last executing test programs:

3m19.609850699s ago: executing program 2 (id=1263):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4454, &(0x7f0000008900)="$eJzs3c9vHFcdAPDvTBxip01wSg9FQmIlKvFTlt0T4Eo4jhPXbkxQoD1w2aztbWJYeyN7jTj0YG6VOCFxQBwqkLj5VFniwqX8CVw4lnMlOHBBQqow2p1ZxzPerReza9fR53PY2Xnzfnzt787zm0ibl+ZaTzZ2Khs7ldpWpbn2zs5rlZ81G7ub9UjPSc/xr57f+AxmFJ+TT+vzj0OLnF4e3Ln3w7dfi/jz+l8/Pjw8PIy2sehp5tj7f/3z3bXjx6601Kbdb4+urvYe4Sx+HBEvn4ir7UpEjEdEEhG387L5/DgRETciYi4i3n73l48qQ4rmg4/qr1c/WXnvYPbV5f33D3r97Jkk4reNL37r8ebfv3Jl9m/f6N/jn14YUmgAAAAAAAAAAAAAAAAAAFwCiw8fvPWD6Zn4MImx/eTk93UX82O/78ceDs2XPy3Mr98c2k8MAAAAAAAAAAAAAAAAAAAAnz3Pvv9fSV7q8f3/hfw416f94fdOG2FzKHEyGkvff7Bwd3om3/89OSrvvvt2/uYft6/ErR77vpf3f79d6r/3/u/J0OLvxtcddzKSdKpwnqZTUxG/zzd+fyW5njaaO61vvtPc3VofWhiXVjH/2e79hezkG/oPmP90vtR/n/3/h+gLJz5N7fNHw/uIPdeK+b/St94ffpEMdP/fKbU7j/xzdsX8j3XKJo5XmMsmgHb+fzV2ev4XSv2PKv83I6KStGOtFGaA9hqmXd5vvUJRMf9XO2WFqTP/Rfa7//9dyv/dUv8XNf/vlf8Q0VMx/5/rlI0XalzrvHbyn55+/98r9X8R+W/Hv5cVHo527MuvmP8s1zFWqNL5TQ46/y+W+u+b/2v/X9xvpXmcN5PsE3A9K99PsvJ+/18dRcX8j5+4/uz5Lx1o/fdGqf15Pf91x+0+/3Wn/68l2fMfvRXzP9G33qD3/1Kp3ajn/7nO+o+zKuY/m0SLa+fJzuug+V8u9T+q/HeeSsa7+X82n/znWlb+O+u/gRTz/0JWmB6vsdd57az/ktPX/2+W+r+I9V87/r10tKM+L4r5f7FvvXb+/zLA3//7pXajz3/EtH/rO7Ni/m/0rde5/8dPz/9Kqd2o8//VUXYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAnM58fJSNKpwnmaTk1F3MnPX4nryWptvbraaK79dCdiIS+vxEvJ40Zztdaobmw11+vVWqPRXIu4m19/OcaTnUazVd2sPb131NdE8qRe226t1mutiFjMy78UN7p9rW60NmtPI+KNo2ufT5vbT5/UtqrrG9vfnZ6eno6loxhuJfWft+pbrWz07GrE8lHbyeRYcJ3Lbx7F8mLyk+bu9lat0Sm/f6xNo7lWaxxrs5Jf+3XcSlrbu1trtVa92mg+7o53keby48LSwx89vD9z4vqjJDvOn29YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPPpz9zm8iYiw7SyNirvsm6VX/g4/qr1c/WXnvYPbV5f33Dz7uVw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWGXjlETCKIwAL+ZFEkgRY6Rakm6tBsCISmyIeAJ9BgeRo/iJbyDhYWthQiyy8q6C9to9X3Ng/mZeQ/mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDO1381+Xt9i0jxcLiPWM3Wm/P8p66Lj/77dzeYkev5/q0+2z9MF/l7fbQt8ynd7+bT6KmNZWdPuvvU9nmKiMfBuYb2bWi+pu9zpFxERFnnLynnohj3FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH4FAAD//1M1Hgg=")

3m19.177201594s ago: executing program 2 (id=1276):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8080, &(0x7f00000000c0)=ANY=[], 0x0, 0x31b, &(0x7f0000001300)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4894, 0x0, 0x0)

3m18.595572622s ago: executing program 2 (id=1293):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m18.449531312s ago: executing program 2 (id=1297):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0xc8)

3m18.264959945s ago: executing program 2 (id=1301):
r0 = epoll_create1(0x80000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000000})

3m17.983832175s ago: executing program 2 (id=1302):
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x1000010, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x1fb, &(0x7f0000000280)="$eJzskr9rFEEUx7+zO7e3kYQcciKKIGrQWCS3t9H4o1CwMaggSIQYEDz2LvHw4o/sgd6R4qxS2AgGIUEsBEkKC/EfcAsrsVEIdiGSOkWKNJJz5c2+Xeb+gxTzKe67M/Ped957Nw/DZ2EeQHdnIQAKICSK+PlHQAI4LtQWqnaiLustVofPr1uJRqx/WbsX2lPTgKif3Bi3osPVE6KA/uLu900EGLyPS+9vfvp1J7e0fnD741eKv3G39QXiTHXww7vPr68tDyh7cW+afHbjxMeOjq24ZATgzd7UxqY8gmLqVV9aP+T+C3JIeTsD4a24AEa/jSxf8QZeWewZttqPKo1GbT68+tLCtrrq985CQB8PAMRxHNMezWcCgB5D7a9pMUcl8pMAbMRZjJRZESg1556WwlZ7pD5Xma3N1h77/ti4d87zzvulmXqj5tEvwNNU6TxBkJ7lMvqoBJGcU4t7HHMAvQitND4XfVr5jvbXDZ/qzbW03FQFoiw3z3E0gkmcBo32eUdou0PKRUI1NgEBmxdlqdWX3OWqg9HgSaO6COqN01YhM4/yFnLZwtcXYxc7admLrEOJZL2vsm6xpi86falSOVj8noc7gIMXlWZzvuwAa/24/SM5UXu+k30VOvrA6NaC3dvcZRsGg8FgMBgMBoPBsG/4HwAA//8zaZvI")
mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0)

3m17.924755535s ago: executing program 32 (id=1302):
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x1000010, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x1fb, &(0x7f0000000280)="$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")
mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0)

3m13.40302531s ago: executing program 3 (id=1353):
r0 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0x3d}, &(0x7f0000000040)='./file0/file0\x00', 0xff52})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

3m13.402587239s ago: executing program 3 (id=1354):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

3m13.402464264s ago: executing program 3 (id=1355):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

3m13.325101395s ago: executing program 3 (id=1356):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646d6f64653d30303030303030303030303030303030303030303030342c726f6f746469723d30303030303030303030303030303030303030342c696f636861727365743d63703836362c756e686964652c6e6f6164696e6963622c6e6f7374726963742c7569643d666f726765742c006e646058ca3be182cc43baaaf2f77a30538415e6cd8618f1936a4cc4515f736be0cf653e6d411a18db5d62a4cc1dca6e05b1200c3e50270c9902df1ebd79437f74a1b37db2bf05cda881dd68d2c53a4780f47d"], 0x1, 0xc32, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})

3m13.282127513s ago: executing program 3 (id=1357):
socket(0x22, 0x2, 0x2)
close(0x3)

3m13.046196274s ago: executing program 3 (id=1358):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}}, 0x0, 0x5a}, 0x20)

3m12.988797357s ago: executing program 33 (id=1358):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}}, 0x0, 0x5a}, 0x20)

1m12.675301511s ago: executing program 1 (id=3092):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40008333}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

1m11.408423527s ago: executing program 1 (id=3101):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)

1m11.242276803s ago: executing program 1 (id=3102):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb})
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m11.184383317s ago: executing program 1 (id=3104):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000300)='./file2\x00', 0x0)

1m11.057527879s ago: executing program 1 (id=3107):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000000, 0x3)

1m9.935124209s ago: executing program 1 (id=3133):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffbf963}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1m9.883321673s ago: executing program 34 (id=3133):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffbf963}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

39.645534231s ago: executing program 4 (id=3558):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={@default, @default, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @bcast, @null]})

38.609721561s ago: executing program 4 (id=3568):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x2, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0)

38.609479622s ago: executing program 4 (id=3570):
r0 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0x5065, 0x800, 0x0, 0x99})
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001780), 0xa)

38.512461785s ago: executing program 4 (id=3573):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="135bd94a01f90605ee1a7b", 0xb, 0x3018}])

38.412494186s ago: executing program 4 (id=3575):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@lazytime}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")

38.275422763s ago: executing program 4 (id=3576):
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
lseek(r0, 0x0, 0x4)
sendfile(r0, r0, &(0x7f00000001c0), 0x7fa)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00')

38.224219195s ago: executing program 35 (id=3576):
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
lseek(r0, 0x0, 0x4)
sendfile(r0, r0, &(0x7f00000001c0), 0x7fa)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00')

2.004031734s ago: executing program 5 (id=4170):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0)

1.652195871s ago: executing program 5 (id=4174):
bpf$BPF_PROG_TEST_RUN(0x24, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.493743182s ago: executing program 5 (id=4176):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

1.35394332s ago: executing program 5 (id=4179):
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="df545a"], 0x24}}, 0x0)
r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

1.242357158s ago: executing program 5 (id=4182):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

1.148769768s ago: executing program 0 (id=4185):
r0 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
socket$rxrpc(0x21, 0x2, 0xa)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1.09204714s ago: executing program 5 (id=4186):
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="a4724d"], 0x0)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)

344.853224ms ago: executing program 6 (id=4196):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0)

261.980332ms ago: executing program 6 (id=4197):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000180)=0x15)

261.690599ms ago: executing program 6 (id=4198):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0)

261.407203ms ago: executing program 0 (id=4199):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x40}}, 0x0)

183.994352ms ago: executing program 6 (id=4200):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r1, 0x111, 0x6, 0x0, &(0x7f0000000080))

183.378054ms ago: executing program 0 (id=4201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

183.17742ms ago: executing program 0 (id=4202):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000300)="11659a431d82681d9b99675b9e580e21", 0x10}], 0x3, 0x0, 0xd8}}], 0x1, 0x8000)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

182.744587ms ago: executing program 6 (id=4203):
r0 = epoll_create1(0x80000)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000001})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)={0x20000014})

422.092µs ago: executing program 0 (id=4204):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0)

70.823µs ago: executing program 6 (id=4205):
memfd_create(0x0, 0x6)
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}}}, 0x24}}, 0x800)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r7, 0x25, 0x0, @void}, 0x10)
syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=4206):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000000c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$eJzs3U9vG2kZAPBnJnY2abPrLHBYVmJ3xS5KIqjTbOhuhNACEoLTSgvlHkLiRlGcuIqdtokqSMUHQEIIkLjAiQsSHwAJ9SMgpEpwR4BAFbRw4FAYZHuchtROU+LY3eT3k97MO//8PK/jGc87M/IEcG69ERHTEZFlWTYTEaV8epqX2GuX5nIPH9xebpYksuzq35JI8mmd13ohH17MVxuLiK9/NeJbyZNx6zu760vVamUrH59tbCSPsmz30trG0mpltbI5/1K8s/DuwpWFy31p52REvPflP//wez//ynu//szNPyz+dfrb7Qa2HWxHP7WbXmy9Fx2FiNg6jWBDUmi1sO3KkHMBAOBozeP9j0TEJyNiJkox0jqaa5kZbmYAAABAv2RfmIhHSfv6HwAAAHA2pRExER+MlvP7fSciTcvl9j28H4sLabVWb3w6K+2fL5iMYnptrVq5nN87MBnFpDk+l99j2xl/+9D4fES8HBE/KI23xsvLterKUM98AAAAwPlxsdXnT9JO//+fpXb/HwAAADhjJoedAAAAAHDq9P8BAADg7NP/BwAAgDPtg/ffb5as8/zrlRs72+u1G5dWKvX18sb2cnm5tnW9vFqrrd4vRNQ2nvZ61Vrt+mdjc/vWbKNSb8zWd3YXN2rbm43Ftf95BDYAAAAwQC+/fvf3SUTsfW48jYgsOTCvGJGNHFy4MPj8gNOTPsvCfzq9PIDBGxl2AsDQOKSH86s47ASAoXvafqDnzTu/6X8uAADA6Zj6+P71/1ZpGs3nJd1X2RtcdsBpyq//Jz22deAMc/0fzq/OeX/3AcD5UzzqCECnAM689Bib+smv/2fZMyUFAAD03USrJGk57wdMRJqWyxEvth4L8Pis4EsR8btS8YVra9XKXGtK4vQAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWR9dB+GmCM9poPAAAAfDhEpH9J8ud/TZXemjh8fmA0+VepNYyImz+5+qNbS43G1lxz+t/3pzd+nE9/e+CnLwAAAIAuOv30Tj8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrp4YPby50yyLj3vxQRk93iF2KsNRyLYkRc+EcShQPrJREx0of4e3ci4pVu8ZNmWjGZZ3E4fhoR40OOf7EP8eE8u9vc/3yx2/aXxhutYfftr5CXk2rv/0a6xu/s/0Z67P9e7PaC6ZOTXr33y9me8e9EvFrovv/pxE/yN6FwIHazvHnMNn7zG7u7veZlP4uY6vr9k+wv06zNJoXrs/Wd3UtrG0urldXK5vz83DsL7y5cWbg8e22tWsn/do3x/U/86j9Htf9Cj/iTj9vf9f1/65jt//e9Ww8+2q4WD80qxk+zbPrN7p+/V9rxP794KH7nu+9T+b+7OT7Vqe+16we99ovfvvb6Ee1f6dH+sae0f/qY7Z/52nf/eMxFAYABqO/sri9Vq5WtZ6skEXsnWP0ElcgPPgYadHCV8Xgu0uhzZTwGGHTpyM9G5yB2APl8Jw/1XPwL/q8NDQAAOEuS/YP+YWcCAAAAAAAAAAAAAAAAAAAA51d9Z/TI3yc75s/RPczaui5zOObecJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCk/wYAAP//2f7FUg==")
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x80200, 0x9c)

kernel console output (not intermixed with test programs):

94967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1927" name="file1" dev="loop4" ino=260 res=0 errno=0
[  213.462667][ T9367] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.832188][T10836] loop1: detected capacity change from 0 to 32768
[  213.845687][T10836] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  213.889105][   T33] audit: type=1800 audit(1754927926.481:480): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1931" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  213.962654][ T5972] ocfs2: Unmounting device (7,1) on (node local)
[  214.110313][T10850] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1936'.
[  214.205505][T10856] loop1: detected capacity change from 0 to 24
[  215.596741][T10874] netlink: 'syz.4.1945': attribute type 1 has an invalid length.
[  215.890637][T10881] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1948'.
[  215.897965][T10881] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1948'.
[  215.903708][T10883] loop1: detected capacity change from 0 to 2048
[  215.934237][T10883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.195170][T10909] erspan1: entered promiscuous mode
[  216.197078][T10909] erspan1: entered allmulticast mode
[  216.510941][T10938] team0: No ports can be present during mode change
[  216.832955][T10944] loop4: detected capacity change from 0 to 128
[  216.916417][T10944] syz.4.1974: attempt to access beyond end of device
[  216.916417][T10944] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  216.921117][T10944] syz.4.1974: attempt to access beyond end of device
[  216.921117][T10944] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[  216.925507][T10944] syz.4.1974: attempt to access beyond end of device
[  216.925507][T10944] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[  216.930225][T10944] syz.4.1974: attempt to access beyond end of device
[  216.930225][T10944] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[  216.934535][T10944] syz.4.1974: attempt to access beyond end of device
[  216.934535][T10944] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[  216.939219][T10944] syz.4.1974: attempt to access beyond end of device
[  216.939219][T10944] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[  216.943548][T10944] syz.4.1974: attempt to access beyond end of device
[  216.943548][T10944] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[  216.948695][T10944] syz.4.1974: attempt to access beyond end of device
[  216.948695][T10944] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[  216.953124][T10944] syz.4.1974: attempt to access beyond end of device
[  216.953124][T10944] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[  216.957502][T10944] syz.4.1974: attempt to access beyond end of device
[  216.957502][T10944] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[  217.280986][T10950] loop1: detected capacity change from 0 to 8
[  217.296679][T10950] SQUASHFS error: lzo decompression failed, data probably corrupt
[  217.306809][T10950] SQUASHFS error: Failed to read block 0x1d2: -5
[  217.309453][T10950] SQUASHFS error: Unable to read metadata cache entry [1d0]
[  217.312141][T10950] SQUASHFS error: Unable to read directory block [1d0:26]
[  217.597399][   T47] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  217.742882][T10956] loop4: detected capacity change from 0 to 1024
[  217.753686][   T47] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  217.759472][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.762019][   T47] usb 2-1: Product: syz
[  217.766982][   T47] usb 2-1: Manufacturer: syz
[  217.773556][   T47] usb 2-1: SerialNumber: syz
[  217.782084][   T47] usb 2-1: config 0 descriptor??
[  217.791160][   T33] audit: type=1800 audit(1754927930.371:481): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1980" name="file1" dev="loop4" ino=20 res=0 errno=0
[  217.798826][   T47] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  217.801370][   T47] usb 2-1: setting power ON
[  217.802903][   T47] dvb-usb: bulk message failed: -22 (2/0)
[  217.812417][   T47] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  217.823699][   T47] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  217.834715][   T47] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  217.995656][   T47] usb 2-1: USB disconnect, device number 37
[  218.077378][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  218.228828][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.232495][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.235662][    T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  218.239107][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.243738][    T9] usb 5-1: config 0 descriptor??
[  218.573398][ T5970] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  218.573432][ T5970] Bluetooth: hci2: Unknown advertising packet type: 0x5d
[  218.575508][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'.
[  218.576093][ T5970] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  218.584072][ T5970] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  218.589619][ T5970] Bluetooth: hci2: Malformed LE Event: 0x0d
[  218.656645][    T9] cm6533_jd 0003:0D8C:0022.000D: invalid report_size -101239751
[  218.660261][    T9] cm6533_jd 0003:0D8C:0022.000D: item 0 4 1 7 parsing failed
[  218.662925][    T9] cm6533_jd 0003:0D8C:0022.000D: parse failed
[  218.664835][    T9] cm6533_jd 0003:0D8C:0022.000D: probe with driver cm6533_jd failed with error -22
[  218.858023][    T9] usb 5-1: USB disconnect, device number 5
[  219.187719][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1991'.
[  219.480351][T10992] loop1: detected capacity change from 0 to 4096
[  219.491177][T10992] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  219.512401][T10992] ntfs3(loop1): Failed to load $Extend (-22).
[  219.524094][T10992] ntfs3(loop1): Failed to initialize $Extend.
[  219.775547][T11026] ALSA: mixer_oss: invalid OSS volume ''
[  219.885295][T11022] loop1: detected capacity change from 0 to 40427
[  219.893832][T11022] F2FS-fs (loop1): Image doesn't support compression
[  219.896069][T11022] F2FS-fs (loop1): build fault injection rate: 690
[  219.899510][T11022] F2FS-fs (loop1): invalid crc value
[  219.944697][T11022] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  219.951738][T11022] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  220.271091][ T6718] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  220.417771][ T6718] usb 5-1: Using ep0 maxpacket: 32
[  220.429541][ T6718] usb 5-1: unable to get BOS descriptor or descriptor too short
[  220.437617][ T6718] usb 5-1: config 2 has an invalid interface number: 221 but max is 0
[  220.440211][ T6718] usb 5-1: config 2 has no interface number 0
[  220.442147][ T6718] usb 5-1: config 2 interface 221 has no altsetting 0
[  220.448105][ T6718] usb 5-1: string descriptor 0 read error: -22
[  220.450101][ T6718] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  220.453068][ T6718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.462163][ T6718] usb 5-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  220.464339][ T6718] usb 5-1: No valid video chain found.
[  220.710927][ T6718] usb 5-1: USB disconnect, device number 6
[  221.293651][T11074] loop1: detected capacity change from 0 to 16
[  221.307774][T11074] erofs (device loop1): mounted with root inode @ nid 36.
[  221.549339][   T33] audit: type=1800 audit(1754927934.131:482): pid=11090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2034" name="file1" dev="loop1" ino=86 res=0 errno=0
[  222.492916][T11117] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  222.573596][T11121] loop1: detected capacity change from 0 to 512
[  222.580325][T11121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  222.593618][T11121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.654724][T11124] loop1: detected capacity change from 0 to 16
[  222.675961][T11124] erofs (device loop1): mounted with root inode @ nid 36.
[  222.694571][T11124] erofs (device loop1): corrupted dir block 0 @ nid 36
[  223.207456][    T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  223.357429][    T9] usb 2-1: Using ep0 maxpacket: 16
[  223.362137][T11153] loop4: detected capacity change from 0 to 131072
[  223.366388][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  223.370809][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  223.373780][    T9] usb 2-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  223.384928][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.390282][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.392771][    T9] usb 2-1: Product: syz
[  223.394153][    T9] usb 2-1: Manufacturer: syz
[  223.395670][    T9] usb 2-1: SerialNumber: syz
[  223.409244][T11153] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  223.413155][T11153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  223.427388][   T33] audit: type=1800 audit(1754928192.018:483): pid=11153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2068" name="file2" dev="loop4" ino=8 res=0 errno=0
[  223.644807][    T9] usb 2-1: USB disconnect, device number 38
[  223.668509][ T6335] udevd[6335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  224.375684][T11202] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  224.382373][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'.
[  224.860647][T11208] loop4: detected capacity change from 0 to 2048
[  224.893598][T11208] Alternate GPT is invalid, using primary GPT.
[  224.895875][T11208]  loop4: p1 p2 p3
[  224.897157][T11208] loop4: partition table partially beyond EOD, truncated
[  224.918958][ T7556] udevd[7556]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  224.921100][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  224.923524][ T6335] udevd[6335]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  224.955374][T11210] loop4: detected capacity change from 0 to 2048
[  224.959987][T11210] UDF-fs: error (device loop4): udf_read_inode: (ino 1312) failed !bh
[  224.967408][T11210] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  224.971624][T11210] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  224.978270][T11210] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  224.984492][T11210] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  224.990428][T11210] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  224.994553][T11210] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  224.998182][T11210] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  225.047536][T11214] new mount options do not match the existing superblock, will be ignored
[  225.060408][T11214] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  225.142962][T11226] netlink: 'syz.4.2102': attribute type 4 has an invalid length.
[  225.362186][ T6718] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  225.417547][  T794] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  225.577534][  T794] usb 5-1: Using ep0 maxpacket: 32
[  225.583164][ T6718] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.595989][ T6718] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  225.614349][  T794] usb 5-1: config 0 has an invalid interface number: 242 but max is 0
[  225.614451][ T6718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.637441][  T794] usb 5-1: config 0 has no interface number 0
[  225.642185][ T6718] usb 2-1: config 0 descriptor??
[  225.644584][  T794] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=eb.4e
[  225.648880][  T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.652497][  T794] usb 5-1: Product: syz
[  225.653980][  T794] usb 5-1: Manufacturer: syz
[  225.655580][  T794] usb 5-1: SerialNumber: syz
[  225.660308][  T794] usb 5-1: config 0 descriptor??
[  225.867829][  T794] cdc_subset 5-1:0.242: probe with driver cdc_subset failed with error -22
[  226.053158][ T6718] zeroplus 0003:0C12:0005.000E: unknown main item tag 0x0
[  226.058882][ T6718] zeroplus 0003:0C12:0005.000E: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0
[  226.062619][ T6718] zeroplus 0003:0C12:0005.000E: no inputs found
[  226.072819][ T6718] usb 5-1: USB disconnect, device number 7
[  226.257335][    T9] usb 2-1: USB disconnect, device number 39
[  226.903030][T11282] loop1: detected capacity change from 0 to 128
[  226.911706][T11284] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2129'.
[  226.914863][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'.
[  226.918444][T11284] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2129'.
[  226.921574][T11284] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2129'.
[  226.924613][T11284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2129'.
[  226.930878][T11282] FAT-fs (loop1): bogus number of reserved sectors
[  226.933222][T11282] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors)
[  226.936784][T11282] FAT-fs (loop1): Can't find a valid FAT filesystem
[  226.978758][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  227.021352][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'.
[  227.025370][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2133'.
[  227.035315][ T5996] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  227.046029][ T5996] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  227.058159][  T794] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  227.149413][    T9] usb 5-1: Using ep0 maxpacket: 16
[  227.155076][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[  227.167314][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  227.170686][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  227.173807][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  227.179710][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  227.182644][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.185894][    T9] usb 5-1: Product: syz
[  227.187649][    T9] usb 5-1: Manufacturer: syz
[  227.189661][    T9] usb 5-1: SerialNumber: syz
[  227.192785][    T9] usb 5-1: config 0 descriptor??
[  227.195257][T11272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  227.202936][    T9] port100 5-1:0.0: NFC: Could not get supported command types
[  227.261269][T11306] loop1: detected capacity change from 0 to 32768
[  227.264397][T11306] btrfs: Deprecated parameter 'usebackuproot'
[  227.266626][T11306] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  227.270147][T11306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2139 (11306)
[  227.276397][T11306] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.280274][T11306] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  227.291195][ T1132] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  227.295643][T11306] BTRFS error (device loop1): failed to load root extent
[  227.298091][T11306] BTRFS warning (device loop1): try to load backup roots slot 1
[  227.300668][   T27] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  227.309132][T11306] BTRFS warning (device loop1): couldn't read tree root
[  227.311328][T11306] BTRFS warning (device loop1): try to load backup roots slot 2
[  227.313947][   T27] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  227.317707][T11306] BTRFS warning (device loop1): couldn't read tree root
[  227.319924][T11306] BTRFS warning (device loop1): try to load backup roots slot 3
[  227.326754][T11306] BTRFS info (device loop1): rebuilding free space tree
[  227.338396][T11306] BTRFS info (device loop1): disabling free space tree
[  227.340651][T11306] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  227.343778][T11306] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  227.386670][ T5972] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.410922][    T9] usb 5-1: USB disconnect, device number 8
[  227.600238][  T794] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  227.607870][  T794] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  227.797501][ T6718] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  227.949172][ T6718] usb 2-1: unable to get BOS descriptor or descriptor too short
[  227.952301][ T6718] usb 2-1: not running at top speed; connect to a high speed hub
[  227.955501][ T6718] usb 2-1: config 6 has an invalid interface number: 7 but max is 0
[  227.959639][ T6718] usb 2-1: config 6 has no interface number 0
[  227.961613][ T6718] usb 2-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64
[  227.965055][ T6718] usb 2-1: config 6 interface 7 has no altsetting 0
[  227.969635][ T6718] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92
[  227.972530][ T6718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.975146][ T6718] usb 2-1: Product: syz
[  227.976603][ T6718] usb 2-1: Manufacturer: syz
[  227.984898][ T6718] usb 2-1: SerialNumber: syz
[  228.213717][ T6718] usb 2-1: Error in usbnet_get_endpoints (-22)
[  228.227606][ T6718] usb 2-1: USB disconnect, device number 40
[  228.305868][T11354] netlink: 'syz.0.2156': attribute type 1 has an invalid length.
[  228.321982][T11354] 8021q: adding VLAN 0 to HW filter on device bond2
[  228.331209][T11354] bond2: (slave geneve2): making interface the new active one
[  228.334602][T11354] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  228.342798][T11354] bond2: entered promiscuous mode
[  228.344503][T11354] geneve2: entered promiscuous mode
[  228.377620][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  228.527533][    T9] usb 5-1: Using ep0 maxpacket: 16
[  228.530787][    T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  228.533483][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.536667][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.541651][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  228.544629][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.547195][    T9] usb 5-1: Product: syz
[  228.548770][    T9] usb 5-1: Manufacturer: syz
[  228.550336][    T9] usb 5-1: SerialNumber: syz
[  228.959047][    T9] usb 5-1: 0:2 : does not exist
[  228.977538][   T47] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  229.129242][   T47] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  229.132890][   T47] usb 2-1: config 0 has no interface number 0
[  229.137938][   T47] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  229.141694][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.144956][   T47] usb 2-1: Product: syz
[  229.146778][   T47] usb 2-1: Manufacturer: syz
[  229.148848][   T47] usb 2-1: SerialNumber: syz
[  229.152938][   T47] usb 2-1: config 0 descriptor??
[  229.572311][    T9] usb 5-1: USB disconnect, device number 9
[  229.588385][ T6335] udevd[6335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  230.039345][   T47] usb 2-1: Firmware version (0.0) predates our first public release.
[  230.042292][   T47] usb 2-1: Please update to version 0.2 or newer
[  230.062815][T11379] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2167'.
[  230.083997][   T47] usb 2-1: USB disconnect, device number 41
[  230.349128][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  230.507396][    T9] usb 5-1: Using ep0 maxpacket: 16
[  230.516554][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.523899][    T9] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  230.529382][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.541020][    T9] usb 5-1: config 0 descriptor??
[  230.585031][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'.
[  230.756243][T11402] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2177'.
[  230.841949][T11410] overlayfs: failed to clone lowerpath
[  230.961294][    T9] gt683r_led 0003:1770:FF00.000F: unknown main item tag 0x0
[  230.971170][    T9] gt683r_led 0003:1770:FF00.000F: item fetching failed at offset 1/5
[  230.979704][    T9] gt683r_led 0003:1770:FF00.000F: hid parsing failed
[  230.984836][    T9] gt683r_led 0003:1770:FF00.000F: probe with driver gt683r_led failed with error -22
[  231.107416][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  231.323324][   T47] usb 5-1: USB disconnect, device number 10
[  231.657163][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'.
[  231.665312][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'.
[  231.715580][T11423] loop1: detected capacity change from 0 to 1024
[  231.723085][T11423] hfsplus: bad catalog entry type
[  231.740658][ T4857] hfsplus: b-tree write err: -5, ino 4
[  231.761253][T11427] IPv6: Can't replace route, no match found
[  232.496023][T11476] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2
[  232.505726][  T639] Bluetooth: hci3: Frame reassembly failed (-84)
[  232.509180][  T639] Bluetooth: hci3: Frame reassembly failed (-84)
[  232.987408][   T47] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  233.138891][   T47] usb 2-1: config 162 has an invalid interface number: 35 but max is 0
[  233.141630][   T47] usb 2-1: config 162 has no interface number 0
[  233.143658][   T47] usb 2-1: config 162 interface 35 has no altsetting 0
[  233.147667][   T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=b9.11
[  233.150641][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.153249][   T47] usb 2-1: Product: syz
[  233.154583][   T47] usb 2-1: Manufacturer: syz
[  233.156051][   T47] usb 2-1: SerialNumber: syz
[  233.367512][   T47] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:162.35/input/input16
[  233.373706][ T5280] bcm5974 2-1:162.35: could not read from device
[  233.380116][   T47] usb 2-1: USB disconnect, device number 42
[  233.382500][ T5280] bcm5974 2-1:162.35: could not read from device
[  233.393779][ T6335] udevd[6335]: setting owner of /dev/bus/usb/002/042 to uid=0, gid=0 failed: No such file or directory
[  234.042316][T11504] loop1: detected capacity change from 0 to 32768
[  234.124665][   T33] audit: type=1326 audit(1754928202.718:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.131617][   T33] audit: type=1326 audit(1754928202.718:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.139084][   T33] audit: type=1326 audit(1754928202.718:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.145988][   T33] audit: type=1326 audit(1754928202.718:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.154346][   T33] audit: type=1326 audit(1754928202.718:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.161756][   T33] audit: type=1326 audit(1754928202.718:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.170011][   T33] audit: type=1326 audit(1754928202.718:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.178057][   T33] audit: type=1326 audit(1754928202.718:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.194075][   T33] audit: type=1326 audit(1754928202.718:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.209613][   T33] audit: type=1326 audit(1754928202.728:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.1.2224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c74f8ebe9 code=0x7ffc0000
[  234.557982][ T5976] Bluetooth: hci3: command 0x1003 tx timeout
[  234.562449][ T5970] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  234.657114][T11522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2231'.
[  234.987721][ T6053] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  235.121156][T11538] binder: 11537:11538 ioctl 400c620e 200000000000 returned -22
[  235.160129][ T6053] usb 5-1: Using ep0 maxpacket: 32
[  235.175393][ T6053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.184451][ T6053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.188502][ T6053] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  235.191567][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.199120][ T6053] usb 5-1: config 0 descriptor??
[  235.654415][ T6053] ft260 0003:0403:6030.0010: unknown main item tag 0x7
[  235.864308][ T6053] ft260 0003:0403:6030.0010: chip code: 6424 8183
[  236.076148][ T6053] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[  236.280631][ T6053] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup
[  236.283825][ T6053] ft260 0003:0403:6030.0010: i2c bus error: 0x22
[  236.484795][ T6053] ft260 0003:0403:6030.0010: failed to reset I2C controller: -71
[  236.509639][ T6053] usb 5-1: USB disconnect, device number 11
[  236.757412][    T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  236.908983][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.914931][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  236.919894][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  236.922853][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.926920][    T9] usb 2-1: config 0 descriptor??
[  237.036092][T11584] loop4: detected capacity change from 0 to 512
[  237.040666][T11584] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  237.051729][T11584] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  237.054430][T11584] System zones: 0-2, 18-18, 34-34
[  237.059510][T11584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.063631][T11584] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.086774][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.255376][T11596] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2263'.
[  237.401160][    T9] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[  237.757340][   T47] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  237.917398][   T47] usb 5-1: Using ep0 maxpacket: 8
[  237.920577][   T47] usb 5-1: config 2 has an invalid interface number: 206 but max is 0
[  237.923193][   T47] usb 5-1: config 2 has no interface number 0
[  237.925130][   T47] usb 5-1: config 2 interface 206 has no altsetting 0
[  237.927682][   T47] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=b1.2a
[  237.930527][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.032612][    T9] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device
[  238.035668][    T9] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse
[  238.041240][    T9] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -71
[  238.046646][    T9] usb 2-1: USB disconnect, device number 43
[  238.144751][  T794] usb 5-1: USB disconnect, device number 12
[  238.595540][T11611] netlink: 'syz.1.2268': attribute type 1 has an invalid length.
[  238.732051][T11617] loop4: detected capacity change from 0 to 2048
[  238.760126][T11617] hpfs: Bad magic ... probably not HPFS
[  238.784009][T11625] loop1: detected capacity change from 0 to 512
[  238.786958][T11625] EXT4-fs: Ignoring removed nomblk_io_submit option
[  238.790263][T11625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  238.793487][T11625] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  238.821841][T11625] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2275: Allocating blocks 41-42 which overlap fs metadata
[  238.845676][T11625] EXT4-fs (loop1): Remounting filesystem read-only
[  238.848487][T11625] EXT4-fs (loop1): 1 truncate cleaned up
[  238.851624][T11625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.870978][T11629] loop4: detected capacity change from 0 to 4096
[  238.890280][ T5972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.909968][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  240.000966][T11656] netlink: 'syz.1.2285': attribute type 4 has an invalid length.
[  240.004241][T11656] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2285'.
[  240.016124][T11656] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  240.397470][T11680] loop1: detected capacity change from 0 to 4096
[  240.422869][T11680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.442414][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  240.442425][   T33] audit: type=1800 audit(1754928209.028:494): pid=11680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2296" name="bus" dev="loop1" ino=18 res=0 errno=0
[  240.461337][ T5972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.492574][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2299'.
[  240.503891][T11686] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  240.512174][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2300'.
[  240.514949][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2300'.
[  240.522798][T11690] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  240.606796][T11698] loop1: detected capacity change from 0 to 512
[  240.614492][T11698] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  240.958467][T11707] loop1: detected capacity change from 0 to 64
[  242.029307][T11723] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2314'.
[  242.069222][T11729] loop1: detected capacity change from 0 to 16
[  242.079989][T11730] netlink: 'syz.4.2317': attribute type 1 has an invalid length.
[  242.084049][T11729] erofs (device loop1): mounted with root inode @ nid 36.
[  242.281014][T11736] loop1: detected capacity change from 0 to 32768
[  242.376019][T11748] netlink: 'syz.4.2326': attribute type 2 has an invalid length.
[  242.379959][T11748] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.2326'.
[  242.629087][ T6053] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  242.786505][ T6053] usb 2-1: Using ep0 maxpacket: 8
[  242.793271][ T6053] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  242.796151][ T6053] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  242.803424][ T6053] usb 2-1: Product: syz
[  242.804851][ T6053] usb 2-1: Manufacturer: syz
[  242.806408][ T6053] usb 2-1: SerialNumber: syz
[  242.817242][ T6053] usb 2-1: config 0 descriptor??
[  242.823288][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'.
[  243.003699][T11803] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2351'.
[  243.006802][T11803] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2351'.
[  243.186267][T11814] loop4: detected capacity change from 0 to 256
[  243.230654][T11816] overlayfs: failed to resolve './file1metacopy=off': -2
[  243.729249][ T6718] usb 2-1: USB disconnect, device number 44
[  244.444993][T11830] loop1: detected capacity change from 0 to 1024
[  244.458271][T11830] EXT4-fs: Ignoring removed bh option
[  244.494126][T11830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.569779][ T5972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.184211][T11850] program syz.4.2369 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  245.259572][T11856] loop4: detected capacity change from 0 to 128
[  245.271315][T11856] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  245.281828][T11856] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  245.306880][ T9367] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  245.563195][T11877] ieee802154 phy0 wpan0: encryption failed: -22
[  245.738356][ T6718] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  245.912732][ T6718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.916594][ T6718] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  245.920663][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.940151][ T6718] usb 5-1: config 0 descriptor??
[  246.385646][ T6718] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0
[  246.402415][ T6718] playstation 0003:054C:0BA0.0012: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0
[  246.663030][ T6718] playstation 0003:054C:0BA0.0012: Invalid byte count transferred, expected 16 got 9
[  246.666472][ T6718] playstation 0003:054C:0BA0.0012: Failed to retrieve DualShock4 pairing info: -22
[  246.669651][ T6718] playstation 0003:054C:0BA0.0012: Failed to get MAC address from DualShock4
[  246.674320][ T6718] playstation 0003:054C:0BA0.0012: Failed to create dualshock4.
[  246.712875][ T6718] playstation 0003:054C:0BA0.0012: probe with driver playstation failed with error -22
[  246.953929][ T6718] usb 5-1: USB disconnect, device number 13
[  247.648811][T11920] loop4: detected capacity change from 0 to 40427
[  247.662623][T11920] F2FS-fs (loop4): invalid crc value
[  247.730822][T11920] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  247.735617][T11920] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  247.747190][   T33] audit: type=1800 audit(1754928216.338:495): pid=11920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2400" name="file1" dev="loop4" ino=10 res=0 errno=0
[  247.749627][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'.
[  247.774187][ T9367] bio_check_eod: 12194 callbacks suppressed
[  247.774201][ T9367] syz-executor: attempt to access beyond end of device
[  247.774201][ T9367] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  247.784027][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  247.784039][ T9367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.784044][ T9367] Call Trace:
[  247.784047][ T9367]  <TASK>
[  247.784051][ T9367]  dump_stack_lvl+0x189/0x250
[  247.784067][ T9367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.784076][ T9367]  ? __pfx_queue_work_on+0x10/0x10
[  247.784085][ T9367]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  247.784111][ T9367]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.784127][ T9367]  f2fs_handle_critical_error+0x37c/0x540
[  247.784141][ T9367]  f2fs_write_end_io+0x886/0xb60
[  247.784160][ T9367]  __submit_merged_bio+0x27a/0x6a0
[  247.784172][ T9367]  __submit_merged_write_cond+0x255/0x530
[  247.784184][ T9367]  f2fs_write_data_pages+0x261d/0x3000
[  247.784193][ T9367]  ? __lock_acquire+0xab9/0xd20
[  247.784220][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.784250][ T9367]  ? __mod_zone_page_state+0xd7/0x140
[  247.784266][ T9367]  ? folios_put_refs+0x560/0x640
[  247.784279][ T9367]  ? __pfx_folios_put_refs+0x10/0x10
[  247.784285][ T9367]  ? rcu_is_watching+0x15/0xb0
[  247.784298][ T9367]  ? __lock_acquire+0xab9/0xd20
[  247.784316][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.784327][ T9367]  do_writepages+0x32e/0x550
[  247.784343][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  247.784354][ T9367]  filemap_fdatawrite+0x199/0x240
[  247.784364][ T9367]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  247.784401][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  247.784412][ T9367]  f2fs_sync_dirty_inodes+0x31f/0x830
[  247.784429][ T9367]  f2fs_write_checkpoint+0x95a/0x1df0
[  247.784451][ T9367]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  247.784484][ T9367]  ? kill_f2fs_super+0x298/0x6c0
[  247.784497][ T9367]  kill_f2fs_super+0x2c3/0x6c0
[  247.784511][ T9367]  ? __pfx_kill_f2fs_super+0x10/0x10
[  247.784520][ T9367]  ? radix_tree_delete_item+0x2b6/0x400
[  247.784532][ T9367]  ? shrinker_free+0x2ce/0x3e0
[  247.784541][ T9367]  deactivate_locked_super+0xbc/0x130
[  247.784551][ T9367]  cleanup_mnt+0x425/0x4c0
[  247.784559][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.784569][ T9367]  task_work_run+0x1d4/0x260
[  247.784581][ T9367]  ? __pfx_task_work_run+0x10/0x10
[  247.784590][ T9367]  ? __x64_sys_umount+0x122/0x160
[  247.784602][ T9367]  ? exit_to_user_mode_loop+0x40/0x110
[  247.784614][ T9367]  exit_to_user_mode_loop+0xec/0x110
[  247.784624][ T9367]  do_syscall_64+0x2bd/0x3b0
[  247.784633][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.784641][ T9367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.784648][ T9367]  ? exc_page_fault+0x9f/0xf0
[  247.784657][ T9367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.784664][ T9367] RIP: 0033:0x7f653d38ff17
[  247.784672][ T9367] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  247.784678][ T9367] RSP: 002b:00007ffc0e4dca68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  247.784687][ T9367] RAX: 0000000000000000 RBX: 00007f653d411c05 RCX: 00007f653d38ff17
[  247.784692][ T9367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0e4dcb20
[  247.784696][ T9367] RBP: 00007ffc0e4dcb20 R08: 0000000000000000 R09: 0000000000000000
[  247.784700][ T9367] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0e4ddbb0
[  247.784705][ T9367] R13: 00007f653d411c05 R14: 000000000003c75c R15: 00007ffc0e4ddbf0
[  247.784718][ T9367]  </TASK>
[  247.785360][ T9367] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.149404][T11947] loop4: detected capacity change from 0 to 4096
[  248.152879][T11947] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  248.331932][T11957] comedi comedi0: Minor -2147450879 is invalid!
[  248.477134][T11963] loop4: detected capacity change from 0 to 32768
[  248.483523][T11963] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2417 (11963)
[  248.496565][T11963] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  248.500862][T11963] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  248.504626][T11963] BTRFS info (device loop4): disk space caching is enabled
[  248.507782][T11963] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  248.549813][T11963] BTRFS info (device loop4): rebuilding free space tree
[  248.572209][T11963] BTRFS info (device loop4): disabling free space tree
[  248.574951][T11963] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  248.578934][T11963] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  248.597080][T11963] BTRFS info (device loop4): balance: start -d -m
[  248.602825][T11963] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  248.625483][T11963] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  248.708508][T11963] BTRFS info (device loop4): found 9 extents, stage: move data extents
[  248.741823][T11963] BTRFS info (device loop4): found 1 extents, stage: update data pointers
[  248.764112][T11989] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2421'.
[  248.764945][T11963] BTRFS info (device loop4): balance: paused
[  248.821538][ T9367] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  248.898917][T11995] loop1: detected capacity change from 0 to 2048
[  248.940399][T11996] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  248.969173][T11996] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  248.973529][T11996] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  248.978361][T11996] Remounting filesystem read-only
[  249.010156][ T5972] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  249.023192][T11998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2423'.
[  249.026090][T11998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2423'.
[  249.674488][T12017] netlink: 'syz.4.2434': attribute type 28 has an invalid length.
[  249.983803][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2440'.
[  249.987104][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2440'.
[  250.350611][T12045] loop1: detected capacity change from 0 to 16
[  250.362766][T12045] erofs (device loop1): mounted with root inode @ nid 36.
[  250.435986][T12048] erofs (device loop1): readahead error at folio 2 @ nid 89
[  250.449341][ T7252] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[8192]
[  250.455458][T12048] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[8192]
[  250.458841][T12048] erofs (device loop1): read error -117 @ 1 of nid 89
[  250.461560][   T33] audit: type=1800 audit(1754928219.058:496): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2447" name="file3" dev="loop1" ino=89 res=0 errno=0
[  250.920345][T12054] netlink: 'syz.4.2451': attribute type 12 has an invalid length.
[  250.924194][T12054] netlink: 'syz.4.2451': attribute type 29 has an invalid length.
[  250.929172][T12054] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2451'.
[  250.932835][T12054] netlink: 'syz.4.2451': attribute type 2 has an invalid length.
[  250.936211][T12054] netlink: 'syz.4.2451': attribute type 3 has an invalid length.
[  250.952307][T12054] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2451'.
[  251.076501][T12060] loop4: detected capacity change from 0 to 512
[  251.084134][T12060] EXT4-fs: Ignoring removed nobh option
[  251.126893][T12060] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2454: corrupted inode contents
[  251.172373][T12060] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2454: mark_inode_dirty error
[  251.200654][T12060] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2454: corrupted inode contents
[  251.223554][T12060] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2454: mark_inode_dirty error
[  251.254938][T12060] Quota error (device loop4): write_blk: dquota write failed
[  251.267614][T12060] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  251.276103][T12060] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2454: Failed to acquire dquot type 0
[  251.300698][T12060] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2454: corrupted inode contents
[  251.305385][T12060] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2454: mark_inode_dirty error
[  251.318832][T12060] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2454: corrupted inode contents
[  251.329517][T12060] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2454: mark_inode_dirty error
[  251.340713][T12060] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2454: corrupted inode contents
[  251.352855][T12060] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  251.358193][T12060] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2454: corrupted inode contents
[  251.370045][T12060] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2454: mark_inode_dirty error
[  251.374227][T12060] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  251.395244][T12060] EXT4-fs (loop4): 1 truncate cleaned up
[  251.411726][T12060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.429023][T12060] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.513660][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.830522][T12077] loop4: detected capacity change from 0 to 512
[  251.836310][T12077] ext4: Unknown parameter 'fsuuid'
[  251.846233][T12077] tmpfs: Bad value for 'mpol'
[  251.899288][T12080] syz_tun: entered allmulticast mode
[  251.910476][T12079] syz_tun: left allmulticast mode
[  251.940501][T12086] comedi: No check for data length of config insn id 4095 is implemented
[  251.951230][T12086] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  251.954126][T12086] comedi: Assuming n=15 is correct
[  252.205649][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'.
[  252.482655][T12121] loop1: detected capacity change from 0 to 40427
[  252.488577][T12121] F2FS-fs (loop1): invalid crc value
[  252.515919][T12121] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  252.520086][T12121] F2FS-fs (loop1): Start checkpoint disabled!
[  252.523087][T12121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  252.563682][T12131] loop4: detected capacity change from 0 to 256
[  252.580136][T12131] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  252.585481][T12131] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  252.610606][   T33] audit: type=1800 audit(1754928221.208:497): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2480" name="bus" dev="loop1" ino=10 res=0 errno=0
[  252.633318][T12132] syz.1.2480: attempt to access beyond end of device
[  252.633318][T12132] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  252.655539][T12132] syz.1.2480: attempt to access beyond end of device
[  252.655539][T12132] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.680020][T12132] syz.1.2480: attempt to access beyond end of device
[  252.680020][T12132] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.694518][T12132] syz.1.2480: attempt to access beyond end of device
[  252.694518][T12132] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.709686][T12132] syz.1.2480: attempt to access beyond end of device
[  252.709686][T12132] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.729305][T12132] syz.1.2480: attempt to access beyond end of device
[  252.729305][T12132] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  252.739192][T12132] syz.1.2480: attempt to access beyond end of device
[  252.739192][T12132] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.748628][T12132] syz.1.2480: attempt to access beyond end of device
[  252.748628][T12132] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  252.754007][T12132] syz.1.2480: attempt to access beyond end of device
[  252.754007][T12132] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  252.779354][T12132] bio_check_eod: 73 callbacks suppressed
[  252.779365][T12132] syz.1.2480: attempt to access beyond end of device
[  252.779365][T12132] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  252.787035][T12132] syz.1.2480: attempt to access beyond end of device
[  252.787035][T12132] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  252.806093][T12132] syz.1.2480: attempt to access beyond end of device
[  252.806093][T12132] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  252.826545][T12132] syz.1.2480: attempt to access beyond end of device
[  252.826545][T12132] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  252.839437][T12132] syz.1.2480: attempt to access beyond end of device
[  252.839437][T12132] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  252.853229][T12132] syz.1.2480: attempt to access beyond end of device
[  252.853229][T12132] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  252.864542][T12132] syz.1.2480: attempt to access beyond end of device
[  252.864542][T12132] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  252.879910][T12132] syz.1.2480: attempt to access beyond end of device
[  252.879910][T12132] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  252.900787][T12132] syz.1.2480: attempt to access beyond end of device
[  252.900787][T12132] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  252.913568][T12132] syz.1.2480: attempt to access beyond end of device
[  252.913568][T12132] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  252.920047][T12141] loop4: detected capacity change from 0 to 1024
[  253.848233][ T6718] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  254.019286][ T6718] usb 5-1: Using ep0 maxpacket: 16
[  254.023515][ T6718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.026825][ T6718] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.031955][ T6718] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  254.035114][ T6718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.087389][ T6718] usb 5-1: Product: syz
[  254.088785][ T6718] usb 5-1: Manufacturer: syz
[  254.090325][ T6718] usb 5-1: SerialNumber: syz
[  254.102569][T12152] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  254.307222][ T6718] usb 5-1: 0:2 : does not exist
[  254.314924][ T6718] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  254.333267][ T6718] usb 5-1: USB disconnect, device number 14
[  254.333622][T12172] trusted_key: syz.0.2502 sent an empty control message without MSG_MORE.
[  254.350420][ T6335] udevd[6335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  254.451375][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'.
[  254.625491][   T29] CPU: 0 UID: 0 PID: 29 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  254.625506][   T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.625511][   T29] Workqueue: writeback wb_workfn (flush-7:1)
[  254.625525][   T29] Call Trace:
[  254.625529][   T29]  <TASK>
[  254.625533][   T29]  dump_stack_lvl+0x189/0x250
[  254.625546][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.625554][   T29]  ? __pfx_queue_work_on+0x10/0x10
[  254.625562][   T29]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  254.625571][   T29]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.625588][   T29]  f2fs_handle_critical_error+0x37c/0x540
[  254.625607][   T29]  f2fs_write_end_io+0x886/0xb60
[  254.625633][   T29]  __submit_merged_bio+0x27a/0x6a0
[  254.625652][   T29]  __submit_merged_write_cond+0x255/0x530
[  254.625667][   T29]  f2fs_write_data_pages+0x261d/0x3000
[  254.625690][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  254.625705][   T29]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  254.625729][   T29]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  254.625742][   T29]  ? trace_f2fs_writepages+0x7f/0x200
[  254.625751][   T29]  ? f2fs_write_node_pages+0x478/0x6e0
[  254.625762][   T29]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  254.625776][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  254.625786][   T29]  do_writepages+0x32e/0x550
[  254.625797][   T29]  ? reacquire_held_locks+0x127/0x1d0
[  254.625805][   T29]  ? writeback_sb_inodes+0x384/0x1010
[  254.625818][   T29]  __writeback_single_inode+0x145/0xff0
[  254.625827][   T29]  ? do_raw_spin_unlock+0x4d/0x240
[  254.625837][   T29]  writeback_sb_inodes+0x6c7/0x1010
[  254.625884][   T29]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  254.625912][   T29]  ? rcu_is_watching+0x15/0xb0
[  254.625923][   T29]  wb_writeback+0x43b/0xaf0
[  254.625936][   T29]  ? queue_io+0x391/0x590
[  254.625946][   T29]  ? __pfx_wb_writeback+0x10/0x10
[  254.625958][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.625968][   T29]  wb_workfn+0x409/0xef0
[  254.625981][   T29]  ? __pfx_wb_workfn+0x10/0x10
[  254.625991][   T29]  ? __lock_acquire+0xab9/0xd20
[  254.626005][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  254.626015][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.626021][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  254.626028][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  254.626035][   T29]  process_scheduled_works+0xae1/0x17b0
[  254.626054][   T29]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.626073][   T29]  worker_thread+0x8a0/0xda0
[  254.626091][   T29]  kthread+0x711/0x8a0
[  254.626101][   T29]  ? __pfx_worker_thread+0x10/0x10
[  254.626108][   T29]  ? __pfx_kthread+0x10/0x10
[  254.626117][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.626125][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.626132][   T29]  ? __pfx_kthread+0x10/0x10
[  254.626141][   T29]  ret_from_fork+0x3fc/0x770
[  254.626150][   T29]  ? __pfx_ret_from_fork+0x10/0x10
[  254.626160][   T29]  ? __switch_to_asm+0x39/0x70
[  254.626168][   T29]  ? __switch_to_asm+0x33/0x70
[  254.626177][   T29]  ? __pfx_kthread+0x10/0x10
[  254.626186][   T29]  ret_from_fork_asm+0x1a/0x30
[  254.626202][   T29]  </TASK>
[  254.626205][   T29] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  255.054086][T12214] loop4: detected capacity change from 0 to 128
[  255.066127][T12214] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  255.070267][T12214] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  255.095447][ T9367] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  255.270679][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.272752][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.416963][T12230] loop4: detected capacity change from 0 to 512
[  255.429813][T12230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  255.448455][T12230] EXT4-fs (loop4): 1 truncate cleaned up
[  255.451009][T12230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.484491][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.533894][T12235] futex_wake_op: syz.4.2531 tries to shift op by -1; fix this program
[  255.824294][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'.
[  255.860671][T12246] syz.4.2536 (12246) used obsolete PPPIOCDETACH ioctl
[  255.949504][T12253] loop4: detected capacity change from 0 to 512
[  255.962204][T12253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  255.973239][T12253] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.001011][T12253] Quota error (device loop4): write_blk: dquota write failed
[  256.005225][T12253] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  256.008757][T12253] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2539: Failed to acquire dquot type 1
[  256.029876][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  256.126276][T12267] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2546'.
[  256.547420][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  257.200687][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'.
[  257.203683][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'.
[  257.206697][T12293] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2557'.
[  257.320712][T12305] netem: change failed
[  257.391080][T12315] loop4: detected capacity change from 0 to 2048
[  257.404737][T12315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.412232][ T6053] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  257.415437][T12315] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.474522][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.568406][ T6053] usb 2-1: Using ep0 maxpacket: 8
[  257.580981][ T6053] usb 2-1: config 0 has an invalid interface number: 80 but max is 0
[  257.583685][ T6053] usb 2-1: config 0 has no interface number 0
[  257.585874][ T6053] usb 2-1: New USB device found, idVendor=134c, idProduct=0004, bcdDevice=27.09
[  257.591137][ T6053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.598479][ T6053] usb 2-1: config 0 descriptor??
[  257.613948][T12327] loop4: detected capacity change from 0 to 128
[  257.640042][T12328] [U] v
[  257.672054][T12331] sp0: Synchronizing with TNC
[  257.816507][ T6718] usb 2-1: USB disconnect, device number 45
[  257.961988][T12349] loop4: detected capacity change from 0 to 16
[  258.237455][ T6053] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  258.379933][T12367] loop1: detected capacity change from 0 to 128
[  258.382498][T12367] adfs: Bad value for 'ftsuffix'
[  258.388775][ T6053] usb 5-1: Using ep0 maxpacket: 16
[  258.407003][ T6053] usb 5-1: unable to get BOS descriptor or descriptor too short
[  258.414049][ T6053] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  258.424045][ T6053] usb 5-1: config 0 has no interface number 0
[  258.426653][ T6053] usb 5-1: config 0 interface 51 has no altsetting 0
[  258.444098][ T6053] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=83.9c
[  258.447086][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.457137][ T6053] usb 5-1: Product: syz
[  258.458000][T12373] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  258.462938][ T6053] usb 5-1: Manufacturer: syz
[  258.464751][ T6053] usb 5-1: SerialNumber: syz
[  258.469629][ T6053] usb 5-1: config 0 descriptor??
[  258.708068][ T6053] em28xx 5-1:0.51: audio device (eb1a:2710): interface 51, class 1
[  258.713902][ T6053] usb 5-1: USB disconnect, device number 15
[  258.733254][T12383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2598'.
[  259.753466][T12408] loop1: detected capacity change from 0 to 128
[  259.980931][T12421] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  260.099524][T12426] macsec1: entered promiscuous mode
[  260.101297][T12426] macsec1: entered allmulticast mode
[  260.167438][T12421] loop1: detected capacity change from 0 to 2048
[  260.191315][T12421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.202182][T12429] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  261.436731][ T6718] Process accounting resumed
[  261.585252][T12454] Process accounting resumed
[  261.787222][T12472] binder: 12471:12472 ioctl c0306201 2000000003c0 returned -14
[  262.027532][T12483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  262.034284][T12483] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  262.345296][T12503] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  262.349209][T12503] PKCS7: Only support pkcs7_signedData type
[  262.397413][ T6053] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  262.439464][T12509] netlink: 'syz.0.2655': attribute type 39 has an invalid length.
[  262.547398][ T6053] usb 5-1: Using ep0 maxpacket: 8
[  262.550712][ T6053] usb 5-1: config 2 has an invalid interface number: 226 but max is 0
[  262.553402][ T6053] usb 5-1: config 2 has no interface number 0
[  262.555445][ T6053] usb 5-1: config 2 interface 226 has no altsetting 0
[  262.563525][ T6053] usb 5-1: New USB device found, idVendor=05c8, idProduct=0403, bcdDevice=d4.d4
[  262.566575][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.569568][ T6053] usb 5-1: Product: syz
[  262.571161][ T6053] usb 5-1: Manufacturer: syz
[  262.572841][ T6053] usb 5-1: SerialNumber: syz
[  262.790408][ T6053] usb 5-1: Found UVC 0.00 device syz (05c8:0403)
[  262.793875][ T6053] usb 5-1: No valid video chain found.
[  262.797042][ T6053] usb 5-1: USB disconnect, device number 16
[  263.213374][T12560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.216296][T12560] batadv_slave_0: entered promiscuous mode
[  263.309019][T12570] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2682'.
[  263.479701][T12589] gretap0: entered promiscuous mode
[  263.837413][ T6053] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  263.992429][ T6053] usb 5-1: config 3 has an invalid interface number: 56 but max is 0
[  263.995148][ T6053] usb 5-1: config 3 has no interface number 0
[  263.997085][ T6053] usb 5-1: config 3 interface 56 has no altsetting 0
[  264.003748][ T6053] usb 5-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=80.cc
[  264.006562][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.010596][ T6053] usb 5-1: Product: syz
[  264.011913][ T6053] usb 5-1: Manufacturer: syz
[  264.013344][ T6053] usb 5-1: SerialNumber: syz
[  264.079413][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'.
[  264.228939][ T6053] safe_serial 5-1:3.56: safe_serial converter detected
[  264.245450][ T6053] usb 5-1: safe_serial converter now attached to ttyUSB0
[  264.252623][ T6053] usb 5-1: USB disconnect, device number 17
[  264.262316][ T6053] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  264.265400][ T6053] safe_serial 5-1:3.56: device disconnected
[  264.518646][T12620] loop1: detected capacity change from 0 to 32768
[  264.535225][T12620] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  264.565518][ T5972] ocfs2: Unmounting device (7,1) on (node local)
[  264.850414][T12634] loop4: detected capacity change from 0 to 4096
[  264.853747][T12634] EXT4-fs (loop4): Test dummy encryption mode enabled
[  264.872701][T12634] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  264.875538][T12634] System zones: 0-5
[  264.880770][T12634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.916015][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.073901][ T6053] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  265.439212][ T6053] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.443536][ T6053] usb 2-1: config 0 has no interfaces?
[  265.445482][ T6053] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  265.448954][ T6053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.452741][ T6053] usb 2-1: config 0 descriptor??
[  265.474817][T12649] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  265.487638][T12649] CIFS mount error: No usable UNC path provided in device string!
[  265.487638][T12649] 
[  265.491351][T12649] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  265.660441][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.663544][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.671419][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.674832][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.678056][ T6718] usb 2-1: USB disconnect, device number 46
[  265.912871][T12682] loop4: detected capacity change from 0 to 512
[  265.924029][T12682] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2734: iget: bad extended attribute block 1
[  265.929360][T12682] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2734: couldn't read orphan inode 15 (err -117)
[  265.934158][T12682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.967951][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.080739][T12700] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  266.197569][ T6718] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  266.377480][ T6718] usb 2-1: Using ep0 maxpacket: 16
[  266.381184][ T6718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.384979][ T6718] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.00
[  266.388130][ T6718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.400953][ T6718] usb 2-1: config 0 descriptor??
[  266.404938][ T6718] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  267.209174][ T6718] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17
[  267.225898][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.228257][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.233256][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.236323][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.239446][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.242529][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.245606][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.248727][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.251727][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.254675][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.257969][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.261049][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.264144][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.267212][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.270176][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.273260][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.276228][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.279331][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.282331][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.284850][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.287231][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.289650][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.292053][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.294417][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.296850][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.299426][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.301839][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.304189][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.306533][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.310258][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.312600][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.314961][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.317323][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.319639][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.321990][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.324348][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.326565][T12722] tipc: Started in network mode
[  267.326817][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.329898][T12722] tipc: Node identity c, cluster identity 4711
[  267.330882][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.333320][T12722] tipc: Node number set to 12
[  267.336440][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.339191][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.341465][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.343821][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.346097][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.348401][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.353815][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.356210][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.358585][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.360957][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.363334][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.365698][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.368096][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.370475][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.372851][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.375162][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.377496][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.379856][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.382253][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.384646][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.387021][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.389412][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.391749][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.394137][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.396498][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.398880][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.401148][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.403513][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.405849][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.408221][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.410590][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.412962][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.415317][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.417855][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.420221][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.422554][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.424926][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.427299][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.432318][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.434663][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.437056][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.439550][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.441884][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.444245][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.446636][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.449030][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.451311][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.453680][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.455937][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.458316][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.460673][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.463028][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.465376][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.467733][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.470134][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.472504][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.474872][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.477227][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.479608][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.482012][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.484391][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.486747][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.489151][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.491478][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.493844][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.496209][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.498587][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.500934][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.503299][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.505664][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.508062][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.510426][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.512772][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.515129][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.517515][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.519875][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.522235][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.524523][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.526867][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.529250][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.531683][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.534054][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.536402][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.538863][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.541253][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.543654][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.546034][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.548382][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.550624][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.552872][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.555240][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.557636][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.560037][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.562432][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.564766][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.567040][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.569381][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.571675][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.573940][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.576251][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.578672][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.580958][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.583264][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.585592][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.587871][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.590092][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.592455][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.594831][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.597197][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.599577][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.601940][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.604308][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.606652][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.608915][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.611188][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.613471][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.615733][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.618083][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.620360][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.622737][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.625034][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.627324][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.629677][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.632218][    C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting
[  267.633438][ T6053] usb 2-1: USB disconnect, device number 47
[  267.634367][    C1] gspca_main: Resubmit URB failed with error -19
[  267.854979][T12731] loop4: detected capacity change from 0 to 32768
[  267.863653][T12731] (syz.4.2754,12731,1):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  267.863653][T12731] found = 1, set = 0, taken = 0, off = 0
[  267.870058][T12731] (syz.4.2754,12731,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  267.872620][T12731] (syz.4.2754,12731,1):ocfs2_check_volume:2404 ERROR: status = -22
[  267.875107][T12731] (syz.4.2754,12731,1):ocfs2_check_volume:2432 ERROR: status = -22
[  267.878501][T12731] (syz.4.2754,12731,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  267.883078][T12731] (syz.4.2754,12731,1):ocfs2_fill_super:1177 ERROR: status = -22
[  268.126295][T12751] netlink: 'syz.4.2762': attribute type 2 has an invalid length.
[  268.129432][T12751] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2762'.
[  268.417395][ T6053] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  268.577466][ T6053] usb 5-1: Using ep0 maxpacket: 32
[  268.580677][ T6053] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  268.583311][ T6053] usb 5-1: config 0 has no interface number 0
[  268.585306][ T6053] usb 5-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  268.588773][ T6053] usb 5-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  268.598703][ T6053] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be
[  268.601625][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.604222][ T6053] usb 5-1: Product: syz
[  268.605603][ T6053] usb 5-1: Manufacturer: syz
[  268.607122][ T6053] usb 5-1: SerialNumber: syz
[  268.611078][ T6053] usb 5-1: config 0 descriptor??
[  268.613351][T12755] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  268.618120][ T6053] kvaser_usb 5-1:0.89: error -ENODEV: Cannot get usb endpoint(s)
[  268.662624][T12763] : entered promiscuous mode
[  268.710059][T12767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  268.822719][ T6053] usb 5-1: USB disconnect, device number 18
[  270.390264][ T5970] Bluetooth: Wrong link type (-71)
[  270.890596][T12811] loop4: detected capacity change from 0 to 32768
[  270.912096][T12811] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2788 (12811)
[  270.937551][T12811] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.942722][T12811] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  270.945488][T12811] BTRFS info (device loop4): using free-space-tree
[  271.003241][ T9367] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  271.068046][T12833] syz_tun: entered promiscuous mode
[  271.076968][T12833] syz_tun: left promiscuous mode
[  271.080382][T12836] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2791'.
[  271.135718][T12836] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.138936][T12836] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.159720][ T6053] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  271.327480][ T6053] usb 2-1: Using ep0 maxpacket: 32
[  271.330504][ T6053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.333933][ T6053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.338961][ T6053] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  271.341906][ T6053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.345715][ T6053] usb 2-1: config 0 descriptor??
[  271.487559][ T6718] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  271.637326][ T6718] usb 5-1: Using ep0 maxpacket: 16
[  271.648481][ T6718] usb 5-1: config 0 has an invalid interface number: 107 but max is 0
[  271.651136][ T6718] usb 5-1: config 0 has no interface number 0
[  271.653083][ T6718] usb 5-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255
[  271.658988][ T6718] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  271.661859][ T6718] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  271.664538][ T6718] usb 5-1: Product: syz
[  271.665902][ T6718] usb 5-1: Manufacturer: syz
[  271.677547][ T6718] usb 5-1: SerialNumber: syz
[  271.688346][ T6718] usb 5-1: config 0 descriptor??
[  271.690741][T12842] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  271.769367][ T6053] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  271.838615][T12867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2807'.
[  271.904053][ T6718] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected
[  271.906696][ T6718] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81
[  271.912273][ T6718] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1
[  271.915620][ T6718] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  271.920644][ T6718] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2
[  271.928230][ T6718] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  271.931669][ T6718] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4
[  271.935615][ T6718] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  271.942638][ T6718] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6
[  271.947583][ T6718] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  271.952288][ T6718] usb 5-1: USB disconnect, device number 19
[  271.962945][ T6718] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  271.967853][ T6718] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  271.972686][ T6718] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  271.978888][ T6718] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  271.982687][ T6718] keyspan 5-1:0.107: device disconnected
[  272.020542][   T47] usb 2-1: USB disconnect, device number 48
[  272.098745][T12873] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2810'.
[  272.444446][T12887] loop4: detected capacity change from 0 to 512
[  272.448403][T12887] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  272.492067][T12889] loop4: detected capacity change from 0 to 1024
[  272.505170][T12889] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  272.512646][T12889] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869)
[  272.515677][T12889] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  272.520279][T12889] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.2818: unexpected bad inode w/o EXT4_IGET_BAD
[  272.524676][T12889] EXT4-fs (loop4): no journal found
[  272.526405][T12889] EXT4-fs (loop4): can't get journal size
[  272.538541][T12889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  272.565335][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.816733][T12918] loop1: detected capacity change from 0 to 256
[  272.828336][T12918] exfat: Deprecated parameter 'utf8'
[  272.837249][T12918] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  272.877562][ T6053] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  273.037514][ T6053] usb 5-1: Using ep0 maxpacket: 8
[  273.042926][ T6053] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  273.047385][ T6053] usb 5-1: config 0 has no interface number 0
[  273.049440][ T6053] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  273.052782][ T6053] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  273.054346][T12946] ALSA: mixer_oss: invalid OSS volume ''
[  273.063646][ T6053] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  273.067231][ T6053] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  273.073937][ T6053] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  273.077167][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.086848][ T6053] usb 5-1: config 0 descriptor??
[  273.099378][ T6053] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  273.350103][  T794] usb 5-1: USB disconnect, device number 20
[  273.351564][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  273.354287][T12900] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19
[  273.361255][  T794] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  274.467317][  T794] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  274.627343][  T794] usb 2-1: Using ep0 maxpacket: 16
[  274.632336][  T794] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  274.635384][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.638024][  T794] usb 2-1: Product: syz
[  274.639573][  T794] usb 2-1: Manufacturer: syz
[  274.641119][  T794] usb 2-1: SerialNumber: syz
[  274.645819][  T794] usb 2-1: config 0 descriptor??
[  274.652748][  T794] as10x_usb: device has been detected
[  274.654901][  T794] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  274.665012][  T794] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  274.681925][  T794] as10x_usb: error during firmware upload part1
[  274.684309][  T794] Registered device Sky IT Digital Key (green led)
[  274.858239][T13003] loop1: detected capacity change from 0 to 8
[  274.885973][  T794] usb 2-1: USB disconnect, device number 49
[  274.919620][T13017] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2874'.
[  274.930960][  T794] Unregistered device Sky IT Digital Key (green led)
[  274.935697][  T794] as10x_usb: device has been disconnected
[  275.028221][T13027] loop4: detected capacity change from 0 to 256
[  275.046703][T13027] FAT-fs (loop4): Directory bread(block 64) failed
[  275.050032][T13027] FAT-fs (loop4): Directory bread(block 65) failed
[  275.052152][T13027] FAT-fs (loop4): Directory bread(block 66) failed
[  275.054249][T13027] FAT-fs (loop4): Directory bread(block 67) failed
[  275.056378][T13027] FAT-fs (loop4): Directory bread(block 68) failed
[  275.060193][T13027] FAT-fs (loop4): Directory bread(block 69) failed
[  275.062526][T13027] FAT-fs (loop4): Directory bread(block 70) failed
[  275.064609][T13027] FAT-fs (loop4): Directory bread(block 71) failed
[  275.066771][T13027] FAT-fs (loop4): Directory bread(block 72) failed
[  275.069061][T13027] FAT-fs (loop4): Directory bread(block 73) failed
[  275.109124][ T5970] Bluetooth: hci0: unexpected event for opcode 0x200f
[  275.288588][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2887'.
[  275.312032][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2888'.
[  275.315518][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2888'.
[  275.629557][T13064] netlink: 'syz.0.2897': attribute type 2 has an invalid length.
[  276.527341][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  276.573033][T13083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2905'.
[  276.624153][T13087] loop1: detected capacity change from 0 to 512
[  276.633693][T13087] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  276.644453][T13087] EXT4-fs (loop1): 1 truncate cleaned up
[  276.648949][T13087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.656941][T13089] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1
[  276.660469][T13089] ref_ctr increment failed for inode: 0x11dd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881103960c0
[  276.669526][ T5972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.680564][    T9] usb 5-1: Using ep0 maxpacket: 16
[  276.687812][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  276.690987][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  276.694399][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  276.698931][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  276.708850][    T9] usb 5-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb
[  276.711728][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.714641][    T9] usb 5-1: Product: syz
[  276.716111][    T9] usb 5-1: Manufacturer: syz
[  276.727334][    T9] usb 5-1: SerialNumber: syz
[  276.730256][    T9] usb 5-1: config 0 descriptor??
[  276.734562][    T9] io_ti 5-1:0.0: required endpoints missing
[  276.798146][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2912'.
[  276.801300][T13099] netlink: 'syz.0.2912': attribute type 30 has an invalid length.
[  276.817663][ T5996] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.820928][ T5996] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.834011][ T5996] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.841944][ T5996] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.944030][  T794] usb 5-1: USB disconnect, device number 21
[  278.512633][T13130] loop1: detected capacity change from 0 to 1024
[  278.772300][T13152] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2933'.
[  278.777421][T13152] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  278.867788][    T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  279.017489][    T9] usb 2-1: Using ep0 maxpacket: 16
[  279.022530][    T9] usb 2-1: config 0 has an invalid interface number: 45 but max is 0
[  279.025119][    T9] usb 2-1: config 0 has no interface number 0
[  279.033113][    T9] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=85.00
[  279.036768][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.049453][    T9] usb 2-1: Product: syz
[  279.054404][    T9] usb 2-1: Manufacturer: syz
[  279.063720][    T9] usb 2-1: SerialNumber: syz
[  279.070151][    T9] usb 2-1: config 0 descriptor??
[  279.396666][    T9] cdc_subset 2-1:0.45: probe with driver cdc_subset failed with error -22
[  279.482070][ T6718] usb 2-1: USB disconnect, device number 50
[  281.108620][ T6053] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  281.258877][ T6053] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.263289][ T6053] usb 5-1: config 0 interface 0 has no altsetting 0
[  281.265404][ T6053] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  281.268682][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.273088][ T6053] usb 5-1: config 0 descriptor??
[  281.741822][ T6053] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0014/input/input18
[  281.983053][ T6053] sony 0003:054C:03D5.0014: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0
[  281.991177][ T6053] usb 5-1: USB disconnect, device number 22
[  282.222076][T13241] loop1: detected capacity change from 0 to 32768
[  282.232330][T13241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2974 (13241)
[  282.242646][T13241] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.246882][T13241] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  282.249762][T13241] BTRFS info (device loop1): disk space caching is enabled
[  282.252231][T13241] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  282.274188][T13241] BTRFS info (device loop1): rebuilding free space tree
[  282.281463][T13241] BTRFS info (device loop1): disabling free space tree
[  282.283883][T13241] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  282.287084][T13241] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  282.308661][   T33] audit: type=1800 audit(1754928250.908:498): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2974" name="file1" dev="loop1" ino=263 res=0 errno=0
[  282.867404][   T47] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  282.924879][T13269] overlayfs: failed to clone upperpath
[  282.987931][ T5972] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.026837][   T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.054818][   T47] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  283.058430][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.061063][   T47] usb 5-1: Product: syz
[  283.068860][   T47] usb 5-1: Manufacturer: syz
[  283.070362][   T47] usb 5-1: SerialNumber: syz
[  283.073869][   T47] usb 5-1: config 0 descriptor??
[  283.147890][T13273] QAT: failed to copy from user cfg_data.
[  283.196636][T13277] loop1: detected capacity change from 0 to 512
[  283.203086][T13277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  283.212164][T13277] EXT4-fs (loop1): 1 truncate cleaned up
[  283.214650][T13277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.233343][ T5972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.284860][ T6053] usb 5-1: USB disconnect, device number 23
[  283.508740][T13294] ip6erspan0: entered promiscuous mode
[  284.267690][ T6053] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  284.394115][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'.
[  284.418857][ T6053] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  284.421734][ T6053] usb 5-1: config 0 has no interface number 0
[  284.423756][ T6053] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  284.430385][ T6053] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  284.435758][ T6053] usb 5-1: config 0 interface 255 has no altsetting 0
[  284.439924][ T6053] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  284.442993][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.447438][ T6053] usb 5-1: config 0 descriptor??
[  284.451896][ T6053] ums-realtek 5-1:0.255: USB Mass Storage device detected
[  284.472896][T13340] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3010'.
[  284.655633][ T6718] usb 5-1: USB disconnect, device number 24
[  285.589451][    T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  285.747606][    T9] usb 2-1: Using ep0 maxpacket: 32
[  285.751601][    T9] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.754584][    T9] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  285.759676][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  285.761841][    T9] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  285.764740][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.769649][    T9] usb 2-1: config 0 descriptor??
[  286.187717][    T9] betop 0003:20BC:5500.0015: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0
[  286.189511][T13396] pim6reg9: entered allmulticast mode
[  286.191190][    T9] betop 0003:20BC:5500.0015: no inputs found
[  286.403750][ T6718] usb 2-1: USB disconnect, device number 51
[  286.837426][ T6718] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  286.987914][ T6718] usb 5-1: Using ep0 maxpacket: 8
[  286.993016][ T6718] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  286.995732][ T6718] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  287.001398][ T6718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  287.004712][ T6718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  287.009976][ T6718] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  287.014515][ T6718] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  287.017807][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.226342][ T6718] usb 5-1: usb_control_msg returned -32
[  287.229299][ T6718] usbtmc 5-1:16.0: can't read capabilities
[  287.587445][T13448] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  287.789247][ T6718] usb 5-1: USB disconnect, device number 25
[  287.958601][T13450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.341539][T13462] overlayfs: failed to clone upperpath
[  288.371049][   T33] audit: type=1326 audit(1754928256.968:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.0.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  288.387115][   T33] audit: type=1326 audit(1754928256.978:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.0.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  288.404586][   T33] audit: type=1326 audit(1754928256.978:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.0.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  288.407226][T13468] loop4: detected capacity change from 0 to 256
[  288.418356][   T33] audit: type=1326 audit(1754928256.978:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.0.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  288.436068][   T33] audit: type=1326 audit(1754928256.978:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.0.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  288.445226][   T33] audit: type=1326 audit(1754928256.978:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.0.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  288.450010][T13468] FAT-fs (loop4): Directory bread(block 64) failed
[  288.454096][T13468] FAT-fs (loop4): Directory bread(block 65) failed
[  288.456783][T13468] FAT-fs (loop4): Directory bread(block 66) failed
[  288.458597][   T33] audit: type=1326 audit(1754928256.978:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.0.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  288.464255][T13468] FAT-fs (loop4): Directory bread(block 67) failed
[  288.469958][T13468] FAT-fs (loop4): Directory bread(block 68) failed
[  288.472759][T13468] FAT-fs (loop4): Directory bread(block 69) failed
[  288.477775][   T33] audit: type=1326 audit(1754928256.978:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.0.3064" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  288.480129][T13468] FAT-fs (loop4): Directory bread(block 70) failed
[  288.531078][T13468] FAT-fs (loop4): Directory bread(block 71) failed
[  288.533179][T13468] FAT-fs (loop4): Directory bread(block 72) failed
[  288.535185][T13468] FAT-fs (loop4): Directory bread(block 73) failed
[  288.637456][T13468] bio_check_eod: 100 callbacks suppressed
[  288.637469][T13468] syz.4.3065: attempt to access beyond end of device
[  288.637469][T13468] loop4: rw=1, sector=1224, nr_sectors = 64 limit=256
[  288.643827][T13468] syz.4.3065: attempt to access beyond end of device
[  288.643827][T13468] loop4: rw=1, sector=1320, nr_sectors = 36 limit=256
[  288.948549][T13476] loop1: detected capacity change from 0 to 32768
[  288.983313][T13476] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  289.012381][T13476] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[  289.027342][T13476] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  289.032819][T13476] OCFS2: Returning error to the calling process.
[  289.035152][T13476] (syz.1.3069,13476,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[  289.040420][T13476] (syz.1.3069,13476,1):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[  289.045041][T13476] (syz.1.3069,13476,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[  289.050425][T13476] (syz.1.3069,13476,0):ocfs2_mknod:309 ERROR: status = -5
[  289.052711][T13476] (syz.1.3069,13476,0):ocfs2_mknod:505 ERROR: status = -5
[  289.057426][T13476] (syz.1.3069,13476,1):ocfs2_mkdir:661 ERROR: status = -5
[  289.072793][ T5972] ocfs2: Unmounting device (7,1) on (node local)
[  289.141645][T13492] sctp: [Deprecated]: syz.1.3075 (pid 13492) Use of struct sctp_assoc_value in delayed_ack socket option.
[  289.141645][T13492] Use struct sctp_sack_info instead
[  289.215487][T13490] loop4: detected capacity change from 0 to 32768
[  289.227016][T13490] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3074 (13490)
[  289.239981][T13490] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.243269][T13490] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  289.246410][T13490] BTRFS info (device loop4): using free-space-tree
[  289.471926][T13501] loop1: detected capacity change from 0 to 40427
[  289.474839][T13501] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  289.477420][T13501] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  289.494585][T13501] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  289.515101][ T9367] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.552896][T13501] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  289.566271][T13501] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  289.568956][T13501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  289.706484][T13532] netlink: 'syz.4.3086': attribute type 1 has an invalid length.
[  289.712106][T13532] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3086'.
[  289.817482][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  290.141858][T13543] loop1: detected capacity change from 0 to 764
[  290.497432][ T6053] usb 2-1: new low-speed USB device number 52 using dummy_hcd
[  290.608761][T13555] loop4: detected capacity change from 0 to 512
[  290.648979][ T6053] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  290.651883][ T6053] usb 2-1: config 0 has no interface number 0
[  290.652981][T13555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.654142][ T6053] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  290.658314][T13555] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.662479][ T6053] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  290.672975][ T6053] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  290.677396][ T6053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.686078][ T6053] usb 2-1: config 0 descriptor??
[  290.687633][T13555] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  290.693274][T13551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  290.696376][T13555] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  290.706422][ T6053] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  290.709848][T13555] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3094: Failed to acquire dquot type 1
[  290.743482][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.845690][T13565] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3096'.
[  291.004315][   T47] usb 2-1: USB disconnect, device number 52
[  291.004467][    C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  291.773924][T13581] loop1: detected capacity change from 0 to 512
[  291.779029][T13581] EXT4-fs: Ignoring removed nomblk_io_submit option
[  291.796919][T13581] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  291.814983][T13581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002]
[  291.820764][T13581] EXT4-fs (loop1): orphan cleanup on readonly fs
[  291.823413][T13581] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  291.831160][T13581] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  291.835109][T13581] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3104: bg 0: block 40: padding at end of block bitmap is not set
[  291.842550][T13581] EXT4-fs (loop1): Remounting filesystem read-only
[  291.845130][T13581] EXT4-fs (loop1): 1 truncate cleaned up
[  291.852599][T13581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  292.299297][ T5976] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  292.304447][ T5976] Bluetooth: hci2: Injecting HCI hardware error event
[  292.307985][ T5976] Bluetooth: hci2: hardware error 0x00
[  292.964456][ T5972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.117592][   T12] bridge_slave_1: left promiscuous mode
[  293.120201][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.124588][   T12] bridge_slave_0: left promiscuous mode
[  293.128832][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.218829][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  293.222163][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  293.228044][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  293.248574][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  293.252162][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  293.410415][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  293.423088][T13647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3137'.
[  293.426018][T13647] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3137'.
[  293.429081][T13647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3137'.
[  293.604990][T13655] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3141'.
[  293.710049][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.717222][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.721312][   T12] bond0 (unregistering): Released all slaves
[  293.729828][   T12] bond1 (unregistering): Released all slaves
[  293.845375][   T12] tipc: Left network mode
[  294.137442][ T6718] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  294.144867][T13640] chnl_net:caif_netlink_parms(): no params data found
[  294.219029][T13640] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.221349][T13640] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.223624][T13640] bridge_slave_0: entered allmulticast mode
[  294.226212][T13640] bridge_slave_0: entered promiscuous mode
[  294.235091][T13640] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.237681][T13640] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.239953][T13640] bridge_slave_1: entered allmulticast mode
[  294.242620][T13640] bridge_slave_1: entered promiscuous mode
[  294.249284][   T12] hsr_slave_0: left promiscuous mode
[  294.251566][   T12] hsr_slave_1: left promiscuous mode
[  294.253775][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.256483][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.293935][ T6718] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  294.308470][ T6718] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5
[  294.313291][ T6718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.326280][ T6718] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  294.333772][ T6718] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  294.337524][ T6718] usb 5-1: Manufacturer: syz
[  294.349532][ T6718] usb 5-1: config 0 descriptor??
[  294.352959][ T6718] igorplugusb 5-1:0.0: endpoint incorrect
[  294.387745][ T5976] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  294.569354][ T6053] usb 5-1: USB disconnect, device number 26
[  294.602203][   T12] team0 (unregistering): Port device team_slave_1 removed
[  294.639098][   T12] team0 (unregistering): Port device team_slave_0 removed
[  294.794019][T13680] netlink: 'syz.0.3149': attribute type 10 has an invalid length.
[  295.052018][T13680] team0: Port device dummy0 added
[  295.070635][T13640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.075443][T13640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.115869][T13640] team0: Port device team_slave_0 added
[  295.120809][T13640] team0: Port device team_slave_1 added
[  295.157625][T13640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.160213][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.170537][T13640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.175455][T13640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.178109][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.188696][T13640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.232855][T13640] hsr_slave_0: entered promiscuous mode
[  295.235101][T13640] hsr_slave_1: entered promiscuous mode
[  295.237185][T13640] debugfs: 'hsr0' already exists in 'hsr'
[  295.239706][T13640] Cannot create hsr debugfs directory
[  295.339240][ T5976] Bluetooth: hci1: command tx timeout
[  295.372781][T13640] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  295.377219][T13640] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  295.381636][T13640] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  295.386422][T13640] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  295.432518][T13640] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.450059][T13640] 8021q: adding VLAN 0 to HW filter on device team0
[  295.457075][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.459549][ T4857] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.465938][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.468791][ T4857] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.572825][T13640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.683502][T13640] veth0_vlan: entered promiscuous mode
[  295.694450][T13640] veth1_vlan: entered promiscuous mode
[  295.712025][T13640] veth0_macvtap: entered promiscuous mode
[  295.718707][T13640] veth1_macvtap: entered promiscuous mode
[  295.728797][T13640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.738555][T13640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.744572][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.748209][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.751640][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.754865][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.806955][  T639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.810814][  T639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.828426][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.830931][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.108209][ T6028] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  296.195166][T13735] netlink: 'syz.4.3164': attribute type 4 has an invalid length.
[  296.280175][ T6028] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.283495][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  296.286546][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  296.299686][ T6028] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.304096][ T6028] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  296.324118][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.333068][ T6028] usb 6-1: config 0 descriptor??
[  296.540811][   T47] usb 6-1: USB disconnect, device number 2
[  296.698403][T13772] loop4: detected capacity change from 0 to 40427
[  296.740528][T13772] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  296.744356][T13772] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  296.788863][ T9367] syz-executor: attempt to access beyond end of device
[  296.788863][ T9367] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  296.793270][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  296.793288][ T9367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.793293][ T9367] Call Trace:
[  296.793297][ T9367]  <TASK>
[  296.793301][ T9367]  dump_stack_lvl+0x189/0x250
[  296.793317][ T9367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.793327][ T9367]  ? __pfx_queue_work_on+0x10/0x10
[  296.793336][ T9367]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  296.793346][ T9367]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  296.793358][ T9367]  f2fs_handle_critical_error+0x37c/0x540
[  296.793372][ T9367]  f2fs_write_end_io+0x886/0xb60
[  296.793391][ T9367]  __submit_merged_bio+0x27a/0x6a0
[  296.793402][ T9367]  __submit_merged_write_cond+0x255/0x530
[  296.793414][ T9367]  f2fs_write_data_pages+0x261d/0x3000
[  296.793437][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.793473][ T9367]  ? __lock_acquire+0xab9/0xd20
[  296.793488][ T9367]  ? do_raw_spin_lock+0x121/0x290
[  296.793501][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  296.793510][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.793520][ T9367]  do_writepages+0x32e/0x550
[  296.793535][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  296.793545][ T9367]  filemap_fdatawrite+0x199/0x240
[  296.793556][ T9367]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  296.793583][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  296.793594][ T9367]  f2fs_sync_dirty_inodes+0x31f/0x830
[  296.793610][ T9367]  f2fs_write_checkpoint+0x95a/0x1df0
[  296.793629][ T9367]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  296.793677][ T9367]  ? kill_f2fs_super+0x298/0x6c0
[  296.793691][ T9367]  kill_f2fs_super+0x2c3/0x6c0
[  296.793704][ T9367]  ? __pfx_kill_f2fs_super+0x10/0x10
[  296.793713][ T9367]  ? radix_tree_delete_item+0x2b6/0x400
[  296.793724][ T9367]  ? shrinker_free+0x2ce/0x3e0
[  296.793734][ T9367]  deactivate_locked_super+0xbc/0x130
[  296.793744][ T9367]  cleanup_mnt+0x425/0x4c0
[  296.793754][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.793764][ T9367]  task_work_run+0x1d4/0x260
[  296.793775][ T9367]  ? __pfx_task_work_run+0x10/0x10
[  296.793784][ T9367]  ? __x64_sys_umount+0x122/0x160
[  296.793795][ T9367]  ? exit_to_user_mode_loop+0x40/0x110
[  296.793807][ T9367]  exit_to_user_mode_loop+0xec/0x110
[  296.793818][ T9367]  do_syscall_64+0x2bd/0x3b0
[  296.793826][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.793834][ T9367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.793841][ T9367]  ? exc_page_fault+0x9f/0xf0
[  296.793850][ T9367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.793857][ T9367] RIP: 0033:0x7f653d38ff17
[  296.793865][ T9367] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  296.793872][ T9367] RSP: 002b:00007ffc0e4dca68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  296.793881][ T9367] RAX: 0000000000000000 RBX: 00007f653d411c05 RCX: 00007f653d38ff17
[  296.793886][ T9367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0e4dcb20
[  296.793891][ T9367] RBP: 00007ffc0e4dcb20 R08: 0000000000000000 R09: 0000000000000000
[  296.793895][ T9367] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0e4ddbb0
[  296.793900][ T9367] R13: 00007f653d411c05 R14: 00000000000486c7 R15: 00007ffc0e4ddbf0
[  296.793912][ T9367]  </TASK>
[  296.793915][ T9367] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  296.909848][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  296.909863][ T9367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.909867][ T9367] Call Trace:
[  296.909871][ T9367]  <TASK>
[  296.909874][ T9367]  dump_stack_lvl+0x189/0x250
[  296.909891][ T9367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.909900][ T9367]  ? __pfx_queue_work_on+0x10/0x10
[  296.909909][ T9367]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  296.909920][ T9367]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  296.909933][ T9367]  f2fs_handle_critical_error+0x37c/0x540
[  296.909948][ T9367]  f2fs_write_end_io+0x886/0xb60
[  296.909967][ T9367]  __submit_merged_bio+0x27a/0x6a0
[  296.909979][ T9367]  __submit_merged_write_cond+0x255/0x530
[  296.909991][ T9367]  f2fs_write_data_pages+0x261d/0x3000
[  296.910017][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.910059][ T9367]  ? __lock_acquire+0xab9/0xd20
[  296.910075][ T9367]  ? do_raw_spin_lock+0x121/0x290
[  296.910090][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  296.910098][ T9367]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.910109][ T9367]  do_writepages+0x32e/0x550
[  296.910125][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  296.910135][ T9367]  filemap_fdatawrite+0x199/0x240
[  296.910146][ T9367]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  296.910177][ T9367]  ? do_raw_spin_unlock+0x4d/0x240
[  296.910188][ T9367]  f2fs_sync_dirty_inodes+0x31f/0x830
[  296.910206][ T9367]  f2fs_write_checkpoint+0x95a/0x1df0
[  296.910227][ T9367]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  296.910259][ T9367]  ? kill_f2fs_super+0x298/0x6c0
[  296.910271][ T9367]  kill_f2fs_super+0x2c3/0x6c0
[  296.910289][ T9367]  ? __pfx_kill_f2fs_super+0x10/0x10
[  296.910299][ T9367]  ? radix_tree_delete_item+0x2b6/0x400
[  296.910311][ T9367]  ? shrinker_free+0x2ce/0x3e0
[  296.910322][ T9367]  deactivate_locked_super+0xbc/0x130
[  296.910332][ T9367]  cleanup_mnt+0x425/0x4c0
[  296.910342][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.910352][ T9367]  task_work_run+0x1d4/0x260
[  296.910364][ T9367]  ? __pfx_task_work_run+0x10/0x10
[  296.910372][ T9367]  ? __x64_sys_umount+0x122/0x160
[  296.910384][ T9367]  ? exit_to_user_mode_loop+0x40/0x110
[  296.910398][ T9367]  exit_to_user_mode_loop+0xec/0x110
[  296.910409][ T9367]  do_syscall_64+0x2bd/0x3b0
[  296.910417][ T9367]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.910425][ T9367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.910433][ T9367]  ? exc_page_fault+0x9f/0xf0
[  296.910442][ T9367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.910449][ T9367] RIP: 0033:0x7f653d38ff17
[  296.910458][ T9367] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  296.910464][ T9367] RSP: 002b:00007ffc0e4dca68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  296.910474][ T9367] RAX: 0000000000000000 RBX: 00007f653d411c05 RCX: 00007f653d38ff17
[  296.910479][ T9367] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0e4dcb20
[  296.910483][ T9367] RBP: 00007ffc0e4dcb20 R08: 0000000000000000 R09: 0000000000000000
[  296.910487][ T9367] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0e4ddbb0
[  296.910492][ T9367] R13: 00007f653d411c05 R14: 00000000000486c7 R15: 00007ffc0e4ddbf0
[  296.910505][ T9367]  </TASK>
[  296.910508][ T9367] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  296.926921][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'.
[  297.206161][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'.
[  297.397372][ T6028] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  297.406068][T13820] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3203'.
[  297.417375][ T5976] Bluetooth: hci1: command tx timeout
[  297.567386][ T6028] usb 6-1: Using ep0 maxpacket: 16
[  297.571372][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.575121][ T6028] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  297.581576][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.588018][ T6028] usb 6-1: config 0 descriptor??
[  298.134013][ T6028] aquacomputer_d5next 0003:0C70:F00E.0016: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.5-1/input0
[  298.257659][   T47] usb 6-1: USB disconnect, device number 3
[  298.744939][T13849] loop4: detected capacity change from 0 to 128
[  298.760263][T13849] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  298.764757][T13849] ext4 filesystem being mounted at /565/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  298.780668][T13849] EXT4-fs (loop4): shut down requested (1)
[  298.783055][T13849] fscrypt (loop4, inode 12): Error -5 getting encryption context
[  298.797140][ T9367] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  299.497577][ T5976] Bluetooth: hci1: command tx timeout
[  299.797317][T13863] loop4: detected capacity change from 0 to 32768
[  299.824371][T13863] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  299.946696][T13863] XFS (loop4): Ending clean mount
[  300.044862][ T9367] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  300.101980][T13880] loop5: detected capacity change from 0 to 512
[  300.111513][T13880] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  300.140207][T13880] EXT4-fs (loop5): 1 truncate cleaned up
[  300.142918][T13880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.190120][T13640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.406741][T13883] loop5: detected capacity change from 0 to 32768
[  300.669211][ T6028] hid-generic 0005:10CF:0004.0017: item fetching failed at offset 0/1
[  300.672403][ T6028] hid-generic 0005:10CF:0004.0017: probe with driver hid-generic failed with error -22
[  300.697187][T13916] pim6reg1: entered allmulticast mode
[  300.801427][T13920] loop4: detected capacity change from 0 to 1024
[  300.835133][T13920] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  300.850510][T13920] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  300.871725][   T27] hfsplus: b-tree write err: -5, ino 4
[  301.279991][T13930] syz.4.3246: attempt to access beyond end of device
[  301.279991][T13930] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0
[  301.285224][T13930] syz.4.3246: attempt to access beyond end of device
[  301.285224][T13930] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0
[  301.384417][T13932] FAT-fs (loop1): bogus number of reserved sectors
[  301.386678][T13932] FAT-fs (loop1): Can't find a valid FAT filesystem
[  301.587786][ T5976] Bluetooth: hci1: command tx timeout
[  302.476349][T13952] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  303.137530][T13994] loop4: detected capacity change from 0 to 512
[  303.140954][T13994] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  304.541796][ T6053] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  304.687423][ T6053] usb 5-1: Using ep0 maxpacket: 32
[  304.690451][ T6053] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  304.692945][ T6053] usb 5-1: config 0 has no interface number 0
[  304.694799][ T6053] usb 5-1: config 0 interface 184 has no altsetting 0
[  304.702165][ T6053] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  304.704953][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.707549][ T6053] usb 5-1: Product: syz
[  304.708879][ T6053] usb 5-1: Manufacturer: syz
[  304.710291][ T6053] usb 5-1: SerialNumber: syz
[  304.713063][ T6053] usb 5-1: config 0 descriptor??
[  304.717954][ T6053] smsc75xx v1.0.0
[  304.993796][T14079] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3315'.
[  305.310733][T14094] loop5: detected capacity change from 0 to 32768
[  305.335940][ T6053] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  305.340993][ T6053] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  305.345133][ T6053] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  305.351688][ T6053] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  305.361718][ T6053] usb 5-1: USB disconnect, device number 27
[  305.707385][   T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  305.871394][   T47] usb 6-1: config 252 has an invalid interface number: 186 but max is 0
[  305.874082][   T47] usb 6-1: config 252 has no interface number 0
[  305.889298][   T47] usb 6-1: New USB device found, idVendor=0403, idProduct=bcd8, bcdDevice=27.67
[  305.900067][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.902893][   T47] usb 6-1: Product: syz
[  305.904228][   T47] usb 6-1: Manufacturer: syz
[  305.905716][   T47] usb 6-1: SerialNumber: syz
[  305.922727][   T47] ftdi_sio 6-1:252.186: FTDI USB Serial Device converter detected
[  305.925998][   T47] ftdi_sio ttyUSB0: unknown device type: 0x2767
[  306.139908][   T47] usb 6-1: USB disconnect, device number 4
[  306.150717][   T47] ftdi_sio 6-1:252.186: device disconnected
[  306.726805][T14129] loop5: detected capacity change from 0 to 128
[  306.744615][T14129] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  306.748874][T14129] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  306.777033][T13640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  307.384404][T14159] netlink: 'syz.4.3351': attribute type 1 has an invalid length.
[  307.461488][T14159] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  307.473715][T14159] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  307.484985][T14159] bond1: (slave vcan1): making interface the new active one
[  307.490487][T14159] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  307.531262][T14166] cgroup: name respecified
[  308.035932][T14200] netlink: 'syz.5.3370': attribute type 1 has an invalid length.
[  308.040575][T14196] loop4: detected capacity change from 0 to 32768
[  308.261948][T14196] (syz.4.3369,14196,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  308.272158][T14196] (syz.4.3369,14196,0):ocfs2_fill_super:1177 ERROR: status = -22
[  308.299837][T14206] loop5: detected capacity change from 0 to 164
[  308.304767][T14206] Unable to read rock-ridge attributes
[  308.313729][T14206] Unable to read rock-ridge attributes
[  308.464077][T14216] loop8: detected capacity change from 0 to 7
[  308.474302][ T6335] Dev loop8: unable to read RDB block 7
[  308.476318][ T6335]  loop8: unable to read partition table
[  308.478326][ T6335] loop8: partition table beyond EOD, truncated
[  308.484988][T14216] Dev loop8: unable to read RDB block 7
[  308.486763][T14216]  loop8: unable to read partition table
[  308.493527][T14216] loop8: partition table beyond EOD, truncated
[  308.495707][T14216] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  309.242233][T14235] loop5: detected capacity change from 0 to 16
[  309.270435][T14235] erofs (device loop5): mounted with root inode @ nid 36.
[  309.351953][T14236] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36
[  309.354835][T14236] erofs (device loop5): readahead error at folio 47 @ nid 36
[  309.360122][T14236] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36
[  309.362922][T14236] erofs (device loop5): readahead error at folio 46 @ nid 36
[  309.365448][T14236] erofs (device loop5): readahead error at folio 45 @ nid 36
[  309.368844][T14236] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  309.371886][T14236] erofs (device loop5): readahead error at folio 43 @ nid 36
[  309.374264][T14236] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  309.376995][T14236] erofs (device loop5): readahead error at folio 42 @ nid 36
[  309.382424][T14236] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36
[  309.385119][T14236] erofs (device loop5): readahead error at folio 41 @ nid 36
[  309.387775][T14236] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36
[  309.390743][T14236] erofs (device loop5): readahead error at folio 40 @ nid 36
[  309.393420][T14236] erofs (device loop5): readahead error at folio 39 @ nid 36
[  309.395828][T14236] erofs (device loop5): readahead error at folio 38 @ nid 36
[  309.407909][T14236] erofs (device loop5): readahead error at folio 36 @ nid 36
[  309.410610][T14236] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36
[  309.426410][T14236] erofs (device loop5): readahead error at folio 31 @ nid 36
[  309.450543][T14236] erofs (device loop5): readahead error at folio 25 @ nid 36
[  309.459915][T14236] erofs (device loop5): readahead error at folio 24 @ nid 36
[  309.467815][T14236] erofs (device loop5): readahead error at folio 19 @ nid 36
[  309.480168][T14236] syz.5.3386: attempt to access beyond end of device
[  309.480168][T14236] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16
[  309.494075][T14236] syz.5.3386: attempt to access beyond end of device
[  309.494075][T14236] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  309.501644][T14236] syz.5.3386: attempt to access beyond end of device
[  309.501644][T14236] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  309.506650][T14236] syz.5.3386: attempt to access beyond end of device
[  309.506650][T14236] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16
[  309.785276][T14245] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1)
[  310.515139][T14285] loop4: detected capacity change from 0 to 2048
[  310.551981][T14285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.557786][T14285] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.595744][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.708713][    T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  310.847635][T14295] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  310.859590][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  310.863088][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  310.867031][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  310.872768][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 232, setting to 64
[  310.876221][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  310.883702][    T9] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  310.886688][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.890543][    T9] usb 6-1: Product: syz
[  310.892064][    T9] usb 6-1: Manufacturer: syz
[  310.894602][    T9] usb 6-1: SerialNumber: syz
[  310.898053][    T9] usb 6-1: config 0 descriptor??
[  310.902293][T14281] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  310.913797][    T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19
[  310.937766][ T6028] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  311.088899][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  311.092620][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.095756][ T6028] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  311.099014][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.103662][ T6028] usb 5-1: config 0 descriptor??
[  311.132505][    T9] usb 6-1: USB disconnect, device number 5
[  311.515328][ T6028] bigben 0003:146B:0902.0018: unexpected rdesc, please submit for review
[  311.521095][ T6028] bigben 0003:146B:0902.0018: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0
[  311.524655][ T6028] bigben 0003:146B:0902.0018: missing HID_OUTPUT_REPORT 0
[  311.526876][ T6028] bigben 0003:146B:0902.0018: no output report found
[  311.719799][  T794] usb 5-1: USB disconnect, device number 28
[  312.974891][T14319] loop5: detected capacity change from 0 to 32768
[  313.357226][T14326] random: crng reseeded on system resumption
[  313.413610][  T794] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  313.687429][  T794] usb 6-1: Using ep0 maxpacket: 32
[  313.700030][  T794] usb 6-1: config 0 has an invalid interface number: 191 but max is 0
[  313.704573][  T794] usb 6-1: config 0 has no interface number 0
[  313.706883][  T794] usb 6-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  313.739377][  T794] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  313.742716][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.745473][  T794] usb 6-1: Product: syz
[  313.750802][  T794] usb 6-1: Manufacturer: syz
[  313.755631][  T794] usb 6-1: SerialNumber: syz
[  313.782989][  T794] usb 6-1: config 0 descriptor??
[  313.797376][T14321] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  315.121283][  T794] asix 6-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  315.125398][  T794] asix 6-1:0.191: probe with driver asix failed with error -71
[  315.134474][  T794] usb 6-1: USB disconnect, device number 6
[  315.722733][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3436'.
[  315.725639][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3436'.
[  315.729402][T14353] netlink: 'syz.5.3436': attribute type 11 has an invalid length.
[  315.852618][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3441'.
[  315.855721][T14362] netlink: 'syz.0.3441': attribute type 2 has an invalid length.
[  315.862181][T14362] netlink: 'syz.0.3441': attribute type 2 has an invalid length.
[  315.865183][T14362] netlink: 'syz.0.3441': attribute type 1 has an invalid length.
[  315.869417][T14362] netlink: 'syz.0.3441': attribute type 2 has an invalid length.
[  315.875130][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'.
[  316.711242][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.713387][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  316.792609][T14376] loop5: detected capacity change from 0 to 128
[  316.799410][T14376] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  316.803638][T14376] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  316.832250][T13640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  317.045289][T14394] loop5: detected capacity change from 0 to 8
[  317.049436][T14394] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  317.054342][T14394] cramfs: unsupported filesystem features
[  317.111422][T14398] loop5: detected capacity change from 0 to 256
[  317.123972][T14398] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  317.128067][T14398] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  317.133502][T14398] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  317.157117][T14402] 9pnet_fd: Insufficient options for proto=fd
[  317.569400][T14417] loop5: detected capacity change from 0 to 1024
[  317.965242][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'.
[  318.883422][T14483] netlink: 'syz.5.3495': attribute type 1 has an invalid length.
[  318.885985][T14483] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3495'.
[  319.276235][T14496] loop4: detected capacity change from 0 to 256
[  319.281458][T14496] exfat: Deprecated parameter 'namecase'
[  319.286504][T14496] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  319.602052][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  319.602073][   T33] audit: type=1326 audit(1754928288.198:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  319.612304][   T33] audit: type=1326 audit(1754928288.198:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  319.620690][   T33] audit: type=1326 audit(1754928288.208:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  319.627960][   T33] audit: type=1326 audit(1754928288.208:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  319.635039][   T33] audit: type=1326 audit(1754928288.208:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  319.644160][   T33] audit: type=1326 audit(1754928288.208:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  319.651359][   T33] audit: type=1326 audit(1754928288.208:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  319.658796][   T33] audit: type=1326 audit(1754928288.208:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  319.938240][T14516] loop5: detected capacity change from 0 to 32768
[  319.945583][T14516] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  319.953552][T14516] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  319.965852][   T33] audit: type=1800 audit(1754928288.558:515): pid=14516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3510" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  319.974664][   T33] audit: type=1804 audit(1754928288.568:516): pid=14516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3510" name="/newroot/103/bus/file1" dev="loop5" ino=17058 res=1 errno=0
[  320.585385][T14524] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3513'.
[  320.585991][T14525] loop4: detected capacity change from 0 to 512
[  320.592512][T14525] EXT4-fs: Ignoring removed mblk_io_submit option
[  320.596906][T14525] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  320.603048][T14525] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  320.606104][T14525] EXT4-fs (loop4): orphan cleanup on readonly fs
[  320.615767][T14525] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3512: Invalid block bitmap block 0 in block_group 0
[  320.621195][T14525] EXT4-fs (loop4): Remounting filesystem read-only
[  320.625923][T14525] EXT4-fs (loop4): 1 orphan inode deleted
[  320.632322][T14525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  320.690362][ T9367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.081064][T13640] ocfs2: Unmounting device (7,5) on (node local)
[  321.180063][T14548] overlayfs: failed to clone lowerpath
[  322.097817][ T5997] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  322.267381][ T5997] usb 5-1: Using ep0 maxpacket: 8
[  322.272622][ T5997] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  322.275582][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.281108][ T5997] usb 5-1: Product: syz
[  322.282506][ T5997] usb 5-1: Manufacturer: syz
[  322.284030][ T5997] usb 5-1: SerialNumber: syz
[  322.286973][ T5997] usb 5-1: config 0 descriptor??
[  322.292080][ T5997] ipw 5-1:0.0: IPWireless converter converter detected
[  322.443984][T14589] netlink: 129704 bytes leftover after parsing attributes in process `syz.5.3543'.
[  322.496869][  T794] usb 5-1: USB disconnect, device number 29
[  322.501549][  T794] ipw 5-1:0.0: device disconnected
[  323.187446][T14621] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3557'.
[  324.187246][T14631] loop5: detected capacity change from 0 to 1024
[  324.209882][T14635] bad cache= option: no%e
[  324.209882][T14635] 
[  324.212520][T14635] CIFS: VFS: bad cache= option: no%e
[  324.230411][ T1132] hfsplus: b-tree write err: -5, ino 4
[  324.276984][T14639] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  324.419605][T14655] loop4: detected capacity change from 0 to 1024
[  324.430091][T14655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  324.862204][ T5976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.868912][ T5976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.872289][ T5976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.878098][ T5976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.882209][ T5976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.983674][T14661] chnl_net:caif_netlink_parms(): no params data found
[  325.026425][T14661] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.029414][T14661] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.031856][T14661] bridge_slave_0: entered allmulticast mode
[  325.034696][T14661] bridge_slave_0: entered promiscuous mode
[  325.038424][T14661] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.040815][T14661] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.043237][T14661] bridge_slave_1: entered allmulticast mode
[  325.046041][T14661] bridge_slave_1: entered promiscuous mode
[  325.064363][T14661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.069117][T14661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.087224][T14661] team0: Port device team_slave_0 added
[  325.091037][T14661] team0: Port device team_slave_1 added
[  325.108335][T14661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.110751][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.119588][T14661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.123867][T14661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.126016][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.134463][T14661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.158854][T14661] hsr_slave_0: entered promiscuous mode
[  325.161254][T14661] hsr_slave_1: entered promiscuous mode
[  325.163475][T14661] debugfs: 'hsr0' already exists in 'hsr'
[  325.165306][T14661] Cannot create hsr debugfs directory
[  325.291686][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3579'.
[  325.315745][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  325.315757][   T33] audit: type=1326 audit(1754928293.908:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14673 comm="syz.0.3580" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbae3d8ebe9 code=0x0
[  325.336623][T14661] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  325.347814][T14661] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  325.366901][T14661] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  325.372562][T14661] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  325.378537][T14672] netlink: 'syz.5.3579': attribute type 2 has an invalid length.
[  325.401255][T14661] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.405869][T14661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.408724][T14661] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.411263][T14661] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.416589][T14683] loop5: detected capacity change from 0 to 256
[  325.423348][T14683] exfat: Deprecated parameter 'utf8'
[  325.429004][T14683] exfat: Deprecated parameter 'namecase'
[  325.434056][T14683] exfat: Deprecated parameter 'namecase'
[  325.436341][T14683] exfat: Deprecated parameter 'utf8'
[  325.450263][T14683] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  325.469940][T14661] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.480942][T13366] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.483985][T13366] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.503372][T14661] 8021q: adding VLAN 0 to HW filter on device team0
[  325.518977][T13366] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.521254][T13366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.529194][T13366] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.531627][T13366] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.686614][T14661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.795643][T14661] veth0_vlan: entered promiscuous mode
[  325.802856][T14661] veth1_vlan: entered promiscuous mode
[  325.822612][T14661] veth0_macvtap: entered promiscuous mode
[  325.826634][T14661] veth1_macvtap: entered promiscuous mode
[  325.836731][T14661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.844453][T14661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.850260][ T5948] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.853226][ T5948] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.856549][ T5948] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.859766][ T5948] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.887485][  T794] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  325.913418][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.915944][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.936013][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.939322][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.057723][  T794] usb 6-1: Using ep0 maxpacket: 32
[  326.060804][  T794] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  326.063719][  T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.067958][  T794] usb 6-1: config 0 descriptor??
[  326.071916][  T794] gspca_main: nw80x-2.14.0 probing 055f:d001
[  326.118549][T14707] loop6: detected capacity change from 0 to 40427
[  326.131003][T14707] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  326.133859][T14707] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  326.138535][T14707] F2FS-fs (loop6): invalid crc value
[  326.169381][T14707] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  326.178481][T14707] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  326.180860][T14707] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  326.235821][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3591'.
[  326.240325][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3591'.
[  326.680006][  T794] gspca_nw80x: reg_w err -71
[  326.683024][  T794] nw80x 6-1:0.0: probe with driver nw80x failed with error -71
[  326.696560][  T794] usb 6-1: USB disconnect, device number 7
[  326.951581][ T5976] Bluetooth: hci0: command tx timeout
[  327.731293][   T33] audit: type=1326 audit(1754928296.328:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  327.738950][   T33] audit: type=1326 audit(1754928296.328:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  327.747763][  T794] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  327.749347][   T33] audit: type=1326 audit(1754928296.328:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  327.757936][   T33] audit: type=1326 audit(1754928296.328:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  327.765206][   T33] audit: type=1326 audit(1754928296.328:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  327.772428][   T33] audit: type=1326 audit(1754928296.328:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  327.791716][   T33] audit: type=1326 audit(1754928296.328:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  327.802568][   T33] audit: type=1326 audit(1754928296.328:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  327.840566][T14767] netlink: 'syz.6.3613': attribute type 1 has an invalid length.
[  327.843406][T14767] netlink: 'syz.6.3613': attribute type 1 has an invalid length.
[  327.878936][T14772] loop6: detected capacity change from 0 to 512
[  327.888593][T14772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  327.891165][T14772] System zones: 1-12
[  327.896209][T14772] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.3615: Directory hole found for htree index block 0
[  327.910815][T14772] EXT4-fs (loop6): Remounting filesystem read-only
[  327.913166][T14772] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[  327.916071][T14772] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  327.919112][  T794] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  327.922249][  T794] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  327.926181][T14772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.931621][  T794] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  327.934436][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.937020][  T794] usb 6-1: Product: syz
[  327.946754][  T794] usb 6-1: Manufacturer: syz
[  327.951416][  T794] usb 6-1: SerialNumber: syz
[  327.965001][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.171680][  T794] usb 6-1: 0:2 : does not exist
[  328.178412][  T794] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  328.213468][  T794] usb 6-1: USB disconnect, device number 8
[  328.250532][ T6335] udevd[6335]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  328.781044][T14816] syz.5.3633 (14816): drop_caches: 4
[  328.816576][T14809] loop6: detected capacity change from 0 to 32768
[  328.832854][T14809] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  328.872210][T14809] XFS (loop6): Ending clean mount
[  328.880673][T14809] XFS (loop6): Quotacheck needed: Please wait.
[  328.880891][T14828] openvswitch: netlink: IP tunnel dst address not specified
[  328.930568][T14809] XFS (loop6): Quotacheck: Done.
[  328.954107][T14661] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.018219][ T5976] Bluetooth: hci0: command tx timeout
[  329.032011][T14834] netlink: 'syz.5.3640': attribute type 2 has an invalid length.
[  329.034504][T14834] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3640'.
[  329.063245][T14834] nbd: must specify at least one socket
[  329.554363][T14855] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  329.897659][ T6718] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  330.132002][T14871] netlink: 'syz.0.3654': attribute type 11 has an invalid length.
[  330.168928][ T6718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.172493][ T6718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.175497][ T6718] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  330.179635][ T6718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.186673][ T6718] usb 7-1: config 0 descriptor??
[  330.782633][ T6718] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  330.797722][ T6718] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0
[  330.885323][ T6718] arvo 0003:1E7D:30D4.0019: couldn't init struct arvo_device
[  330.893865][ T6718] arvo 0003:1E7D:30D4.0019: couldn't install keyboard
[  330.905540][ T6718] arvo 0003:1E7D:30D4.0019: probe with driver arvo failed with error -71
[  330.921347][ T6718] usb 7-1: USB disconnect, device number 2
[  331.272660][T14903] loop5: detected capacity change from 0 to 65536
[  331.276367][ T5976] Bluetooth: hci0: command tx timeout
[  331.290168][T14903] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  331.304409][T14903] XFS (loop5): Ending clean mount
[  331.309796][T14903] XFS (loop5): Quotacheck needed: Please wait.
[  331.320260][   T27] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  331.326044][   T27] XFS (loop5): Unmount and run xfs_repair
[  331.329751][   T27] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  331.332131][   T27] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  331.334919][   T27] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  331.342219][   T27] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  331.345003][   T27] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  331.348190][   T27] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  331.351063][   T27] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  331.353894][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  331.356673][   T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  331.360009][   T27] XFS (loop5): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  331.368418][T14903] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  331.417174][T13640] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  331.424927][T13640] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  331.520767][T14918] loop6: detected capacity change from 0 to 256
[  331.658655][T14921] loop6: detected capacity change from 0 to 4096
[  331.663321][T14921] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  331.683945][T14921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.718376][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.968451][T14945] Bluetooth: MGMT ver 1.23
[  332.277950][ T5963] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  332.427450][ T5963] usb 7-1: Using ep0 maxpacket: 16
[  332.432490][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.436087][ T5963] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  332.439354][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.443343][ T5963] usb 7-1: config 0 descriptor??
[  332.653315][   T33] audit: type=1326 audit(1754928301.248:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.0.3700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  332.661642][   T33] audit: type=1326 audit(1754928301.248:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.0.3700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  332.671547][   T33] audit: type=1326 audit(1754928301.248:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.0.3700" exe="/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  332.679936][   T33] audit: type=1326 audit(1754928301.248:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.0.3700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  332.687196][   T33] audit: type=1326 audit(1754928301.248:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.0.3700" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  332.820563][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3704'.
[  332.864191][ T5963] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  333.101226][T15013] o2cb: This node has not been configured.
[  333.103160][T15013] o2cb: Cluster check failed. Fix errors before retrying.
[  333.105377][T15013] (syz.0.3714,15013,1):user_dlm_register:674 ERROR: status = -22
[  333.109967][T15013] (syz.0.3714,15013,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  333.276016][ T6053] usb 7-1: USB disconnect, device number 3
[  333.337692][ T5976] Bluetooth: hci0: command tx timeout
[  333.377485][ T5963] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  333.530590][ T5963] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  333.533479][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.536111][ T5963] usb 6-1: Product: syz
[  333.539925][ T5963] usb 6-1: Manufacturer: syz
[  333.541874][ T5963] usb 6-1: SerialNumber: syz
[  333.545087][ T5963] usb 6-1: config 0 descriptor??
[  333.549107][ T5963] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  333.958727][ T5963] usb 6-1: USB disconnect, device number 9
[  333.970067][T15072] random: crng reseeded on system resumption
[  334.096681][T15076] sock: sock_timestamping_bind_phc: sock not bind to device
[  334.851204][T15099] loop6: detected capacity change from 0 to 256
[  334.864420][T15099] exfat: Deprecated parameter 'utf8'
[  334.884775][T15099] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  335.036692][T15108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.197432][ T5963] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  335.350840][ T5963] usb 7-1: unable to get BOS descriptor or descriptor too short
[  335.354998][ T5963] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  335.363605][ T5963] usb 7-1: config 1 has no interface number 1
[  335.371181][ T5963] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  335.377604][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.386080][ T5963] usb 7-1: Product: syz
[  335.388617][ T5963] usb 7-1: Manufacturer: syz
[  335.390156][ T5963] usb 7-1: SerialNumber: syz
[  335.615728][ T5963] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  335.622153][ T5963] usb 7-1: 2:1 : sample bitwidth 139 in over sample bytes 13
[  335.624432][ T5963] usb 7-1: 2:1 : unsupported sample bitwidth 139 in 13 bytes
[  335.645238][ T5963] usb 7-1: USB disconnect, device number 4
[  335.671285][ T6335] udevd[6335]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  337.122883][T15172] loop5: detected capacity change from 0 to 512
[  337.148729][T15172] EXT4-fs (loop5): required journal recovery suppressed and not mounted read-only
[  337.284068][T15175] loop6: detected capacity change from 0 to 40427
[  337.297976][T15175] F2FS-fs (loop6): invalid crc value
[  337.326547][T15175] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  337.329768][T15175] F2FS-fs (loop6): Start checkpoint disabled!
[  337.336628][T15175] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  337.363392][T13368] kworker/u9:14: attempt to access beyond end of device
[  337.363392][T13368] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  337.368119][T13368] CPU: 0 UID: 0 PID: 13368 Comm: kworker/u9:14 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  337.368132][T13368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.368138][T13368] Workqueue: writeback wb_workfn (flush-7:6)
[  337.368153][T13368] Call Trace:
[  337.368157][T13368]  <TASK>
[  337.368161][T13368]  dump_stack_lvl+0x189/0x250
[  337.368175][T13368]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.368184][T13368]  ? __pfx_queue_work_on+0x10/0x10
[  337.368193][T13368]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  337.368202][T13368]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.368216][T13368]  f2fs_handle_critical_error+0x37c/0x540
[  337.368230][T13368]  f2fs_write_end_io+0x886/0xb60
[  337.368250][T13368]  __submit_merged_bio+0x27a/0x6a0
[  337.368262][T13368]  __submit_merged_write_cond+0x255/0x530
[  337.368274][T13368]  f2fs_write_data_pages+0x261d/0x3000
[  337.368299][T13368]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.368318][T13368]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  337.368342][T13368]  ? rcu_is_watching+0x15/0xb0
[  337.368351][T13368]  ? __switch_to+0xdae/0x1670
[  337.368377][T13368]  ? finish_task_switch+0x266/0x950
[  337.368395][T13368]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.368405][T13368]  do_writepages+0x32e/0x550
[  337.368418][T13368]  ? reacquire_held_locks+0x127/0x1d0
[  337.368426][T13368]  ? writeback_sb_inodes+0x384/0x1010
[  337.368463][T13368]  __writeback_single_inode+0x145/0xff0
[  337.368474][T13368]  ? do_raw_spin_unlock+0x4d/0x240
[  337.368486][T13368]  writeback_sb_inodes+0x6c7/0x1010
[  337.368507][T13368]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  337.368536][T13368]  ? rcu_is_watching+0x15/0xb0
[  337.368547][T13368]  wb_writeback+0x43b/0xaf0
[  337.368560][T13368]  ? queue_io+0x391/0x590
[  337.368571][T13368]  ? __pfx_wb_writeback+0x10/0x10
[  337.368584][T13368]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.368594][T13368]  wb_workfn+0x409/0xef0
[  337.368609][T13368]  ? __pfx_wb_workfn+0x10/0x10
[  337.368619][T13368]  ? __lock_acquire+0xab9/0xd20
[  337.368635][T13368]  ? process_scheduled_works+0x9ef/0x17b0
[  337.368645][T13368]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.368653][T13368]  ? process_scheduled_works+0x9ef/0x17b0
[  337.368659][T13368]  ? process_scheduled_works+0x9ef/0x17b0
[  337.368667][T13368]  process_scheduled_works+0xae1/0x17b0
[  337.368687][T13368]  ? __pfx_process_scheduled_works+0x10/0x10
[  337.368708][T13368]  worker_thread+0x8a0/0xda0
[  337.368717][T13368]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.368729][T13368]  ? __kthread_parkme+0x7b/0x200
[  337.368742][T13368]  kthread+0x711/0x8a0
[  337.368753][T13368]  ? __pfx_worker_thread+0x10/0x10
[  337.368760][T13368]  ? __pfx_kthread+0x10/0x10
[  337.368770][T13368]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.368777][T13368]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.368787][T13368]  ? __pfx_kthread+0x10/0x10
[  337.368796][T13368]  ret_from_fork+0x3fc/0x770
[  337.368805][T13368]  ? __pfx_ret_from_fork+0x10/0x10
[  337.368816][T13368]  ? __switch_to_asm+0x39/0x70
[  337.368825][T13368]  ? __switch_to_asm+0x33/0x70
[  337.368833][T13368]  ? __pfx_kthread+0x10/0x10
[  337.368842][T13368]  ret_from_fork_asm+0x1a/0x30
[  337.368859][T13368]  </TASK>
[  337.368863][T13368] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  337.569595][T15182] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.858635][T15192] loop6: detected capacity change from 0 to 2048
[  337.862978][T15192] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=26504, location=26504
[  337.874328][T15192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  337.999167][T15198] loop5: detected capacity change from 0 to 4096
[  338.012011][T15198] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  338.048972][T15198] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  338.059334][T15198] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  338.122112][T15204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  338.148588][T15204] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  338.243336][T15217] loop5: detected capacity change from 0 to 64
[  338.371822][T15227] loop5: detected capacity change from 0 to 16
[  338.385065][T15227] erofs (device loop5): mounted with root inode @ nid 36.
[  339.967532][ T6718] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  340.267396][ T5997] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  340.287456][ T6718] usb 6-1: Using ep0 maxpacket: 16
[  340.292158][ T6718] usb 6-1: config 1 interface 0 has no altsetting 0
[  340.297342][ T6718] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40
[  340.301059][ T6718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.304404][ T6718] usb 6-1: Product: syz
[  340.306194][ T6718] usb 6-1: Manufacturer: syz
[  340.308402][ T6718] usb 6-1: SerialNumber: syz
[  340.444175][ T5997] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  340.448810][ T5997] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  340.453012][ T5997] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  340.456798][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.471703][T15278] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  340.480619][ T5997] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  340.570185][ T6718] usbhid 6-1:1.0: can't add hid device: -71
[  340.572169][ T6718] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  340.584159][ T6718] usb 6-1: USB disconnect, device number 10
[  340.696547][T15278] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96
[  340.705933][ T5997] usb 7-1: USB disconnect, device number 5
[  341.124146][T15321] loop5: detected capacity change from 0 to 256
[  341.130089][T15321] exfat: Deprecated parameter 'namecase'
[  341.133601][T15321] exfat: Deprecated parameter 'utf8'
[  341.138329][T15321] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d)
[  341.255222][T15330] loop5: detected capacity change from 0 to 1024
[  341.315944][T15336] loop7: detected capacity change from 0 to 16384
[  341.529300][T15341] loop7: detected capacity change from 16384 to 0
[  341.565183][T15352] loop5: detected capacity change from 0 to 256
[  341.577746][T15352] FAT-fs (loop5): Directory bread(block 64) failed
[  341.579791][T15352] FAT-fs (loop5): Directory bread(block 65) failed
[  341.581871][T15352] FAT-fs (loop5): Directory bread(block 66) failed
[  341.583991][T15352] FAT-fs (loop5): Directory bread(block 67) failed
[  341.586100][T15352] FAT-fs (loop5): Directory bread(block 68) failed
[  341.589607][T15352] FAT-fs (loop5): Directory bread(block 69) failed
[  341.591691][T15352] FAT-fs (loop5): Directory bread(block 70) failed
[  341.593721][T15352] FAT-fs (loop5): Directory bread(block 71) failed
[  341.598899][T15352] FAT-fs (loop5): Directory bread(block 72) failed
[  341.600920][T15352] FAT-fs (loop5): Directory bread(block 73) failed
[  341.702695][T15360] loop6: detected capacity change from 0 to 2048
[  341.708514][T15360] EXT4-fs: Ignoring removed mblk_io_submit option
[  341.714700][T15360] EXT4-fs: Ignoring removed nobh option
[  341.738218][T15360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.752627][T15360] EXT4-fs (loop6): shut down requested (0)
[  341.811975][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.037552][ T6053] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  342.190196][ T6053] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  342.192805][ T6053] usb 6-1: config 0 has no interface number 0
[  342.204507][ T6053] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  342.210739][ T6053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.214312][ T6053] usb 6-1: Product: syz
[  342.215838][ T6053] usb 6-1: Manufacturer: syz
[  342.218028][ T6053] usb 6-1: SerialNumber: syz
[  342.223975][ T6053] usb 6-1: config 0 descriptor??
[  342.366666][T15398] loop6: detected capacity change from 0 to 40427
[  342.378811][T15398] F2FS-fs (loop6): Wrong segment_count / block_count (31 > 0)
[  342.381783][T15398] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  342.388791][T15398] F2FS-fs (loop6): invalid crc value
[  342.438735][ T6053] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  342.443678][T15398] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  342.449341][ T6053] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  342.452088][T15398] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30
[  342.453514][ T6053] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  342.456990][T15398] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  342.460055][ T6053] usb 6-1: media controller created
[  342.479194][ T6053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  342.641033][ T6053] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  342.651909][T15413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3893'.
[  342.654732][T15413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3893'.
[  342.668676][ T6053] usb 6-1: USB disconnect, device number 11
[  343.379521][T15435] loop5: detected capacity change from 0 to 4096
[  343.383628][T15435] ntfs3: Unknown parameter '@'
[  343.565003][T15447] netlink: 'syz.5.3908': attribute type 3 has an invalid length.
[  343.641491][T15456] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3913'.
[  343.692312][T15463] loop5: detected capacity change from 0 to 64
[  343.705792][   T33] audit: type=1326 audit(1754928312.288:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  343.712849][T15463] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  343.727738][   T33] audit: type=1326 audit(1754928312.288:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  343.735704][   T33] audit: type=1326 audit(1754928312.288:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3915" exe="/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  343.744883][   T33] audit: type=1326 audit(1754928312.288:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  343.751965][   T33] audit: type=1326 audit(1754928312.288:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  343.893532][T15477] sp0: Synchronizing with TNC
[  344.051317][T15487] loop5: detected capacity change from 0 to 512
[  344.060122][T15490] overlayfs: failed to clone upperpath
[  344.068033][T15487] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  344.083522][T15487] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  344.088133][T15487] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3928: Corrupt directory, running e2fsck is recommended
[  344.093273][T15487] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  344.096203][T15487] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3928: corrupted in-inode xattr: e_name out of bounds
[  344.101156][T15487] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3928: couldn't read orphan inode 15 (err -117)
[  344.105807][T15487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.125138][T13640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.438635][ T6718] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  344.589123][ T6718] usb 6-1: Using ep0 maxpacket: 8
[  344.596755][ T6718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  344.604613][ T6718] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  344.607792][ T6718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.615180][ T6718] usb 6-1: config 0 descriptor??
[  344.822708][ T6718] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  344.827478][ T6053] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  344.979476][ T6053] usb 7-1: unable to get BOS descriptor or descriptor too short
[  344.983169][ T6053] usb 7-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16
[  344.986648][ T6053] usb 7-1: config 66 interface 0 has no altsetting 0
[  344.992600][ T6053] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  344.995352][ T6053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.997921][ T6053] usb 7-1: Product: syz
[  344.999234][ T6053] usb 7-1: Manufacturer: syz
[  345.000722][ T6053] usb 7-1: SerialNumber: syz
[  345.004137][T15518] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  345.023734][ T5963] usb 6-1: USB disconnect, device number 12
[  345.023803][    C0] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  345.216011][ T6053] ati_remote2 7-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint
[  345.226026][ T6053] usb 7-1: USB disconnect, device number 6
[  345.270351][T15526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3944'.
[  345.297048][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3945'.
[  345.322526][T15528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.513311][T15538] netlink: 'syz.0.3950': attribute type 2 has an invalid length.
[  345.515697][T15538] netlink: 'syz.0.3950': attribute type 1 has an invalid length.
[  345.720899][   T33] audit: type=1326 audit(1754928314.318:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.0.3955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  345.738425][   T33] audit: type=1326 audit(1754928314.318:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.0.3955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  345.759439][   T33] audit: type=1326 audit(1754928314.328:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.0.3955" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  345.772297][   T33] audit: type=1326 audit(1754928314.328:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.0.3955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  345.799005][   T33] audit: type=1326 audit(1754928314.328:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.0.3955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae3d8ebe9 code=0x7ffc0000
[  345.833457][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3958'.
[  345.881740][T15561] Bluetooth: MGMT ver 1.23
[  347.404515][T15586] netlink: 'syz.5.3971': attribute type 21 has an invalid length.
[  347.412800][T15586] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3971'.
[  347.542819][T15594] loop5: detected capacity change from 0 to 764
[  347.580101][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3976'.
[  348.139227][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3979'.
[  348.355789][T15621] loop5: detected capacity change from 0 to 512
[  348.360937][T15621] vfat: Unknown parameter 'UVvS+ &;Sw//S 0xRCk̕.'
[  348.482556][T15628] delete_channel: no stack
[  348.617350][ T5963] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  348.769098][ T5963] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  348.772673][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.776090][ T5963] usb 6-1: config 0 has no interface number 0
[  348.783056][ T5963] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  348.786158][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.790639][ T5963] usb 6-1: Product: syz
[  348.792114][ T5963] usb 6-1: Manufacturer: syz
[  348.793730][ T5963] usb 6-1: SerialNumber: syz
[  348.796846][ T5963] usb 6-1: config 0 descriptor??
[  348.802119][ T5963] ims_pcu 6-1:0.41: Missing CDC union descriptor
[  348.804360][ T5963] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22
[  348.990356][T15648] loop6: detected capacity change from 0 to 256
[  349.003086][T15648] FAT-fs (loop6): Directory bread(block 64) failed
[  349.005261][T15648] FAT-fs (loop6): Directory bread(block 65) failed
[  349.007526][T15648] FAT-fs (loop6): Directory bread(block 66) failed
[  349.014844][T15648] FAT-fs (loop6): Directory bread(block 67) failed
[  349.016973][T15648] FAT-fs (loop6): Directory bread(block 68) failed
[  349.023995][ T5997] usb 6-1: USB disconnect, device number 13
[  349.026898][T15648] FAT-fs (loop6): Directory bread(block 69) failed
[  349.033363][T15648] FAT-fs (loop6): Directory bread(block 70) failed
[  349.035567][T15648] FAT-fs (loop6): Directory bread(block 71) failed
[  349.038855][T15648] FAT-fs (loop6): Directory bread(block 72) failed
[  349.042653][T15648] FAT-fs (loop6): Directory bread(block 73) failed
[  349.292877][T15656] loop6: detected capacity change from 0 to 32768
[  349.299119][T15656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4005 (15656)
[  349.308844][T15656] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  349.312045][T15656] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  349.314739][T15656] BTRFS info (device loop6): disk space caching is enabled
[  349.317064][T15656] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  349.399230][T15656] BTRFS info (device loop6): rebuilding free space tree
[  349.410092][T15656] BTRFS info (device loop6): disabling free space tree
[  349.412394][T15656] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  349.415486][T15656] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  349.518744][T15682] BTRFS info (device loop6 state M): max_inline set to 4096
[  349.657896][ T5976] Bluetooth: hci1: command tx timeout
[  349.660652][T15686] loop5: detected capacity change from 0 to 8192
[  350.146284][T14661] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  350.967410][ T5963] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  351.117603][ T5963] usb 6-1: Using ep0 maxpacket: 32
[  351.121835][ T5963] usb 6-1: unable to get BOS descriptor or descriptor too short
[  351.125467][ T5963] usb 6-1: config 4 has an invalid interface number: 91 but max is 0
[  351.134802][ T5963] usb 6-1: config 4 has no interface number 0
[  351.142417][ T5963] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=6c.05
[  351.146396][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.152179][ T5963] usb 6-1: Product: syz
[  351.153627][ T5963] usb 6-1: Manufacturer: syz
[  351.155392][ T5963] usb 6-1: SerialNumber: syz
[  351.160336][T15743] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  351.160336][T15743] The task syz.6.4037 (15743) triggered the difference, watch for misbehavior.
[  351.371880][ T5963] empeg 6-1:4.91: empeg converter detected
[  351.374165][ T5963] usb 6-1: active config #4 != 1 ??
[  351.379029][ T5963] usb 6-1: USB disconnect, device number 14
[  351.670570][ T5976] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  351.673483][ T5976] Bluetooth: hci1: Injecting HCI hardware error event
[  351.679889][ T5976] Bluetooth: hci1: hardware error 0x00
[  352.364114][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4048'.
[  352.767783][T15774] loop6: detected capacity change from 0 to 4096
[  352.835541][T15779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4054'.
[  353.577481][ T5963] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  353.598625][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4067'.
[  353.737746][ T5976] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  353.748025][ T5963] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  353.752041][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.766345][ T5963] usb 6-1: config 0 descriptor??
[  353.773122][ T5963] cp210x 6-1:0.0: cp210x converter detected
[  353.783683][T15810] loop6: detected capacity change from 0 to 32768
[  353.797708][T15810] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4068 (15810)
[  353.817995][T15810] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  353.828716][T15810] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  353.831482][T15810] BTRFS info (device loop6): using free-space-tree
[  353.928377][T15834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4072'.
[  353.937527][T15834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4072'.
[  353.945595][T14661] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  354.186211][ T5963] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  354.201406][ T5963] usb 6-1: cp210x converter now attached to ttyUSB0
[  354.387711][ T5997] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  354.400186][   T47] usb 6-1: USB disconnect, device number 15
[  354.411581][   T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  354.416700][   T47] cp210x 6-1:0.0: device disconnected
[  354.537416][ T5997] usb 7-1: Using ep0 maxpacket: 16
[  354.540851][ T5997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  354.545894][ T5997] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  354.548996][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.551592][ T5997] usb 7-1: Product: syz
[  354.553158][ T5997] usb 7-1: Manufacturer: syz
[  354.554870][ T5997] usb 7-1: SerialNumber: syz
[  354.558121][ T5997] usb 7-1: config 0 descriptor??
[  354.562947][ T5997] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  354.566038][ T5997] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  354.953614][T15866] loop5: detected capacity change from 0 to 8
[  354.961473][T15866] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  354.973327][T15866] cramfs: Error -3 while decompressing!
[  354.979802][T15866] cramfs: ffffffff99be3628(26)->ffff8880383ae000(4096)
[  354.983200][T15866] cramfs: Error -3 while decompressing!
[  354.985045][T15866] cramfs: ffffffff99be3642(26)->ffff88802bccf000(4096)
[  354.987898][T15866] cramfs: Error -3 while decompressing!
[  354.989711][T15866] cramfs: ffffffff99be365c(16)->ffff88804b056000(4096)
[  354.991933][T15866] cramfs: Error -3 while decompressing!
[  354.993775][T15866] cramfs: ffffffff99be3628(26)->ffff8880383ae000(4096)
[  354.996116][   T33] kauditd_printk_skb: 8 callbacks suppressed
[  354.996126][   T33] audit: type=1800 audit(1754928323.588:549): pid=15866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4086" name="file2" dev="loop5" ino=348 res=0 errno=0
[  355.165771][ T5997] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  355.272108][ T5976] Bluetooth: hci0: command 0x0405 tx timeout
[  355.419939][T15876] loop5: detected capacity change from 0 to 40427
[  355.428889][T15876] F2FS-fs (loop5): build fault injection rate: 25
[  355.431101][T15876] F2FS-fs (loop5): build fault injection type: 0x7698c
[  355.434794][T15876] F2FS-fs (loop5): invalid crc value
[  355.437703][T15876] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  355.444029][T15876] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  355.472382][T15876] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  355.476162][T15876] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  355.486060][T15876] F2FS-fs (loop5): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  355.509541][T13640] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[  355.513638][T13640] F2FS-fs (loop5): invalid blkaddr: 513, type: 10, run fsck to fix.
[  355.772888][T15893] loop5: detected capacity change from 0 to 128
[  355.789498][T15893] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.795087][T15893] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  355.806835][ T5997] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  355.816172][ T5997] em28xx 7-1:0.0: board has no eeprom
[  355.907566][ T5997] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  355.910881][ T5997] em28xx 7-1:0.0: dvb set to bulk mode.
[  355.920220][   T47] em28xx 7-1:0.0: Binding DVB extension
[  355.949074][ T5997] usb 7-1: USB disconnect, device number 7
[  355.972093][ T5997] em28xx 7-1:0.0: Disconnecting em28xx
[  356.085717][   T47] em28xx 7-1:0.0: Registering input extension
[  356.092792][ T5997] em28xx 7-1:0.0: Closing input extension
[  356.154067][ T5997] em28xx 7-1:0.0: Freeing device
[  356.751570][T15912] bond0: entered promiscuous mode
[  356.753430][T15912] bond_slave_0: entered promiscuous mode
[  356.755551][T15912] bond_slave_1: entered promiscuous mode
[  357.075262][T13640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.437533][ T5997] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  357.598796][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.602220][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.605513][ T5997] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  357.608714][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.612488][ T5997] usb 6-1: config 0 descriptor??
[  358.021993][ T5997] logitech 0003:046D:C623.001B: unknown main item tag 0x0
[  358.035003][ T5997] logitech 0003:046D:C623.001B: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.5-1/input0
[  358.225759][ T5997] usb 6-1: USB disconnect, device number 16
[  358.315610][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4130'.
[  358.537796][T15971] loop6: detected capacity change from 0 to 40427
[  358.542057][T15971] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  358.544626][T15971] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  358.548907][T15971] F2FS-fs (loop6): invalid crc value
[  358.578952][T15971] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  358.582829][T15971] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  358.585048][T15971] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  359.187507][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  359.369806][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  359.384768][    T9] usb 6-1: config 4 has an invalid interface number: 4 but max is 0
[  359.391394][    T9] usb 6-1: config 4 has no interface number 0
[  359.393437][    T9] usb 6-1: config 4 interface 4 has no altsetting 0
[  359.402226][    T9] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=53.4f
[  359.405173][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.408650][    T9] usb 6-1: Product: syz
[  359.410000][    T9] usb 6-1: Manufacturer: syz
[  359.411542][    T9] usb 6-1: SerialNumber: syz
[  359.455678][T15998] dummy0: entered promiscuous mode
[  359.458682][T15998] macsec1: entered promiscuous mode
[  359.460508][T15998] macsec1: entered allmulticast mode
[  359.462238][T15998] dummy0: entered allmulticast mode
[  359.465793][T15998] dummy0: left allmulticast mode
[  359.468127][T15998] dummy0: left promiscuous mode
[  359.600304][T16002] loop6: detected capacity change from 0 to 16
[  359.603409][T16002] erofs (device loop6): mounted with root inode @ nid 36.
[  359.621535][    T9] sierra 6-1:4.4: Sierra USB modem converter detected
[  359.628700][    T9] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  359.636855][    T9] usb 6-1: USB disconnect, device number 17
[  359.661540][    T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  359.664680][    T9] sierra 6-1:4.4: device disconnected
[  359.688740][T16008] loop6: detected capacity change from 0 to 256
[  359.696253][T16008] FAT-fs (loop6): Directory bread(block 1285) failed
[  359.710354][T16008] FAT-fs (loop6): FAT read failed (blocknr 1281)
[  359.790472][T16014] netlink: 'syz.6.4150': attribute type 21 has an invalid length.
[  359.794124][T16014] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4150'.
[  359.862187][T16018] loop6: detected capacity change from 0 to 4096
[  359.884870][T16018] ntfs3(loop6): ino=18, mi_enum_attr
[  359.886780][T16018] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  359.902498][T16018] ntfs3(loop6): failed to convert "0080" to cp862
[  359.906381][T16018] ntfs3(loop6): failed to convert name for inode 1e.
[  359.912151][T16018] ntfs3(loop6): ino=1f, mi_enum_attr
[  360.402347][T16041] loop5: detected capacity change from 0 to 256
[  360.526537][T16048] loop6: detected capacity change from 0 to 512
[  360.578402][T16048] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4165: invalid indirect mapped block 4294967295 (level 1)
[  360.621241][T16048] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4165: invalid indirect mapped block 4294967295 (level 1)
[  360.635694][T16048] EXT4-fs (loop6): 2 truncates cleaned up
[  360.660425][T16048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.677176][T16048] EXT4-fs error (device loop6): empty_inline_dir:1760: inode #12: block 7: comm syz.6.4165: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  360.714080][T16048] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  360.806482][T16056] loop5: detected capacity change from 0 to 256
[  360.838910][T16056] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[  361.061467][T16060] loop5: detected capacity change from 0 to 256
[  361.095908][   T33] audit: type=1800 audit(1754928329.688:550): pid=16060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4170" name=93FDD4787ADAD4209069 dev="loop5" ino=1048750 res=0 errno=0
[  361.712790][T16082] x_tables: ip_tables: udp match: only valid for protocol 17
[  361.729159][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.901406][T16094] delete_channel: no stack
[  362.087635][  T794] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  362.234026][T16106] loop6: detected capacity change from 0 to 256
[  362.236742][T16106] exfat: Deprecated parameter 'utf8'
[  362.240360][T16106] exfat: Deprecated parameter 'namecase'
[  362.246654][T16106] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001016b, chksum : 0xc5c53e17, utbl_chksum : 0xe619d30d)
[  362.263127][  T794] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  362.269246][  T794] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  362.275276][  T794] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77
[  362.281145][  T794] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  362.285615][  T794] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  362.291389][  T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.297897][T16091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  362.518682][  T794] ath6kl: Failed to submit usb control message: -71
[  362.522769][  T794] ath6kl: unable to send the bmi data to the device: -71
[  362.525205][  T794] ath6kl: Unable to send get target info: -71
[  362.544819][  T794] ath6kl: Failed to init ath6kl core: -71
[  362.548189][  T794] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71
[  362.563563][  T794] usb 6-1: USB disconnect, device number 18
[  362.691961][T16120] loop6: detected capacity change from 0 to 256
[  362.707372][T16120] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  362.711083][T16120] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  362.717114][T16122] sit1: entered promiscuous mode
[  362.719365][T16120] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  362.719736][T16122] sit1: entered allmulticast mode
[  362.963537][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4205'.
[  362.968691][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
Connection to localhost closed by remote host.
[  363.094564][T16135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  363.456798][ T5996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.532347][ T5996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.607934][ T5996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.679130][ T5996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.778364][ T5996] bridge_slave_1: left allmulticast mode
[  363.780246][ T5996] bridge_slave_1: left promiscuous mode
[  363.782204][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.786000][ T5996] bridge_slave_0: left allmulticast mode
[  363.792126][ T5996] bridge_slave_0: left promiscuous mode
[  363.794008][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.136392][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.143333][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.146999][ T5996] bond0 (unregistering): Released all slaves
[  364.421978][ T5996] hsr_slave_0: left promiscuous mode
[  364.424198][ T5996] hsr_slave_1: left promiscuous mode
[  364.426233][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.428757][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.431574][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.433997][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.443539][ T5996] veth1_macvtap: left promiscuous mode
[  364.445396][ T5996] veth0_macvtap: left promiscuous mode
[  364.447400][ T5996] veth1_vlan: left promiscuous mode
[  364.449150][ T5996] veth0_vlan: left promiscuous mode
[  364.793070][ T5996] team0 (unregistering): Port device team_slave_1 removed
[  364.825048][ T5996] team0 (unregistering): Port device team_slave_0 removed
[  365.504488][ T5996] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.572205][ T5996] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.656271][ T5996] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.727224][ T5996] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.882539][ T5996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.885979][ T5996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.961809][ T5996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.966150][ T5996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.024537][ T5996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.029038][ T5996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.103576][ T5996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.106936][ T5996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.238613][ T5996] bridge_slave_1: left allmulticast mode
[  366.240556][ T5996] bridge_slave_1: left promiscuous mode
[  366.244342][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.248657][ T5996] bridge_slave_0: left allmulticast mode
[  366.250560][ T5996] bridge_slave_0: left promiscuous mode
[  366.252438][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.257116][ T5996] bridge_slave_1: left allmulticast mode
[  366.259250][ T5996] bridge_slave_1: left promiscuous mode
[  366.261239][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.268342][ T5996] bridge_slave_0: left allmulticast mode
[  366.270125][ T5996] bridge_slave_0: left promiscuous mode
[  366.272081][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.789690][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.792584][ T5996] bond_slave_0: left promiscuous mode
[  366.796895][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.805222][ T5996] bond_slave_1: left promiscuous mode
[  366.810479][ T5996] bond0 (unregistering): Released all slaves
[  366.974779][ T5996] bond2 (unregistering): (slave geneve2): Releasing active interface
[  366.977498][ T5996] geneve2 (unregistering): left promiscuous mode
[  367.232961][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.237183][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.241651][ T5996] bond0 (unregistering): Released all slaves
[  367.353219][ T5996] bond1 (unregistering): Released all slaves
[  367.458655][ T5996] bond2 (unregistering): Released all slaves
[  367.562480][ T5996] : left promiscuous mode
[  367.654897][ T5996] tipc: Left network mode
[  367.990232][ T5996] hsr_slave_0: left promiscuous mode
[  367.992464][ T5996] hsr_slave_1: left promiscuous mode
[  367.994498][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.996878][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.003884][ T5996] hsr_slave_0: left promiscuous mode
[  368.006049][ T5996] hsr_slave_1: left promiscuous mode
[  368.008122][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.010465][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.034405][ T5996] veth1_macvtap: left promiscuous mode
[  368.036179][ T5996] veth0_macvtap: left promiscuous mode
[  368.041547][ T5996] veth1_vlan: left promiscuous mode
[  368.043241][ T5996] veth0_vlan: left promiscuous mode
[  368.048112][ T5996] veth1_macvtap: left promiscuous mode
[  368.049868][ T5996] veth0_macvtap: left promiscuous mode
[  368.051724][ T5996] veth1_vlan: left promiscuous mode
[  368.455323][ T5996] team0 (unregistering): Port device team_slave_1 removed
[  368.491153][ T5996] team0 (unregistering): Port device team_slave_0 removed
[  369.141293][ T5996] team0 (unregistering): Port device team_slave_1 removed
[  369.175821][ T5996] team0 (unregistering): Port device team_slave_0 removed
[  369.396030][ T5996] team0 (unregistering): Port device dummy0 removed
[  369.974331][ T5996] IPVS: stop unused estimator thread 0...
[  378.139660][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.141707][ T1363] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
16:01:25  Registers:
info registers vcpu 0

CPU#0
RAX=0ccd045b74030e00 RBX=ffffffff81968308 RCX=0ccd045b74030e00 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff91aa06f70 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000041 000000001e316c6c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000041 0000000038316c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=cd4ca373aa5ca600 RBX=ffffffff81968308 RCX=cd4ca373aa5ca600 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f40682e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000271 00002f0031313038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffff00ff00000000 XMM09=696b66722f323179 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
