last executing test programs:

2m23.612192677s ago: executing program 2 (id=1021):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2m23.531984955s ago: executing program 2 (id=1023):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xfffffffa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

2m22.667513903s ago: executing program 2 (id=1036):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r3 = socket$inet(0x2, 0x3, 0x4)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @multicast1}, {0x2, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d8faebab25c9440f1e0b429560dea05fcfa134c5886328060189b9c9d245a4ec", "ddff6f80bb17115c263975c19a199a87b509ec91752b1f6b9fe52dd68897d0dd66c8047ecb3c1ccab1b385024cd3ef42", "7af3756a000040002683eb956c290000000000220000000400000008", {"e311f95152ce9fab74b351abd67a3e95", "f543716814ec69725136619246be0a0c"}}}}}}}, 0x0)
write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2m22.299213771s ago: executing program 2 (id=1044):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2715, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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")
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x44c1, 0x0, 0x0, 0x0, 0x1a, 0x1, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x8000000000000077]}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

2m22.168013677s ago: executing program 2 (id=1047):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfe, 0x627a, &(0x7f0000001f80)="$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")
listxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0)

2m21.952068237s ago: executing program 2 (id=1052):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
cachestat(r0, &(0x7f0000000040)={0x81}, &(0x7f000009de80), 0x0)

2m21.851048769s ago: executing program 32 (id=1052):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
cachestat(r0, &(0x7f0000000040)={0x81}, &(0x7f000009de80), 0x0)

1m8.363185678s ago: executing program 3 (id=1947):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x25dfdbff, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xfff}]}, 0x24}}, 0x0)

1m8.294704129s ago: executing program 3 (id=1949):
r0 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m8.294116317s ago: executing program 3 (id=1950):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r0, 0x5, 0x0, @val=@tracing={0x0, 0x8000000000000000}}, 0x20)

1m8.233680182s ago: executing program 3 (id=1951):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

1m8.122819335s ago: executing program 3 (id=1955):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0)

1m7.864371858s ago: executing program 3 (id=1964):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@discard_sync}, {@compress_algo={'compress', 0x3d, 'no'}}, {@compress_force}, {@nossd_spread}, {@nodatacow}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x67, 0x36, 0x74, 0x0, 0x39]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

1m7.692643065s ago: executing program 33 (id=1964):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@discard_sync}, {@compress_algo={'compress', 0x3d, 'no'}}, {@compress_force}, {@nossd_spread}, {@nodatacow}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x67, 0x36, 0x74, 0x0, 0x39]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

2.660110587s ago: executing program 1 (id=2851):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x3, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.659773297s ago: executing program 1 (id=2852):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x1)
ppoll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x79f4, 0x8ba, 0x2, {0x6, @vbi={0x8, 0x6, 0x401, 0x31324d4e, [0x7], [0x40, 0x2], 0x1}}, 0x40004})

1.7578498s ago: executing program 1 (id=2862):
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
openat2$dir(0xffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_pts(r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1)
pipe2$9p(&(0x7f0000001900)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}], [], 0x6b}})

1.081605106s ago: executing program 0 (id=2874):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000005f40)={0x34, r1, 0x1, 0x70bd2d, 0xfffffffc, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x0)

1.081336527s ago: executing program 4 (id=2875):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)

999.676278ms ago: executing program 4 (id=2876):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}]}, 0x4c}}, 0x40004)

999.254219ms ago: executing program 0 (id=2877):
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xff5d, &(0x7f0000000240)=0x7834bcc6)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
getuid()

901.23025ms ago: executing program 4 (id=2878):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x10}, 0x20)

837.650835ms ago: executing program 1 (id=2879):
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
ptrace(0x10, 0x1)

621.330411ms ago: executing program 4 (id=2880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a300000000005000100070000000800094000000001140008"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)

620.985378ms ago: executing program 1 (id=2881):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x1, 0x33424752, 0x1, @stepwise={0x84, 0x2, 0x401, 0xd, 0x8, 0x8}})

558.895129ms ago: executing program 1 (id=2882):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip_vti0\x00', 0x10)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

558.557358ms ago: executing program 4 (id=2883):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f0000000140)="9f", 0xfef4, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c)

479.057901ms ago: executing program 4 (id=2884):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
read(r1, &(0x7f0000004ac0)=""/237, 0x11b)
syz_io_uring_complete(r0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000})

121.738624ms ago: executing program 0 (id=2885):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

73.530974ms ago: executing program 0 (id=2886):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r1, r0, 0x4}, 0x10)

73.216279ms ago: executing program 0 (id=2887):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffff801}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

0s ago: executing program 0 (id=2888):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44361' (ED25519) to the list of known hosts.
syzkaller login: [   63.561417][ T5824] cgroup: Unknown subsys name 'net'
[   63.721205][ T5824] cgroup: Unknown subsys name 'cpuset'
[   63.725144][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.473474][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   73.109608][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.112909][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.118816][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.122482][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.125666][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.185806][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.192989][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.195682][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.200468][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.204383][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.207189][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.210744][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.213060][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.215872][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.219121][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.382338][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   73.588705][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.591996][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.594297][ T5873] bridge_slave_0: entered allmulticast mode
[   73.597158][ T5873] bridge_slave_0: entered promiscuous mode
[   73.613691][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.615825][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.617946][ T5873] bridge_slave_1: entered allmulticast mode
[   73.624447][ T5873] bridge_slave_1: entered promiscuous mode
[   73.636384][ T5878] chnl_net:caif_netlink_parms(): no params data found
[   73.682742][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   73.697472][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.727349][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.791882][ T5873] team0: Port device team_slave_0 added
[   73.793825][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.796293][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.801024][ T5878] bridge_slave_0: entered allmulticast mode
[   73.803800][ T5878] bridge_slave_0: entered promiscuous mode
[   73.814948][ T5873] team0: Port device team_slave_1 added
[   73.816680][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.819482][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.821710][ T5878] bridge_slave_1: entered allmulticast mode
[   73.824271][ T5878] bridge_slave_1: entered promiscuous mode
[   73.847468][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.850729][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.853495][ T5876] bridge_slave_0: entered allmulticast mode
[   73.857159][ T5876] bridge_slave_0: entered promiscuous mode
[   73.876095][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.878416][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.881047][ T5876] bridge_slave_1: entered allmulticast mode
[   73.883669][ T5876] bridge_slave_1: entered promiscuous mode
[   73.887195][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.889272][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.896368][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.903667][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.916627][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.919082][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.926496][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.932322][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.960163][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.972621][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.986174][ T5878] team0: Port device team_slave_0 added
[   73.991765][ T5878] team0: Port device team_slave_1 added
[   74.027015][ T5873] hsr_slave_0: entered promiscuous mode
[   74.029912][ T5873] hsr_slave_1: entered promiscuous mode
[   74.041301][ T5876] team0: Port device team_slave_0 added
[   74.044352][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.046821][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.057730][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.062437][ T5876] team0: Port device team_slave_1 added
[   74.065005][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.067196][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.076713][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.112843][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.114823][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.121981][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.138940][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.140869][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.147799][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.194917][ T5878] hsr_slave_0: entered promiscuous mode
[   74.197127][ T5878] hsr_slave_1: entered promiscuous mode
[   74.199508][ T5878] debugfs: 'hsr0' already exists in 'hsr'
[   74.201149][ T5878] Cannot create hsr debugfs directory
[   74.243899][ T5876] hsr_slave_0: entered promiscuous mode
[   74.246070][ T5876] hsr_slave_1: entered promiscuous mode
[   74.248009][ T5876] debugfs: 'hsr0' already exists in 'hsr'
[   74.249685][ T5876] Cannot create hsr debugfs directory
[   74.409765][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.442626][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.460577][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.476546][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.537087][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.547842][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.556625][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.564406][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.620611][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.627644][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.632965][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.640434][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.720986][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.731588][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.761169][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   74.772090][ T5878] 8021q: adding VLAN 0 to HW filter on device team0
[   74.783341][  T738] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.786176][  T738] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.802510][  T738] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.805303][  T738] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.811511][  T738] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.813887][  T738] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.832663][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.835399][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.887922][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.935590][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   74.955856][  T738] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.958521][  T738] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.970429][  T738] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.972979][  T738] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.061770][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.102103][ T5873] veth0_vlan: entered promiscuous mode
[   75.122430][ T5873] veth1_vlan: entered promiscuous mode
[   75.140509][ T5881] Bluetooth: hci0: command tx timeout
[   75.175299][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.200377][ T5873] veth0_macvtap: entered promiscuous mode
[   75.211745][ T5873] veth1_macvtap: entered promiscuous mode
[   75.237653][ T5878] veth0_vlan: entered promiscuous mode
[   75.244504][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.260209][ T5878] veth1_vlan: entered promiscuous mode
[   75.267794][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.285075][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.299905][ T5228] Bluetooth: hci1: command tx timeout
[   75.302294][ T5881] Bluetooth: hci2: command tx timeout
[   75.317186][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.321973][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.330448][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.337716][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.356779][ T5878] veth0_macvtap: entered promiscuous mode
[   75.376599][ T5878] veth1_macvtap: entered promiscuous mode
[   75.382766][ T5876] veth0_vlan: entered promiscuous mode
[   75.417305][ T5876] veth1_vlan: entered promiscuous mode
[   75.448297][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.477886][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.483450][  T738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.485741][  T738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.498813][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.512137][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.526700][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.531830][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.540174][ T5876] veth0_macvtap: entered promiscuous mode
[   75.545507][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.548871][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.572587][ T5876] veth1_macvtap: entered promiscuous mode
[   75.626917][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.636788][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   75.653614][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.657309][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.662367][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.670589][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.673507][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.695738][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.700540][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.722722][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.726076][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.806275][  T738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.810351][  T738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.845810][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.847971][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.370695][ T5954] netlink: 104 bytes leftover after parsing attributes in process `syz.1.25'.
[   76.374903][ T5955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.699035][ T5972] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure
[   76.989124][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[   76.991506][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[   77.146975][ T5992] loop1: detected capacity change from 0 to 8
[   77.219166][ T5881] Bluetooth: hci0: command tx timeout
[   77.379186][ T5228] Bluetooth: hci1: command tx timeout
[   77.381239][ T5881] Bluetooth: hci2: command tx timeout
[   77.481259][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'.
[   78.290575][   T34] audit: type=1804 audit(1770151992.172:2): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.52" name="/newroot/18/file0" dev="tmpfs" ino=111 res=1 errno=0
[   78.516392][ T6027] loop0: detected capacity change from 0 to 256
[   78.540297][ T6027] FAT-fs (loop0): Directory bread(block 1285) failed
[   78.547314][ T6027] FAT-fs (loop0): Directory bread(block 1286) failed
[   78.555573][ T6027] FAT-fs (loop0): Directory bread(block 1287) failed
[   78.564024][ T6027] FAT-fs (loop0): Directory bread(block 1288) failed
[   78.609300][ T6027] FAT-fs (loop0): Directory bread(block 1285) failed
[   78.611955][ T6027] FAT-fs (loop0): Directory bread(block 1286) failed
[   78.614435][ T6027] FAT-fs (loop0): Directory bread(block 1287) failed
[   78.616909][ T6027] FAT-fs (loop0): Directory bread(block 1288) failed
[   78.620881][ T6027] FAT-fs (loop0): FAT read failed (blocknr 1281)
[   78.624424][ T6027] FAT-fs (loop0): Directory bread(block 1285) failed
[   78.777692][ T6041] loop1: detected capacity change from 0 to 128
[   78.805753][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   78.815591][ T6044] loop2: detected capacity change from 0 to 128
[   78.828093][ T6044] qnx6: block size(2066842817) > page size(4096) not supported by filesystem
[   78.837700][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   78.844417][ T6044] qnx6: unable to set blocksize
[   78.847532][ T6041] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   78.867608][ T6041] UDF-fs: Scanning with blocksize 512 failed
[   78.882520][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   78.902819][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   78.908307][ T6041] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   78.911789][ T6041] UDF-fs: Scanning with blocksize 1024 failed
[   78.918647][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   78.922371][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   78.925374][ T6041] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   78.927923][ T6041] UDF-fs: Scanning with blocksize 2048 failed
[   78.931637][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   78.934943][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   78.937741][ T6041] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   78.941191][ T6041] UDF-fs: Scanning with blocksize 4096 failed
[   78.943283][ T6041] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[   79.092387][ T6054] loop2: detected capacity change from 0 to 256
[   79.181108][ T6054] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   79.201786][ T6054] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[   79.309101][ T5881] Bluetooth: hci0: command tx timeout
[   79.461203][ T5228] Bluetooth: hci1: command tx timeout
[   79.463625][ T5881] Bluetooth: hci2: command tx timeout
[   79.949121][ T6073] loop2: detected capacity change from 0 to 1024
[   79.952724][ T6073] hfsplus: Bad value for 'gid'
[   80.103934][ T6085] loop2: detected capacity change from 0 to 512
[   80.110921][ T6085] =======================================================
[   80.110921][ T6085] WARNING: The mand mount option has been deprecated and
[   80.110921][ T6085]          and is ignored by this kernel. Remove the mand
[   80.110921][ T6085]          option from the mount to silence this warning.
[   80.110921][ T6085] =======================================================
[   80.492618][ T6105] netlink: 'syz.1.89': attribute type 10 has an invalid length.
[   80.495421][ T6105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'.
[   80.501441][ T6105] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   80.504729][ T6105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.589986][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'.
[   80.644130][ T6115] loop1: detected capacity change from 0 to 164
[   80.664742][ T6117] loop2: detected capacity change from 0 to 256
[   80.671922][ T6117] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   80.790701][ T6123] Illegal XDP return value 4294967294 on prog  (id 9) dev N/A, expect packet loss!
[   80.968894][ T5937] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   81.163888][ T5937] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[   81.173916][ T5937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   81.177275][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.187708][ T5937] usb 1-1: Product: syz
[   81.189914][ T5937] usb 1-1: Manufacturer: syz
[   81.191799][ T5937] usb 1-1: SerialNumber: syz
[   81.378733][ T5881] Bluetooth: hci0: command tx timeout
[   81.405030][ T5937] usb 1-1: 2:1 : invalid channels 0
[   81.426232][ T5937] usb 1-1: USB disconnect, device number 2
[   81.458092][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   81.538577][ T5881] Bluetooth: hci2: command tx timeout
[   81.538825][ T5228] Bluetooth: hci1: command tx timeout
[   81.897625][ T6143] loop1: detected capacity change from 0 to 2048
[   81.928630][ T6144] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.153975][ T6151] set_capacity_and_notify: 1 callbacks suppressed
[   82.153986][ T6151] loop1: detected capacity change from 0 to 512
[   82.219968][ T6151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.224856][ T6151] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.234289][ T6151] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.107: invalid size
[   82.240076][ T6151] EXT4-fs (loop1): Remounting filesystem read-only
[   82.271981][ T5878] hfsplus: walked past end of dir
[   82.276616][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.296256][ T5878] hfsplus: xattr search failed
[   82.319136][ T4370] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   82.323196][ T4370] Quota error (device loop1): write_blk: dquota write failed
[   82.326005][ T4370] Quota error (device loop1): free_dqentry: Can't write quota data block 5
[   82.354417][ T4370] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   82.370821][ T4370] Quota error (device loop1): write_blk: dquota write failed
[   82.373748][ T4370] Quota error (device loop1): free_dqentry: Can't write quota data block 5
[   82.511229][ T6164] loop2: detected capacity change from 0 to 256
[   82.522074][ T6164] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   82.551164][ T6164] exFAT-fs (loop2): error, data valid size is invalid(-9223372036854774758)
[   82.565766][ T6164] exFAT-fs (loop2): Filesystem has been set read-only
[   82.573535][ T6164] exFAT-fs (loop2): error, data valid size is invalid(-9223372036854774758)
[   82.588508][ T6167] !: renamed from dummy0 (while UP)
[   82.734115][ T6171] netlink: 'syz.2.116': attribute type 3 has an invalid length.
[   82.768439][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   83.132759][ T5920] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   83.136671][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.141042][ T5920] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   83.147009][ T5920] usb 1-1: config 1 has no interface number 1
[   83.150843][ T5920] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   83.157150][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.157965][ T6182] loop1: detected capacity change from 0 to 256
[   83.160168][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.164830][ T5920] usb 1-1: Product: syz
[   83.166541][ T5920] usb 1-1: Manufacturer: syz
[   83.168729][ T5920] usb 1-1: SerialNumber: syz
[   83.203717][ T6182] FAT-fs (loop1): Directory bread(block 64) failed
[   83.206505][ T6182] FAT-fs (loop1): Directory bread(block 65) failed
[   83.210563][ T6182] FAT-fs (loop1): Directory bread(block 66) failed
[   83.213193][ T6182] FAT-fs (loop1): Directory bread(block 67) failed
[   83.215824][ T6182] FAT-fs (loop1): Directory bread(block 68) failed
[   83.218639][ T6182] FAT-fs (loop1): Directory bread(block 69) failed
[   83.221795][ T6182] FAT-fs (loop1): Directory bread(block 70) failed
[   83.224285][ T6182] FAT-fs (loop1): Directory bread(block 71) failed
[   83.226905][ T6182] FAT-fs (loop1): Directory bread(block 72) failed
[   83.230459][ T6182] FAT-fs (loop1): Directory bread(block 73) failed
[   83.383452][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   83.386632][ T5920] usb 1-1: MIDIStreaming interface descriptor not found
[   83.413190][ T5920] usb 1-1: USB disconnect, device number 3
[   83.479815][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.885871][ T6205] loop2: detected capacity change from 0 to 1024
[   83.900350][ T6205] EXT4-fs: Ignoring removed orlov option
[   83.966062][ T6205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.315331][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.465760][ T6225] loop2: detected capacity change from 0 to 1024
[   84.567639][ T6230] loop2: detected capacity change from 0 to 512
[   84.580111][ T6230] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   84.645933][ T6230] EXT4-fs (loop2): invalid journal inode
[   84.647660][ T6230] EXT4-fs (loop2): can't get journal size
[   84.834310][ T6230] EXT4-fs (loop2): 1 truncate cleaned up
[   84.991346][ T6230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.099251][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.309194][ T5941] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.471316][ T6251] loop0: detected capacity change from 0 to 1024
[   85.473876][ T5941] usb 2-1: Using ep0 maxpacket: 16
[   85.478859][ T5941] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   85.482477][ T6251] EXT4-fs: Ignoring removed orlov option
[   85.489125][ T5941] usb 2-1: config 0 has no interface number 0
[   85.500892][ T5941] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   85.504544][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.507524][ T5941] usb 2-1: Product: syz
[   85.515720][ T6251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.520506][ T5941] usb 2-1: Manufacturer: syz
[   85.522298][ T5941] usb 2-1: SerialNumber: syz
[   85.528771][ T5901] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   85.535881][ T5941] usb 2-1: config 0 descriptor??
[   85.549562][ T5941] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   85.656412][ T5876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.703006][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   85.706925][ T5901] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00
[   85.710661][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.733341][ T5901] usb 3-1: config 0 descriptor??
[   85.740005][ T6247] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   86.369673][ T5901] usb 3-1: USB disconnect, device number 2
[   86.764944][ T5941] gspca_spca1528: reg_w err -71
[   86.768489][ T5941] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[   86.777260][ T5941] usb 2-1: USB disconnect, device number 2
[   87.308472][  T932] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   87.478542][  T932] usb 1-1: Using ep0 maxpacket: 16
[   87.481580][  T932] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[   87.485191][  T932] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   87.487792][  T932] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   87.491399][  T932] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   87.494127][  T932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[   87.496782][  T932] usb 1-1: config 0 has no interface number 0
[   87.498989][  T932] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[   87.502393][  T932] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[   87.505190][  T932] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[   87.508149][  T932] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   87.512306][  T932] usb 1-1: config 0 interface 125 has no altsetting 0
[   87.514379][  T932] usb 1-1: config 0 interface 125 has no altsetting 2
[   87.518295][  T932] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[   87.521662][  T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.524432][  T932] usb 1-1: Product: syz
[   87.525604][  T932] usb 1-1: Manufacturer: syz
[   87.526939][  T932] usb 1-1: SerialNumber: syz
[   87.532085][  T932] usb 1-1: config 0 descriptor??
[   87.535674][  T932] usb 1-1: selecting invalid altsetting 2
[   87.548544][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   87.698649][ T5941] usb 3-1: Using ep0 maxpacket: 8
[   87.707438][ T5941] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[   87.711332][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.714116][ T5941] usb 3-1: Product: syz
[   87.715636][ T5941] usb 3-1: Manufacturer: syz
[   87.717486][ T5941] usb 3-1: SerialNumber: syz
[   87.718535][ T5305] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   87.724840][ T5941] usb 3-1: config 0 descriptor??
[   87.731340][ T5941] option 3-1:0.0: GSM modem (1-port) converter detected
[   87.884174][ T5305] usb 2-1: Using ep0 maxpacket: 16
[   87.898897][ T5305] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   87.904207][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.913972][ T5305] usb 2-1: config 0 descriptor??
[   87.924373][ T5305] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   87.937876][ T5941] usb 3-1: USB disconnect, device number 3
[   87.947212][ T5941] option 3-1:0.0: device disconnected
[   88.123640][ T5305] usb 2-1: Detected FT232B
[   88.327127][ T5305] ftdi_sio ttyUSB1: Unable to read latency timer: -71
[   88.334938][ T5305] ftdi_sio ttyUSB1: Unable to write latency timer: -71
[   88.342916][ T5305] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1
[   88.359789][ T5305] usb 2-1: USB disconnect, device number 3
[   88.370038][ T5305] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[   88.373194][ T5305] ftdi_sio 2-1:0.0: device disconnected
[   88.551248][   T33] usb 1-1: USB disconnect, device number 4
[   88.590732][ T6281] netlink: 'syz.2.161': attribute type 2 has an invalid length.
[   88.593708][ T6281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.161'.
[   88.669662][ T6285] netlink: 44 bytes leftover after parsing attributes in process `syz.2.163'.
[   88.856988][   T34] audit: type=1800 audit(1770152002.792:3): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.167" name="bus" dev="overlay" ino=317 res=0 errno=0
[   89.004687][ T6299] loop1: detected capacity change from 0 to 512
[   89.013113][ T6299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   89.017800][ T6299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   89.025134][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'.
[   89.054230][ T6299] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   89.063073][ T6299] EXT4-fs (loop1): 1 truncate cleaned up
[   89.067408][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.718514][   T33] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.944473][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.946600][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.948489][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.949610][   T33] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   89.959283][   T33] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   89.962228][   T33] usb 3-1: Manufacturer: syz
[   89.966430][   T33] usb 3-1: config 0 descriptor??
[   90.360034][ T6331] loop0: detected capacity change from 0 to 256
[   90.363276][ T6331] exfat: Deprecated parameter 'utf8'
[   90.371360][ T6331] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[   90.810335][ T6336] loop5: detected capacity change from 0 to 7
[   90.816042][ T6336]  loop5:
[   90.817500][ T6336] loop5: partition table partially beyond EOD, truncated
[   90.977027][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   91.104474][   T33] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input4
[   91.124466][ T6345] loop1: detected capacity change from 0 to 1024
[   91.153638][ T6345] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[   91.156498][ T6345] hfsplus: xattr searching failed
[   91.189888][ T6345] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[   91.192394][ T6345] hfsplus: xattr search failed
[   91.198791][   T33] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input5
[   91.207534][  T738] hfsplus: b-tree write err: -5, ino 4
[   91.268632][   T33] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0
[   91.301471][ T6353] loop0: detected capacity change from 0 to 256
[   91.322203][   T33] usb 3-1: USB disconnect, device number 4
[   91.540622][ T6363] syz.1.195 uses obsolete (PF_INET,SOCK_PACKET)
[   91.594700][ T6366] binder: 6365:6366 ioctl c018620c 200000000000 returned -22
[   91.835846][ T6382] netlink: 172 bytes leftover after parsing attributes in process `syz.0.204'.
[   91.839659][ T6382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.204'.
[   91.844925][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   92.019018][ T5937] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   92.169285][ T5937] usb 2-1: too many configurations: 164, using maximum allowed: 8
[   92.181072][ T5937] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[   92.184422][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.191164][ T5937] usb 2-1: config 0 descriptor??
[   92.197833][ T5937] usb 2-1: bad CDC descriptors
[   92.340637][    T9] cfg80211: failed to load regulatory.db
[   92.405436][ T5941] usb 2-1: USB disconnect, device number 4
[   93.338563][   T34] audit: type=1326 audit(1770152007.222:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.396173][   T34] audit: type=1326 audit(1770152007.222:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.461664][   T34] audit: type=1326 audit(1770152007.232:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.493949][   T34] audit: type=1326 audit(1770152007.232:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.509391][   T34] audit: type=1326 audit(1770152007.232:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.517877][   T34] audit: type=1326 audit(1770152007.232:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.526924][   T34] audit: type=1326 audit(1770152007.232:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.535005][   T34] audit: type=1326 audit(1770152007.232:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.543431][   T34] audit: type=1326 audit(1770152007.232:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.213" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[   93.636287][ T6422] loop1: detected capacity change from 0 to 2048
[   93.883415][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   93.886121][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'.
[   93.950329][ T5228] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   93.954017][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) 
[   93.954040][ T5228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.954050][ T5228] Workqueue: hci0 hci_rx_work
[   93.954072][ T5228] Call Trace:
[   93.954079][ T5228]  <TASK>
[   93.954086][ T5228]  dump_stack_lvl+0xe8/0x150
[   93.954107][ T5228]  sysfs_create_dir_ns+0x271/0x2a0
[   93.954126][ T5228]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   93.954147][ T5228]  ? do_raw_spin_unlock+0x4d/0x210
[   93.954173][ T5228]  kobject_add_internal+0x62b/0xd00
[   93.954198][ T5228]  kobject_add+0x163/0x240
[   93.954216][ T5228]  ? __pfx_kobject_add+0x10/0x10
[   93.954231][ T5228]  ? _raw_spin_unlock+0x28/0x50
[   93.954252][ T5228]  ? get_device_parent+0x366/0x3a0
[   93.954269][ T5228]  device_add+0x408/0xb70
[   93.954286][ T5228]  hci_conn_add_sysfs+0xd5/0x210
[   93.954312][ T5228]  le_conn_complete_evt+0xf1d/0x1430
[   93.954339][ T5228]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   93.954358][ T5228]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[   93.954374][ T5228]  ? __pfx___mutex_lock+0x10/0x10
[   93.954386][ T5228]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   93.954398][ T5228]  ? skb_pull_data+0xfb/0x200
[   93.954418][ T5228]  hci_le_enh_conn_complete_evt+0x189/0x490
[   93.954436][ T5228]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[   93.954456][ T5228]  hci_event_packet+0x7af/0x12c0
[   93.954474][ T5228]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   93.954492][ T5228]  ? __pfx_hci_event_packet+0x10/0x10
[   93.954512][ T5228]  ? kcov_remote_start+0x49a/0x7a0
[   93.954563][ T5228]  ? hci_send_to_monitor+0xe2/0x590
[   93.954585][ T5228]  hci_rx_work+0x3ee/0x1030
[   93.954604][ T5228]  ? process_scheduled_works+0xa0f/0x17a0
[   93.954621][ T5228]  process_scheduled_works+0xaec/0x17a0
[   93.954656][ T5228]  ? __pfx_process_scheduled_works+0x10/0x10
[   93.954669][ T5228]  ? do_raw_spin_lock+0x12b/0x2f0
[   93.954695][ T5228]  ? assign_work+0x3d3/0x440
[   93.954716][ T5228]  worker_thread+0x89f/0xd90
[   93.954742][ T5228]  ? __kthread_parkme+0x7a/0x1f0
[   93.954764][ T5228]  kthread+0x726/0x8b0
[   93.954783][ T5228]  ? __pfx_worker_thread+0x10/0x10
[   93.954797][ T5228]  ? __pfx_kthread+0x10/0x10
[   93.954817][ T5228]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.954835][ T5228]  ? __pfx_kthread+0x10/0x10
[   93.954854][ T5228]  ret_from_fork+0x51b/0xa40
[   93.954875][ T5228]  ? __pfx_ret_from_fork+0x10/0x10
[   93.954889][ T5228]  ? __switch_to+0xc82/0x1410
[   93.954913][ T5228]  ? __pfx_kthread+0x10/0x10
[   93.954933][ T5228]  ret_from_fork_asm+0x1a/0x30
[   93.954966][ T5228]  </TASK>
[   93.955041][ T5228] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   94.071812][ T5228] Bluetooth: hci0: failed to register connection device
[   94.270313][ T5941] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   94.428442][ T5941] usb 1-1: Using ep0 maxpacket: 32
[   94.437082][ T5941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   94.455892][ T5941] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   94.459615][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   94.462961][ T5941] usb 1-1: Product: syz
[   94.464572][ T5941] usb 1-1: Manufacturer: syz
[   94.466245][ T5941] usb 1-1: SerialNumber: syz
[   94.495601][ T5941] usb 1-1: config 0 descriptor??
[   94.502836][ T6442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   94.776519][  T932] usb 1-1: USB disconnect, device number 5
[   95.328448][  T932] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   95.385673][ T6463] loop0: detected capacity change from 0 to 4096
[   95.398178][ T6463] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   95.478431][  T932] usb 3-1: Using ep0 maxpacket: 16
[   95.497981][ T5305] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   95.500495][  T932] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[   95.503303][  T932] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   95.506263][  T932] usb 3-1: Product: syz
[   95.507779][  T932] usb 3-1: Manufacturer: syz
[   95.516892][  T932] usb 3-1: SerialNumber: syz
[   95.527687][  T932] usb 3-1: config 0 descriptor??
[   95.658890][ T5305] usb 2-1: Using ep0 maxpacket: 16
[   95.662857][ T5305] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[   95.665856][ T5305] usb 2-1: config 0 has no interface number 0
[   95.668196][ T5305] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   95.677182][ T5305] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[   95.680695][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.683773][ T5305] usb 2-1: Product: syz
[   95.685360][ T5305] usb 2-1: Manufacturer: syz
[   95.687187][ T5305] usb 2-1: SerialNumber: syz
[   95.694812][ T5305] usb 2-1: config 0 descriptor??
[   95.753704][  T932] usb 3-1: USB disconnect, device number 5
[   95.888530][ T5941] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   96.038503][ T5941] usb 1-1: Using ep0 maxpacket: 16
[   96.042725][ T5941] usb 1-1: unable to get BOS descriptor or descriptor too short
[   96.047027][ T5941] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[   96.050437][ T5941] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[   96.054226][ T5941] usb 1-1: config 13 has no interface number 0
[   96.056431][ T5941] usb 1-1: config 13 interface 50 altsetting 167 has an endpoint descriptor with address 0xE3, changing to 0x83
[   96.060398][ T5941] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   96.064824][ T5941] usb 1-1: config 13 interface 50 has no altsetting 0
[   96.070478][ T5941] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[   96.073289][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.075733][ T5941] usb 1-1: Product: syz
[   96.077048][ T5941] usb 1-1: Manufacturer: syz
[   96.078733][ T5941] usb 1-1: SerialNumber: syz
[   96.312001][ T5305] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input6
[   96.313584][ T5941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   96.317402][ T5941] usb 1-1: MIDIStreaming interface descriptor not found
[   96.351922][ T5941] usb 1-1: USB disconnect, device number 6
[   96.393229][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   96.512742][ T5305] usb 2-1: USB disconnect, device number 5
[   96.647872][ T6485] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[   96.858520][ T6493] loop0: detected capacity change from 0 to 256
[   96.875818][ T6493] FAT-fs (loop0): Directory bread(block 64) failed
[   96.878200][ T6493] FAT-fs (loop0): Directory bread(block 65) failed
[   96.883490][ T6493] FAT-fs (loop0): Directory bread(block 66) failed
[   96.886098][ T6493] FAT-fs (loop0): Directory bread(block 67) failed
[   96.890226][ T6493] FAT-fs (loop0): Directory bread(block 68) failed
[   96.892834][ T6493] FAT-fs (loop0): Directory bread(block 69) failed
[   96.895225][ T6493] FAT-fs (loop0): Directory bread(block 70) failed
[   96.897880][ T6493] FAT-fs (loop0): Directory bread(block 71) failed
[   96.902088][ T6493] FAT-fs (loop0): Directory bread(block 72) failed
[   96.905580][ T6493] FAT-fs (loop0): Directory bread(block 73) failed
[   96.926936][   T34] kauditd_printk_skb: 14 callbacks suppressed
[   96.926962][   T34] audit: type=1800 audit(1770152010.862:27): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.250" name="file1" dev="loop0" ino=1048644 res=0 errno=0
[   96.944879][ T6493] syz.0.250: attempt to access beyond end of device
[   96.944879][ T6493] loop0: rw=2049, sector=1224, nr_sectors = 8 limit=256
[   96.976498][ T4370] kworker/u9:22: attempt to access beyond end of device
[   96.976498][ T4370] loop0: rw=1, sector=1232, nr_sectors = 60 limit=256
[   97.030750][ T5937] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   97.186475][ T5937] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[   97.190831][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.199105][ T5937] usb 3-1: Product: syz
[   97.200762][ T5937] usb 3-1: Manufacturer: syz
[   97.202671][ T5937] usb 3-1: SerialNumber: syz
[   97.215373][ T5937] usb 3-1: config 0 descriptor??
[   97.282385][ T6495] loop0: detected capacity change from 0 to 32768
[   97.322066][ T6495] JBD2: Ignoring recovery information on journal
[   97.377686][ T6495] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   97.425239][   T33] usb 3-1: USB disconnect, device number 6
[   97.466199][ T6495] syz.0.251 (6495) used greatest stack depth: 18040 bytes left
[   97.482447][ T6514] loop1: detected capacity change from 0 to 512
[   97.495578][ T5876] ocfs2: Unmounting device (7,0) on (node local)
[   97.548019][ T6514] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 49)
[   97.558886][ T6514] FAT-fs (loop1): Filesystem has been set read-only
[   97.743412][ T6527] netlink: 'syz.0.265': attribute type 10 has an invalid length.
[   97.754024][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.758137][ T6527] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   97.766072][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'.
[   97.771115][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.774011][ T6527] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.778482][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.780765][ T6527] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.800570][ T6527] bond0: (slave batadv0): Releasing backup interface
[   98.626513][ T6543] loop1: detected capacity change from 0 to 512
[   98.659912][ T6543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.669006][ T6543] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.689734][   T34] audit: type=1800 audit(1770152012.632:28): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.272" name="bus" dev="loop1" ino=18 res=0 errno=0
[   98.708524][   T34] audit: type=1800 audit(1770152012.642:29): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.272" name="bus" dev="loop1" ino=18 res=0 errno=0
[   98.782031][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.320095][ T6567] loop1: detected capacity change from 0 to 4096
[   99.329749][ T6567] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   99.427820][ T6567] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   99.497766][ T5032] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   99.516315][ T5873] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   99.537442][ T5873] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   99.549262][ T5873] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   99.554383][ T4024] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   99.736157][   T34] audit: type=1326 audit(1770152013.672:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.0.284" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x0
[  100.066750][ T6580] loop1: detected capacity change from 0 to 128
[  100.735363][ T6581] loop0: detected capacity change from 0 to 32768
[  100.749030][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'.
[  100.813532][ T6614] loop2: detected capacity change from 0 to 512
[  100.837116][ T6614] EXT4-fs (loop2): orphan cleanup on readonly fs
[  100.843956][ T6614] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #11: block 1728053262: comm syz.2.302: lblock 0 mapped to illegal pblock 1728053262 (length 1)
[  100.858685][ T6614] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  100.871945][ T6581] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  100.876404][ T6614] EXT4-fs error (device loop2): ext4_do_update_inode:5616: inode #15: comm syz.2.302: corrupted inode contents
[  100.884445][ T6614] EXT4-fs error (device loop2): ext4_dirty_inode:6501: inode #15: comm syz.2.302: mark_inode_dirty error
[  100.891126][ T6614] EXT4-fs error (device loop2): ext4_do_update_inode:5616: inode #15: comm syz.2.302: corrupted inode contents
[  100.904128][ T6614] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.302: mark_inode_dirty error
[  100.908721][ T6614] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.302: mark inode dirty (error -117)
[  100.932296][ T6581] XFS (loop0): Ending clean mount
[  100.935024][ T6614] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117)
[  100.937573][ T6614] EXT4-fs (loop2): 1 orphan inode deleted
[  100.945950][ T6614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  100.988898][ T5876] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  101.004904][ T6625] loop1: detected capacity change from 0 to 4096
[  101.005734][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.430861][ T6647] loop2: detected capacity change from 0 to 2048
[  101.441118][ T6647] EXT4-fs: Ignoring removed mblk_io_submit option
[  101.506502][ T6647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.524892][ T6651] overlayfs: missing 'lowerdir'
[  101.661243][ T6647] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.777995][ T6647] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.311: bg 0: block 345: padding at end of block bitmap is not set
[  101.821049][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.418762][ T5901] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  102.568607][ T5901] usb 2-1: Using ep0 maxpacket: 32
[  102.577137][ T5901] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  102.582592][ T5901] usb 2-1: config 0 has no interface number 0
[  102.596571][ T5901] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  102.600386][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.604066][ T5901] usb 2-1: Product: syz
[  102.605983][ T5901] usb 2-1: Manufacturer: syz
[  102.607944][ T5901] usb 2-1: SerialNumber: syz
[  102.629489][ T5901] usb 2-1: config 0 descriptor??
[  102.646692][ T5901] smsc95xx v2.0.0
[  103.260846][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  103.264660][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  103.286846][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  103.301860][ T5901] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  103.322886][ T5901] usb 2-1: USB disconnect, device number 6
[  103.390391][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[  104.085567][ T6700] loop2: detected capacity change from 0 to 2048
[  104.101831][ T6700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.123918][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.423301][ T6719] netlink: 'syz.0.341': attribute type 27 has an invalid length.
[  104.773658][ T6743] netlink: 'syz.1.352': attribute type 2 has an invalid length.
[  104.976886][ T6758] openvswitch: netlink: Flow key attribute not present in set flow.
[  104.998781][ T5305] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.089483][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'.
[  105.169071][ T5305] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  105.172404][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.184117][ T5305] usb 3-1: config 0 descriptor??
[  105.201769][ T5305] usb 3-1: bad CDC descriptors
[  105.394705][ T5901] usb 3-1: USB disconnect, device number 7
[  106.508425][ T5934] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  106.658405][ T5934] usb 2-1: Using ep0 maxpacket: 32
[  106.664339][ T5934] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  106.667307][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.669923][ T5934] usb 2-1: Product: syz
[  106.671722][ T5934] usb 2-1: Manufacturer: syz
[  106.673639][ T5934] usb 2-1: SerialNumber: syz
[  106.679645][ T5934] usb 2-1: config 0 descriptor??
[  106.683614][ T5934] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  106.686131][ T5934] dvb-usb: bulk message failed: -22 (2/0)
[  106.692690][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  106.696089][ T5934] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  106.699852][ T5934] usb 2-1: media controller created
[  106.708283][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  106.728912][ T5934] usb 2-1: selecting invalid altsetting 7
[  106.730668][ T5934] cxusb: set interface failed
[  106.732289][ T5934] dvb-usb: bulk message failed: -22 (1/0)
[  106.764793][ T5934] DVB: Unable to find symbol lgdt330x_attach()
[  106.766699][ T5934] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  106.818764][ T5934] rc_core: IR keymap rc-dvico-portable not found
[  106.821186][ T5934] Registered IR keymap rc-empty
[  106.826245][ T5934] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  106.854614][ T5934] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7
[  106.859471][ T5934] dvb-usb: schedule remote query interval to 100 msecs.
[  106.862782][ T5934] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  106.925042][ T5934] usb 2-1: USB disconnect, device number 7
[  106.998242][ T5934] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  107.332251][ T6829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.334635][ T6829] IPv6: NLM_F_CREATE should be set when creating new route
[  107.336716][ T6829] IPv6: NLM_F_CREATE should be set when creating new route
[  108.392647][ T6851] ufs: You didn't specify the type of your ufs filesystem
[  108.392647][ T6851] 
[  108.392647][ T6851] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  108.392647][ T6851] 
[  108.392647][ T6851] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  108.403569][ T6851] ufs: ufstype=old is supported read-only
[  108.412136][ T6851] ufs: ufs_fill_super(): bad magic number
[  108.723129][ T6842] loop1: detected capacity change from 0 to 40427
[  108.743997][ T6842] F2FS-fs (loop1): Image doesn't support compression
[  108.746616][ T6842] F2FS-fs (loop1): build fault injection rate: 693
[  108.752255][ T6842] F2FS-fs (loop1): invalid crc value
[  108.828261][ T6842] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.835526][ T6842] F2FS-fs (loop1): Start checkpoint disabled!
[  108.843722][ T6842] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  108.846659][ T6842] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  108.965216][   T27] kworker/u10:0: attempt to access beyond end of device
[  108.965216][   T27] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.975156][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[  108.975178][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.975188][   T27] Workqueue: writeback wb_workfn (flush-7:1)
[  108.975213][   T27] Call Trace:
[  108.975220][   T27]  <TASK>
[  108.975227][   T27]  dump_stack_lvl+0xe8/0x150
[  108.975248][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  108.975274][   T27]  f2fs_write_end_io+0x886/0xb60
[  108.975311][   T27]  __submit_merged_bio+0x256/0x650
[  108.975334][   T27]  __submit_merged_write_cond+0x269/0x530
[  108.975384][   T27]  f2fs_write_data_pages+0x2806/0x3360
[  108.975432][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.975465][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  108.975507][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  108.975542][   T27]  ? __lock_acquire+0x6b5/0x2cf0
[  108.975571][   T27]  ? f2fs_write_inode+0x3fb/0x5f0
[  108.975589][   T27]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  108.975608][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.975628][   T27]  do_writepages+0x32e/0x550
[  108.975654][   T27]  ? reacquire_held_locks+0x104/0x190
[  108.975670][   T27]  ? writeback_sb_inodes+0x41f/0x1820
[  108.975693][   T27]  __writeback_single_inode+0x133/0x1230
[  108.975712][   T27]  ? do_raw_spin_unlock+0x4d/0x210
[  108.975735][   T27]  writeback_sb_inodes+0x92c/0x1820
[  108.975773][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  108.975789][   T27]  ? do_raw_spin_lock+0x12b/0x2f0
[  108.975842][   T27]  ? rcu_is_watching+0x15/0xb0
[  108.975867][   T27]  wb_writeback+0x445/0xad0
[  108.975888][   T27]  ? queue_io+0x211/0x450
[  108.975912][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  108.975926][   T27]  ? do_raw_spin_lock+0x12b/0x2f0
[  108.975958][   T27]  wb_workfn+0x3f8/0xef0
[  108.975971][   T27]  ? __lock_acquire+0x6b5/0x2cf0
[  108.975984][   T27]  ? look_up_lock_class+0x57/0x110
[  108.976025][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  108.976038][   T27]  ? finish_task_switch+0x161/0x920
[  108.976062][   T27]  ? do_raw_spin_lock+0x12b/0x2f0
[  108.976079][   T27]  ? lock_acquire+0x106/0x330
[  108.976095][   T27]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  108.976116][   T27]  ? process_scheduled_works+0xa0f/0x17a0
[  108.976133][   T27]  ? process_scheduled_works+0xa0f/0x17a0
[  108.976153][   T27]  ? process_scheduled_works+0xa0f/0x17a0
[  108.976167][   T27]  ? process_scheduled_works+0xa0f/0x17a0
[  108.976183][   T27]  process_scheduled_works+0xaec/0x17a0
[  108.976239][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  108.976252][   T27]  ? do_raw_spin_lock+0x12b/0x2f0
[  108.976276][   T27]  ? assign_work+0x3d3/0x440
[  108.976296][   T27]  worker_thread+0x89f/0xd90
[  108.976332][   T27]  kthread+0x726/0x8b0
[  108.976355][   T27]  ? __pfx_worker_thread+0x10/0x10
[  108.976391][   T27]  ? __pfx_kthread+0x10/0x10
[  108.976413][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.976431][   T27]  ? __pfx_kthread+0x10/0x10
[  108.976451][   T27]  ret_from_fork+0x51b/0xa40
[  108.976468][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  108.976482][   T27]  ? __switch_to+0xc82/0x1410
[  108.976506][   T27]  ? __pfx_kthread+0x10/0x10
[  108.976526][   T27]  ret_from_fork_asm+0x1a/0x30
[  108.976559][   T27]  </TASK>
[  108.976566][   T27] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  109.843931][ T6893] netlink: 'syz.2.416': attribute type 11 has an invalid length.
[  109.846389][ T6893] netlink: 224 bytes leftover after parsing attributes in process `syz.2.416'.
[  109.952870][   T34] audit: type=1326 audit(1770152023.892:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.2.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  109.968498][   T34] audit: type=1326 audit(1770152023.902:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.2.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  109.985679][   T34] audit: type=1326 audit(1770152023.902:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.2.419" exe="/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  110.007078][   T34] audit: type=1326 audit(1770152023.902:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.2.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  110.023947][   T34] audit: type=1326 audit(1770152023.902:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.2.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  110.696526][ T6925] loop2: detected capacity change from 0 to 1024
[  110.978670][  T786] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  111.398839][  T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.420765][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  111.424391][  T786] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89
[  111.428024][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  111.431475][  T786] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  111.437538][  T786] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff
[  111.440569][  T786] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  111.443084][  T786] usb 2-1: Manufacturer: syz
[  111.463209][  T786] usb 2-1: config 0 descriptor??
[  111.694599][  T786] usb 2-1: USB disconnect, device number 8
[  111.746053][ T6936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.758935][ T6936] netlink: 'syz.0.435': attribute type 12 has an invalid length.
[  111.761404][ T6936] netlink: 'syz.0.435': attribute type 29 has an invalid length.
[  111.763633][ T6936] netlink: 148 bytes leftover after parsing attributes in process `syz.0.435'.
[  111.766378][ T6936] netlink: 'syz.0.435': attribute type 1 has an invalid length.
[  111.770338][ T6936] netlink: 'syz.0.435': attribute type 2 has an invalid length.
[  111.772580][ T6936] netlink: 39 bytes leftover after parsing attributes in process `syz.0.435'.
[  112.140766][ T5937] IPVS: starting estimator thread 0...
[  112.203097][ T4370] hfsplus: b-tree write err: -5, ino 4
[  112.228873][ T6943] IPVS: using max 51 ests per chain, 122400 per kthread
[  112.548424][ T5901] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  112.700356][ T5901] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  112.703854][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.712566][ T5901] usb 2-1: config 0 descriptor??
[  112.719586][ T5901] pwc: Samsung MPC-C10 USB webcam detected.
[  112.811276][ T6968] process 'syz.0.448' launched './file0' with NULL argv: empty string added
[  112.921218][ T5901] pwc: send_video_command error -71
[  112.926463][ T5901] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  112.931750][ T5901] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  112.945026][ T5901] usb 2-1: USB disconnect, device number 9
[  113.887139][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.890513][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.160523][ T6989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.184981][ T6989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.687806][ T6997] netlink: 'syz.1.460': attribute type 3 has an invalid length.
[  114.698090][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'.
[  114.718053][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.733934][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.736536][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.780342][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.887528][ T7016] loop1: detected capacity change from 0 to 64
[  114.923302][ T7018] loop2: detected capacity change from 0 to 512
[  114.949850][ T7018] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  114.956552][ T7018] EXT4-fs (loop2): filesystem is read-only
[  114.964685][ T7018] EXT4-fs (loop2): failed to initialize system zone (-117)
[  114.970443][ T7018] EXT4-fs (loop2): mount failed
[  115.017130][ T7021] loop1: detected capacity change from 0 to 1024
[  115.043440][ T7021] hfsplus: bad catalog entry type
[  115.057165][   T27] hfsplus: b-tree write err: -5, ino 4
[  115.102937][ T7023] netlink: 'syz.1.472': attribute type 1 has an invalid length.
[  115.214204][ T7025] loop1: detected capacity change from 0 to 1024
[  115.226399][ T7025] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  115.235390][ T7025] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  115.239836][ T7025] EXT4-fs (loop1): orphan cleanup on readonly fs
[  115.244011][ T7025] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.473: Freeing blocks not in datazone - block = 0, count = 4096
[  115.251424][ T7025] EXT4-fs (loop1): 1 orphan inode deleted
[  115.254319][ T7025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.658566][ T7031] Zero length message leads to an empty skb
[  116.124149][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.447648][ T7045] overlayfs: failed to verify index (index/00fb210001b56ed645aae64b0d975561cc1c60a5c0fa7555911203000000000000, ftype=8000, err=-61)
[  116.453685][ T7045] overlayfs: failed index dir cleanup (-61)
[  116.455997][ T7045] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  116.618833][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'.
[  116.623777][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'.
[  116.627114][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'.
[  116.940596][ T7071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.491'.
[  118.075716][ T7095] xt_CT: You must specify a L4 protocol and not use inversions on it
[  119.250605][ T7119] libceph: resolve '.' (ret=-3): failed
[  119.284771][ T7118] loop1: detected capacity change from 0 to 4096
[  119.290700][ T7118] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  119.326224][ T7118] ntfs3(loop1): Failed to initialize $Secure::$SII (-22).
[  119.329237][ T7118] ntfs3(loop1): Failed to initialize $Secure (-22).
[  120.680337][ T7140] loop2: detected capacity change from 0 to 256
[  120.777106][ T7147] netlink: 184 bytes leftover after parsing attributes in process `syz.1.521'.
[  120.879670][ T7149] netlink: 'syz.0.523': attribute type 3 has an invalid length.
[  121.518467][ T6990] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  121.669517][ T6990] usb 2-1: Using ep0 maxpacket: 16
[  121.676918][ T6990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64
[  121.686511][ T6990] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  121.690270][ T6990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.700138][ T6990] usb 2-1: Product: syz
[  121.701400][ T6990] usb 2-1: Manufacturer: syz
[  121.702819][ T6990] usb 2-1: SerialNumber: syz
[  121.721555][ T6990] usb 2-1: config 0 descriptor??
[  121.738217][ T6990] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  121.932289][   T13] usb 2-1: Failed to submit usb control message: -71
[  121.935804][ T6990] usb 2-1: USB disconnect, device number 10
[  121.939217][   T13] usb 2-1: unable to send the bmi data to the device: -71
[  121.943866][   T13] usb 2-1: unable to get target info from device
[  121.946100][   T13] usb 2-1: could not get target info (-71)
[  121.948002][   T13] usb 2-1: could not probe fw (-71)
[  122.752067][ T7201] loop1: detected capacity change from 0 to 2048
[  122.773121][ T7201] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.869262][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'.
[  123.023603][ T7213] loop1: detected capacity change from 0 to 512
[  123.031926][ T7213] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  123.061977][ T7213] EXT4-fs (loop1): 1 orphan inode deleted
[  123.064137][ T7213] EXT4-fs (loop1): 1 truncate cleaned up
[  123.067561][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.095071][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.098616][ T6990] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  123.147958][ T7217] loop1: detected capacity change from 0 to 256
[  123.248594][ T6990] usb 3-1: Using ep0 maxpacket: 32
[  123.254350][ T6990] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  123.257626][ T6990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.260874][ T6990] usb 3-1: Product: syz
[  123.262427][ T6990] usb 3-1: Manufacturer: syz
[  123.264125][ T6990] usb 3-1: SerialNumber: syz
[  123.268154][ T6990] usb 3-1: config 0 descriptor??
[  123.418507][ T5901] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  123.481394][ T6990] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 008
[  123.570378][ T5901] usb 2-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config
[  123.578436][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.584033][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.587394][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.598464][ T5901] usb 2-1: Product: syz
[  123.600071][ T5901] usb 2-1: Manufacturer: syz
[  123.601804][ T5901] usb 2-1: SerialNumber: syz
[  123.812011][ T5901] usb 2-1: 0:2 : does not exist
[  123.825022][ T5901] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  123.864319][ T5901] usb 2-1: USB disconnect, device number 11
[  123.897801][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.074747][ T7228] Cannot find add_set index 2 as target
[  124.487547][ T7248] loop1: detected capacity change from 0 to 24
[  124.496665][ T7248] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  124.511678][ T7248] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  124.527736][ T7250] dvmrp6: entered allmulticast mode
[  124.541129][ T7250] pimreg: entered allmulticast mode
[  124.545492][ T7250] dvmrp6: left allmulticast mode
[  124.622898][ T7249] pimreg: left allmulticast mode
[  124.785401][ T7262] loop1: detected capacity change from 0 to 2048
[  124.793565][ T7262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.962013][ T7270] MPI: mpi too large (113288 bits)
[  125.473497][ T7286] netlink: 7 bytes leftover after parsing attributes in process `syz.0.583'.
[  125.857837][ T5937] usb 3-1: USB disconnect, device number 8
[  126.300468][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'.
[  126.698297][   T34] audit: type=1400 audit(1770152040.632:36): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A4BB284132960AB0EC7C873CFF3EB09BFFB78A08C1060ACEBD68C681F4EB06507909110374F83A9CA6CF1A22A152E4424641EA1201497E3A973866BE7F8659A0119BA2D92304E687C61DF4D960D941CFAB0AC10F5861C9B38D760E8B906A47E2CF457A255A8C061FE8E4C805DC7D3B0124BD25494ED2D54BE8AEF5615C6FD7C4FAC3CF7DA8F20AA026998926069FC3032289822655A10BB16E1E6C08002CC0435A6667F338D23DC07810124F374749CEB5F78713B7DAD2FE3044A243139A1B5170D5BCFDBCD8748AC706DDDCBBD0B1F20F52C143DA1E74B736AC64A66616EA3069133AC3A pid=7331 comm="syz.1.604"
[  127.649968][ T7365] loop2: detected capacity change from 0 to 256
[  127.653019][ T7365] exfat: Deprecated parameter 'utf8'
[  127.655078][ T7365] exfat: Deprecated parameter 'utf8'
[  127.665010][ T7365] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d)
[  127.849349][ T5934] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  128.008445][ T5934] usb 2-1: Using ep0 maxpacket: 32
[  128.012127][ T5934] usb 2-1: config 0 has an invalid interface number: 125 but max is 0
[  128.019171][ T5934] usb 2-1: config 0 has no interface number 0
[  128.021495][ T5934] usb 2-1: config 0 interface 125 has no altsetting 0
[  128.028028][ T5934] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  128.036790][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.046591][ T5934] usb 2-1: Product: syz
[  128.048135][ T5934] usb 2-1: Manufacturer: syz
[  128.050319][ T5934] usb 2-1: SerialNumber: syz
[  128.054108][ T5934] usb 2-1: config 0 descriptor??
[  128.216372][ T7401] warning: `syz.2.632' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  128.263191][ T5934] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  128.274033][ T7404] loop2: detected capacity change from 0 to 4096
[  128.299135][ T7406] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.352326][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  128.865028][ T7431] 9pnet_virtio: no channels available for device syz
[  129.069483][ T5934] usb 2-1: reset high-speed USB device number 12 using dummy_hcd
[  129.489902][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'.
[  129.636291][ T5934] ueagle-atm 2-1:0.125: usbatm_usb_probe: bind failed: -19!
[  129.749290][ T7447] loop2: detected capacity change from 0 to 4096
[  129.759915][ T7447] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  129.808764][ T7447] ntfs3(loop2): ino=19, mi_enum_attr
[  129.862263][ T5901] usb 2-1: USB disconnect, device number 12
[  130.047314][ T7461] ntfs3(loop2): failed to convert "c46c" to cp1255
[  130.055264][ T7461] ntfs3(loop2): ino=20, mi_enum_attr
[  130.481704][ T7474] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  130.546750][ T7476] 9p: Bad value for 'rfdno'
[  130.680640][   T34] audit: type=1804 audit(1770152044.622:37): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.667" name="file1" dev="ramfs" ino=11710 res=1 errno=0
[  130.861445][ T7491] loop2: detected capacity change from 0 to 4096
[  130.891056][ T7491] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  130.927297][ T7491] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  130.932899][ T7491] ntfs3(loop2): mft corrupted
[  130.934622][ T7491] ntfs3(loop2): Failed to load $Extend (-22).
[  130.936746][ T7491] ntfs3(loop2): Failed to initialize $Extend.
[  130.957581][ T7491] ntfs3(loop2): ino=5, "/" indx_read
[  131.212300][ T7511] loop2: detected capacity change from 0 to 2048
[  131.226205][ T7511] EXT4-fs: Ignoring removed i_version option
[  131.375712][ T7511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.410844][ T7511] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.677446][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.791279][ T7530] delete_channel: no stack
[  131.794630][ T7529] delete_channel: no stack
[  132.371462][ T7565] bond0: entered promiscuous mode
[  132.373347][ T7565] bond_slave_0: entered promiscuous mode
[  132.375581][ T7565] bond_slave_1: entered promiscuous mode
[  132.450748][ T7568] capability: warning: `syz.0.706' uses 32-bit capabilities (legacy support in use)
[  132.468213][ T7547] loop1: detected capacity change from 0 to 32768
[  132.498616][ T7547] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  132.513753][   T13] tipc: Subscription rejected, illegal request
[  132.536536][ T7547] XFS (loop1): Ending clean mount
[  132.549545][ T7547] XFS (loop1): Quotacheck needed: Please wait.
[  132.607863][ T7547] XFS (loop1): Quotacheck: Done.
[  132.674155][ T5873] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  133.381076][ T7593] loop1: detected capacity change from 0 to 2048
[  133.637973][ T7593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.204846][ T7621] loop1: detected capacity change from 0 to 128
[  134.279628][ T7627] netlink: 'syz.2.725': attribute type 1 has an invalid length.
[  134.281861][ T7627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.725'.
[  134.318046][ T7631] netlink: 'syz.1.727': attribute type 4 has an invalid length.
[  134.334279][ T7631] netlink: 224 bytes leftover after parsing attributes in process `syz.1.727'.
[  134.606893][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'.
[  134.734462][ T7652] loop1: detected capacity change from 0 to 32768
[  134.773432][ T7664] : entered promiscuous mode
[  135.079719][ T7675] syzkaller0: entered promiscuous mode
[  135.088647][ T7675] syzkaller0: entered allmulticast mode
[  135.579263][ T5901] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  135.728482][ T5901] usb 3-1: Using ep0 maxpacket: 8
[  135.731821][ T5901] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  135.734421][ T5901] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  135.737236][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  135.743615][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  135.746574][ T5901] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.751208][ T5901] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  135.754859][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.969100][ T5901] usb 3-1: usb_control_msg returned -32
[  135.970917][ T5901] usbtmc 3-1:16.0: can't read capabilities
[  136.983290][ T7743] loop1: detected capacity change from 0 to 2048
[  137.000578][ T7746] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.041765][ T7743] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  137.046886][ T7743] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  137.057273][ T7743] Remounting filesystem read-only
[  137.062712][ T7743] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  137.068069][ T7743] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16)
[  137.072388][ T7743] NILFS (loop1): error -5 truncating bmap (ino=16)
[  137.095702][ T5873] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  137.403533][ T7764] netlink: 'syz.1.789': attribute type 10 has an invalid length.
[  137.474766][ T7764] team0: Port device wlan1 added
[  138.424737][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  138.427260][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  138.476769][ T5901] usb 3-1: USB disconnect, device number 9
[  138.816149][ T7804] netlink: 'syz.1.807': attribute type 2 has an invalid length.
[  138.822604][ T7804] netlink: 'syz.1.807': attribute type 8 has an invalid length.
[  138.824981][ T7804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.807'.
[  139.540439][ T7832] loop1: detected capacity change from 0 to 64
[  139.801174][ T7836] loop1: detected capacity change from 0 to 1024
[  139.844230][   T27] hfsplus: b-tree write err: -5, ino 4
[  139.943111][ T7844] openvswitch: netlink: IP tunnel dst address not specified
[  140.147883][ T7856] netlink: 1 bytes leftover after parsing attributes in process `syz.0.828'.
[  140.315699][ T5936] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  140.367863][ T7877] loop2: detected capacity change from 0 to 8
[  140.385080][ T7877] SQUASHFS error: xz decompression failed, data probably corrupt
[  140.387642][ T7877] SQUASHFS error: Failed to read block 0x108: -5
[  140.390045][ T7877] SQUASHFS error: Unable to read metadata cache entry [106]
[  140.393810][ T7877] SQUASHFS error: Unable to read inode 0x11f
[  140.483862][ T5936] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  140.486922][ T5936] usb 2-1: config 0 has no interface number 0
[  140.491159][ T5936] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  140.495483][ T5936] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  140.508484][ T5936] usb 2-1: config 0 interface 113 has no altsetting 0
[  140.513313][ T5936] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  140.516980][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.520532][ T5936] usb 2-1: Product: syz
[  140.522065][ T5936] usb 2-1: Manufacturer: syz
[  140.523829][ T5936] usb 2-1: SerialNumber: syz
[  140.534813][ T5936] usb 2-1: config 0 descriptor??
[  140.542822][ T5936] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  140.743955][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.777656][ T5305] usb 2-1: USB disconnect, device number 13
[  140.824427][ T7904] Bluetooth: MGMT ver 1.23
[  141.208509][ T6990] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  141.316783][ T7926] loop1: detected capacity change from 0 to 256
[  141.329935][ T7926] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7c19779b, utbl_chksum : 0xe619d30d)
[  141.358951][ T6990] usb 3-1: Using ep0 maxpacket: 16
[  141.361183][ T6990] usb 3-1: too many configurations: 123, using maximum allowed: 8
[  141.364595][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.369293][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.374198][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.380859][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.385752][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.392492][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.397280][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.402382][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.407432][ T6990] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  141.411496][ T6990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  141.413837][ T6990] usb 3-1: SerialNumber: syz
[  141.416481][ T6990] usb 3-1: config 0 descriptor??
[  141.435979][ T6990] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9
[  141.642915][ T7912] input: syz0 as /devices/virtual/input/input10
[  141.653119][ T5272] bcm5974 3-1:0.0: could not read from device
[  141.661576][ T5272] bcm5974 3-1:0.0: could not read from device
[  141.664501][ T6990] usb 3-1: USB disconnect, device number 10
[  142.218967][ T7947] IPv6: NLM_F_CREATE should be specified when creating new route
[  142.284515][ T7953] loop2: detected capacity change from 0 to 16
[  142.942994][   T34] audit: type=1326 audit(1770152056.882:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.880" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7db1f9acb9 code=0x0
[  143.283750][ T7980] overlayfs: failed to clone upperpath
[  143.404190][ T7982] ptrace attach of "/syz-executor exec"[7985] was attempted by "/syz-executor exec"[7982]
[  143.574350][ T7992] loop2: detected capacity change from 0 to 32768
[  143.580365][ T7992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.889 (7992)
[  143.594195][ T7992] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.597757][ T7992] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  143.764838][ T7992] BTRFS info (device loop2): enabling ssd optimizations
[  143.766913][ T7992] BTRFS info (device loop2): turning on async discard
[  143.769668][ T7992] BTRFS info (device loop2): enabling free space tree
[  143.812578][ T5878] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.857361][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'.
[  144.387001][ T8056] loop2: detected capacity change from 0 to 128
[  144.419169][ T6990] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  144.433406][ T8056] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.450515][ T8056] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  144.475916][ T5878] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.579146][ T6990] usb 2-1: Using ep0 maxpacket: 8
[  144.664727][ T6990] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  144.676629][ T6990] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  144.687816][ T6990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  144.698048][ T6990] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  144.709707][ T6990] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.731649][ T6990] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  144.743046][ T6990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.001239][ T6990] usb 2-1: usb_control_msg returned -32
[  145.003332][ T6990] usbtmc 2-1:16.0: can't read capabilities
[  145.414800][ T8077] usbtmc 2-1:16.0: stb usb_control_msg returned -32
[  145.419916][ T5934] usb 2-1: USB disconnect, device number 14
[  145.802148][ T8085] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  145.813444][ T8085] bond1 (unregistering): Released all slaves
[  146.336342][ T8096] xt_CONNSECMARK: invalid mode: 0
[  146.660372][ T8096] loop1: detected capacity change from 0 to 32768
[  146.664738][ T8096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.925 (8096)
[  146.880194][ T8096] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.883519][ T8096] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  147.050164][ T8096] BTRFS info (device loop1): enabling ssd optimizations
[  147.052832][ T8096] BTRFS info (device loop1): turning on async discard
[  147.055810][ T8096] BTRFS info (device loop1): enabling free space tree
[  147.353219][   T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  147.403646][ T5873] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.944746][ T8136] loop1: detected capacity change from 0 to 8
[  147.983862][ T8136] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  148.326031][ T8161] netlink: 92 bytes leftover after parsing attributes in process `syz.2.944'.
[  148.353750][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'.
[  148.357044][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.944'.
[  148.587440][ T8178] loop2: detected capacity change from 0 to 512
[  148.598794][ T8178] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  148.607398][ T8178] EXT4-fs error (device loop2): ext4_iget_extra_inode:5072: inode #15: comm syz.2.950: corrupted in-inode xattr: overlapping e_value 
[  148.616202][ T8178] EXT4-fs (loop2): get orphan inode failed
[  148.618989][ T8178] EXT4-fs (loop2): mount failed
[  148.816823][ T8172] loop1: detected capacity change from 0 to 32768
[  148.880412][ T8172] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.930827][ T8172] XFS (loop1): Ending clean mount
[  148.978699][ T5873] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.233424][ T8208] ieee802154 phy0 wpan0: encryption failed: -22
[  149.298138][ T8212] loop2: detected capacity change from 0 to 512
[  149.978561][ T5937] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  150.138416][ T5937] usb 2-1: Using ep0 maxpacket: 16
[  150.147843][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.155642][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.163448][ T5937] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  150.173880][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.194025][ T5937] usb 2-1: config 0 descriptor??
[  150.410613][ T8232] loop2: detected capacity change from 0 to 32768
[  150.414284][ T8232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.966 (8232)
[  150.435794][ T8232] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.443100][ T8232] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  150.532351][ T8232] BTRFS info (device loop2): enabling ssd optimizations
[  150.535175][ T8232] BTRFS info (device loop2): turning on async discard
[  150.537576][ T8232] BTRFS info (device loop2): enabling free space tree
[  150.592782][ T5878] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.614370][ T5937] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0
[  150.617030][ T5937] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0
[  150.646408][ T5937] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0
[  150.653532][ T5937] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0
[  150.656292][ T5937] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0
[  150.700989][ T5937] corsair 0003:1B1C:1B02.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  150.803570][ T5937] corsair 0003:1B1C:1B02.0003: Failed to get K90 initial state (error -71).
[  150.821942][ T5937] usb 2-1: USB disconnect, device number 15
[  150.928119][   T34] audit: type=1326 audit(1770152064.862:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  150.939923][   T34] audit: type=1326 audit(1770152064.872:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  150.948014][   T34] audit: type=1326 audit(1770152064.872:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  150.956804][   T34] audit: type=1326 audit(1770152064.872:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  150.964894][   T34] audit: type=1326 audit(1770152064.872:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  150.973264][   T34] audit: type=1326 audit(1770152064.872:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  150.981025][   T34] audit: type=1326 audit(1770152064.872:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  150.988130][   T34] audit: type=1326 audit(1770152064.872:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  150.995957][   T34] audit: type=1326 audit(1770152064.872:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  151.005013][   T34] audit: type=1326 audit(1770152064.872:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.2.969" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f327619acb9 code=0x7ffc0000
[  151.800922][ T8272] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  152.131900][ T8278] bridge1: the hash_elasticity option has been deprecated and is always 16
[  152.259903][ T8284] loop1: detected capacity change from 0 to 256
[  152.304054][ T8284] FAT-fs (loop1): Directory bread(block 64) failed
[  152.310858][ T8284] FAT-fs (loop1): Directory bread(block 65) failed
[  152.313621][ T8284] FAT-fs (loop1): Directory bread(block 66) failed
[  152.321186][ T8284] FAT-fs (loop1): Directory bread(block 67) failed
[  152.327828][ T8284] FAT-fs (loop1): Directory bread(block 68) failed
[  152.332221][ T8284] FAT-fs (loop1): Directory bread(block 69) failed
[  152.334827][ T8284] FAT-fs (loop1): Directory bread(block 70) failed
[  152.336822][ T8284] FAT-fs (loop1): Directory bread(block 71) failed
[  152.340601][ T8284] FAT-fs (loop1): Directory bread(block 72) failed
[  152.342901][ T8284] FAT-fs (loop1): Directory bread(block 73) failed
[  153.003212][ T8312] loop1: detected capacity change from 0 to 4096
[  153.022694][ T8312] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  153.036680][ T8312] ntfs3(loop1): ino=3, mi_enum_attr
[  153.115178][ T8322] cifs: Bad value for 'source'
[  153.151563][ T6990] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  153.299086][ T6990] usb 3-1: Using ep0 maxpacket: 32
[  153.309966][ T6990] usb 3-1: config 0 has an invalid interface number: 145 but max is 0
[  153.313151][ T6990] usb 3-1: config 0 has no interface number 0
[  153.315444][ T6990] usb 3-1: config 0 interface 145 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  153.325243][ T6990] usb 3-1: config 0 interface 145 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  153.331745][ T6990] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  153.335203][ T6990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.338257][ T6990] usb 3-1: Product: syz
[  153.348481][ T6990] usb 3-1: Manufacturer: syz
[  153.350220][ T6990] usb 3-1: SerialNumber: syz
[  153.356008][ T6990] usb 3-1: config 0 descriptor??
[  153.709234][ T6990] usb 3-1: USB disconnect, device number 11
[  153.725745][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.187029][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'.
[  154.191221][ T8351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1014'.
[  154.273946][ T8353] loop1: detected capacity change from 0 to 256
[  154.297723][ T8353] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  154.531728][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'.
[  155.234706][ T8393] loop1: detected capacity change from 0 to 8
[  155.251832][ T8393] SQUASHFS error: lzo decompression failed, data probably corrupt
[  155.257655][ T8393] SQUASHFS error: Failed to read block 0x91: -5
[  155.267873][ T8393] SQUASHFS error: Unable to read metadata cache entry [8f]
[  155.272000][ T8393] SQUASHFS error: Unable to read inode 0x11f
[  155.668253][ T8395] loop1: detected capacity change from 0 to 32768
[  155.860528][ T8413] loop2: detected capacity change from 0 to 128
[  155.864037][ T8413] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  155.881894][ T8413] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  155.956657][ T5878] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  155.964332][ T8418] loop1: detected capacity change from 0 to 2048
[  155.973661][ T8418] UDF-fs: warning (device loop1): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  155.977458][ T8418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=67108863, location=67108863
[  155.978517][ T5878] FAT-fs (loop2): Filesystem has been set read-only
[  155.984340][ T5878] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  155.985468][ T8418] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[  156.377755][ T8442] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  156.432127][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  156.435465][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  156.441321][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  156.447109][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  156.451082][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  156.931001][   T13] bridge_slave_1: left allmulticast mode
[  156.934665][   T13] bridge_slave_1: left promiscuous mode
[  156.938277][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.942299][   T13] bridge_slave_0: left allmulticast mode
[  156.944021][   T13] bridge_slave_0: left promiscuous mode
[  156.946189][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.198969][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.202703][   T13] bond_slave_0: left promiscuous mode
[  157.206187][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.210549][   T13] bond_slave_1: left promiscuous mode
[  157.212927][   T13] bond0 (unregistering): Released all slaves
[  157.530019][ T8445] chnl_net:caif_netlink_parms(): no params data found
[  157.644304][   T13] hsr_slave_0: left promiscuous mode
[  157.647210][   T13] hsr_slave_1: left promiscuous mode
[  157.651586][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.655001][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.050566][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'.
[  158.153252][   T13] team0 (unregistering): Port device team_slave_1 removed
[  158.192404][   T13] team0 (unregistering): Port device team_slave_0 removed
[  158.300108][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816b4c5800: rx timeout, send abort
[  158.424441][ T5228] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  158.498772][ T5228] Bluetooth: hci3: command tx timeout
[  158.727684][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.731050][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.733082][ T8445] bridge_slave_0: entered allmulticast mode
[  158.744231][ T8445] bridge_slave_0: entered promiscuous mode
[  158.777059][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.787641][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.790853][ T8445] bridge_slave_1: entered allmulticast mode
[  158.793684][ T8445] bridge_slave_1: entered promiscuous mode
[  158.816122][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.822202][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.870661][ T8445] team0: Port device team_slave_0 added
[  158.889920][ T8445] team0: Port device team_slave_1 added
[  158.959952][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.962407][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  158.992999][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.000421][ T5937] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  159.012322][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  159.012635][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.018643][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.027597][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.102197][ T8445] hsr_slave_0: entered promiscuous mode
[  159.104647][ T8445] hsr_slave_1: entered promiscuous mode
[  159.106938][ T8445] debugfs: 'hsr0' already exists in 'hsr'
[  159.110040][ T8445] Cannot create hsr debugfs directory
[  159.162531][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.172896][ T5937] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  159.175819][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.194814][ T5937] usb 2-1: config 0 descriptor??
[  159.392153][ T8445] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  159.407514][ T8445] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  159.414937][ T8445] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  159.421364][ T8445] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  159.462588][ T8518] bridge1: entered allmulticast mode
[  159.488236][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.490690][ T8445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.586866][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.604535][ T5937] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0
[  159.607454][ T5937] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0
[  159.615505][ T5937] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0
[  159.617704][ T5937] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0
[  159.620974][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.630271][ T5937] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0
[  159.638662][ T5937] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0
[  159.643419][ T8445] 8021q: adding VLAN 0 to HW filter on device team0
[  159.647803][ T5937] steelseries 0003:1038:12B6.0004: hidraw0: USB HID vff.fc Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0
[  159.663622][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.665762][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.674741][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.676862][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.903268][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.951532][ T8445] veth0_vlan: entered promiscuous mode
[  159.961107][ T8445] veth1_vlan: entered promiscuous mode
[  159.989163][ T8445] veth0_macvtap: entered promiscuous mode
[  159.993679][ T8445] veth1_macvtap: entered promiscuous mode
[  160.003660][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.014623][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.024740][ T5937] usb 2-1: USB disconnect, device number 16
[  160.030839][ T5887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.037643][ T5887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.048041][ T5887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.052747][ T5887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.113607][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.116061][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.136860][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.141161][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.275229][ T8550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'.
[  160.383751][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'.
[  160.387024][ T8558] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1089'.
[  160.578676][ T5228] Bluetooth: hci3: command tx timeout
[  161.247545][ T8592] loop6: detected capacity change from 0 to 255852543
[  161.252594][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.255774][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.262004][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.265033][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.269364][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.272540][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.275527][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.278795][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.281895][ T6187] ldm_validate_partition_table(): Disk read failed.
[  161.284820][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.288089][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.293911][ T6187] Dev loop6: unable to read RDB block 0
[  161.297679][ T6187]  loop6: unable to read partition table
[  161.306218][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1105'.
[  161.340845][ T8592] ldm_validate_partition_table(): Disk read failed.
[  161.343605][ T8592] Dev loop6: unable to read RDB block 0
[  161.347948][ T8592]  loop6: unable to read partition table
[  161.350840][ T8592] loop_reread_partitions: partition scan of loop6 (3xC) failed (rc=-5)
[  161.354747][ T8597] ldm_validate_partition_table(): Disk read failed.
[  161.359656][ T8597] Dev loop6: unable to read RDB block 0
[  161.363012][ T8597]  loop6: unable to read partition table
[  161.366498][ T8597] loop_reread_partitions: partition scan of loop6 (3xC) failed (rc=-5)
[  161.618506][ T8615] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  161.642848][ T8617] netlink: 'syz.1.1114': attribute type 1 has an invalid length.
[  161.645375][ T8617] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1114'.
[  161.653876][ T8617] NCSI netlink: No device for ifindex 0
[  161.938655][ T5901] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  162.098928][ T5901] usb 4-1: Using ep0 maxpacket: 32
[  162.153324][ T5901] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  162.156055][ T5901] usb 4-1: config 0 has no interface number 0
[  162.160860][ T5901] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  162.163823][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.166406][ T5901] usb 4-1: Product: syz
[  162.167722][ T5901] usb 4-1: Manufacturer: syz
[  162.169351][ T5901] usb 4-1: SerialNumber: syz
[  162.176817][ T5901] usb 4-1: config 0 descriptor??
[  162.183879][ T5901] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  162.332018][ T8627] netlink: 'syz.0.1118': attribute type 9 has an invalid length.
[  162.516251][ T5901] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  162.526736][ T5901] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  162.716633][ T5228] Bluetooth: hci3: command tx timeout
[  162.998004][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  162.999284][ T5937] usb 4-1: USB disconnect, device number 2
[  163.011365][ T5937] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  163.016386][ T5937] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  163.020370][ T5937] quatech2 4-1:0.51: device disconnected
[  163.027689][ T8638] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component
[  163.379130][ T6991] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  163.530331][ T6991] usb 2-1: config 9 has an invalid interface number: 164 but max is 0
[  163.533177][ T6991] usb 2-1: config 9 has no interface number 0
[  163.535283][ T6991] usb 2-1: New USB device found, idVendor=0413, idProduct=6a05, bcdDevice= b.2e
[  163.548794][ T6991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.779481][ T6991] usb 2-1: USB disconnect, device number 17
[  164.745986][ T5228] Bluetooth: hci3: command tx timeout
[  165.185948][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'.
[  165.727070][ T8710] loop3: detected capacity change from 0 to 512
[  165.735080][ T8710] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  165.801987][ T8713] netlink: 'syz.1.1156': attribute type 2 has an invalid length.
[  165.804463][ T8713] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1156'.
[  166.098642][ T5934] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  166.250634][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short
[  166.253425][ T5934] usb 2-1: not running at top speed; connect to a high speed hub
[  166.257106][ T5934] usb 2-1: config 3 has an invalid interface number: 106 but max is 0
[  166.261392][ T5934] usb 2-1: config 3 has no interface number 0
[  166.264198][ T5934] usb 2-1: config 3 interface 106 has no altsetting 0
[  166.268989][ T5934] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  166.272150][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.274602][ T5934] usb 2-1: Product: syz
[  166.275889][ T5934] usb 2-1: Manufacturer: syz
[  166.277315][ T5934] usb 2-1: SerialNumber: syz
[  166.511020][ T5934] kobil_sct 2-1:3.106: required endpoints missing
[  166.524996][ T5934] usb 2-1: USB disconnect, device number 18
[  166.534435][ T8719] loop3: detected capacity change from 0 to 131072
[  166.536792][ T8677] orangefs_mount: mount request failed with -4
[  166.540792][ T8719] F2FS-fs (loop3): Test dummy encryption mode enabled
[  166.544578][ T8719] F2FS-fs (loop3): invalid crc value
[  166.618182][ T8719] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  166.627756][ T8719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  166.964608][ T8735] loop3: detected capacity change from 0 to 512
[  166.970268][ T8735] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  167.384924][ T8743] Invalid ELF header type: 0 != 1
[  167.947067][ T8759] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1175'.
[  167.950112][ T8759] netlink: 'syz.1.1175': attribute type 9 has an invalid length.
[  167.953088][ T8759] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1175'.
[  167.955930][ T8759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1175'.
[  168.026324][ T8761] netlink: 'syz.0.1176': attribute type 4 has an invalid length.
[  168.028882][ T8761] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1176'.
[  168.043448][ T8761] .`: renamed from bond0 (while UP)
[  168.089075][  T738] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  168.173684][ T8767] netlink: 'syz.3.1178': attribute type 3 has an invalid length.
[  168.351636][ T8779] loop1: detected capacity change from 0 to 1024
[  168.404906][ T3626] hfsplus: b-tree write err: -5, ino 3
[  169.097132][ T8792] netlink: set zone limit has 4 unknown bytes
[  170.265523][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'.
[  170.285320][ T8809] loop3: detected capacity change from 0 to 2048
[  170.332300][ T8809]  loop3: p3 p4 < >
[  170.338895][ T8809] loop3: p3 start 11362048 is beyond EOD, truncated
[  170.375872][ T8815] loop1: detected capacity change from 0 to 512
[  170.513753][ T8815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[  170.542784][ T8815] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.610325][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[  171.058664][ T5936] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  171.208525][ T5936] usb 4-1: Using ep0 maxpacket: 32
[  171.212221][ T5936] usb 4-1: config 32 has an invalid interface number: 85 but max is 0
[  171.214953][ T5936] usb 4-1: config 32 has no interface number 0
[  171.217068][ T5936] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  171.220596][ T5936] usb 4-1: config 32 interface 85 has no altsetting 0
[  171.225945][ T5936] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  171.229537][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.232108][ T5936] usb 4-1: Product: syz
[  171.233430][ T5936] usb 4-1: Manufacturer: syz
[  171.234879][ T5936] usb 4-1: SerialNumber: syz
[  171.848148][ T5936] appletouch 4-1:32.85: Geyser mode initialized.
[  171.854995][ T5936] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.85/input/input11
[  172.050680][ T5937] usb 4-1: USB disconnect, device number 3
[  172.069323][ T5937] appletouch 4-1:32.85: input: appletouch disconnected
[  172.643896][ T8927] loop1: detected capacity change from 0 to 4096
[  172.671812][ T8929] Cannot find add_set index 1 as target
[  172.875610][ T8934] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1237'.
[  172.902957][ T8936] loop3: detected capacity change from 0 to 512
[  172.946090][ T8936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  173.016684][ T8936] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  173.071052][ T8445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.240410][ T8948] netlink: zone id is out of range
[  173.243623][ T8948] netlink: zone id is out of range
[  173.245458][ T8948] netlink: zone id is out of range
[  173.247353][ T8948] netlink: zone id is out of range
[  173.581437][ T8967] loop3: detected capacity change from 0 to 64
[  173.681705][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1254'.
[  173.723144][ T8976] loop3: detected capacity change from 0 to 1764
[  174.469047][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1264'.
[  174.785245][ T9003] loop3: detected capacity change from 0 to 32768
[  174.795820][ T9003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1267 (9003)
[  174.823172][ T9003] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  174.826141][ T9003] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  174.830468][ T9003] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  174.976454][ T9003] BTRFS info (device loop3): rebuilding free space tree
[  175.000475][ T9003] BTRFS info (device loop3): disabling free space tree
[  175.003085][ T9003] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  175.007759][ T9003] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  175.020493][ T9003] BTRFS info (device loop3): enabling ssd optimizations
[  175.023231][ T9003] BTRFS info (device loop3): enabling disk space caching
[  175.026022][ T9003] BTRFS info (device loop3): force clearing of disk cache
[  175.028931][ T9003] BTRFS info (device loop3): force zstd compression, level 3
[  175.052813][   T34] kauditd_printk_skb: 22 callbacks suppressed
[  175.052829][   T34] audit: type=1800 audit(1770152088.992:71): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1267" name="file1" dev="loop3" ino=260 res=0 errno=0
[  175.547774][ T8445] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.852909][ T9034] loop1: detected capacity change from 0 to 40427
[  175.870573][ T9034] F2FS-fs (loop1): Invalid log blocks per segment (4278190089)
[  175.873372][ T9034] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  175.901647][ T9034] F2FS-fs (loop1): invalid crc value
[  175.992320][ T9034] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  176.018497][ T9034] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  176.021263][ T9034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.046407][ T9050] : entered promiscuous mode
[  176.054361][ T9034] F2FS-fs (loop1): Corrupted max_depth of 3: 255
[  176.057892][ T9034] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  176.356232][ T9073] loop3: detected capacity change from 0 to 1024
[  176.394367][ T9071] netlink: 'syz.1.1290': attribute type 10 has an invalid length.
[  176.402589][ T9071] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0)
[  176.416704][ T9077] loop3: detected capacity change from 0 to 512
[  176.439187][ T9077] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1293: bad orphan inode 15
[  176.470166][ T9077] ext4_test_bit(bit=14, block=5) = 0
[  176.481176][ T9077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.523876][ T8445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.784702][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1302'.
[  176.799669][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1302'.
[  176.864226][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1306'.
[  176.932818][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'.
[  176.936076][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'.
[  177.216844][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'.
[  177.220956][ T9124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1315'.
[  177.259276][ T5934] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  177.377503][ T9128] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  177.890448][ T5934] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  177.893547][ T5934] usb 4-1: config 0 has no interface number 0
[  177.895903][ T5934] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  177.903385][ T5934] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  177.907355][ T5934] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  177.911813][ T5934] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  177.916149][ T5934] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  177.923074][ T5934] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  177.926386][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.929895][ T5934] usb 4-1: Product: syz
[  177.931855][ T5934] usb 4-1: Manufacturer: syz
[  177.933698][ T5934] usb 4-1: SerialNumber: syz
[  178.109158][ T5934] usb 4-1: config 0 descriptor??
[  178.112411][ T9114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  178.127058][ T5934] iguanair 4-1:0.255: probe with driver iguanair failed with error -12
[  178.487036][ T5936] usb 4-1: USB disconnect, device number 4
[  178.943423][ T9150] QAT: failed to copy from user cfg_data.
[  179.241608][ T9168] tipc: Started in network mode
[  179.243431][ T9168] tipc: Node identity 5f786c6174653d3, cluster identity 4711
[  179.246084][ T9168] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  179.336114][ T9166] loop3: detected capacity change from 0 to 32768
[  179.347660][ T9166] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1331 (9166)
[  179.384077][ T9166] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.387393][ T9166] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  179.495876][ T9166] BTRFS info (device loop3): enabling ssd optimizations
[  179.509968][ T9166] BTRFS info (device loop3): turning on flush-on-commit
[  179.512452][ T9166] BTRFS info (device loop3): enabling free space tree
[  179.514949][ T9166] BTRFS info (device loop3): enabling auto defrag
[  179.517301][ T9166] BTRFS info (device loop3): use lzo compression, level 1
[  179.550412][ T9166] BTRFS info (device loop3): max_inline set to 4096
[  179.649198][ T9200] loop1: detected capacity change from 0 to 128
[  179.666956][ T9200] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  179.685899][ T9200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.716103][ T9200] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  180.601615][ T8445] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.809417][ T9217] loop1: detected capacity change from 0 to 2048
[  180.834444][ T6187] udevd[6187]: incorrect nilfs2 checksum on /dev/loop1
[  180.858582][ T9217] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  180.865612][ T6187] udevd[6187]: incorrect nilfs2 checksum on /dev/loop1
[  180.905923][ T9224] __nla_validate_parse: 2 callbacks suppressed
[  180.907364][ T9224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1348'.
[  180.921532][ T9222] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.011305][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'.
[  181.117584][ T9234] loop3: detected capacity change from 0 to 4096
[  181.176073][ T9234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.261838][ T8445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.580702][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1371'.
[  182.583825][ T9273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  182.759714][ T9283] xt_bpf: check failed: parse error
[  183.490040][ T9296] xt_TCPMSS: Only works on TCP SYN packets
[  183.829747][ T9301] loop3: detected capacity change from 0 to 32768
[  184.222152][ T9319] loop1: detected capacity change from 0 to 512
[  184.257294][ T9319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.262276][ T9319] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.302253][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.553497][ T9339] overlay: ./file0 is not a directory
[  185.617295][ T9358] loop1: detected capacity change from 0 to 2048
[  185.664447][ T9358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.693743][   T34] audit: type=1800 audit(1770152099.632:72): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1405" name="bus" dev="loop1" ino=18 res=0 errno=0
[  185.747602][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.100412][ T4370] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  186.365800][ T9385] loop1: detected capacity change from 0 to 32768
[  186.415910][ T9385] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  186.457870][ T9385] XFS (loop1): Ending clean mount
[  186.489108][ T9385] XFS (loop1): Quotacheck needed: Please wait.
[  186.577734][ T9385] XFS (loop1): Quotacheck: Done.
[  186.622832][   T34] audit: type=1800 audit(1770152100.562:73): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1415" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  186.725560][ T5873] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.039884][ T9426] loop3: detected capacity change from 0 to 64
[  188.744821][ T9429] netlink: 'syz.3.1430': attribute type 1 has an invalid length.
[  190.145407][ T9465] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1444'.
[  190.181614][ T9467] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1445'.
[  190.270928][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'.
[  190.864785][ T9482] loop1: detected capacity change from 0 to 40427
[  190.870038][ T9482] F2FS-fs (loop1): invalid crc value
[  190.916821][ T9482] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  190.923741][ T9482] F2FS-fs (loop1): Start checkpoint disabled!
[  190.927046][ T9482] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  190.930513][ T9482] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  190.968240][ T3626] kworker/u10:12: attempt to access beyond end of device
[  190.968240][ T3626] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.975443][ T3626] CPU: 1 UID: 0 PID: 3626 Comm: kworker/u10:12 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.975459][ T3626] Tainted: [L]=SOFTLOCKUP
[  190.975463][ T3626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.975469][ T3626] Workqueue: writeback wb_workfn (flush-7:1)
[  190.975485][ T3626] Call Trace:
[  190.975489][ T3626]  <TASK>
[  190.975493][ T3626]  dump_stack_lvl+0xe8/0x150
[  190.975507][ T3626]  f2fs_handle_critical_error+0x37c/0x540
[  190.975522][ T3626]  f2fs_write_end_io+0x886/0xb60
[  190.975551][ T3626]  __submit_merged_bio+0x256/0x650
[  190.975579][ T3626]  __submit_merged_write_cond+0x269/0x530
[  190.975603][ T3626]  f2fs_write_data_pages+0x2806/0x3360
[  190.975642][ T3626]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  190.975673][ T3626]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  190.975702][ T3626]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  190.975722][ T3626]  ? __lock_acquire+0x6b5/0x2cf0
[  190.975738][ T3626]  ? f2fs_write_inode+0x3fb/0x5f0
[  190.975749][ T3626]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  190.975759][ T3626]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  190.975770][ T3626]  do_writepages+0x32e/0x550
[  190.975785][ T3626]  ? reacquire_held_locks+0x104/0x190
[  190.975794][ T3626]  ? writeback_sb_inodes+0x41f/0x1820
[  190.975807][ T3626]  __writeback_single_inode+0x133/0x1230
[  190.975818][ T3626]  ? do_raw_spin_unlock+0x4d/0x210
[  190.975831][ T3626]  writeback_sb_inodes+0x92c/0x1820
[  190.975852][ T3626]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  190.975861][ T3626]  ? do_raw_spin_lock+0x12b/0x2f0
[  190.975889][ T3626]  ? rcu_is_watching+0x15/0xb0
[  190.975904][ T3626]  wb_writeback+0x445/0xad0
[  190.975915][ T3626]  ? queue_io+0x211/0x450
[  190.975927][ T3626]  ? __pfx_wb_writeback+0x10/0x10
[  190.975935][ T3626]  ? do_raw_spin_lock+0x12b/0x2f0
[  190.975991][ T3626]  wb_workfn+0x3f8/0xef0
[  190.975999][ T3626]  ? look_up_lock_class+0x57/0x110
[  190.976021][ T3626]  ? __pfx_wb_workfn+0x10/0x10
[  190.976030][ T3626]  ? __pfx___schedule+0x10/0x10
[  190.976041][ T3626]  ? irqentry_exit+0x59c/0x620
[  190.976054][ T3626]  ? process_scheduled_works+0xa0f/0x17a0
[  190.976069][ T3626]  ? process_scheduled_works+0xa0f/0x17a0
[  190.976084][ T3626]  ? preempt_schedule_thunk+0x16/0x30
[  190.976105][ T3626]  ? process_scheduled_works+0xa0f/0x17a0
[  190.976118][ T3626]  ? process_scheduled_works+0xa0f/0x17a0
[  190.976132][ T3626]  process_scheduled_works+0xaec/0x17a0
[  190.976164][ T3626]  ? __pfx_process_scheduled_works+0x10/0x10
[  190.976178][ T3626]  ? do_raw_spin_lock+0x12b/0x2f0
[  190.976201][ T3626]  ? assign_work+0x3d3/0x440
[  190.976213][ T3626]  worker_thread+0x89f/0xd90
[  190.976228][ T3626]  ? __kthread_parkme+0x7a/0x1f0
[  190.976242][ T3626]  kthread+0x726/0x8b0
[  190.976253][ T3626]  ? __pfx_worker_thread+0x10/0x10
[  190.976261][ T3626]  ? __pfx_kthread+0x10/0x10
[  190.976273][ T3626]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.976300][ T3626]  ? __pfx_kthread+0x10/0x10
[  190.976312][ T3626]  ret_from_fork+0x51b/0xa40
[  190.976323][ T3626]  ? __pfx_ret_from_fork+0x10/0x10
[  190.976330][ T3626]  ? __switch_to+0xc82/0x1410
[  190.976347][ T3626]  ? __pfx_kthread+0x10/0x10
[  190.976365][ T3626]  ret_from_fork_asm+0x1a/0x30
[  190.976396][ T3626]  </TASK>
[  190.977113][ T3626] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  191.377594][ T9504] netlink: 'syz.1.1462': attribute type 3 has an invalid length.
[  191.384221][ T9504] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  191.386898][ T9504] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  192.038701][ T9520] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  192.042304][ T9520] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  192.166673][ T9526] loop1: detected capacity change from 0 to 256
[  192.189674][ T9526] exfat: Deprecated parameter 'utf8'
[  192.191815][ T9526] exfat: Deprecated parameter 'utf8'
[  192.194008][ T9526] exfat: Deprecated parameter 'utf8'
[  192.288944][ T9526] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  192.323098][ T9522] loop3: detected capacity change from 0 to 32768
[  192.335535][ T9522] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1470 (9522)
[  192.403704][ T9522] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.408074][ T9522] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm
[  192.505650][ T4591] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  192.530924][ T4570] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  192.539519][ T4370] BTRFS warning (device loop3 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x73153135 level 0, ignored
[  192.560414][ T9522] BTRFS warning (device loop3 state S): devid 1 physical 4096 len 4194304 inside the reserved space
[  192.570313][ T9522] BTRFS error (device loop3 state S): dev extent physical offset 4096 devid 1 has no corresponding chunk
[  192.574499][ T9522] BTRFS error (device loop3 state S): failed to verify dev extents against chunks: -117
[  192.688253][ T9522] BTRFS error (device loop3 state S): open_ctree failed: -117
[  193.396071][ T9564] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  193.958840][ T9582] loop1: detected capacity change from 0 to 4096
[  193.974169][ T9582] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  194.007919][ T9582] ntfs3(loop1): ino=1a, mi_enum_attr
[  194.010590][ T9582] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  194.056060][ T1100] ntfs3(loop1): ino=1e, ntfs3_write_inode failed, -22.
[  194.187066][ T9600] loop1: detected capacity change from 0 to 512
[  194.191736][ T9600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  194.235231][ T9600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.247335][ T9600] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  194.259232][   T34] audit: type=1800 audit(1770152108.207:74): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1498" name="bus" dev="loop1" ino=18 res=0 errno=0
[  194.634453][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.839219][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1503'.
[  194.908008][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1505'.
[  194.916396][ T9620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1504'.
[  194.934463][ T9619] bond1: entered promiscuous mode
[  194.936472][ T9619] bond1: entered allmulticast mode
[  194.938140][ T9619] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.598865][ T6991] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  195.711690][ T9632] loop3: detected capacity change from 0 to 32768
[  195.737862][ T9632] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  195.750867][ T6991] usb 2-1: config 0 has an invalid interface number: 213 but max is 0
[  195.754063][ T6991] usb 2-1: config 0 has no interface number 0
[  195.754838][ T9632] XFS (loop3): Ending clean mount
[  195.759204][ T6991] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db
[  195.762682][ T6991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.765635][ T6991] usb 2-1: Product: syz
[  195.766631][ T9632] XFS (loop3): Quotacheck needed: Please wait.
[  195.767192][ T6991] usb 2-1: Manufacturer: syz
[  195.772766][ T6991] usb 2-1: SerialNumber: syz
[  195.779126][ T6991] usb 2-1: config 0 descriptor??
[  195.843857][ T9632] XFS (loop3): Quotacheck: Done.
[  195.902002][ T8445] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  196.008745][ T6991] usb 2-1: USB disconnect, device number 20
[  196.244085][ T9649] loop3: detected capacity change from 0 to 32768
[  196.257348][ T9649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1512 (9649)
[  196.265315][ T9649] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.274296][ T9649] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  196.403846][ T9649] BTRFS info (device loop3): enabling ssd optimizations
[  196.406553][ T9649] BTRFS info (device loop3): turning on async discard
[  196.418588][ T9649] BTRFS info (device loop3): enabling free space tree
[  196.515365][ T8445] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.621078][ T9675] loop1: detected capacity change from 0 to 1024
[  196.657891][ T9675] hfsplus: failed to load root directory
[  196.831067][ T5228] Bluetooth: hci1: command 0x0406 tx timeout
[  196.999460][ T9690] loop1: detected capacity change from 0 to 256
[  197.304333][ T9699] loop3: detected capacity change from 0 to 512
[  197.335324][ T9699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  197.371637][ T9699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  197.374136][ T9699] System zones: 1-12
[  197.385819][ T9699] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  197.393854][ T9699] EXT4-fs (loop3): 1 truncate cleaned up
[  197.399866][ T9699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.041294][ T5875] Bluetooth: hci1: unexpected event for opcode 0x043d
[  198.238117][ T8445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.319826][ T9721] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  198.321967][ T1100] Bluetooth: hci2: Frame reassembly failed (-84)
[  198.324603][ T4591] Bluetooth: hci2: Frame reassembly failed (-84)
[  199.919014][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  199.920991][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  200.338548][ T5875] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  200.339708][ T5228] Bluetooth: hci2: command 0x1003 tx timeout
[  200.954788][ T9777] loop3: detected capacity change from 0 to 1024
[  201.041066][ T1100] hfsplus: b-tree write err: -5, ino 8
[  201.334338][ T9781] loop3: detected capacity change from 0 to 512
[  201.354884][ T9781] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003)
[  201.358193][ T9781] FAT-fs (loop3): Filesystem has been set read-only
[  201.362054][ T9781] FAT-fs (loop3): error, invalid access to FAT (entry 0x22000003)
[  201.455626][ T9787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1562'.
[  201.464167][ T5875] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  201.467156][ T5875] Bluetooth: hci3: Injecting HCI hardware error event
[  201.473276][ T5875] Bluetooth: hci3: hardware error 0x00
[  201.545769][ T9791] loop3: detected capacity change from 0 to 64
[  201.573180][ T9791] minix: block size(59136) > page size(4096) not supported by filesystem
[  201.614612][ T9791] Trying to free block not in datazone
[  201.616426][ T9791] Trying to free block not in datazone
[  201.618299][ T9791] Trying to free block not in datazone
[  201.620649][ T9791] Trying to free block not in datazone
[  201.622575][ T9791] Trying to free block not in datazone
[  201.624405][ T9791] Trying to free block not in datazone
[  201.626247][ T9791] Trying to free block not in datazone
[  201.628018][ T9791] Trying to free block not in datazone
[  201.630485][ T9791] Trying to free block not in datazone
[  201.632360][ T9791] Trying to free block not in datazone
[  201.634036][ T9791] Trying to free block not in datazone
[  201.635880][ T9791] Trying to free block not in datazone
[  201.637694][ T9791] Trying to free block not in datazone
[  201.639907][ T9791] Trying to free block not in datazone
[  201.641629][ T9791] Trying to free block not in datazone
[  201.643302][ T9791] Trying to free block not in datazone
[  201.644890][ T9791] Trying to free block not in datazone
[  201.646501][ T9791] Trying to free block not in datazone
[  201.648184][ T9791] Trying to free block not in datazone
[  201.651820][ T9791] Trying to free block not in datazone
[  201.653534][ T9791] Trying to free block not in datazone
[  201.655134][ T9791] Trying to free block not in datazone
[  201.657165][ T9791] Trying to free block not in datazone
[  201.660257][ T9791] Trying to free block not in datazone
[  201.662517][ T9791] Trying to free block not in datazone
[  201.665186][ T9791] Trying to free block not in datazone
[  201.666969][ T9791] Trying to free block not in datazone
[  201.669083][ T9791] Trying to free block not in datazone
[  201.671044][ T9791] Trying to free block not in datazone
[  201.672746][ T9791] Trying to free block not in datazone
[  201.674409][ T9791] Trying to free block not in datazone
[  201.676374][ T9791] Trying to free block not in datazone
[  201.678079][ T9791] Trying to free block not in datazone
[  201.680417][ T9791] Trying to free block not in datazone
[  201.682200][ T9791] Trying to free block not in datazone
[  201.683995][ T9791] Trying to free block not in datazone
[  201.686000][ T9791] Trying to free block not in datazone
[  201.687953][ T9791] Trying to free block not in datazone
[  201.689936][ T9791] Trying to free block not in datazone
[  201.691592][ T9791] Trying to free block not in datazone
[  201.693588][ T9791] Trying to free block not in datazone
[  201.695548][ T9791] Trying to free block not in datazone
[  201.697656][ T9791] Trying to free block not in datazone
[  201.700095][ T9791] Trying to free block not in datazone
[  201.702218][ T9791] Trying to free block not in datazone
[  201.704226][ T9791] Trying to free block not in datazone
[  201.706301][ T9791] Trying to free block not in datazone
[  201.708284][ T9791] Trying to free block not in datazone
[  201.711140][ T9791] Trying to free block not in datazone
[  201.713383][ T9791] Trying to free block not in datazone
[  201.715155][ T9791] Trying to free block not in datazone
[  201.716846][ T9791] Trying to free block not in datazone
[  201.718911][ T9791] Trying to free block not in datazone
[  201.777170][ T9791] Trying to free block not in datazone
[  201.780449][ T9791] Trying to free block not in datazone
[  201.780615][ T9801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.782136][ T9791] Trying to free block not in datazone
[  201.782160][ T9791] Trying to free block not in datazone
[  201.782164][ T9791] Trying to free block not in datazone
[  201.782167][ T9791] Trying to free block not in datazone
[  201.782170][ T9791] Trying to free block not in datazone
[  201.782174][ T9791] Trying to free block not in datazone
[  201.782177][ T9791] Trying to free block not in datazone
[  201.782181][ T9791] Trying to free block not in datazone
[  201.809869][ T9791] Trying to free block not in datazone
[  201.811893][ T9791] Trying to free block not in datazone
[  201.818522][ T9791] Trying to free block not in datazone
[  201.820485][ T9791] Trying to free block not in datazone
[  201.822447][ T9791] Trying to free block not in datazone
[  201.824349][ T9791] Trying to free block not in datazone
[  201.826329][ T9791] Trying to free block not in datazone
[  201.828285][ T9791] Trying to free block not in datazone
[  201.841699][ T9791] Trying to free block not in datazone
[  201.843697][ T9791] Trying to free block not in datazone
[  201.845394][ T9791] Trying to free block not in datazone
[  201.847308][ T9791] Trying to free block not in datazone
[  201.849611][ T9791] Trying to free block not in datazone
[  201.853491][ T9791] Trying to free block not in datazone
[  201.855467][ T9791] Trying to free block not in datazone
[  201.877439][ T9791] Trying to free block not in datazone
[  201.883291][ T9791] Trying to free block not in datazone
[  201.897934][ T9791] Trying to free block not in datazone
[  201.900548][ T9791] Trying to free block not in datazone
[  201.909587][ T9791] Trying to free block not in datazone
[  201.911273][ T9791] Trying to free block not in datazone
[  201.913119][ T9791] Trying to free block not in datazone
[  201.915194][ T9791] Trying to free block not in datazone
[  201.917221][ T9791] Trying to free block not in datazone
[  201.937677][ T9791] Trying to free block not in datazone
[  201.951665][ T9791] Trying to free block not in datazone
[  201.953727][ T9791] Trying to free block not in datazone
[  201.955638][ T9791] Trying to free block not in datazone
[  201.957493][ T9791] Trying to free block not in datazone
[  201.985719][ T9791] Trying to free block not in datazone
[  201.989072][ T9791] Trying to free block not in datazone
[  201.990922][ T9791] Trying to free block not in datazone
[  201.992519][ T9791] Trying to free block not in datazone
[  201.995210][ T9791] Trying to free block not in datazone
[  201.996790][ T9791] Trying to free block not in datazone
[  202.014447][ T9791] Trying to free block not in datazone
[  202.034344][ T9791] Trying to free block not in datazone
[  202.036445][ T9791] Trying to free block not in datazone
[  202.043467][ T9791] Trying to free block not in datazone
[  202.045562][ T9791] Trying to free block not in datazone
[  202.047612][ T9791] Trying to free block not in datazone
[  202.073216][ T9791] Trying to free block not in datazone
[  202.079281][ T9791] Trying to free block not in datazone
[  202.082427][ T9791] Trying to free block not in datazone
[  202.085987][ T9791] Trying to free block not in datazone
[  202.092063][ T9791] Trying to free block not in datazone
[  202.094330][ T9791] Trying to free block not in datazone
[  202.108626][ T9791] Trying to free block not in datazone
[  202.113728][ T9791] Trying to free block not in datazone
[  202.118594][ T9791] Trying to free block not in datazone
[  202.140921][ T9791] Trying to free block not in datazone
[  202.142929][ T9791] Trying to free block not in datazone
[  202.144950][ T9791] Trying to free block not in datazone
[  202.173940][ T9791] Trying to free block not in datazone
[  202.176023][ T9791] Trying to free block not in datazone
[  202.177971][ T9791] Trying to free block not in datazone
[  202.193964][ T9791] Trying to free block not in datazone
[  202.197198][ T9791] Trying to free block not in datazone
[  202.211868][ T9791] Trying to free block not in datazone
[  202.216190][ T9791] Trying to free block not in datazone
[  202.220644][ T9791] Trying to free block not in datazone
[  202.224796][ T9791] Trying to free block not in datazone
[  202.227050][ T9791] Trying to free block not in datazone
[  202.229033][ T9791] Trying to free block not in datazone
[  202.231356][ T9791] Trying to free block not in datazone
[  202.239962][ T9791] Trying to free block not in datazone
[  202.241663][ T9791] Trying to free block not in datazone
[  202.243537][ T9791] Trying to free block not in datazone
[  202.251697][ T9791] Trying to free block not in datazone
[  202.255152][ T9791] Trying to free block not in datazone
[  202.257298][ T9791] Trying to free block not in datazone
[  202.263968][ T9791] Trying to free block not in datazone
[  202.265567][ T9791] Trying to free block not in datazone
[  202.267094][ T9791] Trying to free block not in datazone
[  202.275121][ T9791] Trying to free block not in datazone
[  202.282751][ T9791] Trying to free block not in datazone
[  202.284381][ T9791] Trying to free block not in datazone
[  202.292385][ T9791] Trying to free block not in datazone
[  202.294171][ T9791] Trying to free block not in datazone
[  202.295829][ T9791] Trying to free block not in datazone
[  202.297892][ T9791] Trying to free block not in datazone
[  202.303613][ T9791] Trying to free block not in datazone
[  202.306015][ T9791] Trying to free block not in datazone
[  202.311888][ T9791] Trying to free block not in datazone
[  202.313844][ T9791] Trying to free block not in datazone
[  202.316623][ T9791] Trying to free block not in datazone
[  202.341125][ T9791] Trying to free block not in datazone
[  202.342958][ T9791] Trying to free block not in datazone
[  202.344676][ T9791] Trying to free block not in datazone
[  202.346623][ T9791] Trying to free block not in datazone
[  202.351206][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'.
[  202.354615][ T9791] Trying to free block not in datazone
[  202.356957][ T9791] Trying to free block not in datazone
[  202.369451][ T9791] Trying to free block not in datazone
[  202.371433][ T9791] Trying to free block not in datazone
[  202.373403][ T9791] Trying to free block not in datazone
[  202.375433][ T9791] Trying to free block not in datazone
[  202.377398][ T9791] Trying to free block not in datazone
[  202.389122][ T9791] Trying to free block not in datazone
[  202.391132][ T9791] Trying to free block not in datazone
[  202.393107][ T9791] Trying to free block not in datazone
[  202.395238][ T9791] Trying to free block not in datazone
[  202.405255][ T9791] Trying to free block not in datazone
[  202.410126][ T9791] Trying to free block not in datazone
[  202.412110][ T9791] Trying to free block not in datazone
[  202.414077][ T9791] Trying to free block not in datazone
[  202.416236][ T9791] Trying to free block not in datazone
[  202.423345][ T9791] Trying to free block not in datazone
[  202.425303][ T9791] Trying to free block not in datazone
[  202.427249][ T9791] Trying to free block not in datazone
[  202.436603][ T9791] Trying to free block not in datazone
[  202.438250][ T9791] Trying to free block not in datazone
[  202.444547][ T9791] Trying to free block not in datazone
[  202.446348][ T9791] Trying to free block not in datazone
[  202.448296][ T9791] Trying to free block not in datazone
[  202.454468][ T9791] Trying to free block not in datazone
[  202.457502][ T9791] Trying to free block not in datazone
[  202.463751][ T9791] Trying to free block not in datazone
[  202.465730][ T9791] Trying to free block not in datazone
[  202.467700][ T9791] Trying to free block not in datazone
[  202.471368][ T9791] Trying to free block not in datazone
[  202.473259][ T9791] Trying to free block not in datazone
[  202.475175][ T9791] Trying to free block not in datazone
[  202.477199][ T9791] Trying to free block not in datazone
[  202.480295][ T9791] Trying to free block not in datazone
[  202.482481][ T9791] Trying to free block not in datazone
[  202.485864][ T9791] Trying to free block not in datazone
[  202.487801][ T9791] Trying to free block not in datazone
[  202.490982][ T9791] Trying to free block not in datazone
[  202.493203][ T9791] Trying to free block not in datazone
[  202.495114][ T9791] Trying to free block not in datazone
[  202.497160][ T9791] Trying to free block not in datazone
[  202.506623][ T9791] Trying to free block not in datazone
[  202.512336][ T9791] Trying to free block not in datazone
[  202.514310][ T9791] Trying to free block not in datazone
[  202.516246][ T9791] Trying to free block not in datazone
[  202.518227][ T9791] Trying to free block not in datazone
[  202.534117][ T9791] Trying to free block not in datazone
[  202.546577][ T9791] Trying to free block not in datazone
[  202.548183][ T9791] Trying to free block not in datazone
[  202.558398][ T9791] Trying to free block not in datazone
[  202.559990][ T9791] Trying to free block not in datazone
[  202.561584][ T9791] Trying to free block not in datazone
[  202.563234][ T9791] Trying to free block not in datazone
[  202.564940][ T9791] Trying to free block not in datazone
[  202.566941][ T9791] Trying to free block not in datazone
[  202.575558][ T9791] Trying to free block not in datazone
[  202.577203][ T9791] Trying to free block not in datazone
[  202.698483][ T9791] Trying to free block not in datazone
[  202.700081][ T9791] Trying to free block not in datazone
[  202.701662][ T9791] Trying to free block not in datazone
[  202.705569][ T9828] loop1: detected capacity change from 0 to 32768
[  202.706243][ T9791] Trying to free block not in datazone
[  202.711379][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  202.716305][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  202.716372][ T9791] Trying to free block not in datazone
[  202.735833][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  202.737752][ T9791] Trying to free block not in datazone
[  202.741502][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  202.749847][ T9828] JBD2: Ignoring recovery information on journal
[  202.757215][ T9791] Trying to free block not in datazone
[  202.762192][ T9791] Trying to free block not in datazone
[  202.763769][ T9791] Trying to free block not in datazone
[  202.765766][ T9791] Trying to free block not in datazone
[  202.767629][ T9791] Trying to free block not in datazone
[  202.776242][ T9791] Trying to free block not in datazone
[  202.778060][ T9791] Trying to free block not in datazone
[  202.780290][ T9791] Trying to free block not in datazone
[  202.782052][ T9791] Trying to free block not in datazone
[  202.782425][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  202.783642][ T9791] Trying to free block not in datazone
[  202.783649][ T9791] Trying to free block not in datazone
[  202.783653][ T9791] Trying to free block not in datazone
[  202.783658][ T9791] Trying to free block not in datazone
[  202.783661][ T9791] Trying to free block not in datazone
[  202.783664][ T9791] Trying to free block not in datazone
[  202.783667][ T9791] Trying to free block not in datazone
[  202.783670][ T9791] Trying to free block not in datazone
[  202.783674][ T9791] Trying to free block not in datazone
[  202.789304][ T9828] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  202.810328][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  202.815871][ T9791] Trying to free block not in datazone
[  202.817717][ T9791] Trying to free block not in datazone
[  202.821129][ T9791] Trying to free block not in datazone
[  202.822840][ T9791] Trying to free block not in datazone
[  202.823364][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  202.824510][ T9791] Trying to free block not in datazone
[  202.824517][ T9791] Trying to free block not in datazone
[  202.824520][ T9791] Trying to free block not in datazone
[  202.847621][ T9791] Trying to free block not in datazone
[  202.851642][ T9791] Trying to free block not in datazone
[  202.853260][ T9791] Trying to free block not in datazone
[  202.855098][ T9791] Trying to free block not in datazone
[  202.856904][ T9791] Trying to free block not in datazone
[  202.860109][ T9791] Trying to free block not in datazone
[  202.861566][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  202.861819][ T9791] Trying to free block not in datazone
[  202.861826][ T9791] Trying to free block not in datazone
[  202.861829][ T9791] Trying to free block not in datazone
[  202.861833][ T9791] Trying to free block not in datazone
[  202.861836][ T9791] Trying to free block not in datazone
[  202.875603][ T9791] Trying to free block not in datazone
[  202.877414][ T9791] Trying to free block not in datazone
[  202.877630][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  202.879658][ T9791] Trying to free block not in datazone
[  202.884209][ T9828] (syz.1.1582,9828,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  202.885944][ T9791] Trying to free block not in datazone
[  202.890398][ T9828] (syz.1.1582,9828,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  202.890486][ T9828] (syz.1.1582,9828,0):ocfs2_quota_read:201 ERROR: status = -5
[  202.890651][ T9828] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  202.902547][ T9828] (syz.1.1582,9828,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  202.907281][ T9828] (syz.1.1582,9828,0):ocfs2_mknod:318 ERROR: status = -5
[  202.910001][ T9828] (syz.1.1582,9828,0):ocfs2_mknod:506 ERROR: status = -5
[  202.989276][ T9838] loop3: detected capacity change from 0 to 16
[  203.002864][ T9838] erofs (device loop3): mounted with root inode @ nid 36.
[  203.024270][ T5873] ocfs2: Unmounting device (7,1) on (node local)
[  203.057887][ T9838] syz.3.1586: attempt to access beyond end of device
[  203.057887][ T9838] loop3: rw=524288, sector=56, nr_sectors = 968 limit=16
[  203.090794][ T9838] syz.3.1586: attempt to access beyond end of device
[  203.090794][ T9838] loop3: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  203.096091][ T9838] syz.3.1586: attempt to access beyond end of device
[  203.096091][ T9838] loop3: rw=524288, sector=0, nr_sectors = 568 limit=16
[  203.288759][ T9848] loop1: detected capacity change from 0 to 128
[  203.323909][ T9848] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  203.334261][ T9848] ext4 filesystem being mounted at /469/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  203.405348][ T5873] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  203.538570][ T5875] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  203.586769][ T9868] loop1: detected capacity change from 0 to 128
[  203.618927][ T9866] loop3: detected capacity change from 0 to 4096
[  203.621690][ T9868] syz.1.1600: attempt to access beyond end of device
[  203.621690][ T9868] loop1: rw=1, sector=138, nr_sectors = 4 limit=128
[  203.653686][ T9866] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  203.659200][ T9869] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.665915][ T9866] Remounting filesystem read-only
[  204.212974][ T9887] ip6tnl1: entered allmulticast mode
[  204.358537][   T33] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  204.518566][   T33] usb 4-1: Using ep0 maxpacket: 16
[  204.526111][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.530780][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.535028][   T33] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  204.538876][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.553122][   T33] usb 4-1: config 0 descriptor??
[  204.579768][   T33] xbox_remote_probe: endpoint_in message size==0?
[  205.006344][   T33] usbhid 4-1:0.0: can't add hid device: -71
[  205.017178][   T33] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  205.046142][   T33] usb 4-1: USB disconnect, device number 5
[  206.566431][ T9931] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  206.610835][   T34] audit: type=1326 audit(1770152120.537:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.645798][   T34] audit: type=1326 audit(1770152120.537:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.658502][   T34] audit: type=1326 audit(1770152120.537:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.668761][   T34] audit: type=1326 audit(1770152120.537:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.676866][   T34] audit: type=1326 audit(1770152120.537:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.695984][   T34] audit: type=1326 audit(1770152120.537:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.707414][   T34] audit: type=1326 audit(1770152120.537:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.717293][   T34] audit: type=1326 audit(1770152120.537:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.726049][   T34] audit: type=1326 audit(1770152120.537:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.0.1623" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7d3299acb9 code=0x7ffc0000
[  206.756794][ T9933] loop1: detected capacity change from 0 to 4096
[  206.800073][ T9936] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.804531][ T9933] NILFS (loop1): corrupt root inode
[  206.937610][ T9940] Invalid ELF header magic: != ELF
[  207.339509][ T9955] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.1638'.
[  207.343369][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'.
[  207.645109][ T9977] loop3: detected capacity change from 0 to 256
[  207.651598][ T9977] exfat: Bad value for 'uid'
[  207.653430][ T9977] exfat: Bad value for 'uid'
[  207.841447][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'.
[  207.845991][ T9991] netlink: 'syz.3.1656': attribute type 1 has an invalid length.
[  207.854406][ T9991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1656'.
[  208.174837][T10003] loop3: detected capacity change from 0 to 4096
[  208.456089][T10014] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1667'.
[  208.534423][T10019] loop3: detected capacity change from 0 to 128
[  208.546059][T10019] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  208.568975][T10020] binder: 10017:10020 ioctl c018620c 200000000000 returned -22
[  208.833087][T10038] loop3: detected capacity change from 0 to 128
[  208.863216][T10038] FAT-fs (loop3): FAT read failed (blocknr 65312)
[  208.996189][T10050] loop3: detected capacity change from 0 to 128
[  209.022157][T10050] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  209.042558][T10050] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  209.096256][ T8445] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  209.133188][T10057] loop1: detected capacity change from 0 to 512
[  209.192937][T10057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.197455][T10057] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.275868][   T34] kauditd_printk_skb: 23 callbacks suppressed
[  209.275883][   T34] audit: type=1326 audit(1770152123.217:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.315093][   T34] audit: type=1326 audit(1770152123.227:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.348155][   T34] audit: type=1326 audit(1770152123.227:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.356839][   T34] audit: type=1326 audit(1770152123.227:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.371596][   T34] audit: type=1326 audit(1770152123.227:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.380074][   T34] audit: type=1326 audit(1770152123.237:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.386874][   T34] audit: type=1326 audit(1770152123.237:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.404348][   T34] audit: type=1326 audit(1770152123.237:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.412480][   T34] audit: type=1326 audit(1770152123.237:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.422067][   T34] audit: type=1326 audit(1770152123.237:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  209.689942][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.757238][T10074] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1692'.
[  209.762080][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'.
[  209.824630][T10076] loop1: detected capacity change from 0 to 512
[  209.853460][T10076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.900568][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.176770][T10098] loop3: detected capacity change from 0 to 128
[  210.229690][T10098] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  210.258771][T10098] hpfs: filesystem error: improperly stopped
[  210.260987][T10098] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  210.263647][T10098] hpfs: You really don't want any checks? You are crazy...
[  210.278792][T10102] loop1: detected capacity change from 0 to 512
[  210.297961][T10098] hpfs: Code page index out of array
[  210.313234][T10098] hpfs: code page support is disabled
[  210.316478][T10098] hpfs: hpfs_map_4sectors(): unaligned read
[  210.335143][T10102] EXT4-fs error (device loop1): ext4_iget_extra_inode:5072: inode #15: comm syz.1.1702: corrupted in-inode xattr: e_value size too large
[  210.349475][T10098] hpfs: hpfs_map_4sectors(): unaligned read
[  210.351651][T10098] hpfs: filesystem error: unable to find root dir
[  210.369262][T10102] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1702: couldn't read orphan inode 15 (err -117)
[  210.388618][T10102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.394793][T10098] hpfs: hpfs_map_4sectors(): unaligned read
[  210.406557][T10098] hpfs: hpfs_map_4sectors(): unaligned read
[  210.413743][T10102] EXT4-fs (loop1): shut down requested (2)
[  210.759051][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.193349][T10125] xt_CT: You must specify a L4 protocol and not use inversions on it
[  211.300045][ T5901] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  212.468537][ T5901] usb 4-1: Using ep0 maxpacket: 32
[  212.477334][ T5901] usb 4-1: config 0 has an invalid interface number: 63 but max is 0
[  212.488478][ T5901] usb 4-1: config 0 has no interface number 0
[  212.491542][ T5901] usb 4-1: config 0 interface 63 has no altsetting 0
[  212.504306][ T5901] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=3b.9a
[  212.507778][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.517484][T10147] loop1: detected capacity change from 0 to 32768
[  212.521761][ T5901] usb 4-1: config 0 descriptor??
[  212.529135][T10147] (syz.1.1723,10147,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  212.538768][T10147] (syz.1.1723,10147,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  212.571090][T10147] JBD2: Ignoring recovery information on journal
[  212.620474][T10147] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  212.736148][ T5873] ocfs2: Unmounting device (7,1) on (node local)
[  212.738266][ T5901] usb 4-1: string descriptor 0 read error: -71
[  212.749080][ T5901] gspca_main: t613-2.14.0 probing 17a1:0128
[  212.759047][ T5901] gspca_t613: unknown sensor 0000
[  212.761097][ T5901] t613 4-1:0.63: probe with driver t613 failed with error -22
[  212.769137][ T5901] usb 4-1: USB disconnect, device number 6
[  212.877502][T10156] loop1: detected capacity change from 0 to 764
[  213.586667][T10169] loop3: detected capacity change from 0 to 4096
[  213.596385][T10169] EXT4-fs (loop3): Test dummy encryption mode enabled
[  213.628227][T10163] loop1: detected capacity change from 0 to 32768
[  213.635012][T10169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.649524][T10163] JBD2: Ignoring recovery information on journal
[  213.701451][T10163] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  213.724562][T10169] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  213.761191][ T8445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.767890][ T5873] ocfs2: Unmounting device (7,1) on (node local)
[  214.677438][T10196] loop3: detected capacity change from 0 to 512
[  214.720429][T10196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.884985][T10203] futex_wake_op: syz.0.1743 tries to shift op by -1; fix this program
[  214.906218][ T8445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.923618][T10201] loop1: detected capacity change from 0 to 32768
[  214.929827][T10201] (syz.1.1742,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  214.934579][T10201] (syz.1.1742,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  214.967553][T10201] (syz.1.1742,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  214.972804][T10201] (syz.1.1742,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  214.978840][T10201] JBD2: Ignoring recovery information on journal
[  215.005032][T10201] (syz.1.1742,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  215.012055][T10201] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  215.018718][T10201] (syz.1.1742,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  215.025246][T10201] (syz.1.1742,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  215.070604][ T5873] ocfs2: Unmounting device (7,1) on (node local)
[  215.262684][T10222] loop1: detected capacity change from 0 to 128
[  215.282115][T10222] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  215.289778][T10222] ext4 filesystem being mounted at /528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  215.349905][ T5873] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  215.708669][ T5936] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  215.868631][ T5936] usb 2-1: Using ep0 maxpacket: 32
[  215.913023][ T5936] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  215.920700][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.926845][ T5936] usb 2-1: Product: syz
[  215.931102][ T5936] usb 2-1: Manufacturer: syz
[  215.935955][ T5936] usb 2-1: SerialNumber: syz
[  215.944768][ T5936] usb 2-1: config 0 descriptor??
[  215.957431][ T5936] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  216.167016][ T5936] gspca_topro: reg_w err -71
[  216.231417][ T5936] gspca_topro: Sensor soi763a
[  216.253576][ T5936] usb 2-1: USB disconnect, device number 21
[  216.290754][T10240] netlink: 'syz.3.1757': attribute type 3 has an invalid length.
[  216.293636][T10240] netlink: 'syz.3.1757': attribute type 1 has an invalid length.
[  216.296404][T10240] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1757'.
[  216.899467][ T5901] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  217.091407][ T5901] usb 4-1: config 0 has an invalid interface number: 156 but max is 0
[  217.095484][ T5901] usb 4-1: config 0 has no interface number 0
[  217.098274][ T5901] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  217.104251][ T5901] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  217.110348][ T5901] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  217.116648][ T5901] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  217.122222][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.130529][ T5901] usb 4-1: config 0 descriptor??
[  217.146977][ T5901] gspca_main: spca561-2.14.0 probing abcd:cdee
[  217.347512][ T5901] spca561 4-1:0.156: probe with driver spca561 failed with error -22
[  217.354441][ T5901] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  217.357197][ T5901] usb 4-1: MIDIStreaming interface descriptor not found
[  217.454480][ T5901] usb 4-1: USB disconnect, device number 7
[  217.551200][T10266] loop1: detected capacity change from 0 to 40427
[  217.567107][T10266] F2FS-fs (loop1): Invalid Fs Meta Ino: node(3) meta(0) root(3)
[  217.573455][T10266] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  217.578558][T10266] F2FS-fs (loop1): invalid crc value
[  217.714051][T10266] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  217.763509][T10266] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  217.765726][T10266] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  217.945988][T10278] loop1: detected capacity change from 0 to 256
[  217.965688][T10278] FAT-fs (loop1): Directory bread(block 64) failed
[  217.968087][T10278] FAT-fs (loop1): Directory bread(block 65) failed
[  217.970969][T10278] FAT-fs (loop1): Directory bread(block 66) failed
[  217.973025][T10278] FAT-fs (loop1): Directory bread(block 67) failed
[  217.974971][T10278] FAT-fs (loop1): Directory bread(block 68) failed
[  217.977494][T10278] FAT-fs (loop1): Directory bread(block 69) failed
[  217.987675][T10278] FAT-fs (loop1): Directory bread(block 70) failed
[  217.997773][T10278] FAT-fs (loop1): Directory bread(block 71) failed
[  218.001663][T10280] loop3: detected capacity change from 0 to 512
[  218.004122][T10278] FAT-fs (loop1): Directory bread(block 72) failed
[  218.006055][T10278] FAT-fs (loop1): Directory bread(block 73) failed
[  218.384023][T10309] netlink: 'syz.0.1787': attribute type 2 has an invalid length.
[  218.387014][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'.
[  218.833296][T10319] loop1: detected capacity change from 0 to 512
[  218.862614][T10319] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  218.929939][T10319] EXT4-fs (loop1): 1 orphan inode deleted
[  218.936063][T10319] EXT4-fs (loop1): 1 truncate cleaned up
[  218.960656][T10319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.050299][T10319] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  219.063510][T10319] EXT4-fs (loop1): Remounting filesystem read-only
[  219.065973][T10319] overlayfs: failed to verify upper root origin
[  219.277627][T10324] loop3: detected capacity change from 0 to 2048
[  219.311798][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.492379][T10335] mmap: syz.3.1796 (10335) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  220.135118][T10345] loop1: detected capacity change from 0 to 40427
[  220.144493][T10345] F2FS-fs (loop1): invalid crc value
[  220.265956][T10345] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.272187][T10345] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  220.292456][T10345] F2FS-fs (loop1): Corrupted max_depth of 3: 4294967295
[  220.845226][T10359] netlink: 'syz.1.1804': attribute type 7 has an invalid length.
[  221.507263][T10389] openvswitch: netlink: IP tunnel dst address not specified
[  221.575482][T10391] xt_hashlimit: max too large, truncated to 1048576
[  221.692669][T10375] loop1: detected capacity change from 0 to 40427
[  221.700292][T10375] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  221.702746][T10375] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  221.849709][T10375] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  221.859643][T10375] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  221.866492][T10375] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  221.962370][ T5873] syz-executor: attempt to access beyond end of device
[  221.962370][ T5873] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  221.982471][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  221.982488][ T5873] Tainted: [L]=SOFTLOCKUP
[  221.982491][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.982497][ T5873] Call Trace:
[  221.982500][ T5873]  <TASK>
[  221.982504][ T5873]  dump_stack_lvl+0xe8/0x150
[  221.982548][ T5873]  f2fs_handle_critical_error+0x37c/0x540
[  221.982567][ T5873]  f2fs_write_end_io+0x886/0xb60
[  221.982587][ T5873]  __submit_merged_bio+0x256/0x650
[  221.982600][ T5873]  __submit_merged_write_cond+0x269/0x530
[  221.982612][ T5873]  f2fs_write_data_pages+0x2806/0x3360
[  221.982637][ T5873]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  221.982654][ T5873]  ? css_rstat_updated+0x23a/0x530
[  221.982678][ T5873]  ? rcu_is_watching+0x15/0xb0
[  221.982689][ T5873]  ? __lock_acquire+0x6b5/0x2cf0
[  221.982704][ T5873]  ? __lock_acquire+0x6b5/0x2cf0
[  221.982715][ T5873]  ? do_raw_spin_lock+0x12b/0x2f0
[  221.982730][ T5873]  ? do_raw_spin_unlock+0x4d/0x210
[  221.982740][ T5873]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  221.982751][ T5873]  do_writepages+0x32e/0x550
[  221.982766][ T5873]  ? do_raw_spin_unlock+0x4d/0x210
[  221.982778][ T5873]  filemap_fdatawrite+0x1e9/0x2f0
[  221.982790][ T5873]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  221.982819][ T5873]  ? do_raw_spin_unlock+0x4d/0x210
[  221.982830][ T5873]  f2fs_sync_dirty_inodes+0x30e/0x810
[  221.982848][ T5873]  f2fs_write_checkpoint+0x9c6/0x2490
[  221.982855][ T5873]  ? is_bpf_text_address+0x292/0x2b0
[  221.982878][ T5873]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  221.982885][ T5873]  ? stack_trace_save+0xa9/0x100
[  221.982923][ T5873]  kill_f2fs_super+0x308/0x710
[  221.982933][ T5873]  ? __pfx_kill_f2fs_super+0x10/0x10
[  221.982950][ T5873]  deactivate_locked_super+0xbc/0x130
[  221.982959][ T5873]  cleanup_mnt+0x437/0x4d0
[  221.982966][ T5873]  ? _raw_spin_unlock_irq+0x23/0x50
[  221.982979][ T5873]  task_work_run+0x1d9/0x270
[  221.982991][ T5873]  ? __pfx_task_work_run+0x10/0x10
[  221.983006][ T5873]  exit_to_user_mode_loop+0xed/0x480
[  221.983014][ T5873]  ? rcu_is_watching+0x15/0xb0
[  221.983025][ T5873]  do_syscall_64+0x2b7/0xf80
[  221.983032][ T5873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.983040][ T5873]  ? trace_irq_disable+0x37/0x100
[  221.983052][ T5873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.983060][ T5873] RIP: 0033:0x7f7db1f9bf17
[  221.983068][ T5873] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  221.983076][ T5873] RSP: 002b:00007ffc4b031698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  221.983085][ T5873] RAX: 0000000000000000 RBX: 00007f7db200471f RCX: 00007f7db1f9bf17
[  221.983091][ T5873] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4b031750
[  221.983096][ T5873] RBP: 00007ffc4b031750 R08: 00007ffc4b032750 R09: 00000000ffffffff
[  221.983101][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4b0327e0
[  221.983106][ T5873] R13: 00007f7db200471f R14: 0000000000036279 R15: 00007ffc4b032820
[  221.983119][ T5873]  </TASK>
[  221.983123][ T5873] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  222.115604][T10399] loop3: detected capacity change from 0 to 32768
[  222.164690][T10399] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  222.218017][T10399] XFS (loop3): Ending clean mount
[  222.224412][T10399] XFS (loop3): Quotacheck needed: Please wait.
[  222.286906][T10399] XFS (loop3): Quotacheck: Done.
[  222.322882][ T8445] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  222.800402][T10478] could not allocate digest TFM handle cryptd(blake2b-160)
[  222.947502][T10501] overlayfs: failed to clone upperpath
[  223.368452][ T5936] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  223.422998][T10534] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.1851'.
[  223.524992][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short
[  223.532131][ T5936] usb 4-1: unable to read config index 0 descriptor/start: -71
[  223.534367][ T5936] usb 4-1: can't read configurations, error -71
[  224.091837][T10566] loop3: detected capacity change from 0 to 1024
[  224.101223][T10567] overlayfs: failed to clone upperpath
[  224.149415][T10566] hfsplus: request for non-existent node 262144 in B*Tree
[  224.151795][T10566] hfsplus: request for non-existent node 262144 in B*Tree
[  225.445000][T10589] loop3: detected capacity change from 0 to 256
[  225.478126][T10594] fuse: Bad value for 'fd'
[  225.757653][T10616] loop3: detected capacity change from 0 to 1764
[  225.803930][T10620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1891'.
[  226.200443][ T6991] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  226.250691][T10648] fuse: Unknown parameter 'user_id00000000000000000000'
[  226.350669][ T6991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  226.354432][ T6991] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  226.357312][ T6991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.361871][ T6991] usb 4-1: config 0 descriptor??
[  226.475803][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'.
[  226.775398][ T6991] ntrig 0003:1B96:0008.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0
[  226.974025][ T6991] usb 4-1: USB disconnect, device number 10
[  227.127066][T10673] No such timeout policy "syz0"
[  227.768505][ T6991] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  227.928763][ T6991] usb 4-1: Using ep0 maxpacket: 8
[  227.942396][ T6991] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  227.945976][ T6991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  227.952847][ T6991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  227.956512][ T6991] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.963228][ T6991] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  227.966581][ T6991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.177685][ T6991] usb 4-1: GET_CAPABILITIES returned 0
[  228.182366][ T6991] usbtmc 4-1:16.0: can't read capabilities
[  228.385178][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  228.390143][ T5937] usb 4-1: USB disconnect, device number 11
[  229.305049][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'.
[  229.335867][T10723] netlink: 'syz.3.1937': attribute type 21 has an invalid length.
[  229.338835][T10723] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1937'.
[  229.342456][T10723] netlink: 'syz.3.1937': attribute type 4 has an invalid length.
[  229.345192][T10723] netlink: 'syz.3.1937': attribute type 5 has an invalid length.
[  229.347927][T10723] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1937'.
[  229.551275][T10732] xt_TCPMSS: Only works on TCP SYN packets
[  230.107724][   T34] kauditd_printk_skb: 7 callbacks suppressed
[  230.107741][   T34] audit: type=1326 audit(1770152144.047:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.123858][   T34] audit: type=1326 audit(1770152144.067:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.148710][   T34] audit: type=1326 audit(1770152144.067:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.156487][   T34] audit: type=1326 audit(1770152144.067:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.164698][   T34] audit: type=1326 audit(1770152144.077:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.177570][   T34] audit: type=1326 audit(1770152144.077:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.186825][   T34] audit: type=1326 audit(1770152144.077:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.195181][   T34] audit: type=1326 audit(1770152144.077:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.202838][   T34] audit: type=1326 audit(1770152144.077:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.212399][   T34] audit: type=1326 audit(1770152144.077:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1959" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7db1f9acb9 code=0x7ffc0000
[  230.333032][ T5887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.395520][ T5887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.508073][ T5887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.580941][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.590281][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.603537][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.607520][ T5887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.614834][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.618255][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.812099][ T5887] bridge_slave_1: left allmulticast mode
[  230.814113][ T5887] bridge_slave_1: left promiscuous mode
[  230.816185][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.837261][ T5887] bridge_slave_0: left allmulticast mode
[  230.840045][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.297825][ T5887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.304723][ T5887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.312188][ T5887] bond0 (unregistering): Released all slaves
[  231.333265][T10791] chnl_net:caif_netlink_parms(): no params data found
[  231.629917][T10791] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.632660][T10791] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.635374][T10791] bridge_slave_0: entered allmulticast mode
[  231.638883][T10791] bridge_slave_0: entered promiscuous mode
[  231.642870][T10791] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.645124][T10791] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.647512][T10791] bridge_slave_1: entered allmulticast mode
[  231.650927][T10791] bridge_slave_1: entered promiscuous mode
[  231.670551][T10791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.677615][T10791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.840702][ T5887] hsr_slave_0: left promiscuous mode
[  231.843429][ T5887] hsr_slave_1: left promiscuous mode
[  231.853453][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.856292][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.860679][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.863283][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.893279][ T5887] veth1_macvtap: left promiscuous mode
[  231.895808][ T5887] veth0_macvtap: left promiscuous mode
[  231.897906][ T5887] veth1_vlan: left promiscuous mode
[  231.912198][ T5887] veth0_vlan: left promiscuous mode
[  232.132078][T10849] overlayfs: failed to clone upperpath
[  232.664523][ T5875] Bluetooth: hci2: command tx timeout
[  232.669019][ T5887] team0 (unregistering): Port device team_slave_1 removed
[  232.704040][ T5887] team0 (unregistering): Port device team_slave_0 removed
[  233.116037][T10791] team0: Port device team_slave_0 added
[  233.125918][T10791] team0: Port device team_slave_1 added
[  233.194352][T10791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.196540][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.204699][T10791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.227094][T10791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.240574][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.248118][T10791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.364904][T10791] hsr_slave_0: entered promiscuous mode
[  233.367359][T10791] hsr_slave_1: entered promiscuous mode
[  233.370087][T10791] debugfs: 'hsr0' already exists in 'hsr'
[  233.371846][T10791] Cannot create hsr debugfs directory
[  233.591651][T10791] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  233.601780][T10791] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  233.629694][T10791] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  233.641160][T10791] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  233.717683][T10902] netlink: 'syz.0.2004': attribute type 32 has an invalid length.
[  233.729765][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'.
[  233.791208][T10902] bond0: option coupled_control: invalid value (255)
[  233.795776][T10902] bond0 (unregistering): Released all slaves
[  233.836571][T10791] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.892759][T10791] 8021q: adding VLAN 0 to HW filter on device team0
[  233.916237][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.919171][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.935155][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.937963][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.157258][T10921] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2008'.
[  234.242008][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.440382][T10791] veth0_vlan: entered promiscuous mode
[  234.448479][T10791] veth1_vlan: entered promiscuous mode
[  234.469525][T10791] veth0_macvtap: entered promiscuous mode
[  234.473864][T10791] veth1_macvtap: entered promiscuous mode
[  234.483671][T10791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.490062][T10791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.496029][ T5887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.502237][ T5887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.506116][ T5887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.510747][ T5887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.577889][ T3626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.580276][ T3626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.625347][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.631472][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.739324][ T5875] Bluetooth: hci2: command tx timeout
[  235.067579][T10974] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2026'.
[  236.347167][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'.
[  236.405561][T11008] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  236.476484][T11013] overlayfs: failed to clone lowerpath
[  236.542488][T11015] autofs: Bad value for 'uid'
[  236.543949][T11015] autofs: Bad value for 'uid'
[  236.769941][T11038] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  236.769941][T11038] The task syz.1.2048 (11038) triggered the difference, watch for misbehavior.
[  236.819144][ T5875] Bluetooth: hci2: command tx timeout
[  237.952928][T11098] xt_bpf: check failed: parse error
[  238.032803][ T5935] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  238.115235][T11111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2082'.
[  238.200244][ T5935] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.204313][ T5935] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  238.210122][ T5935] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  238.213598][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.217742][ T5935] usb 5-1: Product: syz
[  238.220554][ T5935] usb 5-1: Manufacturer: syz
[  238.222377][ T5935] usb 5-1: SerialNumber: syz
[  238.434018][ T5935] usb 5-1: 0:2 : does not exist
[  238.443740][ T5935] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  238.452312][ T5935] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  238.460702][ T5935] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  238.473678][ T5935] usb 5-1: USB disconnect, device number 2
[  238.497402][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  238.582962][T11114] fuse: Bad value for 'fd'
[  238.899782][ T5875] Bluetooth: hci2: command tx timeout
[  239.006019][T11135] loop4: detected capacity change from 0 to 2048
[  239.029389][T11135] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  239.048991][T11137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2094'.
[  240.293166][T11167] loop4: detected capacity change from 0 to 32768
[  240.298922][T11167] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2106 (11167)
[  240.333649][T11167] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.337588][T11167] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  240.516972][T11167] BTRFS info (device loop4): enabling ssd optimizations
[  240.521606][T11167] BTRFS info (device loop4): turning on async discard
[  240.524061][T11167] BTRFS info (device loop4): enabling free space tree
[  240.526884][   T27] BTRFS warning (device loop4): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0xd2f77ba7 level 0
[  240.534641][T11167] BTRFS: error (device loop4) in btrfs_fill_super:992: errno=-5 IO failure
[  241.011228][T11192] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  241.258500][  T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  241.408574][  T786] usb 5-1: Using ep0 maxpacket: 16
[  241.415035][  T786] usb 5-1: config 0 has an invalid interface number: 74 but max is 0
[  241.417714][  T786] usb 5-1: config 0 has no interface number 0
[  241.426468][  T786] usb 5-1: config 0 interface 74 has no altsetting 0
[  241.435926][  T786] usb 5-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36
[  241.448530][  T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.451258][  T786] usb 5-1: Product: syz
[  241.452681][  T786] usb 5-1: Manufacturer: syz
[  241.454287][  T786] usb 5-1: SerialNumber: syz
[  241.471721][  T786] usb 5-1: config 0 descriptor??
[  241.613823][T11212] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2117'.
[  241.689199][  T786] belkin_sa 5-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  241.700336][  T786] usb 5-1: bcdDevice: 6636, bfc: 0
[  241.709837][  T786] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  241.723159][  T786] usb 5-1: USB disconnect, device number 3
[  241.736308][  T786] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  241.741154][  T786] belkin_sa 5-1:0.74: device disconnected
[  241.847719][T11222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.154376][T11237] Unknown status report in ack skb
[  242.264532][T11241] loop4: detected capacity change from 0 to 4096
[  242.295116][T11243] overlayfs: failed to clone upperpath
[  242.976981][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'.
[  242.990680][T11272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2145'.
[  243.482131][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'.
[  243.485406][T11298] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  243.508474][T11298] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  243.558939][T11304] delete_channel: no stack
[  244.279251][T10944] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  244.428453][T10944] usb 5-1: Using ep0 maxpacket: 16
[  244.433579][T10944] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[  244.436406][T10944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.439359][T10944] usb 5-1: Product: syz
[  244.441019][T10944] usb 5-1: Manufacturer: syz
[  244.442728][T10944] usb 5-1: SerialNumber: syz
[  244.448880][T10944] usb 5-1: config 0 descriptor??
[  244.660706][T10944] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (045e:0721)
[  244.664204][T10944] uvcvideo 5-1:0.0: No valid video chain found.
[  244.670926][T10944] usb 5-1: USB disconnect, device number 4
[  245.605706][T11377] overlayfs: failed to resolve './file0': -2
[  245.621661][ T5937] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  245.990810][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.994673][ T5937] usb 5-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00
[  245.998425][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.005107][ T5937] usb 5-1: config 0 descriptor??
[  246.421523][ T5937] wacom 0003:056A:00E6.0006: unknown main item tag 0x0
[  246.427813][ T5937] wacom 0003:056A:00E6.0006: unknown main item tag 0x0
[  246.436421][ T5937] wacom 0003:056A:00E6.0006: hidraw0: USB HID v0.00 Device [HID 056a:00e6] on usb-dummy_hcd.4-1/input0
[  246.490275][T11413] xt_hashlimit: size too large, truncated to 1048576
[  246.492753][T11413] xt_hashlimit: max too large, truncated to 1048576
[  246.634641][ T5937] usb 5-1: USB disconnect, device number 5
[  248.752304][T11477] bridge0: port 3(syz_tun) entered blocking state
[  248.755858][T11477] bridge0: port 3(syz_tun) entered disabled state
[  248.760987][T11477] syz_tun: entered allmulticast mode
[  248.765698][T11477] syz_tun: entered promiscuous mode
[  248.771545][T11477] bridge0: port 3(syz_tun) entered blocking state
[  248.774328][T11477] bridge0: port 3(syz_tun) entered forwarding state
[  249.731947][T11496] loop4: detected capacity change from 0 to 512
[  249.763238][T11496] EXT4-fs (loop4): orphan cleanup on readonly fs
[  249.769879][T11496] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2231: EA inode hash validation failed
[  249.774934][T11496] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  249.787228][T11496] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.2231: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  249.806324][T11496] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.2231: ea_inode dec ref err=-117
[  249.818593][T11496] EXT4-fs (loop4): 1 orphan inode deleted
[  249.821107][T11496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  249.855936][T10791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.736590][T11534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2247'.
[  250.805446][T11536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2247'.
[  250.818134][T11536] nbd: device at index 64 is going down
[  251.452720][T11566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2261'.
[  251.658477][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  251.810275][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  251.814974][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.831246][   T10] usb 5-1: config 0 descriptor??
[  251.835557][   T10] cp210x 5-1:0.0: cp210x converter detected
[  252.246986][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[  252.263928][   T10] usb 5-1: USB disconnect, device number 6
[  252.274419][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  252.277732][   T10] cp210x 5-1:0.0: device disconnected
[  252.406133][T11574] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  252.825593][T11589] loop4: detected capacity change from 0 to 512
[  252.847958][T11589] EXT4-fs: Ignoring removed oldalloc option
[  252.869322][T11589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.886808][T11589] syz.4.2272 (pid 11589) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  253.353013][T10791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.456917][T11595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2275'.
[  253.464181][T11596] loop4: detected capacity change from 0 to 1024
[  253.888502][ T5936] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  254.059887][ T5936] usb 5-1: Using ep0 maxpacket: 8
[  254.148066][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.159368][ T5936] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12
[  254.171814][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.233350][ T5936] usb 5-1: config 0 descriptor??
[  254.240197][ T5936] uvcvideo 5-1:0.0: Found UVC 0.00 device <unnamed> (05a9:2630)
[  254.243629][ T5936] uvcvideo 5-1:0.0: No valid video chain found.
[  254.454743][   T10] usb 5-1: USB disconnect, device number 7
[  255.294513][T11651] loop4: detected capacity change from 0 to 8192
[  255.341269][ T6187]  loop4: p4 < >
[  255.358773][T11651]  loop4: p4 < >
[  255.420670][ T6187] udevd[6187]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  255.470396][ T6187] udevd[6187]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  255.636378][T11661] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2304'.
[  256.346049][T11710] netlink: 'syz.4.2327': attribute type 14 has an invalid length.
[  256.352146][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2327'.
[  256.366932][T11710] netlink: 'syz.4.2327': attribute type 14 has an invalid length.
[  256.368482][ T5864] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  256.373037][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2327'.
[  256.385954][ T5864] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  256.389581][ T5864] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  256.392569][ T5864] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  256.518003][T11720] delete_channel: no stack
[  256.705133][T11740] sctp: [Deprecated]: syz.1.2341 (pid 11740) Use of struct sctp_assoc_value in delayed_ack socket option.
[  256.705133][T11740] Use struct sctp_sack_info instead
[  256.718593][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  257.520894][   T10] usb 5-1: Using ep0 maxpacket: 8
[  257.526910][   T10] usb 5-1: config 0 has no interfaces?
[  257.531565][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40
[  257.535047][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.538109][   T10] usb 5-1: Product: syz
[  257.540127][   T10] usb 5-1: Manufacturer: syz
[  257.542044][   T10] usb 5-1: SerialNumber: syz
[  257.546574][   T10] usb 5-1: config 0 descriptor??
[  257.755356][   T10] usb 5-1: USB disconnect, device number 8
[  257.797536][T11755] netlink: 'syz.1.2347': attribute type 10 has an invalid length.
[  257.806373][T11755] team0: Device vxcan1 is of different type
[  258.316310][T11785] loop4: detected capacity change from 0 to 512
[  258.366783][T11785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.374589][T11785] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.417916][T10791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.836787][T11804] loop4: detected capacity change from 0 to 2048
[  258.862667][T11804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.891812][T11804] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a
[  258.898159][T11804] UDF-fs: error (device loop4): udf_rename: failed to find renamed entry again in directory (ino 1408)
[  258.978972][T11814] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2372'.
[  259.160253][T11818] /dev/nullb0: Can't lookup blockdev
[  259.383377][T11820] loop4: detected capacity change from 0 to 2048
[  259.411262][T11820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.550295][T11827] sctp: [Deprecated]: syz.1.2376 (pid 11827) Use of int in max_burst socket option deprecated.
[  259.550295][T11827] Use struct sctp_assoc_value instead
[  259.868419][   T34] kauditd_printk_skb: 29 callbacks suppressed
[  259.868435][   T34] audit: type=1326 audit(1770152173.637:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.4.2374" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f790339acb9 code=0x0
[  259.892071][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'.
[  259.905466][ T5864] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.908769][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'.
[  259.913858][ T5864] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.917527][ T5864] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.920524][ T5864] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  260.282912][T10791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.437138][T11870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2392'.
[  260.752533][T11876] loop4: detected capacity change from 0 to 32768
[  260.776164][T11876] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.836700][T11876] XFS (loop4): Ending clean mount
[  260.842845][T11876] XFS (loop4): Quotacheck needed: Please wait.
[  260.877182][T11876] XFS (loop4): Quotacheck: Done.
[  260.959540][T10791] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.302579][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  261.305014][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  261.730887][T11907] loop4: detected capacity change from 0 to 131072
[  261.749383][T11907] F2FS-fs (loop4): invalid crc value
[  261.791492][T11907] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  261.802988][T11907] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  262.100474][T11931] overlayfs: failed to clone lowerpath
[  262.468486][ T5936] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  262.620726][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.624781][ T5936] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  262.631839][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.637921][ T5936] usb 5-1: config 0 descriptor??
[  262.800196][T11941] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  262.903839][ T5936] usbhid 5-1:0.0: can't add hid device: -71
[  262.906105][ T5936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  262.919041][ T5936] usb 5-1: USB disconnect, device number 9
[  263.350147][T11953] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2423'.
[  263.353640][T11953] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2423'.
[  263.389978][T11955] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  265.044923][T12018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2451'.
[  265.048284][T12018] netlink: 'syz.4.2451': attribute type 7 has an invalid length.
[  265.054975][T12018] netlink: 'syz.4.2451': attribute type 8 has an invalid length.
[  265.057877][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'.
[  265.067510][T12018] team0: entered promiscuous mode
[  265.071447][T12018] team_slave_0: entered promiscuous mode
[  265.073882][T12018] team_slave_1: entered promiscuous mode
[  265.078069][T12018] bond0: entered promiscuous mode
[  265.080928][T12018] bond_slave_0: entered promiscuous mode
[  265.083231][T12018] bond_slave_1: entered promiscuous mode
[  265.119664][T12018] gretap0: entered promiscuous mode
[  265.122749][T12018] 8021q: adding VLAN 0 to HW filter on device hsr1
[  265.891807][T12034] tmpfs: Bad value for 'mpol'
[  266.111553][T12050] fuse: Bad value for 'fd'
[  267.100098][T12077] xt_hashlimit: Unknown mode mask 8C, kernel too old?
[  268.020547][T12100] loop4: detected capacity change from 0 to 32768
[  268.042022][T12100] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2476 (12100)
[  268.042382][T12105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2488'.
[  268.079359][T12100] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.083398][T12100] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  268.086647][T12100] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  268.166215][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2489'.
[  268.224209][T12100] BTRFS info (device loop4): rebuilding free space tree
[  268.263548][T12100] BTRFS info (device loop4): disabling free space tree
[  268.266149][T12100] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  268.270197][T12100] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  268.283277][T12100] BTRFS info (device loop4): enabling ssd optimizations
[  268.285361][T12100] BTRFS info (device loop4): enabling disk space caching
[  268.287352][T12100] BTRFS info (device loop4): force clearing of disk cache
[  268.294347][T12100] BTRFS info (device loop4): force zstd compression, level 3
[  268.391391][T10791] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  269.827733][T12169] loop4: detected capacity change from 0 to 512
[  269.863664][T12169] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  269.866078][T12169] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  269.869990][T12169] EXT4-fs (loop4): orphan cleanup on readonly fs
[  269.872746][T12169] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  269.875945][T12169] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  269.880576][T12169] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  269.893820][T12169] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2509: bg 0: block 40: padding at end of block bitmap is not set
[  269.904557][T12169] EXT4-fs (loop4): Remounting filesystem read-only
[  269.908758][T12169] EXT4-fs (loop4): 1 truncate cleaned up
[  269.915514][T12169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  270.460113][T12169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.475046][T12182] ip6tnl1: entered allmulticast mode
[  271.097892][T12200] loop4: detected capacity change from 0 to 1764
[  271.299919][T12206] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  271.306867][T12210] cgroup: noprefix used incorrectly
[  271.315752][T12209] loop4: detected capacity change from 0 to 64
[  271.321705][T12206] pim6reg: entered allmulticast mode
[  271.334257][T12206] pim6reg: left allmulticast mode
[  271.336274][T12206] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  271.425197][T12214] loop4: detected capacity change from 0 to 512
[  271.455537][T12214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.470003][T12214] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  271.486157][T12219] 9p: Bad value for 'rfdno'
[  271.496313][T12214] EXT4-fs error (device loop4): ext4_do_update_inode:5616: inode #2: comm syz.4.2532: corrupted inode contents
[  271.518823][T12214] EXT4-fs error (device loop4): ext4_dirty_inode:6501: inode #2: comm syz.4.2532: mark_inode_dirty error
[  271.529493][T12214] EXT4-fs error (device loop4): ext4_do_update_inode:5616: inode #2: comm syz.4.2532: corrupted inode contents
[  271.535096][T12214] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2532: mark_inode_dirty error
[  271.546416][T12214] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #18: comm syz.4.2532: directory missing '.'
[  271.611861][T10791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.036706][T12253] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2546'.
[  273.308473][ T5875] Bluetooth: hci1: command 0x0406 tx timeout
[  273.704183][T12279] netlink: 'syz.0.2557': attribute type 1 has an invalid length.
[  273.764378][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'.
[  273.980743][T12285] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2561'.
[  274.528712][T10944] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  274.648585][T12305] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.712541][T10944] usb 5-1: Using ep0 maxpacket: 8
[  274.741582][T10944] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  274.744638][T10944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  274.748087][T10944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  274.752730][T10944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  274.756476][T10944] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  274.774246][T10944] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  274.782673][T10944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.995741][T12330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2579'.
[  274.998636][T12330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2579'.
[  275.032813][T10944] usb 5-1: usb_control_msg returned -32
[  275.034634][T10944] usbtmc 5-1:16.0: can't read capabilities
[  275.420256][T12291] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  276.077151][T12384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2602'.
[  276.427126][T12390] trusted_key: encrypted_key: keylen parameter is missing
[  276.728036][T12397] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2607'.
[  277.143991][T10944] usb 5-1: USB disconnect, device number 10
[  277.272459][T12432] syzkaller0: entered promiscuous mode
[  277.274452][T12432] syzkaller0: entered allmulticast mode
[  278.051420][T12460] xt_hashlimit: max too large, truncated to 1048576
[  279.115408][ T5935] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  279.270474][ T5935] usb 5-1: too many configurations: 151, using maximum allowed: 8
[  279.287776][ T5935] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  279.296015][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  279.309780][ T5935] usb 5-1: Product: syz
[  279.314030][ T5935] usb 5-1: Manufacturer: syz
[  279.348474][ T5935] usb 5-1: SerialNumber: syz
[  279.356193][ T5935] usb 5-1: config 0 descriptor??
[  279.572944][T12500] xt_hashlimit: size too large, truncated to 1048576
[  279.777611][ T5935] usb 5-1: USB disconnect, device number 11
[  280.099869][T12511] IPVS: wrr: FWM 4 0x00000004 - no destination available
[  280.362898][T12525] kAFS: unable to lookup cell '/,'
[  280.712921][T12545] netlink: 'syz.4.2674': attribute type 21 has an invalid length.
[  280.715914][T12545] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2674'.
[  280.721921][T12545] netlink: 'syz.4.2674': attribute type 5 has an invalid length.
[  280.724858][T12545] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2674'.
[  280.765804][T12547] netlink: 'syz.4.2675': attribute type 5 has an invalid length.
[  280.948172][T12559] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2681'.
[  281.479394][T12567] loop4: detected capacity change from 0 to 131072
[  281.485186][T12567] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  281.487529][T12567] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  281.490571][T12567] F2FS-fs (loop4): invalid crc value
[  281.526138][T12567] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  281.536128][T12567] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  281.538313][T12567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  282.193714][T12588] loop4: detected capacity change from 0 to 8
[  282.201078][T12588] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  282.207465][T12588] cramfs: wrong endianness
[  282.331098][T12593] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  282.384268][T12596] sp0: Synchronizing with TNC
[  282.512499][T12598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  282.515121][T12598] IPv6: NLM_F_CREATE should be set when creating new route
[  284.176492][T12639] loop4: detected capacity change from 0 to 32768
[  284.187268][T12639] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2713 (12639)
[  284.202137][T12639] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  284.205206][T12639] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  284.245091][T12639] BTRFS info (device loop4): enabling ssd optimizations
[  284.247491][T12639] BTRFS info (device loop4): turning on async discard
[  284.258472][T12639] BTRFS info (device loop4): enabling free space tree
[  284.355989][T10791] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  285.175158][T12686] loop4: detected capacity change from 0 to 32768
[  285.177984][T12686] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2727 (12686)
[  285.184923][T12686] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  285.187881][T12686] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  285.252299][T12686] BTRFS info (device loop4): enabling ssd optimizations
[  285.254373][T12686] BTRFS info (device loop4): turning on async discard
[  285.256366][T12686] BTRFS info (device loop4): enabling free space tree
[  285.325904][T12686] BTRFS info (device loop4): balance: start -susage=6,limit=257,limit=257..0
[  285.335144][T12686] BTRFS info (device loop4): balance: ended with status: 0
[  285.383794][T10791] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  285.854497][T12732] hsr0: entered promiscuous mode
[  286.039206][T12734] loop4: detected capacity change from 0 to 32768
[  286.057679][   T34] audit: type=1800 audit(1770152199.997:164): pid=12734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2742" name="file1" dev="loop4" ino=4 res=0 errno=0
[  286.144132][T12744] bond2: option primary_reselect: invalid value (252)
[  286.153249][T12744] bond2 (unregistering): Released all slaves
[  286.250614][T12734] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  286.250614][T12734] 
[  286.257329][T12734] ERROR: (device loop4): remounting filesystem as read-only
[  286.551026][T12756] loop4: detected capacity change from 0 to 2048
[  286.559930][T12756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  286.991074][T12759] loop4: detected capacity change from 0 to 256
[  287.195116][T12759] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  287.278834][T12766] syz_tun: entered allmulticast mode
[  287.285756][T12765] syz_tun: left allmulticast mode
[  287.628065][T12777] IPv6: addrconf: prefix option has invalid lifetime
[  287.630904][    C0] IPv6: addrconf: prefix option has invalid lifetime
[  287.633440][    C0] IPv6: addrconf: prefix option has invalid lifetime
[  287.665043][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'.
[  287.667556][T12782] netlink: 'syz.4.2764': attribute type 30 has an invalid length.
[  287.733538][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'.
[  287.736125][T12782] netlink: 'syz.4.2764': attribute type 30 has an invalid length.
[  287.746700][T12788] overlay: Bad value for 'workdir'
[  287.841691][T12794] loop4: detected capacity change from 0 to 1024
[  287.859763][T12794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  288.378490][ T6990] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  288.404878][T12817] overlayfs: failed to clone upperpath
[  288.533246][ T6990] usb 5-1: Using ep0 maxpacket: 8
[  288.539918][ T6990] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  288.546134][ T6990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.551253][ T6990] usb 5-1: Product: syz
[  288.552500][ T6990] usb 5-1: Manufacturer: syz
[  288.553857][ T6990] usb 5-1: SerialNumber: syz
[  288.563201][ T6990] usb 5-1: config 0 descriptor??
[  288.795221][T12822] netlink: 'syz.0.2781': attribute type 62 has an invalid length.
[  288.835071][T12824] overlayfs: failed to clone upperpath
[  288.864335][ T6990] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  289.871928][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'.
[  290.121471][T12859] netlink: 'syz.1.2798': attribute type 83 has an invalid length.
[  290.281214][ T6990] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  290.290125][ T6990] usb 5-1: USB disconnect, device number 12
[  290.833857][T12884] loop4: detected capacity change from 0 to 1024
[  290.842843][T12884] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  290.846848][T12884] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  290.853621][T12884] EXT4-fs (loop4): orphan cleanup on readonly fs
[  290.855766][T12884] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.2810: Freeing blocks not in datazone - block = 0, count = 4096
[  290.872162][T12884] EXT4-fs (loop4): 1 orphan inode deleted
[  290.876995][T12884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  290.912082][T10791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.036425][T12912] loop4: detected capacity change from 0 to 128
[  292.051274][T12912] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  292.073110][T12912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.081730][   T34] audit: type=1800 audit(1770152206.027:165): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2821" name="bus" dev="loop4" ino=125 res=0 errno=0
[  292.128548][T12914] binder: 12913:12914 ioctl c0306201 200000000480 returned -14
[  294.048398][T12960] overlayfs: missing 'lowerdir'
[  294.928564][  T786] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  295.291206][  T786] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024
[  295.295917][  T786] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0
[  295.302337][  T786] usb 5-1: config 16 interface 0 has no altsetting 0
[  295.306090][  T786] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  295.311685][  T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.316911][T12988] overlayfs: failed to clone upperpath
[  295.325832][T12971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  295.537904][  T786] usb 5-1: string descriptor 0 read error: -71
[  295.548258][  T786] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  295.552244][  T786] imon 5-1:16.0: unable to initialize intf0, err -19
[  295.554677][  T786] imon:imon_probe: failed to initialize context!
[  295.557074][  T786] imon 5-1:16.0: unable to register, err -19
[  295.564575][  T786] usb 5-1: USB disconnect, device number 13
[  296.019780][T13001] 9p: Bad value for 'rfdno'
[  296.491192][T13014] loop4: detected capacity change from 0 to 32768
[  297.253682][T13051] ptrace attach of "/syz-executor exec"[5873] was attempted by "/syz-executor exec"[13051]

VM DIAGNOSIS:
21:01:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff88823c63a900 RCX=ffffffff8b7ba352 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88823c63a900 RBP=ffffc90000007b30 RSP=ffffc90000007a40
R8 =ffff88823c63a903 R9 =1ffff110478c7520 R10=dffffc0000000000 R11=ffffed10478c7521
R12=1ffff92000000f50 R13=0000000000000001 R14=ffffc90000007aa0 R15=1ffff110478c7520
RIP=ffffffff8b7ba345 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818e324000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7d338c9d58 CR3=000000000e146000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81f0dad9 ffffffff81873fe9
XMM02=ffffffff81f0fcb9 ffffffff81f0dad9 XMM03=ffffffff81873fe9 ffffffff81873f76
XMM04=00007f7db2d4d020 00007f7db21e4460 XMM05=00007f7db21e4470 00007f7db21e44b0
XMM06=00007f7db21e4498 00007f7db21e4468 XMM07=00007f7db21e44a0 00007f7db21e4480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff1102e9df2fa RBX=0000000000000002 RCX=dffffc0000000000 RDX=0000000000000002
RSI=0000000000000002 RDI=ffff888174ef97d0 RBP=0000000080000000 RSP=ffffc90005aa79d8
R8 =ffff888174ef9653 R9 =1ffff1102e9df2ca R10=dffffc0000000000 R11=ffffed102e9df2cb
R12=dffffc0000000000 R13=1ffffffff1bafe99 R14=ffff888174ef97d0 R15=0000000000000002
RIP=ffffffff8497c11e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9924000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000c1038 CR3=00000001ae566000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 000000ffffffffff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
