last executing test programs:

1m43.717166204s ago: executing program 0 (id=23):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="0408fcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x0, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
write$binfmt_elf64(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff94020000000000004000"/46], 0x78)
close(r4)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c041}, 0x0)

1m42.617931739s ago: executing program 0 (id=28):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000400000000000001000e010020000000000000000000000300"], 0x0, 0x45, 0x0, 0x1}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x30, 0x0, 0x1}, 0x28)

1m42.354825493s ago: executing program 0 (id=29):
syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0)

1m42.234154017s ago: executing program 0 (id=30):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000600)={[{@force}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'macinuit'}}, {@gid}, {@type={'type', 0x3d, "1e4310ee"}}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=")
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)

1m41.987341014s ago: executing program 0 (id=31):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000900010073797a32000000001400020076657468315f746f5f627269646765000900030073957a300000000005000400020000000b08603da4822309fa3e0dd4d2a3ebc5cbecca40c8b77989ad8c36361d0954809b9c636f8c8124"], 0x48}}, 0xc810)

1m41.643732229s ago: executing program 0 (id=36):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000400)=0x9, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
pread64(r0, &(0x7f0000000200)=""/123, 0x9e, 0xc8)

1m41.447888313s ago: executing program 32 (id=36):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000400)=0x9, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
pread64(r0, &(0x7f0000000200)=""/123, 0x9e, 0xc8)

1m19.134512665s ago: executing program 2 (id=247):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$I2C(0x0, 0xb54, 0x1)
ioctl$I2C_RDWR(r1, 0x707, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48)

1m19.081937892s ago: executing program 2 (id=249):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m18.91584955s ago: executing program 2 (id=252):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0)

1m18.833772239s ago: executing program 2 (id=254):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000300)='./file2\x00', 0x0)

1m18.674966649s ago: executing program 2 (id=257):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x4)

1m16.417313827s ago: executing program 2 (id=279):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x7fff, 0x0, &(0x7f00000003c0))

1m16.20145475s ago: executing program 33 (id=279):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x7fff, 0x0, &(0x7f00000003c0))

1m2.332487686s ago: executing program 1 (id=410):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000017c0)={0x44, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004)

1m2.332177936s ago: executing program 1 (id=411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000700000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m2.23480368s ago: executing program 1 (id=412):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf01}, 0x94)

1m2.130462338s ago: executing program 1 (id=414):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)

1m1.973619104s ago: executing program 1 (id=418):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

1m1.398880765s ago: executing program 1 (id=422):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881)

1m1.163625277s ago: executing program 34 (id=422):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881)

38.360899131s ago: executing program 4 (id=650):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]})
get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3)

38.303777075s ago: executing program 4 (id=651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, 0x0, 0x0)

38.303618442s ago: executing program 4 (id=652):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

37.369073139s ago: executing program 4 (id=660):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0)

37.237821399s ago: executing program 4 (id=661):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

36.933049907s ago: executing program 4 (id=667):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000100)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000380)="3da5", 0x2}, {&(0x7f00000001c0)="ca", 0x1}, {&(0x7f00000011c0)="b4", 0x1}], 0x6, 0x3)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000c80)='_', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008440)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x113}}, 0x20)

36.730939332s ago: executing program 35 (id=667):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000100)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000380)="3da5", 0x2}, {&(0x7f00000001c0)="ca", 0x1}, {&(0x7f00000011c0)="b4", 0x1}], 0x6, 0x3)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000c80)='_', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008440)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x113}}, 0x20)

4.980895264s ago: executing program 3 (id=909):
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0xd6, 0xb6, 0xff, 0x8, 0x7b4, 0xf02, 0x5712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0xd, 0x80, 0x2, [{{0x9, 0x4, 0x23, 0x80, 0x1, 0x2, 0x6, 0x0, 0x6, [], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x1, 0x8, 0x8}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})

3.760970108s ago: executing program 3 (id=927):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="e6", 0x94, 0x1, 0x10cf, 0x4, 0x8b, 0x2, 0x20000007, 'syz1\x00'})

3.578317828s ago: executing program 3 (id=931):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
read(r1, 0x0, 0x0)

3.525231555s ago: executing program 3 (id=933):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
io_setup(0x4, &(0x7f0000010440)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfdfe, 0x100000000000000}])

3.279191726s ago: executing program 3 (id=938):
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000003c0)=0x2000000006, 0x5966, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000400)=0x1, 0x7, 0x3)

2.16099964s ago: executing program 3 (id=942):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1d, 0x68, 0x0, 0x40, 0x711, 0x230, 0x7691, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0xfe, 0xb0, 0x34}}]}}]}}, 0x0)

1.914376722s ago: executing program 36 (id=942):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1d, 0x68, 0x0, 0x40, 0x711, 0x230, 0x7691, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0xfe, 0xb0, 0x34}}]}}]}}, 0x0)

1.058173541s ago: executing program 6 (id=947):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x54, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

921.016503ms ago: executing program 6 (id=948):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

920.605666ms ago: executing program 6 (id=949):
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000005900)='./file0\x00', 0x400, &(0x7f00000001c0)={[{@grpquota}, {@nocow_enabled}, {@shared_inode_numbers}, {@fsck}, {@errors_continue}, {@direct_io}, {@acl}, {@journal_flush_disabled}], [{@obj_user}]}, 0x1, 0x58e9, &(0x7f0000010c00)="$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")

560.973835ms ago: executing program 5 (id=954):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
io_setup(0x7ed, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000440)={0x18, 0x7000030, 0x4, 0x7, 0x0, r0, 0x0}])

480.953931ms ago: executing program 6 (id=955):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000004c0)={[{@inlinecrypt}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@nogrpid}]}, 0x2, 0x44a, &(0x7f0000000bc0)="$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")
mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, 'user_.'}}, {@name={'name', 0x3d, 'user_.'}}]})

480.691472ms ago: executing program 5 (id=956):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000)

370.829519ms ago: executing program 5 (id=957):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r0, &(0x7f0000000180)=[{0x41, 0x0, 0x0, 0xfd, @time={0xbf, 0x8}, {}, {0xf}, @raw32={[0xfff, 0x1, 0x819e]}}], 0x1c)

370.608329ms ago: executing program 6 (id=958):
syz_mount_image$hfsplus(&(0x7f00000017c0), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f00000022c0)=ANY=[], 0x1, 0x6f1, &(0x7f00000003c0)="$eJzs3c9vHGcZB/DvrNeOt62C0yY0hyKsRBREROLESiFcMAihHCpUlUPPVuI0VjdJ5bgorRC4gOCExKF/QEHyjQNC4h4ULlzKrSckHyshcYkQinpZNLOz613vOrbzw3bg84nG886877zzzDPvzOyuY22A/1uXz6R5N0Uun3n9Trm8sT7f3lifP1JXt5OU5UbS7M5S3EyKe8lCWV8MTBmYj/ho+dKbn97f+Ky71Kynqv1Ef7vpXYU8Zh9r9ZTZur/ZsVtO7qr/bl9VeHkhyZV6Pmxqt30NNSyTdrqew4HrjFjby+bbXu/A4dd7OhXd5+aImeS5+slcvSao7w6N/Yvw6djTXQ4AAACeRZ3kk1sHHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8e+rv/y/qqVHPM5ui9/3/U711dfkQWth1y7tPNQ4AAAAAAAAA2B9ffpAHuZOjveVOUf3O/1S1cDyfd5Ln815uZykrOZs7WcxqVrOS80lmBjqaurO4urpyvr9lafyWF8ZueWG/jhgAAAAAAAAA/if9PK3N3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBhUDQyUc7q6Xjyn3KemTSaSb8ua8nfk0wddLx7UIxbeXf/4wAAAIDHMv0I23zhQR7kTo72ljtF+Z4/X6zeL0/nvdzMapazmnaWcrV+D12+629srM+3N9bnb5RTuTzc73f/tacwpuoeJqqlcXs+WbVo5VqWqzVnc6UK5moa3X2fTk724tmMazCsD8uYiu/UdhlZs05rubPfbvcpwhMx/FFE4yEtW5vBJf2MzNWxlVse62agqD6oSaozNGDHs/P1rwwuzVS9Tvb3dD6N/ic/x0dzPuiRcv5cPS+P51dPNed71c9EI1UmLvRGX3nNPDwTyVf//Ie3rrdvvnP92u0zh+eQdjCxzfqtY2J+IBMvP9OZaO6x/VyViRP95cv5QX6UM5nNG1nJcn6cxaxmKZ26frEez+XPmYdnamFo6Y2dIpmqz0v3nO0mptl8vyot5lS17dEsp8itXM1SXqv+Xcj5fDMXczGXBs7wiW3jro6tuuobW6/63pn+y9jgT3+tLpR3t19v3uUWHnbE243OJ6V77y/zemwgr91Rf7/f6tjAdTA3kKUXe9mZHNv53u6NWz5qL/fxix2eE/trps5EeQH1nhK96F7qZqJZPYtGx/nvOuV2ad/sdK4vvrtN/2tbll+t5+WwWv/STq17xp+KJ6s8VS9mur6TDI+Osu6l/l1moK6zOZa7dcNP3HK7E1VdUfSu1B/mVjUARq/Uqfo13GhPF6q6l8fWzVd1Jwfqhl5v5VbauTp8qK19SCcAu/K3t/rFmTw31fpn65PWx61ftq63Xp/+3pFvHXllKpN/nfx2c27i1cYrxZ/ycX66+f4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dLff/+CdxXZ7aWV8obF91VChla1rtuv5yPh+ivoLfXaxr5Uju2hz0IXpJENrqu85ero7zWgOW1vDGCl0fpbse35632k1vs1vykJzZESNKywMrfnjaIcf7jHCYuC6+MfzBzF+GqkKa0n2ZacTGT8AdrhxPMqXjgKHyrnVG++eu/3+B99YvrH49tLbSzcnL168NHfp4mvz564tt5fmuj8POkrgaRh+9QgAAAAAAAAAAAA8C8b9YcCpF3b6o5Fd/Y2H/1kIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBGXz6R5N0XOz52dK5c31ufb5dQrb7ZsJmk0kuInSXEvWUh3ysxAd0V+fy+dMfv5aPnSm5/e3/hss69mt33SqOfbe3htkrV6ymySiXr+GIb6u/LY/RX/7h1DmbDPO53OwuPFB0/GfwMAAP//TUnyDg==")

370.364468ms ago: executing program 5 (id=959):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140))

160.6353ms ago: executing program 6 (id=960):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$FITRIM(r0, 0x40406f06, &(0x7f0000000400)={0x0, 0x8000000000000001, 0x86ff})

160.304856ms ago: executing program 5 (id=961):
futex(&(0x7f000000cffc)=0x2, 0x5, 0x801, 0x0, &(0x7f00000002c0), 0x40000001)

0s ago: executing program 5 (id=962):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000))
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)

kernel console output (not intermixed with test programs):

set [1, 0] type 2 family 0 port 6081 - 0
[   87.473880][ T5874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.602649][ T5874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.643883][ T6686] loop1: detected capacity change from 0 to 8
[   87.754741][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.821430][ T5874] bridge_slave_1: left allmulticast mode
[   87.823715][ T5874] bridge_slave_1: left promiscuous mode
[   87.827466][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.858276][ T5874] bridge_slave_0: left allmulticast mode
[   87.867185][ T5874] bridge_slave_0: left promiscuous mode
[   87.869374][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.087453][ T6697] netlink: 'syz.1.281': attribute type 1 has an invalid length.
[   88.090081][ T6697] netlink: 224 bytes leftover after parsing attributes in process `syz.1.281'.
[   88.297176][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.303432][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.313743][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.324975][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.338336][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.392231][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.396903][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.406004][ T5874] bond0 (unregistering): Released all slaves
[   88.865682][ T6725] PKCS7: Unknown OID: [5] (bad)
[   88.881223][ T6725] PKCS7: Only support pkcs7_signedData type
[   88.939225][ T5874] hsr_slave_0: left promiscuous mode
[   88.953829][ T5874] hsr_slave_1: left promiscuous mode
[   88.957423][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.968479][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.973541][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.976547][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.044473][ T5874] veth1_macvtap: left promiscuous mode
[   89.047101][ T5874] veth0_macvtap: left promiscuous mode
[   89.049491][ T5874] veth1_vlan: left promiscuous mode
[   89.057605][ T5874] veth0_vlan: left promiscuous mode
[   89.067293][ T6728] loop3: detected capacity change from 0 to 32768
[   89.082580][ T6728] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.291 (6728)
[   89.112884][ T6728] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   89.116718][ T6728] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[   89.119561][ T6728] BTRFS info (device loop3): using free-space-tree
[   89.205614][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[   89.212206][   T33] audit: type=1800 audit(1755066646.177:6): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="file1" dev="loop3" ino=260 res=0 errno=0
[   89.323503][ T6753] netlink: 44 bytes leftover after parsing attributes in process `syz.1.295'.
[   89.327798][ T6728] syz.3.291 (6728) used greatest stack depth: 20136 bytes left
[   89.462887][ T6006] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   89.883546][   T52] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   89.960192][ T5874] team0 (unregistering): Port device team_slave_1 removed
[   89.999417][ T5874] team0 (unregistering): Port device team_slave_0 removed
[   90.044703][   T52] usb 2-1: Using ep0 maxpacket: 8
[   90.058831][   T52] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f
[   90.066941][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.070134][   T52] usb 2-1: Product: syz
[   90.070939][ T1823] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   90.078831][   T52] usb 2-1: Manufacturer: syz
[   90.081202][   T52] usb 2-1: SerialNumber: syz
[   90.092214][   T52] usb 2-1: config 0 descriptor??
[   90.099561][   T52]  (null): radio-mr800 - initialization failed
[   90.111318][   T52] radio-mr800 2-1:0.0: probe with driver radio-mr800 failed with error -22
[   90.114981][   T52] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   90.242948][ T1823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   90.247170][ T1823] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[   90.251754][ T1823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   90.255813][ T1823] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[   90.265684][ T1823] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[   90.269294][ T1823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.274817][ T1823] usb 4-1: Product: syz
[   90.276425][ T1823] usb 4-1: Manufacturer: syz
[   90.278242][ T1823] usb 4-1: SerialNumber: syz
[   90.284359][ T1823] usb 4-1: config 0 descriptor??
[   90.295867][ T1823] ums-isd200 4-1:0.0: USB Mass Storage device detected
[   90.317332][ T5896] usb 2-1: USB disconnect, device number 9
[   90.383084][   T55] Bluetooth: hci1: command tx timeout
[   90.498997][ T1823] scsi host6: usb-storage 4-1:0.0
[   90.522329][ T1823] usb 4-1: USB disconnect, device number 8
[   90.634897][ T6701] chnl_net:caif_netlink_parms(): no params data found
[   90.770397][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.778583][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.782438][ T6701] bridge_slave_0: entered allmulticast mode
[   90.787577][ T6701] bridge_slave_0: entered promiscuous mode
[   90.796194][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.799147][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.803204][ T6701] bridge_slave_1: entered allmulticast mode
[   90.810355][ T6701] bridge_slave_1: entered promiscuous mode
[   90.921454][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.926581][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.994873][ T6701] team0: Port device team_slave_0 added
[   90.998279][ T6701] team0: Port device team_slave_1 added
[   91.062675][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.065180][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.086028][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.102396][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.105242][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.137273][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.206797][ T6701] hsr_slave_0: entered promiscuous mode
[   91.209639][ T6701] hsr_slave_1: entered promiscuous mode
[   91.213014][ T6701] debugfs: 'hsr0' already exists in 'hsr'
[   91.215221][ T6701] Cannot create hsr debugfs directory
[   91.784811][ T6701] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.790452][ T6701] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.804928][ T6701] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.837553][ T6701] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.965706][ T6701] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.996948][ T6701] 8021q: adding VLAN 0 to HW filter on device team0
[   92.020213][ T6701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.023578][ T6701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.054898][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.057231][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.091896][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.094250][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.273932][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.467894][   T55] Bluetooth: hci1: command tx timeout
[   92.949685][ T6701] veth0_vlan: entered promiscuous mode
[   92.976181][ T6701] veth1_vlan: entered promiscuous mode
[   93.038712][ T6701] veth0_macvtap: entered promiscuous mode
[   93.053558][ T6701] veth1_macvtap: entered promiscuous mode
[   93.081742][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.105411][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.336698][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.377815][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.395902][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.399451][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.537375][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.547019][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.609032][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.635481][   T52] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   93.638628][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.800961][   T52] usb 4-1: Using ep0 maxpacket: 32
[   93.816780][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.822787][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.826697][   T52] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[   93.830282][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.862872][   T52] usb 4-1: config 0 descriptor??
[   93.941645][ T6883] loop4: detected capacity change from 0 to 4096
[   94.016489][ T6883] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[   94.090983][ T6701] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22.
[   94.274157][   T52] hid-alps 0003:044E:1215.0006: collection stack underflow
[   94.276889][   T52] hid-alps 0003:044E:1215.0006: item 0 2 0 12 parsing failed
[   94.279526][   T52] hid-alps 0003:044E:1215.0006: parse failed
[   94.291320][   T52] hid-alps 0003:044E:1215.0006: probe with driver hid-alps failed with error -22
[   94.350757][ T5895] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   94.478109][ T5912] usb 4-1: USB disconnect, device number 9
[   94.500948][ T5895] usb 2-1: Using ep0 maxpacket: 32
[   94.505212][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.512342][ T5895] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40
[   94.515797][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.518420][ T5895] usb 2-1: Product: syz
[   94.520073][ T5895] usb 2-1: Manufacturer: syz
[   94.524321][ T5895] usb 2-1: SerialNumber: syz
[   94.528300][ T5895] usb 2-1: config 0 descriptor??
[   94.532528][ T5895] gspca_main: pac7311-2.14.0 probing 093a:2603
[   94.541349][   T55] Bluetooth: hci1: command tx timeout
[   94.643633][ T6923] loop4: detected capacity change from 0 to 256
[   94.653211][ T6923] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf059ff26, utbl_chksum : 0xe619d30d)
[   94.865105][ T6931] loop4: detected capacity change from 0 to 2048
[   94.893930][ T6010]  loop4: p3 < > p4 < >
[   94.895584][ T6010] loop4: partition table partially beyond EOD, truncated
[   94.898704][ T6010] loop4: p3 start 4284289 is beyond EOD, truncated
[   94.912588][ T6931]  loop4: p3 < > p4 < >
[   94.914344][ T6931] loop4: partition table partially beyond EOD, truncated
[   94.917360][ T6931] loop4: p3 start 4284289 is beyond EOD, truncated
[   94.952783][ T5895] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[   94.955329][ T5895] pac7311 2-1:0.0: probe with driver pac7311 failed with error -71
[   94.962665][ T5895] usb 2-1: USB disconnect, device number 10
[   94.965858][ T5915] udevd[5915]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory
[   94.970166][ T5915] udevd[5915]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory
[   94.981539][ T6010] udevd[6010]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   95.006713][ T6010] udevd[6010]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   95.244056][ T5853] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   95.417182][ T5853] usb 5-1: config 0 has an invalid interface number: 84 but max is 0
[   95.420531][ T5853] usb 5-1: config 0 has no interface number 0
[   95.438304][ T5853] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[   95.442447][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.446084][ T5853] usb 5-1: Product: syz
[   95.447944][ T5853] usb 5-1: Manufacturer: syz
[   95.449828][ T5853] usb 5-1: SerialNumber: syz
[   95.458861][ T5853] usb 5-1: config 0 descriptor??
[   95.472771][ T5853] ljca 5-1:0.84: bulk endpoints not found
[   95.676859][ T6934] loop4: detected capacity change from 0 to 8
[   95.689925][ T6934] unable to read inode lookup table
[   95.712350][ T5911] usb 5-1: USB disconnect, device number 2
[   96.153455][ T6981] loop1: detected capacity change from 0 to 2048
[   96.204585][ T6981] Dev loop1: RDB in block 1 has bad checksum
[   96.293210][ T6976] loop3: detected capacity change from 0 to 32768
[   96.299907][ T6976] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.357 (6976)
[   96.350349][ T6976] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   96.363135][ T6976] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   96.366620][ T6976] BTRFS info (device loop3): using free-space-tree
[   96.372127][ T6985] loop1: detected capacity change from 0 to 256
[   96.380012][ T6985] exfat: Deprecated parameter 'utf8'
[   96.396544][ T6985] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   96.406331][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'.
[   96.528392][ T6976] BTRFS info (device loop3): rebuilding free space tree
[   96.632610][   T55] Bluetooth: hci1: command tx timeout
[   96.681239][ T6006] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   96.760987][ T5895] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   96.895394][ T7015] syz_tun: entered allmulticast mode
[   96.909030][ T7014] syz_tun: left allmulticast mode
[   96.930797][ T5895] usb 2-1: Using ep0 maxpacket: 8
[   96.940403][ T5895] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.946524][ T5895] usb 2-1: config 9 has an invalid interface number: 229 but max is 0
[   96.949780][ T5895] usb 2-1: config 9 has an invalid interface number: 255 but max is 0
[   96.954537][ T5895] usb 2-1: config 9 has 2 interfaces, different from the descriptor's value: 1
[   96.958617][ T5895] usb 2-1: config 9 has no interface number 0
[   96.963795][ T5895] usb 2-1: config 9 has no interface number 1
[   96.967202][ T5895] usb 2-1: config 9 interface 229 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   96.972918][ T5895] usb 2-1: config 9 interface 229 has no altsetting 0
[   96.985631][ T5895] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice=12.34
[   96.989120][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.993569][ T5895] usb 2-1: Product: syz
[   96.995180][ T5895] usb 2-1: Manufacturer: syz
[   96.996927][ T5895] usb 2-1: SerialNumber: syz
[   97.021472][ T5938] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   97.170779][ T5938] usb 4-1: Using ep0 maxpacket: 16
[   97.175436][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   97.185405][ T5938] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   97.189227][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.192591][ T5938] usb 4-1: Product: syz
[   97.194356][ T5938] usb 4-1: Manufacturer: syz
[   97.196386][ T5938] usb 4-1: SerialNumber: syz
[   97.205229][ T5938] usb 4-1: config 0 descriptor??
[   97.215794][ T5895] hub 2-1:9.229: Invalid hub with more than one config or interface
[   97.218961][ T5895] hub 2-1:9.229: probe with driver hub failed with error -22
[   97.219719][ T5938] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   97.231482][ T5938] em28xx 4-1:0.0: DVB interface 0 found: bulk
[   97.253257][ T5895] usb 2-1: USB disconnect, device number 11
[   97.307022][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.229/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.481317][ T5938] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[   97.548321][ T5938] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   97.552346][ T5938] em28xx 4-1:0.0: board has no eeprom
[   97.610970][ T5938] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   97.614662][ T5938] em28xx 4-1:0.0: dvb set to bulk mode.
[   97.617930][ T5911] em28xx 4-1:0.0: Binding DVB extension
[   97.629907][ T5938] usb 4-1: USB disconnect, device number 10
[   97.648453][ T7013] loop3: detected capacity change from 0 to 1024
[   97.648524][ T5938] em28xx 4-1:0.0: Disconnecting em28xx
[   97.656894][ T5911] em28xx 4-1:0.0: Registering input extension
[   97.660227][ T5938] em28xx 4-1:0.0: Closing input extension
[   97.676662][ T7013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.705322][ T5938] em28xx 4-1:0.0: Freeing device
[   98.036217][ T7025] loop1: detected capacity change from 0 to 40427
[   98.428702][ T7025] F2FS-fs (loop1): invalid crc value
[   98.468883][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.555669][ T7025] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   98.562624][ T7025] F2FS-fs (loop1): Start checkpoint disabled!
[   98.573125][ T7025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   98.614153][ T7025] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[   98.876300][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'.
[  100.378204][ T7087] loop3: detected capacity change from 0 to 4096
[  100.399459][ T7073] loop1: detected capacity change from 0 to 32768
[  100.429443][ T7073] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  100.429443][ T7073] 
[  100.474319][ T7087] ntfs3(loop3): ino=1a, mi_enum_attr
[  100.476909][ T7087] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  100.744228][ T7103] capability: warning: `syz.3.399' uses deprecated v2 capabilities in a way that may be insecure
[  100.853907][ T7109] loop4: detected capacity change from 0 to 4096
[  100.897042][ T7111] loop3: detected capacity change from 0 to 512
[  100.920946][ T7111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  100.922928][ T7112] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.938285][ T7109] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  100.938457][ T7111] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.403: Invalid block bitmap block 0 in block_group 0
[  100.945186][ T7109] Remounting filesystem read-only
[  100.960402][ T7111] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  100.971059][ T7111] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.403: attempt to clear invalid blocks 983261 len 1
[  100.986113][ T7111] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.403: Invalid inode table block 0 in block_group 0
[  101.014107][ T7111] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  101.025046][ T7111] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  101.031090][ T7111] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.403: Invalid inode table block 0 in block_group 0
[  101.043117][ T7111] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  101.053436][ T7111] EXT4-fs error (device loop3): ext4_truncate:4666: inode #11: comm syz.3.403: mark_inode_dirty error
[  101.059731][ T7111] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  101.064693][ T7111] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.403: Invalid inode table block 0 in block_group 0
[  101.069800][ T7111] EXT4-fs (loop3): 1 truncate cleaned up
[  101.073944][ T7111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.085758][ T7111] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.403: Invalid inode table block 0 in block_group 0
[  101.109582][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.209202][ T7101] loop1: detected capacity change from 0 to 32768
[  101.274412][ T7101] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.290738][ T5895] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  101.302627][ T7101] XFS (loop1): Ending clean mount
[  101.310268][ T7101] XFS (loop1): Quotacheck needed: Please wait.
[  101.349522][ T7101] XFS (loop1): Quotacheck: Done.
[  101.391731][ T5844] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.450888][ T5895] usb 5-1: Using ep0 maxpacket: 8
[  101.468505][ T5895] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  101.473942][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.479932][ T5895] usb 5-1: Product: syz
[  101.488260][ T5895] usb 5-1: Manufacturer: syz
[  101.490149][ T5895] usb 5-1: SerialNumber: syz
[  101.503806][ T5895] usb 5-1: config 0 descriptor??
[  101.602313][   T33] audit: type=1326 audit(1755066658.567:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.406" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38e3f8ebe9 code=0x0
[  101.708953][ T7131] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[  101.712364][ T7131] netlink: 232 bytes leftover after parsing attributes in process `syz.1.407'.
[  101.716143][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[  101.717582][ T5895] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  102.124116][ T5895] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  102.145064][ T5895] usb 5-1: USB disconnect, device number 3
[  102.146247][ T7145] loop1: detected capacity change from 0 to 1024
[  102.226677][ T7145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  102.231923][ T7145] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.267508][ T7154] loop3: detected capacity change from 0 to 512
[  102.274957][ T7154] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.277732][ T5844] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /142/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  102.280829][ T7154] EXT4-fs: inline encryption not supported
[  102.292344][ T5844] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /142/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  102.301697][ T7154] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.303603][ T5844] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  102.304150][ T7154] EXT4-fs (loop3): Test dummy encryption mode enabled
[  102.316329][ T7154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.316814][ T5844] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /142/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  102.322667][ T7154] EXT4-fs (loop3): 1 truncate cleaned up
[  102.328099][ T5844] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  102.329912][ T7154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.338607][ T5844] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /142/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  102.351209][ T5844] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  102.360345][ T5844] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /142/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  102.368972][ T5844] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  102.377711][ T5844] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /142/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  102.502324][ T7154] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  102.798011][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  102.858008][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.893204][ T5719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.034304][ T5719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.140051][ T5719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.150522][ T7181] syz_tun: entered allmulticast mode
[  103.160236][   T33] audit: type=1326 audit(1755066660.117:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.4.425" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3582d8ebe9 code=0x0
[  103.197285][ T5719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.270176][ T7185] syz_tun: left allmulticast mode
[  103.387051][ T5719] bridge_slave_1: left allmulticast mode
[  103.394477][ T5719] bridge_slave_1: left promiscuous mode
[  103.398690][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.408692][ T5719] bridge_slave_0: left allmulticast mode
[  103.419331][ T5719] bridge_slave_0: left promiscuous mode
[  103.424010][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.479872][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  103.485725][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  103.489638][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  103.498580][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  103.502975][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  103.602223][ T7197] loop3: detected capacity change from 0 to 2048
[  103.619803][ T7197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.633457][ T7197] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.720948][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.893223][ T5719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.897514][ T5719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.901869][ T5719] bond0 (unregistering): Released all slaves
[  104.066355][ T7207] loop4: detected capacity change from 0 to 512
[  104.090224][   T52] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  104.158849][ T7207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.177659][ T7207] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.202031][   T33] audit: type=1800 audit(1755066661.167:9): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.432" name="file2" dev="loop4" ino=16 res=0 errno=0
[  104.257596][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.289603][   T52] usb 4-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df
[  104.293416][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.302807][   T52] usb 4-1: config 0 descriptor??
[  104.322310][   T52] gspca_main: benq-2.14.0 probing 04a5:3035
[  104.381465][ T7217] netlink: 76 bytes leftover after parsing attributes in process `syz.4.434'.
[  104.426557][ T5719] hsr_slave_0: left promiscuous mode
[  104.440748][ T5719] hsr_slave_1: left promiscuous mode
[  104.449156][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.452293][ T5719] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.472439][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.475987][ T5719] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.508089][ T5719] veth1_macvtap: left promiscuous mode
[  104.517152][   T24] usb 4-1: USB disconnect, device number 11
[  104.524816][ T5719] veth0_macvtap: left promiscuous mode
[  104.530082][ T5719] veth1_vlan: left promiscuous mode
[  104.533587][ T5719] veth0_vlan: left promiscuous mode
[  105.011165][ T5719] team0 (unregistering): Port device team_slave_1 removed
[  105.055043][ T5719] team0 (unregistering): Port device team_slave_0 removed
[  105.565182][ T7191] chnl_net:caif_netlink_parms(): no params data found
[  105.591752][   T55] Bluetooth: hci0: command tx timeout
[  105.869989][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.881660][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.885629][ T7191] bridge_slave_0: entered allmulticast mode
[  105.889779][ T7191] bridge_slave_0: entered promiscuous mode
[  105.906950][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.910881][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.916694][ T7191] bridge_slave_1: entered allmulticast mode
[  105.919586][ T7191] bridge_slave_1: entered promiscuous mode
[  106.046904][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.076240][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.157121][ T7191] team0: Port device team_slave_0 added
[  106.171353][ T7191] team0: Port device team_slave_1 added
[  106.293701][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.295946][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.319383][ T7191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.331950][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.352049][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.370819][ T7191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.485747][ T7289] loop4: detected capacity change from 0 to 2048
[  106.519273][ T7191] hsr_slave_0: entered promiscuous mode
[  106.542375][ T7289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.563436][ T7191] hsr_slave_1: entered promiscuous mode
[  106.571528][ T7289] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  106.581922][ T7289] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  106.586746][ T7289] EXT4-fs (loop4): This should not happen!! Data will be lost
[  106.586746][ T7289] 
[  106.591012][ T7289] EXT4-fs (loop4): Total free blocks count 0
[  106.609143][ T7289] EXT4-fs (loop4): Free/Dirty block details
[  106.612996][ T7289] EXT4-fs (loop4): free_blocks=2415919504
[  106.615154][ T7289] EXT4-fs (loop4): dirty_blocks=16
[  106.616909][ T7289] EXT4-fs (loop4): Block reservation details
[  106.628053][ T7289] EXT4-fs (loop4): i_reserved_data_blocks=1
[  106.689202][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.795393][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'.
[  106.856430][ T7191] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  106.886396][ T7191] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  106.895620][ T7191] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  106.904995][ T7312] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.905559][ T7191] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  106.927103][ T7312] syz.3.462 (7312) used obsolete PPPIOCDETACH ioctl
[  107.039137][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.100114][ T7191] 8021q: adding VLAN 0 to HW filter on device team0
[  107.118675][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.121582][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.156844][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.159732][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.214832][ T7341] loop4: detected capacity change from 0 to 512
[  107.217338][ T7341] EXT4-fs: Ignoring removed oldalloc option
[  107.219219][ T7341] EXT4-fs: Ignoring removed mblk_io_submit option
[  107.254583][ T7341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  107.257261][ T7341] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  107.275825][ T7344] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  107.289671][ T7341] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=2
[  107.297500][ T7341] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  107.314169][ T7341] EXT4-fs (loop4): mount failed
[  107.473274][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.662113][   T55] Bluetooth: hci0: command tx timeout
[  108.091083][   T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  108.115819][ T7191] veth0_vlan: entered promiscuous mode
[  108.124392][ T7191] veth1_vlan: entered promiscuous mode
[  108.146993][ T7191] veth0_macvtap: entered promiscuous mode
[  108.156051][ T7191] veth1_macvtap: entered promiscuous mode
[  108.170350][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.183363][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.190115][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.196290][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.214113][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.217301][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.267388][   T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  108.277363][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  108.283312][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  108.286072][   T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  108.288960][   T24] usb 4-1: Product: syz
[  108.301079][   T24] usb 4-1: Manufacturer: syz
[  108.302955][   T24] usb 4-1: SerialNumber: syz
[  108.338184][   T24] usb 4-1: config 0 descriptor??
[  108.374798][   T24] usb 4-1: selecting invalid altsetting 0
[  108.390068][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.395120][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.449504][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.453956][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.596730][ T5911] usb 4-1: USB disconnect, device number 12
[  109.741032][   T55] Bluetooth: hci0: command tx timeout
[  110.401014][   T52] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  110.652727][   T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.656945][   T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.680866][   T52] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  110.684442][   T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.689632][   T52] usb 6-1: config 0 descriptor??
[  110.876048][ T7486] loop4: detected capacity change from 0 to 32768
[  110.918969][ T7486] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.974237][ T7486] XFS (loop4): Ending clean mount
[  111.106297][   T52] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0
[  111.236818][ T6701] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.269645][ T7535] loop3: detected capacity change from 0 to 64
[  111.287674][ T7535] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  111.603942][ T7547] loop3: detected capacity change from 0 to 2048
[  111.660142][ T7547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.677249][ T7547] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.721534][ T7547] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.520: bg 0: block 345: padding at end of block bitmap is not set
[  111.730013][ T7547] EXT4-fs (loop3): Remounting filesystem read-only
[  111.736076][ T7547] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.3.520: cleanup dec ref error -117
[  111.803770][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.821539][   T55] Bluetooth: hci0: command tx timeout
[  111.920408][   T52] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device
[  111.927677][   T52] pyra 0003:1E7D:2CF6.0007: couldn't install mouse
[  111.948241][   T52] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71
[  111.996456][   T52] usb 6-1: USB disconnect, device number 2
[  112.203242][ T5896] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  112.365066][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.368773][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.374767][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  112.378721][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  112.381789][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.389088][ T5896] usb 4-1: config 0 descriptor??
[  112.810819][ T5896] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd
[  112.836553][ T5896] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  113.078977][ T5896] usb 4-1: USB disconnect, device number 13
[  113.633091][ T7575] loop3: detected capacity change from 0 to 256
[  113.642732][ T7575] exfat: Bad value for 'uid'
[  113.646335][ T7575] exfat: Bad value for 'uid'
[  113.972290][ T7579] gfs2: path_lookup on GPL returned error -2
[  113.976168][ T7581] loop5: detected capacity change from 0 to 128
[  114.003061][ T7581] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  114.048907][ T7584] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  114.071531][ T7191] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.143112][ T7575] loop3: detected capacity change from 0 to 32768
[  114.161022][ T7575] JFS: Invalid value of umask
[  114.496481][ T7598] loop5: detected capacity change from 0 to 256
[  114.528679][ T7598] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  114.690785][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  114.746860][ T7604] syz.3.541 uses obsolete (PF_INET,SOCK_PACKET)
[  114.843431][ T5912] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  114.848646][ T5912] usb 5-1: config 0 has no interface number 0
[  114.855227][ T5912] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  114.859877][ T5912] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  114.865490][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.876942][ T5912] usb 5-1: config 0 descriptor??
[  114.897598][ T5912] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input9
[  115.093866][ T5912] usb 5-1: USB disconnect, device number 4
[  115.202159][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  115.228173][ T7612] : entered promiscuous mode
[  115.360919][ T5896] usb 4-1: Using ep0 maxpacket: 16
[  115.368214][ T5896] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  115.371544][ T5896] usb 4-1: config 0 has no interface number 0
[  115.373924][ T5896] usb 4-1: config 0 interface 237 has no altsetting 0
[  115.385977][ T5896] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad
[  115.389530][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.397612][ T5896] usb 4-1: Product: syz
[  115.411314][ T5896] usb 4-1: Manufacturer: syz
[  115.413238][ T5896] usb 4-1: SerialNumber: syz
[  115.421968][ T5896] usb 4-1: config 0 descriptor??
[  115.444971][ T5896] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found
[  115.478650][ T7622] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.550'.
[  115.482783][ T7622] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  115.631011][   T55] Bluetooth: hci1: unexpected cc 0x204b length: 9 > 3
[  115.637892][ T5896] snd_usb_podhd 4-1:0.237: cannot get proper max packet size
[  115.646665][ T5896] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected
[  115.654290][ T5896] snd_usb_podhd 4-1:0.237: probe with driver snd_usb_podhd failed with error -22
[  115.728006][ T7631] loop4: detected capacity change from 0 to 512
[  115.762332][ T7631] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.555: casefold flag without casefold feature
[  115.768505][ T7631] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.555: couldn't read orphan inode 15 (err -117)
[  115.776478][ T7631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.830412][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.850863][ T5896] usb 4-1: USB disconnect, device number 14
[  116.100928][ T5853] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  116.262834][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short
[  116.265935][ T5853] usb 5-1: not running at top speed; connect to a high speed hub
[  116.269348][ T5853] usb 5-1: config 1 has an invalid interface number: 17 but max is 0
[  116.272248][ T5853] usb 5-1: config 1 has no interface number 0
[  116.276024][ T5853] usb 5-1: New USB device found, idVendor=07ca, idProduct=a110, bcdDevice= 7.fd
[  116.278799][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.282537][ T5853] usb 5-1: Product: syz
[  116.283929][ T5853] usb 5-1: Manufacturer: syz
[  116.285368][ T5853] usb 5-1: SerialNumber: syz
[  116.514248][ T5853] usb 5-1: USB disconnect, device number 5
[  116.721027][ T5912] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  116.798066][ T7656] loop5: detected capacity change from 0 to 32768
[  116.813758][ T7656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.565 (7656)
[  116.829545][ T7656] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  116.837650][ T7656] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  116.843950][ T7656] BTRFS info (device loop5): using free-space-tree
[  116.870834][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  116.883437][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.889110][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.903764][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0
[  116.906513][ T5912] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[  116.910170][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.926765][ T5912] usb 4-1: config 0 descriptor??
[  116.957410][ T7191] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.631679][ T5853] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  117.642628][ T5896] usb 4-1: USB disconnect, device number 15
[  117.780835][ T5853] usb 5-1: Using ep0 maxpacket: 8
[  117.785347][ T5853] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  117.792815][ T5853] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  117.796599][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.799895][ T5853] usb 5-1: Product: syz
[  117.801815][ T5853] usb 5-1: Manufacturer: syz
[  117.803664][ T5853] usb 5-1: SerialNumber: syz
[  117.808324][ T5853] usb 5-1: config 0 descriptor??
[  117.815713][ T5853] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  117.820506][ T5853] usb 5-1: setting power ON
[  117.823217][ T5853] dvb-usb: bulk message failed: -22 (2/0)
[  117.830223][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  117.837237][ T5853] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  117.840950][ T5853] usb 5-1: media controller created
[  117.863353][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  117.880785][ T5853] usb 5-1: selecting invalid altsetting 6
[  117.883590][ T5853] usb 5-1: digital interface selection failed (-22)
[  117.888203][ T5853] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  117.902012][ T5853] usb 5-1: setting power OFF
[  117.903818][ T5853] dvb-usb: bulk message failed: -22 (2/0)
[  117.905688][ T5853] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  117.908557][ T5853] (NULL device *): no alternate interface
[  117.927425][ T5853] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  117.966495][ T7692] netlink: 9 bytes leftover after parsing attributes in process `syz.5.571'.
[  117.969994][ T7692] 0: renamed from hsr0 (while UP)
[  117.976246][ T7692] 0: entered allmulticast mode
[  117.978212][ T7692] hsr_slave_0: entered allmulticast mode
[  117.980439][ T7692] hsr_slave_1: entered allmulticast mode
[  117.983624][ T7692] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  118.028480][   T52] usb 5-1: USB disconnect, device number 6
[  118.043545][ T7694] loop5: detected capacity change from 0 to 256
[  118.047795][ T7694] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.053389][ T7694] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  118.063326][ T7694] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  118.083667][   T33] audit: type=1800 audit(1755066675.047:10): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.572" name="file1" dev="loop5" ino=1048615 res=0 errno=0
[  118.498887][ T7708] loop3: detected capacity change from 0 to 32768
[  118.520218][ T7704] loop5: detected capacity change from 0 to 32768
[  118.524702][ T7708] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  118.541303][ T7704] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  118.572292][ T7704] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  118.575734][ T7708] XFS (loop3): Ending clean mount
[  118.580077][ T5719] (kworker/u8:2,5719,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  118.618198][ T6006] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  118.755715][ T7191] ocfs2: Unmounting device (7,5) on (node local)
[  118.846127][ T7720] loop4: detected capacity change from 0 to 32768
[  118.885923][ T7720] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  118.912803][ T7720] XFS (loop4): Ending clean mount
[  118.919269][ T7720] XFS (loop4): Quotacheck needed: Please wait.
[  118.936797][ T7720] XFS (loop4): Quotacheck: Done.
[  119.006014][ T6701] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  119.236139][ T7734] loop3: detected capacity change from 0 to 32768
[  119.252279][ T7734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.583 (7734)
[  119.282328][ T7734] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.290880][ T7734] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  119.293620][ T7734] BTRFS info (device loop3): using free-space-tree
[  119.308183][ T7731] loop5: detected capacity change from 0 to 32768
[  119.367210][ T7731] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  119.417434][ T7731] XFS (loop5): Ending clean mount
[  119.425160][ T7731] XFS (loop5): Quotacheck needed: Please wait.
[  119.452227][ T6006] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.452844][ T7731] XFS (loop5): Quotacheck: Done.
[  119.520134][ T7740] loop4: detected capacity change from 0 to 32768
[  119.547108][ T7740] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  119.558681][ T7191] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  119.659384][ T6701] ocfs2: Unmounting device (7,4) on (node local)
[  120.393429][ T7776] loop4: detected capacity change from 0 to 131072
[  120.449608][ T7776] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.456860][ T7776] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  120.783546][ T7807] netlink: 36 bytes leftover after parsing attributes in process `syz.5.602'.
[  120.788516][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.602'.
[  121.161115][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  121.315776][   T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  121.323767][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.344964][   T24] usb 6-1: config 0 descriptor??
[  121.388773][   T24] gspca_main: sunplus-2.14.0 probing 055f:c420
[  121.817935][   T24] gspca_sunplus: reg_w_riv err -71
[  121.824461][   T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  121.863237][   T24] usb 6-1: USB disconnect, device number 3
[  122.799854][ T7837] loop5: detected capacity change from 0 to 512
[  122.852585][ T7837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.035319][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.301027][   T33] audit: type=1326 audit(1755066680.247:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a498ebe9 code=0x7ffc0000
[  123.307982][   T33] audit: type=1326 audit(1755066680.247:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a498ebe9 code=0x7ffc0000
[  123.334512][   T33] audit: type=1326 audit(1755066680.247:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.618" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f99a498ebe9 code=0x7ffc0000
[  123.360953][   T33] audit: type=1326 audit(1755066680.247:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a498ebe9 code=0x7ffc0000
[  123.372749][   T24] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  123.390080][   T33] audit: type=1326 audit(1755066680.247:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a498ebe9 code=0x7ffc0000
[  123.420862][   T33] audit: type=1326 audit(1755066680.247:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.618" exe="/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f99a498ebe9 code=0x7ffc0000
[  123.443238][   T33] audit: type=1326 audit(1755066680.247:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a498ebe9 code=0x7ffc0000
[  123.464260][   T33] audit: type=1326 audit(1755066680.247:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a498ebe9 code=0x7ffc0000
[  123.523096][ T7875] loop5: detected capacity change from 0 to 4096
[  123.533280][   T24] usb 4-1: config 0 has an invalid interface number: 11 but max is 0
[  123.536663][   T24] usb 4-1: config 0 has no interface number 0
[  123.539162][   T24] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  123.544291][   T24] usb 4-1: config 0 interface 11 has no altsetting 0
[  123.561383][   T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  123.570833][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.577740][ T7880] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.591850][   T24] usb 4-1: config 0 descriptor??
[  123.602470][ T7855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  123.605488][ T7855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  123.614295][   T24] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected
[  123.627989][   T33] audit: type=1800 audit(1755066680.587:19): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.620" name="file1" dev="loop5" ino=15 res=0 errno=0
[  123.648849][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81
[  123.656180][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82
[  123.659221][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1
[  123.669536][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2
[  123.677307][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85
[  123.683844][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5
[  123.709139][   T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  123.733249][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83
[  123.751013][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84
[  123.754177][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3
[  123.775826][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4
[  123.778863][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86
[  123.790373][   T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6
[  123.802435][   T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  123.820018][ T7866] loop4: detected capacity change from 0 to 32768
[  123.830486][   T24] usb 4-1: USB disconnect, device number 16
[  123.858179][   T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  123.903053][   T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  123.924244][   T24] keyspan 4-1:0.11: device disconnected
[  124.487450][ T7930] loop5: detected capacity change from 0 to 1024
[  124.518296][ T7930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.535569][ T7930] EXT4-fs error (device loop5): ext4_get_first_dir_block:3556: inode #11: comm syz.5.634: directory missing '..'
[  124.548324][ T7930] EXT4-fs (loop5): Remounting filesystem read-only
[  124.594030][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.664180][ T1823] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  124.726132][ T7940] loop4: detected capacity change from 0 to 4096
[  124.729467][ T7940] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  124.764084][ T7940] ntfs3(loop4): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  124.774604][ T7940] ntfs3(loop4): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  124.810808][ T1823] usb 4-1: Using ep0 maxpacket: 32
[  124.819549][ T1823] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[  124.822775][ T1823] usb 4-1: config 0 has no interface number 0
[  124.824739][ T1823] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  124.828572][ T1823] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  124.837162][ T1823] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  124.840598][ T1823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.843509][ T1823] usb 4-1: Product: syz
[  124.844843][ T1823] usb 4-1: Manufacturer: syz
[  124.846288][ T1823] usb 4-1: SerialNumber: syz
[  124.854236][ T1823] usb 4-1: config 0 descriptor??
[  124.856555][ T7925] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  124.864048][ T1823] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  124.866099][ T7942] autofs4:pid:7942:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373)
[  124.867022][ T1823] usb 4-1: invalid MIDI in EP 0
[  124.901082][ T5912] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  124.934621][ T1823] snd-usb-audio 4-1:0.16: probe with driver snd-usb-audio failed with error -22
[  124.976100][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.055482][ T7950] mkiss: ax0: crc mode is auto.
[  125.062083][ T5912] usb 6-1: Using ep0 maxpacket: 32
[  125.066500][ T5912] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  125.069739][ T1823] usb 4-1: USB disconnect, device number 17
[  125.069806][ T5912] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  125.085463][ T5912] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  125.089779][ T5912] usb 6-1: config 1 has no interface number 0
[  125.092956][ T5912] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  125.097351][ T5912] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  125.102825][ T5912] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  125.106285][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.116861][ T5912] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  125.162496][ T7952] loop4: detected capacity change from 0 to 1024
[  125.165290][ T7952] EXT4-fs: Ignoring removed nobh option
[  125.167658][ T7952] EXT4-fs: Ignoring removed bh option
[  125.196944][ T7952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.229769][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.319717][ T5912] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  125.430362][ T7956] loop4: detected capacity change from 0 to 32768
[  125.454708][ T7956] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.501732][ T7956] XFS (loop4): Ending clean mount
[  125.505928][ T7956] XFS (loop4): Quotacheck needed: Please wait.
[  125.539337][ T7938] loop5: detected capacity change from 0 to 1024
[  125.541655][ T7956] XFS (loop4): Quotacheck: Done.
[  125.550231][ T7938] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.563782][ T7938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.602033][ T6701] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.824385][   T24] usb 6-1: USB disconnect, device number 4
[  125.828157][   T24] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  125.873254][   T33] audit: type=1326 audit(1755066682.837:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.4.650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3582d8ebe9 code=0x7ffc0000
[  126.196040][ T7971] loop3: detected capacity change from 0 to 65536
[  126.217796][ T7971] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  126.238359][ T7971] XFS (loop3): Ending clean mount
[  126.247102][ T7971] XFS (loop3): Quotacheck needed: Please wait.
[  126.275407][ T7971] XFS (loop3): Quotacheck: Done.
[  126.368407][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.472625][ T6006] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  126.858883][ T7999] loop5: detected capacity change from 0 to 2048
[  126.889215][ T8002] loop3: detected capacity change from 0 to 512
[  126.906917][ T7999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.926476][ T7999] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.957736][ T8002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.019636][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.126979][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.249856][ T8015] loop5: detected capacity change from 0 to 512
[  127.269834][ T8015] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  127.286952][ T8015] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.666: corrupted in-inode xattr: e_value out of bounds
[  127.295818][ T8015] EXT4-fs (loop5): Remounting filesystem read-only
[  127.302455][ T8015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.335317][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.390031][ T5719] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.498452][ T5719] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.510966][ T5896] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  127.613354][ T5719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.661338][ T5896] usb 4-1: Using ep0 maxpacket: 32
[  127.670017][ T5896] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  127.680831][ T5896] usb 4-1: config 0 has no interface number 0
[  127.683404][ T5896] usb 4-1: config 0 interface 12 has no altsetting 0
[  127.707061][ T8028] loop5: detected capacity change from 0 to 512
[  127.712214][ T5896] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  127.715007][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.717539][ T5896] usb 4-1: Product: syz
[  127.718793][ T5896] usb 4-1: Manufacturer: syz
[  127.720577][ T5896] usb 4-1: SerialNumber: syz
[  127.724331][ T8028] EXT4-fs: Ignoring removed nobh option
[  127.729044][ T5719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.734706][ T8028] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.672: iget: bad i_size value: 38620345925642
[  127.739431][ T8028] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.672: couldn't read orphan inode 15 (err -117)
[  127.747582][ T8028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.758937][ T8028] EXT4-fs error (device loop5): ext4_check_dx_root:2203: inode #2: comm syz.5.672: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  127.769085][ T5896] usb 4-1: config 0 descriptor??
[  127.800032][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.890534][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.897208][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.900615][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.904987][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.908338][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.023930][ T5719] bridge_slave_1: left allmulticast mode
[  128.026085][ T5719] bridge_slave_1: left promiscuous mode
[  128.028341][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.033516][ T5719] bridge_slave_0: left allmulticast mode
[  128.035347][ T5719] bridge_slave_0: left promiscuous mode
[  128.037281][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.230873][ T5888] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  128.398562][ T5896] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  128.404127][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  128.406731][ T5896] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  128.408241][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  128.411170][ T5896] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  128.411256][ T5896] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  128.419383][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  128.427923][ T5896] usb 4-1: USB disconnect, device number 18
[  128.466011][ T5888] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  128.472242][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.480459][ T5888] usb 6-1: Product: syz
[  128.497228][ T5888] usb 6-1: Manufacturer: syz
[  128.499992][ T5888] usb 6-1: SerialNumber: syz
[  128.509448][ T5888] usb 6-1: config 0 descriptor??
[  128.535448][ T8036] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  128.538511][ T8036] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  128.544988][ T5888] usb 6-1: ucan: probing device on interface #0
[  128.608799][ T5719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.615192][ T5719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.619918][ T5719] bond0 (unregistering): Released all slaves
[  128.961084][ T5888] usb 6-1: ucan: failed to retrieve device info
[  128.967349][ T5888] usb 6-1: ucan: probe failed; try to update the device firmware
[  128.984742][ T5888] usb 6-1: USB disconnect, device number 5
[  129.070819][ T5719] hsr_slave_0: left promiscuous mode
[  129.073664][ T5719] hsr_slave_1: left promiscuous mode
[  129.076389][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.087160][ T5719] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.113251][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.119186][ T5719] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.158611][ T5719] veth1_macvtap: left promiscuous mode
[  129.163727][ T5719] veth0_macvtap: left promiscuous mode
[  129.166090][ T5719] veth1_vlan: left promiscuous mode
[  129.168284][ T5719] veth0_vlan: left promiscuous mode
[  129.219448][ T8052] loop3: detected capacity change from 0 to 4096
[  129.242624][ T8052] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  129.253895][ T8052] ntfs3(loop3): Failed to load $Extend (-22).
[  129.256219][ T8052] ntfs3(loop3): Failed to initialize $Extend.
[  129.475810][ T8055] loop3: detected capacity change from 0 to 4096
[  129.495545][ T8055] ntfs3(loop3): Primary boot: invalid bytes per MFT record 12288 (3).
[  129.513583][ T8055] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  129.590457][ T8061] loop5: detected capacity change from 0 to 256
[  129.624859][ T8061] FAT-fs (loop5): Directory bread(block 64) failed
[  129.626879][ T8061] FAT-fs (loop5): Directory bread(block 65) failed
[  129.629536][ T8061] FAT-fs (loop5): Directory bread(block 66) failed
[  129.633088][ T8061] FAT-fs (loop5): Directory bread(block 67) failed
[  129.634950][ T8059] loop3: detected capacity change from 0 to 4096
[  129.635599][ T8061] FAT-fs (loop5): Directory bread(block 68) failed
[  129.640020][ T8061] FAT-fs (loop5): Directory bread(block 69) failed
[  129.642353][ T8061] FAT-fs (loop5): Directory bread(block 70) failed
[  129.644454][ T8059] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  129.648130][ T8061] FAT-fs (loop5): Directory bread(block 71) failed
[  129.654976][ T8061] FAT-fs (loop5): Directory bread(block 72) failed
[  129.658834][ T8059] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  129.662423][ T8061] FAT-fs (loop5): Directory bread(block 73) failed
[  129.671692][ T8059] ntfs3(loop3): Failed to load $MFT.
[  129.983161][   T55] Bluetooth: hci1: command tx timeout
[  130.271039][ T8073] loop3: detected capacity change from 0 to 32768
[  130.285406][ T8073] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.686 (8073)
[  130.305925][ T8073] BTRFS error: invalid seeding and uuid-changed device detected
[  130.319577][ T8081] loop5: detected capacity change from 0 to 512
[  130.325336][ T8081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  130.375052][ T8081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.391812][ T8081] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.420535][ T8081] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  130.440485][ T8081] EXT4-fs (loop5): Remounting filesystem read-only
[  130.478937][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.486788][ T5719] team0 (unregistering): Port device team_slave_1 removed
[  130.492831][ T1089] __quota_error: 4 callbacks suppressed
[  130.492844][ T1089] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  130.498740][ T1089] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  130.648932][ T5719] team0 (unregistering): Port device team_slave_0 removed
[  131.334497][ T8032] chnl_net:caif_netlink_parms(): no params data found
[  131.422150][ T8111] binder: BINDER_SET_CONTEXT_MGR already set
[  131.425070][ T8111] binder: 8109:8111 ioctl 4018620d 200000000040 returned -16
[  131.505029][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.508924][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.532760][ T8032] bridge_slave_0: entered allmulticast mode
[  131.536561][ T8032] bridge_slave_0: entered promiscuous mode
[  131.540513][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.545447][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.552551][ T8032] bridge_slave_1: entered allmulticast mode
[  131.572380][ T8032] bridge_slave_1: entered promiscuous mode
[  131.697147][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.717694][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.797439][ T8032] team0: Port device team_slave_0 added
[  131.818011][ T8032] team0: Port device team_slave_1 added
[  131.917326][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.920191][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.932372][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.948072][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.956088][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.970176][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.992568][ T8113] loop5: detected capacity change from 0 to 40427
[  132.006746][ T8113] F2FS-fs (loop5): build fault injection rate: 771
[  132.045295][ T8113] F2FS-fs (loop5): invalid crc value
[  132.062894][   T55] Bluetooth: hci1: command tx timeout
[  132.111248][ T8113] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  132.125933][ T8113] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  132.148672][ T8032] hsr_slave_0: entered promiscuous mode
[  132.159186][ T8032] hsr_slave_1: entered promiscuous mode
[  132.203514][ T7191] syz-executor: attempt to access beyond end of device
[  132.203514][ T7191] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.236372][ T7191] CPU: 0 UID: 0 PID: 7191 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  132.236397][ T7191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.236406][ T7191] Call Trace:
[  132.236412][ T7191]  <TASK>
[  132.236419][ T7191]  dump_stack_lvl+0x189/0x250
[  132.236445][ T7191]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.236461][ T7191]  ? __pfx_queue_work_on+0x10/0x10
[  132.236477][ T7191]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.236492][ T7191]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.236517][ T7191]  f2fs_handle_critical_error+0x37c/0x540
[  132.236543][ T7191]  f2fs_write_end_io+0x886/0xb60
[  132.236578][ T7191]  __submit_merged_bio+0x27a/0x6a0
[  132.236601][ T7191]  __submit_merged_write_cond+0x255/0x530
[  132.236624][ T7191]  f2fs_write_data_pages+0x261d/0x3000
[  132.236671][ T7191]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.236734][ T7191]  ? folios_put_refs+0x559/0x640
[  132.236761][ T7191]  ? __lock_acquire+0xab9/0xd20
[  132.236789][ T7191]  ? do_raw_spin_lock+0x121/0x290
[  132.236814][ T7191]  ? do_raw_spin_unlock+0x4d/0x240
[  132.236831][ T7191]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.236850][ T7191]  do_writepages+0x32e/0x550
[  132.236879][ T7191]  ? do_raw_spin_unlock+0x4d/0x240
[  132.236899][ T7191]  filemap_fdatawrite+0x199/0x240
[  132.236919][ T7191]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  132.236976][ T7191]  ? do_raw_spin_unlock+0x4d/0x240
[  132.236996][ T7191]  f2fs_sync_dirty_inodes+0x31f/0x830
[  132.237029][ T7191]  f2fs_write_checkpoint+0x95a/0x1df0
[  132.237091][ T7191]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  132.237171][ T7191]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  132.237192][ T7191]  ? kfree+0x18e/0x440
[  132.237212][ T7191]  ? kill_f2fs_super+0x298/0x6c0
[  132.237237][ T7191]  kill_f2fs_super+0x2c3/0x6c0
[  132.237262][ T7191]  ? __pfx_kill_f2fs_super+0x10/0x10
[  132.237279][ T7191]  ? radix_tree_delete_item+0x2b6/0x400
[  132.237302][ T7191]  ? shrinker_free+0x2ce/0x3e0
[  132.237319][ T7191]  deactivate_locked_super+0xbc/0x130
[  132.237340][ T7191]  cleanup_mnt+0x425/0x4c0
[  132.237356][ T7191]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.237375][ T7191]  task_work_run+0x1d4/0x260
[  132.237397][ T7191]  ? __pfx_task_work_run+0x10/0x10
[  132.237413][ T7191]  ? __x64_sys_umount+0x122/0x160
[  132.237436][ T7191]  ? exit_to_user_mode_loop+0x40/0x110
[  132.237460][ T7191]  exit_to_user_mode_loop+0xec/0x110
[  132.237480][ T7191]  do_syscall_64+0x2bd/0x3b0
[  132.237497][ T7191]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.237512][ T7191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.237526][ T7191]  ? exc_page_fault+0x9f/0xf0
[  132.237544][ T7191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.237558][ T7191] RIP: 0033:0x7f99a498ff17
[  132.237613][ T7191] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  132.237626][ T7191] RSP: 002b:00007ffcb0709648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  132.237643][ T7191] RAX: 0000000000000000 RBX: 00007f99a4a11c05 RCX: 00007f99a498ff17
[  132.237653][ T7191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb0709700
[  132.237662][ T7191] RBP: 00007ffcb0709700 R08: 0000000000000000 R09: 0000000000000000
[  132.237670][ T7191] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb070a790
[  132.237679][ T7191] R13: 00007f99a4a11c05 R14: 00000000000203d0 R15: 00007ffcb070a7d0
[  132.237703][ T7191]  </TASK>
[  132.239697][ T7191] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  132.321431][ T8111] syz.3.700 (8111): drop_caches: 2
[  132.790183][ T8032] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  132.797669][ T8144] loop3: detected capacity change from 0 to 1024
[  132.867822][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.870005][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.880434][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  132.889119][ T8144] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.900934][ T8032] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  132.909848][ T8032] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  132.916583][ T8032] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  132.934066][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  133.053662][ T8157] block device autoloading is deprecated and will be removed.
[  133.083927][ T8157] loop3: detected capacity change from 0 to 2048
[  133.125277][ T8157] fuse: Unknown parameter '0x0000000000000005'
[  133.139940][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.175279][ T8032] 8021q: adding VLAN 0 to HW filter on device team0
[  133.218360][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.221655][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.243463][ T8163] loop3: detected capacity change from 0 to 64
[  133.287275][ T8163] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  133.288225][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.292994][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.520783][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  133.540100][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.680973][ T5888] usb 6-1: Using ep0 maxpacket: 8
[  133.685295][ T5888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  133.689950][ T5888] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  133.696926][ T5888] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  133.699678][ T5888] usb 6-1: Product: syz
[  133.710894][ T5888] usb 6-1: Manufacturer: syz
[  133.712941][ T5888] usb 6-1: SerialNumber: syz
[  133.950492][ T5888] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  133.955662][ T5888] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  133.962187][ T5888] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2
[  134.137711][ T8032] veth0_vlan: entered promiscuous mode
[  134.151935][   T55] Bluetooth: hci1: command tx timeout
[  134.154042][ T5888] usb 6-1: palm_os_3_probe - error -71 getting bytes available request
[  134.160808][ T5888] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[  134.173453][ T5888] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  134.175873][ T8032] veth1_vlan: entered promiscuous mode
[  134.188223][ T5888] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  134.206052][ T5888] usb 6-1: USB disconnect, device number 6
[  134.226860][ T5888] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  134.255027][ T8032] veth0_macvtap: entered promiscuous mode
[  134.257027][ T5888] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  134.275237][ T5888] visor 6-1:1.0: device disconnected
[  134.277063][ T8032] veth1_macvtap: entered promiscuous mode
[  134.378842][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.438369][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.484831][ T5719] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.488677][ T5719] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.522190][ T5719] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.540136][ T5719] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.880473][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.899317][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.037808][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.050246][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.404146][ T8215] loop5: detected capacity change from 0 to 4096
[  135.587300][ T8226] sctp: [Deprecated]: syz.5.721 (pid 8226) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.587300][ T8226] Use struct sctp_sack_info instead
[  135.661552][ T8228] loop3: detected capacity change from 0 to 512
[  135.675634][ T8228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  135.679647][ T8228] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.691007][ T8230] loop5: detected capacity change from 0 to 256
[  135.698856][ T8230] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  135.789156][ T8214] loop6: detected capacity change from 0 to 32768
[  135.812771][ T8214] (syz.6.669,8214,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  135.827367][ T8214] (syz.6.669,8214,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  135.856248][ T8214] (syz.6.669,8214,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  135.864529][ T8214] JBD2: Ignoring recovery information on journal
[  135.885834][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  135.919196][ T8214] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  136.032695][   T52] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  136.086342][ T8032] ocfs2: Unmounting device (7,6) on (node local)
[  136.164145][ T8248] loop3: detected capacity change from 0 to 128
[  136.179728][ T8248] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  136.194223][   T52] usb 6-1: Using ep0 maxpacket: 16
[  136.209331][   T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.220951][   T55] Bluetooth: hci1: command tx timeout
[  136.224673][   T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.228593][   T52] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  136.250133][   T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.264166][   T52] usb 6-1: config 0 descriptor??
[  136.323716][ T8251] loop6: detected capacity change from 0 to 4096
[  136.341539][ T8251] EXT4-fs (loop6): Test dummy encryption mode enabled
[  136.357091][ T8251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.881014][   T52] appleir 0003:05AC:8241.000A: unknown main item tag 0x0
[  136.883883][   T52] appleir 0003:05AC:8241.000A: unknown main item tag 0x0
[  136.886814][   T52] appleir 0003:05AC:8241.000A: unknown main item tag 0x0
[  136.889584][   T52] appleir 0003:05AC:8241.000A: unknown main item tag 0x0
[  136.894381][   T52] appleir 0003:05AC:8241.000A: unknown main item tag 0x0
[  136.904689][   T52] appleir 0003:05AC:8241.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0
[  137.011718][ T5938] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  137.155209][   T52] usb 6-1: USB disconnect, device number 7
[  137.202596][ T8032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.218935][ T5938] usb 4-1: Using ep0 maxpacket: 16
[  137.228131][ T5938] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  137.231392][ T5938] usb 4-1: config 0 has no interface number 0
[  137.233882][ T5938] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  137.238228][ T5938] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024
[  137.246727][ T5938] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  137.258791][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  137.268149][ T5938] usb 4-1: Product: syz
[  137.269937][ T5938] usb 4-1: SerialNumber: syz
[  137.284916][ T5938] usb 4-1: config 0 descriptor??
[  137.291511][ T5938] cm109 4-1:0.8: invalid payload size 1024, expected 4
[  137.304521][ T5938] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10
[  137.541585][    C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  137.753300][   T52] usb 4-1: USB disconnect, device number 19
[  137.753360][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  137.758112][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  137.804866][   T52] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  138.132636][ T8274] loop5: detected capacity change from 0 to 8
[  138.176595][ T8274] SQUASHFS error: lzo decompression failed, data probably corrupt
[  138.179531][ T8274] SQUASHFS error: Failed to read block 0x91: -5
[  138.181881][ T8274] SQUASHFS error: Unable to read metadata cache entry [8f]
[  138.184272][ T8274] SQUASHFS error: Unable to read inode 0x11f
[  138.675535][ T8282] loop3: detected capacity change from 0 to 2048
[  138.703834][ T8282] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  138.709212][ T6010] udevd[6010]: incorrect nilfs2 checksum on /dev/loop3
[  138.731402][ T5915] udevd[5915]: incorrect nilfs2 checksum on /dev/loop3
[  138.775298][ T8285] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.775525][ T8282] syz.3.740: attempt to access beyond end of device
[  138.775525][ T8282] loop3: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  138.902310][ T8278] loop5: detected capacity change from 0 to 32768
[  138.954027][ T8278] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.960489][ T8278] XFS (loop5): totally zeroed log
[  138.969376][ T8278] XFS (loop5): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  138.974678][ T8278] XFS (loop5): log mount/recovery failed: error -22
[  138.996633][ T8278] XFS (loop5): log mount failed
[  139.245394][ T8301] loop3: detected capacity change from 0 to 1024
[  139.246441][ T8302] loop5: detected capacity change from 0 to 256
[  139.258181][ T8301] hfsplus: bad catalog entry type
[  139.262680][ T8302] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  139.286969][ T1089] hfsplus: b-tree write err: -5, ino 4
[  139.551542][ T5938] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  139.700890][ T5938] usb 6-1: Using ep0 maxpacket: 8
[  139.706219][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short
[  139.710988][ T5938] usb 6-1: config 8 has an invalid interface number: 24 but max is 1
[  139.714511][ T5938] usb 6-1: config 8 has an invalid interface number: 242 but max is 1
[  139.717936][ T5938] usb 6-1: config 8 has no interface number 0
[  139.720542][ T5938] usb 6-1: config 8 has no interface number 1
[  139.723243][ T5938] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024
[  139.727873][ T5938] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  139.734850][ T5938] usb 6-1: config 8 interface 24 has no altsetting 0
[  139.737669][ T5938] usb 6-1: config 8 interface 242 has no altsetting 0
[  139.744514][ T5938] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  139.748188][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.751700][ T5938] usb 6-1: Product: syz
[  139.753423][ T5938] usb 6-1: Manufacturer: syz
[  139.755292][ T5938] usb 6-1: SerialNumber: syz
[  139.761857][ T8304] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  139.984138][ T5938] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  139.995730][ T5938] vmk80xx 6-1:8.242: driver 'vmk80xx' failed to auto-configure device.
[  140.004026][ T5938] usb 6-1: USB disconnect, device number 8
[  140.543020][ T8320] loop5: detected capacity change from 0 to 136
[  140.651478][ T8318] loop3: detected capacity change from 0 to 32768
[  140.697852][ T8324] loop5: detected capacity change from 0 to 2048
[  140.711069][ T8324] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.920104][ T8331] ip_vti0: Master is either lo or non-ether device
[  140.977777][   T33] audit: type=1326 audit(1755066697.937:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8336 comm="syz.3.760" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2202f8ebe9 code=0x0
[  141.210861][ T5896] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  141.364149][ T5896] usb 6-1: unable to read config index 0 descriptor/start: -61
[  141.367406][ T5896] usb 6-1: can't read configurations, error -61
[  141.500825][ T5896] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  141.653839][ T5896] usb 6-1: unable to read config index 0 descriptor/start: -61
[  141.656890][ T5896] usb 6-1: can't read configurations, error -61
[  141.663199][ T5896] usb usb6-port1: attempt power cycle
[  142.011229][ T5896] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  142.036828][ T5896] usb 6-1: unable to read config index 0 descriptor/start: -61
[  142.039903][ T5896] usb 6-1: can't read configurations, error -61
[  142.092268][ T8356] loop6: detected capacity change from 0 to 64
[  142.110820][ T8356] BFS-fs: bfs_fill_super(): Impossible last inode number 63507505 > 513 on loop6
[  142.170860][ T5896] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  142.195938][ T5896] usb 6-1: unable to read config index 0 descriptor/start: -61
[  142.198971][ T5896] usb 6-1: can't read configurations, error -61
[  142.203030][ T5896] usb usb6-port1: unable to enumerate USB device
[  142.210906][   T52] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  142.373602][   T52] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.377767][   T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.383134][   T52] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  142.386725][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  142.390068][   T52] usb 4-1: SerialNumber: syz
[  142.607413][   T52] usb 4-1: 0:2 : does not exist
[  142.625672][   T52] usb 4-1: USB disconnect, device number 20
[  142.649242][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.294801][ T8360] loop3: detected capacity change from 0 to 32768
[  143.303872][ T8360] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  143.303872][ T8360] members_v2 (size 152):
[  143.303872][ T8360] Device:                        0
[  143.303872][ T8360]   Label:                       (none)
[  143.303872][ T8360]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  143.303872][ T8360]   Size:                        0
[  143.303872][ T8360]   read errors:                 0
[  143.303872][ T8360]   write errors:                0
[  143.303872][ T8360]   checksum errors:             0
[  143.303872][ T8360]   seqread iops:                0
[  143.303872][ T8360]   seqwrite iops:               0
[  143.303872][ T8360]   randread iops:               0
[  143.303872][ T8360]   randwrite iops:              0
[  143.303872][ T8360]   Bucket size:                 0
[  143.303872][ T8360]   First bucket:                0
[  143.303872][ T8360]   Buckets:                     128
[  143.303872][ T8360]   Last mount:                  1714681267
[  143.303872][ T8360]   Last superblock write:       42
[  143.303872][ T8360]   State:                       rw
[  143.303872][ T8360]   Data allowed:                journal,btree,user
[  143.303872][ T8360]   Has data:                    btree
[  143.303872][ T8360]   Btree allocated bitmap blocksize:128
[  143.303872][ T8360]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  143.303872][ T8360]   Durability:        
[  143.303979][ T8360] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  143.686374][ T8370] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  143.733958][ T8372] loop3: detected capacity change from 0 to 8
[  144.040363][ T8384] loop5: detected capacity change from 0 to 1024
[  144.756559][ T8410] batadv1: entered promiscuous mode
[  144.759929][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv1
[  144.878362][ T8414] loop3: detected capacity change from 0 to 4096
[  144.891434][ T8414] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  144.913410][ T8414] ntfs3(loop3): ino=19, mi_enum_attr
[  144.923773][ T8414] ntfs3(loop3): failed to convert "c46c" to cp936
[  144.928122][ T8414] ntfs3(loop3): ino=20, mi_enum_attr
[  145.045353][ T8418] loop5: detected capacity change from 0 to 1024
[  145.048841][ T8418] journal_path: not usable as path
[  145.053132][ T8418] EXT4-fs: error: could not find journal device path
[  145.227971][ T8261] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  145.375375][ T8426] loop6: detected capacity change from 0 to 32768
[  145.382309][ T8261] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[  145.386615][ T8261] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  145.406475][ T8261] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  145.409370][ T8261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.412776][ T8261] usb 4-1: Product: syz
[  145.414419][ T8261] usb 4-1: Manufacturer: syz
[  145.419710][ T8261] usb 4-1: SerialNumber: syz
[  145.492817][ T8430] loop5: detected capacity change from 0 to 32768
[  145.497689][ T8430] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.802 (8430)
[  145.533682][ T8430] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  145.536974][ T8430] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  145.539895][ T8430] BTRFS info (device loop5): using free-space-tree
[  145.613116][ T7191] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  145.650267][ T8261] usb 4-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  145.657687][ T8261] usb 4-1: found format II with max.bitrate = 3, frame size=7
[  145.666995][ T8261] usb 4-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  145.670361][ T8261] usb 4-1: found format II with max.bitrate = 3, frame size=7
[  145.732734][ T8261] usb 4-1: USB disconnect, device number 21
[  145.877868][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.961793][ T8448] loop5: detected capacity change from 0 to 32768
[  145.971582][ T8448] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  146.013469][ T7191] ocfs2: Unmounting device (7,5) on (node local)
[  146.404985][ T8454] loop6: detected capacity change from 0 to 32768
[  146.413178][ T8454] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.803 (8454)
[  146.463227][ T8454] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.466476][ T8454] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  146.469174][ T8454] BTRFS info (device loop6): using free-space-tree
[  146.609241][ T8460] loop3: detected capacity change from 0 to 32768
[  146.669398][   T33] audit: type=1800 audit(1755066703.617:26): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.807" name="file1" dev="loop3" ino=4 res=0 errno=0
[  146.686050][ T8032] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.773744][   T33] audit: type=1800 audit(1755066703.727:27): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.807" name="file1" dev="loop3" ino=4 res=0 errno=0
[  146.824058][ T8495] Bluetooth: MGMT ver 1.23
[  147.039423][ T8476] loop5: detected capacity change from 0 to 32768
[  147.091120][ T8476] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  147.135620][ T8476] XFS (loop5): Ending clean mount
[  147.158279][ T8476] XFS (loop5): Quotacheck needed: Please wait.
[  147.193419][ T8476] XFS (loop5): Quotacheck: Done.
[  147.278385][ T7191] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  147.470785][ T1823] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  147.630972][ T1823] usb 4-1: Using ep0 maxpacket: 16
[  147.638880][ T1823] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  147.643885][ T1823] usb 4-1: config 0 has no interface number 0
[  147.648630][ T1823] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  147.652541][ T1823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.655708][ T1823] usb 4-1: Product: syz
[  147.657405][ T1823] usb 4-1: Manufacturer: syz
[  147.659257][ T1823] usb 4-1: SerialNumber: syz
[  147.670473][ T1823] usb 4-1: config 0 descriptor??
[  147.679118][ T1823] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  147.720916][   T52] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  147.870958][   T52] usb 6-1: Using ep0 maxpacket: 16
[  147.876973][   T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11
[  147.880326][   T52] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  147.884543][ T1823] gspca_spca1528: reg_w err -71
[  147.886541][   T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.896232][   T52] usb 6-1: config 0 descriptor??
[  147.911698][ T1823] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  147.921679][ T1823] usb 4-1: USB disconnect, device number 22
[  148.316545][   T52] hid-alps 0003:044E:120B.000B: hidraw0: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.5-1/input0
[  148.517868][   T52] usb 6-1: USB disconnect, device number 13
[  149.124152][ T8555] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.013346][ T8575] loop6: detected capacity change from 0 to 1024
[  150.045650][ T5888] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  150.058886][   T36] hfsplus: b-tree write err: -5, ino 4
[  150.157482][ T8581] loop6: detected capacity change from 0 to 128
[  150.202931][ T5888] usb 4-1: Using ep0 maxpacket: 16
[  150.216365][ T5888] usb 4-1: too many configurations: 60, using maximum allowed: 8
[  150.252609][ T5888] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  150.255532][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  150.258031][ T5888] usb 4-1: Product: syz
[  150.260115][ T5888] usb 4-1: Manufacturer: syz
[  150.261857][ T5888] usb 4-1: SerialNumber: syz
[  150.265028][ T5888] usb 4-1: config 0 descriptor??
[  150.268695][ T5888] pwc: Philips SPC 880NC USB webcam detected.
[  150.564841][ T5888] pwc: Warning: more than 1 configuration available.
[  150.567735][ T5888] pwc: Failed to set LED on/off time (-71)
[  150.569890][ T5888] pwc: send_video_command error -71
[  150.571562][ T5888] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  150.574075][ T5888] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  150.580439][ T5888] usb 4-1: USB disconnect, device number 23
[  150.846193][   T33] audit: type=1326 audit(1755066707.807:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8598 comm="syz.6.835" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3c18ebe9 code=0x7ffc0000
[  150.853339][   T33] audit: type=1326 audit(1755066707.807:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8598 comm="syz.6.835" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3c18ebe9 code=0x7ffc0000
[  150.864694][   T33] audit: type=1326 audit(1755066707.817:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8598 comm="syz.6.835" exe="/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7faa3c18ebe9 code=0x7ffc0000
[  150.883109][   T33] audit: type=1326 audit(1755066707.817:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8598 comm="syz.6.835" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3c18ebe9 code=0x7ffc0000
[  150.901745][   T33] audit: type=1326 audit(1755066707.817:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8598 comm="syz.6.835" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3c18ebe9 code=0x7ffc0000
[  151.055955][ T8605] loop3: detected capacity change from 0 to 1024
[  151.107312][ T8605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.128668][ T8605] EXT4-fs error (device loop3): ext4_lookup:1787: comm syz.3.838: inode #12: comm syz.3.838: iget: illegal inode #
[  151.138458][ T8605] EXT4-fs (loop3): Remounting filesystem read-only
[  151.167274][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.520507][ T8618] loop5: detected capacity change from 0 to 128
[  151.677677][ T8622] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  151.716195][ T8612] loop3: detected capacity change from 0 to 32768
[  151.723060][ T8612] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  151.723060][ T8612] clean (size 2912):
[  151.723060][ T8612] flags:          0
[  151.723060][ T8612] journal_seq:    8
[  151.723060][ T8612] prio_ptrs: 
[  151.723060][ T8612] usage: type=key_version v=0
[  151.723060][ T8612] usage: type=reserved v=0
[  151.723060][ T8612] usage: type=reserved v=0
[  151.723060][ T8612] usage: type=reserved v=0
[  151.723060][ T8612] usage: type=reserved v=0
[  151.723060][ T8612] data_usage: btree: 1/1 [0]=2816
[  151.723060][ T8612] data_usage: journal: 1/1 [0]=0
[  151.723060][ T8612] data_usage: user: 1/1 [0]=32
[  151.723060][ T8612] dev_usage: dev=0  
[  151.723060][ T8612]   free: buckets=83 sectors=0 fragmented=0
[  151.723060][ T8612]   sb: buckets=25 sectors=6152 fragmented=248
[  151.723060][ T8612]   journal: buckets=8 sectors=2048 fragmented=0
[  151.723060][ T8612]   btree: buckets=11 sectors=2816 fragmented=0
[  151.723060][ T8612]   user: buckets=1 sectors=32 fragmented=224
[  151.723060][ T8612]   cached: buckets=0 sectors=0 fragmented=0
[  151.723060][ T8612]   parity: buckets=0 sectors=0 fragmented=0
[  151.723060][ T8612]   stripe: buckets=0 sectors=0 fragmented=0
[  151.723060][ T8612]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  151.723060][ T8612]   need_discard: buckets=0 sectors=0 fragmented=0
[  151.723060][ T8612] clock: read=0
[  151.723060][ T8612] clock: write=1288
[  151.723060][ T8612] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  151.723215][ T8612] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  151.768707][    C0] vkms_vblank_simulate: vblank timer overrun
[  151.777131][ T8626] loop5: detected capacity change from 0 to 8
[  151.812680][ T8626] SQUASHFS error: Failed to read block 0x6de: -5
[  151.817397][ T8626] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  151.823164][ T8626] SQUASHFS error: Failed to read block 0x63a: -5
[  151.825697][ T8626] SQUASHFS error: Unable to read metadata cache entry [638]
[  151.828300][ T8626] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  152.134109][ T8636] loop6: detected capacity change from 0 to 1024
[  152.150829][   T52] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  152.170001][   T53] hfsplus: b-tree write err: -5, ino 4
[  152.228944][ T8630] loop3: detected capacity change from 0 to 32768
[  152.233886][ T8630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.850 (8630)
[  152.255775][ T8630] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.258997][ T8630] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  152.263417][ T8630] BTRFS info (device loop3): using free-space-tree
[  152.304000][   T52] usb 6-1: Using ep0 maxpacket: 32
[  152.308519][   T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  152.317158][   T52] usb 6-1: config 0 interface 0 has no altsetting 1
[  152.322608][   T52] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  152.326282][   T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  152.329447][   T52] usb 6-1: SerialNumber: syz
[  152.341952][   T52] usb 6-1: config 0 descriptor??
[  152.358436][ T6006] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.366194][   T52] usb-storage 6-1:0.0: USB Mass Storage device detected
[  152.388073][   T52] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  152.558330][ T5938] usb 6-1: USB disconnect, device number 14
[  152.584899][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.833384][ T8673] loop3: detected capacity change from 0 to 64
[  152.927002][ T8675] loop3: detected capacity change from 0 to 2048
[  152.930538][ T8675] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.933952][ T8675] EXT4-fs: Ignoring removed nobh option
[  152.962698][ T8675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.987890][ T8675] EXT4-fs (loop3): shut down requested (0)
[  153.035093][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.129509][ T8682] netlink: 'syz.3.865': attribute type 2 has an invalid length.
[  153.132786][ T8682] netlink: 'syz.3.865': attribute type 2 has an invalid length.
[  153.570872][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  153.720926][    T9] usb 6-1: Using ep0 maxpacket: 16
[  153.724958][    T9] usb 6-1: config 5 has an invalid interface number: 206 but max is 0
[  153.728074][    T9] usb 6-1: config 5 has no interface number 0
[  153.730489][    T9] usb 6-1: config 5 interface 206 has no altsetting 0
[  153.735608][    T9] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44
[  153.738992][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.742332][    T9] usb 6-1: Product: syz
[  153.744006][    T9] usb 6-1: Manufacturer: syz
[  153.745953][    T9] usb 6-1: SerialNumber: syz
[  154.301257][ T5888] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  154.450918][ T5888] usb 4-1: Using ep0 maxpacket: 16
[  154.456630][ T5888] usb 4-1: config 1 interface 0 altsetting 36 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  154.461519][ T5888] usb 4-1: config 1 interface 0 has no altsetting 0
[  154.466451][ T5888] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.40
[  154.470027][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.473276][ T5888] usb 4-1: Product: syz
[  154.475066][ T5888] usb 4-1: Manufacturer: syz
[  154.476973][ T5888] usb 4-1: SerialNumber: syz
[  154.704478][ T5888] usbhid 4-1:1.0: can't add hid device: -71
[  154.706940][ T5888] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  154.716974][ T5888] usb 4-1: USB disconnect, device number 24
[  156.145588][ T8695] syz.6.869 (8695): drop_caches: 2
[  156.387921][    T9] usb_ehset_test 6-1:5.206: probe with driver usb_ehset_test failed with error -32
[  156.400524][    T9] usb 6-1: USB disconnect, device number 15
[  156.688276][ T8718] loop6: detected capacity change from 0 to 32768
[  156.696188][ T8718] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.878 (8718)
[  156.706113][ T8718] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  156.709356][ T8718] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  156.714387][    T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  156.722195][ T8718] BTRFS info (device loop6): using free-space-tree
[  156.858053][ T8032] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  156.939035][    T9] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  156.946476][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.949683][    T9] usb 6-1: Product: syz
[  156.952326][    T9] usb 6-1: Manufacturer: syz
[  156.954196][    T9] usb 6-1: SerialNumber: syz
[  156.996320][    T9] usb 6-1: config 0 descriptor??
[  157.002288][    T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  157.088507][ T5888] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  157.105870][ T1823] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  157.118747][ T5888] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  157.222210][ T5896] usb 6-1: USB disconnect, device number 16
[  157.265401][ T1823] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00
[  157.271277][ T1823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.278029][ T1823] usb 4-1: config 0 descriptor??
[  157.290776][ T1823] go7007 4-1:0.0: probe with driver go7007 failed with error -12
[  157.494949][   T52] usb 4-1: USB disconnect, device number 25
[  157.766018][ T8759] loop5: detected capacity change from 0 to 512
[  157.780094][ T8759] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  157.783236][ T8759] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  157.798248][ T8759] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  157.801587][ T8759] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  157.804052][ T8759] System zones: 0-2, 18-18, 34-35
[  157.809921][ T8759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.869443][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.178646][ T8768] loop5: detected capacity change from 0 to 32768
[  158.187084][ T8768] (syz.5.891,8768,1):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018
[  158.189855][ T8768] (syz.5.891,8768,1):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2
[  158.197666][ T8768] (syz.5.891,8768,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  158.200788][ T8768] (syz.5.891,8768,1):ocfs2_fill_super:1177 ERROR: status = -22
[  158.342752][ T8777] loop5: detected capacity change from 0 to 4096
[  158.375683][ T8778] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.790872][ T8794] loop5: detected capacity change from 0 to 32768
[  158.795837][ T8794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.902 (8794)
[  158.813566][ T8794] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.821034][ T8794] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  158.823760][ T8794] BTRFS info (device loop5): using free-space-tree
[  158.906382][ T7191] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.269996][ T8830] loop5: detected capacity change from 0 to 256
[  159.352793][ T8835] loop5: detected capacity change from 0 to 128
[  159.500810][ T1823] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  159.588528][ T8845] loop5: detected capacity change from 0 to 512
[  159.619382][ T8845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.635100][ T8845] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  159.650875][ T1823] usb 4-1: Using ep0 maxpacket: 8
[  159.656373][ T1823] usb 4-1: unable to get BOS descriptor or descriptor too short
[  159.662374][ T1823] usb 4-1: config 3 has an invalid interface number: 35 but max is 0
[  159.666361][ T1823] usb 4-1: config 3 has no interface number 0
[  159.667741][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.668823][ T1823] usb 4-1: config 3 interface 35 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024
[  159.688796][ T1823] usb 4-1: config 3 interface 35 has no altsetting 0
[  159.700220][ T1823] usb 4-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=57.12
[  159.704810][ T1823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.708049][ T1823] usb 4-1: Product: syz
[  159.709773][ T1823] usb 4-1: Manufacturer: syz
[  159.718865][ T1823] usb 4-1: SerialNumber: syz
[  159.726745][ T8829] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  159.759003][ T8852] loop5: detected capacity change from 0 to 1024
[  159.764674][ T8852] EXT4-fs: Ignoring removed orlov option
[  159.769845][ T8852] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  159.803484][ T8852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.842235][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.958038][ T1823] usb 4-1: bad CDC descriptors
[  159.979409][ T1823] usb 4-1: USB disconnect, device number 26
[  160.109224][ T8858] loop5: detected capacity change from 0 to 32768
[  160.125188][ T8858] 
[  160.125188][ T8858]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  160.125188][ T8858] 
[  160.163258][ T7191] 
[  160.163258][ T7191]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  160.163258][ T7191] 
[  160.168242][ T7191] 
[  160.168242][ T7191]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  160.168242][ T7191] 
[  160.253835][ T8860] loop5: detected capacity change from 0 to 512
[  160.257171][ T8860] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  160.262825][ T8860] EXT4-fs (loop5): 1 truncate cleaned up
[  160.265678][ T8860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.294817][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.597751][   T55] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff
[  160.604570][ T5896] hid-generic 0005:10CF:0004.000D: item fetching failed at offset 0/1
[  160.608713][ T5896] hid-generic 0005:10CF:0004.000D: probe with driver hid-generic failed with error -22
[  160.733676][ T8885] loop3: detected capacity change from 0 to 1024
[  160.782329][ T8885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.945681][ T6006] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  160.950015][ T6006] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  161.167127][ T8901] loop5: detected capacity change from 0 to 512
[  161.175552][ T8901] EXT4-fs: Ignoring removed orlov option
[  161.179471][ T8901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  161.184165][ T8901] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  161.190300][ T8901] EXT4-fs (loop5): orphan cleanup on readonly fs
[  161.192217][ T8210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.197536][ T8901] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.940: Invalid inode bitmap blk 0 in block_group 0
[  161.205318][ T8901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.397544][ T7191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.875205][ T8904] loop5: detected capacity change from 0 to 32768
[  161.880550][ T8904] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.941 (8904)
[  161.945452][ T8904] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  161.949056][ T8904] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  161.964301][ T8904] BTRFS info (device loop5): disk space caching is enabled
[  161.967065][ T8904] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  162.251064][ T8904] BTRFS info (device loop5): rebuilding free space tree
[  162.301052][ T8904] BTRFS info (device loop5): disabling free space tree
[  162.306995][ T8904] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.331540][ T8904] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.648400][ T5875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.735297][ T7191] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.755547][ T5875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.865476][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.868382][ T5875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.880383][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  162.884483][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  162.907287][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  162.910261][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  163.046943][ T5875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.208963][ T8934] loop5: detected capacity change from 0 to 256
[  163.243288][ T8934] FAT-fs (loop5): Directory bread(block 64) failed
[  163.249583][ T8934] FAT-fs (loop5): Directory bread(block 65) failed
[  163.263572][ T8934] FAT-fs (loop5): Directory bread(block 66) failed
[  163.268252][ T8934] FAT-fs (loop5): Directory bread(block 67) failed
[  163.289778][ T8934] FAT-fs (loop5): Directory bread(block 68) failed
[  163.292655][ T8934] FAT-fs (loop5): Directory bread(block 69) failed
[  163.300198][ T8924] chnl_net:caif_netlink_parms(): no params data found
[  163.302537][ T8934] FAT-fs (loop5): Directory bread(block 70) failed
[  163.304599][ T8934] FAT-fs (loop5): Directory bread(block 71) failed
[  163.306808][ T8934] FAT-fs (loop5): Directory bread(block 72) failed
[  163.308864][ T8934] FAT-fs (loop5): Directory bread(block 73) failed
[  163.327571][ T5875] bridge_slave_1: left allmulticast mode
[  163.329554][ T5875] bridge_slave_1: left promiscuous mode
[  163.335825][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.340411][ T5875] bridge_slave_0: left allmulticast mode
[  163.347163][ T5875] bridge_slave_0: left promiscuous mode
[  163.349605][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.673160][ T8940] loop6: detected capacity change from 0 to 32768
[  163.680544][ T8940] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/113 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 2 2 4 5 5 5 5 5 6 8 10 108]
[  163.680544][ T8940] replicas_v0 (size 24):
[  163.680544][ T8940] btree: 1 [0] journal: 1 [0] user: 113 [4 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1]
[  163.680544][ T8940] 
[  163.707073][ T8940] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  163.788067][ T8955] mmap: syz.5.956 (8955) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  163.794299][ T8954] loop6: detected capacity change from 0 to 512
[  163.796803][ T8954] EXT4-fs: inline encryption not supported
[  163.827728][ T8954] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.955: corrupted in-inode xattr: invalid ea_ino
[  163.835469][ T8954] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.955: couldn't read orphan inode 15 (err -117)
[  163.848533][ T8954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.859520][ T8954] cgroup: name respecified
[  163.876653][ T8032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.943176][ T8963] loop6: detected capacity change from 0 to 1024
[  164.009405][ T8963] hfsplus: b-tree write err: -5, ino 4
[  164.207224][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.235656][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.241423][ T5875] bond0 (unregistering): Released all slaves
[  164.250195][ T8966] loop6: detected capacity change from 0 to 32768
[  164.272557][ T8966] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  164.321418][ T8966] 
[  164.322270][ T8966] ======================================================
[  164.324397][ T8966] WARNING: possible circular locking dependency detected
[  164.326596][ T8966] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  164.329202][ T8966] ------------------------------------------------------
[  164.332193][ T8966] syz.6.960/8966 is trying to acquire lock:
[  164.334034][ T8966] ffff8880316d3278 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  164.336899][ T8966] 
[  164.336899][ T8966] but task is already holding lock:
[  164.339165][ T8966] ffff88802c506950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  164.342416][ T8966] 
[  164.342416][ T8966] which lock already depends on the new lock.
[  164.342416][ T8966] 
[  164.345895][ T8966] 
[  164.345895][ T8966] the existing dependency chain (in reverse order) is:
[  164.348623][ T8966] 
[  164.348623][ T8966] -> #4 (jbd2_handle){++++}-{0:0}:
[  164.350860][ T8966]        lock_acquire+0x120/0x360
[  164.352452][ T8966]        start_this_handle+0x1fa7/0x21c0
[  164.354220][ T8966]        jbd2__journal_start+0x2c1/0x5b0
[  164.355946][ T8966]        jbd2_journal_start+0x2a/0x40
[  164.357532][ T8966]        ocfs2_start_trans+0x376/0x6d0
[  164.359142][ T8966]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  164.361013][ T8966]        ocfs2_dismount_volume+0x201/0x8d0
[  164.362782][ T8966]        generic_shutdown_super+0x135/0x2c0
[  164.364604][ T8966]        kill_block_super+0x44/0x90
[  164.366238][ T8966]        deactivate_locked_super+0xbc/0x130
[  164.368122][ T8966]        cleanup_mnt+0x425/0x4c0
[  164.369621][ T8966]        task_work_run+0x1d4/0x260
[  164.371181][ T8966]        exit_to_user_mode_loop+0xec/0x110
[  164.373121][ T8966]        do_syscall_64+0x2bd/0x3b0
[  164.374668][ T8966]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.376600][ T8966] 
[  164.376600][ T8966] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  164.379185][ T8966]        lock_acquire+0x120/0x360
[  164.380733][ T8966]        down_read+0x46/0x2e0
[  164.382143][ T8966]        ocfs2_start_trans+0x36a/0x6d0
[  164.383753][ T8966]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  164.385656][ T8966]        ocfs2_dismount_volume+0x201/0x8d0
[  164.387465][ T8966]        generic_shutdown_super+0x135/0x2c0
[  164.389232][ T8966]        kill_block_super+0x44/0x90
[  164.390833][ T8966]        deactivate_locked_super+0xbc/0x130
[  164.392640][ T8966]        cleanup_mnt+0x425/0x4c0
[  164.394122][ T8966]        task_work_run+0x1d4/0x260
[  164.395631][ T8966]        exit_to_user_mode_loop+0xec/0x110
[  164.397401][ T8966]        do_syscall_64+0x2bd/0x3b0
[  164.398925][ T8966]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.400933][ T8966] 
[  164.400933][ T8966] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  164.403596][ T8966]        lock_acquire+0x120/0x360
[  164.405326][ T8966]        ocfs2_start_trans+0x26b/0x6d0
[  164.407199][ T8966]        ocfs2_xattr_set+0xd69/0x11f0
[  164.408851][ T8966]        __vfs_setxattr+0x43c/0x480
[  164.410421][ T8966]        __vfs_setxattr_noperm+0x12d/0x660
[  164.412174][ T8966]        vfs_setxattr+0x16b/0x2f0
[  164.413674][ T8966]        filename_setxattr+0x274/0x600
[  164.415317][ T8966]        path_setxattrat+0x364/0x3a0
[  164.416908][ T8966]        __x64_sys_setxattr+0xbc/0xe0
[  164.418508][ T8966]        do_syscall_64+0xfa/0x3b0
[  164.420037][ T8966]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.421938][ T8966] 
[  164.421938][ T8966] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  164.425115][ T8966]        lock_acquire+0x120/0x360
[  164.426682][ T8966]        down_write+0x96/0x1f0
[  164.428170][ T8966]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  164.430092][ T8966]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  164.432364][ T8966]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  164.434210][ T8966]        ocfs2_xattr_set+0xb70/0x11f0
[  164.435841][ T8966]        __vfs_setxattr+0x43c/0x480
[  164.437452][ T8966]        __vfs_setxattr_noperm+0x12d/0x660
[  164.439211][ T8966]        vfs_setxattr+0x16b/0x2f0
[  164.440835][ T8966]        filename_setxattr+0x274/0x600
[  164.442835][ T8966]        path_setxattrat+0x364/0x3a0
[  164.444754][ T8966]        __x64_sys_setxattr+0xbc/0xe0
[  164.446410][ T8966]        do_syscall_64+0xfa/0x3b0
[  164.448027][ T8966]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.449938][ T8966] 
[  164.449938][ T8966] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  164.452448][ T8966]        validate_chain+0xb9b/0x2140
[  164.454499][ T8966]        __lock_acquire+0xab9/0xd20
[  164.456502][ T8966]        lock_acquire+0x120/0x360
[  164.458475][ T8966]        down_read+0x46/0x2e0
[  164.460385][ T8966]        ocfs2_init_acl+0x2f9/0x720
[  164.462475][ T8966]        ocfs2_mknod+0x1321/0x2050
[  164.464499][ T8966]        ocfs2_create+0x1a5/0x440
[  164.466470][ T8966]        path_openat+0x14f4/0x3830
[  164.468448][ T8966]        do_filp_open+0x1fa/0x410
[  164.470414][ T8966]        do_sys_openat2+0x121/0x1c0
[  164.472420][ T8966]        __x64_sys_openat+0x138/0x170
[  164.474553][ T8966]        do_syscall_64+0xfa/0x3b0
[  164.476506][ T8966]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.479015][ T8966] 
[  164.479015][ T8966] other info that might help us debug this:
[  164.479015][ T8966] 
[  164.482839][ T8966] Chain exists of:
[  164.482839][ T8966]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  164.482839][ T8966] 
[  164.487608][ T8966]  Possible unsafe locking scenario:
[  164.487608][ T8966] 
[  164.490003][ T8966]        CPU0                    CPU1
[  164.491987][ T8966]        ----                    ----
[  164.493981][ T8966]   rlock(jbd2_handle);
[  164.495561][ T8966]                                lock(&journal->j_trans_barrier);
[  164.498477][ T8966]                                lock(jbd2_handle);
[  164.500971][ T8966]   rlock(&oi->ip_xattr_sem);
[  164.502719][ T8966] 
[  164.502719][ T8966]  *** DEADLOCK ***
[  164.502719][ T8966] 
[  164.505776][ T8966] 8 locks held by syz.6.960/8966:
[  164.507723][ T8966]  #0: ffff888035ffc428 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  164.510881][ T8966]  #1: ffff8880316d3540 (&type->i_mutex_dir_key#23){+.+.}-{4:4}, at: path_openat+0x8da/0x3830
[  164.514789][ T8966]  #2: ffff8881225809c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  164.519928][ T8966]  #3: ffff8880316d1840 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  164.525225][ T8966]  #4: ffff888122583540 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  164.530727][ T8966]  #5: ffff888035ffc618 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  164.534153][ T8966]  #6: ffff88802a129ce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  164.537887][ T8966]  #7: ffff88802c506950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  164.541248][ T8966] 
[  164.541248][ T8966] stack backtrace:
[  164.543486][ T8966] CPU: 0 UID: 0 PID: 8966 Comm: syz.6.960 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  164.543515][ T8966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.543522][ T8966] Call Trace:
[  164.543532][ T8966]  <TASK>
[  164.543541][ T8966]  dump_stack_lvl+0x189/0x250
[  164.543565][ T8966]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.543583][ T8966]  ? __pfx__printk+0x10/0x10
[  164.543603][ T8966]  ? stack_trace_save+0x9c/0xe0
[  164.543617][ T8966]  print_circular_bug+0x2ee/0x310
[  164.543634][ T8966]  check_noncircular+0x134/0x160
[  164.543652][ T8966]  validate_chain+0xb9b/0x2140
[  164.543675][ T8966]  __lock_acquire+0xab9/0xd20
[  164.543695][ T8966]  ? ocfs2_init_acl+0x2f9/0x720
[  164.543703][ T8966]  lock_acquire+0x120/0x360
[  164.543714][ T8966]  ? ocfs2_init_acl+0x2f9/0x720
[  164.543723][ T8966]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  164.543734][ T8966]  down_read+0x46/0x2e0
[  164.543744][ T8966]  ? ocfs2_init_acl+0x2f9/0x720
[  164.543754][ T8966]  ocfs2_init_acl+0x2f9/0x720
[  164.543762][ T8966]  ? ocfs2_mknod_locked+0x148/0x250
[  164.543776][ T8966]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  164.543783][ T8966]  ? dquot_alloc_inode+0x216/0xa50
[  164.543793][ T8966]  ? ocfs2_block_signals+0x94/0xe0
[  164.543828][ T8966]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  164.543841][ T8966]  ? ocfs2_init_security_get+0x139/0x1a0
[  164.543852][ T8966]  ocfs2_mknod+0x1321/0x2050
[  164.543868][ T8966]  ? __pfx_ocfs2_mknod+0x10/0x10
[  164.543880][ T8966]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  164.543889][ T8966]  ? __lock_acquire+0xab9/0xd20
[  164.543905][ T8966]  ? look_up_lock_class+0x74/0x170
[  164.543916][ T8966]  ? register_lock_class+0x51/0x320
[  164.543929][ T8966]  ? __lock_acquire+0xab9/0xd20
[  164.543942][ T8966]  ? __lock_acquire+0xab9/0xd20
[  164.543955][ T8966]  ? do_raw_spin_lock+0x121/0x290
[  164.543967][ T8966]  ? do_raw_spin_unlock+0x4d/0x240
[  164.543977][ T8966]  ? rcu_is_watching+0x15/0xb0
[  164.543986][ T8966]  ? ocfs2_lookup+0x5b9/0x9b0
[  164.543998][ T8966]  ocfs2_create+0x1a5/0x440
[  164.544010][ T8966]  ? __pfx_ocfs2_lookup+0x10/0x10
[  164.544020][ T8966]  ? from_kgid+0x1b0/0x650
[  164.544031][ T8966]  ? __pfx_ocfs2_create+0x10/0x10
[  164.544041][ T8966]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  164.544050][ T8966]  ? inode_permission+0x149/0x470
[  164.544056][ T8966]  ? __pfx_ocfs2_permission+0x10/0x10
[  164.544066][ T8966]  ? bpf_lsm_inode_create+0x9/0x20
[  164.544075][ T8966]  ? __pfx_ocfs2_create+0x10/0x10
[  164.544085][ T8966]  path_openat+0x14f4/0x3830
[  164.544094][ T8966]  ? arch_stack_walk+0xfc/0x150
[  164.544109][ T8966]  ? __pfx_path_openat+0x10/0x10
[  164.544117][ T8966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.544129][ T8966]  do_filp_open+0x1fa/0x410
[  164.544137][ T8966]  ? __lock_acquire+0xab9/0xd20
[  164.544147][ T8966]  ? __pfx_do_filp_open+0x10/0x10
[  164.544159][ T8966]  ? _raw_spin_unlock+0x28/0x50
[  164.544167][ T8966]  ? alloc_fd+0x64c/0x6c0
[  164.544179][ T8966]  do_sys_openat2+0x121/0x1c0
[  164.544188][ T8966]  ? __se_sys_futex+0x36f/0x400
[  164.544198][ T8966]  ? __pfx_do_sys_openat2+0x10/0x10
[  164.544207][ T8966]  ? rcu_is_watching+0x15/0xb0
[  164.544215][ T8966]  __x64_sys_openat+0x138/0x170
[  164.544224][ T8966]  do_syscall_64+0xfa/0x3b0
[  164.544233][ T8966]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.544242][ T8966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.544249][ T8966]  ? exc_page_fault+0x9f/0xf0
[  164.544258][ T8966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.544267][ T8966] RIP: 0033:0x7faa3c18ebe9
[  164.544277][ T8966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.544286][ T8966] RSP: 002b:00007faa3a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  164.544296][ T8966] RAX: ffffffffffffffda RBX: 00007faa3c3b5fa0 RCX: 00007faa3c18ebe9
[  164.544304][ T8966] RDX: 000000000000275a RSI: 0000200000000180 RDI: ffffffffffffff9c
[  164.544310][ T8966] RBP: 00007faa3c211e19 R08: 0000000000000000 R09: 0000000000000000
[  164.544316][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.544321][ T8966] R13: 00007faa3c3b6038 R14: 00007faa3c3b5fa0 R15: 00007ffce1a07978
[  164.544332][ T8966]  </TASK>
[  164.544428][    C0] vkms_vblank_simulate: vblank timer overrun
[  164.675459][    C0] vkms_vblank_simulate: vblank timer overrun
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  164.758739][ T8032] ocfs2: Unmounting device (7,6) on (node local)
[  165.028437][ T5875] hsr_slave_0: left promiscuous mode
[  165.034413][ T5875] hsr_slave_1: left promiscuous mode
[  165.036939][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.039852][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.052146][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.061184][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.070993][ T5875] veth1_macvtap: left promiscuous mode
[  165.073255][ T5875] veth0_macvtap: left promiscuous mode
[  165.075411][ T5875] veth1_vlan: left promiscuous mode
[  165.077499][ T5875] veth0_vlan: left promiscuous mode
[  165.277545][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  165.306003][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  165.910148][ T5875] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.965858][ T5875] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.028952][ T5875] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.066626][ T5875] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.142721][ T5875] bridge_slave_1: left allmulticast mode
[  166.144525][ T5875] bridge_slave_1: left promiscuous mode
[  166.146310][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.149608][ T5875] bridge_slave_0: left allmulticast mode
[  166.153161][ T5875] bridge_slave_0: left promiscuous mode
[  166.154968][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.225545][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.230551][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.235030][ T5875] bond0 (unregistering): Released all slaves
[  166.314611][ T5875] bond0 (unregistering): Released all slaves
[  166.497254][ T5875] hsr_slave_0: left promiscuous mode
[  166.501531][ T5875] hsr_slave_1: left promiscuous mode
[  166.503776][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.506328][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.509550][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.512393][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.516703][ T5875] veth1_macvtap: left promiscuous mode
[  166.518389][ T5875] veth0_macvtap: left promiscuous mode
[  166.520118][ T5875] veth1_vlan: left promiscuous mode
[  166.522330][ T5875] veth0_vlan: left promiscuous mode
[  166.655782][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  166.676126][ T5875] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
06:32:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000277d RDI=000000000000277e RBP=00000000000003f8 RSP=ffffc90006b968f0
R8 =ffff888106790237 R9 =1ffff11020cf2046 R10=dffffc0000000000 R11=ffffffff854e7320
R12=dffffc0000000000 R13=ffffffff99af18cd R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e739c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faa3a3f66c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561be2ab15b8 CR3=000000003fc76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=622d383864342d63 6666352d63333536
XMM06=656431626632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=ff00ff00ffffffff ffffffffffffffff XMM09=0031003700000000 363a37622f396533
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b4625e3 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff888024109cc0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88802d9255f8 RSP=ffffc90002f0fa20
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff8b4624e0
R12=dffffc0000000000 R13=ffffffff8b4625b2 R14=ffff888030b54d80 R15=00000000000002bf
RIP=ffffffff8b4625f7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000020241 CR3=0000000121ff0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f99a4b87498 00007f99a4b87470 XMM03=00007f99a4b874a8 00007f99a4b874a0
XMM04=00007f99a56ed100 00007f99a4b87460 XMM05=00007f99a4b87478 00007f99a4b874c0
XMM06=00007f99a4b874b8 00007f99a4b874b0 XMM07=00007f99a4b874a8 00007f99a4b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f99a4a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
