last executing test programs:

1m13.732955041s ago: executing program 1 (id=352):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}})
r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m13.649867106s ago: executing program 1 (id=354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x50bd26, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xf449a16c1e46bdd0, 0x7}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

1m13.489890756s ago: executing program 1 (id=356):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12011001a0b4c41058044a70553a010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

1m12.132233287s ago: executing program 1 (id=366):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m12.052716162s ago: executing program 1 (id=367):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81})
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)

1m11.662644736s ago: executing program 1 (id=368):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00')
read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020)

1m11.533029379s ago: executing program 32 (id=368):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00')
read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020)

21.619541101s ago: executing program 0 (id=876):
syz_emit_ethernet(0xae, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf85, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x18, 0x1, "45976e75e433"}]}}}}}}, 0x0)

21.538762785s ago: executing program 0 (id=878):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x2d, 0x0, &(0x7f00000017c0))

21.470865649s ago: executing program 0 (id=879):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x309, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'R'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0)

21.371099245s ago: executing program 0 (id=882):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

21.155771194s ago: executing program 0 (id=885):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x20003, 0xfffffffffffffffe})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80})

20.682361941s ago: executing program 0 (id=895):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

20.361238429s ago: executing program 33 (id=895):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

2.36734098s ago: executing program 4 (id=1073):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0xffffffff, 0x2, 0x1, 0x8})

2.284847385s ago: executing program 4 (id=1075):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

1.882081164s ago: executing program 2 (id=1080):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x33)

1.801550226s ago: executing program 2 (id=1082):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0)

1.582478386s ago: executing program 2 (id=1084):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x121200)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0xa, @sdr={0xfe026710, 0x4}})

1.47138333s ago: executing program 2 (id=1085):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164000700028008000340000000b90800024000000004080004400000004b0900010073797a30000000000900020073797a32"], 0xb8}}, 0x0)

1.47085188s ago: executing program 4 (id=1086):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.391670597s ago: executing program 3 (id=1087):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
close(r0)

1.391253025s ago: executing program 3 (id=1088):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x5c)

1.390864296s ago: executing program 2 (id=1089):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.321888154s ago: executing program 4 (id=1090):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000540)=0x800007, 0x4)

1.321713943s ago: executing program 2 (id=1091):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1.321284729s ago: executing program 3 (id=1092):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

1.294435029s ago: executing program 4 (id=1093):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x18, &(0x7f0000000380), 0x1, 0x55c4, &(0x7f0000005600)="$eJzs3X9sXWX9B/Bzb9f94ru2hH3rgGxsAyRbRDo3TQgkdmzTaWG50gmbkPUHjqBzWseGqxBWxDgDIxRrGIMVFtz+mCIUXedQEgvYVXS/EEymiwpmi2vGSHEiYsJieu85d/eeu7Z3EymB14u05zz3c57nPvfk/NH3Zc85AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARB8Mfjd02/4/6a8dtvqHngguvOXftw55LjF9++tXLzI9tH7Wt74atHK1c1H1m64JYHUw2Pre/tbA+CRLpfIuxfd8X8q2+srbtqdDRg/ecy24qKgd4y0/XlTGNk3ov9/fJ/GoIgKI0NUBJu54U7ybwBsrsrCgcc1PUTu5qnjptXv21lx8bnl125pfCj02/0cE9guITX1cET11J1+ncydkS2nXPpJfIu0Uz/+AX3rnwIAOCUVKXSm+yfo+GfuNl2S7wea1fH2q2xdvQXQmtu43Rkxh050Dwnx+vDNM/qTFQYNeA8Y/Xw/GfbqXj/WDsWNU5hnvmHhpFm9EDzbIrVh2ueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO8lF904s3bvnkdf/Urzb3/36Jvfev3jR1bV39bXWXvJusVPtu343t+OVq5qPrJ0wS0PphoeW9/b2R4EFel+iUz3xHOVyeTMvpptT9zXXVX3oYVrSsJxo+2InIOD/dHOpeVB0JhTORgN21sWBKn8QroZbCgsfCm985moAAAAwPvJ2enfyWw7EwdL89qJdJpMpP+LZMLi9RO7mqeOm1e/bWXHxueXXbnl9MdLDTBe9UnHy7YrTvwkcoJxFH/j452oR4euKBhncPER43n+zGO90xprbhp99e6LFs6YXbvl8uAn0w+3LV/0wPiXxy3Z11pVkP8rBs//0ZmT/wEAAPhvyP/xcQY3VP5vrCqfeHDqd0ueuKHy+OH5D/28vefFp5OPlPZ1PvvKyDF3/HJ1Qf6fnPeWBfk/mnGU/5PB6eV/AAAAeC/7X+f/6oJxBjdU/v/F/s2f//fKb0w5PONfO1569veXbp1SNv+NsTNuevupBa/V7Wr5U0H+ryou/4/InXb04q5owsvKg6Cq+JMKAAAA5In+v/uJrxaivJ755iCe16+4Z+zTu95af3PynKZ/nLW4d9akL+5e/fUNmxJ9G9rX7Vg+d0VB/q8uLv+XvjsfFwAAACjCb7bfdu+kLy/ZumXPoTk77k5tHnnZ3Nf3/LT9mp5Xj6VKXry1pyD/p4rL/6OG5+MAAAAAJ/HMmAkvHHr80Ndm7147fu+qljlPTtu3euFD/5z996te+fPxTReXFeT/+uLy/9hwG658yHTaGf0rhLbyIBjdv9OUKfQErZ/MFgAAAIB3SJTTGxrWde9cP2LWG+ce/uGaFct/tffyb9+zcdKtB35deef5x/Z331yQ/5sGv/9/dKeDaP1/3v3/Ctb/5xQyd/27zI0BAAAA+CAqXM8f3R4/8+SCgZ6/X+z6/4+efWBUW+OFFZOT2ybNeur/e65ZO+nNRW2XfGL77W99OFH2108V5P+W4vJ/Se72nXz+HwAAAJyGU37+38jM68P1/L/FBeMMbqj7//eMee68NZ+97wfV3xz7zPlv39v4ndaD0y/YPO2sj5Rc2Dln5h++X5D/W4vL/9H2jNyP1xWdnzvLg2BC/054N8Gt0XSXxQodpTmFzImP9aiNeoSFjlE5hbSmWI+PlQfBlP6dlljhzKjQGiv0lYWFTbHC3qgQXg/ZwuOxQld0pd1fFk43XvhZVAgXWHREKyjOyC6JiPU4NlCP/sJJexzIvjkAAMAHShSewyxbmt8M4lG2IzHUAWOHOiA51AElQx0wInZA/MCBXg/q8wvR6z+e27n0teserum+tu7oObP3LLmr5f+6FnXv/MKPus77y7UvLfx0Qf7fVFz+j05F+HXJQOv/g2j9f/hcw+z6//qoUBErdESFVPyOAanoPTJh9+7oPSpSYY++CdkCAAAAvK9F3wuUDPM8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+A979x4nVXUnCPxU0w+6aZqOGDDGBNSI6C5N04QEEUcicdckLmkSsjpmCI3QaIc2oIArxqz4GleJLkaNiZEd/Dhq4rCKD6JOVIiOmGRUEp+z4nPQiay6BB01jsmyn+5bp6i61WUXAkq73+8fXafqd563Hn3PvbdOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/homV3Nr46+H9965ff2/Dy9z41/TfTD9u6x19uqn9z2BmPbT1kaP0Nrw1ZtPiV9imnXtk6c+UVm1YvD6G1u1wmKZ65b0hFxdg/fOW2my65v3nG0GlnVmfrzcbDgK4/Fdk758ZWXxwYwu2ZECrTgVH1SaAqe78+1rdPfQgfC9sCuRLtdUmJdMPh/toQVoRtgVxVd9aGUJ8XmPbIvWsu6kpcVhvCASGEmnQbz9QkbdSmAyOqk0BdOjCvMgm8vTWRC9xRkQRge1T39GB8M+Re9KtaCzM09lxZiddf1fvt3G4mPbx+MdFYOt9rX9jFncpT9Fy27tDT1uNLg52u6O2x1rutD7zbirbzMk9b/o5Udg9l67ZQTaiY3T5n5qLOhfGRitDU1K9UTbvoed6w5YxZIZPdQ+xK5z/eQ7rPvA5jBxp3yuvwnropDRe9PvnQ1cf/8eQDFq6fvqPdfCpvk+and7WakH3N9ZnnMZr04X2ebN2RwjvX7v60Fe0lDbfTFUL4+p8+nnli3nN7b37nxWMn3/zM+ZfPWHzFtMlPDvnF+H+8co/bZ1xcNP9vfO/5f3w5x9uKgtyx1Xcbkrl5fKQ+JjY3JHNzAAAA6DM+tKOm25H+/NgXnzvxvtuXPLvyq5XfnfCr4/ZqqDz9+51f33P1xE9eeGnHw3sUzf+Hl3f+P57yr88f7doQJnUnzhkUwl7djyeBn8XuHD8ohH27U62FgS+kAmtD+ER34qBcVakS/WOJ4anA7xuygUmpwLoYaE0Fro2BZanAuTGwKhWYFQNrU4EjYiB0FI7j4IbsOMoO1MZAW7IRV8WrEN5oiK2lttWGXFUAAAA7SXZ2WFV4N+9ahx3NEKeXq2p7yxCvwC6ZoSZVQ3oGm5tWlayhsrcaKnqrITfuJe89/KKaM73VXHQZRqYww7vDvlMxaPJ+P7rt2lHXtTw7+btvjv/6Z//86ptrD/qn/37HGQuvOrho/t/83vP/mh46kik6/x/C1O6/MXdFNtKZi7e1FmQAAAAAdsBlDy1/9JqDj/o/dz1/162fuvKairWXf+3/vrD5nP3GfHVkpv/ffXtV0fx/UnnX/8djIv3yMocH42GIuYNCaC4MJNUeWhxIznoPyAYAAACgL8idj8+dC+/I3iaXaKfn08X5W7czfzzxP6nH/Bdv+esnP3Plo8cuHrH/pkv+26nvZD4+/nd7HL1+9MOvfXrEPzT2L77+v7W86//rCm+TTqyLvbh0UAj98wIPxF52BboNj4HnDy8MZMe/Lm6ApbGq7IUJuaqWxhJtMdCcCqwoVeK3uRJ7FQayT1au8XNy4+jIlsgLAAAAwAcuHg6I5+Xj9f93TD34UwcNeW7cs5++c/FLk5Yfc2LdD/e/Yc+XB3VOGfe5SYd98Ymi+X/b9l3/3z0PLrq8v3NACKMrQ+iX/mLAg3XJwoAxUJ/JJu6uS+rql67qrLoQJnYNLF3VC9n1/yvTaww+UptUFQN77ffTLSO6EtfUhjA6P/DEN68e15VYmArkGv9GbQjDukabbnx1/6TxqnTjV/QP4dN5gVxVx/cPoaux6nRV99Zkf8cgXdVNNSEMzgvkqvpcTQiLAwB9VPxXOjv/wQWLT587s7Oz/ZRdmIjH8GvDnI7O9qZZ8zpn15To0+xUnwuWMTqreEzl/vLN09kliqYPu3lkOenc9wSb89vKHscvunAwez/uC1V1j7OlquDu2PSQR+5f3ETI25MqNeSKXTzkuvxKtj2JRfXH/NVhQOi/aEH7KU2nzVy48JQxyd9ys7ckf+NppmRbjUlvq7qe+lbGy6Pkalkp73dbHZhfyeiFJ80fvWDx6aM6Tpp5QvsJ7d9pGT+mpWXc58ePaxndNarm5G8vQz2wp6pTQ916dZnj2olD3bsyr5IP4lNDQkKiryVmLsucPWnGr+/+1j7rTjrtuH3+fp/Zo477q4t/M//YpsOm/urqv1xfNP+f/97z//ipEz/5s+szlDr/3xhP8yePbzvN3xYDK8o9/99Y6mx+7sKA4anAkhhY4jQ/AAAAHw3xcGQ8mhmPSl9V/0+3Hzl71mFv//KYaZf/7fgJJ5628YDG8y8/etl/2PjGsjVffL1o/r+kvO//76T1/3NL13+51DL/B8USzaXW/08v859b/39JqfX/08v859b/X/EhrP+/KBdIbZI3Giqs/w8AAPR9H9z6/70u75/+gYCiDL0u75/+gYCiDL0u41/uDwRs9/r/8zr/om7IxfMmHD5q/o8fWLPfssE3ferpyb/ef/kho+5cfcNbY24smv8vK2/+b+F+AAAA2H3c98v+3z7/zRF3P/bA20dmLvzt5uu+/lftBx/2h8EtJ0z9Uu33r/u3ovn/ivLm/x/8+n+h1PX/w0sFWkstDGj9PwAAAPqoUuv/XT/4+eFrF4669qGfv3rDc22/mD3xpX+37AefnTmi+fp1G37TOGtj0fx/VXnz/3jZRUVB7tibdxuSNe1Cek27zQ25rwwAAABA31ARmpqqysxbsDLqF95/mxuyS4G+Vzrf43cNWbOo4r7LMjWbf3DBjMOazjz61HlHnrfx+3WP/qRuelPNKUXz/7Xlzf8LvpdxT92Uhoten3zou6uP/+PJByxcP33b+X8AAABg1yn3uAQAAAAAAAAAAAAAAPDhe6xt+SHvjPnSK7P3HfOnbxz9zA+WfvKbD/zNlX8+9edH3LVvx9YR04q+/x+mdpcr9f3/+Lt/8fsFexbkjq32vv5f9v60r9y4uHvJwgcbQtg/PzD37LkfC9nf5j8wP7Bm+kFDuxJnp0vc9ewRL3UlZqQDR43a462uxMRUoC0ukviJdCD+quJbA1OBuLzio+lA3B6r0oHqbOCCgck4Multtak+2VaZ9LZ6qj6EQXmB3La6vT5pI5Me4GWpQG6AJ6cDcYBTsoGKdK9uHJD0KgbqY9G/GZD0CgCA3VbcC6wKczo625vjLny83buy8DYqWLLsrOJqM2U2/3R2abLpw24eWU66X3pfdNtvjVeFmq4hjCnaXc3Pkuke5c6ppZdNt2eJIfe22ltFiXJp27vpqkuPqDYZUdOseZ2zq3od+Njes7RU9pplTNFkJz9LRfcmLaOWMvpSxojK3DZldDnerwhNTf1SuSbEYGMo0Nsrotzv6+ev81fqVZCf529rr7yw39B+b//bxPPuu3dQVeeJU9vP2/uhfx48ZvaPf3hv2xW/L5r/N5Y3/6/JH9db2R8DWBJ/We/QQSG0lTkiAAAA+Oj7n2euvOXYees2zVlb+eTvfje34qvHVm0947YzTj/vqbuXHnXBv79+R+OrMo9tOfaVLaf99Ss/+exV95/23BGzTrttyobDNrbXXPvdv1h54rCi+f/w8ub/8QhW9lRwcrRjbfz9/3MGhdD90/qNSeBncbjHDwph3+5UayyR/KD+l2OJ5iTws3jA5KBYoq21sKr+MbAqFfh9QzawNhVYFwPZoxQ/DdlDOZc0hDCuOzW1sMT8WKIxFfhqDAxPBZpioDkVGBgDk1KBVwdmA62pwD/GQOgo3Fa3DsxuKwAAgO2RnWdVFd4N6XneqsreMmR6y1DXW4aK3jLU9Jah1Cji/VtihqrUxSuZvExV6VprU7UUZYg/hr/d/SrKEH5bmDNdsKjpeP1B7nqDTGGGCT+8pe2QLy/48Zbzf/TwkZ8798hll75+4ZcGDL30yf/dceaAgVvqiub/zeXN/+sKb5PW18X5/7bf/0sCD8TuXRovHR8eA88fXhjIHhhYFye7S3NVtWZLZCftS2OJSTEwPBWYHwOTUoG2qdnAiqGFgexMO9f4ObnGO7Il8gIAAADwgYsHCOJhmjj/Xz0hvLHPkW+37H3p4PkTHn7grC/OrN2zpvafJ65fPvHCmvsO7F80/59U3vw/tjcgv7FzY29eHBjC7ZltvckFRtUngXgcoz5+PX6f+hA+lneAI1eivS4pUZ1qONxfm3xDvTpd1Z21yRoD8f60R+5dc1FX4rLaEA7IO/qSa+OZmqSN2nRgRHUSqEsH5lUmgXjkJxe4oyIJwA7LHRWML6jspS45jT2XK/H6+6j8Jmh6eEXHQHvI19N3rnaVmvQD2WOqOdv3tBVVxy5R9PZY693WF99tjd5t+TtS2T2UrdtCNaFidvucmYs6F8ZH8r/JWmQXPc/531ItJ70TXodL3n9ve1eT7kBz6uOjuedyPb8OM7G6e+qmNFz0+uRDVx//x5MPWLh+etndKCF+UfjQG+cf/FTe5t3VakL2NdfnPk9afZ70xX8Dwz1tIYSV58x59JF/efvpyo0t/+Vz41fe9OpDK39yyD1zRn1i0wWf2fzam0cVzf9by5v/V6Zuu70TN+aCQSGMzNu4D8bNP3lQ8jmYF0g+JQcXB5JT7hsbSn5yAgAAwM6WO9yRO17Qkb1NLghPz5OL87duZ/54vGJSj/nL7ffgcf/wvcMve/kbX9u498UPLn9sw3969YUvzjj8ni2Pr1r9csvRH3+8aP7f9t7z//6pbjr/7/w/u4jz/z3a3Q9F908/sGSHDkUXVccu4fx/j3b3d5vz/z1y/t/5/544/98L5/97tLs/bUV7SfPtdIUQ2gZdc/Mv6maOHHDJGd+atf7nj7/RPOGZ+jO/dOv/OGJpuOKsNX8umv/PL2/+b/2/nhfty63/11Zq/b/5pdb/W2L9PwAAYJcqsdBcep5XtHpfUYb06n1FGXpdILDXJQat/7fd6//VHXf6cS80vLbvFZNv/s+3zjz36eOOffKAfk8fc/Mx142+fORzn9lUNP9fUt78P74cBuS33lfW/xs+tURVy2JgvoUBAQAA2B2VOkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh2vVvUs/uXXp/odc9+THrzviX1esm7Pfrw7eOnbc8U0jlw7OXPp3//LakEWLX2mfcuqVrTNXXrFp9fIQOrrLZZLimfuGVFSM/cNXbrvpkvubZwyddmZNtt6q7O0nC3LHVt9tCGFF3iP1MbG5oevOtsC0r9y4uLIr8WBDCPvnB+aePfdjXYlrG0I4MD+wZvpBQ7sSZ6dL3PXsES91JWakA0eN2uOtrsTEbCCT7u5VA5PuZtLdvWhgCIPyArnufntgYVW5Nv5jNlCRbuP6+qSNGKiPRX9Un7QRA52xREf/EEZXhtAvXdWva5Kq+qWr+vuapKp+6ar+a00IE0MIlemqnq1OqqpMj3x9dVJVDOy130+3jOhKrKgOYXR+4IlvXj2uK3FyKpBr/GvVIQzresmkG7+lKmm8Kt34ZVUhfDqEUJ0u8a+VSYnqdIkXKkMYnBfINX5iZQiLAx8J8cNndv6DCxafPndmZ2f7KbswUZ1tqzbM6ehsb5o1r3N2TapPpWTy0lvPev9jf3rLGbO6bqcPu3lkOenKbLmq7i63VBXcHbu79z72qy6/km3PR1H9MX91GBD6L1rQfkrTaTMXLjxlTPK33Owtyd9+2Wiyrcb0lW11YH4loxeeNH/0gsWnj+o4aeYJ7Se0f6dl/JiWlnGfHz+uZXTXqJqTvztjqFd/8EPduzKvkg/iA0BCQqKvJSoKPt2ad/cP8qId/W0drQo13R/QRdOK/CyZ7lHujEF/4X2O+P3sp/Q6ojFFE4eiLC29ZxlbNJnYlqU2ydK9X1c0OcyvqaJ7k8b7FaGpqV+p7dBYeDd/8762A5t3Q3bTlZsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rMHo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FIAAAD//6rIzpY=")
chdir(&(0x7f0000000000)='./file0\x00')
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
close(r0)

1.294302591s ago: executing program 3 (id=1094):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

899.930269ms ago: executing program 4 (id=1095):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@e={0xff, 0xa, 0xa, 0x22, @SEQ_NOTEON=@note=0x1e, 0x8, 0x7, 0x4})

208.752µs ago: executing program 3 (id=1096):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x4}]}]}, {0x0, [0x0, 0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28)

0s ago: executing program 3 (id=1097):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x4008800)

kernel console output (not intermixed with test programs):

ut max is 0
[   94.138028][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.139547][ T6041] usb 1-1: USB disconnect, device number 7
[   94.152412][ T6859] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.156593][  T791] usb 3-1: config 0 has no interface number 0
[   94.162542][  T791] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   94.167553][  T791] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.176191][  T791] usb 3-1: config 0 interface 52 has no altsetting 0
[   94.180789][  T791] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[   94.194057][  T791] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[   94.197599][  T791] usb 3-1: Manufacturer: syz
[   94.198549][ T6859] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.211059][  T791] usb 3-1: config 0 descriptor??
[   94.224780][ T6859] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.237235][  T791] hub 3-1:0.52: bad descriptor, ignoring hub
[   94.247074][  T791] hub 3-1:0.52: probe with driver hub failed with error -5
[   94.401634][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.433235][ T6859] 8021q: adding VLAN 0 to HW filter on device team0
[   94.441891][  T791] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input7
[   94.468381][ T2191] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.470953][ T2191] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.484389][ T2191] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.487170][ T2191] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.655811][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.717532][ T6859] veth0_vlan: entered promiscuous mode
[   94.728779][ T6859] veth1_vlan: entered promiscuous mode
[   94.750537][ T5880] usb 3-1: USB disconnect, device number 10
[   94.756092][ T6859] veth0_macvtap: entered promiscuous mode
[   94.774112][ T6859] veth1_macvtap: entered promiscuous mode
[   94.804235][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.818736][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.830292][ T6967] loop0: detected capacity change from 0 to 2048
[   94.836277][ T6937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.846231][ T6937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.852689][ T6968] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.866587][ T6967] NILFS (loop0): failed to count free inodes: err=-34
[   94.870354][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.893727][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.989539][  T732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.992763][  T732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.036592][  T732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.041277][  T732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.503241][ T6996] loop2: detected capacity change from 0 to 256
[   95.512449][ T6996] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x07ffffff)
[   95.519745][ T6996] exFAT-fs (loop2): failed to count the number of clusters in root
[   95.527373][ T6996] exFAT-fs (loop2): failed to recognize exfat type
[   95.665562][ T6982] loop0: detected capacity change from 0 to 32768
[   95.673676][ T5846] Bluetooth: hci2: command tx timeout
[   95.705783][ T6982] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   95.736441][ T6982] (syz.0.399,6982,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=10, slot=0
[   95.746660][ T6982] (syz.0.399,6982,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[   95.750091][ T6982] (syz.0.399,6982,1):ocfs2_mount_volume:1758 ERROR: status = -22
[   95.760889][ T6982] (syz.0.399,6982,1):ocfs2_fill_super:1177 ERROR: status = -22
[   96.199529][ T5879] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   96.304098][ T7046] ieee802154 phy0 wpan0: encryption failed: -22
[   96.358960][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'.
[   96.366445][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short
[   96.381290][ T5879] usb 3-1: not running at top speed; connect to a high speed hub
[   96.396587][ T5879] usb 3-1: config 6 has an invalid interface number: 7 but max is 0
[   96.402474][ T7049] pim6reg: entered allmulticast mode
[   96.408063][ T5879] usb 3-1: config 6 has no interface number 0
[   96.411313][ T5879] usb 3-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64
[   96.424093][ T7049] pim6reg: left allmulticast mode
[   96.428802][ T5879] usb 3-1: config 6 interface 7 has no altsetting 0
[   96.442036][ T5879] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92
[   96.445700][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.449264][ T5879] usb 3-1: Product: syz
[   96.453364][ T7054] loop3: detected capacity change from 0 to 128
[   96.460175][ T5879] usb 3-1: Manufacturer: syz
[   96.469019][ T5879] usb 3-1: SerialNumber: syz
[   96.485415][ T7054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.497426][ T7054] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.535255][ T6859] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   96.683945][ T5879] usb 3-1: Error in usbnet_get_endpoints (-22)
[   96.711095][ T5879] usb 3-1: USB disconnect, device number 11
[   96.830689][ T7074] loop0: detected capacity change from 0 to 2048
[   96.841216][ T7074] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   96.847998][ T7074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.882453][   T33] audit: type=1800 audit(1755066336.266:4): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.431" name="file1" dev="loop0" ino=1346 res=0 errno=0
[   96.905581][ T7075] loop3: detected capacity change from 0 to 4096
[   96.989016][ T7075] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   97.136787][ T7088] loop0: detected capacity change from 0 to 256
[   97.145574][ T7088] exfat: Deprecated parameter 'namecase'
[   97.147524][ T7088] exfat: Deprecated parameter 'utf8'
[   97.153950][ T7088] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   97.329471][ T1154] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.492534][ T1154] usb 4-1: Using ep0 maxpacket: 8
[   97.618175][ T1154] usb 4-1: config 150 has an invalid interface number: 204 but max is 1
[   97.639257][ T1154] usb 4-1: config 150 has no interface number 0
[   97.660918][ T1154] usb 4-1: config 150 interface 204 has no altsetting 0
[   97.679784][ T1154] usb 4-1: config 150 interface 1 has no altsetting 0
[   97.739959][ T5846] Bluetooth: hci2: command tx timeout
[   97.766399][ T1154] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[   97.797693][ T1154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.801895][ T1154] usb 4-1: Product: syz
[   97.803928][ T1154] usb 4-1: Manufacturer: syz
[   97.806236][ T1154] usb 4-1: SerialNumber: syz
[   98.019019][ T1154] xr_serial 4-1:150.204: xr_serial converter detected
[   98.255956][ T7109] netlink: 52 bytes leftover after parsing attributes in process `syz.2.443'.
[   98.288007][ T7111] loop0: detected capacity change from 0 to 1024
[   98.316184][ T7113] loop2: detected capacity change from 0 to 128
[   98.846360][ T1154] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[   98.851277][ T1154] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[   98.869641][ T1154] usb 4-1: USB disconnect, device number 2
[   98.881065][ T1154] xr_serial 4-1:150.204: device disconnected
[   99.088464][ T7129] loop2: detected capacity change from 0 to 32768
[   99.093098][ T7129] bcachefs (/dev/loop2): error validating superblock: Invalid superblock layout: too many superblocks
[   99.098451][ T7129] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_nr_superblocks
[   99.430780][ T5880] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   99.455079][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[   99.501033][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[   99.589616][ T5880] usb 3-1: Using ep0 maxpacket: 32
[   99.596302][ T5880] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[   99.607484][ T7144] tmpfs: Bad value for 'mpol'
[   99.609460][ T5880] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   99.609481][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.609493][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[   99.609507][ T5880] usb 3-1: config 1 has no interface number 0
[   99.609545][ T5880] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   99.609560][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.622744][ T5880] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[   99.818086][ T5880] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[   99.824985][ T5880] snd_usb_pod 3-1:1.1: invalid control EP
[   99.827861][ T5880] snd_usb_pod 3-1:1.1: cannot start listening: -22
[   99.828122][ T5846] Bluetooth: hci2: command tx timeout
[   99.850906][ T5880] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[   99.855542][ T5880] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22
[   99.937910][ T7147] loop0: detected capacity change from 0 to 32768
[  100.112817][ T1154] usb 3-1: USB disconnect, device number 12
[  100.121707][ T7149] loop0: detected capacity change from 0 to 16
[  100.135866][ T7149] erofs (device loop0): mounted with root inode @ nid 36.
[  100.335897][ T7149] erofs (device loop0): readahead error at folio 26 @ nid 36
[  100.344186][ T7149] erofs (device loop0): readahead error at folio 25 @ nid 36
[  100.347272][ T7149] erofs (device loop0): readahead error at folio 24 @ nid 36
[  100.350208][ T7149] erofs (device loop0): readahead error at folio 23 @ nid 36
[  100.352962][ T7149] erofs (device loop0): readahead error at folio 22 @ nid 36
[  100.355404][ T7149] erofs (device loop0): readahead error at folio 21 @ nid 36
[  100.358183][ T7149] erofs (device loop0): readahead error at folio 20 @ nid 36
[  100.362196][ T7149] erofs (device loop0): readahead error at folio 18 @ nid 36
[  100.364948][ T7149] erofs (device loop0): readahead error at folio 16 @ nid 36
[  100.367565][ T7149] erofs (device loop0): readahead error at folio 12 @ nid 36
[  100.372453][ T7149] bio_check_eod: 103 callbacks suppressed
[  100.372465][ T7149] syz.0.459: attempt to access beyond end of device
[  100.372465][ T7149] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16
[  100.385687][ T7149] syz.0.459: attempt to access beyond end of device
[  100.385687][ T7149] loop0: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  100.392002][ T7149] syz.0.459: attempt to access beyond end of device
[  100.392002][ T7149] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16
[  100.398112][ T7149] syz.0.459: attempt to access beyond end of device
[  100.398112][ T7149] loop0: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[  101.771416][ T7186] geneve2: entered promiscuous mode
[  102.066447][ T7200] loop2: detected capacity change from 0 to 4096
[  102.072653][ T7204] netlink: 'syz.3.482': attribute type 1 has an invalid length.
[  102.090481][ T7200] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  102.103699][ T7206] Bluetooth: MGMT ver 1.23
[  102.118833][ T7200] ntfs3(loop2): Failed to load $Extend (-22).
[  102.126310][ T7200] ntfs3(loop2): Failed to initialize $Extend.
[  102.133305][ T7208] netlink: 23 bytes leftover after parsing attributes in process `syz.3.484'.
[  102.181918][ T7210] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  102.185542][ T7210] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  102.268678][ T7217] loop2: detected capacity change from 0 to 1024
[  102.276981][ T7217] EXT4-fs: Ignoring removed oldalloc option
[  102.298305][ T7217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.367004][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.451671][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  102.628149][   T10] usb 4-1: Using ep0 maxpacket: 8
[  102.636571][   T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  102.641965][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.646104][   T10] usb 4-1: Product: syz
[  102.647863][   T10] usb 4-1: Manufacturer: syz
[  102.654731][   T10] usb 4-1: SerialNumber: syz
[  102.669503][ T6041] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  102.671794][   T10] usb 4-1: config 0 descriptor??
[  102.683889][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  102.829507][ T6041] usb 3-1: Using ep0 maxpacket: 16
[  102.833953][ T6041] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.838599][ T6041] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  102.851360][ T6041] usb 3-1: New USB device found, idVendor=1f6b, idProduct=0101, bcdDevice= 0.40
[  102.858877][ T6041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.864877][ T6041] usb 3-1: Product: syz
[  102.869229][ T6041] usb 3-1: Manufacturer: syz
[  102.877044][ T6041] usb 3-1: SerialNumber: syz
[  102.883733][ T7238] loop0: detected capacity change from 0 to 32768
[  102.947567][ T7238] overlayfs: upper fs needs to support d_type.
[  102.952053][ T7238] overlayfs: upper fs does not support tmpfile.
[  102.964382][ T7238] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  102.971679][ T7238] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  102.971679][ T7238] 
[  102.984301][ T7238] ERROR: (device loop0): remounting filesystem as read-only
[  102.991958][ T7238] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  103.097315][ T6041] usb 3-1: 0:66 : does not exist
[  103.099292][ T6041] usb 3-1: unit 4 not found!
[  103.113118][ T6041] usb 3-1: USB disconnect, device number 13
[  103.143120][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  103.297665][   T10] gspca_sonixj: reg_w1 err -71
[  103.300619][   T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  103.304512][   T10] usb 4-1: USB disconnect, device number 3
[  103.708222][ T7257] input: syz0 as /devices/virtual/input/input8
[  103.747301][ T5919] udevd[5919]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  103.844845][ T7267] binder: 7266:7267 ioctl c018620b 0 returned -14
[  103.853415][ T7261] loop2: detected capacity change from 0 to 8192
[  103.886463][ T7261]  loop2: p1[EZD] p2 p3 p4
[  103.892889][ T7261] loop2: p3 start 117772289 is beyond EOD, truncated
[  103.895436][ T7261] loop2: p4 size 262144 extends beyond EOD, truncated
[  104.065228][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'.
[  104.378646][ T7304] loop3: detected capacity change from 0 to 1024
[  104.383019][ T7304] EXT4-fs: Ignoring removed orlov option
[  104.385564][ T7304] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.414142][ T7304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.483507][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.559643][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  104.591980][ T7316] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.528'.
[  104.667985][ T7320] loop3: detected capacity change from 0 to 512
[  104.685039][ T7320] EXT4-fs: Ignoring removed mblk_io_submit option
[  104.710505][ T7320] EXT4-fs error (device loop3): __ext4_iget:5464: inode #11: block 1: comm syz.3.530: invalid block
[  104.711835][    T9] usb 3-1: config index 0 descriptor too short (expected 4114, got 18)
[  104.719320][ T7320] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.530: couldn't read orphan inode 11 (err -117)
[  104.721465][    T9] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09
[  104.727848][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.734323][    T9] usb 3-1: Product: syz
[  104.736294][    T9] usb 3-1: Manufacturer: syz
[  104.737936][    T9] usb 3-1: SerialNumber: syz
[  104.743150][ T7320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.753372][    T9] usb 3-1: config 0 descriptor??
[  104.760935][ T7322] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  104.763823][ T7322] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  104.967009][ T6041] usb 3-1: USB disconnect, device number 14
[  105.526323][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.596930][ T7332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.534'.
[  105.945069][ T7354] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.545'.
[  106.029704][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  106.191982][   T10] usb 1-1: Using ep0 maxpacket: 32
[  106.628464][   T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  106.634439][   T10] usb 1-1: config 0 has no interface number 0
[  106.636214][ T6041] IPVS: starting estimator thread 0...
[  106.646847][   T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  106.659809][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.663853][   T10] usb 1-1: Product: syz
[  106.665681][   T10] usb 1-1: Manufacturer: syz
[  106.667715][   T10] usb 1-1: SerialNumber: syz
[  106.673084][   T10] usb 1-1: config 0 descriptor??
[  106.685339][   T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  106.740000][ T7369] IPVS: using max 78 ests per chain, 187200 per kthread
[  106.975719][   T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  106.996644][   T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  107.160220][ T7388] loop3: detected capacity change from 0 to 128
[  107.386469][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  107.392802][ T5880] usb 1-1: USB disconnect, device number 8
[  107.405837][ T5880] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  107.415822][ T5880] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  107.423433][ T5880] quatech2 1-1:0.51: device disconnected
[  107.507474][ T7404] comedi comedi0: comedi_config --init_data is deprecated
[  107.676987][ T7415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.562'.
[  107.758706][ T7420] netlink: 'syz.2.564': attribute type 30 has an invalid length.
[  107.853131][ T7425] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.565'.
[  108.082043][ T7434] loop0: detected capacity change from 0 to 4096
[  108.086768][ T7434] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  108.093224][ T7434] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  108.175221][ T7434] ntfs3(loop0): volume is dirty and "force" flag is not set!
[  108.647199][ T7444] loop0: detected capacity change from 0 to 64
[  108.685506][ T7444] MINIX-fs: deleted inode referenced: 6
[  108.691877][ T7444] MINIX-fs: deleted inode referenced: 6
[  108.699042][ T7444] MINIX-fs: deleted inode referenced: 6
[  108.714879][ T7444] MINIX-fs: deleted inode referenced: 6
[  109.035840][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.580'.
[  109.039140][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.580'.
[  109.175101][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'.
[  109.180757][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  109.183274][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.186195][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.189177][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.191832][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.194399][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.197436][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.199668][ T1154] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  109.200474][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.205785][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.208672][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.211996][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.215145][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.218493][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.221881][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.224507][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.225933][ T7490] loop3: detected capacity change from 0 to 64
[  109.227134][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.227180][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.227186][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.227224][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.236671][ T7490] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  109.239329][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.239439][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.245649][ T7490] MINIX-fs: bad superblock or unable to read bitmaps
[  109.245780][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.257905][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.260840][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.263630][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.266857][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.269642][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.272256][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.275144][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.277819][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.280500][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.283204][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.286080][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.288797][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.291542][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.294175][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.296918][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.300056][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.303388][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.306579][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.309863][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.313189][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.316434][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.319816][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.323111][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.326601][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.330078][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.333188][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.336478][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.340016][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.343367][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.346491][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.349759][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.352696][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.356263][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.359517][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.362933][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.366146][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.369667][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.372832][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.375928][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.378739][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.381605][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.384187][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.386786][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.389443][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.392456][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.395359][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.397995][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.400643][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.403303][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.406340][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.409575][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.412486][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.415173][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.417991][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.421451][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.424094][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.426636][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.429252][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.432175][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.434983][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.437691][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.440278][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.443006][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.445827][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.448540][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.451192][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.454019][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.456782][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.460029][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.463575][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.466204][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.468890][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.472090][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.474971][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.477834][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.480938][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.483609][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.486302][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.488942][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.491666][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.494468][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.498102][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.501512][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.504078][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.507027][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.509953][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.512754][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.515609][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.518861][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.522077][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.525372][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.528435][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.531643][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.534899][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.538394][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.541801][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.545108][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.548399][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.551891][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.554865][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.557701][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.560788][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.563843][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.566531][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.569114][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.571625][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.574228][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.577054][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.579887][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.582544][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.585127][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.587663][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.590466][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.593287][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.596013][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.598558][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.601250][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.604032][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.606839][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.609456][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.612138][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.614753][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.617552][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.620460][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.623063][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.625481][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.628154][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.631015][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.633560][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.636040][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.638643][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.641211][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.643881][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.646956][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.649843][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.652518][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.655405][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.658204][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.661015][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.663620][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.666681][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.670414][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.673854][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.676991][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.680300][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.683477][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.686987][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.690027][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.692675][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.695243][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.697848][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.700622][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.703476][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.706428][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.708917][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.711567][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.714324][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.716971][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.719778][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.722442][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.725361][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.728332][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.731395][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.734503][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.737343][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.740021][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.742620][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.745185][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.747720][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.750419][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.752722][ T1154] usb 1-1: Using ep0 maxpacket: 32
[  109.753039][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.757287][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.760022][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.762726][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.765489][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.768243][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.771071][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.773830][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.776427][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.778997][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.781625][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.784324][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.787090][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.790181][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.792860][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.795379][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  109.797805][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  109.800426][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  110.163785][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[  110.233882][ T1154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.238645][ T1154] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  110.242901][ T1154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.253425][ T1154] usb 1-1: config 0 descriptor??
[  110.426243][ T7502] loop3: detected capacity change from 0 to 8
[  110.721345][ T1154] magicmouse 0003:05AC:0265.0003: item fetching failed at offset 2/5
[  110.736129][ T1154] magicmouse 0003:05AC:0265.0003: magicmouse hid parse failed
[  110.748331][ T1154] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -22
[  110.913897][ T7506] random: crng reseeded on system resumption
[  111.612611][ T1154] usb 1-1: USB disconnect, device number 9
[  111.799821][ T7514] loop3: detected capacity change from 0 to 1024
[  111.804748][ T7514] EXT4-fs: Ignoring removed bh option
[  111.854425][ T7514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.957321][ T7522] loop0: detected capacity change from 0 to 2048
[  111.969476][ T7522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.237789][ T7527] loop0: detected capacity change from 0 to 128
[  112.243490][ T7527] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  112.249904][ T7527] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  112.280961][ T1089] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  112.398523][ T7533] loop0: detected capacity change from 0 to 128
[  112.408364][ T7533] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.415626][ T7533] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.451626][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.654368][ T7541] No buffer was provided with the request
[  112.735265][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.879593][ T7544] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  113.779197][ T7558] capability: warning: `syz.3.610' uses 32-bit capabilities (legacy support in use)
[  113.793377][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.610'.
[  114.216569][ T7555] loop2: detected capacity change from 0 to 32768
[  114.242488][ T7555] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  114.328917][ T5840] ocfs2: Unmounting device (7,2) on (node local)
[  115.003009][ T7573] netlink: 'syz.0.615': attribute type 6 has an invalid length.
[  115.258739][ T7576] Invalid option length (65058) for dns_resolver key
[  115.260890][ T7580] binder: 7578:7580 ioctl c0306201 200000000640 returned -22
[  115.558345][ T7589] loop3: detected capacity change from 0 to 2048
[  115.583345][ T7589] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  115.597875][ T7589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.601522][ T7591] sp0: Synchronizing with TNC
[  115.956649][ T7593] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  116.115926][ T7599] loop2: detected capacity change from 0 to 2048
[  116.188596][ T7599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.256186][ T7599] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.365172][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.574524][ T7609] loop0: detected capacity change from 0 to 8
[  116.678541][ T7609] SQUASHFS error: xz decompression failed, data probably corrupt
[  116.698439][ T7609] SQUASHFS error: Failed to read block 0x108: -5
[  116.705367][ T7609] SQUASHFS error: Unable to read metadata cache entry [106]
[  116.708419][ T7609] SQUASHFS error: Unable to read inode 0x11f
[  116.828686][ T7609] loop0: detected capacity change from 0 to 1024
[  116.847819][ T7609] hfsplus: Bad value for 'gid'
[  117.072069][ T7615] loop2: detected capacity change from 0 to 2048
[  117.085896][ T7615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.287662][ T7617] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  117.943392][ T7625] netlink: 'syz.2.636': attribute type 11 has an invalid length.
[  117.946854][ T7625] netlink: 'syz.2.636': attribute type 5 has an invalid length.
[  117.979618][ T5846] Bluetooth: hci2: command tx timeout
[  118.062979][ T7596] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  118.216441][ T7639] loop0: detected capacity change from 0 to 256
[  118.223105][ T7639] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.233686][ T7639] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  118.251633][ T7639] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  118.343643][ T7645] netlink: 'syz.2.645': attribute type 12 has an invalid length.
[  118.347016][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[  118.370800][ T6937] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.374613][ T7645] netlink: 'syz.2.645': attribute type 12 has an invalid length.
[  118.377241][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[  118.381825][ T6937] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.385433][ T6937] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.388522][ T6937] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.468097][ T7655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.651'.
[  118.472189][ T7655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.651'.
[  118.605300][ T7653] loop0: detected capacity change from 0 to 32768
[  118.608742][ T7653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.650 (7653)
[  118.681478][ T7653] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.686759][ T7653] BTRFS info (device loop0 state S): using crc32c (crc32c-lib) checksum algorithm
[  118.691377][ T7653] BTRFS info (device loop0 state S): using free-space-tree
[  118.706568][   T26] BTRFS warning (device loop0 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored
[  118.715485][   T53] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  118.721643][   T26] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x48746f3c level 0, ignored
[  118.738624][ T7163] BTRFS warning (device loop0 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored
[  118.764004][ T7653] BTRFS info (device loop0 state S): bdev /dev/loop0 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0
[  118.826329][   T26] BTRFS warning (device loop0 state S): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored
[  118.851277][ T7596] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  118.908474][ T7596] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  119.024122][ T7596] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  119.031179][ T7596] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  119.037012][ T7596] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  119.042099][ T7596] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  119.053381][ T5844] BTRFS info (device loop0 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.246473][ T7683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.503618][ T7700] loop2: detected capacity change from 0 to 512
[  119.508116][ T7700] EXT4-fs: Ignoring removed oldalloc option
[  119.513650][ T7700] EXT4-fs: inline encryption not supported
[  119.516130][ T7700] EXT4-fs: Ignoring removed mblk_io_submit option
[  119.528940][ T7700] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  119.553692][ T7700] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.664: bg 0: block 64: padding at end of block bitmap is not set
[  119.560752][ T7700] Quota error (device loop2): write_blk: dquota write failed
[  119.563537][ T7700] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  119.573355][ T7700] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.664: Failed to acquire dquot type 0
[  119.578461][ T7700] EXT4-fs (loop2): 1 truncate cleaned up
[  119.587541][ T7700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.588333][ T7707] syz.0.666 uses obsolete (PF_INET,SOCK_PACKET)
[  119.602751][ T7707] netlink: 84 bytes leftover after parsing attributes in process `syz.0.666'.
[  119.619198][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.682517][ T7711] loop0: detected capacity change from 0 to 128
[  119.696674][ T7711] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.703758][ T7711] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  119.729010][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.752871][ T7716] loop0: detected capacity change from 0 to 512
[  119.762050][ T7716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.766954][ T7716] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.774748][ T7716] EXT4-fs (loop0): shut down requested (1)
[  119.791190][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.959475][ T6041] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  120.129542][ T6041] usb 3-1: Using ep0 maxpacket: 16
[  120.148907][ T6041] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  120.152879][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  120.166067][ T6041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.175095][ T6041] usb 3-1: Product: syz
[  120.176913][ T6041] usb 3-1: Manufacturer: syz
[  120.178756][ T6041] usb 3-1: SerialNumber: syz
[  120.185184][ T6041] usb 3-1: config 0 descriptor??
[  120.229699][ T1154] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  120.393680][ T1154] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.397264][ T6041] speedtch 3-1:0.0: speedtch_bind: wrong device class 68
[  120.399768][ T6041] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  120.402881][ T1154] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.407595][ T6041] usb 3-1: USB disconnect, device number 15
[  120.412240][ T1154] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  120.416166][ T1154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  120.421646][ T1154] usb 1-1: SerialNumber: syz
[  120.482072][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  120.630209][ T1154] usb 1-1: 0:2 : does not exist
[  120.638482][ T1154] usb 1-1: USB disconnect, device number 10
[  120.641081][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  120.649041][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.657589][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  120.661751][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  120.665961][ T5879] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  120.669115][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.670256][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  120.680766][ T5879] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  120.686951][ T5879] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  120.690321][ T5879] usb 4-1: Manufacturer: syz
[  120.697710][ T5879] usb 4-1: config 0 descriptor??
[  120.907831][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.917482][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.999936][ T5879] rc_core: IR keymap rc-hauppauge not found
[  121.002131][ T5879] Registered IR keymap rc-empty
[  121.013945][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.035840][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.052488][ T5879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  121.061308][ T5879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9
[  121.079299][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.099849][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.102336][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  121.345167][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.369732][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.399611][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.419625][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.808101][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.829666][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.850257][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.869592][ T5879] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  121.892185][ T5879] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  121.896291][ T5879] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  121.906908][ T5879] usb 4-1: USB disconnect, device number 4
[  122.005108][ T7747] loop0: detected capacity change from 0 to 32768
[  122.080700][ T7747] syz.0.684: attempt to access beyond end of device
[  122.080700][ T7747] loop0: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  122.131570][  T115] blkno = 8ed2c, nblocks = 1
[  122.135265][  T115] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  122.135265][  T115] 
[  122.143444][  T115] ERROR: (device loop0): remounting filesystem as read-only
[  122.221978][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  122.349729][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  122.370728][ T7772] loop3: detected capacity change from 0 to 512
[  122.374717][ T7772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  122.384742][ T7772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082]
[  122.393787][ T7772] EXT4-fs (loop3): 1 truncate cleaned up
[  122.397816][ T7772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.431153][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.511719][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.516446][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.830090][   T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  122.833636][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  122.836424][   T10] usb 3-1: SerialNumber: syz
[  123.026934][   T33] audit: type=1326 audit(1755066363.405:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.0.693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6158ebe9 code=0x7ffc0000
[  123.038958][   T33] audit: type=1326 audit(1755066363.415:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.0.693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6158ebe9 code=0x7ffc0000
[  123.051890][   T10] usb 3-1: 0:2 : does not exist
[  123.059267][   T33] audit: type=1326 audit(1755066363.415:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.0.693" exe="/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fee6158ebe9 code=0x7ffc0000
[  123.082927][   T33] audit: type=1326 audit(1755066363.415:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.0.693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6158ebe9 code=0x7ffc0000
[  123.103505][   T33] audit: type=1326 audit(1755066363.415:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.0.693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6158ebe9 code=0x7ffc0000
[  123.121020][   T10] usb 3-1: USB disconnect, device number 16
[  123.148852][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.180314][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  123.606872][ T7814] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  123.726001][ T7820] loop0: detected capacity change from 0 to 512
[  123.729899][ T7820] EXT4-fs: Ignoring removed bh option
[  123.732046][ T7820] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.735145][ T7820] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  123.739341][ T7820] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  123.742698][ T7820] EXT4-fs (loop0): orphan cleanup on readonly fs
[  123.746607][ T7820] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4
[  123.750417][ T7820] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  123.754031][ T7820] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.710: Failed to acquire dquot type 1
[  123.758179][ T7820] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.710: Invalid block bitmap block 0 in block_group 0
[  123.765204][ T7820] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.710: Invalid block bitmap block 0 in block_group 0
[  123.770935][ T7820] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.710: Invalid block bitmap block 0 in block_group 0
[  123.775979][ T7820] Quota error (device loop0): write_blk: dquota write failed
[  123.778455][ T7820] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.710: Failed to acquire dquot type 1
[  123.783579][ T7820] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.710: Failed to acquire dquot type 1
[  123.790178][ T7820] EXT4-fs (loop0): 1 orphan inode deleted
[  123.794279][ T7820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  123.815145][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.839587][ T5879] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  123.862985][ T7823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.889660][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  124.039562][    T9] usb 4-1: Using ep0 maxpacket: 8
[  124.045826][    T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  124.050410][    T9] usb 4-1: config 179 has no interface number 0
[  124.053099][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  124.058038][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  124.069250][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  124.073641][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  124.078008][    T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  124.079634][ T5879] usb 3-1: Using ep0 maxpacket: 32
[  124.084229][    T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  124.088044][ T5879] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.088269][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.092731][ T5879] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  124.097131][ T7816] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  124.101869][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0
[  124.106497][ T5879] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  124.111994][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.125327][ T5879] usb 3-1: config 0 descriptor??
[  124.194910][ T7827] fuse: Bad value for 'fd'
[  124.209903][ T7827] loop0: detected capacity change from 0 to 16
[  124.227087][ T7827] erofs (device loop0): mounted with root inode @ nid 36.
[  124.257839][ T7827] erofs (device loop0): readahead error at folio 87 @ nid 36
[  124.261465][ T7827] erofs (device loop0): readahead error at folio 86 @ nid 36
[  124.268278][ T7827] erofs (device loop0): bogus lookback distance 363 @ lcn 82 of nid 36
[  124.272277][ T7827] erofs (device loop0): readahead error at folio 83 @ nid 36
[  124.275715][ T7827] erofs (device loop0): bogus lookback distance 363 @ lcn 82 of nid 36
[  124.279855][ T7827] erofs (device loop0): readahead error at folio 82 @ nid 36
[  124.283694][ T7827] erofs (device loop0): readahead error at folio 79 @ nid 36
[  124.287117][ T7827] erofs (device loop0): readahead error at folio 78 @ nid 36
[  124.291363][ T7827] erofs (device loop0): bogus lookback distance 1485 @ lcn 75 of nid 36
[  124.295199][ T7827] erofs (device loop0): readahead error at folio 76 @ nid 36
[  124.298487][ T7827] erofs (device loop0): bogus lookback distance 1485 @ lcn 75 of nid 36
[  124.302293][ T7827] erofs (device loop0): readahead error at folio 75 @ nid 36
[  124.305723][ T7827] erofs (device loop0): readahead error at folio 74 @ nid 36
[  124.309136][ T7827] erofs (device loop0): readahead error at folio 72 @ nid 36
[  124.312696][ T7827] erofs (device loop0): readahead error at folio 71 @ nid 36
[  124.316391][ T7827] erofs (device loop0): readahead error at folio 70 @ nid 36
[  124.322371][ T7827] erofs (device loop0): readahead error at folio 63 @ nid 36
[  124.325970][ T7827] erofs (device loop0): readahead error at folio 61 @ nid 36
[  124.329758][ T7827] erofs (device loop0): bogus lookback distance 1024 @ lcn 58 of nid 36
[  124.333566][ T7827] erofs (device loop0): readahead error at folio 59 @ nid 36
[  124.336975][ T7827] erofs (device loop0): bogus lookback distance 1024 @ lcn 58 of nid 36
[  124.340747][ T7827] erofs (device loop0): readahead error at folio 58 @ nid 36
[  124.344046][ T7827] erofs (device loop0): readahead error at folio 56 @ nid 36
[  124.347831][ T7827] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[  124.351415][ T7827] erofs (device loop0): readahead error at folio 47 @ nid 36
[  124.354873][ T7827] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[  124.358471][ T7827] erofs (device loop0): readahead error at folio 46 @ nid 36
[  124.361833][ T7827] erofs (device loop0): readahead error at folio 45 @ nid 36
[  124.365063][ T7827] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  124.368819][ T7827] erofs (device loop0): readahead error at folio 43 @ nid 36
[  124.372321][ T7827] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  124.376010][ T7827] erofs (device loop0): readahead error at folio 42 @ nid 36
[  124.379317][ T7827] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[  124.383060][ T7827] erofs (device loop0): readahead error at folio 41 @ nid 36
[  124.386285][ T7827] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[  124.390203][ T7827] erofs (device loop0): readahead error at folio 40 @ nid 36
[  124.393447][ T7827] erofs (device loop0): readahead error at folio 39 @ nid 36
[  124.396719][ T7827] erofs (device loop0): readahead error at folio 38 @ nid 36
[  124.400169][ T7827] erofs (device loop0): readahead error at folio 36 @ nid 36
[  124.403591][ T7827] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36
[  124.407147][ T7827] erofs (device loop0): readahead error at folio 31 @ nid 36
[  124.410622][ T7827] erofs (device loop0): readahead error at folio 25 @ nid 36
[  124.413862][ T7827] erofs (device loop0): readahead error at folio 24 @ nid 36
[  124.418165][ T7827] erofs (device loop0): readahead error at folio 19 @ nid 36
[  124.421842][ T7827] syz.0.712: attempt to access beyond end of device
[  124.421842][ T7827] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16
[  124.426031][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10
[  124.428556][ T7827] syz.0.712: attempt to access beyond end of device
[  124.428556][ T7827] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  124.438328][ T7827] syz.0.712: attempt to access beyond end of device
[  124.438328][ T7827] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  124.444573][ T7827] syz.0.712: attempt to access beyond end of device
[  124.444573][ T7827] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16
[  124.450223][ T7827] syz.0.712: attempt to access beyond end of device
[  124.450223][ T7827] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16
[  124.454821][ T7827] syz.0.712: attempt to access beyond end of device
[  124.454821][ T7827] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  124.463401][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  124.613452][ T5879] betop 0003:20BC:5500.0004: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.2-1/input0
[  124.617630][ T5879] betop 0003:20BC:5500.0004: no inputs found
[  124.640770][   T10] usb 4-1: USB disconnect, device number 5
[  124.640838][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  124.645482][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  124.811040][    T9] usb 3-1: USB disconnect, device number 17
[  125.079675][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  125.229563][   T10] usb 1-1: Using ep0 maxpacket: 32
[  125.233420][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.238047][   T10] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  125.241548][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.246418][   T10] usb 1-1: config 0 descriptor??
[  125.259605][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  125.403964][ T7849] openvswitch: netlink: Missing key (keys=40, expected=100)
[  125.679079][   T10] belkin 0003:1020:0006.0005: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0
[  125.770207][ T7853] loop2: detected capacity change from 0 to 40427
[  125.851626][ T7853] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.856591][ T7853] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  125.865042][ T1154] usb 1-1: USB disconnect, device number 11
[  125.906548][ T5840] syz-executor: attempt to access beyond end of device
[  125.906548][ T5840] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  125.914717][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  125.914741][ T5840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.914750][ T5840] Call Trace:
[  125.914755][ T5840]  <TASK>
[  125.914761][ T5840]  dump_stack_lvl+0x189/0x250
[  125.914785][ T5840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.914801][ T5840]  ? __pfx_queue_work_on+0x10/0x10
[  125.914821][ T5840]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.914837][ T5840]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.914861][ T5840]  f2fs_handle_critical_error+0x37c/0x540
[  125.914885][ T5840]  f2fs_write_end_io+0x886/0xb60
[  125.914918][ T5840]  __submit_merged_bio+0x27a/0x6a0
[  125.914940][ T5840]  __submit_merged_write_cond+0x255/0x530
[  125.914962][ T5840]  f2fs_write_data_pages+0x261d/0x3000
[  125.915009][ T5840]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.915088][ T5840]  ? __lock_acquire+0xab9/0xd20
[  125.915114][ T5840]  ? do_raw_spin_lock+0x121/0x290
[  125.915139][ T5840]  ? do_raw_spin_unlock+0x4d/0x240
[  125.915155][ T5840]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.915173][ T5840]  do_writepages+0x32e/0x550
[  125.915200][ T5840]  ? do_raw_spin_unlock+0x4d/0x240
[  125.915220][ T5840]  filemap_fdatawrite+0x199/0x240
[  125.915237][ T5840]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  125.915292][ T5840]  ? do_raw_spin_unlock+0x4d/0x240
[  125.915313][ T5840]  f2fs_sync_dirty_inodes+0x31f/0x830
[  125.915344][ T5840]  f2fs_write_checkpoint+0x95a/0x1df0
[  125.915383][ T5840]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  125.915443][ T5840]  ? kill_f2fs_super+0x298/0x6c0
[  125.915465][ T5840]  kill_f2fs_super+0x2c3/0x6c0
[  125.915515][ T5840]  ? __pfx_kill_f2fs_super+0x10/0x10
[  125.915532][ T5840]  ? radix_tree_delete_item+0x2b6/0x400
[  125.915554][ T5840]  ? shrinker_free+0x2ce/0x3e0
[  125.915572][ T5840]  deactivate_locked_super+0xbc/0x130
[  125.915589][ T5840]  cleanup_mnt+0x425/0x4c0
[  125.915604][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.915622][ T5840]  task_work_run+0x1d4/0x260
[  125.915641][ T5840]  ? __pfx_task_work_run+0x10/0x10
[  125.915655][ T5840]  ? __x64_sys_umount+0x122/0x160
[  125.915677][ T5840]  ? exit_to_user_mode_loop+0x40/0x110
[  125.915699][ T5840]  exit_to_user_mode_loop+0xec/0x110
[  125.915717][ T5840]  do_syscall_64+0x2bd/0x3b0
[  125.915731][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.915746][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.915763][ T5840]  ? exc_page_fault+0x9f/0xf0
[  125.915779][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.915791][ T5840] RIP: 0033:0x7f6ea198ff17
[  125.915805][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  125.915823][ T5840] RSP: 002b:00007fff7fab3478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  125.915838][ T5840] RAX: 0000000000000000 RBX: 00007f6ea1a11c05 RCX: 00007f6ea198ff17
[  125.915847][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7fab3530
[  125.915855][ T5840] RBP: 00007fff7fab3530 R08: 0000000000000000 R09: 0000000000000000
[  125.915863][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7fab45c0
[  125.915871][ T5840] R13: 00007f6ea1a11c05 R14: 000000000001eb53 R15: 00007fff7fab4600
[  125.915896][ T5840]  </TASK>
[  125.915901][ T5840] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  126.269602][ T7865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  126.272649][ T7865] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  126.277754][ T7865] vhci_hcd vhci_hcd.0: Device attached
[  126.289799][ T7865] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5)
[  126.292785][ T7865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  126.296415][ T7865] vhci_hcd vhci_hcd.0: Device attached
[  126.304340][ T7865] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7)
[  126.307239][ T7865] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  126.311327][ T7865] vhci_hcd vhci_hcd.0: Device attached
[  126.315521][ T7865] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9)
[  126.318276][ T7865] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  126.321964][ T7865] vhci_hcd vhci_hcd.0: Device attached
[  126.330006][ T7865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  126.332993][ T7865] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  126.339607][ T7865] vhci_hcd vhci_hcd.0: Device attached
[  126.371095][ T7872] vhci_hcd: connection closed
[  126.371411][ T7868] vhci_hcd: connection closed
[  126.373555][ T7870] vhci_hcd: connection closed
[  126.375699][ T7866] vhci_hcd: connection closed
[  126.385253][ T7874] vhci_hcd: connection closed
[  126.387178][ T6937] vhci_hcd: stop threads
[  126.392807][ T6937] vhci_hcd: release socket
[  126.395431][ T6937] vhci_hcd: disconnect device
[  126.398667][ T6937] vhci_hcd: stop threads
[  126.400840][ T6937] vhci_hcd: release socket
[  126.402977][ T6937] vhci_hcd: disconnect device
[  126.406731][ T6937] vhci_hcd: stop threads
[  126.408618][ T6937] vhci_hcd: release socket
[  126.412789][ T6937] vhci_hcd: disconnect device
[  126.415238][ T6937] vhci_hcd: stop threads
[  126.417202][ T6937] vhci_hcd: release socket
[  126.419290][ T6937] vhci_hcd: disconnect device
[  126.424147][ T6937] vhci_hcd: stop threads
[  126.426400][ T6937] vhci_hcd: release socket
[  126.428459][ T6937] vhci_hcd: disconnect device
[  126.449843][ T1154] vhci_hcd: vhci_device speed not set
[  126.522052][ T6041] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  126.533190][ T7879] loop0: detected capacity change from 0 to 4096
[  126.542684][ T7879] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  126.568279][ T7879] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  126.587429][ T7879] ntfs3(loop0): Failed to load $BadClus (-22).
[  126.679712][ T6041] usb 4-1: Using ep0 maxpacket: 32
[  126.683896][ T6041] usb 4-1: config index 0 descriptor too short (expected 4114, got 18)
[  126.687509][ T6041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.697522][ T6041] usb 4-1: config 0 has no interfaces?
[  126.705578][ T6041] usb 4-1: config index 1 descriptor too short (expected 4114, got 18)
[  126.709087][ T6041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.714603][ T6041] usb 4-1: config 0 has no interfaces?
[  126.718134][ T6041] usb 4-1: config index 2 descriptor too short (expected 4114, got 18)
[  126.721742][ T6041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.726266][ T6041] usb 4-1: config 0 has no interfaces?
[  126.730598][ T6041] usb 4-1: config index 3 descriptor too short (expected 4114, got 18)
[  126.735199][ T6041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.742166][ T6041] usb 4-1: config 0 has no interfaces?
[  126.745900][ T6041] usb 4-1: config index 4 descriptor too short (expected 4114, got 18)
[  126.749510][ T6041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.752966][ T6041] usb 4-1: config 0 has no interfaces?
[  126.756912][ T6041] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  126.763169][ T6041] usb 4-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3
[  126.766838][ T6041] usb 4-1: Product: syz
[  126.768665][ T6041] usb 4-1: Manufacturer: syz
[  126.771748][ T6041] usb 4-1: SerialNumber: syz
[  126.780096][ T6041] usb 4-1: config 0 descriptor??
[  126.832775][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'.
[  127.031325][   T10] usb 4-1: USB disconnect, device number 6
[  127.879995][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.743'.
[  127.902879][ T7913] loop3: detected capacity change from 0 to 1024
[  127.922051][ T7913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  127.926231][ T7913] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.951644][ T7913] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.745: lblock 3 mapped to illegal pblock 3 (length 3)
[  127.967374][ T7913] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  127.973898][ T7913] EXT4-fs (loop3): This should not happen!! Data will be lost
[  127.973898][ T7913] 
[  128.002015][   T53] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u9:2: lblock 8 mapped to illegal pblock 8 (length 8)
[  128.012738][   T53] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  128.016833][   T53] EXT4-fs (loop3): This should not happen!! Data will be lost
[  128.016833][   T53] 
[  128.033499][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  128.183208][ T7934] netlink: 'syz.2.753': attribute type 12 has an invalid length.
[  128.186558][ T7934] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.753'.
[  128.384501][ T7944] mmap: syz.2.758 (7944) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  128.593720][ T7950] Driver unsupported XDP return value 0 on prog  (id 58) dev N/A, expect packet loss!
[  128.619757][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  128.769780][   T10] usb 4-1: Using ep0 maxpacket: 16
[  128.777381][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  128.798318][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  128.817290][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.824385][   T10] usb 4-1: Product: syz
[  128.826525][   T10] usb 4-1: Manufacturer: syz
[  128.836494][   T10] usb 4-1: SerialNumber: syz
[  128.850285][   T10] usb 4-1: config 0 descriptor??
[  128.862652][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  128.866496][   T10] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  129.121517][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  129.190981][   T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  129.194920][   T10] em28xx 4-1:0.0: board has no eeprom
[  129.209648][ T1154] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  129.239722][ T6041] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  129.269686][   T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  129.272371][   T10] em28xx 4-1:0.0: dvb set to bulk mode.
[  129.272890][ T7930] loop3: detected capacity change from 0 to 1024
[  129.276144][    T9] em28xx 4-1:0.0: Binding DVB extension
[  129.294464][ T7930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.305415][   T10] usb 4-1: USB disconnect, device number 7
[  129.316556][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  129.332352][    T9] em28xx 4-1:0.0: Registering input extension
[  129.337604][   T10] em28xx 4-1:0.0: Closing input extension
[  129.363950][ T1154] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.368764][ T1154] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  129.372105][   T10] em28xx 4-1:0.0: Freeing device
[  129.375523][ T1154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  129.381767][ T1154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 232, setting to 64
[  129.386599][ T1154] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  129.398942][ T6041] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  129.404022][ T6041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.407563][ T6041] usb 3-1: Product: syz
[  129.411569][ T6041] usb 3-1: Manufacturer: syz
[  129.413725][ T6041] usb 3-1: SerialNumber: syz
[  129.417543][ T1154] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  129.422778][ T1154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.424522][ T6041] usb 3-1: config 0 descriptor??
[  129.430111][ T1154] usb 1-1: Product: syz
[  129.432378][ T1154] usb 1-1: Manufacturer: syz
[  129.434653][ T1154] usb 1-1: SerialNumber: syz
[  129.440211][ T6041] ch341 3-1:0.0: ch341-uart converter detected
[  129.445175][ T1154] usb 1-1: config 0 descriptor??
[  129.448674][ T7969] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  129.462989][ T1154] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  129.668887][ T1154] usb 1-1: USB disconnect, device number 12
[  129.850835][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.090541][ T7976] loop3: detected capacity change from 0 to 32768
[  130.118069][ T7976] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  130.188574][ T6859] ocfs2: Unmounting device (7,3) on (node local)
[  130.386754][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.495657][ T6041] ch341-uart ttyUSB0: failed to read break control: -71
[  130.498913][ T6041] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  130.505165][ T6041] usb 3-1: USB disconnect, device number 18
[  130.508187][ T6041] ch341 3-1:0.0: device disconnected
[  131.344368][ T7999] loop3: detected capacity change from 0 to 256
[  131.361365][ T7999] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  131.381173][ T7999] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  131.402036][ T7995] loop2: detected capacity change from 0 to 32768
[  131.440163][ T7995] JBD2: Ignoring recovery information on journal
[  131.445327][ T8001] loop0: detected capacity change from 0 to 2048
[  131.460665][ T8003] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.476488][ T7995] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  131.515154][ T8001] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  131.523394][ T7995] (syz.2.778,7995,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[  131.544354][ T8001] Remounting filesystem read-only
[  131.555370][ T5840] ocfs2: Unmounting device (7,2) on (node local)
[  131.572369][ T5844] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  131.730218][ T8014] netlink: 'syz.2.786': attribute type 1 has an invalid length.
[  132.485943][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'.
[  132.586028][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.589133][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.591423][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.591811][ T8039] batadv_slave_0: entered promiscuous mode
[  133.038026][ T8055] loop9: detected capacity change from 0 to 7
[  133.050671][ T8055] Dev loop9: unable to read RDB block 7
[  133.057123][ T8055]  loop9: AHDI p1 p2 p3
[  133.058722][ T8055] loop9: partition table partially beyond EOD, truncated
[  133.064820][ T8055] loop9: p1 start 1601398130 is beyond EOD, truncated
[  133.067594][ T8055] loop9: p2 start 1702059890 is beyond EOD, truncated
[  134.365468][ T8051] loop0: detected capacity change from 0 to 40427
[  134.380278][ T8051] F2FS-fs: heap/no_heap options were deprecated
[  134.402618][ T8051] F2FS-fs (loop0): Image doesn't support compression
[  134.426766][ T8051] F2FS-fs (loop0): invalid crc value
[  134.569602][ T6041] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  134.642267][ T8051] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  134.645913][ T8051] F2FS-fs (loop0): Start checkpoint disabled!
[  134.661982][ T8051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  134.710855][ T7163] kworker/u9:5: attempt to access beyond end of device
[  134.710855][ T7163] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  134.718665][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  134.718685][ T7163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.718694][ T7163] Workqueue: writeback wb_workfn (flush-7:0)
[  134.718713][ T7163] Call Trace:
[  134.718719][ T7163]  <TASK>
[  134.718725][ T7163]  dump_stack_lvl+0x189/0x250
[  134.718745][ T7163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.718760][ T7163]  ? __pfx_queue_work_on+0x10/0x10
[  134.718772][ T7163]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.718787][ T7163]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.718810][ T7163]  f2fs_handle_critical_error+0x37c/0x540
[  134.718833][ T7163]  f2fs_write_end_io+0x886/0xb60
[  134.718865][ T7163]  __submit_merged_bio+0x27a/0x6a0
[  134.718885][ T7163]  __submit_merged_write_cond+0x255/0x530
[  134.718907][ T7163]  f2fs_write_data_pages+0x261d/0x3000
[  134.718952][ T7163]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  134.718987][ T7163]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  134.719036][ T7163]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  134.719051][ T7163]  ? look_up_lock_class+0x74/0x170
[  134.719075][ T7163]  ? trace_f2fs_writepages+0x7f/0x200
[  134.719091][ T7163]  ? f2fs_write_node_pages+0x478/0x6e0
[  134.719111][ T7163]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  134.719137][ T7163]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  134.719153][ T7163]  do_writepages+0x32e/0x550
[  134.719175][ T7163]  ? reacquire_held_locks+0x127/0x1d0
[  134.719187][ T7163]  ? writeback_sb_inodes+0x384/0x1010
[  134.719210][ T7163]  __writeback_single_inode+0x145/0xff0
[  134.719226][ T7163]  ? do_raw_spin_unlock+0x4d/0x240
[  134.719245][ T7163]  writeback_sb_inodes+0x6c7/0x1010
[  134.719283][ T7163]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  134.719336][ T7163]  ? rcu_is_watching+0x15/0xb0
[  134.719357][ T7163]  wb_writeback+0x43b/0xaf0
[  134.719411][ T7163]  ? queue_io+0x391/0x590
[  134.719430][ T7163]  ? __pfx_wb_writeback+0x10/0x10
[  134.719453][ T7163]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.719470][ T7163]  wb_workfn+0x409/0xef0
[  134.719498][ T7163]  ? __pfx_wb_workfn+0x10/0x10
[  134.719515][ T7163]  ? __lock_acquire+0xab9/0xd20
[  134.719543][ T7163]  ? process_scheduled_works+0x9ef/0x17b0
[  134.719561][ T7163]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.719573][ T7163]  ? process_scheduled_works+0x9ef/0x17b0
[  134.719585][ T7163]  ? process_scheduled_works+0x9ef/0x17b0
[  134.719599][ T7163]  process_scheduled_works+0xae1/0x17b0
[  134.719638][ T7163]  ? __pfx_process_scheduled_works+0x10/0x10
[  134.719673][ T7163]  worker_thread+0x8a0/0xda0
[  134.719688][ T7163]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.719708][ T7163]  ? __kthread_parkme+0x7b/0x200
[  134.719730][ T7163]  kthread+0x711/0x8a0
[  134.719748][ T7163]  ? __pfx_worker_thread+0x10/0x10
[  134.719761][ T7163]  ? __pfx_kthread+0x10/0x10
[  134.719778][ T7163]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.719790][ T7163]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.719803][ T7163]  ? __pfx_kthread+0x10/0x10
[  134.719819][ T7163]  ret_from_fork+0x3fc/0x770
[  134.719835][ T7163]  ? __pfx_ret_from_fork+0x10/0x10
[  134.719853][ T7163]  ? __switch_to_asm+0x39/0x70
[  134.719868][ T7163]  ? __switch_to_asm+0x33/0x70
[  134.719881][ T7163]  ? __pfx_kthread+0x10/0x10
[  134.719897][ T7163]  ret_from_fork_asm+0x1a/0x30
[  134.719927][ T7163]  </TASK>
[  134.855084][ T6041] usb 4-1: Using ep0 maxpacket: 32
[  134.858325][ T6041] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  134.865844][ T6041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  134.872196][ T6041] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  134.875150][ T6041] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  134.878017][ T6041] usb 4-1: Product: syz
[  134.880803][ T6041] usb 4-1: Manufacturer: syz
[  134.882351][ T6041] usb 4-1: SerialNumber: syz
[  134.892595][ T6041] usb 4-1: config 0 descriptor??
[  134.907708][ T7163] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  134.928637][ T6041] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  135.054885][ T8080] batadv0: entered allmulticast mode
[  135.111678][   T13] usb 4-1: Failed to submit usb control message: -71
[  135.114925][   T13] usb 4-1: unable to send the bmi data to the device: -71
[  135.117585][   T13] usb 4-1: unable to get target info from device
[  135.120503][    T9] usb 4-1: USB disconnect, device number 8
[  135.123540][   T13] usb 4-1: could not get target info (-71)
[  135.126488][   T13] usb 4-1: could not probe fw (-71)
[  136.195770][ T8115] loop3: detected capacity change from 0 to 2048
[  136.204529][ T8115] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  136.206773][ T5848] udevd[5848]: incorrect nilfs2 checksum on /dev/loop3
[  136.228177][ T5848] udevd[5848]: incorrect nilfs2 checksum on /dev/loop3
[  136.232545][ T8116] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.339782][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  136.510209][    T9] usb 3-1: Using ep0 maxpacket: 8
[  136.515567][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.523694][    T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  136.527761][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.534144][    T9] usb 3-1: config 0 descriptor??
[  136.949079][    T9] lenovo 0003:17EF:6062.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0
[  137.151782][ T5880] usb 3-1: USB disconnect, device number 19
[  137.770437][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'.
[  137.811512][ T8136] loop3: detected capacity change from 0 to 32768
[  137.815946][ T8136] bcachefs: bch2_fs_parse_param() Error parsing option direct_io: option_value
[  138.057088][ T8151] program syz.2.844 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.795786][ T8159] loop0: detected capacity change from 0 to 1024
[  138.836253][ T8159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.857740][ T8159] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.888558][ T8159] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.847: path /301/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  138.911435][ T8159] EXT4-fs (loop0): Remounting filesystem read-only
[  138.915805][ T8155] loop2: detected capacity change from 0 to 32768
[  139.027704][ T8155] ERROR: (device loop2): xtTruncate_pmap: xt_getpage: xtree page corrupt
[  139.027704][ T8155] 
[  139.051900][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.072493][ T8155] ERROR: (device loop2): remounting filesystem as read-only
[  139.075363][ T8155] ERROR: (device loop2): jfs_unlink: 
[  139.075363][ T8155] 
[  139.113873][ T5840] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt
[  139.113873][ T5840] 
[  139.190299][ T8164] loop0: detected capacity change from 0 to 8
[  139.217912][ T8164] SQUASHFS error: lzo decompression failed, data probably corrupt
[  139.234493][ T8164] SQUASHFS error: Failed to read block 0x91: -5
[  139.237527][ T8164] SQUASHFS error: Unable to read metadata cache entry [8f]
[  139.241185][ T8164] SQUASHFS error: Unable to read inode 0x11f
[  139.648833][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  139.648847][   T33] audit: type=1800 audit(1755066380.025:10): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.851" name="bus" dev="overlay" ino=1615 res=0 errno=0
[  139.782441][ T8177] trusted_key: encrypted_key: key trusted:syz not found
[  140.054657][ T8188] loop3: detected capacity change from 0 to 8192
[  140.073622][ T8188] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.314040][ T8195] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  140.844410][ T8205] loop2: detected capacity change from 0 to 8
[  140.872870][ T8205] SQUASHFS error: zlib decompression failed, data probably corrupt
[  140.888123][ T8205] SQUASHFS error: Failed to read block 0x9b: -5
[  140.891122][ T8205] SQUASHFS error: Unable to read metadata cache entry [99]
[  140.894236][ T8205] SQUASHFS error: Unable to read inode 0x127
[  141.118890][ T8215] netlink: 830 bytes leftover after parsing attributes in process `syz.0.871'.
[  141.328130][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'.
[  141.335672][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'.
[  141.501231][ T8235] loop0: detected capacity change from 0 to 1024
[  141.537022][ T8235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.600083][ T8235] loop0: detected capacity change from 1024 to 0
[  141.610661][ T8235] syz.0.882: attempt to access beyond end of device
[  141.610661][ T8235] loop0: rw=12288, sector=32, nr_sectors = 2 limit=0
[  141.634247][ T8235] EXT4-fs error (device loop0): __ext4_find_entry:1615: inode #2: comm syz.0.882: reading directory lblock 0
[  141.651811][ T8235] syz.0.882: attempt to access beyond end of device
[  141.651811][ T8235] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[  141.656379][ T8235] buffer_io_error: 10 callbacks suppressed
[  141.656391][ T8235] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  141.662963][ T8235] EXT4-fs (loop0): I/O error while writing superblock
[  141.693567][ T5844] syz-executor: attempt to access beyond end of device
[  141.693567][ T5844] loop0: rw=12288, sector=32, nr_sectors = 2 limit=0
[  141.698427][ T5844] syz-executor: attempt to access beyond end of device
[  141.698427][ T5844] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0
[  141.720745][ T5844] syz-executor: attempt to access beyond end of device
[  141.720745][ T5844] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0
[  141.726446][ T5844] syz-executor: attempt to access beyond end of device
[  141.726446][ T5844] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0
[  141.733535][ T5844] syz-executor: attempt to access beyond end of device
[  141.733535][ T5844] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0
[  141.756339][ T8245] netlink: 92 bytes leftover after parsing attributes in process `syz.2.886'.
[  141.760804][ T5844] syz-executor: attempt to access beyond end of device
[  141.760804][ T5844] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0
[  141.766130][ T5844] syz-executor: attempt to access beyond end of device
[  141.766130][ T5844] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0
[  141.780096][ T5844] syz-executor: attempt to access beyond end of device
[  141.780096][ T5844] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0
[  141.785536][ T5844] EXT4-fs error (device loop0): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block
[  141.809821][ T5844] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  141.813052][ T5844] EXT4-fs (loop0): I/O error while writing superblock
[  141.815533][ T5844] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: IO failure
[  141.819310][ T5844] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  141.839712][ T5844] EXT4-fs (loop0): I/O error while writing superblock
[  141.842419][ T5844] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[  141.847350][ T5844] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  141.857438][ T5844] EXT4-fs (loop0): I/O error while writing superblock
[  141.916427][ T7163] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u9:5: unable to read itable block
[  141.924702][ T7163] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  141.929076][ T7163] EXT4-fs (loop0): I/O error while writing superblock
[  141.935189][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.940863][ T5844] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  141.944630][ T5844] EXT4-fs (loop0): I/O error while writing superblock
[  141.960090][ T8237] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  142.305830][ T6937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.412413][ T6937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.500909][ T6937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.535576][ T8263] loop2: detected capacity change from 0 to 32768
[  142.610102][ T8263] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  142.621296][ T8263] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  142.635144][ T6937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.686653][ T5840] ocfs2: Unmounting device (7,2) on (node local)
[  142.915335][ T6937] bridge_slave_1: left allmulticast mode
[  142.917643][ T6937] bridge_slave_1: left promiscuous mode
[  142.930041][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.935166][ T6937] bridge_slave_0: left allmulticast mode
[  142.937507][ T6937] bridge_slave_0: left promiscuous mode
[  142.950107][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.198496][ T8277] loop2: detected capacity change from 0 to 1024
[  143.215955][ T8277] EXT4-fs: Ignoring removed bh option
[  143.226410][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.234727][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.239938][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.246008][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.250028][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.256580][ T8277] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  143.924639][ T8283] loop3: detected capacity change from 0 to 8192
[  143.933194][ T8283] msdos: Unknown parameter 'dk'
[  143.938688][ T6937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.952290][ T6937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.959210][ T6937] bond0 (unregistering): Released all slaves
[  144.069688][ T6937] tipc: Left network mode
[  144.272149][ T8293] loop2: detected capacity change from 0 to 4096
[  144.282908][ T8293] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  144.317742][ T8293] ntfs3(loop2): ino=1a, mi_enum_attr
[  144.326820][ T8293] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  144.584400][ T6937] hsr_slave_0: left promiscuous mode
[  144.587005][ T6937] hsr_slave_1: left promiscuous mode
[  144.590946][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.594077][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.597986][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.604151][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.619132][ T6937] veth1_macvtap: left promiscuous mode
[  144.621761][ T6937] veth0_macvtap: left promiscuous mode
[  144.624122][ T6937] veth1_vlan: left promiscuous mode
[  144.626578][ T6937] veth0_vlan: left promiscuous mode
[  144.841452][ T8302] loop3: detected capacity change from 0 to 32768
[  144.939061][ T8304] loop2: detected capacity change from 0 to 32768
[  144.943953][ T8304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.908 (8304)
[  144.961606][ T8304] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  144.965890][ T8304] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  144.969191][ T8304] BTRFS info (device loop2): using free-space-tree
[  145.058119][   T33] audit: type=1800 audit(1755066385.425:11): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.908" name="file1" dev="loop2" ino=260 res=0 errno=0
[  145.067803][ T5840] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  145.341368][   T55] Bluetooth: hci1: command tx timeout
[  145.363594][ T6937] team0 (unregistering): Port device team_slave_1 removed
[  145.389103][ T6937] team0 (unregistering): Port device team_slave_0 removed
[  145.449562][ T5879] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  145.524443][ T8325] loop3: detected capacity change from 0 to 256
[  145.537801][ T8325] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  145.651669][ T5879] usb 3-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32
[  145.654856][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.657575][ T5879] usb 3-1: Product: syz
[  145.658944][ T5879] usb 3-1: Manufacturer: syz
[  145.662586][ T5879] usb 3-1: SerialNumber: syz
[  145.675525][ T5879] usb 3-1: config 0 descriptor??
[  145.684577][ T5879] pwc: Logitech QuickCam Zoom (new model) USB webcam detected.
[  145.858065][ T8327] macvlan2: entered promiscuous mode
[  145.862428][ T8327] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  145.867981][ T8328] macvlan3: entered promiscuous mode
[  145.873548][ T8328] bond0: (slave macvlan3): Error -98 calling set_mac_address
[  145.882578][ T5879] pwc: Failed to set LED on/off time (-71)
[  145.885350][ T5879] pwc: send_video_command error -71
[  145.893619][ T5879] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  145.897390][ T5879] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  145.905875][ T5879] usb 3-1: USB disconnect, device number 20
[  145.979107][ T8278] chnl_net:caif_netlink_parms(): no params data found
[  146.223111][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.225811][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.228376][ T8278] bridge_slave_0: entered allmulticast mode
[  146.248051][ T8278] bridge_slave_0: entered promiscuous mode
[  146.256781][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.260793][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.264269][ T8278] bridge_slave_1: entered allmulticast mode
[  146.268454][ T8278] bridge_slave_1: entered promiscuous mode
[  146.315745][ T8278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.324351][ T8278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.373726][ T8278] team0: Port device team_slave_0 added
[  146.378670][ T8278] team0: Port device team_slave_1 added
[  146.408666][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.412416][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.423925][ T8278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.431897][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.434832][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.455842][ T8278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.470409][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  146.568006][ T8278] hsr_slave_0: entered promiscuous mode
[  146.576470][ T8278] hsr_slave_1: entered promiscuous mode
[  146.589602][ T8278] debugfs: 'hsr0' already exists in 'hsr'
[  146.592117][ T8278] Cannot create hsr debugfs directory
[  146.631275][    T9] usb 4-1: Using ep0 maxpacket: 16
[  146.639034][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  146.646825][    T9] usb 4-1: config 117 has an invalid interface number: 106 but max is 0
[  146.650009][    T9] usb 4-1: config 117 has no interface number 0
[  146.652745][    T9] usb 4-1: config 117 interface 106 has no altsetting 0
[  146.667634][    T9] usb 4-1: New USB device found, idVendor=110a, idProduct=1451, bcdDevice=6d.26
[  146.676515][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.679730][    T9] usb 4-1: Product: syz
[  146.683921][    T9] usb 4-1: Manufacturer: syz
[  146.685597][    T9] usb 4-1: SerialNumber: syz
[  146.907369][    T9] mxuport 4-1:117.106: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  146.924349][    T9] mxuport 4-1:117.106: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  146.939547][    T9] mxuport 4-1:117.106: probe with driver mxuport failed with error -71
[  146.944360][ T8278] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  146.947509][    T9] usb 4-1: USB disconnect, device number 9
[  146.956046][ T8278] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  146.985760][ T8278] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  147.001661][ T8362] loop2: detected capacity change from 0 to 32768
[  147.006146][ T8362] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.917 (8362)
[  147.011690][ T8278] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  147.044243][ T8362] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.060440][ T8362] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  147.071188][ T8362] BTRFS info (device loop2): disk space caching is enabled
[  147.080034][ T8362] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  147.179115][ T8362] BTRFS info (device loop2): rebuilding free space tree
[  147.187104][ T8362] BTRFS info (device loop2): disabling free space tree
[  147.195323][ T8362] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  147.198909][ T8362] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  147.262464][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.272421][ T8278] 8021q: adding VLAN 0 to HW filter on device team0
[  147.287061][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.289953][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.306557][ T5840] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.321855][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.324369][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.421130][   T55] Bluetooth: hci1: command tx timeout
[  147.505859][ T8405] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  147.600718][ T8278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.817926][ T8278] veth0_vlan: entered promiscuous mode
[  147.839838][ T8278] veth1_vlan: entered promiscuous mode
[  147.884321][ T8278] veth0_macvtap: entered promiscuous mode
[  147.895075][ T8278] veth1_macvtap: entered promiscuous mode
[  147.929361][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.935444][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.944928][ T6937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.949150][ T6937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.957295][ T6937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.982513][ T6937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.055912][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.064787][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.098270][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.101176][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.161461][ T8439] loop4: detected capacity change from 0 to 8
[  148.185010][ T8442] loop2: detected capacity change from 0 to 512
[  148.193924][ T8442] EXT4-fs: Ignoring removed nobh option
[  148.209831][ T8439] SQUASHFS error: Unable to read directory block [631:26]
[  148.216454][ T8442] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.928: iget: bad i_size value: 38620345925642
[  148.230271][ T8442] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.928: couldn't read orphan inode 15 (err -117)
[  148.257621][ T8442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.397557][ T8431] loop3: detected capacity change from 0 to 32768
[  148.717027][ T8431] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.755892][ T8431] XFS (loop3): Ending clean mount
[  148.777053][ T8431] XFS (loop3): Quotacheck needed: Please wait.
[  148.824127][ T8431] XFS (loop3): Quotacheck: Done.
[  148.899202][ T6859] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  149.217619][ T8445] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  149.500955][   T55] Bluetooth: hci1: command tx timeout
[  149.609039][ T8485] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[  150.208291][ T8504] loop4: detected capacity change from 0 to 4096
[  150.229574][  T791] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  150.256748][ T8504] ntfs3(loop4): ino=5, "/" mi_enum_attr
[  150.298986][   T32] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  150.304624][   T32] EXT4-fs (loop2): This should not happen!! Data will be lost
[  150.304624][   T32] 
[  150.319673][   T32] EXT4-fs (loop2): Total free blocks count 0
[  150.323118][   T32] EXT4-fs (loop2): Free/Dirty block details
[  150.331228][   T32] EXT4-fs (loop2): free_blocks=0
[  150.332991][   T32] EXT4-fs (loop2): dirty_blocks=5792
[  150.334781][   T32] EXT4-fs (loop2): Block reservation details
[  150.342776][   T32] EXT4-fs (loop2): i_reserved_data_blocks=5792
[  150.345284][ T8507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.945'.
[  150.369313][   T32] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  150.379553][  T791] usb 4-1: Using ep0 maxpacket: 32
[  150.383795][  T791] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  150.408503][  T791] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.412724][  T791] usb 4-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00
[  150.420003][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.440041][  T791] usb 4-1: config 0 descriptor??
[  150.563730][ T8514] tracefs: Invalid gid '00000000000037777777777'
[  150.602778][ T8516] netlink: 'syz.2.944': attribute type 83 has an invalid length.
[  150.619029][ T8518] netlink: 'syz.4.949': attribute type 83 has an invalid length.
[  150.860676][  T791] smartjoyplus 0003:6666:8801.0007: item fetching failed at offset 5/7
[  150.868818][  T791] smartjoyplus 0003:6666:8801.0007: parse failed
[  150.871809][  T791] smartjoyplus 0003:6666:8801.0007: probe with driver smartjoyplus failed with error -22
[  151.061525][   T10] usb 4-1: USB disconnect, device number 10
[  151.581359][   T55] Bluetooth: hci1: command tx timeout
[  151.773404][ T8552] atomic_op ffff88803be59998 conn xmit_atomic 0000000000000000
[  151.831984][ T8553] netlink: 52 bytes leftover after parsing attributes in process `syz.4.964'.
[  151.835873][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.964'.
[  151.848950][ T8557] loop3: detected capacity change from 0 to 512
[  151.853917][ T8553] netlink: 52 bytes leftover after parsing attributes in process `syz.4.964'.
[  151.877505][ T8557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.893338][ T8557] EXT4-fs (loop3): shut down requested (1)
[  151.931746][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.317872][ T8571] loop3: detected capacity change from 0 to 32768
[  152.343577][ T8583] netlink: 'syz.4.978': attribute type 4 has an invalid length.
[  152.347395][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.978'.
[  152.370108][ T8571] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.409631][ T5880] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  152.437346][ T8571] XFS (loop3): Ending clean mount
[  152.451554][ T8571] XFS (loop3): Quotacheck needed: Please wait.
[  152.494953][ T8571] XFS (loop3): Quotacheck: Done.
[  152.562381][ T8598] loop4: detected capacity change from 0 to 256
[  152.571898][ T5880] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  152.575912][ T8598] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.583823][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.584161][ T8598] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  152.591282][ T5880] usb 3-1: config 0 descriptor??
[  152.605073][ T8598] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  152.605367][ T5880] gspca_main: cpia1-2.14.0 probing 0813:0001
[  152.732463][ T8602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.983'.
[  153.004101][ T5880] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  153.095525][ T6859] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.414621][ T5880] gspca_cpia1: usb_control_msg 02, error -71
[  153.424063][ T5880] gspca_cpia1: usb_control_msg 05, error -71
[  153.426995][ T5880] cpia1 3-1:0.0: unexpected systemstate: 00
[  153.436828][ T5880] usb 3-1: USB disconnect, device number 21
[  153.466329][ T8620] loop3: detected capacity change from 0 to 4096
[  153.612241][ T8624] loop3: detected capacity change from 0 to 512
[  153.634546][ T8624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.641646][ T8624] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.670948][ T6859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.932340][ T8631] loop3: detected capacity change from 0 to 32768
[  153.937911][ T8631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.995 (8631)
[  153.959495][ T8631] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.979201][ T8631] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm
[  154.041368][ T1088] BTRFS warning (device loop3 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  154.063310][ T1088] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  154.073131][   T27] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  154.090565][ T1098] BTRFS warning (device loop3 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  154.097899][ T8631] BTRFS error (device loop3 state S): chunk 5242880 has missing dev extent, have 0 expect 1
[  154.110075][ T8631] BTRFS error (device loop3 state S): failed to verify dev extents against chunks: -117
[  154.202565][ T8631] BTRFS error (device loop3 state S): open_ctree failed: -117
[  154.259495][ T5879] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  154.436549][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.442214][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  154.449661][ T5879] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  154.453177][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.457970][ T5879] usb 5-1: config 0 descriptor??
[  154.465505][ T5879] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22
[  154.659542][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  154.672163][ T5879] usb 5-1: USB disconnect, device number 2
[  154.829483][   T10] usb 4-1: Using ep0 maxpacket: 8
[  154.834661][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64
[  154.846763][   T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  154.851042][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.855875][   T10] usb 4-1: Product: syz
[  154.857743][   T10] usb 4-1: Manufacturer: syz
[  154.859893][   T10] usb 4-1: SerialNumber: syz
[  154.864312][   T10] usb 4-1: config 0 descriptor??
[  154.869213][   T10] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  155.075871][   T52] usb 4-1: USB disconnect, device number 11
[  155.473732][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'.
[  155.671321][ T8692] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.1013'.
[  155.740910][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  155.912972][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  155.915755][ T5880] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  155.929607][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.944639][ T5880] usb 5-1: config 0 descriptor??
[  156.132973][   T33] audit: type=1326 audit(1755066396.515:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8709 comm="syz.2.1022" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ea198ebe9 code=0x0
[  156.199803][   T52] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  156.351992][   T52] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  156.356390][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.360807][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.364248][   T52] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  156.368562][   T52] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  156.372702][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.377799][   T52] usb 4-1: config 0 descriptor??
[  156.758669][ T5880] video4linux radio48: keene_cmd_main failed (-71)
[  156.763258][ T5880] radio-keene 5-1:0.0: V4L2 device registered as radio48
[  156.767716][ T5880] usb 5-1: USB disconnect, device number 3
[  156.793651][   T52] waltop 0003:172F:0502.0008: item fetching failed at offset 0/3
[  156.797267][   T52] waltop 0003:172F:0502.0008: probe with driver waltop failed with error -22
[  156.998711][   T52] usb 4-1: USB disconnect, device number 12
[  157.046692][ T8716] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1024'.
[  157.051604][ T8716] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1024'.
[  157.461220][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'.
[  157.464641][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.467428][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.472476][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.475894][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.608217][ T8750] netlink: 'syz.4.1040': attribute type 21 has an invalid length.
[  157.611183][ T8750] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1040'.
[  157.846791][ T8761] netlink: 'syz.4.1045': attribute type 21 has an invalid length.
[  157.851303][ T8761] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1045'.
[  158.525401][ T8773] input: syz0 as /devices/virtual/input/input13
[  158.612092][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'.
[  158.615832][ T8780] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  158.615832][ T8780] The task syz.3.1047 (8780) triggered the difference, watch for misbehavior.
[  159.040986][  T791] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  159.192856][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.196827][  T791] usb 3-1: config 0 has no interfaces?
[  159.199144][  T791] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  159.206109][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.214448][  T791] usb 3-1: config 0 descriptor??
[  159.430715][ T5821] usb 3-1: USB disconnect, device number 22
[  159.731288][ T8844] loop4: detected capacity change from 0 to 128
[  159.826329][ T8849] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1062'.
[  159.831766][ T8849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  159.926782][ T8858] loop4: detected capacity change from 0 to 1024
[  159.958587][ T8858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.102386][ T8858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #14: comm syz.4.1065: missing EA_INODE flag
[  160.125873][ T8858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1065: error while reading EA inode 14 err=-117
[  160.203149][ T8278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.344373][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'.
[  160.682850][ T5880] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  160.686371][ T5880] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  161.453627][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1086'.
[  161.467877][ T8932] netlink: 'syz.4.1086': attribute type 7 has an invalid length.
[  161.477558][ T8932] netlink: 'syz.4.1086': attribute type 8 has an invalid length.
[  161.481061][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'.
[  161.496766][ T8940] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1089'.
[  161.504111][ T8939] pim6reg: entered allmulticast mode
[  161.506213][ T8940] unsupported nlmsg_type 40
[  161.769819][ T8950] loop4: detected capacity change from 0 to 32768
[  161.775779][ T8950] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1093 (8950)
[  161.791894][ T8950] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  161.799744][ T6041] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  161.802599][ T8950] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  161.809479][ T8950] BTRFS info (device loop4): using free-space-tree
[  161.829740][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  161.940347][ T8278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  161.972162][ T6041] usb 3-1: Using ep0 maxpacket: 8
[  161.985244][    T9] usb 4-1: Using ep0 maxpacket: 16
[  162.001616][ T6041] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  162.005414][ T6041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.008693][ T6041] usb 3-1: Product: syz
[  162.022141][ T6041] usb 3-1: Manufacturer: syz
[  162.026431][ T6041] usb 3-1: SerialNumber: syz
[  162.039717][    T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  162.043730][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.048210][ T6041] usb 3-1: config 0 descriptor??
[  162.050194][    T9] usb 4-1: Product: syz
[  162.054156][    T9] usb 4-1: Manufacturer: syz
[  162.058066][ T6041] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  162.064265][    T9] usb 4-1: SerialNumber: syz
[  162.074529][    T9] usb 4-1: config 0 descriptor??
[  162.086873][    T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  162.100636][    T9] usb 4-1: Detected FT232H
[  162.290541][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  162.297937][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  162.304640][    T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  162.309029][    T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  162.319034][    T9] usb 4-1: USB disconnect, device number 13
[  162.324654][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  162.330542][    T9] ftdi_sio 4-1:0.0: device disconnected
[  162.449590][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  162.602643][ T5879] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  162.607424][ T5879] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  162.612808][ T5879] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  162.617326][ T5879] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.625773][ T5879] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  162.629650][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.644083][ T5879] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  162.648179][ T5879] usb 5-1: invalid MIDI out EP 0
[  162.736589][ T5879] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  162.855739][    T9] usb 5-1: USB disconnect, device number 4
[  162.859914][ T5880] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  162.862913][ T5880] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  162.869424][    C1] ------------[ cut here ]------------
[  162.872494][    C1] workqueue: cannot queue hci_cmd_timeout on wq hci2
[  162.875574][    C1] WARNING: CPU: 1 PID: 6041 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0
[  162.879589][    C1] Modules linked in:
[  162.881688][    C1] CPU: 1 UID: 0 PID: 6041 Comm: kworker/1:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  162.887669][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.892333][    C1] Workqueue: usb_hub_wq hub_event
[  162.894794][    C1] RIP: 0010:__queue_work+0xd38/0xfb0
[  162.897126][    C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 83 06 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 df 89 8b 4c 89 fa e8 49 3a f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 ba 9b 35 00 90 0f 0b 90 e9 dd fc ff
[  162.905407][    C1] RSP: 0018:ffffc900001e0b10 EFLAGS: 00010046
[  162.908315][    C1] RAX: 06418d0689747100 RBX: 0000000000000100 RCX: ffff888107b18000
[  162.911925][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  162.915361][    C1] RBP: 1ffff11023316838 R08: 0000000000000003 R09: 0000000000000004
[  162.918715][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000
[  162.922159][    C1] R13: ffff888119f64988 R14: 0000000000000008 R15: ffff8881198b4178
[  162.925902][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  162.929906][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.932662][    C1] CR2: 00005555725ab5c8 CR3: 00000000292f6000 CR4: 00000000000006f0
[  162.936041][    C1] Call Trace:
[  162.937593][    C1]  <IRQ>
[  162.938910][    C1]  call_timer_fn+0x17e/0x5f0
[  162.941106][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  162.943712][    C1]  ? call_timer_fn+0xbe/0x5f0
[  162.945784][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  162.948084][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  162.950317][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  162.952949][    C1]  __run_timer_base+0x646/0x860
[  162.955162][    C1]  ? ktime_get+0x3e/0x1f0
[  162.957081][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  162.959392][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  162.962179][    C1]  run_timer_softirq+0xb7/0x180
[  162.964619][    C1]  handle_softirqs+0x286/0x870
[  162.967027][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  162.969308][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  162.971608][    C1]  __irq_exit_rcu+0xca/0x1f0
[  162.973649][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  162.975949][    C1]  irq_exit_rcu+0x9/0x30
[  162.977813][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  162.980303][    C1]  </IRQ>
[  162.981637][    C1]  <TASK>
[  162.983048][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  162.985934][    C1] RIP: 0010:kfree+0x84/0x440
[  162.987920][    C1] Code: ac 02 00 00 48 83 fb 11 0f 82 67 01 00 00 4c 8b 3d 39 1e a5 0b 48 89 df e8 39 6f 5c ff 48 c1 e8 06 48 83 e0 c0 49 8b 4c 07 08 <f6> c1 01 0f 85 72 01 00 00 49 01 c7 0f 1f 44 00 00 41 0f b6 47 33
[  162.996047][    C1] RSP: 0018:ffffc90004c2e9f0 EFLAGS: 00000202
[  162.998772][    C1] RAX: 00000000007f7f80 RBX: ffff88801fdfe300 RCX: ffff88801a4413c0
[  163.002176][    C1] RDX: ffffc90029d5f000 RSI: 00000000000111a2 RDI: 00000000000111a3
[  163.005844][    C1] RBP: ffffc90004c2eb80 R08: ffff88801fdfe303 R09: 1ffff11003fbfc60
[  163.009702][    C1] R10: dffffc0000000000 R11: ffffed1003fbfc61 R12: 0000000000000000
[  163.013142][    C1] R13: dffffc0000000000 R14: ffffffff872b279e R15: ffffea0000000000
[  163.016571][    C1]  ? usb_start_wait_urb+0x21e/0x4c0
[  163.018859][    C1]  usb_start_wait_urb+0x21e/0x4c0
[  163.021143][    C1]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  163.023907][    C1]  ? __kmalloc_noprof+0x29b/0x4f0
[  163.026387][    C1]  usb_control_msg+0x232/0x3e0
[  163.028499][    C1]  reg_r+0xed/0x2e0
[  163.030214][    C1]  sd_init+0x2ff/0x4f20
[  163.031894][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.034041][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  163.036516][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.039295][    C1]  ? __debug_object_init+0x1a2/0x3c0
[  163.041600][    C1]  ? __pfx_sd_init+0x10/0x10
[  163.043692][    C1]  ? sd_config+0x1e1/0x310
[  163.045698][    C1]  gspca_dev_probe2+0x855/0x1440
[  163.047936][    C1]  ? gspca_dev_probe+0x18e/0x250
[  163.050106][    C1]  usb_probe_interface+0x668/0xc30
[  163.052393][    C1]  ? __pfx_usb_probe_interface+0x10/0x10
[  163.055162][    C1]  really_probe+0x26d/0x9e0
[  163.057259][    C1]  __driver_probe_device+0x18c/0x2f0
[  163.059446][    C1]  driver_probe_device+0x4f/0x430
[  163.061553][    C1]  __device_attach_driver+0x2ce/0x530
[  163.063894][    C1]  bus_for_each_drv+0x251/0x2e0
[  163.066157][    C1]  ? __pfx___device_attach_driver+0x10/0x10
[  163.069245][    C1]  ? __pfx_bus_for_each_drv+0x10/0x10
[  163.071946][    C1]  __device_attach+0x2b8/0x400
[  163.074181][    C1]  ? __pfx___device_attach+0x10/0x10
[  163.076486][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  163.078706][    C1]  bus_probe_device+0x185/0x260
[  163.080849][    C1]  device_add+0x7b6/0xb50
[  163.082775][    C1]  usb_set_configuration+0x1a87/0x20e0
[  163.085221][    C1]  usb_generic_driver_probe+0x8d/0x150
[  163.087679][    C1]  usb_probe_device+0x1c4/0x390
[  163.089955][    C1]  ? __pfx_usb_probe_device+0x10/0x10
[  163.092382][    C1]  really_probe+0x26d/0x9e0
[  163.094412][    C1]  __driver_probe_device+0x18c/0x2f0
[  163.096713][    C1]  driver_probe_device+0x4f/0x430
[  163.098955][    C1]  __device_attach_driver+0x2ce/0x530
[  163.101582][    C1]  bus_for_each_drv+0x251/0x2e0
[  163.104011][    C1]  ? __pfx___device_attach_driver+0x10/0x10
[  163.106689][    C1]  ? __pfx_bus_for_each_drv+0x10/0x10
[  163.109047][    C1]  __device_attach+0x2b8/0x400
[  163.111119][    C1]  ? __pfx___device_attach+0x10/0x10
[  163.113420][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  163.115838][    C1]  bus_probe_device+0x185/0x260
[  163.118437][    C1]  device_add+0x7b6/0xb50
[  163.120628][    C1]  usb_new_device+0xa39/0x16f0
[  163.122633][    C1]  ? __pfx_usb_new_device+0x10/0x10
[  163.124858][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.127014][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.129154][    C1]  hub_event+0x2958/0x4a20
[  163.131071][    C1]  ? __pfx_hub_event+0x10/0x10
[  163.133213][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  163.135844][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.138493][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  163.140882][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  163.143245][    C1]  process_scheduled_works+0xae1/0x17b0
[  163.145574][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.148367][    C1]  worker_thread+0x8a0/0xda0
[  163.150627][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.153597][    C1]  ? __kthread_parkme+0x7b/0x200
[  163.155735][    C1]  kthread+0x711/0x8a0
[  163.157580][    C1]  ? __pfx_worker_thread+0x10/0x10
[  163.160049][    C1]  ? __pfx_kthread+0x10/0x10
[  163.162206][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.164438][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.166728][    C1]  ? __pfx_kthread+0x10/0x10
[  163.168924][    C1]  ret_from_fork+0x3fc/0x770
[  163.171510][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  163.174230][    C1]  ? __switch_to_asm+0x39/0x70
[  163.176453][    C1]  ? __switch_to_asm+0x33/0x70
[  163.178548][    C1]  ? __pfx_kthread+0x10/0x10
[  163.180496][    C1]  ret_from_fork_asm+0x1a/0x30
[  163.182623][    C1]  </TASK>
[  163.183971][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  163.187152][    C1] CPU: 1 UID: 0 PID: 6041 Comm: kworker/1:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  163.192460][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.196698][    C1] Workqueue: usb_hub_wq hub_event
[  163.198832][    C1] Call Trace:
[  163.200276][    C1]  <IRQ>
[  163.201598][    C1]  dump_stack_lvl+0x99/0x250
[  163.203794][    C1]  ? __asan_memcpy+0x40/0x70
[  163.205936][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.208193][    C1]  ? __pfx__printk+0x10/0x10
[  163.210173][    C1]  vpanic+0x281/0x750
[  163.211946][    C1]  ? __pfx__printk+0x10/0x10
[  163.214044][    C1]  ? __pfx_vpanic+0x10/0x10
[  163.216243][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  163.218706][    C1]  panic+0xb9/0xc0
[  163.220298][    C1]  ? __pfx_panic+0x10/0x10
[  163.222251][    C1]  __warn+0x31b/0x4b0
[  163.224010][    C1]  ? __queue_work+0xd38/0xfb0
[  163.226073][    C1]  ? __queue_work+0xd38/0xfb0
[  163.228285][    C1]  report_bug+0x2be/0x4f0
[  163.230314][    C1]  ? __queue_work+0xd38/0xfb0
[  163.232349][    C1]  ? __queue_work+0xd38/0xfb0
[  163.234430][    C1]  ? __queue_work+0xd3a/0xfb0
[  163.236477][    C1]  handle_bug+0x84/0x160
[  163.238299][    C1]  exc_invalid_op+0x1a/0x50
[  163.240418][    C1]  asm_exc_invalid_op+0x1a/0x20
[  163.242953][    C1] RIP: 0010:__queue_work+0xd38/0xfb0
[  163.245492][    C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 83 06 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 df 89 8b 4c 89 fa e8 49 3a f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 ba 9b 35 00 90 0f 0b 90 e9 dd fc ff
[  163.253413][    C1] RSP: 0018:ffffc900001e0b10 EFLAGS: 00010046
[  163.256161][    C1] RAX: 06418d0689747100 RBX: 0000000000000100 RCX: ffff888107b18000
[  163.259912][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  163.263263][    C1] RBP: 1ffff11023316838 R08: 0000000000000003 R09: 0000000000000004
[  163.266846][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000
[  163.270625][    C1] R13: ffff888119f64988 R14: 0000000000000008 R15: ffff8881198b4178
[  163.273889][    C1]  call_timer_fn+0x17e/0x5f0
[  163.275885][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  163.278565][    C1]  ? call_timer_fn+0xbe/0x5f0
[  163.280852][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  163.283108][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  163.285291][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  163.287769][    C1]  __run_timer_base+0x646/0x860
[  163.289905][    C1]  ? ktime_get+0x3e/0x1f0
[  163.292013][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  163.294601][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  163.297362][    C1]  run_timer_softirq+0xb7/0x180
[  163.299469][    C1]  handle_softirqs+0x286/0x870
[  163.301526][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  163.303538][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  163.306161][    C1]  __irq_exit_rcu+0xca/0x1f0
[  163.308471][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  163.310782][    C1]  irq_exit_rcu+0x9/0x30
[  163.312637][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  163.315123][    C1]  </IRQ>
[  163.316413][    C1]  <TASK>
[  163.317744][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.320439][    C1] RIP: 0010:kfree+0x84/0x440
[  163.322754][    C1] Code: ac 02 00 00 48 83 fb 11 0f 82 67 01 00 00 4c 8b 3d 39 1e a5 0b 48 89 df e8 39 6f 5c ff 48 c1 e8 06 48 83 e0 c0 49 8b 4c 07 08 <f6> c1 01 0f 85 72 01 00 00 49 01 c7 0f 1f 44 00 00 41 0f b6 47 33
[  163.330832][    C1] RSP: 0018:ffffc90004c2e9f0 EFLAGS: 00000202
[  163.333392][    C1] RAX: 00000000007f7f80 RBX: ffff88801fdfe300 RCX: ffff88801a4413c0
[  163.337239][    C1] RDX: ffffc90029d5f000 RSI: 00000000000111a2 RDI: 00000000000111a3
[  163.340722][    C1] RBP: ffffc90004c2eb80 R08: ffff88801fdfe303 R09: 1ffff11003fbfc60
[  163.344162][    C1] R10: dffffc0000000000 R11: ffffed1003fbfc61 R12: 0000000000000000
[  163.347589][    C1] R13: dffffc0000000000 R14: ffffffff872b279e R15: ffffea0000000000
[  163.351098][    C1]  ? usb_start_wait_urb+0x21e/0x4c0
[  163.353596][    C1]  usb_start_wait_urb+0x21e/0x4c0
[  163.355999][    C1]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  163.358442][    C1]  ? __kmalloc_noprof+0x29b/0x4f0
[  163.360696][    C1]  usb_control_msg+0x232/0x3e0
[  163.362808][    C1]  reg_r+0xed/0x2e0
[  163.364536][    C1]  sd_init+0x2ff/0x4f20
[  163.366676][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.369144][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  163.371746][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.374496][    C1]  ? __debug_object_init+0x1a2/0x3c0
[  163.376819][    C1]  ? __pfx_sd_init+0x10/0x10
[  163.378914][    C1]  ? sd_config+0x1e1/0x310
[  163.381117][    C1]  gspca_dev_probe2+0x855/0x1440
[  163.383590][    C1]  ? gspca_dev_probe+0x18e/0x250
[  163.385798][    C1]  usb_probe_interface+0x668/0xc30
[  163.387915][    C1]  ? __pfx_usb_probe_interface+0x10/0x10
[  163.390320][    C1]  really_probe+0x26d/0x9e0
[  163.392302][    C1]  __driver_probe_device+0x18c/0x2f0
[  163.394791][    C1]  driver_probe_device+0x4f/0x430
[  163.397058][    C1]  __device_attach_driver+0x2ce/0x530
[  163.399309][    C1]  bus_for_each_drv+0x251/0x2e0
[  163.401352][    C1]  ? __pfx___device_attach_driver+0x10/0x10
[  163.403886][    C1]  ? __pfx_bus_for_each_drv+0x10/0x10
[  163.406193][    C1]  __device_attach+0x2b8/0x400
[  163.408188][    C1]  ? __pfx___device_attach+0x10/0x10
[  163.410578][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  163.412832][    C1]  bus_probe_device+0x185/0x260
[  163.414879][    C1]  device_add+0x7b6/0xb50
[  163.416764][    C1]  usb_set_configuration+0x1a87/0x20e0
[  163.419027][    C1]  usb_generic_driver_probe+0x8d/0x150
[  163.421304][    C1]  usb_probe_device+0x1c4/0x390
[  163.423298][    C1]  ? __pfx_usb_probe_device+0x10/0x10
[  163.425530][    C1]  really_probe+0x26d/0x9e0
[  163.427465][    C1]  __driver_probe_device+0x18c/0x2f0
[  163.429644][    C1]  driver_probe_device+0x4f/0x430
[  163.431823][    C1]  __device_attach_driver+0x2ce/0x530
[  163.434053][    C1]  bus_for_each_drv+0x251/0x2e0
[  163.436391][    C1]  ? __pfx___device_attach_driver+0x10/0x10
[  163.439209][    C1]  ? __pfx_bus_for_each_drv+0x10/0x10
[  163.441464][    C1]  __device_attach+0x2b8/0x400
[  163.443588][    C1]  ? __pfx___device_attach+0x10/0x10
[  163.445724][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  163.448049][    C1]  bus_probe_device+0x185/0x260
[  163.450372][    C1]  device_add+0x7b6/0xb50
[  163.452378][    C1]  usb_new_device+0xa39/0x16f0
[  163.454453][    C1]  ? __pfx_usb_new_device+0x10/0x10
[  163.456593][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.458808][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.461289][    C1]  hub_event+0x2958/0x4a20
[  163.463636][    C1]  ? __pfx_hub_event+0x10/0x10
[  163.465748][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  163.468069][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.470313][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  163.472915][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  163.475449][    C1]  process_scheduled_works+0xae1/0x17b0
[  163.477936][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.480577][    C1]  worker_thread+0x8a0/0xda0
[  163.482599][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.485403][    C1]  ? __kthread_parkme+0x7b/0x200
[  163.487881][    C1]  kthread+0x711/0x8a0
[  163.489885][    C1]  ? __pfx_worker_thread+0x10/0x10
[  163.492042][    C1]  ? __pfx_kthread+0x10/0x10
[  163.494014][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.496382][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.498814][    C1]  ? __pfx_kthread+0x10/0x10
[  163.500948][    C1]  ret_from_fork+0x3fc/0x770
[  163.503064][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  163.505311][    C1]  ? __switch_to_asm+0x39/0x70
[  163.507392][    C1]  ? __switch_to_asm+0x33/0x70
[  163.509635][    C1]  ? __pfx_kthread+0x10/0x10
[  163.511760][    C1]  ret_from_fork_asm+0x1a/0x30
[  163.513832][    C1]  </TASK>
[  163.515960][    C1] Kernel Offset: disabled
[  163.517853][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:26:42  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1b7b7a2 RBX=ffff88804b032f98 RCX=1eef228717f64a00 RDX=ffff88810d57b980
RSI=ffffffff8be325e0 RDI=ffffffff8be325a0 RBP=ffffea00047a0d00 RSP=ffffc9000344f328
R8 =0000000000000000 R9 =ffffffff822e4d3d R10=dffffc0000000000 R11=fffff940008f41a1
R12=ffffffff822e4d3d R13=0000000000000000 R14=ffffffff8dbdbd10 R15=dffffc0000000000
RIP=ffffffff81a65dce RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555572590500 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc370ce56c0 CR3=0000000105e2e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc370012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000049 RBX=0000000000000049 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e02b0
R8 =ffff888106650237 R9 =1ffff11020cca046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18e0 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555725ab5c8 CR3=00000000292f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffff0000000000 0000000000000000 XMM05=0000000000000021 0000000000302e34
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=323a312d352f312d 352f356273752f34
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
