last executing test programs:

1m55.500549006s ago: executing program 2 (id=3):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

1m55.411774895s ago: executing program 2 (id=7):
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)

1m54.207287932s ago: executing program 2 (id=20):
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xffffffffffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x30}}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000002c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0)

1m53.940945833s ago: executing program 32 (id=20):
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xffffffffffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x30}}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000002c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0)

1m31.722754094s ago: executing program 3 (id=261):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

1m30.442297398s ago: executing program 3 (id=276):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x6d9, 0xf8a1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x4, 0x2, 0x1, 0x4, 0x5], 0x0, 0x3}, {0x3, [0xe, 0x4, 0x1, 0x4, 0x6, 0x2], 0x0, 0x5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 'ip6_vti0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x16}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x9e39, 0xc, [0x1a, 0x3a, 0x7, 0x37, 0x3a, 0x18, 0x2b, 0x37, 0x14, 0x2b, 0xa, 0x5, 0x31, 0x19, 0x3, 0x4], 0x1, 0x3, 0x4}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0xf, [0x23, 0x27, 0x6, 0x18, 0x34, 0x9, 0x2a, 0x1f, 0x8, 0x14, 0x14, 0x1f, 0xf, 0x39, 0x13, 0x37], 0x0, 0x8, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0)

1m28.758881473s ago: executing program 3 (id=286):
syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403"], 0x0)

1m27.47296151s ago: executing program 3 (id=293):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')

1m27.40483564s ago: executing program 3 (id=294):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07})
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/180, 0xb4}, {0x0}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)

1m27.283833404s ago: executing program 3 (id=295):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x34, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x8, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x1, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m26.952756337s ago: executing program 33 (id=295):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x34, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x8, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x1, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

4.871679245s ago: executing program 4 (id=1359):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000780)={0x20, 0x7bcd6c10878fe23, 0x4, {0x4, 0x21, "50b1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.867308772s ago: executing program 4 (id=1386):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008180)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd2a, 0xa5dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10496, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000800)

2.774903776s ago: executing program 4 (id=1388):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2.63309251s ago: executing program 4 (id=1391):
pipe2$9p(&(0x7f0000000140), 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

1.239665447s ago: executing program 0 (id=1408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888)

1.223497645s ago: executing program 4 (id=1409):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x1c8)
lseek(r0, 0xfffffffffffffffc, 0x0)

1.172563992s ago: executing program 0 (id=1411):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "72ae58", 0x14, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)

1.072176452s ago: executing program 0 (id=1413):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r0, 0x7, 0x0, 0xffffffff, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0}, 0x40)

990.590422ms ago: executing program 0 (id=1414):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0xffffff81, 0x2a000b02, 0x2, 0x0, 0x6}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0)
ioctl$FIBMAP(r2, 0x401070ca, &(0x7f0000000000))

891.415556ms ago: executing program 0 (id=1415):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xf1}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)

802.730825ms ago: executing program 4 (id=1416):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGREP(r2, 0x80084522, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x5)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0)
r6 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00')
socket$inet6(0xa, 0x1, 0x8010800000000084)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x4}, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x1f, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

641.098177ms ago: executing program 1 (id=1417):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$eJzs3d9rW+UbAPDnpO3W/fh+28EY6oUUduFkLl1bf0zwYl6J6HCg9zO0WRlNl9GkY60Dtwt3440MQcSB6L33Xg7/Af+KgQ6GjKIX3lROctKFNunSLF2z5vOBs73vOSd9z5P3PG/ek5OQAAbWRPpPLuLliPgmiRhr2jYc2caJ+n5rj2/OpksS6+uf/pVEkq1r7J9k/x/JKi9FxG9fRZzObW23srK6UCiViktZfbK6eG2ysrJ65spiYb44X7w6PTNz7q2Z6Xffebtnsb5+8Z/vP7n/4bmvT65998vDY3eTOB9Hs23NcTyDW82ViZjInpOROL9px6keNNZPkr0+ALoylOX5SKRjwFgMZVnf0vrY8zw0YJd9maY1MKAS+Q8DqjEPaFzb9+g6+IXx6P36BdDW+Ifr743EaO3a6PBaUr8yOljfml7vjveg/bSNX/+8dzddot37EAd70BDAJrduR8TZ4eGt41+SjX/dO9vBPpvbGLTXH9hL99P5zxut5j+5jflPNM9/Mkda5G43np7/uYc9aKatdP73Xsv578ZNq/GhrPa/2pxvJLl8pVRMx7b/R8SpGDmY1qci4oPWN0E+z609WG/XfvP8L13S9htzwew4Hg5vmv/NFaqFZ4+87tHtiFdazn+Tjf5PWvR/+nxc7LCNE8V7r7bb9vT4d9f6TxGvtez/J52ZbH9/crJ2Pkw2zoqt/r5z4vd27W8b/2jPw90i7f/D28c/njTfr63svI0fR/8tttvW7fl/IPmsVj6QrbtRqFaXpiIOJB9vXT/95LGNemP/NP5TJ7cf/1qd/4fSxO4w/jvH7zTvOrqz+HdXGv/cjvp/54UHH33xQ7v2O+v/N2ulU9maTsa/Tg/wWZ47AAAAAAAA6De5iDgaSS6/Uc7l8vn65zuOx+FcqVypnr5cXr46F7Xvyo7HSK5xp3us6fMQU9nnYRv16U31mYg4FhHfDh2q1fOz5dLcXgcPAAAAAAAAAAAAAAAAAAAAfeJIxGir7/+n/hhq/Zg2q4EX0TY/+Q3sc+3zP9vSi196AvqS138YXF3kv/cAYJ/w+g+DS/7D4JL/MLjkPwwu+Q+Dayf5//OFXTwQAAAAAAAAAAAAAAAAAAAAAAAAAAAA2B8uXriQLutrj2/OpvW56yvLC+XrZ+aKlYX84vJsfra8dC0/Xy7Pl4r52fLi0/5eqVy+NjUdyzcmq8VKdbKysnppsbx8tXrpymJhvnipOPJcogIAAAAAAAAAAAAAAAAAAIAXS2VldaFQKhWXFBS6Kgz3x2H0YSHXH4fRZWGvRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOK/AAAA//92vTrs")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000002440)={0x4, 0xffff, 0x2})

159.604929ms ago: executing program 1 (id=1418):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18)
getegid()

159.334896ms ago: executing program 1 (id=1419):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
r1 = fanotify_init(0x200, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
fanotify_mark(r1, 0x71, 0x40000009, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r1, 0x161, 0x40000867, r3, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)

82.436917ms ago: executing program 1 (id=1420):
r0 = socket$inet6_udp(0x2d, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x11d, 0x30, 0x0, 0x0)

82.276189ms ago: executing program 1 (id=1421):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

422.285µs ago: executing program 0 (id=1422):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000020000003400128009000100626f6e640000000024000280080003000400040005000600000000000b000f00ffff"], 0x54}}, 0x0)

0s ago: executing program 1 (id=1423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc)

kernel console output (not intermixed with test programs):

 58.451055][ T5919] erofs (device loop2): mounted with root inode @ nid 36.
[   58.533543][ T5922] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.536888][ T5922] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.645559][ T5914] loop1: detected capacity change from 0 to 32768
[   58.651234][ T5914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4 (5914)
[   58.670787][ T5914] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   58.681991][ T5914] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   58.753399][ T5914] BTRFS info (device loop1): enabling ssd optimizations
[   58.755638][ T5914] BTRFS info (device loop1): using spread ssd allocation scheme
[   58.761852][ T5914] BTRFS info (device loop1): enabling free space tree
[   58.799339][ T5853] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   58.904045][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.036444][ T5948] loop0: detected capacity change from 0 to 32768
[   59.039105][ T5948] XFS: attr2 mount option is deprecated.
[   59.097292][ T5948] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   59.151433][ T5948] XFS (loop0): Ending clean mount
[   59.156594][ T5948] XFS (loop0): Quotacheck needed: Please wait.
[   59.179220][ T5948] XFS (loop0): Quotacheck: Done.
[   59.217491][ T5847] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   59.549609][ T5971] loop0: detected capacity change from 0 to 32768
[   59.558984][ T5971] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.18 (5971)
[   59.580491][ T5971] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.599915][ T5971] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   59.651120][ T5971] BTRFS info (device loop0): enabling ssd optimizations
[   59.658810][ T5971] BTRFS info (device loop0): enabling free space tree
[   59.701374][ T5847] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.774270][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.892165][   T54] Bluetooth: hci2: command tx timeout
[   60.155619][ T5996] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[   60.267628][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.271309][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.277786][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.286586][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.290077][ T5998] loop1: detected capacity change from 0 to 4096
[   60.293348][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.346228][ T5998] ntfs3(loop1): ino=b, mi_enum_attr
[   60.354612][ T5998] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   60.359281][ T5998] ntfs3(loop1): Failed to load $Extend (-22).
[   60.365395][ T5998] ntfs3(loop1): Failed to initialize $Extend.
[   60.616915][ T6016] team0: Device gtp0 is of different type
[   60.642740][ T5999] chnl_net:caif_netlink_parms(): no params data found
[   61.113712][ T5240] Bluetooth: hci0: command tx timeout
[   61.193666][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.201518][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.214833][ T5999] bridge_slave_0: entered allmulticast mode
[   61.219486][ T5999] bridge_slave_0: entered promiscuous mode
[   61.238954][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.249083][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.249301][ T6020] loop0: detected capacity change from 0 to 32768
[   61.281913][ T5999] bridge_slave_1: entered allmulticast mode
[   61.287113][ T5999] bridge_slave_1: entered promiscuous mode
[   61.304191][ T6020] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   61.321293][ T6020] XFS (loop0): Ending clean mount
[   61.407836][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.418483][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.483678][ T5999] team0: Port device team_slave_0 added
[   61.493654][ T5999] team0: Port device team_slave_1 added
[   61.524730][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.527704][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.539210][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.545600][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.548522][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.559921][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.607030][ T5999] hsr_slave_0: entered promiscuous mode
[   61.610270][ T5999] hsr_slave_1: entered promiscuous mode
[   61.613805][ T5999] debugfs: 'hsr0' already exists in 'hsr'
[   61.615828][ T5999] Cannot create hsr debugfs directory
[   61.664756][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.743713][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.745647][ T6042] bad cache= option: no%e
[   61.745647][ T6042] 
[   61.750999][ T6042] CIFS: VFS: bad cache= option: no%e
[   61.851827][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.858180][ T5999] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   61.862987][ T5999] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   61.871113][ T5999] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   61.876185][ T5999] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   61.945800][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.949007][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.952762][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.955739][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.972395][ T5240] Bluetooth: hci2: command tx timeout
[   62.009315][ T5847] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   62.104610][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.155542][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.158569][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.170048][   T12] bridge_slave_1: left allmulticast mode
[   62.172307][   T12] bridge_slave_1: left promiscuous mode
[   62.174804][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.197305][   T12] bridge_slave_0: left allmulticast mode
[   62.208678][   T12] bridge_slave_0: left promiscuous mode
[   62.212037][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.372403][ T5240] Bluetooth: hci1: command tx timeout
[   62.910614][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.915879][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.919527][   T12] bond0 (unregistering): Released all slaves
[   62.968120][ T5999] 8021q: adding VLAN 0 to HW filter on device team0
[   62.991704][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.994229][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.029318][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.032383][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.172723][ T5240] Bluetooth: hci0: command tx timeout
[   63.577494][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.637417][ T5999] veth0_vlan: entered promiscuous mode
[   63.651005][ T5999] veth1_vlan: entered promiscuous mode
[   63.662559][   T12] hsr_slave_0: left promiscuous mode
[   63.665187][   T12] hsr_slave_1: left promiscuous mode
[   63.667392][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.669977][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.675133][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.677690][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.689484][   T12] veth1_macvtap: left promiscuous mode
[   63.693209][   T12] veth0_macvtap: left promiscuous mode
[   63.695381][   T12] veth1_vlan: left promiscuous mode
[   63.697328][   T12] veth0_vlan: left promiscuous mode
[   63.760182][ T6084] loop0: detected capacity change from 0 to 32768
[   63.764417][ T6084] XFS: noikeep mount option is deprecated.
[   63.773037][ T6084] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   63.782003][ T6084] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   63.830436][ T6084] XFS (loop0): Ending clean mount
[   63.845064][ T6084] XFS (loop0): Quotacheck needed: Please wait.
[   63.881730][ T6084] XFS (loop0): Quotacheck: Done.
[   63.950694][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.071835][ T5240] Bluetooth: hci2: command tx timeout
[   64.169542][   T12] team0 (unregistering): Port device team_slave_1 removed
[   64.206112][   T12] team0 (unregistering): Port device team_slave_0 removed
[   64.452029][ T5240] Bluetooth: hci1: command tx timeout
[   64.460708][ T5999] veth0_macvtap: entered promiscuous mode
[   64.472041][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   64.479508][ T5999] veth1_macvtap: entered promiscuous mode
[   64.512021][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.524823][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.551069][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.566381][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.578378][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.607972][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.657530][    T9] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[   64.661149][    T9] usb 1-1: config 0 has no interface number 0
[   64.668006][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.675161][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.680887][    T9] usb 1-1: config 0 interface 29 has no altsetting 0
[   64.692817][    T9] usb 1-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d
[   64.702859][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.711408][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.733416][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.750592][    T9] usb 1-1: config 0 descriptor??
[   64.903596][ T6122] capability: warning: `syz.3.21' uses deprecated v2 capabilities in a way that may be insecure
[   64.984299][    T9] usb 1-1: string descriptor 0 read error: -71
[   64.996013][    T9] usb-storage 1-1:0.29: USB Mass Storage device detected
[   65.018106][    T9] usb-storage 1-1:0.29: Quirks match for vid 357d pid 7788: 4800000
[   65.057070][ T6132] loop3: detected capacity change from 0 to 128
[   65.070972][    T9] usb 1-1: USB disconnect, device number 2
[   65.103729][ T6118] loop1: detected capacity change from 0 to 32768
[   65.107178][ T6118] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.55 (6118)
[   65.119443][ T6118] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   65.124363][ T6118] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   65.128721][ T6132] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   65.136257][ T6132] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   65.167169][ T6118] BTRFS info (device loop1): enabling ssd optimizations
[   65.173747][ T6118] BTRFS info (device loop1): turning on sync discard
[   65.178432][ T6118] BTRFS info (device loop1): enabling free space tree
[   65.212492][ T5853] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   65.290522][ T6132] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   65.309662][ T6132] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[   65.344811][ T5999] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   65.460347][ T6165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.60'.
[   65.542516][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   65.716952][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   65.720797][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.722940][ T6186] syz.3.67 uses obsolete (PF_INET,SOCK_PACKET)
[   65.724132][    T9] usb 2-1: Product: syz
[   65.727333][    T9] usb 2-1: Manufacturer: syz
[   65.728880][    T9] usb 2-1: SerialNumber: syz
[   65.815013][   T96] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   65.861025][ T6190] ceph: No source
[   65.977945][ T6196] netlink: 104 bytes leftover after parsing attributes in process `syz.3.72'.
[   65.981723][   T96] usb 1-1: Using ep0 maxpacket: 16
[   65.986747][   T96] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[   65.991347][   T96] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   66.001450][   T96] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   66.006767][   T96] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.009653][   T96] usb 1-1: Product: syz
[   66.013076][   T96] usb 1-1: Manufacturer: syz
[   66.014971][   T96] usb 1-1: SerialNumber: syz
[   66.019079][   T96] usb 1-1: config 0 descriptor??
[   66.027756][   T96] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   66.031092][   T96] em28xx 1-1:0.0: Video interface 0 found: isoc
[   66.295117][   T96] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[   66.368185][   T96] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   66.372085][   T96] em28xx 1-1:0.0: board has no eeprom
[   66.432377][   T96] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   66.435626][   T96] em28xx 1-1:0.0: Currently, V4L2 is not supported on this model
[   66.439272][ T6026] em28xx 1-1:0.0: Binding DVB extension
[   66.443133][ T6026] em28xx 1-1:0.0: no endpoint for DVB mode and transfer type 0
[   66.447286][ T6026] em28xx 1-1:0.0: failed to pre-allocate USB transfer buffers for DVB.
[   66.450105][ T6026] em28xx 1-1:0.0: Registering input extension
[   66.453576][   T96] usb 1-1: USB disconnect, device number 3
[   66.457180][   T96] em28xx 1-1:0.0: Disconnecting em28xx
[   66.459927][   T96] em28xx 1-1:0.0: Closing input extension
[   66.486682][   T96] em28xx 1-1:0.0: Freeing device
[   66.532956][ T5240] Bluetooth: hci1: command tx timeout
[   66.754103][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[   66.759475][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   66.764381][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   66.772488][    T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[   66.793172][    T9] usb 2-1: USB disconnect, device number 2
[   66.919472][ T6211] loop0: detected capacity change from 0 to 256
[   66.931551][ T6211] exfat: Deprecated parameter 'utf8'
[   66.948028][ T6211] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   67.055491][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'.
[   67.345878][ T6227] loop0: detected capacity change from 0 to 32768
[   67.347451][ T6237] loop1: detected capacity change from 0 to 1024
[   67.348468][ T6227] =======================================================
[   67.348468][ T6227] WARNING: The mand mount option has been deprecated and
[   67.348468][ T6227]          and is ignored by this kernel. Remove the mand
[   67.348468][ T6227]          option from the mount to silence this warning.
[   67.348468][ T6227] =======================================================
[   67.390267][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   67.400080][ T6237] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.409989][ T6237] netlink: 'syz.1.89': attribute type 4 has an invalid length.
[   67.416945][ T6227] (syz.0.84,6227,0):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[   67.416982][ T6227] (syz.0.84,6227,0):ocfs2_check_volume:2432 ERROR: status = -27
[   67.420443][ T6237] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.89: lblock 3 mapped to illegal pblock 3 (length 3)
[   67.426796][ T6227] (syz.0.84,6227,0):ocfs2_mount_volume:1764 ERROR: status = -27
[   67.428961][ T6237] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   67.436215][ T6227] (syz.0.84,6227,0):ocfs2_fill_super:1177 ERROR: status = -27
[   67.444529][ T6237] EXT4-fs (loop1): This should not happen!! Data will be lost
[   67.444529][ T6237] 
[   67.464006][ T6237] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.89: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   67.475054][ T6237] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[   67.505772][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   67.562178][   T96] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   67.731730][   T96] usb 4-1: Using ep0 maxpacket: 8
[   67.741380][   T96] usb 4-1: unable to get BOS descriptor or descriptor too short
[   67.746908][   T96] usb 4-1: config 8 has an invalid interface number: 154 but max is 0
[   67.750458][   T96] usb 4-1: config 8 has no interface number 0
[   67.754660][   T96] usb 4-1: config 8 interface 154 has no altsetting 0
[   67.760185][   T96] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=4f.f6
[   67.765137][   T96] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.768479][   T96] usb 4-1: Product: syz
[   67.770236][   T96] usb 4-1: Manufacturer: syz
[   67.772653][   T96] usb 4-1: SerialNumber: syz
[   68.005049][ T6258] delete_channel: no stack
[   68.348753][   T96] mdc800 4-1:8.154: probe fails -> wrong Interface
[   68.359151][   T96] usb 4-1: USB disconnect, device number 2
[   68.410985][ T6253] loop1: detected capacity change from 0 to 32768
[   68.451448][ T6253] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   68.480796][ T6253] XFS (loop1): Ending clean mount
[   68.500991][ T5853] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   68.611875][ T5240] Bluetooth: hci1: command tx timeout
[   68.667796][   T33] audit: type=1107 audit(1756995978.882:2): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   68.755735][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'.
[   68.759481][ T6281] netlink: 'syz.0.104': attribute type 2 has an invalid length.
[   68.767997][ T6281] netlink: 'syz.0.104': attribute type 1 has an invalid length.
[   68.771089][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'.
[   68.866357][ T6287] loop0: detected capacity change from 0 to 512
[   68.877566][ T6287] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   68.898588][ T6287] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   68.934577][ T6287] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   68.960363][ T6287] EXT4-fs (loop0): 1 truncate cleaned up
[   68.967566][ T6287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.049439][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.381325][ T6294] loop1: detected capacity change from 0 to 32768
[   69.398540][ T6294] bcachefs (/dev/loop1): error validating superblock: Invalid option shard_inode_numbers_bits: too big (max 8)
[   69.415306][ T6294] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[   69.643690][ T6299] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   69.647412][ T6298] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   69.673670][ T6296] loop0: detected capacity change from 0 to 32768
[   69.682730][ T6296] jfs_mount: Failed to read AGGREGATE_I
[   69.685075][ T6296] Mount JFS Failure: -5
[   69.686641][ T6296] jfs_mount failed w/return code = -5
[   70.101827][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   70.117041][ T6309] loop3: detected capacity change from 0 to 4096
[   70.123701][ T6309] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   70.141901][ T6309] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   70.149897][ T6309] ntfs3(loop3): ino=19, mi_enum_attr
[   70.158596][ T6309] ntfs3(loop3): failed to convert "c46c" to default
[   70.173217][ T6309] ntfs3(loop3): ino=20, mi_enum_attr
[   70.263626][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.269209][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.282635][   T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   70.289261][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.296574][   T24] usb 2-1: config 0 descriptor??
[   70.448184][ T6325] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.123'.
[   70.511844][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   70.572120][ T6331] loop0: detected capacity change from 0 to 128
[   70.672406][    T9] usb 4-1: Using ep0 maxpacket: 16
[   70.677567][    T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[   70.680873][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.685165][    T9] usb 4-1: config 0 has no interface number 0
[   70.690071][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   70.699021][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.702591][    T9] usb 4-1: Product: syz
[   70.704332][    T9] usb 4-1: Manufacturer: syz
[   70.706827][    T9] usb 4-1: SerialNumber: syz
[   70.717693][    T9] usb 4-1: config 0 descriptor??
[   70.729914][    T9] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[   70.733554][    T9] usb 4-1: No valid video chain found.
[   70.734927][   T24] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[   70.795416][ T6337] loop0: detected capacity change from 0 to 2048
[   70.817342][ T6337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.833111][   T33] audit: type=1800 audit(1756995981.052:3): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file1" dev="loop0" ino=1346 res=0 errno=0
[   70.951897][   T10] usb 4-1: USB disconnect, device number 3
[   71.016088][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.019156][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.254170][   T10] usb 2-1: USB disconnect, device number 3
[   71.657965][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.132'.
[   72.120997][ T6364] netlink: 'syz.1.137': attribute type 1 has an invalid length.
[   72.178621][ T6364] 8021q: adding VLAN 0 to HW filter on device bond2
[   72.183864][ T6364] bond1: (slave bond2): making interface the new active one
[   72.186671][ T6364] bond1: (slave bond2): Enslaving as an active interface with an up link
[   72.411846][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   72.417590][ T6387] loop3: detected capacity change from 0 to 8
[   72.438909][ T6387] SQUASHFS error: xz decompression failed, data probably corrupt
[   72.465594][ T6387] SQUASHFS error: Failed to read block 0x108: -5
[   72.470679][ T6387] SQUASHFS error: Unable to read metadata cache entry [106]
[   72.478437][ T6387] SQUASHFS error: Unable to read inode 0x11f
[   72.501302][ T6390] netlink: 64 bytes leftover after parsing attributes in process `syz.1.148'.
[   73.301852][   T10] usb 1-1: Using ep0 maxpacket: 8
[   73.305699][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.309971][   T10] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[   73.334286][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.344499][   T10] usb 1-1: config 0 descriptor??
[   73.353072][   T10] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22
[   73.465198][ T6411] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   73.563908][   T24] usb 1-1: USB disconnect, device number 4
[   74.008035][ T6067] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[   74.243750][ T6444] loop1: detected capacity change from 0 to 164
[   74.370375][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'.
[   74.377140][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'.
[   75.072634][ T6474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.186'.
[   75.118140][ T6470] loop3: detected capacity change from 0 to 32768
[   75.126047][ T6470] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   75.137877][ T6470] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   75.173664][ T6480] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   75.227521][ T5999] ocfs2: Unmounting device (7,3) on (node local)
[   75.926527][ T6504] loop3: detected capacity change from 0 to 16
[   75.930318][ T6504] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   76.427487][ T6512] overlayfs: unescaped trailing colons in lowerdir mount option.
[   76.436446][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'.
[   76.520455][ T6516] veth1_to_team: entered promiscuous mode
[   76.532261][ T6516] veth1_to_team: left promiscuous mode
[   77.043939][ T6067] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   77.221810][ T6067] usb 2-1: Using ep0 maxpacket: 8
[   77.255887][ T6067] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   77.267143][ T6067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.270224][ T6067] usb 2-1: Product: syz
[   77.273509][ T6067] usb 2-1: Manufacturer: syz
[   77.275509][ T6067] usb 2-1: SerialNumber: syz
[   77.296724][ T6067] usb 2-1: config 0 descriptor??
[   77.398722][ T6536] loop0: detected capacity change from 0 to 4096
[   77.451298][ T6541] loop3: detected capacity change from 0 to 164
[   77.592444][ T6067] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   77.876335][ T6555] loop0: detected capacity change from 0 to 512
[   77.899773][ T6555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   77.959912][ T6518] loop1: detected capacity change from 0 to 512
[   78.011294][ T6555] EXT4-fs (loop0): 1 truncate cleaned up
[   78.022274][ T6518] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   78.032466][ T6555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.090463][ T6518] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[   78.147348][ T6067] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   78.166615][ T6067] usb 2-1: USB disconnect, device number 4
[   78.176450][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.325159][ T6568] fuse: Bad value for 'fd'
[   78.883491][ T6576] cgroup: Unknown subsys name 'cpuset'
[   79.824702][ T6585] sch_fq: defrate 0 ignored.
[   79.927799][ T6593] netlink: 'syz.3.223': attribute type 1 has an invalid length.
[   80.530172][ T6608] loop3: detected capacity change from 0 to 2048
[   80.548247][ T6608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.552282][ T6608] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.561914][   T33] audit: type=1326 audit(1756995990.772:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.3.229" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86fb18ebe9 code=0x0
[   80.834426][ T6614] loop1: detected capacity change from 0 to 2048
[   80.877147][ T6615] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.005224][ T6621] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   81.005224][ T6621] The task syz.0.231 (6621) triggered the difference, watch for misbehavior.
[   81.254265][ T1855] cfg80211: failed to load regulatory.db
[   81.372215][ T5999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.467822][ T6627] loop1: detected capacity change from 0 to 8
[   81.499311][ T6627] SQUASHFS error: Failed to read block 0x260685: -5
[   81.517951][ T6627] SQUASHFS error: Unable to read metadata cache entry [260685]
[   81.524569][ T6627] SQUASHFS error: Unable to read directory block [260685:0]
[   81.589253][ T6633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.655650][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'.
[   81.659434][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[   81.667427][ T6638] netlink: 'syz.1.240': attribute type 18 has an invalid length.
[   81.927310][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'.
[   82.195897][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'.
[   83.137904][ T6699] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.267'.
[   83.313488][ T6714] loop1: detected capacity change from 0 to 512
[   83.330809][ T6714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.336035][ T6714] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.419189][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.897085][ T1855] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   84.058126][ T1855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[   84.062207][ T1855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   84.066562][ T1855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   84.070871][ T1855] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[   84.075180][ T1855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.082013][ T1855] usb 4-1: config 0 descriptor??
[   84.087456][ T1855] em28xx 4-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[   84.093617][ T1855] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[   84.140115][ T6730] loop0: detected capacity change from 0 to 2048
[   84.355215][ T1855] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[   84.361488][ T1855] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[   84.366905][ T1855] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[   84.369404][ T1855] em28xx 4-1:0.0: No AC97 audio processor
[   84.529325][ T1855] usb 4-1: USB disconnect, device number 4
[   84.626653][ T1855] em28xx 4-1:0.0: Disconnecting em28xx
[   84.684341][ T1855] em28xx 4-1:0.0: Freeing device
[   84.849732][ T6739] loop1: detected capacity change from 0 to 2048
[   84.859487][ T6740] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.871126][ T6739] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[   84.876653][ T6739] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16)
[   84.883059][ T6739] Remounting filesystem read-only
[   84.885133][ T6739] NILFS (loop1): error -5 truncating bmap (ino=16)
[   84.903246][ T5853] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   85.461876][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   85.612334][   T24] usb 4-1: Using ep0 maxpacket: 8
[   85.617125][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.620954][   T24] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[   85.634880][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.643869][   T24] usb 4-1: config 0 descriptor??
[   85.656444][   T24] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[   85.847471][ T6759] warning: `syz.1.287' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.861106][ T6067] usb 4-1: USB disconnect, device number 5
[   86.158812][ T6768] loop1: detected capacity change from 0 to 4096
[   86.178586][ T6768] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   86.220309][ T6768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.297875][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.729050][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.811332][ T6772] loop1: detected capacity change from 0 to 32768
[   86.881559][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.036103][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.187908][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.575941][ T6779] loop1: detected capacity change from 0 to 4096
[   87.593634][   T12] bridge_slave_1: left allmulticast mode
[   87.600681][   T12] bridge_slave_1: left promiscuous mode
[   87.613092][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.646809][   T12] bridge_slave_0: left allmulticast mode
[   87.649257][   T12] bridge_slave_0: left promiscuous mode
[   87.670774][ T6779] ntfs3(loop1): ino=5, "/" mi_enum_attr
[   87.675683][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.677566][ T6779] ntfs3(loop1): ino=5, "/" ntfs_readdir
[   87.740596][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.750015][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.754893][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.758596][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.772035][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.971825][ T5895] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   88.057864][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.064151][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.069072][   T12] bond0 (unregistering): Released all slaves
[   88.155793][ T6797] loop1: detected capacity change from 0 to 4096
[   88.160365][ T5895] usb 1-1: config 0 has no interfaces?
[   88.164622][ T5895] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[   88.168057][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.186470][ T5895] usb 1-1: Product: syz
[   88.187941][ T5895] usb 1-1: Manufacturer: syz
[   88.189508][ T5895] usb 1-1: SerialNumber: syz
[   88.228306][ T5895] usb 1-1: config 0 descriptor??
[   88.439068][   T24] usb 1-1: USB disconnect, device number 5
[   88.534228][ T6787] chnl_net:caif_netlink_parms(): no params data found
[   88.644732][   T12] hsr_slave_0: left promiscuous mode
[   88.649614][   T12] hsr_slave_1: left promiscuous mode
[   88.656121][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.662563][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.670518][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.680055][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.704517][   T12] veth1_macvtap: left promiscuous mode
[   88.706899][   T12] veth0_macvtap: left promiscuous mode
[   88.724929][   T12] veth1_vlan: left promiscuous mode
[   88.737534][   T12] veth0_vlan: left promiscuous mode
[   89.100464][ T6834] loop0: detected capacity change from 0 to 256
[   89.126120][ T6834] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[   89.197721][   T33] audit: type=1326 audit(1756995999.412:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352078ebe9 code=0x7ffc0000
[   89.210148][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   89.216841][   T33] audit: type=1326 audit(1756995999.432:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f352078ebe9 code=0x7ffc0000
[   89.231890][   T33] audit: type=1326 audit(1756995999.432:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f352078ec23 code=0x7ffc0000
[   89.247946][   T33] audit: type=1326 audit(1756995999.432:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f352078d69f code=0x7ffc0000
[   89.261095][   T33] audit: type=1326 audit(1756995999.432:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f352078ec77 code=0x7ffc0000
[   89.275328][   T33] audit: type=1326 audit(1756995999.432:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f352078d550 code=0x7ffc0000
[   89.294790][   T33] audit: type=1326 audit(1756995999.432:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f352078d84a code=0x7ffc0000
[   89.304263][   T33] audit: type=1326 audit(1756995999.432:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352078ebe9 code=0x7ffc0000
[   89.315813][   T33] audit: type=1326 audit(1756995999.442:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352078ebe9 code=0x7ffc0000
[   89.325188][   T33] audit: type=1326 audit(1756995999.442:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f352078ebe9 code=0x7ffc0000
[   89.360575][   T12] team0 (unregistering): Port device team_slave_1 removed
[   89.366776][   T10] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[   89.373242][   T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   89.388522][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[   89.392081][   T12] team0 (unregistering): Port device team_slave_0 removed
[   89.396999][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   89.400905][   T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   89.409830][   T10] usb 2-1: Product: syz
[   89.411509][   T10] usb 2-1: Manufacturer: syz
[   89.419068][   T10] usb 2-1: SerialNumber: syz
[   89.424552][   T10] usb 2-1: config 0 descriptor??
[   89.433911][   T10] hub 2-1:0.0: bad descriptor, ignoring hub
[   89.436725][   T10] hub 2-1:0.0: probe with driver hub failed with error -5
[   89.450229][   T10] usb 2-1: selecting invalid altsetting 0
[   89.785416][   T10] usb 2-1: USB disconnect, device number 5
[   89.812356][ T5240] Bluetooth: hci1: command tx timeout
[   89.918051][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.921032][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.924453][ T6787] bridge_slave_0: entered allmulticast mode
[   89.929371][ T6787] bridge_slave_0: entered promiscuous mode
[   89.935961][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.938851][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.944692][ T6787] bridge_slave_1: entered allmulticast mode
[   89.948944][ T6787] bridge_slave_1: entered promiscuous mode
[   90.038848][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.067429][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.130042][ T6787] team0: Port device team_slave_0 added
[   90.150950][ T6787] team0: Port device team_slave_1 added
[   90.196887][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.201793][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.210757][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.220269][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.225799][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.235356][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.272607][ T6787] hsr_slave_0: entered promiscuous mode
[   90.275418][ T6787] hsr_slave_1: entered promiscuous mode
[   90.282594][ T6787] debugfs: 'hsr0' already exists in 'hsr'
[   90.285673][ T6787] Cannot create hsr debugfs directory
[   90.353688][ T6862] loop1: detected capacity change from 0 to 256
[   90.361422][ T6862] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   90.484853][ T6787] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.499666][ T6787] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.511152][ T6787] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.519580][ T6787] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.555276][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.558020][ T6787] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.561808][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.564061][ T6787] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.637687][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.653742][  T965] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.658958][  T965] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.678073][ T6787] 8021q: adding VLAN 0 to HW filter on device team0
[   90.705266][  T965] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.708099][  T965] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.740806][  T965] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.743921][  T965] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.946218][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.100962][ T6787] veth0_vlan: entered promiscuous mode
[   91.109298][ T6787] veth1_vlan: entered promiscuous mode
[   91.135276][ T6787] veth0_macvtap: entered promiscuous mode
[   91.141030][ T6787] veth1_macvtap: entered promiscuous mode
[   91.151914][   T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   91.155059][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.166052][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.175500][ T5875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.183841][ T5875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.187408][ T5875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.195551][ T5875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.243829][  T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.246995][  T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.277352][  T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.280569][  T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.311975][   T47] usb 2-1: Using ep0 maxpacket: 16
[   91.325340][   T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   91.340879][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.354042][   T47] usb 2-1: config 0 descriptor??
[   91.362841][   T47] gspca_main: sonixj-2.14.0 probing 0471:0327
[   91.912098][ T5240] Bluetooth: hci1: command tx timeout
[   92.035407][ T6913] loop4: detected capacity change from 0 to 131072
[   92.042061][ T6913] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[   92.045315][ T6913] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   92.051838][ T6913] F2FS-fs (loop4): invalid crc value
[   92.108973][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'.
[   92.119413][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'.
[   92.123381][ T6913] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   92.135924][ T6913] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   92.139169][ T6913] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   92.575473][   T47] gspca_sonixj: reg_w1 err -71
[   92.579567][ T6946] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   92.602980][   T47] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[   92.614089][   T47] usb 2-1: USB disconnect, device number 6
[   93.081345][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'.
[   93.173938][ T1272] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.337541][ T1272] usb 5-1: Using ep0 maxpacket: 32
[   93.347150][ T1272] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[   93.350435][ T1272] usb 5-1: config 0 has no interface number 0
[   93.361777][ T1272] usb 5-1: config 0 interface 12 has no altsetting 0
[   93.366850][ T1272] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[   93.380976][ T1272] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[   93.384870][ T1272] usb 5-1: Product: syz
[   93.386574][ T1272] usb 5-1: Manufacturer: syz
[   93.388533][ T1272] usb 5-1: SerialNumber: syz
[   93.409705][ T1272] usb 5-1: config 0 descriptor??
[   93.830650][ T7004] loop1: detected capacity change from 0 to 256
[   93.835317][ T7004] exfat: Deprecated parameter 'namecase'
[   93.838864][ T7004] exfat: Deprecated parameter 'utf8'
[   93.841175][ T7004] exfat: Deprecated parameter 'namecase'
[   93.848351][ T7004] exfat: Bad value for 'time_offset'
[   93.981866][ T5240] Bluetooth: hci1: command tx timeout
[   94.012928][ T7006] loop1: detected capacity change from 0 to 16384
[   94.020141][ T7006] bcachefs (/dev/loop1): error validating superblock: Invalid option invalid compression opt 240
[   94.027747][ T7006] bcachefs: bch2_fs_get_tree() error: invalid_sb_opt_compression
[   94.492238][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   94.517766][ T7015] netlink: 'syz.0.382': attribute type 4 has an invalid length.
[   94.521174][ T7015] netlink: 17 bytes leftover after parsing attributes in process `syz.0.382'.
[   94.576702][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'.
[   94.646712][   T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   94.649932][   T10] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[   94.653508][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.660346][   T10] gspca_main: stv0680-2.14.0 probing 041e:4007
[   94.840342][ T1272] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[   94.844241][ T1272] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[   94.846546][ T1272] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   94.849065][ T1272] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[   94.854188][ T1272] usb 5-1: USB disconnect, device number 2
[   95.535609][ T7043] loop4: detected capacity change from 0 to 2048
[   95.547806][ T7045] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   95.559439][ T7043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.757848][   T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[   95.768412][   T10] stv0680 2-1:4.0: STV(e): camera ping failed!!
[   95.772357][   T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[   95.775823][   T10] stv0680 2-1:4.0: last error: 0,  command = 0x0
[   95.783479][   T10] usb 2-1: USB disconnect, device number 7
[   96.052272][ T5240] Bluetooth: hci1: command tx timeout
[   96.192666][   T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   96.311000][ T7076] loop1: detected capacity change from 0 to 1024
[   96.339418][ T7076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.354132][   T24] usb 5-1: config 54 has an invalid interface number: 154 but max is 0
[   96.357551][   T24] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[   96.362220][   T24] usb 5-1: config 54 has no interface number 0
[   96.364771][   T24] usb 5-1: too many endpoints for config 54 interface 154 altsetting 0: 146, using maximum allowed: 30
[   96.367345][ T7076] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, 
[   96.369197][   T24] usb 5-1: config 54 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146
[   96.371990][   T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[   96.373140][ T7076] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   96.378976][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.388615][ T7076] EXT4-fs (loop1): Remounting filesystem read-only
[   96.390569][   T24] usb 5-1: Product: syz
[   96.394318][ T7076] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null.
[   96.399279][ T7076] overlayfs: failed to verify upper root origin
[   96.399566][   T24] usb 5-1: Manufacturer: syz
[   96.404390][   T24] usb 5-1: SerialNumber: syz
[   96.414546][   T24] hub 5-1:54.154: bad descriptor, ignoring hub
[   96.417166][   T24] hub 5-1:54.154: probe with driver hub failed with error -5
[   96.429411][   T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   96.434701][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.445334][   T12] usb 5-1: Failed to submit usb control message: -71
[   96.448842][   T12] usb 5-1: unable to send the bmi data to the device: -71
[   96.453894][   T12] usb 5-1: unable to get target info from device
[   96.456622][   T12] usb 5-1: could not get target info (-71)
[   96.466757][   T12] usb 5-1: could not probe fw (-71)
[   96.842912][   T96] usb 5-1: USB disconnect, device number 3
[   97.580907][ T7110] netlink: 'syz.4.422': attribute type 49 has an invalid length.
[   97.591086][ T7110] netlink: 'syz.4.422': attribute type 49 has an invalid length.
[   97.668753][   T47] hid-generic 0004:0006:0003.0003: unknown main item tag 0x1
[   97.692243][   T47] hid-generic 0004:0006:0003.0003: hidraw0: <UNKNOWN> HID v0.09 Device [syz1] on syz1
[   97.759863][ T7118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.551350][ T7132] loop1: detected capacity change from 0 to 2048
[   98.569448][ T7132] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   98.576050][ T7132] UDF-fs: Scanning with blocksize 512 failed
[   98.585018][ T7132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.730263][ T7134] netlink: 'syz.4.432': attribute type 1 has an invalid length.
[   98.740712][   T54] Bluetooth: hci0: unexpected cc 0x0c1b length: 1 < 5
[   98.741192][ T7134] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.432'.
[   98.797819][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.435'.
[   98.801094][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.435'.
[   99.038037][ T7144] loop1: detected capacity change from 0 to 32768
[   99.116325][ T7144] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.170056][ T7144] XFS (loop1): Ending clean mount
[   99.206462][ T5853] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.354899][ T7174] loop4: detected capacity change from 0 to 2048
[   99.359398][ T7174] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.367407][ T7174] EXT4-fs: Ignoring removed bh option
[   99.389582][ T7174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.393940][ T7180] loop1: detected capacity change from 0 to 128
[   99.421072][ T7180] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.432891][ T7180] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   99.437998][ T6787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.465223][ T7180] EXT4-fs warning (device loop1): ext4_group_add:1736: No reserved GDT blocks, can't resize
[   99.489335][ T7185] rdma_op ffff8881235349f0 conn xmit_rdma 0000000000000000
[   99.523055][ T5853] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   99.708107][ T7192] loop1: detected capacity change from 0 to 32768
[   99.717165][ T7192] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.453 (7192)
[   99.734031][ T7192] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.737434][ T7192] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   99.775518][ T7192] BTRFS info (device loop1): rebuilding free space tree
[   99.800861][ T7192] BTRFS info (device loop1): enabling ssd optimizations
[   99.803203][ T7192] BTRFS info (device loop1): using spread ssd allocation scheme
[   99.805484][ T7192] BTRFS info (device loop1): enabling free space tree
[   99.807511][ T7192] BTRFS info (device loop1): force clearing of disk cache
[   99.918539][ T5853] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.187963][ T7233] loop1: detected capacity change from 0 to 2048
[  100.229117][ T7233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.654683][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.721181][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'.
[  102.461238][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'.
[  102.833748][ T7281] loop4: detected capacity change from 0 to 40427
[  102.850021][ T7281] F2FS-fs (loop4): invalid crc value
[  102.914666][ T7281] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.922142][ T7281] F2FS-fs (loop4): Start checkpoint disabled!
[  102.929760][ T7281] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  102.971959][ T1090] kworker/u9:5: attempt to access beyond end of device
[  102.971959][ T1090] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  102.977145][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  102.977157][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.977162][ T1090] Workqueue: writeback wb_workfn (flush-7:4)
[  102.977175][ T1090] Call Trace:
[  102.977179][ T1090]  <TASK>
[  102.977182][ T1090]  dump_stack_lvl+0x189/0x250
[  102.977194][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.977202][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  102.977209][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  102.977218][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  102.977231][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  102.977244][ T1090]  f2fs_write_end_io+0x886/0xb60
[  102.977257][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  102.977269][ T1090]  __submit_merged_write_cond+0x255/0x530
[  102.977280][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  102.977303][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  102.977318][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  102.977337][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  102.977346][ T1090]  ? look_up_lock_class+0x74/0x170
[  102.977360][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  102.977369][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  102.977380][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  102.977394][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  102.977404][ T1090]  do_writepages+0x32e/0x550
[  102.977415][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  102.977422][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  102.977434][ T1090]  __writeback_single_inode+0x145/0xff0
[  102.977442][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  102.977452][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  102.977470][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  102.977502][ T1090]  ? rcu_is_watching+0x15/0xb0
[  102.977513][ T1090]  wb_writeback+0x43b/0xaf0
[  102.977559][ T1090]  ? queue_io+0x331/0x590
[  102.977574][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  102.977587][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.977598][ T1090]  wb_workfn+0x409/0xef0
[  102.977611][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  102.977620][ T1090]  ? __lock_acquire+0xab9/0xd20
[  102.977634][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  102.977643][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.977651][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  102.977656][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  102.977663][ T1090]  process_scheduled_works+0xae1/0x17b0
[  102.977681][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  102.977694][ T1090]  worker_thread+0x8a0/0xda0
[  102.977711][ T1090]  kthread+0x711/0x8a0
[  102.977720][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  102.977726][ T1090]  ? __pfx_kthread+0x10/0x10
[  102.977735][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.977743][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.977754][ T1090]  ? __pfx_kthread+0x10/0x10
[  102.977762][ T1090]  ret_from_fork+0x3fc/0x770
[  102.977771][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  102.977780][ T1090]  ? __switch_to_asm+0x39/0x70
[  102.977787][ T1090]  ? __switch_to_asm+0x33/0x70
[  102.977795][ T1090]  ? __pfx_kthread+0x10/0x10
[  102.977803][ T1090]  ret_from_fork_asm+0x1a/0x30
[  102.977818][ T1090]  </TASK>
[  102.977821][ T1090] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  103.485436][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'.
[  103.584220][ T7338] netlink: 'syz.1.497': attribute type 5 has an invalid length.
[  103.647607][ T7347] netlink: 'syz.4.501': attribute type 1 has an invalid length.
[  103.651012][ T7347] netlink: 244 bytes leftover after parsing attributes in process `syz.4.501'.
[  103.967070][ T7357] loop1: detected capacity change from 0 to 40427
[  103.981904][ T7357] F2FS-fs (loop1): invalid crc value
[  104.052999][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  104.060898][ T7357] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  104.066286][ T7357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  104.076542][   T33] kauditd_printk_skb: 27 callbacks suppressed
[  104.076551][   T33] audit: type=1800 audit(1756996014.292:42): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.505" name="file1" dev="loop1" ino=10 res=0 errno=0
[  104.084055][ T7357] syz.1.505: attempt to access beyond end of device
[  104.084055][ T7357] loop1: rw=34817, sector=53248, nr_sectors = 8 limit=40427
[  104.094686][   T33] audit: type=1800 audit(1756996014.312:43): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.505" name="file1" dev="loop1" ino=10 res=0 errno=0
[  104.094851][ T7357] syz.1.505: attempt to access beyond end of device
[  104.094851][ T7357] loop1: rw=34816, sector=53248, nr_sectors = 8 limit=40427
[  104.119941][ T5853] syz-executor: attempt to access beyond end of device
[  104.119941][ T5853] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.128046][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  104.128064][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.128072][ T5853] Call Trace:
[  104.128078][ T5853]  <TASK>
[  104.128084][ T5853]  dump_stack_lvl+0x189/0x250
[  104.128104][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.128117][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[  104.128128][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  104.128144][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.128166][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[  104.128189][ T5853]  f2fs_write_end_io+0x886/0xb60
[  104.128212][ T5853]  __submit_merged_bio+0x27a/0x6a0
[  104.128231][ T5853]  __submit_merged_write_cond+0x255/0x530
[  104.128250][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[  104.128286][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.128340][ T5853]  ? unwind_next_frame+0xa5/0x2390
[  104.128353][ T5853]  ? rcu_is_watching+0x15/0xb0
[  104.128362][ T5853]  ? __kasan_check_byte+0x12/0x40
[  104.128387][ T5853]  ? __lock_acquire+0xab9/0xd20
[  104.128409][ T5853]  ? do_raw_spin_lock+0x121/0x290
[  104.128431][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  104.128445][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.128473][ T5853]  do_writepages+0x32e/0x550
[  104.128497][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  104.128541][ T5853]  filemap_fdatawrite+0x199/0x240
[  104.128558][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  104.128572][ T5853]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  104.128617][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  104.128634][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[  104.128657][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[  104.128686][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  104.128730][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[  104.128746][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[  104.128762][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[  104.128772][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[  104.128793][ T5853]  ? shrinker_free+0x2ce/0x3e0
[  104.128808][ T5853]  deactivate_locked_super+0xbc/0x130
[  104.128823][ T5853]  cleanup_mnt+0x425/0x4c0
[  104.128836][ T5853]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.128854][ T5853]  task_work_run+0x1d4/0x260
[  104.128871][ T5853]  ? __pfx_task_work_run+0x10/0x10
[  104.128884][ T5853]  ? __x64_sys_umount+0x122/0x160
[  104.128903][ T5853]  ? exit_to_user_mode_loop+0x40/0x110
[  104.128921][ T5853]  exit_to_user_mode_loop+0xec/0x110
[  104.128937][ T5853]  do_syscall_64+0x2bd/0x3b0
[  104.128947][ T5853]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.128962][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.128973][ T5853]  ? exc_page_fault+0x9f/0xf0
[  104.128990][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.129002][ T5853] RIP: 0033:0x7f8d3238ff17
[  104.129014][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  104.129023][ T5853] RSP: 002b:00007ffd6d50f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  104.129035][ T5853] RAX: 0000000000000000 RBX: 00007f8d32411c05 RCX: 00007f8d3238ff17
[  104.129043][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6d50f0e0
[  104.129049][ T5853] RBP: 00007ffd6d50f0e0 R08: 0000000000000000 R09: 0000000000000000
[  104.129055][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd6d510170
[  104.129063][ T5853] R13: 00007f8d32411c05 R14: 0000000000019637 R15: 00007ffd6d5101b0
[  104.129083][ T5853]  </TASK>
[  104.129088][ T5853] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.201787][   T24] usb 5-1: Using ep0 maxpacket: 8
[  104.279876][   T24] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  104.283823][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.289288][   T24] usb 5-1: config 0 descriptor??
[  104.502162][   T24] usb 5-1: string descriptor 0 read error: -71
[  104.504897][   T24] usb 5-1: Found UVC 0.00 device <unnamed> (2833:0201)
[  104.514921][   T24] usb 5-1: No valid video chain found.
[  104.520325][   T24] usb 5-1: USB disconnect, device number 4
[  104.598287][ T7375] loop1: detected capacity change from 0 to 128
[  105.191413][ T7420] loop1: detected capacity change from 0 to 512
[  105.244303][ T7420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  105.247713][ T7420] System zones: 1-12
[  105.257595][ T7420] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.529: invalid indirect mapped block 8 (level 2)
[  105.267804][ T7420] EXT4-fs (loop1): 1 truncate cleaned up
[  105.271318][ T7420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.293990][ T7414] loop4: detected capacity change from 0 to 40427
[  105.298139][ T7414] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  105.300027][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.301344][ T7414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  105.311537][ T7414] F2FS-fs (loop4): invalid crc value
[  105.372779][ T7414] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  105.380638][ T7414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  105.384147][ T7414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  106.287713][ T7454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.542'.
[  106.296335][ T7452] loop4: detected capacity change from 0 to 512
[  106.315550][ T7452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.331729][ T7452] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.367272][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'.
[  106.396290][ T6787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.964267][ T7487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.077115][ T7493] loop1: detected capacity change from 0 to 1024
[  107.165537][ T7485] loop4: detected capacity change from 0 to 32768
[  107.304338][ T7485] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  107.304359][ T7485]   allowing incompatible features above 0.0: (unknown version)
[  107.304366][ T7485]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  107.323366][ T7485] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  107.326955][ T7485] bcachefs (loop4): initializing new filesystem
[  107.333063][ T5240] Bluetooth: hci0: command 0x0406 tx timeout
[  107.349917][ T7485] bcachefs (loop4): going read-write
[  107.458885][ T7485] bcachefs (loop4): marking superblocks
[  107.483561][ T7485] bcachefs (loop4): initializing freespace
[  107.489287][ T7485] bcachefs (loop4): done initializing freespace
[  107.496821][ T7485] bcachefs (loop4): reading snapshots table
[  107.502870][ T7485] bcachefs (loop4): reading snapshots done
[  107.825514][ T7485] bcachefs (loop4): done starting filesystem
[  107.901463][ T7485] bcachefs (loop4): requested incompat feature 1.27: fast_device_removal currently not enabled, allowed up to 1.27: fast_device_removal
[  107.901463][ T7485]   set version_upgrade=incompat to enable
[  107.912112][ T7485] bcachefs (loop4): Cannot remove without losing data
[  107.930294][ T7485] syz.4.556 (7485) used greatest stack depth: 15848 bytes left
[  107.954735][ T6787] bcachefs (loop4): shutting down
[  107.957239][ T6787] bcachefs (loop4): going read-only
[  107.960258][ T6787] bcachefs (loop4): finished waiting for writes to stop
[  107.968511][ T6787] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  108.009048][ T6787] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  108.011234][ T7531] netlink: 666 bytes leftover after parsing attributes in process `syz.0.573'.
[  108.019188][ T6787] bcachefs (loop4): clean shutdown complete, journal seq 4
[  108.023197][ T6787] bcachefs (loop4): marking filesystem clean
[  108.065027][ T6787] bcachefs (loop4): shutdown complete
[  108.256889][ T7541] syz_tun: entered allmulticast mode
[  108.261214][ T7540] syz_tun: left allmulticast mode
[  108.523319][ T7565] netlink: 'syz.0.590': attribute type 2 has an invalid length.
[  109.104409][ T7586] syz_tun: entered promiscuous mode
[  109.106719][ T7586] macsec1: entered allmulticast mode
[  109.108565][ T7586] syz_tun: entered allmulticast mode
[  109.114254][ T7586] syz_tun: left allmulticast mode
[  109.116230][ T7586] syz_tun: left promiscuous mode
[  109.292138][ T7592] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  109.588224][ T7616] kAFS: No cell specified
[  110.125268][ T7631] loop1: detected capacity change from 0 to 4096
[  110.130443][ T7631] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  110.148872][ T7631] ntfs3(loop1): ino=1a, mi_enum_attr
[  110.150730][ T7631] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  110.190246][ T7631] ntfs3(loop1): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  110.480540][ T7617] [U] 2
[  111.046476][ T7651] netlink: 76 bytes leftover after parsing attributes in process `syz.1.629'.
[  111.224009][ T7662] netlink: 'syz.1.632': attribute type 1 has an invalid length.
[  111.227905][ T7662] netlink: 'syz.1.632': attribute type 4 has an invalid length.
[  111.230555][ T7662] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.632'.
[  111.239349][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'.
[  111.442043][ T1855] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  111.603678][ T1855] usb 5-1: unable to get BOS descriptor or descriptor too short
[  111.607251][ T1855] usb 5-1: config 6 has an invalid interface number: 2 but max is 0
[  111.610041][ T1855] usb 5-1: config 6 has no interface number 0
[  111.612562][ T1855] usb 5-1: config 6 interface 2 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[  111.616082][ T1855] usb 5-1: config 6 interface 2 has no altsetting 0
[  111.620171][ T1855] usb 5-1: New USB device found, idVendor=110a, idProduct=1151, bcdDevice=ce.71
[  111.623660][ T1855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.626541][ T1855] usb 5-1: Product: syz
[  111.627991][ T1855] usb 5-1: Manufacturer: syz
[  111.629617][ T1855] usb 5-1: SerialNumber: syz
[  111.634678][ T7659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  111.848637][ T1855] ti_usb_3410_5052 5-1:6.2: TI USB 3410 1 port adapter converter detected
[  111.853051][ T1855] ti_usb_3410_5052 5-1:6.2: missing endpoints
[  111.857378][ T1855] usb 5-1: USB disconnect, device number 5
[  112.144401][ T7671] comedi comedi3: dt2817: I/O port conflict (0x7,5)
[  112.534192][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'.
[  112.550625][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'.
[  112.971260][ T7694] loop1: detected capacity change from 0 to 512
[  113.000684][ T7694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.013726][ T7694] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.035480][ T7694] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #12: comm syz.1.648: invalid size
[  113.068222][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.136609][ T7685] loop4: detected capacity change from 0 to 40427
[  113.145063][ T7685] F2FS-fs (loop4): Invalid segment count (6)
[  113.147736][ T7685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  113.200991][ T7685] F2FS-fs (loop4): invalid crc value
[  113.293201][ T7685] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  113.303322][ T7685] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  113.306391][ T7685] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  113.429595][ T7710] loop1: detected capacity change from 0 to 32768
[  113.439942][ T7710] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  113.451504][ T7710] XFS (loop1): Ending clean mount
[  113.456512][ T7710] XFS (loop1): Quotacheck needed: Please wait.
[  113.466077][ T7710] XFS (loop1): Quotacheck: Done.
[  113.513093][ T5853] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  113.738753][ T1855] kernel read not supported for file /snd/controlC0 (pid: 1855 comm: kworker/1:3)
[  113.981890][ T6026] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  114.133911][ T6026] usb 5-1: Using ep0 maxpacket: 8
[  114.138617][ T6026] usb 5-1: unable to get BOS descriptor or descriptor too short
[  114.143612][ T6026] usb 5-1: config 8 has an invalid interface number: 255 but max is 0
[  114.147794][ T6026] usb 5-1: config 8 has no interface number 0
[  114.150537][ T6026] usb 5-1: config 8 interface 255 has no altsetting 0
[  114.159345][ T6026] usb 5-1: string descriptor 0 read error: -22
[  114.162379][ T6026] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  114.169241][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.201762][ T1855] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  114.351742][ T1855] usb 2-1: Using ep0 maxpacket: 16
[  114.357466][ T1855] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  114.361094][ T1855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.369343][ T1855] usb 2-1: Product: syz
[  114.371049][ T1855] usb 2-1: Manufacturer: syz
[  114.373151][ T1855] usb 2-1: SerialNumber: syz
[  114.376954][ T1855] usb 2-1: config 0 descriptor??
[  114.385123][ T1855] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  114.392234][ T6026] catc 5-1:8.255: Can't set altsetting 1.
[  114.401374][ T6026] catc 5-1:8.255: probe with driver catc failed with error -5
[  114.417685][ T6026] usb 5-1: USB disconnect, device number 6
[  114.584959][ T1855] gp8psk: usb in 128 operation failed.
[  114.587631][ T1855] gp8psk: usb in 137 operation failed.
[  114.589880][ T1855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  114.594832][ T1855] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  114.599287][ T1855] usb 2-1: media controller created
[  114.611533][ T1855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  114.625864][ T1855] gp8psk_fe: Frontend revision 1 attached
[  114.628069][ T1855] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  114.632578][ T1855] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  114.859099][ T1855] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  114.864191][ T1855] gp8psk: found Genpix USB device pID = 201 (hex)
[  115.074032][ T1272] usb 2-1: USB disconnect, device number 8
[  115.130679][ T1272] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  115.211838][ T6026] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  115.361755][ T6026] usb 5-1: Using ep0 maxpacket: 16
[  115.365744][ T6026] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  115.370698][ T6026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  115.381620][ T6026] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  115.385476][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.388827][ T6026] usb 5-1: Product: syz
[  115.390637][ T6026] usb 5-1: Manufacturer: syz
[  115.392793][ T6026] usb 5-1: SerialNumber: syz
[  115.397628][ T6026] usb 5-1: config 0 descriptor??
[  115.404933][ T6026] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  115.623483][ T6026] usb 5-1: USB disconnect, device number 7
[  115.649218][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'.
[  115.758716][ T7757] Invalid ELF header magic: != ELF
[  116.041851][ T6026] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  116.191971][ T6026] usb 2-1: Using ep0 maxpacket: 16
[  116.207787][ T6026] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  116.211216][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.225840][ T6026] usb 2-1: Product: syz
[  116.228106][ T6026] usb 2-1: Manufacturer: syz
[  116.230087][ T6026] usb 2-1: SerialNumber: syz
[  116.242943][ T6026] r8152-cfgselector 2-1: Unknown version 0x0000
[  116.252688][ T6026] r8152-cfgselector 2-1: config 0 descriptor??
[  116.445630][ T7777] loop4: detected capacity change from 0 to 32768
[  116.462089][ T7777] (syz.4.680,7777,1):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 33328)
[  116.466733][ T7777] (syz.4.680,7777,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  116.470155][ T7777] (syz.4.680,7777,1):ocfs2_check_volume:2404 ERROR: status = -22
[  116.484217][ T7777] (syz.4.680,7777,1):ocfs2_check_volume:2432 ERROR: status = -22
[  116.487554][ T7777] (syz.4.680,7777,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  116.504566][ T7777] (syz.4.680,7777,1):ocfs2_fill_super:1177 ERROR: status = -22
[  117.166104][   T96] r8152-cfgselector 2-1: USB disconnect, device number 9
[  117.467260][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'.
[  118.125074][ T7846] tc_dump_action: action bad kind
[  118.491806][   T96] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  118.644826][   T96] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  118.649084][   T96] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.659781][   T96] usb 2-1: config 0 descriptor??
[  118.669860][   T96] gspca_main: sunplus-2.14.0 probing 055f:c420
[  118.878117][   T96] gspca_sunplus: reg_w_riv err -71
[  118.881883][   T96] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  118.886992][   T96] usb 2-1: USB disconnect, device number 10
[  119.665877][ T7877] binder: 7876:7877 ioctl c0306201 200000001a80 returned -14
[  119.866916][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'.
[  119.870447][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'.
[  119.908992][ T7889] Zero length message leads to an empty skb
[  121.207522][ T7938] binder: 7936:7938 ioctl c0306201 200000000040 returned -14
[  121.351529][ T7949] openvswitch: netlink: Actions may not be safe on all matching packets
[  121.598868][ T7951] loop4: detected capacity change from 0 to 40427
[  121.609051][ T7951] F2FS-fs (loop4): invalid crc value
[  121.655958][ T7951] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  121.663462][ T7951] F2FS-fs (loop4): Start checkpoint disabled!
[  121.672744][ T7951] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  121.783393][  T965] kworker/u9:3: attempt to access beyond end of device
[  121.783393][  T965] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.794265][  T965] CPU: 0 UID: 0 PID: 965 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  121.794284][  T965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.794292][  T965] Workqueue: writeback wb_workfn (flush-7:4)
[  121.794311][  T965] Call Trace:
[  121.794316][  T965]  <TASK>
[  121.794322][  T965]  dump_stack_lvl+0x189/0x250
[  121.794340][  T965]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.794354][  T965]  ? __pfx_queue_work_on+0x10/0x10
[  121.794403][  T965]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  121.794420][  T965]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.794444][  T965]  f2fs_handle_critical_error+0x37c/0x540
[  121.794466][  T965]  f2fs_write_end_io+0x886/0xb60
[  121.794490][  T965]  __submit_merged_bio+0x27a/0x6a0
[  121.794511][  T965]  __submit_merged_write_cond+0x255/0x530
[  121.794532][  T965]  f2fs_write_data_pages+0x261d/0x3000
[  121.794572][  T965]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  121.794599][  T965]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  121.794636][  T965]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  121.794652][  T965]  ? look_up_lock_class+0x74/0x170
[  121.794676][  T965]  ? trace_f2fs_writepages+0x7f/0x200
[  121.794692][  T965]  ? f2fs_write_node_pages+0x478/0x6e0
[  121.794711][  T965]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  121.794737][  T965]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  121.794755][  T965]  do_writepages+0x32e/0x550
[  121.794775][  T965]  ? reacquire_held_locks+0x127/0x1d0
[  121.794787][  T965]  ? writeback_sb_inodes+0x384/0x1010
[  121.794808][  T965]  __writeback_single_inode+0x145/0xff0
[  121.794824][  T965]  ? do_raw_spin_unlock+0x4d/0x240
[  121.794841][  T965]  writeback_sb_inodes+0x6c7/0x1010
[  121.794875][  T965]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  121.794920][  T965]  ? rcu_is_watching+0x15/0xb0
[  121.794939][  T965]  wb_writeback+0x43b/0xaf0
[  121.794959][  T965]  ? queue_io+0x331/0x590
[  121.794976][  T965]  ? __pfx_wb_writeback+0x10/0x10
[  121.794997][  T965]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.795016][  T965]  wb_workfn+0x409/0xef0
[  121.795040][  T965]  ? __pfx_wb_workfn+0x10/0x10
[  121.795056][  T965]  ? __lock_acquire+0xab9/0xd20
[  121.795080][  T965]  ? process_scheduled_works+0x9ef/0x17b0
[  121.795096][  T965]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.795110][  T965]  ? process_scheduled_works+0x9ef/0x17b0
[  121.795121][  T965]  ? process_scheduled_works+0x9ef/0x17b0
[  121.795133][  T965]  process_scheduled_works+0xae1/0x17b0
[  121.795167][  T965]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.795192][  T965]  worker_thread+0x8a0/0xda0
[  121.795206][  T965]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.795227][  T965]  ? __kthread_parkme+0x7b/0x200
[  121.795247][  T965]  kthread+0x711/0x8a0
[  121.795263][  T965]  ? __pfx_worker_thread+0x10/0x10
[  121.795275][  T965]  ? __pfx_kthread+0x10/0x10
[  121.795290][  T965]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.795304][  T965]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.795319][  T965]  ? __pfx_kthread+0x10/0x10
[  121.795333][  T965]  ret_from_fork+0x3fc/0x770
[  121.795348][  T965]  ? __pfx_ret_from_fork+0x10/0x10
[  121.795395][  T965]  ? __switch_to_asm+0x39/0x70
[  121.795410][  T965]  ? __switch_to_asm+0x33/0x70
[  121.795423][  T965]  ? __pfx_kthread+0x10/0x10
[  121.795438][  T965]  ret_from_fork_asm+0x1a/0x30
[  121.795465][  T965]  </TASK>
[  121.795470][  T965] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  122.017906][ T7970] netlink: 'syz.1.762': attribute type 32 has an invalid length.
[  122.020525][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'.
[  122.034246][ T7970] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  122.265905][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.769'.
[  122.288703][ T7991] netlink: 724 bytes leftover after parsing attributes in process `syz.4.770'.
[  122.295406][ T7991] netlink: 724 bytes leftover after parsing attributes in process `syz.4.770'.
[  122.372916][ T7998] loop4: detected capacity change from 0 to 1024
[  122.376989][ T7998] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.404785][ T7998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  122.407713][ T7998] EXT4-fs (loop4): Test dummy encryption mode enabled
[  122.410271][ T7998] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (37511!=20869)
[  122.416083][ T7998] EXT4-fs (loop4): group descriptors corrupted!
[  123.653376][ T8037] netlink: 'syz.0.792': attribute type 2 has an invalid length.
[  123.658726][ T8043] loop4: detected capacity change from 0 to 2048
[  124.086741][ T8062] loop4: detected capacity change from 0 to 512
[  124.110365][ T8062] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.803: inode #13: comm syz.4.803: iget: illegal inode #
[  124.118573][ T8062] EXT4-fs (loop4): Remounting filesystem read-only
[  124.123480][ T8062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.182581][ T6787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.254792][ T8071] loop4: detected capacity change from 0 to 16
[  124.263504][ T8071] erofs (device loop4): too large lz4 pclusterblks 16832
[  124.901808][ T6026] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  125.041114][ T8090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.815'.
[  125.066039][ T6026] usb 5-1: Using ep0 maxpacket: 8
[  125.070246][ T6026] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  125.078284][ T6026] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  125.090470][ T6026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.107368][ T6026] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  125.111422][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.115568][ T6026] usb 5-1: Product: syz
[  125.117158][ T6026] usb 5-1: Manufacturer: syz
[  125.118770][ T6026] usb 5-1: SerialNumber: syz
[  125.601964][ T6026] usb 5-1: 0:2 : does not exist
[  125.828719][   T10] usb 5-1: USB disconnect, device number 8
[  126.673075][ T8135] loop4: detected capacity change from 0 to 32768
[  126.684301][ T8135] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got 3ca1c84a should be 00000000
[  126.702198][ T8135] bcachefs (/dev/loop4): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096)
[  126.707131][ T8135] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset
[  126.917665][ T8145] loop1: detected capacity change from 0 to 32768
[  126.930597][ T8145] (syz.1.838,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  126.933453][ T8147] loop4: detected capacity change from 0 to 16384
[  126.948073][ T8145] (syz.1.838,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  126.988484][ T8145] JBD2: Ignoring recovery information on journal
[  126.994885][ T8147] bcachefs (loop4): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc64,erasure_code,prjquota,norecovery,recovery_pass_last=reconstruct_snapshots,read_only,reconstruct_alloc,version_upgrade=none
[  126.994896][ T8147]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  127.011503][ T8147] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  127.015134][ T8147] bcachefs (loop4): recovering from clean shutdown, journal seq 18
[  127.018563][ T8147] bcachefs (loop4): dropping and reconstructing all alloc info
[  127.027584][ T8145] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  127.034135][ T8147] bcachefs (loop4): accounting_read... done
[  127.037927][ T8147] bcachefs (loop4): alloc_read... done
[  127.040869][ T8147] bcachefs (loop4): snapshots_read... done
[  127.044081][ T8147] bcachefs (loop4): reading quotas
[  127.046863][ T8147] bcachefs (loop4): quotas done
[  127.049402][ T8147] bcachefs (loop4): done starting filesystem
[  127.108867][ T5853] ocfs2: Unmounting device (7,1) on (node local)
[  127.112795][ T6787] bcachefs (loop4): shutting down
[  127.164377][ T6787] bcachefs (loop4): shutdown complete
[  127.673779][ T8171] Bluetooth: MGMT ver 1.23
[  128.827621][ T8190] loop1: detected capacity change from 0 to 4096
[  128.840340][ T8190] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  128.872834][ T8190] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  128.876462][ T8190] ntfs3(loop1): Failed to load root (-22).
[  129.370672][ T8207] loop1: detected capacity change from 0 to 4096
[  129.391802][ T8207] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  129.427338][ T8207] ntfs3(loop1): ino=19, mi_enum_attr
[  129.429504][ T8207] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  129.793933][ T8221] loop4: detected capacity change from 0 to 32768
[  129.801416][ T8221] BTRFS warning: excessive commit interval 2147483647, use with care
[  129.810965][ T8221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.869 (8221)
[  129.825557][ T8221] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.829752][ T8221] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  129.855584][ T8221] BTRFS info (device loop4): rebuilding free space tree
[  129.869260][ T8221] BTRFS info (device loop4): disabling free space tree
[  129.872602][ T8221] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.877216][ T8221] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.886858][ T8221] BTRFS info (device loop4): checking UUID tree
[  129.890325][ T8221] BTRFS info (device loop4): setting nodatasum
[  129.893319][ T8221] BTRFS info (device loop4): enabling ssd optimizations
[  129.896214][ T8221] BTRFS info (device loop4): turning off barriers
[  129.898426][ T8221] BTRFS info (device loop4): turning on flush-on-commit
[  129.900764][ T8221] BTRFS info (device loop4): force clearing of disk cache
[  129.903602][ T8221] BTRFS info (device loop4): doing ref verification
[  129.907422][ T8221] BTRFS info (device loop4): max_inline set to 0
[  129.950145][ T6787] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.239197][ T8242] loop4: detected capacity change from 0 to 40427
[  130.254964][ T8242] F2FS-fs (loop4): invalid crc value
[  130.313989][ T8242] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.317505][ T8242] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  130.339161][ T8245] f2fs_ckpt-7:4: attempt to access beyond end of device
[  130.339161][ T8245] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  130.345142][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: f2fs_ckpt-7:4 Not tainted syzkaller #0 PREEMPT(full) 
[  130.345154][ T8245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.345159][ T8245] Call Trace:
[  130.345162][ T8245]  <TASK>
[  130.345166][ T8245]  dump_stack_lvl+0x189/0x250
[  130.345180][ T8245]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.345188][ T8245]  ? __pfx_queue_work_on+0x10/0x10
[  130.345195][ T8245]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.345205][ T8245]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.345219][ T8245]  f2fs_handle_critical_error+0x37c/0x540
[  130.345233][ T8245]  f2fs_write_end_io+0x886/0xb60
[  130.345248][ T8245]  __submit_merged_bio+0x27a/0x6a0
[  130.345269][ T8245]  __submit_merged_write_cond+0x255/0x530
[  130.345307][ T8245]  f2fs_write_data_pages+0x261d/0x3000
[  130.345335][ T8245]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.345376][ T8245]  ? __lock_acquire+0xab9/0xd20
[  130.345390][ T8245]  ? do_raw_spin_lock+0x121/0x290
[  130.345403][ T8245]  ? do_raw_spin_unlock+0x4d/0x240
[  130.345412][ T8245]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.345438][ T8245]  do_writepages+0x32e/0x550
[  130.345455][ T8245]  ? do_raw_spin_unlock+0x4d/0x240
[  130.345465][ T8245]  filemap_fdatawrite+0x199/0x240
[  130.345475][ T8245]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  130.345505][ T8245]  ? do_raw_spin_unlock+0x4d/0x240
[  130.345516][ T8245]  f2fs_sync_dirty_inodes+0x31f/0x830
[  130.345530][ T8245]  f2fs_write_checkpoint+0x95a/0x1df0
[  130.345548][ T8245]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  130.345573][ T8245]  ? down_write+0x162/0x1f0
[  130.345579][ T8245]  ? __pfx_down_write+0x10/0x10
[  130.345586][ T8245]  ? __pfx___schedule+0x10/0x10
[  130.345599][ T8245]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  130.345608][ T8245]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  130.345623][ T8245]  issue_checkpoint_thread+0xd9/0x260
[  130.345632][ T8245]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  130.345639][ T8245]  ? __pfx_autoremove_wake_function+0x10/0x10
[  130.345649][ T8245]  ? __kthread_parkme+0x7b/0x200
[  130.345656][ T8245]  ? __kthread_parkme+0x1a1/0x200
[  130.345667][ T8245]  kthread+0x711/0x8a0
[  130.345677][ T8245]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  130.345684][ T8245]  ? __pfx_kthread+0x10/0x10
[  130.345693][ T8245]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.345702][ T8245]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.345711][ T8245]  ? __pfx_kthread+0x10/0x10
[  130.345720][ T8245]  ret_from_fork+0x3fc/0x770
[  130.345729][ T8245]  ? __pfx_ret_from_fork+0x10/0x10
[  130.345739][ T8245]  ? __switch_to_asm+0x39/0x70
[  130.345747][ T8245]  ? __switch_to_asm+0x33/0x70
[  130.345755][ T8245]  ? __pfx_kthread+0x10/0x10
[  130.345763][ T8245]  ret_from_fork_asm+0x1a/0x30
[  130.345779][ T8245]  </TASK>
[  130.346340][ T8245] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  130.739973][ T8273] netlink: 'syz.0.883': attribute type 23 has an invalid length.
[  131.436230][ T8277] loop4: detected capacity change from 0 to 131072
[  131.445635][ T8277] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  131.448428][ T8277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  131.453687][ T8277] F2FS-fs (loop4): invalid crc value
[  131.540805][ T8302] process 'syz.1.896' launched '/dev/fd/3' with NULL argv: empty string added
[  131.550548][ T8277] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.560916][ T8277] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  131.563923][ T8277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  131.628404][ T8277] F2FS-fs (loop4): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  131.941622][ T8311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.390967][ T8331] loop1: detected capacity change from 0 to 512
[  132.414982][ T8331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.420899][ T8331] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.477719][ T8336] overlayfs: failed to resolve './file0': -2
[  132.505194][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.508044][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.731170][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.928161][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  132.932166][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  132.951757][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  133.272679][    T9] usb 5-1: Using ep0 maxpacket: 32
[  133.286459][    T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  133.293248][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.311153][    T9] usb 5-1: config 0 descriptor??
[  133.336044][    T9] gspca_main: sunplus-2.14.0 probing 041e:400b
[  134.355546][ T8358] netlink: 'syz.1.920': attribute type 46 has an invalid length.
[  134.359140][ T8358] netlink: 55 bytes leftover after parsing attributes in process `syz.1.920'.
[  134.760886][    T9] gspca_sunplus: reg_w_riv err -71
[  134.764562][    T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  134.773538][    T9] usb 5-1: USB disconnect, device number 9
[  134.870047][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.935'.
[  136.944467][ T8414] loop1: detected capacity change from 0 to 262144
[  136.957069][ T8414] F2FS-fs (loop1): invalid crc value
[  137.015801][ T8414] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.019725][ T8414] F2FS-fs (loop1): Start checkpoint disabled!
[  137.040187][ T8414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  137.067173][ T8431] loop4: detected capacity change from 0 to 764
[  137.089543][   T33] audit: type=1800 audit(1756996047.302:44): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.946" name="file1" dev="loop1" ino=7 res=0 errno=0
[  137.457006][ T8452] tmpfs: Bad value for 'mpol'
[  137.703125][ T8467] loop4: detected capacity change from 0 to 16
[  137.710858][ T8467] erofs (device loop4): mounted with root inode @ nid 36.
[  138.090116][ T8478] loop4: detected capacity change from 0 to 1024
[  138.094950][ T8478] EXT4-fs: Ignoring removed orlov option
[  138.110432][ T8478] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  138.134205][ T8478] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  138.138720][ T8478] EXT4-fs (loop4): invalid journal inode
[  138.274378][ T8484] loop1: detected capacity change from 0 to 512
[  138.280555][ T8484] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  138.294692][ T8484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  138.310473][ T8484] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.976: corrupted in-inode xattr: e_value size too large
[  138.320311][ T8484] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.976: couldn't read orphan inode 15 (err -117)
[  138.329084][ T8484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.397920][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.513955][ T8492] loop1: detected capacity change from 0 to 4096
[  138.671498][ T8495] ntfs3(loop1): ino=0, "file0" failed to extend initialized size to 8fecc.
[  138.989812][ T8490] loop4: detected capacity change from 0 to 32768
[  139.056260][ T8490] read_mapping_page failed!
[  140.871527][ T8544] loop4: detected capacity change from 0 to 40427
[  140.877103][ T8544] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  140.884411][ T8544] F2FS-fs (loop4): invalid crc value
[  140.887614][ T8544] F2FS-fs (loop4): invalid crc value
[  140.889977][ T8544] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[  140.971113][ T8556] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  140.986072][ T8556] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  141.291843][ T6026] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  141.453809][ T6026] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  141.458503][ T6026] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  141.462718][ T6026] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  141.466471][ T6026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.474523][ T8558] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  141.484422][ T6026] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  141.696482][ T1855] usb 2-1: USB disconnect, device number 11
[  142.331833][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  142.496089][    T9] usb 5-1: Using ep0 maxpacket: 16
[  142.507454][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.511392][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  142.518698][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  142.523740][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  142.527726][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  142.543216][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  142.547021][    T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  142.550283][    T9] usb 5-1: Manufacturer: syz
[  142.589997][    T9] usb 5-1: config 0 descriptor??
[  142.713570][ T8574] loop1: detected capacity change from 0 to 1024
[  142.754366][ T3581] hfsplus: b-tree write err: -5, ino 4
[  142.857354][ T8576] loop1: detected capacity change from 0 to 8192
[  142.883230][    T9] rc_core: IR keymap rc-hauppauge not found
[  142.885730][    T9] Registered IR keymap rc-empty
[  142.890103][   T33] audit: type=1800 audit(1756996053.102:45): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1016" name="bus" dev="loop1" ino=1048616 res=0 errno=0
[  142.892283][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  142.910136][   T33] audit: type=1800 audit(1756996053.122:46): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1016" name="bus" dev="loop1" ino=1048616 res=0 errno=0
[  142.932382][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  142.959732][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  142.971027][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6
[  142.990202][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.023137][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.051863][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.072388][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.102054][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.125458][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.151812][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.172949][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.214404][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.232194][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  143.273687][    T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  143.282331][    T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  143.307153][    T9] usb 5-1: USB disconnect, device number 10
[  144.008379][ T8592] loop4: detected capacity change from 0 to 1024
[  144.016492][ T8592] ext4: Unknown parameter 'obj_user'
[  144.117270][ T3581] Bluetooth: hci3: Frame reassembly failed (-84)
[  144.122414][ T3581] Bluetooth: hci3: Frame reassembly failed (-84)
[  145.232426][ T8605] loop1: detected capacity change from 0 to 32768
[  145.282872][ T8605] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  145.286792][ T8605] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.309602][ T8605] XFS (loop1): Ending clean mount
[  145.316005][ T8605] XFS (loop1): Quotacheck needed: Please wait.
[  145.343098][ T8605] XFS (loop1): Quotacheck: Done.
[  145.348480][ T8605] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.895139][ T8637] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1038'.
[  146.131857][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  146.134786][ T5240] Bluetooth: hci3: command 0x1003 tx timeout
[  146.364097][ T8645] loop4: detected capacity change from 0 to 512
[  146.438715][ T8645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  146.480740][ T8645] EXT4-fs (loop4): 1 truncate cleaned up
[  146.511739][ T8645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.714296][ T8653] loop1: detected capacity change from 0 to 128
[  146.748127][ T8653] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  146.756081][ T8653] ext4 filesystem being mounted at /383/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  146.900709][ T8653] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 7 (only 1 groups)
[  146.985928][ T5853] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.264385][ T6787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.580532][ T8682] 9pnet_fd: Insufficient options for proto=fd
[  147.625566][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1059'.
[  147.665329][ T8687] loop4: detected capacity change from 0 to 4096
[  147.879183][ T8699] 9pnet_virtio: no channels available for device syz
[  148.671320][ T8708] loop1: detected capacity change from 0 to 32768
[  148.683726][ T8708] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1069 (8708)
[  148.731729][ T8708] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.735963][ T8708] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  148.741004][ T8708] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  148.818620][ T8708] BTRFS info (device loop1): rebuilding free space tree
[  148.830472][ T8730] loop4: detected capacity change from 0 to 128
[  148.840003][ T8730] EXT4-fs: Ignoring removed nobh option
[  148.840015][ T8708] BTRFS info (device loop1): disabling free space tree
[  148.845322][ T8708] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  148.852423][ T8708] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  148.876386][ T8730] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  148.885835][ T8708] BTRFS info (device loop1): setting nodatasum
[  148.888673][ T8708] BTRFS info (device loop1): setting nodatacow
[  148.892352][ T8730] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  148.898923][ T8708] BTRFS info (device loop1): enabling ssd optimizations
[  148.908098][ T8708] BTRFS info (device loop1): turning off barriers
[  148.914039][ T8708] BTRFS info (device loop1): turning on flush-on-commit
[  148.921569][ T8708] BTRFS info (device loop1): enabling disk space caching
[  148.935582][ T8708] BTRFS info (device loop1): force clearing of disk cache
[  148.943588][ T8708] BTRFS info (device loop1): doing ref verification
[  148.947702][ T8708] BTRFS info (device loop1): max_inline set to 4096
[  148.986689][ T6787] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  149.113462][ T5853] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.149927][ T8738] loop4: detected capacity change from 0 to 512
[  149.153529][ T8738] EXT4-fs: Ignoring removed mblk_io_submit option
[  149.163380][ T8738] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  149.184985][ T8738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  149.192956][ T8738] System zones: 1-12
[  149.194958][ T8738] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1076: corrupted in-inode xattr: e_value size too large
[  149.201219][ T8738] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1076: couldn't read orphan inode 15 (err -117)
[  149.220422][ T8738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.301259][ T6787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.935942][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1093'.
[  150.939954][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1093'.
[  151.345387][   T33] audit: type=1326 audit(1756996061.562:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c98ebe9 code=0x7ffc0000
[  151.354217][   T33] audit: type=1326 audit(1756996061.562:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c98ebe9 code=0x7ffc0000
[  151.384066][   T33] audit: type=1326 audit(1756996061.572:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f113c98d550 code=0x7ffc0000
[  151.407290][   T33] audit: type=1326 audit(1756996061.572:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f113c98d550 code=0x7ffc0000
[  151.417632][   T33] audit: type=1326 audit(1756996061.572:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c98ebe9 code=0x7ffc0000
[  151.428391][   T33] audit: type=1326 audit(1756996061.572:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c98ebe9 code=0x7ffc0000
[  151.441589][   T33] audit: type=1326 audit(1756996061.572:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f113c98ebe9 code=0x7ffc0000
[  151.451322][   T33] audit: type=1326 audit(1756996061.572:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c98ebe9 code=0x7ffc0000
[  151.465025][   T33] audit: type=1326 audit(1756996061.572:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c98ebe9 code=0x7ffc0000
[  151.815039][   T33] audit: type=1326 audit(1756996062.032:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.1.1094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3238ebe9 code=0x7fc00000
[  152.845190][ T8820] loop1: detected capacity change from 0 to 256
[  152.848558][ T8820] exfat: Deprecated parameter 'namecase'
[  152.862075][ T8820] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  153.206313][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'.
[  153.609907][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'.
[  153.616758][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'.
[  154.201389][ T1855] IPVS: starting estimator thread 0...
[  154.302388][ T8850] IPVS: using max 48 ests per chain, 115200 per kthread
[  154.460109][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'.
[  154.839307][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1136'.
[  155.189181][ T8898] loop4: detected capacity change from 0 to 4096
[  155.211934][ T8898] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  155.216028][ T8898] ntfs3(loop4): Failed to load $Secure (-22).
[  155.218362][ T8898] ntfs3(loop4): Failed to initialize $Secure (-22).
[  155.282241][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  155.365505][ T8901] netlink: 'syz.4.1144': attribute type 1 has an invalid length.
[  155.493047][   T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  155.496709][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.499951][   T10] usb 2-1: Product: syz
[  155.522742][   T10] usb 2-1: Manufacturer: syz
[  155.524774][   T10] usb 2-1: SerialNumber: syz
[  155.545294][   T10] usb 2-1: config 0 descriptor??
[  155.708131][ T8908] syz_tun: entered allmulticast mode
[  155.716968][ T8907] syz_tun: left allmulticast mode
[  155.815500][   T10] hso 2-1:0.0: Failed to find BULK IN ep
[  155.845874][   T10] usb-storage 2-1:0.0: USB Mass Storage device detected
[  156.027222][   T10] usb 2-1: USB disconnect, device number 12
[  156.561421][ T8916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1150'.
[  156.768342][ T8932] loop1: detected capacity change from 0 to 1024
[  156.772612][ T8932] EXT4-fs: Ignoring removed orlov option
[  156.814262][ T8932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.902676][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.078399][ T8953] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  157.085366][ T8953] macvtap1: entered allmulticast mode
[  157.087630][ T8953] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  157.102376][ T8953] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  157.108864][ T8953] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  157.605713][ T8985] loop1: detected capacity change from 0 to 256
[  157.608510][ T8985] exfat: Deprecated parameter 'utf8'
[  157.610486][ T8985] exfat: Deprecated parameter 'namecase'
[  157.618071][ T8985] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  157.692316][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  157.862247][   T24] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  157.867518][   T24] usb 5-1: New USB device strings: Mfr=0, Product=5, SerialNumber=0
[  157.870510][   T24] usb 5-1: Product: syz
[  157.887507][   T24] usb 5-1: config 0 descriptor??
[  157.897017][   T24] gspca_main: spca501-2.14.0 probing 0000:0000
[  158.350682][   T24] gspca_spca501: reg write: error -71
[  158.357385][   T24] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  158.363023][   T24] spca501 5-1:0.0: probe with driver spca501 failed with error -22
[  158.374994][   T24] usb 5-1: USB disconnect, device number 11
[  160.253766][ T9035] mmap: syz.0.1205 (9035) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  160.564179][ T9060] all: renamed from bridge_slave_0 (while UP)
[  160.665146][ T9066] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1218'.
[  160.758625][ T9074] loop1: detected capacity change from 0 to 128
[  160.769507][ T9074] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  160.778302][ T9074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.837158][ T9081] capability: warning: `syz.1.1225' uses 32-bit capabilities (legacy support in use)
[  162.355266][ T9098] loop4: detected capacity change from 0 to 32768
[  162.820558][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'.
[  162.832259][ T9116] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1239'.
[  162.841233][ T9116] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1239'.
[  162.996466][ T9129] overlayfs: failed to clone upperpath
[  163.158505][ T9141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.181939][   T47] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  163.342321][   T47] usb 2-1: Using ep0 maxpacket: 32
[  163.352522][   T47] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  163.357540][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.364093][   T47] usb 2-1: Product: syz
[  163.365830][   T47] usb 2-1: Manufacturer: syz
[  163.368199][   T47] usb 2-1: SerialNumber: syz
[  163.382422][   T47] usb 2-1: config 0 descriptor??
[  163.590400][   T47] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  163.591355][ T9168] binder_alloc: 9166: binder_alloc_buf, no vma
[  163.596845][   T47] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  163.644608][   T47] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  163.656488][   T47] usb 2-1: USB disconnect, device number 13
[  164.305916][ T9188] loop1: detected capacity change from 0 to 8
[  164.316197][ T9188] unable to read xattr id index table
[  164.431770][   T33] audit: type=1326 audit(1756996074.582:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.4.1262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c98ebe9 code=0x7fc00000
[  165.356825][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'.
[  165.514753][ T9236] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[  165.960828][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'.
[  165.966461][ T9249] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  165.969177][ T9249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.183639][ T9252] 9pnet_fd: Insufficient options for proto=fd
[  166.742728][ T9266] loop1: detected capacity change from 0 to 2048
[  166.761927][ T9266] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  166.766397][ T9266] NILFS (loop1): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  167.121924][ T9292] sg_write: data in/out 97/10 bytes for SCSI command 0xfd-- guessing data in;
[  167.121924][ T9292]    program syz.1.1318 not setting count and/or reply_len properly
[  167.257953][ T9298] loop1: detected capacity change from 0 to 512
[  167.284293][ T9298] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1321: casefold flag without casefold feature
[  167.289566][ T9298] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1321: couldn't read orphan inode 15 (err -117)
[  167.312534][ T9298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.390448][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.391092][ T9289] loop4: detected capacity change from 0 to 32768
[  168.536813][ T9353] netlink: 'syz.1.1345': attribute type 5 has an invalid length.
[  168.548142][ T9353] ip6erspan0: entered promiscuous mode
[  168.953873][ T9376] binder: 9374:9376 ioctl c0306201 200000000640 returned -22
[  169.128597][ T9390] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  169.136700][ T9372] loop1: detected capacity change from 0 to 32768
[  169.166138][ T9372] jfs_strtoUCS: char2uni returned -22.
[  169.168648][ T9372] charset = cp936, char = 0xd4
[  169.321992][   T96] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  169.329118][ T9396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1364'.
[  169.337932][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'.
[  169.458632][ T9402] loop1: detected capacity change from 0 to 512
[  169.479298][   T96] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.491386][   T96] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  169.500721][   T96] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.508782][   T96] usb 5-1: config 0 descriptor??
[  169.929704][   T96] prodikeys 0003:041E:2801.0004: unknown main item tag 0x2
[  169.944419][   T96] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0
[  170.183061][   T96] usb 5-1: USB disconnect, device number 12
[  170.324794][ T9435] loop1: detected capacity change from 0 to 1024
[  170.328995][ T9435] EXT4-fs: inline encryption not supported
[  170.333590][ T9435] EXT4-fs: Ignoring removed bh option
[  170.356097][ T9435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.398786][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.792266][   T96] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  171.945215][   T96] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.950267][   T96] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.958719][   T96] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.963679][   T96] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  171.966973][   T96] usb 5-1: SerialNumber: syz
[  172.199674][   T96] usb 5-1: 0:2 : does not exist
[  172.225665][   T96] usb 5-1: USB disconnect, device number 13
[  172.261030][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.313196][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'.
[  172.338712][ T9471] loop1: detected capacity change from 0 to 32768
[  172.372576][ T9471] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  172.412983][ T9471] (syz.1.1395,9471,1):ocfs2_read_virt_blocks:1007 ERROR: Inode #65 contains a hole at offset 0
[  172.418567][ T9471] (syz.1.1395,9471,1):ocfs2_read_dir_block:511 ERROR: status = -5
[  172.445334][ T5853] ocfs2: Unmounting device (7,1) on (node local)
[  172.588289][ T9490] syzkaller1: tun_chr_ioctl cmd 1074025681
[  172.639591][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'.
[  173.024417][ T9502] loop4: detected capacity change from 0 to 32768
[  173.074598][ T9502] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  173.122885][ T6787] ocfs2: Unmounting device (7,4) on (node local)
[  173.158552][ T9508] loop1: detected capacity change from 0 to 32768
[  173.183704][ T9508] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  173.201357][ T9508] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  173.215881][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  173.251475][ T9508] (syz.1.1412,9508,1):ocfs2_rename:1702 ERROR: status = -39
[  173.276694][ T5853] ocfs2: Unmounting device (7,1) on (node local)
[  173.464081][ T9523] loop1: detected capacity change from 0 to 1024
[  173.497096][ T9523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.725163][   T33] audit: type=1800 audit(1756996083.942:58): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1417" name="file1" dev="loop1" ino=15 res=0 errno=0
[  173.745434][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.925950][ T9538] netlink: 'syz.0.1422': attribute type 15 has an invalid length.
[  173.929292][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'.
[  173.934940][ T9538] bond0: option resend_igmp: invalid value (65535)
[  173.937945][ T9538] bond0: option resend_igmp: allowed values 0 - 255
[  173.943229][   T12] ------------[ cut here ]------------
[  173.946416][   T12] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[  173.963367][   T12] WARNING: CPU: 1 PID: 12 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350
[  173.967620][   T12] Modules linked in:
[  173.969997][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  173.974796][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.979119][   T12] Workqueue: bond0 bond_mii_monitor
[  173.981246][   T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350
[  173.983891][   T12] Code: 7c fe ff ff e8 3e 1e 54 f8 c6 05 30 f9 21 06 01 90 48 c7 c7 a0 c3 94 8c 48 c7 c6 17 f8 9f 8d ba 48 00 00 00 e8 3e ba 17 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff
[  173.992009][   T12] RSP: 0018:ffffc900000f7670 EFLAGS: 00010246
[  173.994595][   T12] RAX: 4fe19cda898a6e00 RBX: ffff888122972000 RCX: ffff88801ba85640
[  173.998357][   T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  174.002110][   T12] RBP: 0000000000000000 R08: ffff888136624253 R09: 1ffff11026cc484a
[  174.005518][   T12] R10: dffffc0000000000 R11: ffffed1026cc484b R12: 1ffff1102452e45d
[  174.009117][   T12] R13: dffffc0000000000 R14: ffffffff8c1cf908 R15: 0000000000000000
[  174.012837][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  174.016987][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.019723][   T12] CR2: 000000110c3897e5 CR3: 000000001eddc000 CR4: 00000000000006f0
[  174.023333][   T12] Call Trace:
[  174.024724][   T12]  <TASK>
[  174.025990][   T12]  ? ethtool_op_get_link+0xd/0x70
[  174.028139][   T12]  ethtool_op_get_link+0x15/0x70
[  174.030272][   T12]  bond_check_dev_link+0x447/0x6c0
[  174.032595][   T12]  ? __pfx_bond_check_dev_link+0x10/0x10
[  174.035038][   T12]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  174.037758][   T12]  bond_mii_monitor+0x428/0x2e00
[  174.039942][   T12]  ? rcu_is_watching+0x15/0xb0
[  174.042173][   T12]  ? bond_mii_monitor+0x153/0x2e00
[  174.044370][   T12]  ? __lock_acquire+0xab9/0xd20
[  174.046484][   T12]  ? __pfx_bond_mii_monitor+0x10/0x10
[  174.048780][   T12]  ? register_lock_class+0x51/0x320
[  174.050953][   T12]  ? __lock_acquire+0xab9/0xd20
[  174.053286][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  174.055737][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  174.057666][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  174.059563][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  174.061434][   T12]  process_scheduled_works+0xae1/0x17b0
[  174.063823][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  174.066310][   T12]  worker_thread+0x8a0/0xda0
[  174.068244][   T12]  kthread+0x711/0x8a0
[  174.069941][   T12]  ? __pfx_worker_thread+0x10/0x10
[  174.072004][   T12]  ? __pfx_kthread+0x10/0x10
[  174.074057][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  174.076336][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.078598][   T12]  ? __pfx_kthread+0x10/0x10
[  174.080330][   T12]  ret_from_fork+0x3fc/0x770
[  174.082178][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  174.084130][   T12]  ? __switch_to_asm+0x39/0x70
[  174.085824][   T12]  ? __switch_to_asm+0x33/0x70
[  174.087489][   T12]  ? __pfx_kthread+0x10/0x10
[  174.089249][   T12]  ret_from_fork_asm+0x1a/0x30
[  174.090860][   T12]  </TASK>
[  174.092108][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  174.095104][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  174.098901][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.103014][   T12] Workqueue: bond0 bond_mii_monitor
[  174.105195][   T12] Call Trace:
[  174.106570][   T12]  <TASK>
[  174.107803][   T12]  dump_stack_lvl+0x99/0x250
[  174.109679][   T12]  ? __asan_memcpy+0x40/0x70
[  174.111573][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.113366][   T12]  ? __pfx__printk+0x10/0x10
[  174.115467][   T12]  vpanic+0x281/0x750
[  174.116938][   T12]  ? __pfx__printk+0x10/0x10
[  174.118509][   T12]  ? __pfx_vpanic+0x10/0x10
[  174.120135][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  174.121777][   T12]  panic+0xb9/0xc0
[  174.123412][   T12]  ? __pfx_panic+0x10/0x10
[  174.125286][   T12]  __warn+0x31b/0x4b0
[  174.126958][   T12]  ? __linkwatch_sync_dev+0x303/0x350
[  174.129159][   T12]  ? __linkwatch_sync_dev+0x303/0x350
[  174.131380][   T12]  report_bug+0x2be/0x4f0
[  174.133182][   T12]  ? __linkwatch_sync_dev+0x303/0x350
[  174.135384][   T12]  ? __linkwatch_sync_dev+0x303/0x350
[  174.137599][   T12]  ? __linkwatch_sync_dev+0x305/0x350
[  174.139857][   T12]  handle_bug+0x84/0x160
[  174.141627][   T12]  exc_invalid_op+0x1a/0x50
[  174.143511][   T12]  asm_exc_invalid_op+0x1a/0x20
[  174.145545][   T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350
[  174.148050][   T12] Code: 7c fe ff ff e8 3e 1e 54 f8 c6 05 30 f9 21 06 01 90 48 c7 c7 a0 c3 94 8c 48 c7 c6 17 f8 9f 8d ba 48 00 00 00 e8 3e ba 17 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff
[  174.155887][   T12] RSP: 0018:ffffc900000f7670 EFLAGS: 00010246
[  174.158038][   T12] RAX: 4fe19cda898a6e00 RBX: ffff888122972000 RCX: ffff88801ba85640
[  174.160598][   T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  174.163037][   T12] RBP: 0000000000000000 R08: ffff888136624253 R09: 1ffff11026cc484a
[  174.165539][   T12] R10: dffffc0000000000 R11: ffffed1026cc484b R12: 1ffff1102452e45d
[  174.168229][   T12] R13: dffffc0000000000 R14: ffffffff8c1cf908 R15: 0000000000000000
[  174.170668][   T12]  ? ethtool_op_get_link+0xd/0x70
[  174.172250][   T12]  ethtool_op_get_link+0x15/0x70
[  174.174206][   T12]  bond_check_dev_link+0x447/0x6c0
[  174.176180][   T12]  ? __pfx_bond_check_dev_link+0x10/0x10
[  174.177903][   T12]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  174.180231][   T12]  bond_mii_monitor+0x428/0x2e00
[  174.181887][   T12]  ? rcu_is_watching+0x15/0xb0
[  174.183789][   T12]  ? bond_mii_monitor+0x153/0x2e00
[  174.185853][   T12]  ? __lock_acquire+0xab9/0xd20
[  174.187865][   T12]  ? __pfx_bond_mii_monitor+0x10/0x10
[  174.190083][   T12]  ? register_lock_class+0x51/0x320
[  174.192236][   T12]  ? __lock_acquire+0xab9/0xd20
[  174.194270][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  174.196490][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  174.198480][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  174.200857][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  174.203242][   T12]  process_scheduled_works+0xae1/0x17b0
[  174.205558][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  174.208062][   T12]  worker_thread+0x8a0/0xda0
[  174.210002][   T12]  kthread+0x711/0x8a0
[  174.211648][   T12]  ? __pfx_worker_thread+0x10/0x10
[  174.213224][   T12]  ? __pfx_kthread+0x10/0x10
[  174.214629][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  174.216699][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.218562][   T12]  ? __pfx_kthread+0x10/0x10
[  174.220171][   T12]  ret_from_fork+0x3fc/0x770
[  174.222075][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  174.223755][   T12]  ? __switch_to_asm+0x39/0x70
[  174.225293][   T12]  ? __switch_to_asm+0x33/0x70
[  174.226772][   T12]  ? __pfx_kthread+0x10/0x10
[  174.228652][   T12]  ret_from_fork_asm+0x1a/0x30
[  174.230648][   T12]  </TASK>
[  174.232659][   T12] Kernel Offset: disabled
[  174.234452][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:28:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000f RBX=ffffffff8e139f20 RCX=0000000000000007 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888020ef1cc0 RBP=0000000000000007 RSP=ffffc900072c7460
R8 =0000000000000000 R9 =ffffffff822e4897 R10=dffffc0000000000 R11=fffff940008e93f9
R12=0000000000020000 R13=0000000000000000 R14=ffff888020ef2828 R15=ffff888020ef27b0
RIP=ffffffff819d6422 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32aaeb CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000008000003b7 fffffff800000207 XMM03=0000004300000085 00000102000004b7
XMM04=9500000043000000 8500000102000004 XMM05=b700000008000003 b7fffffff8000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b00000000000008 b700000000000000
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f8d32412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6e10
R8 =ffff888107c18237 R9 =1ffff11020f83046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8db R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3897e5 CR3=000000001eddc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8167993b ffffffff8167993b
XMM02=e1b5323b621e82a2 ffffffff8167993b XMM03=89e50cc854ad018e a07c7c25bfeb536a
XMM04=ec436ebdfdcdd3db 14721ebb74f9019b XMM05=359fe4f57dd25a38 7a8023f8264e25d5
XMM06=d6801ecb9d97cac6 2371d295f5ff5ea5 XMM07=a91107d2aed3cfc3 60ac1e993a33bf89
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f113ca12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
