/0xff0
[  218.245579][  T139]  ? do_raw_spin_unlock+0x4d/0x240
[  218.245592][  T139]  writeback_sb_inodes+0x6b5/0x1000
[  218.245614][  T139]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  218.245642][  T139]  ? rcu_is_watching+0x15/0xb0
[  218.245655][  T139]  wb_writeback+0x43b/0xaf0
[  218.245669][  T139]  ? queue_io+0x321/0x590
[  218.245680][  T139]  ? __pfx_wb_writeback+0x10/0x10
[  218.245694][  T139]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.245703][  T139]  wb_workfn+0x409/0xef0
[  218.245719][  T139]  ? __pfx_wb_workfn+0x10/0x10
[  218.245729][  T139]  ? __lock_acquire+0xab9/0xd20
[  218.245742][  T139]  ? process_scheduled_works+0x9ef/0x17b0
[  218.245754][  T139]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.245761][  T139]  ? process_scheduled_works+0x9ef/0x17b0
[  218.245769][  T139]  ? process_scheduled_works+0x9ef/0x17b0
[  218.245778][  T139]  process_scheduled_works+0xae1/0x17b0
[  218.245799][  T139]  ? __pfx_process_scheduled_works+0x10/0x10
[  218.245816][  T139]  worker_thread+0x8a0/0xda0
[  218.245837][  T139]  kthread+0x711/0x8a0
[  218.245850][  T139]  ? __pfx_worker_thread+0x10/0x10
[  218.245859][  T139]  ? __pfx_kthread+0x10/0x10
[  218.245870][  T139]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.245877][  T139]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.245885][  T139]  ? __pfx_kthread+0x10/0x10
[  218.245896][  T139]  ret_from_fork+0x3fc/0x770
[  218.245906][  T139]  ? __pfx_ret_from_fork+0x10/0x10
[  218.245917][  T139]  ? __switch_to_asm+0x39/0x70
[  218.245927][  T139]  ? __switch_to_asm+0x33/0x70
[  218.245936][  T139]  ? __pfx_kthread+0x10/0x10
[  218.245947][  T139]  ret_from_fork_asm+0x1a/0x30
[  218.245964][  T139]  </TASK>
[  218.245969][  T139] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.941896][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'.
[  220.060023][   T47] kernel write not supported for file /binder/failed_transaction_log (pid: 47 comm: kworker/1:1)
[  220.119501][T11242] loop2: detected capacity change from 0 to 1024
[  220.151790][T11242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.182512][T11242] ext4 filesystem being mounted at /625/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.197419][T11242] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  220.207173][T11242] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  220.212492][T11242] EXT4-fs (loop2): This should not happen!! Data will be lost
[  220.212492][T11242] 
[  220.215458][T11242] EXT4-fs (loop2): Total free blocks count 0
[  220.217447][T11242] EXT4-fs (loop2): Free/Dirty block details
[  220.219301][T11242] EXT4-fs (loop2): free_blocks=4293918720
[  220.221845][T11242] EXT4-fs (loop2): dirty_blocks=64
[  220.223769][T11242] EXT4-fs (loop2): Block reservation details
[  220.225585][T11242] EXT4-fs (loop2): i_reserved_data_blocks=4
[  220.249053][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.274624][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'.
[  220.279196][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'.
[  220.291335][T11256] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2226'.
[  220.468249][T11258] loop3: detected capacity change from 0 to 32768
[  220.478011][T11258] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  220.561044][T10543] ocfs2: Unmounting device (7,3) on (node local)
[  221.009582][T11297] netlink: 'syz.3.2243': attribute type 10 has an invalid length.
[  221.019714][T11297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.024244][T11297] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  221.034258][T11297] netlink: 'syz.3.2243': attribute type 10 has an invalid length.
[  221.036605][T11297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2243'.
[  221.044404][T11297] batadv0: entered promiscuous mode
[  221.049414][T11297] batadv0: entered allmulticast mode
[  221.052175][T11297] bond0: (slave batadv0): Releasing backup interface
[  221.057031][T11297] bridge0: port 3(batadv0) entered blocking state
[  221.059215][T11297] bridge0: port 3(batadv0) entered disabled state
[  221.209535][T11304] loop3: detected capacity change from 0 to 16
[  221.214118][T11304] erofs (device loop3): mounted with root inode @ nid 36.
[  221.361988][T11307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  221.573210][ T5922] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  221.576260][ T5922] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  221.694615][T11319] loop3: detected capacity change from 0 to 256
[  221.703694][T11319] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.720935][T11319] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  221.731818][T11319] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  222.873541][T11337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  222.886468][ T5987] lo speed is unknown, defaulting to 1000
[  222.888712][ T5987] sz0: Port: 1 Link DOWN
[  223.507412][T11359] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2270'.
[  223.957559][T11362] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.2271'.
[  224.076961][T11362] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.2271'.
[  224.079822][T11362] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2271'.
[  224.633515][T11375] loop2: detected capacity change from 0 to 32768
[  225.326868][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  225.326881][   T33] audit: type=1400 audit(1753211312.666:197): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="://&aaaaa" pid=11400 comm="syz.3.2289"
[  225.424994][T11411] netlink: 'syz.3.2293': attribute type 24 has an invalid length.
[  225.884953][T11428] loop2: detected capacity change from 0 to 32768
[  225.893471][T11428] ERROR: (device loop2): diRead: i_ino != di_number
[  225.893471][T11428] 
[  225.899643][T11425] loop3: detected capacity change from 0 to 65536
[  225.918683][T11425] XFS (loop3): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd
[  225.944815][T11425] XFS (loop3): Ending clean mount
[  225.966183][T11438] loop2: detected capacity change from 0 to 164
[  225.982286][T10543] XFS (loop3): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd
[  225.985709][T11438] rock: corrupted directory entry. extent=32, offset=131072, size=237
[  226.336335][T11460] loop3: detected capacity change from 0 to 8
[  226.342452][T11460] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  226.367145][T11460] cramfs: Error -3 while decompressing!
[  226.370201][T11460] cramfs: ffffffff99be7748(26)->ffff8881152b1000(4096)
[  226.372461][T11460] cramfs: Error -3 while decompressing!
[  226.374206][T11460] cramfs: ffffffff99be7762(26)->ffff8881152b2000(4096)
[  226.376338][T11460] cramfs: Error -3 while decompressing!
[  226.378191][T11460] cramfs: ffffffff99be777c(16)->ffff8881152b3000(4096)
[  226.385030][T11460] cramfs: Error -3 while decompressing!
[  226.387085][T11460] cramfs: ffffffff99be7748(26)->ffff8881152b1000(4096)
[  226.389700][   T33] audit: type=1800 audit(1753211313.667:198): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2312" name="file2" dev="loop3" ino=348 res=0 errno=0
[  226.975817][T11476] loop2: detected capacity change from 0 to 256
[  226.981559][T11476] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[  226.987636][   T33] audit: type=1800 audit(1753211314.219:199): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2318" name="file1" dev="loop2" ino=1048701 res=0 errno=0
[  227.444253][T11490] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  227.460093][T11490] loop2: detected capacity change from 0 to 256
[  227.483165][T11490] FAT-fs (loop2): Directory bread(block 64) failed
[  227.485362][T11490] FAT-fs (loop2): Directory bread(block 65) failed
[  227.487567][T11490] FAT-fs (loop2): Directory bread(block 66) failed
[  227.489665][T11490] FAT-fs (loop2): Directory bread(block 67) failed
[  227.493417][T11490] FAT-fs (loop2): Directory bread(block 68) failed
[  227.495510][T11490] FAT-fs (loop2): Directory bread(block 69) failed
[  227.499916][T11490] FAT-fs (loop2): Directory bread(block 70) failed
[  227.502139][T11490] FAT-fs (loop2): Directory bread(block 71) failed
[  227.504326][T11490] FAT-fs (loop2): Directory bread(block 72) failed
[  227.506467][T11490] FAT-fs (loop2): Directory bread(block 73) failed
[  227.791576][T11504] loop2: detected capacity change from 0 to 136
[  227.800057][T11504] Attempt to read inode for relocated directory
[  227.967441][T11506] fuse: root generation should be zero
[  228.063549][T11513] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  228.082885][T11513] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  228.281667][  T791] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  228.452740][  T791] usb 3-1: Using ep0 maxpacket: 32
[  228.467929][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.471523][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.477349][  T791] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  228.480881][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.490444][  T791] usb 3-1: config 0 descriptor??
[  228.508385][  T791] hub 3-1:0.0: USB hub found
[  228.746336][  T791] hub 3-1:0.0: 1 port detected
[  229.484193][T11536] loop3: detected capacity change from 0 to 256
[  229.486699][T11536] vfat: Bad value for 'umask'
[  229.556411][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2350'.
[  229.560401][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2350'.
[  229.729300][ T5988] hub 3-1:0.0: activate --> -90
[  229.763246][T11544] loop3: detected capacity change from 0 to 32768
[  229.775609][T11544] jfs_mount: Mount Failure: File System Dirty.
[  229.780548][T11544] Mount JFS Failure: -22
[  229.782378][T11544] jfs_mount failed w/return code = -22
[  229.990391][ T5988] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  229.993125][    T9] usb 3-1: USB disconnect, device number 23
[  229.995075][ T5988] usb 3-1-port1: connect-debounce failed
[  230.651166][T11574] loop2: detected capacity change from 0 to 256
[  230.663304][T11574] FAT-fs (loop2): Directory bread(block 64) failed
[  230.665941][T11574] FAT-fs (loop2): Directory bread(block 65) failed
[  230.668266][T11574] FAT-fs (loop2): Directory bread(block 66) failed
[  230.670322][T11574] FAT-fs (loop2): Directory bread(block 67) failed
[  230.672400][T11574] FAT-fs (loop2): Directory bread(block 68) failed
[  230.674497][T11574] FAT-fs (loop2): Directory bread(block 69) failed
[  230.678128][T11574] FAT-fs (loop2): Directory bread(block 70) failed
[  230.680197][T11574] FAT-fs (loop2): Directory bread(block 71) failed
[  230.682333][T11574] FAT-fs (loop2): Directory bread(block 72) failed
[  230.684377][T11574] FAT-fs (loop2): Directory bread(block 73) failed
[  230.799134][T11581] loop3: detected capacity change from 0 to 512
[  230.830203][T11581] loop3: detected capacity change from 0 to 4096
[  230.837678][T11581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.843839][T11581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  230.846395][T11581] EXT4-fs (loop3): stripe (248) is not aligned with cluster size (16), stripe is disabled
[  230.852893][T11581] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  230.873480][T10543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.923976][T11582] loop2: detected capacity change from 0 to 8192
[  231.083781][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'.
[  231.086579][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'.
[  231.310201][T11602] loop3: detected capacity change from 0 to 512
[  231.572442][T11602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.628857][T10543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.677241][T11607] loop3: detected capacity change from 0 to 1024
[  231.687104][T11607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.696453][T11607] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.2378: reserved inode found cleared - inode=18
[  231.717100][T10543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.758916][T11690] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2387'.
[  233.644506][   T33] audit: type=1326 audit(1753211320.448:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.3.2395" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21fdd8e9a9 code=0x0
[  233.691793][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  233.863930][T11746] netlink: 'syz.1.2396': attribute type 1 has an invalid length.
[  233.871552][    T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  233.876919][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.880522][    T9] usb 3-1: Product: syz
[  233.882981][    T9] usb 3-1: Manufacturer: syz
[  233.884819][    T9] usb 3-1: SerialNumber: syz
[  233.889186][    T9] usb 3-1: config 0 descriptor??
[  233.898785][    T9] ch341 3-1:0.0: ch341-uart converter detected
[  233.921247][T11748] netlink: 'syz.1.2397': attribute type 1 has an invalid length.
[  233.923714][T11748] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2397'.
[  234.593587][T11764] loop3: detected capacity change from 0 to 256
[  234.606546][T11764] FAT-fs (loop3): Directory bread(block 64) failed
[  234.608545][T11764] FAT-fs (loop3): Directory bread(block 65) failed
[  234.611552][T11764] FAT-fs (loop3): Directory bread(block 66) failed
[  234.613504][T11764] FAT-fs (loop3): Directory bread(block 67) failed
[  234.615544][T11764] FAT-fs (loop3): Directory bread(block 68) failed
[  234.617459][T11764] FAT-fs (loop3): Directory bread(block 69) failed
[  234.619408][T11764] FAT-fs (loop3): Directory bread(block 70) failed
[  234.622842][T11764] FAT-fs (loop3): Directory bread(block 71) failed
[  234.624846][T11764] FAT-fs (loop3): Directory bread(block 72) failed
[  234.626739][T11764] FAT-fs (loop3): Directory bread(block 73) failed
[  234.701844][T11766] loop3: detected capacity change from 0 to 4096
[  234.704844][T11766] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  235.038061][    T9] usb 3-1: failed to send control message: -71
[  235.040166][    T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  235.044979][    T9] usb 3-1: USB disconnect, device number 24
[  235.052209][    T9] ch341 3-1:0.0: device disconnected
[  235.361351][T11777] ptrace attach of "/syz-executor exec"[5947] was attempted by "/syz-executor exec"[11777]
[  235.462959][T11782] loop3: detected capacity change from 0 to 512
[  235.470783][T11782] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  235.474360][T11782] EXT4-fs (loop3): 1 truncate cleaned up
[  235.477891][T11782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.500115][T10543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.609270][T11790] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  235.783794][T11803] loop2: detected capacity change from 0 to 512
[  235.794546][T11803] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent
[  235.891651][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2420'.
[  236.302949][   T47] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  236.472044][   T47] usb 3-1: Using ep0 maxpacket: 16
[  236.475588][   T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  236.483837][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  236.490398][   T47] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  236.494300][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.497030][   T47] usb 3-1: Product: syz
[  236.498466][   T47] usb 3-1: Manufacturer: syz
[  236.500060][   T47] usb 3-1: SerialNumber: syz
[  236.505202][   T47] usb 3-1: config 0 descriptor??
[  236.509223][   T47] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  236.512436][   T47] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  236.834789][ T5987] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  237.005150][ T5987] usb 4-1: Using ep0 maxpacket: 32
[  237.013392][ T5987] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  237.016288][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.022022][ T5987] usb 4-1: config 0 descriptor??
[  237.025730][ T5987] gspca_main: sunplus-2.14.0 probing 041e:400b
[  237.081436][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'.
[  237.088935][T11828] vlan2: entered promiscuous mode
[  237.090746][T11828] bond0: entered promiscuous mode
[  237.092451][T11828] bond_slave_0: entered promiscuous mode
[  237.094330][T11828] bond_slave_1: entered promiscuous mode
[  237.096360][T11828] bond2: entered promiscuous mode
[  237.155773][   T47] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  237.158609][   T47] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  238.027602][   T47] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  238.034548][   T47] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  238.036949][   T47] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  238.039559][   T47] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  238.041838][   T47] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  238.044311][   T47] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  238.049004][   T47] usb 3-1: USB disconnect, device number 25
[  238.144073][ T5987] gspca_sunplus: reg_w_riv err -71
[  238.145680][ T5987] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  238.150175][ T5987] usb 4-1: USB disconnect, device number 14
[  238.666838][T11854] vlan0: entered promiscuous mode
[  238.671986][T11854] vlan0: left promiscuous mode
[  239.143699][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  239.389830][    T9] usb 4-1: Using ep0 maxpacket: 8
[  239.465093][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  239.469570][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.472254][    T9] usb 4-1: Product: syz
[  239.473674][    T9] usb 4-1: Manufacturer: syz
[  239.475320][    T9] usb 4-1: SerialNumber: syz
[  239.492028][    T9] usb 4-1: config 0 descriptor??
[  239.502289][    T9] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  240.290546][T11883] netlink: 5172 bytes leftover after parsing attributes in process `syz.2.2455'.
[  240.294224][T11883] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  240.302968][T11883] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  240.330533][   T33] audit: type=1326 audit(1753211326.688:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.2455" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8e9a9 code=0x0
[  241.595424][    T9] gspca_sonixj: reg_r err -71
[  241.596967][    T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  241.605687][    T9] usb 4-1: USB disconnect, device number 15
[  241.698336][ T5988] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  241.862816][ T5988] usb 3-1: unable to get BOS descriptor or descriptor too short
[  241.865917][ T5988] usb 3-1: not running at top speed; connect to a high speed hub
[  241.870659][ T5988] usb 3-1: config 6 has an invalid interface number: 208 but max is 0
[  241.873310][ T5988] usb 3-1: config 6 has no interface number 0
[  241.875565][ T5988] usb 3-1: config 6 interface 208 has no altsetting 0
[  241.880523][ T5988] usb 3-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=23.c2
[  241.883606][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.886148][ T5988] usb 3-1: Product: syz
[  241.887588][ T5988] usb 3-1: Manufacturer: syz
[  241.889295][ T5988] usb 3-1: SerialNumber: syz
[  242.120569][ T5988] qmi_wwan 3-1:6.208: invalid descriptor buffer length
[  242.124665][ T5988] qmi_wwan 3-1:6.208: probe with driver qmi_wwan failed with error -22
[  242.133603][ T5988] usb 3-1: USB disconnect, device number 26
[  242.391941][T11942] loop3: detected capacity change from 0 to 40427
[  242.401222][T11942] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  242.403714][T11942] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  242.410113][T11942] F2FS-fs (loop3): invalid crc value
[  242.419925][T11942] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  242.458999][T11942] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[  242.461597][T11942] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  242.732777][   T33] audit: type=1326 audit(1753211328.942:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.3.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fdd8e9a9 code=0x7ffc0000
[  242.747538][   T33] audit: type=1326 audit(1753211328.942:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.3.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f21fdd8e9a9 code=0x7ffc0000
[  242.756961][   T33] audit: type=1326 audit(1753211328.942:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.3.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fdd8e9a9 code=0x7ffc0000
[  242.775857][T11959] loop2: detected capacity change from 0 to 1024
[  242.778112][   T33] audit: type=1326 audit(1753211328.942:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.3.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f21fdd8e9a9 code=0x7ffc0000
[  242.785174][   T33] audit: type=1326 audit(1753211328.942:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.3.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fdd8e9a9 code=0x7ffc0000
[  242.806431][   T33] audit: type=1326 audit(1753211328.942:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.3.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f21fdd8e9a9 code=0x7ffc0000
[  242.818312][   T33] audit: type=1326 audit(1753211328.942:208): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.3.2489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fdd8e9a9 code=0x7ffc0000
[  242.884064][   T27] hfsplus: b-tree write err: -5, ino 4
[  242.936410][T11974] loop2: detected capacity change from 0 to 512
[  242.960709][T11974] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  242.963963][T11974] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  242.967072][T11974] EXT4-fs (loop2): group descriptors corrupted!
[  243.058166][T11977] loop3: detected capacity change from 0 to 8192
[  243.167237][T11986] loop3: detected capacity change from 0 to 512
[  243.585470][T11997] loop2: detected capacity change from 0 to 2048
[  243.589629][T11997] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  243.617700][T11999] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.664402][T12002] loop3: detected capacity change from 0 to 512
[  243.686233][T12002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.701362][T12007] xt_cgroup: xt_cgroup: no path or classid specified
[  243.702097][T12002] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.726199][   T33] audit: type=1800 audit(1753211329.877:209): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2508" name="file1" dev="loop3" ino=15 res=0 errno=0
[  243.777394][T12011] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  243.829195][T10543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.895760][T12015] loop3: detected capacity change from 0 to 128
[  244.125245][ T5988] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  244.165371][T12029] loop3: detected capacity change from 0 to 256
[  244.171776][T12029] exfat: Deprecated parameter 'namecase'
[  244.173585][T12029] exfat: Deprecated parameter 'utf8'
[  244.178629][T12029] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  244.285469][ T5988] usb 3-1: Using ep0 maxpacket: 8
[  244.289504][ T5988] usb 3-1: config 128 has an invalid interface number: 25 but max is 0
[  244.292603][ T5988] usb 3-1: config 128 has no interface number 0
[  244.304467][ T5988] usb 3-1: New USB device found, idVendor=0cf2, idProduct=76f6, bcdDevice=9b.f5
[  244.308126][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.310571][ T5988] usb 3-1: Product: syz
[  244.311914][ T5988] usb 3-1: Manufacturer: syz
[  244.313334][ T5988] usb 3-1: SerialNumber: syz
[  244.468388][ T5988] usb-storage 3-1:128.25: USB Mass Storage device detected
[  244.661701][ T5988] usb 3-1: USB disconnect, device number 27
[  244.840092][T12045] loop3: detected capacity change from 0 to 32768
[  244.846863][T12045] (syz.3.2525,12045,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  244.857555][T12045] (syz.3.2525,12045,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  244.877027][T12045] JBD2: Ignoring recovery information on journal
[  244.907090][T12045] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  244.960443][   T33] audit: type=1800 audit(1753211331.037:210): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2525" name="file1" dev="loop3" ino=16980 res=0 errno=0
[  245.006805][T10543] ocfs2: Unmounting device (7,3) on (node local)
[  245.237327][T12060] loop2: detected capacity change from 0 to 1024
[  245.267171][T12060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.308548][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.313203][T12063] loop3: detected capacity change from 0 to 4096
[  245.346318][T12063] NILFS (loop3): couldn't find nilfs on the device
[  245.360073][ T7856] udevd[7856]: incorrect nilfs2 checksum on /dev/loop3
[  245.633443][T12078] netlink: 'syz.3.2538': attribute type 10 has an invalid length.
[  245.677961][T12078] team0: Port device dummy0 added
[  246.166114][T12110] netlink: 'syz.1.2554': attribute type 1 has an invalid length.
[  246.504202][T12133] xt_HMARK: spi-set and port-set can't be combined
[  246.751640][T12152] bond4: entered allmulticast mode
[  246.893930][ T5988] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  246.950312][T12148] loop3: detected capacity change from 0 to 40427
[  246.957303][T12148] F2FS-fs (loop3): heap/no_heap options were deprecated
[  246.961763][T12148] F2FS-fs (loop3): invalid crc value
[  247.018148][T12148] F2FS-fs (loop3): Start checkpoint disabled!
[  247.022046][T12148] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  247.052596][T12148] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  247.061379][T12148] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  247.068062][T12148] overlayfs: failed to set uuid (/file1, err=-5); falling back to uuid=null.
[  247.070964][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.076999][ T5988] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  247.079801][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  247.102075][ T5988] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  247.105126][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.110084][T10543] syz-executor: attempt to access beyond end of device
[  247.110084][T10543] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  247.115061][T10543] syz-executor: attempt to access beyond end of device
[  247.115061][T10543] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  247.120745][ T5988] usb 3-1: Product: syz
[  247.122048][ T5988] usb 3-1: Manufacturer: syz
[  247.123431][ T5988] usb 3-1: SerialNumber: syz
[  247.126366][ T5988] usb 3-1: config 0 descriptor??
[  247.244057][T12167] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  247.355212][   T47] usb 3-1: USB disconnect, device number 28
[  247.671281][ T5916] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.753174][ T5916] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.805761][ T5916] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.880402][ T5916] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.030033][ T5916] bridge0: port 3(batadv0) entered disabled state
[  248.046421][ T5916] bridge_slave_1: left allmulticast mode
[  248.053087][ T5916] bridge_slave_1: left promiscuous mode
[  248.057609][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.072203][ T5916] bridge_slave_0: left allmulticast mode
[  248.074539][ T5916] bridge_slave_0: left promiscuous mode
[  248.076984][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.104741][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  248.110739][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  248.114330][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  248.119096][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  248.122298][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  248.278791][T12186] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  248.613518][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.627426][ T5916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.637337][ T5916] bond0 (unregistering): Released all slaves
[  248.728462][T12179] lo speed is unknown, defaulting to 1000
[  248.728697][T12202] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2597'.
[  249.024652][T12224] loop2: detected capacity change from 0 to 256
[  249.074132][T12224] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  249.087330][T12224] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  249.097050][T12224] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  249.109855][ T5916] hsr_slave_0: left promiscuous mode
[  249.122051][ T5916] hsr_slave_1: left promiscuous mode
[  249.124086][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.129554][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.134465][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.136783][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.143285][ T5916] 
[  249.144090][ T5916] ======================================================
[  249.146203][ T5916] WARNING: possible circular locking dependency detected
[  249.147744][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2607'.
[  249.148318][ T5916] 6.16.0-rc7-syzkaller-dirty #0 Not tainted
[  249.154568][ T5916] ------------------------------------------------------
[  249.156692][ T5916] kworker/u8:2/5916 is trying to acquire lock:
[  249.158619][ T5916] ffff888124928e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  249.161677][ T5916] 
[  249.161677][ T5916] but task is already holding lock:
[  249.163901][ T5916] ffff88802de80d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320
[  249.167280][ T5916] 
[  249.167280][ T5916] which lock already depends on the new lock.
[  249.167280][ T5916] 
[  249.170470][ T5916] 
[  249.170470][ T5916] the existing dependency chain (in reverse order) is:
[  249.173142][ T5916] 
[  249.173142][ T5916] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  249.175624][ T5916]        lock_acquire+0x120/0x360
[  249.177149][ T5916]        __mutex_lock+0x182/0xe80
[  249.178654][ T5916]        dev_set_mtu+0x10e/0x260
[  249.180323][ T5916]        team_add_slave+0x8b8/0x2840
[  249.181975][ T5916]        do_set_master+0x533/0x6d0
[  249.183567][ T5916]        do_setlink+0xcf0/0x41c0
[  249.185043][ T5916]        rtnl_newlink+0x160b/0x1c70
[  249.186598][ T5916]        rtnetlink_rcv_msg+0x7cf/0xb70
[  249.188223][ T5916]        netlink_rcv_skb+0x208/0x470
[  249.189817][ T5916]        netlink_unicast+0x75c/0x8e0
[  249.191493][ T5916]        netlink_sendmsg+0x805/0xb30
[  249.193111][ T5916]        __sock_sendmsg+0x21c/0x270
[  249.194725][ T5916]        ____sys_sendmsg+0x505/0x830
[  249.196349][ T5916]        ___sys_sendmsg+0x21f/0x2a0
[  249.197968][ T5916]        __x64_sys_sendmsg+0x19b/0x260
[  249.199662][ T5916]        do_syscall_64+0xfa/0x3b0
[  249.201205][ T5916]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.203095][ T5916] 
[  249.203095][ T5916] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  249.205527][ T5916]        validate_chain+0xb9b/0x2140
[  249.207110][ T5916]        __lock_acquire+0xab9/0xd20
[  249.208706][ T5916]        lock_acquire+0x120/0x360
[  249.210221][ T5916]        __mutex_lock+0x182/0xe80
[  249.211701][ T5916]        team_device_event+0x182/0xa20
[  249.213311][ T5916]        notifier_call_chain+0x1b6/0x3e0
[  249.214989][ T5916]        dev_close_many+0x29c/0x410
[  249.216550][ T5916]        unregister_netdevice_many_notify+0x619/0x2320
[  249.218636][ T5916]        default_device_exit_batch+0x819/0x890
[  249.220467][ T5916]        ops_undo_list+0x525/0x990
[  249.221999][ T5916]        cleanup_net+0x4c5/0x800
[  249.223490][ T5916]        process_scheduled_works+0xae1/0x17b0
[  249.225290][ T5916]        worker_thread+0x8a0/0xda0
[  249.226866][ T5916]        kthread+0x711/0x8a0
[  249.228293][ T5916]        ret_from_fork+0x3fc/0x770
[  249.229904][ T5916]        ret_from_fork_asm+0x1a/0x30
[  249.231560][ T5916] 
[  249.231560][ T5916] other info that might help us debug this:
[  249.231560][ T5916] 
[  249.234523][ T5916]  Possible unsafe locking scenario:
[  249.234523][ T5916] 
[  249.236757][ T5916]        CPU0                    CPU1
[  249.238306][ T5916]        ----                    ----
[  249.239871][ T5916]   lock(&dev_instance_lock_key#3);
[  249.241464][ T5916]                                lock(team->team_lock_key#3);
[  249.243635][ T5916]                                lock(&dev_instance_lock_key#3);
[  249.245905][ T5916]   lock(team->team_lock_key#3);
[  249.247420][ T5916] 
[  249.247420][ T5916]  *** DEADLOCK ***
[  249.247420][ T5916] 
[  249.249828][ T5916] 5 locks held by kworker/u8:2/5916:
[  249.251387][ T5916]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  249.254663][ T5916]  #1: ffffc9000389fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  249.257822][ T5916]  #2: ffffffff8f50f510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  249.260658][ T5916]  #3: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  249.263703][ T5916]  #4: ffff88802de80d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320
[  249.267352][ T5916] 
[  249.267352][ T5916] stack backtrace:
[  249.269089][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: kworker/u8:2 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  249.269100][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.269107][ T5916] Workqueue: netns cleanup_net
[  249.269120][ T5916] Call Trace:
[  249.269125][ T5916]  <TASK>
[  249.269130][ T5916]  dump_stack_lvl+0x189/0x250
[  249.269142][ T5916]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.269150][ T5916]  ? __pfx__printk+0x10/0x10
[  249.269162][ T5916]  ? print_lock_name+0xde/0x100
[  249.269172][ T5916]  print_circular_bug+0x2ee/0x310
[  249.269183][ T5916]  check_noncircular+0x134/0x160
[  249.269193][ T5916]  validate_chain+0xb9b/0x2140
[  249.269206][ T5916]  __lock_acquire+0xab9/0xd20
[  249.269215][ T5916]  ? team_device_event+0x182/0xa20
[  249.269226][ T5916]  lock_acquire+0x120/0x360
[  249.269234][ T5916]  ? team_device_event+0x182/0xa20
[  249.269242][ T5916]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  249.269251][ T5916]  __mutex_lock+0x182/0xe80
[  249.269259][ T5916]  ? team_device_event+0x182/0xa20
[  249.269268][ T5916]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  249.269279][ T5916]  ? team_device_event+0x182/0xa20
[  249.269287][ T5916]  ? __pfx___mutex_lock+0x10/0x10
[  249.269295][ T5916]  ? __timer_delete_sync+0x218/0x2d0
[  249.269309][ T5916]  team_device_event+0x182/0xa20
[  249.269316][ T5916]  notifier_call_chain+0x1b6/0x3e0
[  249.269328][ T5916]  dev_close_many+0x29c/0x410
[  249.269337][ T5916]  ? __lock_acquire+0xab9/0xd20
[  249.269345][ T5916]  ? __pfx_dev_close_many+0x10/0x10
[  249.269356][ T5916]  unregister_netdevice_many_notify+0x619/0x2320
[  249.269385][ T5916]  ? __local_bh_enable_ip+0x12d/0x1c0
[  249.269396][ T5916]  ? __local_bh_enable_ip+0x12d/0x1c0
[  249.269403][ T5916]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  249.269414][ T5916]  ? unregister_netdevice_queue+0x1b3/0x380
[  249.269423][ T5916]  ? batadv_meshif_destroy_netlink+0x1dd/0x270
[  249.269435][ T5916]  default_device_exit_batch+0x819/0x890
[  249.269447][ T5916]  ? __pfx___might_resched+0x10/0x10
[  249.269456][ T5916]  ? __pfx_default_device_exit_batch+0x10/0x10
[  249.269467][ T5916]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  249.269478][ T5916]  ? net_generic+0x1e/0x240
[  249.269488][ T5916]  ? __pfx_default_device_exit_batch+0x10/0x10
[  249.269498][ T5916]  ops_undo_list+0x525/0x990
[  249.269510][ T5916]  ? __pfx_ops_undo_list+0x10/0x10
[  249.269522][ T5916]  cleanup_net+0x4c5/0x800
[  249.269532][ T5916]  ? __pfx_cleanup_net+0x10/0x10
[  249.269542][ T5916]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.269549][ T5916]  ? process_scheduled_works+0x9ef/0x17b0
[  249.269557][ T5916]  ? process_scheduled_works+0x9ef/0x17b0
[  249.269566][ T5916]  process_scheduled_works+0xae1/0x17b0
[  249.269578][ T5916]  ? __pfx_process_scheduled_works+0x10/0x10
[  249.269589][ T5916]  worker_thread+0x8a0/0xda0
[  249.269601][ T5916]  ? __kthread_parkme+0x7b/0x200
[  249.269611][ T5916]  kthread+0x711/0x8a0
[  249.269621][ T5916]  ? __pfx_worker_thread+0x10/0x10
[  249.269630][ T5916]  ? __pfx_kthread+0x10/0x10
[  249.269640][ T5916]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.269646][ T5916]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.269654][ T5916]  ? __pfx_kthread+0x10/0x10
[  249.269664][ T5916]  ret_from_fork+0x3fc/0x770
[  249.269673][ T5916]  ? __pfx_ret_from_fork+0x10/0x10
[  249.269681][ T5916]  ? __switch_to_asm+0x39/0x70
[  249.269690][ T5916]  ? __switch_to_asm+0x33/0x70
[  249.269699][ T5916]  ? __pfx_kthread+0x10/0x10
[  249.269709][ T5916]  ret_from_fork_asm+0x1a/0x30
[  249.269722][ T5916]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  249.424970][ T5916] veth1_macvtap: left promiscuous mode
[  249.426758][ T5916] veth0_macvtap: left promiscuous mode
[  249.428599][ T5916] veth1_vlan: left promiscuous mode
[  249.430251][ T5916] veth0_vlan: left promiscuous mode
[  249.581439][ T5916] team0 (unregistering): Port device team_slave_1 removed
[  249.598690][ T5916] team0 (unregistering): Port device team_slave_0 removed
[  249.714876][ T5916] team0 (unregistering): Port device dummy0 removed
[  249.768353][ T7390] bond0: (slave syz_tun): Releasing backup interface
[  250.162627][ T5916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.165981][ T5916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.214367][ T5916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.217570][ T5916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.254458][ T5916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.257638][ T5916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.308776][ T5916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.311999][ T5916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.387373][ T5916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.436254][ T5916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.468705][ T5916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.532614][ T5916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.606350][ T5916] bridge_slave_1: left allmulticast mode
[  250.608158][ T5916] bridge_slave_1: left promiscuous mode
[  250.609950][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.614335][ T5916] bridge_slave_0: left allmulticast mode
[  250.616121][ T5916] bridge_slave_0: left promiscuous mode
[  250.617918][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.621543][ T5916] bridge_slave_1: left allmulticast mode
[  250.623348][ T5916] bridge_slave_1: left promiscuous mode
[  250.626130][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.628918][ T5916] bridge_slave_0: left allmulticast mode
[  250.630699][ T5916] bridge_slave_0: left promiscuous mode
[  250.632535][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.678744][ T5916] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  250.754521][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.757250][ T5916] bond_slave_0: left promiscuous mode
[  250.759714][ T5916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.762350][ T5916] bond_slave_1: left promiscuous mode
[  250.764853][ T5916] bond0 (unregistering): (slave bond2): Releasing backup interface
[  250.767369][ T5916] bond2 (unregistering): left promiscuous mode
[  250.769295][ T5916] bond0 (unregistering): Released all slaves
[  250.856775][ T5916] bond1 (unregistering): Released all slaves
[  250.942419][ T5916] bond2 (unregistering): Released all slaves
[  250.947151][ T5916] bond3 (unregistering): Released all slaves
[  250.951507][ T5916] bond4 (unregistering): Released all slaves
[  250.998623][ T5916] bond0 (unregistering): Released all slaves
[  251.162852][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.166500][ T5916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.169822][ T5916] bond0 (unregistering): Released all slaves
[  251.273213][ T5916] tipc: Left network mode
[  251.280599][ T5916] IPVS: stopping backup sync thread 8870 ...
[  251.519043][ T5916] hsr_slave_0: left promiscuous mode
[  251.521029][ T5916] hsr_slave_1: left promiscuous mode
[  251.523387][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.525622][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.528078][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.530374][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.536111][ T5916] hsr_slave_0: left promiscuous mode
[  251.545296][ T5916] hsr_slave_1: left promiscuous mode
[  251.547518][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.549701][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.554626][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.558563][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.564426][ T5916] veth1_macvtap: left promiscuous mode
[  251.566219][ T5916] veth0_macvtap: left promiscuous mode
[  251.567950][ T5916] veth1_vlan: left promiscuous mode
[  251.569595][ T5916] veth0_vlan: left promiscuous mode
[  251.571758][ T5916] veth1_macvtap: left promiscuous mode
[  251.573473][ T5916] veth0_macvtap: left promiscuous mode
[  251.575191][ T5916] veth1_vlan: left promiscuous mode
[  251.576935][ T5916] veth0_vlan: left promiscuous mode
[  251.928313][ T5916] team0 (unregistering): Port device team_slave_1 removed
[  251.947728][ T5916] team0 (unregistering): Port device team_slave_0 removed
[  252.387137][ T5916] IPVS: stop unused estimator thread 0...
[  252.390061][ T5916] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
19:09:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000062a6 RDI=00000000000062a7 RBP=00000000000003f8 RSP=ffffc90008eaeb50
R8 =ffff888107258237 R9 =1ffff11020e4b046 R10=dffffc0000000000 R11=ffffffff85462e20
R12=dffffc0000000000 R13=ffffffff99af18d0 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85462e9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f04369f66c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002540 CR3=0000000033e80000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f04398ed100 00007f0438d86440 XMM05=00007f0438d86458 00007f0438d864a0
XMM06=00007f0438d86498 00007f0438d86490 XMM07=00007f0438d86488 00007f0438d86480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0438c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a10205 RBX=ffffffff81a101c4 RCX=ffff8880269c5640 RDX=0000000000000000
RSI=ffffffff8be28ce0 RDI=ffffffff8be28ca0 RBP=ffffc9000389ee50 RSP=ffffc9000389ed40
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c26655
R12=dffffc0000000000 R13=1ffff92000713dac R14=0000000000000000 R15=0000000000000029
RIP=ffffffff81a101fa RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f418ff8 CR3=000000002ec4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133a4fe ffffffff8133a4fe
XMM02=00007f4eecf86478 ffffffff8133a4fe XMM03=00007f4eecf86488 00007f4eecf86480
XMM04=00007f4eedaed100 00007f4eecf86440 XMM05=00007f4eecf86458 00007f4eecf864a0
XMM06=00007f4eecf86498 00007f4eecf86490 XMM07=00007f4eecf86488 00007f4eecf86480
XMM08=4210842108421084 21084210851ef4ae XMM09=0000000000000000 00007f4eece11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
