last executing test programs:

15.463070218s ago: executing program 1 (id=978):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000540)={{0x1, 0x0, 0x8}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf})
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
write$binfmt_misc(r4, &(0x7f0000000180)="61bf32a826ae136d9ff5fb6b10d86e02bb7dd75b4e4106122ee4323ade19447b8adca6a7d10ae82e88d9a4e9d0d73a88bd19942cfd6c3842212583590a2d0f91df38bd62e8337447f6f5a64fa3da1c83448474074e13bb134f5bbe7a7b9328", 0x5f)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48}}, 0x0)
ftruncate(r1, 0x2002008000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r4, 0x0, r6, 0x0, 0xfffffbffa003e45f, 0x700000000000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.512655289s ago: executing program 1 (id=986):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x6, 0x3}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000080)=' ', 0x39, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r3}, 0x14)

14.054028468s ago: executing program 1 (id=989):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)

13.997263227s ago: executing program 1 (id=990):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

13.887391211s ago: executing program 1 (id=991):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)

13.636794436s ago: executing program 1 (id=992):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00006dbffc)=0x27, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0)

13.527390015s ago: executing program 32 (id=992):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00006dbffc)=0x27, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0)

2.771582389s ago: executing program 2 (id=1097):
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380), &(0x7f0000000000)=@ng={0x4, 0x5}, 0x2, 0x0)
mmap$xdp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000004, 0x12, r0, 0x180000000)

2.71929221s ago: executing program 2 (id=1098):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a50", 0x51}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r2)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100299d7000fbdbff250c0000002000058014000280080003000008000008000200be"], 0x34}, 0x1, 0x0, 0x0, 0x20048080}, 0x8094)
socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x79b1860ad2a2f14e)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
socket(0x9, 0x3, 0x8)
r5 = syz_open_dev$vim2m(0x0, 0x7d, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0xc04c561a, &(0x7f00000000c0))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

2.518800692s ago: executing program 2 (id=1099):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)
syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r3, &(0x7f0000000300)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
listen(r4, 0x4)
accept4$unix(r4, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000)
r7 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.492092036s ago: executing program 2 (id=1106):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000140))

1.372493783s ago: executing program 2 (id=1107):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='.\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4455, &(0x7f0000004480)="$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")

1.335222675s ago: executing program 0 (id=1109):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)

1.233389374s ago: executing program 0 (id=1110):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0xa, 0x522, &(0x7f0000000c00)="$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")
rmdir(&(0x7f0000000100)='./file0\x00')

1.103565112s ago: executing program 0 (id=1111):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x10001, &(0x7f0000000500)={[{@nossd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xd000943e, &(0x7f0000000040)={0x100, 0x0, [0x8, 0x13, 0x65, 0x4f], 0x0})

983.095016ms ago: executing program 2 (id=1112):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e92, &(0x7f0000018400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0xbd)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd/4\x00')
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)

449.125766ms ago: executing program 0 (id=1113):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00')
io_setup(0x5ff, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f00000002c0)={0x0, 0x0, 0x22, 0x8, 0x0, r0, 0x0, 0x0, 0x6}])

439.589954ms ago: executing program 3 (id=1114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000001010034002b8008000100", @ANYRES32, @ANYBLOB="080004002b000000d7fd0100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000100000000000100", @ANYRES32, @ANYBLOB="08001b"], 0x5c}}, 0x0)

336.421815ms ago: executing program 3 (id=1115):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0xedcb, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844)

244.45148ms ago: executing program 3 (id=1116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r1, 0x205, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x0)

244.194639ms ago: executing program 3 (id=1117):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003"], 0x0, 0x5a}, 0x28)

110.541063ms ago: executing program 3 (id=1118):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
mount(&(0x7f0000003d00)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000140)='binder\x00', 0x3200896, 0x0)
pread64(r0, &(0x7f0000002380)=""/253, 0xfdef, 0x4eb)

110.329732ms ago: executing program 0 (id=1119):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x800, 0xa}, 0x20)

4.727114ms ago: executing program 3 (id=1120):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x19})

0s ago: executing program 0 (id=1121):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x25, 0x50000d11, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50)
close(r0)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)

kernel console output (not intermixed with test programs):

 bcdDevice= 0.40
[  100.220413][ T6074] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  100.223263][ T6074] usb 1-1: Product: syz
[  100.224509][ T6074] usb 1-1: Manufacturer: syz
[  100.234792][ T6074] hub 1-1:4.0: USB hub found
[  100.442411][ T6074] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  100.761962][  T992] usb 1-1: USB disconnect, device number 5
[  100.863035][ T6526] ptrace attach of "/syz-executor exec"[5617] was attempted by "\x22"[6526]
[  100.879578][ T6528] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.308'.
[  100.934245][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'.
[  100.948336][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[  100.958183][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'.
[  100.970511][ T6532] netlink: 'syz.2.311': attribute type 15 has an invalid length.
[  101.085114][  T992] IPVS: starting estimator thread 0...
[  101.201753][ T6539] IPVS: using max 51 ests per chain, 122400 per kthread
[  101.485502][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  101.671572][   T24] usb 1-1: Using ep0 maxpacket: 8
[  101.679490][   T24] usb 1-1: config index 0 descriptor too short (expected 20772, got 36)
[  101.701180][   T24] usb 1-1: config 6 has too many interfaces: 211, using maximum allowed: 32
[  101.719529][   T24] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 211
[  101.729891][   T24] usb 1-1: config 6 has no interface number 0
[  101.732545][   T24] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  101.736216][   T24] usb 1-1: config 6 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 69
[  101.742490][   T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=82.06
[  101.746120][   T24] usb 1-1: New USB device strings: Mfr=62, Product=2, SerialNumber=3
[  101.749361][   T24] usb 1-1: Product: syz
[  101.751198][   T24] usb 1-1: Manufacturer: syz
[  101.755653][   T24] usb 1-1: SerialNumber: syz
[  101.761066][ T6549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  101.782329][   T24] hso 1-1:6.2: Failed to find INT IN ep
[  101.854479][ T6564] PKCS8: Unsupported PKCS#8 version
[  102.005039][   T24] usb 1-1: USB disconnect, device number 6
[  102.601532][ T6568] loop0: detected capacity change from 0 to 2048
[  102.636888][ T6568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.648751][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.803175][   T10] usb 2-1: Using ep0 maxpacket: 8
[  102.811142][   T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  102.814270][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  102.817731][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  102.821475][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  102.825987][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.833960][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  102.843901][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.916397][ T6571] loop0: detected capacity change from 0 to 8
[  102.944845][ T6571] SQUASHFS error: xz decompression failed, data probably corrupt
[  102.947725][ T6571] SQUASHFS error: Failed to read block 0x108: -5
[  102.950585][ T6571] SQUASHFS error: Unable to read metadata cache entry [106]
[  102.954527][ T6571] SQUASHFS error: Unable to read inode 0x11f
[  103.097093][   T10] usb 2-1: usb_control_msg returned -32
[  103.109321][   T10] usbtmc 2-1:16.0: can't read capabilities
[  103.300025][   T10] usb 2-1: USB disconnect, device number 5
[  103.395510][ T6578] loop0: detected capacity change from 0 to 4096
[  103.399319][ T6578] ntfs3(loop0): ino=2, mi_enum_attr
[  103.400990][ T6578] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  103.403876][ T6578] ntfs3(loop0): Failed to load $LogFile (-2).
[  103.550741][ T6582] netlink: 'syz.0.333': attribute type 20 has an invalid length.
[  103.553181][ T6582] IPv6: NLM_F_CREATE should be specified when creating new route
[  103.650517][ T6584] loop0: detected capacity change from 0 to 4096
[  103.657439][ T6584] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  103.752985][ T6584] ntfs3(loop0): Failed to initialize $Secure (-22).
[  104.322334][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  104.361902][  T992] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  104.491976][   T24] usb 1-1: Using ep0 maxpacket: 32
[  104.497129][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.501294][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.506602][   T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  104.510106][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.530674][  T992] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.534266][  T992] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.536011][   T24] usb 1-1: config 0 descriptor??
[  104.547371][  T992] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  104.553855][  T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  104.559636][  T992] usb 3-1: SerialNumber: syz
[  104.796994][  T992] usb 3-1: 0:2 : does not exist
[  104.869066][  T992] usb 3-1: USB disconnect, device number 7
[  104.952597][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  105.088684][   T24] ft260 0003:0403:6030.0001: unknown main item tag 0x0
[  105.091045][   T24] ft260 0003:0403:6030.0001: unknown main item tag 0x0
[  105.179742][   T24] ft260 0003:0403:6030.0001: chip code: 0000 0000
[  105.390173][   T24] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  105.590434][   T24] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup
[  105.671560][ T6614] loop1: detected capacity change from 0 to 4096
[  105.675417][ T6614] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  105.678907][ T6614] ntfs3(loop1): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  105.703086][ T6614] ntfs3(loop1): ino=19, mi_enum_attr
[  105.809973][    T9] usb 1-1: USB disconnect, device number 7
[  106.411827][ T6641] loop2: detected capacity change from 0 to 2048
[  106.416600][ T6641] EXT4-fs: Ignoring removed mblk_io_submit option
[  106.507988][ T6641] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  106.511443][ T6641] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0)
[  106.613224][ T6643] loop1: detected capacity change from 0 to 1024
[  106.617020][ T6643] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  106.620974][ T6643] hfsplus: failed to load extents file
[  106.992301][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  107.142400][    T9] usb 1-1: Using ep0 maxpacket: 16
[  107.146762][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.151464][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.157847][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  107.162862][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  107.168466][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.176647][    T9] usb 1-1: config 0 descriptor??
[  107.195205][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  107.342393][   T24] usb 2-1: Using ep0 maxpacket: 16
[  107.347358][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.351469][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.355404][   T24] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  107.359192][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.365534][   T24] usb 2-1: config 0 descriptor??
[  107.491906][ T6671] loop2: detected capacity change from 0 to 32768
[  107.529182][ T6671] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.557099][ T6671] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  107.566495][ T6671] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30
[  107.583442][ T6671] XFS (loop2): Ending clean mount
[  107.599324][    T9] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max
[  107.610594][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input6
[  107.647997][    T9] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  107.696618][ T5613] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.789875][   T24] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0
[  107.795023][   T24] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0
[  107.803638][   T24] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0
[  107.814096][   T24] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0
[  107.820912][   T24] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0
[  107.838524][   T31] usb 1-1: USB disconnect, device number 8
[  107.877611][   T24] hid-multitouch 0003:1FD2:6007.0003: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[  107.997840][   T24] usb 2-1: USB disconnect, device number 6
[  108.018102][ T6683] loop2: detected capacity change from 0 to 256
[  108.035617][ T6683] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  108.235986][ T6691] loop2: detected capacity change from 0 to 512
[  108.244239][ T6691] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  108.259796][ T6691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.269388][ T6691] EXT4-fs (loop2): 1 truncate cleaned up
[  108.273240][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.283606][ T6691] EXT4-fs (loop2): shut down requested (1)
[  108.627492][ T6699] loop1: detected capacity change from 0 to 4096
[  108.633212][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  108.651798][ T6699] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  108.667307][ T6699] ntfs3(loop1): ino=1a, mi_enum_attr
[  108.669497][ T6699] ntfs3(loop1): ino=1a, mi_enum_attr
[  108.671554][ T6699] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  108.780266][ T6701] loop1: detected capacity change from 0 to 4096
[  108.786138][   T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  108.792124][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.800943][   T10] usb 1-1: Product: syz
[  108.811805][   T10] usb 1-1: Manufacturer: syz
[  108.814041][   T10] usb 1-1: SerialNumber: syz
[  108.825996][   T10] usb 1-1: config 0 descriptor??
[  108.837779][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.839469][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  108.867614][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  108.876246][   T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  108.888167][   T10] usb 1-1: media controller created
[  108.924084][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  108.970929][   T10] DVB: Unable to find symbol mt352_attach()
[  108.990994][   T10] DVB: Unable to find symbol nxt6000_attach()
[  108.996367][   T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  109.001190][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  109.008301][   T10] dvb-usb: schedule remote query interval to 1000 msecs.
[  109.011447][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  109.016366][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  109.020727][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  109.117694][   T33] audit: type=1326 audit(1778490396.416:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.385" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7d19cdd9 code=0x7ffc0000
[  109.126929][   T31] usb 1-1: USB disconnect, device number 9
[  109.139911][   T33] audit: type=1326 audit(1778490396.416:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.385" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7d19cdd9 code=0x7ffc0000
[  109.154088][   T33] audit: type=1326 audit(1778490396.416:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.385" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7d19cdd9 code=0x7ffc0000
[  109.172790][   T33] audit: type=1326 audit(1778490396.416:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.385" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7d19cdd9 code=0x7ffc0000
[  109.181924][   T33] audit: type=1326 audit(1778490396.416:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.385" exe="/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f3e7d19cdd9 code=0x7ffc0000
[  109.194055][   T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  109.198394][   T33] audit: type=1326 audit(1778490396.416:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.385" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7d19cdd9 code=0x7ffc0000
[  109.220824][   T33] audit: type=1326 audit(1778490396.416:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.385" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3e7d19cdd9 code=0x7ffc0000
[  109.238539][   T33] audit: type=1326 audit(1778490396.416:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.385" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3e7d19cdd9 code=0x7ffc0000
[  109.490205][ T6728] bridge_slave_0: left allmulticast mode
[  109.501200][ T6728] bridge_slave_0: left promiscuous mode
[  109.509446][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.522755][ T6728] bridge_slave_1: left allmulticast mode
[  109.524604][ T6728] bridge_slave_1: left promiscuous mode
[  109.528041][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.538552][ T6728] bond0: (slave bond_slave_0): Releasing backup interface
[  109.569530][ T6728] bond0: (slave bond_slave_1): Releasing backup interface
[  109.590700][ T6728] team0: Port device team_slave_0 removed
[  109.598365][ T6728] team0: Port device team_slave_1 removed
[  109.600700][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.610041][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.615106][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.617367][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.622377][ T6728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  109.650227][ T6731] team0: Mode changed to "loadbalance"
[  109.730890][ T6740] loop0: detected capacity change from 0 to 256
[  109.738237][ T6740] exfat: Deprecated parameter 'utf8'
[  109.747815][ T6740] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abb1, checksum : 0x1119abd0)
[  109.757526][ T6740] exFAT-fs (loop0): invalid boot region
[  109.759430][ T6740] exFAT-fs (loop0): failed to recognize exfat type
[  109.768280][ T6742] loop1: detected capacity change from 0 to 128
[  109.777790][ T6742] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.783707][ T6742] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  109.847427][ T5617] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.101371][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.130014][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.337381][ T6768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.410'.
[  110.342863][ T5676] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.349505][ T5676] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.362824][ T6768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.410'.
[  110.364045][ T5676] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.374726][ T5676] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.513034][ T6781] loop0: detected capacity change from 0 to 65
[  110.560451][ T6781] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  110.863166][ T6788] loop1: detected capacity change from 0 to 512
[  110.875898][ T6788] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.418: Invalid inode bitmap blk 4 in block_group 0
[  110.882488][ T6788] loop1: lost filesystem error report for type 5 error -117
[  110.883472][    C0] EXT4-fs (loop1): initial error at time 1778490398: ext4_read_inode_bitmap:139
[  110.889316][    C0] EXT4-fs (loop1): last error at time 1778490398: ext4_read_inode_bitmap:139
[  110.901530][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.938815][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.167773][ T6806] loop1: detected capacity change from 0 to 8
[  111.211133][ T6806] cramfs: bad data blocksize 3959421443
[  111.213713][ T6806] cramfs: bad data blocksize 4294965915
[  111.219019][ T6806] cramfs: bad data blocksize 802397048
[  111.221527][ T6806] cramfs: bad data blocksize 4294742353
[  111.224635][ T6806] cramfs: bad data blocksize 3367320904
[  111.226842][ T6806] cramfs: bad data blocksize 859179931
[  111.228925][ T6806] cramfs: bad data blocksize 3436389781
[  111.230979][ T6806] cramfs: bad data blocksize 4294365136
[  111.233302][ T6806] cramfs: bad data blocksize 4294967040
[  111.235516][ T6806] cramfs: bad data blocksize 3959421443
[  111.237823][   T33] audit: type=1800 audit(1778490398.535:12): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="file2" dev="loop1" ino=268 res=0 errno=0
[  111.298320][ T6808] evm: overlay not supported
[  111.897660][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  111.948795][ T6838] loop2: detected capacity change from 0 to 512
[  111.962247][ T6838] EXT4-fs: Ignoring removed oldalloc option
[  111.971497][ T6838] EXT4-fs (loop2): filesystem is read-only
[  111.976250][ T6838] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  111.987227][ T6838] EXT4-fs (loop2): filesystem is read-only
[  111.993620][ T6838] EXT4-fs (loop2): orphan cleanup on readonly fs
[  112.003719][ T6838] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.439: bg 0: block 64: padding at end of block bitmap is not set
[  112.026372][ T6838] loop2: lost filesystem error report for type 5 error -117
[  112.030877][ T6838] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  112.033677][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  112.033702][    C0] EXT4-fs (loop2): initial error at time 1778490399: ext4_validate_block_bitmap:441
[  112.033713][    C0] EXT4-fs (loop2): last error at time 1778490399: ext4_validate_block_bitmap:441
[  112.052012][ T6838] loop2: lost filesystem error report for type 5 error -117
[  112.055514][ T6838] EXT4-fs (loop2): 1 orphan inode deleted
[  112.061019][ T6838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  112.072973][    T9] usb 2-1: Using ep0 maxpacket: 32
[  112.079919][    T9] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  112.088053][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.090474][    T9] usb 2-1: Product: syz
[  112.091667][    T9] usb 2-1: Manufacturer: syz
[  112.094433][    T9] usb 2-1: SerialNumber: syz
[  112.101356][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.106574][    T9] usb 2-1: config 0 descriptor??
[  112.117343][    T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  112.121632][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  112.124679][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  112.135579][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  112.141713][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  112.155741][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  112.159296][    T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  112.162396][    T9] usb 2-1: media controller created
[  112.188233][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  112.207763][    T9] usb 2-1: selecting invalid altsetting 3
[  112.209896][    T9] ttusb2: set interface to alts=3 failed
[  112.234174][    T9] DVB: Unable to find symbol tda10086_attach()
[  112.236460][    T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  112.242010][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  112.244466][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  112.248175][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  112.249946][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  112.253392][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  112.283008][ T6074] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  112.330560][  T797] usb 2-1: USB disconnect, device number 7
[  112.358755][  T797] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  112.423003][   T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  112.434851][ T6074] usb 1-1: unable to get BOS descriptor or descriptor too short
[  112.438383][ T6074] usb 1-1: config 169 has an invalid interface number: 64 but max is 0
[  112.441291][ T6074] usb 1-1: config 169 has no interface number 0
[  112.444227][ T6074] usb 1-1: config 169 interface 64 has no altsetting 0
[  112.448919][ T6074] usb 1-1: New USB device found, idVendor=0951, idProduct=1697, bcdDevice= 1.00
[  112.452015][ T6074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.455822][ T6074] usb 1-1: Product: syz
[  112.457481][ T6074] usb 1-1: Manufacturer: syz
[  112.459193][ T6074] usb 1-1: SerialNumber: syz
[  112.572935][   T31] usb 3-1: Using ep0 maxpacket: 8
[  112.577711][   T31] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  112.581567][   T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  112.584806][   T31] usb 3-1: config 1 has no interface number 1
[  112.587151][   T31] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  112.590503][   T31] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  112.594510][   T31] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  112.602121][   T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.605582][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.608554][   T31] usb 3-1: Product: syz
[  112.610158][   T31] usb 3-1: Manufacturer: syz
[  112.611820][   T31] usb 3-1: SerialNumber: syz
[  112.624069][   T31] usb 3-1: 0:8 : does not exist
[  112.682966][ T6074] rndis_host 1-1:169.64: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  112.687921][ T6074] usb-storage 1-1:169.64: USB Mass Storage device detected
[  112.696962][ T6074] usb-storage 1-1:169.64: Quirks match for vid 0951 pid 1697: 200
[  112.759504][ T6074] usb 1-1: USB disconnect, device number 10
[  112.831061][   T31] usb 3-1: USB disconnect, device number 8
[  112.874395][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.278034][ T6858] xt_hashlimit: size too large, truncated to 1048576
[  113.442700][ T6074] kernel read not supported for file /media4 (pid: 6074 comm: kworker/1:5)
[  113.472238][ T6867] ALSA: mixer_oss: invalid OSS volume ''
[  113.509998][ T6871] netlink: 'syz.0.453': attribute type 4 has an invalid length.
[  113.580749][ T6875] team0: Unable to change to the same mode the team is in
[  113.816968][ T6891] loop0: detected capacity change from 0 to 256
[  113.838555][ T6891] FAT-fs (loop0): Directory bread(block 64) failed
[  113.841295][ T6891] FAT-fs (loop0): Directory bread(block 65) failed
[  113.844480][ T6891] FAT-fs (loop0): Directory bread(block 66) failed
[  113.847104][ T6891] FAT-fs (loop0): Directory bread(block 67) failed
[  113.849773][ T6891] FAT-fs (loop0): Directory bread(block 68) failed
[  113.853829][ T6891] FAT-fs (loop0): Directory bread(block 69) failed
[  113.857018][ T6891] FAT-fs (loop0): Directory bread(block 70) failed
[  113.859609][ T6891] FAT-fs (loop0): Directory bread(block 71) failed
[  113.862558][ T6891] FAT-fs (loop0): Directory bread(block 72) failed
[  113.866906][ T6891] FAT-fs (loop0): Directory bread(block 73) failed
[  113.913084][ T6074] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  114.012096][ T6896] capability: warning: `syz.0.463' uses 32-bit capabilities (legacy support in use)
[  114.076384][ T6074] usb 2-1: config 0 has an invalid interface number: 99 but max is 0
[  114.079645][ T6074] usb 2-1: config 0 has no interface number 0
[  114.086593][ T6074] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  114.091069][ T6074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.096751][ T6074] usb 2-1: Product: syz
[  114.099496][ T6074] usb 2-1: Manufacturer: syz
[  114.102204][ T6074] usb 2-1: SerialNumber: syz
[  114.111213][ T6074] usb 2-1: config 0 descriptor??
[  114.117553][ T6074] peak_usb 2-1:0.99: probe with driver peak_usb failed with error 99
[  114.323114][   T31] usb 2-1: USB disconnect, device number 8
[  114.463338][ T6074] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  114.615158][ T6074] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.618239][ T6074] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  114.621110][ T6074] usb 1-1: config 1 interface 0 has no altsetting 0
[  114.627237][ T6074] usb 1-1: string descriptor 0 read error: -22
[  114.629544][ T6074] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[  114.632773][ T6074] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[  114.644866][ T6074] usb 1-1: 0:2 : does not exist
[  114.660544][ T6906] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.468'.
[  114.712063][ T6074] usb-storage 1-1:1.1: USB Mass Storage device detected
[  114.795977][ T6912] loop2: detected capacity change from 0 to 2048
[  114.805225][ T6912] NILFS (loop2): invalid segment: Inconsistency found
[  114.808086][ T6912] NILFS (loop2): trying rollback from an earlier position
[  114.810827][ T6912] NILFS (loop2): invalid segment: Checksum error in segment payload
[  114.813900][ T6912] NILFS (loop2): error -22 while searching super root
[  115.160852][ T6932] netlink: 64 bytes leftover after parsing attributes in process `syz.2.480'.
[  115.178508][ T6074] usb 1-1: us122l: couldn't allocate write buffer
[  115.182228][ T6074] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22
[  115.192277][ T6074] usb 1-1: USB disconnect, device number 11
[  115.652842][ T6943] loop2: detected capacity change from 0 to 2048
[  115.677589][ T6943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.683493][ T6943] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.963339][ T6074] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  116.125568][ T6074] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.132198][ T6074] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  116.140768][ T6074] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 110, changing to 7
[  116.146823][ T6074] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 25967, setting to 1024
[  116.156102][ T6074] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.160760][ T6074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.165348][ T6074] usb 3-1: Product: syz
[  116.168539][ T6074] usb 3-1: Manufacturer: syz
[  116.172714][ T6074] usb 3-1: SerialNumber: syz
[  116.770748][ T6974] loop1: detected capacity change from 0 to 256
[  116.781954][ T6974] exfat: Deprecated parameter 'utf8'
[  116.786287][ T6974] exfat: Deprecated parameter 'namecase'
[  116.812072][ T6974] exfat: Deprecated parameter 'namecase'
[  116.817939][ T6974] exfat: Deprecated parameter 'utf8'
[  116.832023][ T6974] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  116.836725][ T6974] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  116.843626][ T6978] loop0: detected capacity change from 0 to 136
[  117.162459][ T6998] loop0: detected capacity change from 0 to 16
[  117.182277][ T6998] erofs (device loop0): mounted with root inode @ nid 36.
[  117.199067][ T6998] erofs (device loop0): invalid de[0].nameoff 0 @ nid 36
[  117.201385][ T6996] loop1: detected capacity change from 0 to 4096
[  117.257067][ T6074] cdc_ncm 3-1:1.0: bind() failure
[  117.274235][ T6074] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  117.282211][ T6074] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  117.288710][ T6074] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  117.295382][ T6074] usb 3-1: USB disconnect, device number 9
[  117.820503][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.896969][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.512'.
[  117.899971][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.512'.
[  117.903037][ T7012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.512'.
[  117.958141][   T33] audit: type=1326 audit(1778490405.255:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.2.515" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f913519cdd9 code=0x0
[  118.377364][ T7023] loop0: detected capacity change from 0 to 40427
[  118.383257][ T7023] F2FS-fs (loop0): build fault injection rate: 174
[  118.386099][ T7023] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  118.389849][ T7023] F2FS-fs (loop0): invalid crc value
[  118.461584][ T7023] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  118.469104][ T7023] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.548465][ T7029] loop1: detected capacity change from 0 to 32768
[  118.553975][ T7029] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.521 (7029)
[  118.597738][ T7029] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.601666][ T7029] BTRFS info (device loop1): using sha256 checksum algorithm
[  119.002579][ T7029] BTRFS info (device loop1): enabling ssd optimizations
[  119.005394][ T7029] BTRFS info (device loop1): turning on async discard
[  119.008019][ T7029] BTRFS info (device loop1): enabling free space tree
[  119.208515][ T7054] loop2: detected capacity change from 0 to 2048
[  119.218798][ T7054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.260747][ T5609] syz-executor: attempt to access beyond end of device
[  119.260747][ T5609] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.271439][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  119.271490][ T5609] Tainted: [L]=SOFTLOCKUP
[  119.271494][ T5609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.271500][ T5609] Call Trace:
[  119.271505][ T5609]  <TASK>
[  119.271509][ T5609]  dump_stack_lvl+0xe8/0x150
[  119.271524][ T5609]  f2fs_stop_checkpoint+0x3c7/0x590
[  119.271538][ T5609]  f2fs_write_end_io+0x1274/0x1740
[  119.271560][ T5609]  __submit_merged_bio+0x256/0x6a0
[  119.271573][ T5609]  __submit_merged_write_cond+0x3c9/0x4e0
[  119.271602][ T5609]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  119.271625][ T5609]  f2fs_write_data_pages+0x287e/0x34f0
[  119.271640][ T5609]  ? unwind_next_frame+0xa6/0x2550
[  119.271667][ T5609]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.271677][ T5609]  ? is_bpf_text_address+0x26/0x2b0
[  119.271692][ T5609]  ? arch_stack_walk+0xfb/0x150
[  119.271716][ T5609]  ? add_lock_to_list+0xc7/0x100
[  119.271729][ T5609]  ? lockdep_unlock+0x5d/0xd0
[  119.271736][ T5609]  ? __lock_acquire+0x146e/0x2cf0
[  119.271758][ T5609]  ? do_raw_spin_lock+0x12b/0x2f0
[  119.271774][ T5609]  ? do_raw_spin_unlock+0x4d/0x210
[  119.271786][ T5609]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.271797][ T5609]  do_writepages+0x32e/0x550
[  119.271811][ T5609]  ? do_raw_spin_unlock+0x4d/0x210
[  119.271825][ T5609]  filemap_fdatawrite+0x1e9/0x2f0
[  119.271836][ T5609]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  119.271866][ T5609]  ? do_raw_spin_unlock+0x4d/0x210
[  119.271880][ T5609]  f2fs_sync_dirty_inodes+0x30e/0x830
[  119.271899][ T5609]  f2fs_write_checkpoint+0x9df/0x26a0
[  119.271909][ T5609]  ? __lock_acquire+0x6b5/0x2cf0
[  119.271933][ T5609]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  119.271969][ T5609]  kill_f2fs_super+0x314/0x730
[  119.271983][ T5609]  ? __pfx_kill_f2fs_super+0x10/0x10
[  119.272000][ T5609]  ? lockdep_hardirqs_on+0x7a/0x110
[  119.272018][ T5609]  deactivate_locked_super+0xbc/0x130
[  119.272038][ T5609]  cleanup_mnt+0x437/0x4d0
[  119.272057][ T5609]  ? _raw_spin_unlock_irq+0x23/0x50
[  119.272073][ T5609]  task_work_run+0x1d9/0x270
[  119.272093][ T5609]  ? __pfx_task_work_run+0x10/0x10
[  119.272116][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.272129][ T5609]  exit_to_user_mode_loop+0xed/0x480
[  119.272143][ T5609]  ? rcu_is_watching+0x15/0xb0
[  119.272158][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.272167][ T5609]  do_syscall_64+0x33e/0xf80
[  119.272177][ T5609]  ? trace_irq_disable+0x3b/0x140
[  119.272193][ T5609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.272200][ T5609] RIP: 0033:0x7f012319e017
[  119.272211][ T5609] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  119.272217][ T5609] RSP: 002b:00007ffe3733a978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  119.272227][ T5609] RAX: 0000000000000000 RBX: 00007f0123232120 RCX: 00007f012319e017
[  119.272233][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3733aa30
[  119.272238][ T5609] RBP: 00007ffe3733aa30 R08: 00007ffe3733ba30 R09: 00000000ffffffff
[  119.272243][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3733bac0
[  119.272248][ T5609] R13: 00007f0123232120 R14: 000000000001d05b R15: 00007ffe3733bb00
[  119.272263][ T5609]  </TASK>
[  119.386000][ T5609] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  119.522124][ T7057] overlayfs: missing 'workdir'
[  119.614484][   T33] audit: type=1800 audit(1778490406.894:14): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.521" name="file2" dev="loop1" ino=261 res=0 errno=0
[  119.770241][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.525'.
[  119.966086][ T5617] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.105837][ T7067] loop2: detected capacity change from 0 to 512
[  120.129770][ T7067] EXT4-fs: Ignoring removed nobh option
[  120.134734][ T7067] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.163585][ T7067] EXT4-fs (loop2): orphan cleanup on readonly fs
[  120.166623][ T7067] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  120.197324][ T7067] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.529: attempt to clear invalid blocks 2 len 1
[  120.202072][ T7067] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  120.204066][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  120.208635][    C1] EXT4-fs (loop2): initial error at time 1778490407: ext4_clear_blocks:876: inode 13
[  120.211537][    C1] EXT4-fs (loop2): last error at time 1778490407: ext4_clear_blocks:876: inode 13
[  120.228143][ T7067] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  120.245910][ T7067] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.529: invalid indirect mapped block 1819239214 (level 0)
[  120.250728][ T7067] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  120.267759][ T7067] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.529: invalid indirect mapped block 1819239214 (level 1)
[  120.289930][ T7067] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  120.300550][ T7067] EXT4-fs (loop2): 1 truncate cleaned up
[  120.311081][ T7067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  120.328150][ T7073] netlink: 'syz.1.526': attribute type 4 has an invalid length.
[  120.363953][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.714962][ T6074] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  120.733989][   T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  120.843948][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  120.866233][ T6074] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  120.870378][ T6074] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  120.873933][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0
[  120.878382][ T6074] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  120.881144][ T6074] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  120.883534][ T6074] usb 1-1: Product: syz
[  120.884842][ T6074] usb 1-1: Manufacturer: syz
[  120.886395][ T6074] usb 1-1: SerialNumber: syz
[  120.890423][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.894464][ T6074] usb 1-1: config 0 descriptor??
[  120.897046][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.900208][   T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  120.903493][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.908533][ T6074] usb 1-1: selecting invalid altsetting 0
[  120.916748][   T31] usb 3-1: config 0 descriptor??
[  120.995894][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.001314][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.007969][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  121.013670][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  121.023062][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.039360][    T9] usb 2-1: config 0 descriptor??
[  121.121138][ T6074] usb 1-1: USB disconnect, device number 12
[  121.331808][   T31] logitech-djreceiver 0003:046D:C71F.0004: unknown main item tag 0x0
[  121.334732][   T31] logitech-djreceiver 0003:046D:C71F.0004: unknown main item tag 0x0
[  121.337628][   T31] logitech-djreceiver 0003:046D:C71F.0004: unknown main item tag 0x0
[  121.339889][   T31] logitech-djreceiver 0003:046D:C71F.0004: unknown main item tag 0x0
[  121.343478][   T31] logitech-djreceiver 0003:046D:C71F.0004: unknown main item tag 0x0
[  121.347130][   T31] logitech-djreceiver 0003:046D:C71F.0004: unknown main item tag 0x0
[  121.350215][   T31] logitech-djreceiver 0003:046D:C71F.0004: unknown main item tag 0x0
[  121.473605][    T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  121.541025][   T31] usb 3-1: USB disconnect, device number 10
[  122.004155][   T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  122.157430][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  122.165320][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  122.172630][   T31] usb 1-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2
[  122.179795][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.184400][   T31] usb 1-1: Product: syz
[  122.186571][   T31] usb 1-1: Manufacturer: syz
[  122.188177][   T31] usb 1-1: SerialNumber: syz
[  122.193115][   T31] usb 1-1: config 0 descriptor??
[  122.292396][   T31] usb 2-1: USB disconnect, device number 9
[  122.404928][ T6074] usb 1-1: USB disconnect, device number 13
[  122.425705][ T7095] loop2: detected capacity change from 0 to 40427
[  122.431865][ T7095] F2FS-fs (loop2): build fault injection rate: 174
[  122.434540][ T7095] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  122.438507][ T7095] F2FS-fs (loop2): invalid crc value
[  122.495623][ T7095] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.504421][ T7095] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  122.552310][ T5613] syz-executor: attempt to access beyond end of device
[  122.552310][ T5613] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  122.564834][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  122.564859][ T5613] Tainted: [L]=SOFTLOCKUP
[  122.564864][ T5613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.564872][ T5613] Call Trace:
[  122.564879][ T5613]  <TASK>
[  122.564885][ T5613]  dump_stack_lvl+0xe8/0x150
[  122.564926][ T5613]  f2fs_stop_checkpoint+0x3c7/0x590
[  122.564948][ T5613]  f2fs_write_end_io+0x1274/0x1740
[  122.564983][ T5613]  __submit_merged_bio+0x256/0x6a0
[  122.565003][ T5613]  __submit_merged_write_cond+0x3c9/0x4e0
[  122.565026][ T5613]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  122.565060][ T5613]  f2fs_write_data_pages+0x287e/0x34f0
[  122.565078][ T5613]  ? unwind_next_frame+0xa6/0x2550
[  122.565122][ T5613]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.565146][ T5613]  ? is_bpf_text_address+0x26/0x2b0
[  122.565170][ T5613]  ? arch_stack_walk+0xfb/0x150
[  122.565207][ T5613]  ? add_lock_to_list+0xc7/0x100
[  122.565258][ T5613]  ? lockdep_unlock+0x5d/0xd0
[  122.565269][ T5613]  ? __lock_acquire+0x146e/0x2cf0
[  122.565305][ T5613]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.565330][ T5613]  ? do_raw_spin_unlock+0x4d/0x210
[  122.565349][ T5613]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.565372][ T5613]  do_writepages+0x32e/0x550
[  122.565395][ T5613]  ? do_raw_spin_unlock+0x4d/0x210
[  122.565418][ T5613]  filemap_fdatawrite+0x1e9/0x2f0
[  122.565436][ T5613]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  122.565484][ T5613]  ? do_raw_spin_unlock+0x4d/0x210
[  122.565507][ T5613]  f2fs_sync_dirty_inodes+0x30e/0x830
[  122.565537][ T5613]  f2fs_write_checkpoint+0x9df/0x26a0
[  122.565555][ T5613]  ? __lock_acquire+0x6b5/0x2cf0
[  122.565594][ T5613]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  122.565649][ T5613]  kill_f2fs_super+0x314/0x730
[  122.565673][ T5613]  ? __pfx_kill_f2fs_super+0x10/0x10
[  122.565699][ T5613]  ? lockdep_hardirqs_on+0x7a/0x110
[  122.565727][ T5613]  deactivate_locked_super+0xbc/0x130
[  122.565749][ T5613]  cleanup_mnt+0x437/0x4d0
[  122.565769][ T5613]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.565788][ T5613]  task_work_run+0x1d9/0x270
[  122.565811][ T5613]  ? __pfx_task_work_run+0x10/0x10
[  122.565836][ T5613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.565851][ T5613]  exit_to_user_mode_loop+0xed/0x480
[  122.565865][ T5613]  ? rcu_is_watching+0x15/0xb0
[  122.565882][ T5613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.565897][ T5613]  do_syscall_64+0x33e/0xf80
[  122.565914][ T5613]  ? trace_irq_disable+0x3b/0x140
[  122.565939][ T5613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.565953][ T5613] RIP: 0033:0x7f913519e017
[  122.565968][ T5613] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  122.565980][ T5613] RSP: 002b:00007ffef4302cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  122.565994][ T5613] RAX: 0000000000000000 RBX: 00007f9135232120 RCX: 00007f913519e017
[  122.566004][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef4302d70
[  122.566013][ T5613] RBP: 00007ffef4302d70 R08: 00007ffef4303d70 R09: 00000000ffffffff
[  122.566022][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef4303e00
[  122.566030][ T5613] R13: 00007f9135232120 R14: 000000000001de2e R15: 00007ffef4303e40
[  122.566054][ T5613]  </TASK>
[  122.568186][ T5613] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  122.908038][ T7100] team0: Port device syz_tun added
[  122.921582][ T7100] team0: Port device syz_tun removed
[  122.927869][ T7100] bridge_slave_0: left allmulticast mode
[  122.929856][ T7100] bridge_slave_0: left promiscuous mode
[  122.932010][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.938407][ T7100] bridge_slave_1: left allmulticast mode
[  122.947568][ T7100] bridge_slave_1: left promiscuous mode
[  122.951450][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.960344][ T7100] bond0: (slave bond_slave_0): Releasing backup interface
[  122.980978][ T7100] bond0: (slave bond_slave_1): Releasing backup interface
[  123.002395][ T7100] team0: Port device team_slave_0 removed
[  123.016634][ T7100] team0: Port device team_slave_1 removed
[  123.021353][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.114831][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.118473][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.121053][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.127030][ T7100] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  123.384809][ T7105] warning: `syz.2.541' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  123.596726][ T7112] loop1: detected capacity change from 0 to 2048
[  123.607328][ T7112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.819670][ T7118] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  124.068015][ T7130] loop0: detected capacity change from 0 to 128
[  124.089329][ T7130] FAT-fs (loop0): bogus number of FAT sectors
[  124.092315][ T7130] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  124.095992][ T7130] FAT-fs (loop0): Can't find a valid FAT filesystem
[  124.104636][ T7132] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.197591][ T7136] netlink: 44 bytes leftover after parsing attributes in process `syz.1.557'.
[  124.242001][ T7138] loop2: detected capacity change from 0 to 256
[  124.413719][ T7149] loop1: detected capacity change from 0 to 2048
[  124.429463][ T7149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.604957][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  124.804877][   T10] usb 3-1: Using ep0 maxpacket: 8
[  124.873144][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  124.889397][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  124.905573][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  124.918236][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  124.935608][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  124.948808][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.021031][ T7151] loop1: detected capacity change from 0 to 32768
[  125.038997][ T7151] (syz.1.564,7151,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  125.057223][ T7151] (syz.1.564,7151,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  125.075529][ T7151] JBD2: Ignoring recovery information on journal
[  125.132406][ T7151] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  125.213210][   T10] usb 3-1: GET_CAPABILITIES returned 0
[  125.215735][   T10] usbtmc 3-1:16.0: can't read capabilities
[  125.309691][ T5617] ocfs2: Unmounting device (7,1) on (node local)
[  125.972242][    T9] usb 3-1: USB disconnect, device number 11
[  126.190567][ T7186] loop2: detected capacity change from 0 to 512
[  126.196289][ T7186] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  126.257365][ T7188] loop2: detected capacity change from 0 to 256
[  126.261669][ T7188] exfat: Deprecated parameter 'namecase'
[  126.279278][ T7188] exfat: Deprecated parameter 'utf8'
[  126.294340][ T7188] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d)
[  126.533579][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'.
[  126.537848][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'.
[  126.541133][ T7195] netlink: 'syz.2.580': attribute type 15 has an invalid length.
[  126.544134][ T7195] netlink: 'syz.2.580': attribute type 18 has an invalid length.
[  126.774850][ T7205] capability: warning: `syz.2.583' uses deprecated v2 capabilities in a way that may be insecure
[  126.960305][ T7196] loop1: detected capacity change from 0 to 131072
[  126.964849][ T7196] F2FS-fs (loop1): invalid crc value
[  127.027603][ T7196] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  127.037616][ T7196] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  127.275612][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[  128.037734][ T7238] loop0: detected capacity change from 0 to 32768
[  128.113659][ T7238] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  128.168858][ T7238] XFS (loop0): Ending clean mount
[  128.238025][ T7254] netlink: 'syz.2.600': attribute type 1 has an invalid length.
[  128.286022][ T7254] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.308601][ T7254] erspan0: entered allmulticast mode
[  128.314628][ T5609] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  128.338990][ T7254] bond1: (slave erspan0): making interface the new active one
[  128.358627][ T7254] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  128.527349][   T33] audit: type=1326 audit(1778490415.823:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.548517][   T33] audit: type=1326 audit(1778490415.823:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.565260][   T33] audit: type=1326 audit(1778490415.823:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.598300][   T33] audit: type=1326 audit(1778490415.823:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.605366][   T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  128.620421][   T33] audit: type=1326 audit(1778490415.823:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.645066][   T33] audit: type=1326 audit(1778490415.823:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.650250][ T7266] loop0: detected capacity change from 0 to 2048
[  128.675574][   T33] audit: type=1326 audit(1778490415.823:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.682619][   T33] audit: type=1326 audit(1778490415.823:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.690931][   T33] audit: type=1326 audit(1778490415.823:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.697105][   T24] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  128.699304][   T33] audit: type=1326 audit(1778490415.823:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012319cdd9 code=0x7ffc0000
[  128.762232][ T7270] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.074551][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'.
[  129.529244][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'.
[  129.607158][ T7314] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  129.619372][ T7314] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  129.628265][ T7314] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  129.633903][ T7314] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  129.792387][ T7306] loop0: detected capacity change from 0 to 40427
[  129.900586][ T7306] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.920774][ T7306] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  130.211731][ T7340] netlink: 'syz.2.637': attribute type 1 has an invalid length.
[  130.615180][  T992] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  130.703093][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.710933][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.714113][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.719264][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.722203][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.722228][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.722249][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.731305][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.734133][   T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.745439][   T24] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  130.770852][  T992] usb 3-1: unable to get BOS descriptor or descriptor too short
[  130.775198][  T992] usb 3-1: not running at top speed; connect to a high speed hub
[  130.781835][  T992] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40
[  130.788632][  T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.797742][  T992] usb 3-1: Product: syz
[  130.799248][  T992] usb 3-1: Manufacturer: syz
[  130.802400][  T992] usb 3-1: SerialNumber: syz
[  130.825270][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'.
[  131.017339][  T992] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  131.026791][  T992] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71
[  131.031930][  T992] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71
[  131.037320][  T992] usb 3-1: USB disconnect, device number 12
[  131.105996][ T7372] loop1: detected capacity change from 0 to 40427
[  131.111043][ T7372] F2FS-fs (loop1): invalid crc value
[  131.156559][ T7372] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.163760][ T7372] F2FS-fs (loop1): Start checkpoint disabled!
[  131.174534][ T7372] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  131.177760][ T7372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  131.211302][   T32] kworker/u9:1: attempt to access beyond end of device
[  131.211302][   T32] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  131.220824][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.220849][   T32] Tainted: [L]=SOFTLOCKUP
[  131.220854][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.220863][   T32] Workqueue: writeback wb_workfn (flush-7:1)
[  131.220912][   T32] Call Trace:
[  131.220918][   T32]  <TASK>
[  131.220924][   T32]  dump_stack_lvl+0xe8/0x150
[  131.220943][   T32]  f2fs_stop_checkpoint+0x3c7/0x590
[  131.220965][   T32]  f2fs_write_end_io+0x1274/0x1740
[  131.220999][   T32]  __submit_merged_bio+0x256/0x6a0
[  131.221021][   T32]  __submit_merged_write_cond+0x3c9/0x4e0
[  131.221044][   T32]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  131.221078][   T32]  f2fs_write_data_pages+0x287e/0x34f0
[  131.221095][   T32]  ? f2fs_build_free_nids+0xdc/0x1810
[  131.221137][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  131.221165][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  131.221210][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  131.221241][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  131.221266][   T32]  ? f2fs_update_inode+0x13d9/0x2620
[  131.221282][   T32]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  131.221298][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  131.221317][   T32]  do_writepages+0x32e/0x550
[  131.221339][   T32]  ? reacquire_held_locks+0x104/0x190
[  131.221356][   T32]  ? writeback_sb_inodes+0x463/0x19d0
[  131.221379][   T32]  __writeback_single_inode+0x133/0x10e0
[  131.221398][   T32]  ? do_raw_spin_unlock+0x4d/0x210
[  131.221421][   T32]  writeback_sb_inodes+0x979/0x19d0
[  131.221437][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  131.221482][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  131.221498][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  131.221549][   T32]  ? rcu_is_watching+0x15/0xb0
[  131.221573][   T32]  wb_writeback+0x445/0xb00
[  131.221731][   T32]  ? queue_io+0x261/0x470
[  131.221754][   T32]  ? __pfx_wb_writeback+0x10/0x10
[  131.221764][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  131.221784][   T32]  wb_workfn+0x3f8/0xf10
[  131.221794][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  131.221802][   T32]  ? look_up_lock_class+0x57/0x110
[  131.221820][   T32]  ? __pfx_wb_workfn+0x10/0x10
[  131.221830][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  131.221840][   T32]  ? lock_acquire+0x106/0x350
[  131.221850][   T32]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  131.221862][   T32]  ? process_scheduled_works+0xa70/0x1860
[  131.221871][   T32]  ? process_scheduled_works+0xa70/0x1860
[  131.221883][   T32]  ? process_scheduled_works+0xa70/0x1860
[  131.221890][   T32]  ? process_scheduled_works+0xa70/0x1860
[  131.221899][   T32]  process_scheduled_works+0xb5d/0x1860
[  131.221921][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  131.221933][   T32]  ? assign_work+0x3d5/0x5e0
[  131.221943][   T32]  worker_thread+0xa53/0xfc0
[  131.221964][   T32]  kthread+0x388/0x470
[  131.221975][   T32]  ? __pfx_worker_thread+0x10/0x10
[  131.221982][   T32]  ? __pfx_kthread+0x10/0x10
[  131.221993][   T32]  ret_from_fork+0x514/0xb70
[  131.222004][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  131.222012][   T32]  ? __switch_to+0xc79/0x1410
[  131.222025][   T32]  ? __pfx_kthread+0x10/0x10
[  131.222036][   T32]  ret_from_fork_asm+0x1a/0x30
[  131.222062][   T32]  </TASK>
[  131.222155][   T32] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  131.605696][ T7381] loop2: detected capacity change from 0 to 2048
[  131.618424][ T7381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.868930][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.658'.
[  131.933818][ T7399] loop0: detected capacity change from 0 to 128
[  132.232630][ T7419] loop2: detected capacity change from 0 to 512
[  132.253379][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'.
[  132.284457][ T7419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.290887][ T7419] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.365366][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  132.528175][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.542333][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 173, changing to 11
[  132.546536][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  132.557192][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  132.560784][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.573961][   T10] usb 1-1: Product: syz
[  132.575686][   T10] usb 1-1: Manufacturer: syz
[  132.577412][   T10] usb 1-1: SerialNumber: syz
[  132.829321][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  132.957672][   T10] usb 1-1: USB disconnect, device number 14
[  133.128515][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.172170][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.605475][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  133.699863][ T7442] loop2: detected capacity change from 0 to 32768
[  133.721694][ T7442] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.740322][ T7442] XFS (loop2): Ending clean mount
[  133.755797][   T10] usb 1-1: Using ep0 maxpacket: 8
[  133.758287][ T5613] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.760067][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  133.764727][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.768173][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  133.772999][   T10] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  133.776046][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.778867][   T10] usb 1-1: Product: syz
[  133.780553][   T10] usb 1-1: Manufacturer: syz
[  133.782172][   T10] usb 1-1: SerialNumber: syz
[  134.193894][   T10] usb 1-1: 0:2 : does not exist
[  134.207685][ T7462] program syz.1.687 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  134.215581][  T992] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  134.223172][   T10] usb 1-1: USB disconnect, device number 15
[  134.248992][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.308195][ T7466] loop1: detected capacity change from 0 to 8192
[  134.376586][  T992] usb 3-1: Using ep0 maxpacket: 32
[  134.380623][  T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.384736][  T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.390429][  T992] usb 3-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37
[  134.393734][  T992] usb 3-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0
[  134.396813][  T992] usb 3-1: Product: syz
[  134.398582][  T992] usb 3-1: Manufacturer: syz
[  134.406207][  T992] usb 3-1: config 0 descriptor??
[  134.722448][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  134.722462][   T33] audit: type=1326 audit(1778490422.013:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.694" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e7d19cdd9 code=0x0
[  134.867831][  T992] hid-generic 0003:25DD:F3D2.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0
[  135.090623][   T24] usb 3-1: USB disconnect, device number 13
[  135.342362][ T7499] loop0: detected capacity change from 0 to 256
[  135.361487][ T7499] FAT-fs (loop0): Directory bread(block 64) failed
[  135.364163][ T7499] FAT-fs (loop0): Directory bread(block 65) failed
[  135.371979][ T7499] FAT-fs (loop0): Directory bread(block 66) failed
[  135.374588][ T7499] FAT-fs (loop0): Directory bread(block 67) failed
[  135.377223][ T7499] FAT-fs (loop0): Directory bread(block 68) failed
[  135.379578][ T7499] FAT-fs (loop0): Directory bread(block 69) failed
[  135.382127][ T7499] FAT-fs (loop0): Directory bread(block 70) failed
[  135.384700][ T7499] FAT-fs (loop0): Directory bread(block 71) failed
[  135.388607][ T7499] FAT-fs (loop0): Directory bread(block 72) failed
[  135.390983][ T7499] FAT-fs (loop0): Directory bread(block 73) failed
[  135.413520][   T33] audit: type=1800 audit(1778490422.703:28): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.703" name="file1" dev="loop0" ino=1048642 res=0 errno=0
[  135.509061][ T7503] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  136.228852][  T992] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  136.442060][  T992] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  136.446854][  T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.466590][  T992] usb 3-1: config 0 descriptor??
[  136.477948][  T992] cp210x 3-1:0.0: cp210x converter detected
[  136.976010][  T992] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  136.994333][  T992] usb 3-1: cp210x converter now attached to ttyUSB0
[  137.090191][ T7523] loop0: detected capacity change from 0 to 1024
[  137.097455][ T7523] EXT4-fs: Ignoring removed orlov option
[  137.122542][ T7523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.135083][ T7523] EXT4-fs error (device loop0): __ext4_new_inode:1285: comm syz.0.712: failed to insert inode 12: doubly allocated?
[  137.164249][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.186693][   T31] usb 3-1: USB disconnect, device number 14
[  137.209689][   T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  137.214211][   T31] cp210x 3-1:0.0: device disconnected
[  138.043588][ T7533] loop2: detected capacity change from 0 to 4096
[  138.100359][ T7533] NILFS (loop2): mounting unchecked fs
[  138.118016][ T7533] NILFS (loop2): invalid segment: Checksum error in super root
[  138.132222][ T7533] NILFS (loop2): error -22 while loading super root
[  138.269187][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  138.271708][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  138.507655][ T7545] loop2: detected capacity change from 0 to 8
[  138.603678][ T7531] syz.0.715 (7531): drop_caches: 2
[  138.699327][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'.
[  138.804727][ T7560] loop0: detected capacity change from 0 to 512
[  138.812800][ T7562] batadv0: entered promiscuous mode
[  138.813782][ T7560] EXT4-fs: Ignoring removed nobh option
[  138.819529][ T7562] batadv0: left promiscuous mode
[  138.821819][ T7560] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  138.844579][ T7560] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  138.850537][ T7560] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.729: inode has both inline data and extents flags
[  138.854367][ T7560] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  138.854676][ T7560] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.729: couldn't read orphan inode 13 (err -117)
[  138.857646][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  138.857656][    C0] EXT4-fs (loop0): initial error at time 1778490426: ext4_orphan_get:1397: inode 13
[  138.857670][    C0] EXT4-fs (loop0): last error at time 1778490426: ext4_orphan_get:1397: inode 13
[  138.871932][ T7560] loop0: lost filesystem error report for type 5 error -117
[  138.873823][ T7560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.883736][ T7560] EXT4-fs (loop0): shut down requested (2)
[  138.900719][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.998918][ T7569] syz.0.733 (7569): drop_caches: 4
[  139.170361][ T7578] loop0: detected capacity change from 0 to 1024
[  139.177970][ T7578] EXT4-fs: Ignoring removed bh option
[  139.204239][ T7578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.209175][ T7578] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.239748][ T7578] EXT4-fs (loop0): stripe (536871160) is not aligned with cluster size (16), stripe is disabled
[  139.249525][ T7578] EXT4-fs (loop0): can't enable nombcache during remount
[  139.279916][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  139.350083][ T7587] process 'syz.0.739' launched '/dev/fd/3' with NULL argv: empty string added
[  139.395523][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[  139.432589][ T7589] bond1: Invalid ad_actor_system MAC address.
[  139.434615][ T7589] bond1: option ad_actor_system: invalid value (3303287)
[  139.443179][ T7589] bond1 (unregistering): Released all slaves
[  139.906234][  T797] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  140.077031][ T7610] loop1: detected capacity change from 0 to 128
[  140.078220][  T797] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  140.079640][ T7610] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  140.091323][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.099916][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.105759][ T7610] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  140.107595][  T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  140.114294][  T797] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  140.118364][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.137137][  T797] usb 3-1: config 0 descriptor??
[  140.339626][ T7616] Bluetooth: MGMT ver 1.23
[  140.574175][  T797] holtek_kbd 0003:04D9:A055.0009: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0
[  140.670421][ T7622] loop0: detected capacity change from 0 to 4096
[  140.677457][ T7622] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  140.768353][  T797] usb 3-1: USB disconnect, device number 15
[  140.838625][   T33] audit: type=1400 audit(1778490428.132:29): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620FFFFFFFFFFFFFFFF pid=7623 comm="syz.0.757"
[  140.889804][ T7626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.758'.
[  141.507076][ T5075] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  141.656652][ T5075] usb 1-1: Using ep0 maxpacket: 8
[  141.669880][ T5075] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  141.676193][ T5075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.682388][ T5075] usb 1-1: Product: syz
[  141.685558][ T5075] usb 1-1: Manufacturer: syz
[  141.690198][ T5075] usb 1-1: SerialNumber: syz
[  141.693072][ T5075] usb 1-1: config 0 descriptor??
[  141.866510][  T797] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  141.899711][ T5075] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  141.988105][ T7680] loop1: detected capacity change from 0 to 128
[  142.017170][  T797] usb 3-1: Using ep0 maxpacket: 16
[  142.022115][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.026347][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.031008][  T797] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  142.034117][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.038952][  T797] usb 3-1: config 0 descriptor??
[  142.043958][ T7680] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[  142.050106][ T7680] FAT-fs (loop1): Filesystem has been set read-only
[  142.119899][ T7682] loop1: detected capacity change from 0 to 8
[  142.129098][ T7682] SQUASHFS error: xz decompression failed, data probably corrupt
[  142.134616][ T7682] SQUASHFS error: Failed to read block 0x108: -5
[  142.138949][ T7682] SQUASHFS error: Unable to read metadata cache entry [106]
[  142.141977][ T7682] SQUASHFS error: Unable to read inode 0x11f
[  142.452097][  T797] ntrig 0003:1B96:0008.000A: nested delimiters
[  142.454345][  T797] ntrig 0003:1B96:0008.000A: item 0 1 2 10 parsing failed
[  142.456982][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  142.460059][  T797] ntrig 0003:1B96:0008.000A: parse failed
[  142.462383][  T797] ntrig 0003:1B96:0008.000A: probe with driver ntrig failed with error -22
[  142.606607][   T24] usb 2-1: Using ep0 maxpacket: 8
[  142.611103][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  142.614436][   T24] usb 2-1: config 2 has an invalid interface number: 216 but max is 0
[  142.617134][   T24] usb 2-1: config 2 has no interface number 0
[  142.619055][   T24] usb 2-1: config 2 interface 216 has no altsetting 0
[  142.623210][   T24] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=66.58
[  142.625793][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.628337][   T24] usb 2-1: Product: syz
[  142.629662][   T24] usb 2-1: Manufacturer: syz
[  142.631191][   T24] usb 2-1: SerialNumber: syz
[  142.658338][   T31] usb 3-1: USB disconnect, device number 16
[  142.723017][ T5075] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  142.728374][ T5075] usb 1-1: USB disconnect, device number 16
[  142.846642][   T24] legousbtower 2-1:2.216: interrupt endpoints not found
[  142.853280][   T24] usb 2-1: USB disconnect, device number 10
[  143.541323][ T7693] loop2: detected capacity change from 0 to 40427
[  143.545114][ T7693] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  143.547601][ T7693] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  143.550596][ T7693] F2FS-fs (loop2): build fault injection rate: 2
[  143.552506][ T7693] F2FS-fs (loop2): build fault injection type: 0x1f8
[  143.555293][ T7693] F2FS-fs (loop2): invalid crc value
[  143.619232][ T7693] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.654441][ T7693] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  143.663411][ T7693] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  143.703605][ T7693] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10f/0xff0
[  144.251452][ T7726] loop2: detected capacity change from 0 to 32768
[  144.255839][ T7726] btrfs: Deprecated parameter 'usebackuproot'
[  144.259962][ T7726] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  144.267818][ T7726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.802 (7726)
[  144.301675][ T7726] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.309617][ T7726] BTRFS info (device loop2): using crc32c checksum algorithm
[  144.442241][ T7726] BTRFS info (device loop2): rebuilding free space tree
[  144.474191][ T7726] BTRFS info (device loop2): enabling ssd optimizations
[  144.476532][ T7726] BTRFS info (device loop2): using spread ssd allocation scheme
[  144.479182][ T7726] BTRFS info (device loop2): turning on flush-on-commit
[  144.481418][ T7726] BTRFS info (device loop2): enabling free space tree
[  144.483595][ T7726] BTRFS info (device loop2): force clearing of disk cache
[  144.485880][ T7726] BTRFS info (device loop2): trying to use backup root at mount time
[  144.488770][ T7726] BTRFS info (device loop2): force zlib compression, level 3
[  144.533515][   T33] audit: type=1800 audit(1778490431.821:30): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.802" name="file1" dev="loop2" ino=260 res=0 errno=0
[  145.168348][ T7743] loop0: detected capacity change from 0 to 131072
[  145.172985][ T7743] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0)
[  145.175799][ T7743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  145.179181][ T7743] F2FS-fs (loop0): invalid crc value
[  145.230346][ T7743] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.238890][ T7743] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  145.241139][ T7743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  145.434926][ T5613] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.149624][ T7775] loop0: detected capacity change from 0 to 4096
[  146.156269][ T7775] ntfs3(loop0): ino=3, Correct links count -> 2.
[  146.217727][ T5075] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  146.342679][ T7777] openvswitch: netlink: IP tunnel dst address not specified
[  146.468539][ T5075] usb 2-1: config index 0 descriptor too short (expected 8475, got 27)
[  146.472733][ T5075] usb 2-1: config 0 has an invalid interface number: 200 but max is 2
[  146.475996][ T5075] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.482277][ T5075] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  146.485762][ T5075] usb 2-1: config 0 has no interface number 0
[  146.689085][ T5075] usb 2-1: too many endpoints for config 0 interface 200 altsetting 2: 229, using maximum allowed: 30
[  146.711500][ T5075] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 229
[  146.711531][ T5075] usb 2-1: config 0 interface 200 has no altsetting 0
[  146.719084][ T5075] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a
[  146.719101][ T5075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.719110][ T5075] usb 2-1: Product: syz
[  146.719117][ T5075] usb 2-1: Manufacturer: syz
[  146.719123][ T5075] usb 2-1: SerialNumber: syz
[  146.725670][ T5075] usb 2-1: config 0 descriptor??
[  146.817137][   T24] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  146.969559][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  146.972482][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  146.975871][   T24] usb 3-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.980509][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  146.985762][   T24] usb 3-1: string descriptor 0 read error: -22
[  146.988153][   T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.40
[  146.990945][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.032592][ T5075] usbhid 2-1:0.200: couldn't find an input interrupt endpoint
[  147.050790][ T5075] usb 2-1: USB disconnect, device number 11
[  147.431023][   T24] uclogic 0003:28BD:0075.000B: interface is invalid, ignoring
[  147.477143][  T797] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  147.615288][   T24] usb 3-1: USB disconnect, device number 17
[  147.639212][  T797] usb 1-1: config 8 has an invalid interface number: 80 but max is 0
[  147.646937][  T797] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  147.651006][  T797] usb 1-1: config 8 has no interface number 0
[  147.653067][  T797] usb 1-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  147.656977][  T797] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  147.661527][  T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.667886][  T797] usb 1-1: NFC: intf ffff8881bd000000 id ffffffff8f3e40a0
[  147.682646][ T7795] loop1: detected capacity change from 0 to 40427
[  147.685205][ T7795] F2FS-fs: heap/no_heap options were deprecated
[  147.688419][ T7795] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  147.690830][ T7795] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  147.694162][ T7795] F2FS-fs (loop1): invalid crc value
[  147.741263][ T7795] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.752420][ T7795] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  147.754685][ T7795] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  147.885189][   T24] usb 1-1: USB disconnect, device number 17
[  148.026569][ T7803] x_tables: unsorted underflow at hook 3
[  148.402178][ T7823] loop2: detected capacity change from 0 to 1024
[  148.412958][ T7823] hfsplus: Bad value for 'gid'
[  148.510443][ T7829] loop1: detected capacity change from 0 to 512
[  148.524468][ T7829] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  148.592802][ T7829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  148.617739][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  148.619597][    C1] EXT4-fs (loop1): initial error at time 1778490435: ext4_mb_generate_buddy:1317
[  148.622246][    C1] EXT4-fs (loop1): last error at time 1778490435: ext4_mb_generate_buddy:1317
[  148.644380][ T7829] Quota error (device loop1): write_blk: dquota write failed
[  148.671094][ T7829] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  148.681500][ T7829] Quota error (device loop1): write_blk: dquota write failed
[  148.694830][ T7829] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  148.701352][ T7829] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.839: Failed to acquire dquot type 1
[  148.711491][ T7829] loop1: lost filesystem error report for type 5 error -28
[  148.712038][ T7829] EXT4-fs (loop1): 1 truncate cleaned up
[  148.721125][ T7823] loop2: detected capacity change from 0 to 32768
[  148.726486][ T7823] JFS: Invalid value of umask
[  148.734522][ T7829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.806902][ T7829] EXT4-fs error (device loop1): __ext4_remount:6837: comm syz.1.839: Abort forced by user
[  148.817065][ T7829] EXT4-fs (loop1): Remounting filesystem read-only
[  148.825373][ T7829] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  148.847156][ T7829] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  148.894975][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.010343][   T33] audit: type=1326 audit(1778490436.301:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.1.845" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e7d19cdd9 code=0x0
[  149.610933][ T7851] loop0: detected capacity change from 0 to 512
[  149.615681][ T7851] EXT4-fs: inline encryption not supported
[  149.636907][ T7851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.642609][ T7851] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.268997][  T797] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  150.447516][  T797] usb 3-1: Using ep0 maxpacket: 8
[  150.450895][  T797] usb 3-1: config 0 has an invalid interface number: 186 but max is 0
[  150.453488][  T797] usb 3-1: config 0 has no interface number 0
[  150.456043][  T797] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  150.459954][  T797] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  150.464444][  T797] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  150.468392][  T797] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  150.471837][  T797] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  150.475345][  T797] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  150.482326][  T797] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  150.485420][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.489420][  T797] usb 3-1: Product: syz
[  150.490959][  T797] usb 3-1: Manufacturer: syz
[  150.492620][  T797] usb 3-1: SerialNumber: syz
[  150.497738][  T797] usb 3-1: config 0 descriptor??
[  150.713036][  T797] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  150.727273][  T797] usb 3-1: USB disconnect, device number 18
[  151.597808][  T992] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  151.709773][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.748858][  T992] usb 2-1: Using ep0 maxpacket: 16
[  151.760275][  T992] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  151.766743][  T992] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 205, changing to 11
[  151.775569][  T992] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid maxpacket 58926, setting to 1024
[  151.779132][  T797] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  151.784340][  T992] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.790568][  T992] usb 2-1: config 0 interface 0 has no altsetting 0
[  151.793343][ T7878] netlink: 'syz.0.858': attribute type 3 has an invalid length.
[  151.803653][  T992] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  151.806690][  T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.809439][  T992] usb 2-1: Product: syz
[  151.810683][  T992] usb 2-1: Manufacturer: syz
[  151.812539][  T992] usb 2-1: SerialNumber: syz
[  151.824659][  T992] usb 2-1: config 0 descriptor??
[  151.828964][ T7871] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  151.877670][ T7880] loop0: detected capacity change from 0 to 2048
[  151.884915][ T7880] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  151.891541][ T7880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.932890][  T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.942204][  T797] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[  151.949813][  T797] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[  151.956022][  T797] usb 3-1: Product: syz
[  151.958042][  T797] usb 3-1: Manufacturer: syz
[  151.959772][  T797] usb 3-1: SerialNumber: syz
[  151.970480][  T797] usb 3-1: config 0 descriptor??
[  151.975347][  T797] gspca_main: conex-2.14.0 probing 0572:0041
[  152.025478][ T7882] netlink: 165 bytes leftover after parsing attributes in process `syz.0.860'.
[  152.044540][ T7871] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  152.240231][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.864'.
[  152.272153][   T24] usb 2-1: USB disconnect, device number 12
[  152.274739][  T797] usb 3-1: USB disconnect, device number 19
[  152.529272][ T7895] loop0: detected capacity change from 0 to 40427
[  152.532867][ T7895] F2FS-fs (loop0): invalid crc value
[  152.583865][ T7895] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  152.598400][ T7895] F2FS-fs (loop0): Start checkpoint disabled!
[  152.608984][ T7895] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  152.612445][ T7895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  152.845459][ T7899] loop2: detected capacity change from 0 to 4096
[  153.488006][ T7920] loop1: detected capacity change from 0 to 512
[  153.492733][ T7920] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  153.495678][ T7920] UDF-fs: Scanning with blocksize 512 failed
[  153.502884][ T7920] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  153.505420][ T7920] UDF-fs: Scanning with blocksize 1024 failed
[  153.507702][ T7920] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  153.511282][ T7920] UDF-fs: Scanning with blocksize 2048 failed
[  153.514110][ T7920] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  153.519379][ T7920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.583490][ T7922] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  153.632500][ T7924] loop1: detected capacity change from 0 to 256
[  153.737296][ T7928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'.
[  153.805624][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'.
[  153.808605][ T7932] netlink: 'syz.1.882': attribute type 20 has an invalid length.
[  153.811047][ T7932] netlink: 'syz.1.882': attribute type 21 has an invalid length.
[  153.917145][ T7936] loop1: detected capacity change from 0 to 4096
[  153.921389][ T7936] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  153.938135][ T7936] ntfs3(loop1): ino=19, mi_enum_attr
[  153.940115][ T7936] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  153.956598][ T7936] ntfs3(loop1): failed to convert "c46c" to default
[  153.959735][ T7936] ntfs3(loop1): ino=20, mi_enum_attr
[  154.538098][ T5075] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  154.691212][ T5075] usb 3-1: config 8 has an invalid interface number: 223 but max is 0
[  154.699150][ T5075] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  154.707986][ T5075] usb 3-1: config 8 has no interface number 0
[  154.711488][ T5075] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  154.721909][ T5075] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  154.726907][ T5075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.729533][ T5075] usb 3-1: Product: syz
[  154.730978][ T5075] usb 3-1: Manufacturer: syz
[  154.732486][ T5075] usb 3-1: SerialNumber: syz
[  154.949088][ T5075] usb 3-1: USB disconnect, device number 20
[  155.136403][ T7965] loop1: detected capacity change from 0 to 512
[  155.142308][ T7965] EXT4-fs: Ignoring removed bh option
[  155.146953][ T7965] EXT4-fs: Ignoring removed bh option
[  155.150475][ T7965] EXT4-fs: Ignoring removed orlov option
[  155.155745][ T7965] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  155.179311][ T7965] block device autoloading is deprecated and will be removed.
[  155.182398][ T7965] EXT4-fs (loop1): external journal has bad superblock
[  155.629103][ T7972] loop2: detected capacity change from 0 to 32768
[  155.643088][ T7972] __find_get_block_slow() failed. block=72057594037927961, b_blocknr=24, b_state=0x00000019, b_size=512, device loop2 blocksize: 512
[  155.654131][ T7972] grow_buffers: requested out-of-range block 72057594037927961 for device loop2
[  155.658903][ T7972] (syz.2.900,7972,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  155.661275][ T7972] (syz.2.900,7972,0):ocfs2_read_locked_inode:599 ERROR: status = -12
[  155.663641][ T7972] (syz.2.900,7972,0):_ocfs2_get_system_file_inode:144 ERROR: status = -12
[  155.666312][ T7972] (syz.2.900,7972,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0
[  155.670148][ T7972] (syz.2.900,7972,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  155.672830][ T7972] (syz.2.900,7972,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  155.675784][ T7972] (syz.2.900,7972,0):ocfs2_fill_super:1177 ERROR: status = -22
[  156.005867][ T7975] loop2: detected capacity change from 0 to 32768
[  156.009914][ T7975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.901 (7975)
[  156.020442][ T7975] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.024284][ T7975] BTRFS info (device loop2): using sha256 checksum algorithm
[  156.120449][ T7975] BTRFS info (device loop2): enabling ssd optimizations
[  156.128658][ T7975] BTRFS info (device loop2): turning on async discard
[  156.131099][ T7975] BTRFS info (device loop2): enabling free space tree
[  156.282054][ T5613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.848334][  T992] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  156.964059][ T8015] Bluetooth: hci0: load_link_keys: too big key_count value 64512
[  157.018323][  T992] usb 2-1: Using ep0 maxpacket: 8
[  157.028376][  T992] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  157.037244][  T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.046350][  T992] usb 2-1: Product: syz
[  157.047665][  T992] usb 2-1: Manufacturer: syz
[  157.051465][  T992] usb 2-1: SerialNumber: syz
[  157.054773][  T992] usb 2-1: config 0 descriptor??
[  157.164886][ T8023] loop2: detected capacity change from 0 to 1024
[  157.184921][ T8023] hfsplus: bad catalog file entry
[  157.189488][ T8023] hfsplus: failed to load root directory
[  157.268629][  T992] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  157.401044][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'.
[  157.418619][ T8031] openvswitch: netlink: Flow actions attr not present in new flow.
[  157.505022][  T992] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  157.517932][  T992] usb 2-1: USB disconnect, device number 13
[  157.526817][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  157.669958][ T8035] loop0: detected capacity change from 0 to 512
[  157.676077][ T8035] EXT4-fs: Ignoring removed oldalloc option
[  157.690555][ T8035] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  157.702171][ T8035] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #11: comm syz.0.918: corrupted in-inode xattr: invalid ea_ino
[  157.706953][ T8035] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.708182][ T8035] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.918: couldn't read orphan inode 11 (err -117)
[  157.708376][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  157.716367][    C1] EXT4-fs (loop0): initial error at time 1778490445: ext4_iget_extra_inode:5128: inode 11
[  157.719254][    C1] EXT4-fs (loop0): last error at time 1778490445: ext4_iget_extra_inode:5128: inode 11
[  157.725849][ T8035] loop0: lost filesystem error report for type 5 error -117
[  157.748554][ T8035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.764831][   T33] audit: type=1800 audit(1778490445.060:32): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.918" name="file1" dev="loop0" ino=15 res=0 errno=0
[  157.791667][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.435750][ T8058] loop0: detected capacity change from 0 to 32768
[  158.504556][ T8058] jfs_mount: dbMount failed w/rc = -22
[  158.511090][ T8058] Mount JFS Failure: -22
[  158.514127][ T8058] jfs_mount failed w/return code = -22
[  158.820147][ T8085] loop0: detected capacity change from 0 to 512
[  158.825117][ T8085] FAT-fs (loop0): Directory bread(block 199916) failed
[  158.827796][ T8085] FAT-fs (loop0): Directory bread(block 199917) failed
[  158.832127][ T8085] FAT-fs (loop0): Directory bread(block 199918) failed
[  158.834713][ T8085] FAT-fs (loop0): Directory bread(block 199919) failed
[  158.837132][ T8085] FAT-fs (loop0): Directory bread(block 199920) failed
[  158.846509][ T8085] FAT-fs (loop0): Directory bread(block 199921) failed
[  158.850496][ T8085] FAT-fs (loop0): Directory bread(block 199922) failed
[  158.853254][ T8085] FAT-fs (loop0): Directory bread(block 199923) failed
[  159.028309][ T8095] loop1: detected capacity change from 0 to 1024
[  159.051515][ T8095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.059355][ T8095] EXT4-fs error (device loop1): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.1.942: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  159.074022][ T8095] EXT4-fs (loop1): Remounting filesystem read-only
[  159.090730][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.103155][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  159.258622][    T9] usb 1-1: Using ep0 maxpacket: 16
[  159.269146][    T9] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  159.279921][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.286444][    T9] usb 1-1: Product: syz
[  159.287752][    T9] usb 1-1: Manufacturer: syz
[  159.293692][    T9] usb 1-1: SerialNumber: syz
[  159.299408][    T9] usb 1-1: config 0 descriptor??
[  159.306305][    T9] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  159.344153][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'.
[  159.424725][ T8122] vivid-007: =================  START STATUS  =================
[  159.430620][ T8122] vivid-007: Enable Output Cropping: true
[  159.434858][ T8122] vivid-007: Enable Output Composing: true
[  159.436955][ T8122] vivid-007: Enable Output Scaler: true
[  159.439356][ T8122] vivid-007: Tx RGB Quantization Range: Automatic
[  159.441348][ T8122] vivid-007: Transmit Mode: HDMI
[  159.442959][ T8122] vivid-007: Hotplug Present: 0x00000000
[  159.444802][ T8122] vivid-007: RxSense Present: 0x00000000
[  159.446660][ T8122] vivid-007: EDID Present: 0x00000000
[  159.449188][ T8122] vivid-007: ==================  END STATUS  ==================
[  159.456837][ T8122] loop1: detected capacity change from 0 to 512
[  159.460415][ T8122] EXT4-fs: Ignoring removed i_version option
[  159.469020][ T8122] EXT4-fs: Ignoring removed bh option
[  159.501947][ T8122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.507860][  T797] usb 1-1: USB disconnect, device number 18
[  159.511642][ T8122] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  159.540511][ T8122] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.952: iget: bad i_size value: 2533274857506816
[  159.818617][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  159.978831][   T24] usb 2-1: Using ep0 maxpacket: 8
[  159.984791][   T24] usb 2-1: config index 0 descriptor too short (expected 20772, got 36)
[  159.987614][   T24] usb 2-1: config 6 has too many interfaces: 211, using maximum allowed: 32
[  159.990634][   T24] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 211
[  159.994092][   T24] usb 2-1: config 6 has no interface number 0
[  159.996637][   T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  160.000423][   T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x6 has invalid maxpacket 8261, setting to 1024
[  160.003972][   T24] usb 2-1: config 6 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024
[  160.011524][   T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=82.06
[  160.019251][   T24] usb 2-1: New USB device strings: Mfr=62, Product=2, SerialNumber=3
[  160.025285][   T24] usb 2-1: Product: syz
[  160.030574][   T24] usb 2-1: Manufacturer: syz
[  160.034625][   T24] usb 2-1: SerialNumber: syz
[  160.046881][ T8122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  160.056508][   T24] hso 2-1:6.2: Failed to find INT IN ep
[  160.263616][ T8122] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.952: iget: bad i_size value: 2533274857506816
[  160.288380][   T24] usb 2-1: USB disconnect, device number 14
[  160.874887][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.289263][   T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  161.416820][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  161.451561][   T24] usb 1-1: Using ep0 maxpacket: 32
[  161.452803][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  161.461010][   T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  161.461414][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  161.464012][   T24] usb 1-1: config 0 has no interface number 0
[  161.467767][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  161.469209][   T24] usb 1-1: config 0 interface 12 has no altsetting 0
[  161.472056][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  161.487552][   T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  161.492041][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.495064][   T24] usb 1-1: Product: syz
[  161.496703][   T24] usb 1-1: Manufacturer: syz
[  161.498609][   T24] usb 1-1: SerialNumber: syz
[  161.520899][   T24] usb 1-1: config 0 descriptor??
[  161.631716][ T8152] program syz.1.964 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  162.417922][ T8162] loop2: detected capacity change from 0 to 8
[  162.445422][ T8162] SQUASHFS error: zlib decompression failed, data probably corrupt
[  162.450458][ T8162] SQUASHFS error: Failed to read block 0x4de: -5
[  162.453588][ T8162] SQUASHFS error: zlib decompression failed, data probably corrupt
[  162.459819][ T8162] SQUASHFS error: Failed to read block 0x4df: -5
[  162.463425][ T8162] SQUASHFS error: zlib decompression failed, data probably corrupt
[  162.467275][ T8162] SQUASHFS error: Failed to read block 0x4e0: -5
[  162.471276][ T8162] SQUASHFS error: zlib decompression failed, data probably corrupt
[  162.473920][ T8162] SQUASHFS error: Failed to read block 0x4de: -5
[  162.475842][   T33] audit: type=1800 audit(1778490449.769:33): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.969" name="file1" dev="loop2" ino=5 res=0 errno=0
[  162.544991][ T8164] netlink: 'syz.2.970': attribute type 21 has an invalid length.
[  162.548145][ T8164] netlink: 'syz.2.970': attribute type 4 has an invalid length.
[  162.553020][ T8164] netlink: 120 bytes leftover after parsing attributes in process `syz.2.970'.
[  162.583627][   T24] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  162.587776][   T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  162.592120][   T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  162.594975][   T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  162.612969][   T24] usb 1-1: USB disconnect, device number 19
[  162.753943][ T8170] virtiofs: Unknown parameter 'always0000000		0
[  162.753943][ T8170] 19	batadv0   :     1      V3
[  162.753943][ T8170] 				010000E0     1 0:00000000		0
[  162.753943][ T8170] 20	vxcan0    :     1      V3
[  162.753943][ T8170] 				010000E0     1 0:00000000		0
[  162.753943][ T8170] 21	vxcan1    :     1      V3
[  162.753943][ T8170] 				010000E0     1 0:00000000		0
[  162.753943][ T8170] 22	veth0     :     1      V3
[  162.753943][ T8170] 				010000E0     1 0:00000000		0
[  162.753943][ T8170] 23	veth1     :     1      V3
[  162.753943][ T8170] 				010000E0     1 0:00000000		0
[  162.753943][ T8170] 24	wg0       :     1      V3
[  162.753943][ T8170] 				010000E0     1 0:00000000		0
[  162.753943][ T8170] 25	wg1       :     1      V3
[  162.753943][ T8170] 				010000E0     1 0:00000000		0
[  162.753943][ T8170] 26	wg2       :     1      V3
[  162.753943][ T8170] 				010000E0     1 0:00000000		0
[  162.753943][ T8170] 27	veth0_to_bridge:     1      V3
[  162.753943][ T8170] 				010000E0     1 0:0000trans'
[  163.090619][ T6074] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  163.249198][ T6074] usb 3-1: Using ep0 maxpacket: 32
[  163.258292][ T6074] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  163.265149][ T6074] usb 3-1: config 0 has no interface number 0
[  163.273175][ T6074] usb 3-1: config 0 interface 184 has no altsetting 0
[  163.286349][ T6074] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  163.292606][ T6074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.306335][ T6074] usb 3-1: Product: syz
[  163.307602][ T6074] usb 3-1: Manufacturer: syz
[  163.311609][ T6074] usb 3-1: SerialNumber: syz
[  163.318402][ T6074] usb 3-1: config 0 descriptor??
[  163.326935][ T8182] loop1: detected capacity change from 0 to 40427
[  163.332161][ T8182] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  163.334908][ T8182] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  163.338684][ T8182] F2FS-fs (loop1): invalid crc value
[  163.395495][ T8182] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.405569][ T8182] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  163.408331][ T8182] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  163.900628][   T33] audit: type=1800 audit(1778490450.989:34): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.978" name="file1" dev="loop1" ino=10 res=0 errno=0
[  164.083292][ T6074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  164.086832][ T6074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  164.212232][ T8204] loop0: detected capacity change from 0 to 256
[  164.237030][ T8204] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  164.497550][ T6074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  164.510215][ T6074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  164.519293][ T6074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  164.529833][ T6074] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  164.541906][ T6074] usb 3-1: USB disconnect, device number 21
[  164.557847][ T8216] loop1: detected capacity change from 0 to 1024
[  164.562450][ T8216] EXT4-fs: Ignoring removed i_version option
[  164.572762][ T8216] EXT4-fs: inline encryption not supported
[  164.610888][ T8216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.667468][ T5617] Quota error (device loop1): do_check_range: Getting block 262149 out of range 1-5
[  164.670937][ T5617] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  164.676260][ T5617] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz-executor: Failed to acquire dquot type 0
[  164.817331][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.144996][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.154407][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.160465][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.163351][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.170462][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.223201][ T4998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.228973][ T4998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.232237][ T4998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.244259][ T4998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.247727][ T4998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.822463][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.825496][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.828127][ T8222] bridge_slave_0: entered allmulticast mode
[  165.832337][ T8222] bridge_slave_0: entered promiscuous mode
[  165.836220][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.838540][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.841632][ T8222] bridge_slave_1: entered allmulticast mode
[  165.844771][ T8222] bridge_slave_1: entered promiscuous mode
[  165.865505][ T8222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.870985][ T8222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.891050][ T8222] team0: Port device team_slave_0 added
[  165.894675][ T8222] team0: Port device team_slave_1 added
[  165.913993][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.916626][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  165.944489][ T8222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.959399][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.968285][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  165.980354][ T8222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.061250][ T8222] hsr_slave_0: entered promiscuous mode
[  166.067144][ T8222] hsr_slave_1: entered promiscuous mode
[  166.074545][ T8222] debugfs: 'hsr0' already exists in 'hsr'
[  166.080001][ T8222] Cannot create hsr debugfs directory
[  166.115764][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'.
[  166.433084][ T8222] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  166.437589][ T8222] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  166.440762][ T8222] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  166.445174][ T8222] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  166.447916][ T8222] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  166.452245][ T8222] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  166.455057][ T8222] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  166.458910][ T8222] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  166.480453][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.482919][ T8222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.485489][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.487570][ T8222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.555533][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.585147][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.591658][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.640897][ T8222] 8021q: adding VLAN 0 to HW filter on device team0
[  166.665151][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.668105][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.674206][ T8299] ptrace attach of "/syz-executor exec"[8294] was attempted by "/syz-executor exec"[8299]
[  166.700560][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.702871][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.170260][ T8314] loop0: detected capacity change from 0 to 2048
[  167.195439][ T8314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.253374][   T33] audit: type=1800 audit(1778490454.549:35): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1023" name="file1" dev="loop0" ino=1415 res=0 errno=0
[  167.322902][ T4998] Bluetooth: hci2: command tx timeout
[  167.471774][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.657621][ T8222] veth0_vlan: entered promiscuous mode
[  167.679095][ T8222] veth1_vlan: entered promiscuous mode
[  167.728250][ T8222] veth0_macvtap: entered promiscuous mode
[  167.738744][ T8222] veth1_macvtap: entered promiscuous mode
[  167.764814][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.783546][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.799327][ T5676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.816759][ T5676] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.838654][ T5676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.843573][ T5676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.993067][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.000408][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.069000][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.077854][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.696677][ T4998] Bluetooth: hci2: command tx timeout
[  169.820720][   T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  169.980262][   T31] usb 3-1: Using ep0 maxpacket: 16
[  169.985372][   T31] usb 3-1: too many configurations: 112, using maximum allowed: 8
[  170.024325][   T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  170.036374][   T31] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  170.049322][   T31] usb 3-1: Product: syz
[  170.055715][   T31] usb 3-1: Manufacturer: syz
[  170.075081][   T31] r8152-cfgselector 3-1: Unknown version 0x0000
[  170.083355][   T31] r8152-cfgselector 3-1: config 0 descriptor??
[  170.106501][ T8355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1035'.
[  170.125796][ T8355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1035'.
[  170.203875][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'.
[  170.481122][   T31] r8152-cfgselector 3-1: USB disconnect, device number 22
[  171.397457][ T8371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1042'.
[  171.790354][ T4998] Bluetooth: hci2: command tx timeout
[  171.884139][ T8382] bridge1: entered promiscuous mode
[  171.887139][ T8382] bridge1: entered allmulticast mode
[  171.977744][ T8377] loop3: detected capacity change from 0 to 32768
[  172.071578][ T8390] loop2: detected capacity change from 0 to 256
[  172.081692][ T8390] exfat: Deprecated parameter 'utf8'
[  172.097643][ T8390] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  172.407566][ T8414] netlink: 'syz.0.1062': attribute type 61 has an invalid length.
[  173.011585][ T8428] xt_TPROXY: Can be used only with -p tcp or -p udp
[  173.068648][ T8431] netlink: 'syz.0.1071': attribute type 21 has an invalid length.
[  173.072742][ T8432] netlink: 'syz.3.1069': attribute type 1 has an invalid length.
[  173.073448][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'.
[  173.114268][ T5676] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  173.114350][ T8431] netlink: 'syz.0.1071': attribute type 21 has an invalid length.
[  173.117659][ T5676] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.117700][ T5676] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.117737][ T5676] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  173.124017][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'.
[  173.438100][ T8446] loop2: detected capacity change from 0 to 2048
[  173.461409][ T8448] netlink: zone id is out of range
[  173.463781][ T8448] netlink: zone id is out of range
[  173.465710][ T8448] netlink: zone id is out of range
[  173.467704][ T8448] netlink: zone id is out of range
[  173.487063][ T8446]  loop2: p2 p3 < > p4 < p5 >
[  173.489068][ T8446] loop2: partition table partially beyond EOD, truncated
[  173.572633][ T8446] loop2: p3 start 4284289 is beyond EOD, truncated
[  173.647429][ T5621] udevd[5621]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  173.651737][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  173.657138][ T5623] udevd[5623]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  173.870901][ T4998] Bluetooth: hci2: command tx timeout
[  174.130175][ T8452] loop2: detected capacity change from 0 to 40427
[  174.140801][ T8452] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  174.153599][ T8452] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  174.168287][ T8452] F2FS-fs (loop2): invalid crc value
[  174.252685][ T8452] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.263215][ T8452] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  174.265929][ T8452] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  174.617395][ T8470] loop2: detected capacity change from 0 to 1024
[  174.639858][ T8470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.671731][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.720717][ T5721] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  174.882825][ T5721] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  174.886198][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.159106][ T5721] usb 4-1: config 0 descriptor??
[  175.164846][ T5721] cp210x 4-1:0.0: cp210x converter detected
[  175.483075][ T8493] loop0: detected capacity change from 0 to 2048
[  175.492189][ T8493] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  175.497686][ T8493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.666854][ T5721] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  175.861551][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'.
[  175.877761][ T5721] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71
[  175.893972][ T5721] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  175.933111][ T5721] usb 4-1: cp210x converter now attached to ttyUSB0
[  175.944230][ T8503] IPVS: Error connecting to the multicast addr
[  175.958481][ T5721] usb 4-1: USB disconnect, device number 2
[  175.978825][ T5721] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  175.991114][ T5721] cp210x 4-1:0.0: device disconnected
[  176.890995][ T5721] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  177.073972][ T5721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  177.083194][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  177.089554][ T5721] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  177.100014][ T5721] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  177.103842][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.106108][ T5721] usb 4-1: Product: syz
[  177.107374][ T5721] usb 4-1: Manufacturer: syz
[  177.108996][ T5721] usb 4-1: SerialNumber: syz
[  177.112442][ T5721] usb 4-1: config 0 descriptor??
[  177.116537][ T8514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  177.119989][ T8514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  177.126747][ T5721] usb 4-1: ucan: probing device on interface #0
[  177.299300][ T8534] loop0: detected capacity change from 0 to 512
[  177.349334][ T8534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  177.355597][ T8534] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.390100][ T8534] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  177.394410][ T8534] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  177.400162][ T8534] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1110: Failed to acquire dquot type 0
[  177.428207][ T8528] loop2: detected capacity change from 0 to 32768
[  177.437379][ T8528] (syz.2.1107,8528,0):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 0.19034, should be 0.90
[  177.450744][ T8528] (syz.2.1107,8528,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  177.455133][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  177.457701][ T8528] (syz.2.1107,8528,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  177.464090][ T8528] (syz.2.1107,8528,0):ocfs2_fill_super:1177 ERROR: status = -22
[  177.551959][ T5721] usb 4-1: ucan: failed to retrieve device info
[  177.566893][ T5721] usb 4-1: ucan: probe failed; try to update the device firmware
[  177.607448][ T5721] usb 4-1: USB disconnect, device number 3
[  177.860547][ T8539] loop0: detected capacity change from 0 to 32768
[  177.866367][ T8539] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1111 (8539)
[  177.895300][ T8539] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.904469][ T8539] BTRFS info (device loop0): using sha256 checksum algorithm
[  177.916362][ T8541] loop2: detected capacity change from 0 to 32768
[  177.959465][   T33] audit: type=1800 audit(1778490465.247:36): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1112" name="file1" dev="loop2" ino=4 res=0 errno=0
[  178.019113][ T8539] BTRFS info (device loop0): enabling ssd optimizations
[  178.023643][ T8539] BTRFS info (device loop0): turning on async discard
[  178.026072][ T8539] BTRFS info (device loop0): enabling free space tree
[  178.073130][ T5609] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.160535][ T8559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1114'.
[  178.170990][ T8559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.439678][ T8541] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  178.439678][ T8541] 
[  178.447051][ T8541] ERROR: (device loop2): remounting filesystem as read-only
[  178.599866][ T5613] ------------[ cut here ]------------
[  178.602509][ T5613] kernel BUG at fs/jfs/inode.c:175!
[  178.611068][ T5613] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  178.613293][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  178.617080][ T5613] Tainted: [L]=SOFTLOCKUP
[  178.618674][ T5613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.622457][ T5613] RIP: 0010:jfs_evict_inode+0x438/0x440
[  178.624355][ T5613] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 a3 ef d5 fe e9 16 fe ff ff e8 c9 95 6a fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  178.630635][ T5613] RSP: 0018:ffffc90004897aa0 EFLAGS: 00010293
[  178.632555][ T5613] RAX: ffffffff835b0e77 RBX: ffff8881168c9eb8 RCX: ffff88810ef3d880
[  178.635051][ T5613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881168c9eb8
[  178.637594][ T5613] RBP: 0000000000000001 R08: ffffffff9030a6f7 R09: 1ffffffff20614de
[  178.640699][ T5613] R10: dffffc0000000000 R11: ffffffff835aeaa0 R12: dffffc0000000000
[  178.643479][ T5613] R13: dffffc0000000000 R14: ffff8881168c9b58 R15: ffff8881168c9eb8
[  178.646495][ T5613] FS:  00005555679f4500(0000) GS:ffff88818dc93000(0000) knlGS:0000000000000000
[  178.649872][ T5613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.652485][ T5613] CR2: 0000555567a0fa28 CR3: 0000000113696000 CR4: 00000000000006f0
[  178.655389][ T5613] Call Trace:
[  178.656669][ T5613]  <TASK>
[  178.657803][ T5613]  ? evict+0x612/0xb10
[  178.659294][ T5613]  ? __pfx_jfs_evict_inode+0x10/0x10
[  178.661418][ T5613]  evict+0x61e/0xb10
[  178.662977][ T5613]  ? __pfx_evict+0x10/0x10
[  178.664811][ T5613]  ? do_raw_spin_lock+0x12b/0x2f0
[  178.666408][ T5613]  evict_inodes+0x75a/0x7f0
[  178.667817][ T5613]  ? __pfx_evict_inodes+0x10/0x10
[  178.669444][ T5613]  generic_shutdown_super+0xaa/0x2d0
[  178.671084][ T5613]  kill_block_super+0x44/0x90
[  178.672941][ T5613]  deactivate_locked_super+0xbc/0x130
[  178.675118][ T5613]  cleanup_mnt+0x437/0x4d0
[  178.676907][ T5613]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.678999][ T5613]  task_work_run+0x1d9/0x270
[  178.680797][ T5613]  ? __pfx_task_work_run+0x10/0x10
[  178.682524][ T5613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.684437][ T5613]  exit_to_user_mode_loop+0xed/0x480
[  178.686092][ T5613]  ? rcu_is_watching+0x15/0xb0
[  178.687538][ T5613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.689438][ T5613]  do_syscall_64+0x33e/0xf80
[  178.690876][ T5613]  ? trace_irq_disable+0x3b/0x140
[  178.692655][ T5613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.694893][ T5613] RIP: 0033:0x7f913519e017
[  178.696685][ T5613] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  178.703710][ T5613] RSP: 002b:00007ffef4302cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  178.706743][ T5613] RAX: 0000000000000000 RBX: 00007f9135232120 RCX: 00007f913519e017
[  178.709534][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef4302d70
[  178.712506][ T5613] RBP: 00007ffef4302d70 R08: 00007ffef4303d70 R09: 00000000ffffffff
[  178.715417][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef4303e00
[  178.718334][ T5613] R13: 00007f9135232120 R14: 000000000002b8f0 R15: 00007ffef4303e40
[  178.720799][ T5613]  </TASK>
[  178.721801][ T5613] Modules linked in:
[  178.723876][ T5613] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  178.842242][ T5613] RIP: 0010:jfs_evict_inode+0x438/0x440
[  178.844010][ T5613] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 a3 ef d5 fe e9 16 fe ff ff e8 c9 95 6a fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  178.850226][ T5613] RSP: 0018:ffffc90004897aa0 EFLAGS: 00010293
[  178.864035][ T5613] RAX: ffffffff835b0e77 RBX: ffff8881168c9eb8 RCX: ffff88810ef3d880
[  178.875357][ T5613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881168c9eb8
[  178.878132][ T5613] RBP: 0000000000000001 R08: ffffffff9030a6f7 R09: 1ffffffff20614de
[  178.890168][ T5613] R10: dffffc0000000000 R11: ffffffff835aeaa0 R12: dffffc0000000000
[  178.893565][ T5613] R13: dffffc0000000000 R14: ffff8881168c9b58 R15: ffff8881168c9eb8
[  178.904015][ T5613] FS:  00005555679f4500(0000) GS:ffff8882a9293000(0000) knlGS:0000000000000000
[  178.907523][ T5613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.910051][ T5613] CR2: 00007f8dc4f4b1a0 CR3: 0000000113696000 CR4: 00000000000006f0
[  178.913702][ T5613] Kernel panic - not syncing: Fatal exception
[  178.916748][ T5613] Kernel Offset: disabled
[  178.918448][ T5613] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:07:46  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff944c2670 RBX=000000000003ed56 RCX=a16b2bacd8a7c59b RDX=0000000002b08e00
RSI=000000009dfa47e4 RDI=ffff888102af0000 RBP=a16b2bacd8a7c59b RSP=ffffc90000006568
R8 =ffffffff899fad4f R9 =ffff888168ad7d58 R10=0000000000004888 R11=0000000000000000
R12=ffff888102af0cd0 R13=ffff888102af0cd0 R14=ffff888102af0000 R15=0000000000000008
RIP=ffffffff81a1ae6c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818dc93000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555567a0fa28 CR3=0000000113696000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=000000000aa314c6 RCX=20c49ba5e353f7cf RDX=00000000aa314c6f
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90000a08550 RSP=ffffc90000a08220
R8 =ffff88816d0e8e43 R9 =1ffff1102da1d1c8 R10=dffffc0000000000 R11=ffffed102da1d1c9
R12=ffff88816d0e8d00 R13=dffffc0000000000 R14=0000000000004957 R15=ffff88816d0e9624
RIP=ffffffff8a15d640 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1eb0c91800 ffffffff 00c00000
GS =0000 ffff8882a9293000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b14f4a2d88 CR3=0000000171f50000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
