last executing test programs:

1m43.112886799s ago: executing program 1 (id=38):
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[@hopopts={0xff}]}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40000322, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0)

1m42.96152797s ago: executing program 1 (id=43):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xfff9, 0x7, 0x0, 0x1006}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x84, 0x8, 0x0, 0x0)

1m42.002908799s ago: executing program 1 (id=55):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000007f40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704acf07fbfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd652932611d6c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x5, 0x483, &(0x7f0000000580)="$eJzs201vG0Ucx/HfbGJ34xZwn9yCKmEJiaIiSuy0pE8ghZa0SH2gbYJAKEEhcYLVxInitGoqaCtx6BEoEgiJAxx6QagKElzgwAFuvAMu3HrggjlxAqHdzHrXjtuk+CFx8v1IiSe7/92dnZmdnc2OBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApJdf6evOmNXOBQAAaKWzFy90Z7n/AwCwoQzw/A8AALCRGDn6REY/floyZ/y/F7mn84XLVwdP9NferMv4W3b48d6Pm8n2HDj4Qu+h4PPB2zfa4zp3caAvfXx6amY2VyzmxtKDhfzo9FhuxXuod/tq+/wCSE9dujw2Pl5MZ/f3VKy+mry3aXMqebQ3dezpIHbwRH//xUhMZ+x/H32J+43w43J0S0alj++as5Ic1V8Wy7SdZuvyT2KffxKDJ/r9E5nMjxTmvJUmKAinskziQRm1oC7qskPy8mXijXlmi8lRUUY7UyVzTlJHUA7P+v8YXn4HTkOy8dC8fA5JSqsN6mwN2yRHB2V0+3BSr3llFtR/p/T+amcOTdcpR3dltPelkjnv9wfe9eR1m6dfT79aGJ+OxBpjr6h2vz+00hrvm1w5Outf8SVzYbUzg5bzBktDMjowcMUfV8gflz52tPfkqYHoCGPXMvvxYvfb9EruybHI0MGs0hgCAAAAAAAAWO9c42hYRp9/6/p/p+07IGwQxtHzMvrrVMl/NR6dl9ARmd9R1u7vfpqb/y73+PTM/Gx+4t25musTbt87xbnZkdHaq9XlXXwV/w5fbh5DnWLG0SEZ3fh3ITxu0nhp2w2EB7pzLMyba6rW+u3m0cX5LME7hCP9u6Lpmll+iPdjSXtc+iegMYxx1Cej8R9227kfCS3pg2zcdzL688s9Ns6Je0HBZZr0f7vj+clctxf7s4y++ieI9aeZabON3R7GZrxYR0YfnamM3WJjd4SxWS/2pIx+Ga4duzOM7fFiP5DRzB/pIDbhxT5pY1Nh7P7R6cmxphXwGuf1/9dltO3FtAnq0paX7WY7yrF33gv7+5vVO7pPn19v/5+MLLtp2+E9r70O7/bbnt9endrt9ZaMvvl+j41bbCtxu36r/ztsr2/IaOLXytiEjd0WxmZWXLBtwqv/t2WULSyUy8bWv62ByP0/Uv9PVLeOJtX/1siypD3upsacOiQV569dGpmczM2SIEGCRDmx2j0TWsG7/38mozfP/1Ye79j7vx1Wh+O/v6+H9/8j1Ttq0v1/W2TZETsaiXVK7tzUTCwlucX5a8/lp0YmchO5Qk82c7j78IHeTCwejO3CVN1FtS7F7LPalQ+/Lj+fVY7/ao//E9U7alL9b48sS1SMV+o+ddj6/11Gb/20UH6OftD4P3jOeuapxc/y9dmk+t8RWZa0x32kMacOAAAAAAAAAAAAAAAAAG0tZhzdlpE71GmC70atZP7fki9MNWn+VyqybKxF31eou1ABoA04cvSFjPaqZG54C7ZIZ6KfWNf+CwAA//8n8SDK")
truncate(&(0x7f0000000640)='./file1\x00', 0xb)

1m41.91206806s ago: executing program 1 (id=56):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

1m41.851945804s ago: executing program 1 (id=57):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@flushoncommit}, {@usebackuproot}]}, 0x1, 0x50f3, &(0x7f000000f3c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

1m41.652688925s ago: executing program 1 (id=58):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r1}, 0xc)

1m41.577031706s ago: executing program 32 (id=58):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r1}, 0xc)

2.891224971s ago: executing program 0 (id=1191):
r0 = socket(0x28, 0x5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)

2.811077482s ago: executing program 0 (id=1192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030329bd7000000000100a000000040003"], 0x1c}}, 0x4)

2.748139703s ago: executing program 0 (id=1195):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df})

2.687308176s ago: executing program 0 (id=1197):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x20, 0x5, 0x3, "e2c304"}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.288925514s ago: executing program 0 (id=1199):
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYRES32], 0x0)

1.165907381s ago: executing program 3 (id=1206):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000002240)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbbbbbbbbbbbbb86dd6d002000000811"], 0x42)

1.109465342s ago: executing program 2 (id=1208):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x13, 0x2, 0x0, 0x0, @str='fault_injection'}]}, 0x38}}, 0x0)

1.028907711s ago: executing program 2 (id=1209):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18)
migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2)

1.028415339s ago: executing program 3 (id=1210):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0xe}, {0xffe0, 0xfff1}, {0xb, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44)

949.837429ms ago: executing program 2 (id=1211):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000080)={0x2, 0x2b4}, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2b4, 0x0, @empty}, 0x1c)

949.577242ms ago: executing program 3 (id=1212):
r0 = socket(0x2d, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)

949.474881ms ago: executing program 2 (id=1213):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

949.177201ms ago: executing program 3 (id=1214):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r0 = syz_io_uring_setup(0x20fe, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}})
io_uring_enter(r0, 0x4f8, 0xd9b3, 0x44, 0x0, 0x0)

861.001173ms ago: executing program 3 (id=1215):
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)

747.154338ms ago: executing program 3 (id=1216):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4404c)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x62000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x80000001, 0x0, 0xfffefffc}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

746.563043ms ago: executing program 2 (id=1217):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

61.613956ms ago: executing program 2 (id=1218):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4008700e, 0x0)

0s ago: executing program 0 (id=1219):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e30, 0x3, 0xa, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d2, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@etimer_thresh={0x8, 0xc, 0x81}]}, 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

kernel console output (not intermixed with test programs):

ng invalid altsetting 0
[   82.930943][   T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   83.060469][   T24] usb 1-1: USB disconnect, device number 5
[   83.064556][ T6638] loop2: detected capacity change from 0 to 32768
[   83.083120][ T6638] (syz.2.247,6638,0):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[   83.083455][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   83.088834][ T6638] (syz.2.247,6638,0):ocfs2_fill_super:1177 ERROR: status = -22
[   83.127091][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 218, changing to 7
[   83.135493][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 32945, setting to 1024
[   83.145759][   T47] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   83.150435][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.159396][   T47] usb 4-1: Product: syz
[   83.161338][   T47] usb 4-1: Manufacturer: syz
[   83.163026][   T47] usb 4-1: SerialNumber: syz
[   83.165047][ T6641] loop2: detected capacity change from 0 to 4096
[   83.178287][   T47] usb 4-1: config 0 descriptor??
[   83.192330][   T47] usb 4-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 2f
[   83.224571][ T1091] ntfs3(loop2): ino=5, mi_enum_attr
[   83.424876][   T47] usb 4-1: USB disconnect, device number 5
[   83.453617][ T6058] udevd[6058]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.577172][ T6649] loop2: detected capacity change from 0 to 32768
[   83.586342][ T6649] (syz.2.252,6649,0):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 9.0, should be 0.90
[   83.592605][ T6649] (syz.2.252,6649,0):ocfs2_verify_volume:2331 ERROR: status = -22
[   83.595570][ T6649] (syz.2.252,6649,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   83.598324][ T6649] (syz.2.252,6649,0):ocfs2_fill_super:1177 ERROR: status = -22
[   83.822447][ T6659] syz_tun: entered allmulticast mode
[   83.829352][ T6658] syz_tun: left allmulticast mode
[   84.016970][ T6672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.263'.
[   84.026233][ T6657] loop2: detected capacity change from 0 to 40427
[   84.036583][ T6672] netlink: 'syz.0.263': attribute type 1 has an invalid length.
[   84.040222][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'.
[   84.048664][ T6657] F2FS-fs (loop2): invalid crc value
[   84.116312][ T6657] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.127371][   T33] audit: type=1326 audit(1758639204.042:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.3.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8098ec29 code=0x7ffc0000
[   84.136887][   T33] audit: type=1326 audit(1758639204.042:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.3.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8098ec29 code=0x7ffc0000
[   84.137723][ T6657] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   84.144793][   T33] audit: type=1326 audit(1758639204.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.3.266" exe="/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f4d8098ec29 code=0x7ffc0000
[   84.154749][   T33] audit: type=1326 audit(1758639204.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.3.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8098ec29 code=0x7ffc0000
[   84.164506][   T33] audit: type=1326 audit(1758639204.062:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.3.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8098ec29 code=0x7ffc0000
[   84.219214][ T5847] syz-executor: attempt to access beyond end of device
[   84.219214][ T5847] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   84.231397][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   84.231409][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.231414][ T5847] Call Trace:
[   84.231418][ T5847]  <TASK>
[   84.231421][ T5847]  dump_stack_lvl+0x189/0x250
[   84.231435][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.231444][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[   84.231451][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   84.231462][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   84.231477][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[   84.231491][ T5847]  f2fs_write_end_io+0x886/0xb60
[   84.231505][ T5847]  __submit_merged_bio+0x27a/0x6a0
[   84.231516][ T5847]  __submit_merged_write_cond+0x255/0x530
[   84.231529][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[   84.231535][ T5847]  ? __lock_acquire+0xab9/0xd20
[   84.231557][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   84.231580][ T5847]  ? check_path+0x21/0x40
[   84.231587][ T5847]  ? check_noncircular+0xe0/0x160
[   84.231612][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   84.231619][ T5847]  do_writepages+0x32e/0x550
[   84.231633][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   84.231642][ T5847]  filemap_fdatawrite+0x199/0x240
[   84.231652][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   84.231729][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   84.231747][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[   84.231768][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[   84.231795][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   84.231834][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[   84.231847][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[   84.231860][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[   84.231868][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[   84.231884][ T5847]  ? shrinker_free+0x2ce/0x3e0
[   84.231898][ T5847]  deactivate_locked_super+0xbc/0x130
[   84.231913][ T5847]  cleanup_mnt+0x425/0x4c0
[   84.231926][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.231939][ T5847]  task_work_run+0x1d4/0x260
[   84.231957][ T5847]  ? __pfx_task_work_run+0x10/0x10
[   84.231979][ T5847]  ? __x64_sys_umount+0x122/0x160
[   84.231998][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[   84.232016][ T5847]  exit_to_user_mode_loop+0xec/0x110
[   84.232032][ T5847]  do_syscall_64+0x2bd/0x3b0
[   84.232044][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.232055][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.232065][ T5847]  ? exc_page_fault+0x9f/0xf0
[   84.232078][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.232088][ T5847] RIP: 0033:0x7f29b958ff57
[   84.232101][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   84.232109][ T5847] RSP: 002b:00007ffd8049c5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   84.232122][ T5847] RAX: 0000000000000000 RBX: 00007f29b9611c2d RCX: 00007f29b958ff57
[   84.232130][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8049c670
[   84.232136][ T5847] RBP: 00007ffd8049c670 R08: 0000000000000000 R09: 0000000000000000
[   84.232143][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8049d700
[   84.232151][ T5847] R13: 00007f29b9611c2d R14: 0000000000014887 R15: 00007ffd8049d740
[   84.232171][ T5847]  </TASK>
[   84.232177][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   84.268859][ T6679] loop0: detected capacity change from 0 to 32768
[   84.376090][ T6679] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal: duplicate journal buckets 1
[   84.376090][ T6679] journal (size 40):
[   84.376090][ T6679] Buckets:  1 7 24 1
[   84.376090][ T6679] 
[   84.396807][ T6679] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[   84.802315][ T6698] block nbd0: Attempted send on invalid socket
[   84.805263][ T6698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[   84.820648][ T6698] XFS (nbd0): SB validate failed with error -5.
[   84.938824][ T6692] loop2: detected capacity change from 0 to 40427
[   84.965453][ T6692] F2FS-fs (loop2): build fault injection rate: 14
[   84.967558][ T6692] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   84.975392][ T6692] F2FS-fs (loop2): invalid crc value
[   84.987506][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   84.998419][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   85.081992][ T6692] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.086282][ T6692] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   85.095615][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[   85.101653][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   85.102384][ T6692] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   85.155564][ T6721] loop0: detected capacity change from 0 to 512
[   85.156999][ T6692] syz.2.270: attempt to access beyond end of device
[   85.156999][ T6692] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   85.159331][ T6721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.178417][ T6721] EXT4-fs (loop0): 1 truncate cleaned up
[   85.187805][ T6692] syz.2.270: attempt to access beyond end of device
[   85.187805][ T6692] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   85.202113][ T6721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.254778][ T5847] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0
[   85.282418][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.659795][    T9] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[   85.698736][ T6750] loop3: detected capacity change from 0 to 1024
[   85.756477][   T27] hfsplus: b-tree write err: -5, ino 8
[   85.775607][ T6758] loop3: detected capacity change from 0 to 64
[   85.845837][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   85.850023][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.859354][    T9] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   85.866041][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[   85.871410][    T9] usb 1-1: string descriptor 0 read error: -22
[   85.873986][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.877008][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.892424][    T9] usb 1-1: bad CDC descriptors
[   85.948547][ T6766] loop3: detected capacity change from 0 to 8
[   85.963427][ T6766] SQUASHFS error: lzo decompression failed, data probably corrupt
[   85.966783][ T6766] SQUASHFS error: Failed to read block 0x91: -5
[   85.969398][ T6766] SQUASHFS error: Unable to read metadata cache entry [8f]
[   85.973476][ T6766] SQUASHFS error: Unable to read inode 0x11f
[   86.108035][  T973] usb 1-1: USB disconnect, device number 6
[   86.421563][ T6787] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.494317][ T6791] cgroup: none used incorrectly
[   86.581145][ T6785] loop3: detected capacity change from 0 to 32768
[   86.590060][ T6785] XFS: noikeep mount option is deprecated.
[   86.615871][ T6785] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   86.666150][ T6785] XFS (loop3): Ending clean mount
[   86.672287][ T6785] XFS (loop3): Quotacheck needed: Please wait.
[   86.702181][ T6785] XFS (loop3): Quotacheck: Done.
[   86.755951][ T6056] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   86.765325][ T6813] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.008761][ T6825] capability: warning: `syz.3.322' uses deprecated v2 capabilities in a way that may be insecure
[   87.012278][   T24] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   87.162904][   T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   87.165883][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.171236][   T24] usb 3-1: config 0 descriptor??
[   87.175690][   T24] cp210x 3-1:0.0: cp210x converter detected
[   87.583415][   T24] usb 3-1: cp210x converter now attached to ttyUSB0
[   87.785212][   T24] usb 3-1: USB disconnect, device number 10
[   87.792650][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   87.854456][   T24] cp210x 3-1:0.0: device disconnected
[   88.445475][ T6843] loop2: detected capacity change from 0 to 2048
[   88.487698][ T6843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.505526][ T6843] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   88.538246][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.585570][ T6839] loop3: detected capacity change from 0 to 32768
[   88.644789][ T6839] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   88.648706][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.330'.
[   88.760175][ T6839] XFS (loop3): Ending clean mount
[   88.844717][ T6869] program syz.0.337 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.856050][ T6056] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   88.912446][ T6867] block nbd0: server does not support multiple connections per device.
[   88.916841][ T6867] block nbd0: shutting down sockets
[   89.330359][ T6893] random: crng reseeded on system resumption
[   90.005635][ T6903] loop2: detected capacity change from 0 to 16
[   90.010176][ T6903] erofs (device loop2): mounted with root inode @ nid 36.
[   90.635751][ T6929] netlink: 'syz.3.361': attribute type 27 has an invalid length.
[   90.763709][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.768471][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.035522][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.069225][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.544604][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.549041][ T6930] 8021q: adding VLAN 0 to HW filter on device team0
[   91.563771][ T6930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.585959][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.593447][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.607273][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.626578][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.131034][ T6934] netlink: 108 bytes leftover after parsing attributes in process `syz.2.363'.
[   92.135014][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'.
[   92.207988][ T6936] loop3: detected capacity change from 0 to 1024
[   92.312177][ T6936] syz.3.364: attempt to access beyond end of device
[   92.312177][ T6936] loop3: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[   92.317646][ T6936] Buffer I/O error on dev loop3, logical block 2889, lost async page write
[   92.696154][ T6942] loop3: detected capacity change from 0 to 32768
[   92.706446][ T6942] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section ext: field too small (8 < 88)
[   92.706446][ T6942] ext (size 8):
[   92.706446][ T6942] Recovery passes required:      
[   92.706446][ T6942] Errors to silently fix:        
[   92.706446][ T6942] Btrees with missing data:      
[   92.706446][ T6942] 
[   92.730189][ T6942] bcachefs: bch2_fs_get_tree() error: invalid_sb_ext
[   92.930393][ T6951] loop2: detected capacity change from 0 to 32768
[   92.933807][ T6951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.371 (6951)
[   92.954355][ T6951] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.958383][ T6951] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   93.001651][ T6962] openvswitch: netlink: Key type 40 is out of range max 32
[   93.074631][ T6951] BTRFS info (device loop2): enabling ssd optimizations
[   93.077384][ T6951] BTRFS info (device loop2): enabling free space tree
[   93.147781][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   93.289824][ T6984] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   93.388079][ T6986] loop3: detected capacity change from 0 to 512
[   93.407412][ T6986] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (d8000000)
[   93.694183][ T6995] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[   94.002701][ T7007] loop3: detected capacity change from 0 to 1024
[   94.039590][ T7009] loop3: detected capacity change from 0 to 256
[   94.060639][ T7009] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   94.075827][ T7009] exFAT-fs (loop3): start_clu is invalid cluster(0x400)
[   94.130298][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   94.299796][ T5915] usb 3-1: Using ep0 maxpacket: 16
[   94.304937][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.308918][ T5915] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   94.322290][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.327717][ T5915] usb 3-1: config 0 descriptor??
[   94.763615][ T5915] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[   94.769312][ T5915] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[   94.776136][ T5915] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[   94.781963][ T5915] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[   94.788378][ T5915] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[   94.800140][ T5915] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   94.947190][    C1] usb 3-1: input irq status -75 received
[   95.192047][  T973] usb 3-1: USB disconnect, device number 11
[   95.360904][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'.
[   95.692413][ T5916] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   95.868831][ T5916] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[   95.876805][ T5916] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   95.883892][ T5916] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   95.888112][ T5916] usb 1-1: config 220 has no interface number 2
[   95.900938][ T5916] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   95.911192][ T5916] usb 1-1: config 220 interface 0 has no altsetting 0
[   95.913978][ T5916] usb 1-1: config 220 interface 76 has no altsetting 0
[   95.920074][ T5916] usb 1-1: config 220 interface 1 has no altsetting 0
[   95.928365][ T7042] loop3: detected capacity change from 0 to 2048
[   95.928891][ T5916] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   95.935232][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.940100][ T5916] usb 1-1: Product: syz
[   95.941849][ T5916] usb 1-1: Manufacturer: syz
[   95.943726][ T5916] usb 1-1: SerialNumber: syz
[   95.952157][ T7042] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   95.971450][ T6221] udevd[6221]: incorrect nilfs2 checksum on /dev/loop3
[   95.981825][ T7043] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.178614][ T5916] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[   96.192950][ T5916] usb 1-1: No valid video chain found.
[   96.195361][ T5916] usb 1-1: selecting invalid altsetting 0
[   96.208511][ T5916] usb 1-1: selecting invalid altsetting 0
[   96.210564][ T5916] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[   96.224163][ T5916] usb 1-1: USB disconnect, device number 7
[   96.297928][ T7040] loop2: detected capacity change from 0 to 32768
[   96.326709][ T7040] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   96.348373][ T7040] XFS (loop2): Ending clean mount
[   96.432917][ T5847] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.009997][ T7082] use of bytesused == 0 is deprecated and will be removed in the future,
[   98.013316][ T7082] use the actual size instead.
[   98.115705][ T7086] loop0: detected capacity change from 0 to 4096
[   98.287399][ T7086] ntfs3(loop0): ino=21, "blkio.bfq.io_queued_recursive" fiemap is not supported for compressed file (cp -r)
[   98.357066][ T7092] netlink: 'syz.2.419': attribute type 3 has an invalid length.
[   98.359862][ T7092] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[   98.362415][ T7092] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.419'.
[   98.745549][   T33] audit: type=1400 audit(1758639218.662:8): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=7099 comm="syz.3.422"
[   98.815952][ T7104] binder: 7103:7104 ioctl c0046209 ffffffffff600000 returned -22
[   99.370250][ T6145] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   99.509866][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   99.534241][ T6145] usb 4-1: config 0 has an invalid interface number: 46 but max is 0
[   99.537711][ T6145] usb 4-1: config 0 has no interface number 0
[   99.540600][ T6145] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   99.544683][ T6145] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   99.550953][ T6145] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[   99.554872][ T6145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.557865][ T6145] usb 4-1: Product: syz
[   99.559520][ T6145] usb 4-1: Manufacturer: syz
[   99.562954][ T6145] usb 4-1: SerialNumber: syz
[   99.566776][ T6145] usb 4-1: config 0 descriptor??
[   99.574894][ T6145] ums-karma 4-1:0.46: USB Mass Storage device detected
[   99.637544][ T6145] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5
[   99.692724][   T24] usb 3-1: Using ep0 maxpacket: 32
[   99.701467][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[   99.707226][   T24] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[   99.711623][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.714753][   T24] usb 3-1: Product: syz
[   99.716454][   T24] usb 3-1: Manufacturer: syz
[   99.718273][   T24] usb 3-1: SerialNumber: syz
[   99.736864][   T24] usb 3-1: config 0 descriptor??
[   99.739811][ T7117] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   99.759512][   T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4
[   99.788202][  T973] usb 4-1: USB disconnect, device number 6
[   99.972296][  T973] usb 3-1: USB disconnect, device number 12
[   99.972461][    C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  100.030931][ T2278] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  100.192518][ T2278] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  100.198720][ T2278] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  100.203960][ T2278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.207251][ T2278] usb 1-1: Product: syz
[  100.208982][ T2278] usb 1-1: Manufacturer: syz
[  100.212261][ T2278] usb 1-1: SerialNumber: syz
[  100.222051][ T2278] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  100.495770][ T7132] loop3: detected capacity change from 0 to 16
[  100.503147][ T7132] erofs (device loop3): mounted with root inode @ nid 36.
[  100.511661][ T7132] erofs (device loop3): readahead error at folio 2 @ nid 89
[  100.515011][ T7132] erofs (device loop3): readahead error at folio 1 @ nid 89
[  100.518036][ T7132] erofs (device loop3): readahead error at folio 0 @ nid 89
[  100.523232][ T7132] erofs (device loop3): read error -117 @ 0 of nid 89
[  100.527256][   T33] audit: type=1800 audit(1758639220.452:9): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.433" name="file3" dev="loop3" ino=89 res=0 errno=0
[  100.542566][ T7132] erofs (device loop3): read error -117 @ 0 of nid 89
[  100.614685][ T7136] loop3: detected capacity change from 0 to 1024
[  100.618240][ T7136] EXT4-fs: Ignoring removed orlov option
[  100.624724][ T7136] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  100.629047][ T7136] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  100.636786][ T7136] EXT4-fs (loop3): invalid journal inode
[  100.639184][ T7136] EXT4-fs (loop3): can't get journal size
[  100.648681][ T2278] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  100.649901][ T7136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  100.680023][ T2278] usb 1-1: USB disconnect, device number 8
[  101.256973][ T7134] loop2: detected capacity change from 0 to 32768
[  101.266368][ T7134] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.434 (7134)
[  101.288066][ T7134] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  101.294778][ T7134] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  101.298387][ T7134] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  101.317253][ T7134] BTRFS info (device loop2): rebuilding free space tree
[  101.334212][ T7134] BTRFS info (device loop2): disabling free space tree
[  101.336671][ T7134] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  101.341022][ T7134] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  101.347502][ T7134] BTRFS info (device loop2): setting nodatasum
[  101.349618][ T7134] BTRFS info (device loop2): allowing degraded mounts
[  101.353172][ T7134] BTRFS info (device loop2): enabling disk space caching
[  101.355522][ T7134] BTRFS info (device loop2): force clearing of disk cache
[  101.357889][ T7134] BTRFS info (device loop2): force zlib compression, level 3
[  101.391532][ T5847] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  101.500640][ T6056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.656817][ T7174] xt_l2tp: invalid flags combination: 0
[  101.856857][   T24] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  101.871908][ T7180] loop2: detected capacity change from 0 to 4096
[  102.320168][   T24] usb 1-1: config 9 has an invalid interface number: 1 but max is 0
[  102.332808][   T24] usb 1-1: config 9 has no interface number 0
[  102.365534][   T24] usb 1-1: config 9 interface 1 has no altsetting 0
[  102.462007][  T774] ntfs3(loop2): ino=5, mi_enum_attr
[  102.488252][   T24] usb 1-1: string descriptor 0 read error: -22
[  102.496513][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36
[  102.500524][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.510529][   T24] cx231xx 1-1:9.1: New device   @ 1.5 Mbps (2040:b140) with 1 interfaces
[  102.513638][   T24] cx231xx 1-1:9.1: Not found matching IAD interface
[  102.524051][ T7187] loop2: detected capacity change from 0 to 164
[  102.531318][ T7187] iso9660: Corrupted directory entry in block 2 of inode 1920
[  102.631555][ T7189] loop3: detected capacity change from 0 to 1024
[  102.661183][ T7189] hfsplus: request for non-existent node 128 in B*Tree
[  102.669995][ T7189] hfsplus: request for non-existent node 128 in B*Tree
[  102.730959][   T24] usb 1-1: USB disconnect, device number 9
[  102.860766][ T7195] loop2: detected capacity change from 0 to 32768
[  102.864083][ T7195] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.453 (7195)
[  102.874495][ T7195] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.877797][ T7195] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  102.958073][ T7197] loop3: detected capacity change from 0 to 40427
[  102.963552][ T7197] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  102.968615][ T7197] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  102.982340][ T7195] BTRFS info (device loop2): rebuilding free space tree
[  102.984342][ T7197] F2FS-fs (loop3): invalid crc value
[  102.993080][ T7195] BTRFS info (device loop2): disabling free space tree
[  102.995610][ T7195] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  102.999302][ T7195] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  103.006693][ T7195] BTRFS info (device loop2): enabling ssd optimizations
[  103.009495][ T7195] BTRFS info (device loop2): force clearing of disk cache
[  103.012507][ T7195] BTRFS info (device loop2): enabling auto defrag
[  103.015083][ T7195] BTRFS info (device loop2): doing ref verification
[  103.059345][ T5847] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  103.078033][ T7197] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  103.106728][ T7197] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  103.123140][ T7197] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  103.269092][ T7220] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  103.608298][ T7231] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.460'.
[  103.766611][ T7235] warning: `syz.0.461' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  103.976501][ T7239] loop0: detected capacity change from 0 to 2048
[  104.000166][ T7239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.040256][ T5916] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  104.214286][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.237833][ T5916] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72
[  104.241519][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.244450][ T5916] usb 4-1: Product: syz
[  104.246194][ T5916] usb 4-1: Manufacturer: syz
[  104.248148][ T5916] usb 4-1: SerialNumber: syz
[  104.253785][ T5916] usb 4-1: config 0 descriptor??
[  104.267537][ T5916] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  104.279956][ T5916] dvb-usb: bulk message failed: -22 (3/0)
[  104.320858][ T5916] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  104.339074][ T5916] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  104.344698][ T5916] dvb_usb_umt_010 4-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22
[  104.500764][ T6145] usb 4-1: USB disconnect, device number 7
[  104.516513][ T7248] loop0: detected capacity change from 0 to 512
[  104.533539][ T7248] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  104.595894][ T7248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  104.934012][ T7250] loop2: detected capacity change from 0 to 32768
[  104.946073][ T7250] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  104.950578][ T7250] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.963440][ T7250] XFS (loop2): Ending clean mount
[  104.970947][ T7250] XFS (loop2): Quotacheck needed: Please wait.
[  104.990020][ T7250] XFS (loop2): Quotacheck: Done.
[  105.021861][ T5847] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  105.064182][ T5916] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  105.232920][ T5916] usb 1-1: Using ep0 maxpacket: 16
[  105.237369][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64
[  105.264397][ T5916] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  105.270109][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.277010][ T5916] usb 1-1: Product: syz
[  105.278927][ T5916] usb 1-1: Manufacturer: syz
[  105.287140][ T5916] usb 1-1: SerialNumber: syz
[  105.300906][ T5916] usb 1-1: config 0 descriptor??
[  105.330828][ T5916] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  105.346417][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'.
[  105.518573][   T12] usb 1-1: Failed to submit usb control message: -71
[  105.523729][ T5916] usb 1-1: USB disconnect, device number 10
[  105.526064][   T12] usb 1-1: unable to send the bmi data to the device: -71
[  105.532104][   T12] usb 1-1: unable to get target info from device
[  105.534751][   T12] usb 1-1: could not get target info (-71)
[  105.537451][   T12] usb 1-1: could not probe fw (-71)
[  105.681154][ T2278] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  105.834309][ T2278] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  105.837743][ T2278] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  105.840928][ T2278] usb 3-1: Product: syz
[  105.842575][ T2278] usb 3-1: Manufacturer: syz
[  105.844132][ T2278] usb 3-1: SerialNumber: syz
[  105.853969][ T2278] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  105.969710][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  106.132199][   T24] usb 4-1: Using ep0 maxpacket: 32
[  106.137974][   T24] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  106.142489][   T24] usb 4-1: config 0 has no interface number 0
[  106.145819][   T24] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  106.149299][   T24] usb 4-1: config 0 interface 196 has no altsetting 0
[  106.161972][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  106.165440][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.175780][   T24] usb 4-1: Product: syz
[  106.177173][   T24] usb 4-1: Manufacturer: syz
[  106.178695][   T24] usb 4-1: SerialNumber: syz
[  106.183202][   T24] usb 4-1: config 0 descriptor??
[  106.187822][ T7301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  106.257230][ T2278] vp7045: USB control message 'in' went wrong.
[  106.260095][ T2278] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  106.264442][ T2278] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  106.270151][ T2278] usb 3-1: USB disconnect, device number 13
[  106.419949][ T6145] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  106.531537][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  106.571264][ T6145] usb 1-1: Using ep0 maxpacket: 32
[  106.575665][ T6145] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  106.579013][ T6145] usb 1-1: config 0 has no interface number 0
[  106.581733][ T6145] usb 1-1: config 0 interface 12 has no altsetting 0
[  106.588476][ T6145] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  106.593265][ T6145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.596671][ T6145] usb 1-1: Product: syz
[  106.598511][ T6145] usb 1-1: Manufacturer: syz
[  106.600629][ T6145] usb 1-1: SerialNumber: syz
[  106.607485][ T6145] usb 1-1: config 0 descriptor??
[  106.808050][   T24] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  106.836841][   T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached
[  107.023869][   T24] usb 4-1: USB disconnect, device number 8
[  107.113361][   T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected
[  107.119838][ T7321] loop2: detected capacity change from 0 to 64
[  107.661873][ T7348] netlink: 'syz.3.501': attribute type 6 has an invalid length.
[  107.748457][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  107.753351][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  107.757565][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  107.764262][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  107.768011][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  107.772585][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  107.776563][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  107.782925][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  108.206269][ T7389] loop2: detected capacity change from 0 to 1024
[  108.218990][ T7389] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  108.223658][ T7389] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  108.228995][ T7389] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #5: comm syz.2.520: unexpected bad inode w/o EXT4_IGET_BAD
[  108.235902][ T7389] EXT4-fs (loop2): Remounting filesystem read-only
[  108.238926][ T7389] EXT4-fs (loop2): no journal found
[  108.241156][ T7389] EXT4-fs (loop2): can't get journal size
[  108.251277][ T7389] EXT4-fs (loop2): failed to initialize system zone (-117)
[  108.254139][ T6145] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  108.254414][ T7389] EXT4-fs (loop2): mount failed
[  108.257367][ T6145] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  108.257382][ T6145] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  108.257443][ T6145] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  108.282863][ T6145] usb 1-1: USB disconnect, device number 11
[  108.517200][ T7406] loop3: detected capacity change from 0 to 256
[  108.587669][ T7408] loop3: detected capacity change from 0 to 256
[  108.626279][ T7408] FAT-fs (loop3): Directory bread(block 64) failed
[  108.629853][ T7408] FAT-fs (loop3): Directory bread(block 65) failed
[  108.632679][ T7408] FAT-fs (loop3): Directory bread(block 66) failed
[  108.635357][ T7408] FAT-fs (loop3): Directory bread(block 67) failed
[  108.642558][ T7408] FAT-fs (loop3): Directory bread(block 68) failed
[  108.645319][ T7408] FAT-fs (loop3): Directory bread(block 69) failed
[  108.648094][ T7408] FAT-fs (loop3): Directory bread(block 70) failed
[  108.652973][ T7408] FAT-fs (loop3): Directory bread(block 71) failed
[  108.664703][ T7408] FAT-fs (loop3): Directory bread(block 72) failed
[  108.667649][ T7408] FAT-fs (loop3): Directory bread(block 73) failed
[  109.187506][ T7421] loop0: detected capacity change from 0 to 128
[  109.200074][ T7421] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.205837][ T7421] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  109.249491][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.500821][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  109.579928][ T6145] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  109.609800][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  109.730086][ T6145] usb 1-1: Using ep0 maxpacket: 8
[  109.734340][ T6145] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.741317][ T6145] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  109.744980][ T6145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.748232][ T6145] usb 1-1: Product: syz
[  109.750217][ T6145] usb 1-1: Manufacturer: syz
[  109.752299][ T6145] usb 1-1: SerialNumber: syz
[  109.756314][ T6145] usb 1-1: config 0 descriptor??
[  109.759768][   T24] usb 3-1: Using ep0 maxpacket: 8
[  109.763449][ T6145] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  109.769060][   T24] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  109.778250][   T24] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  109.781939][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.785111][   T24] usb 3-1: Product: syz
[  109.786777][   T24] usb 3-1: Manufacturer: syz
[  109.788369][   T24] usb 3-1: SerialNumber: syz
[  109.791356][   T24] usb 3-1: config 0 descriptor??
[  109.795911][   T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  109.799234][   T24] usb 3-1: setting power ON
[  109.801648][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  109.807400][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  109.813123][   T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  109.816926][   T24] usb 3-1: media controller created
[  109.835404][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.847514][   T24] usb 3-1: selecting invalid altsetting 6
[  109.849520][   T24] usb 3-1: digital interface selection failed (-22)
[  109.851851][   T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  109.855597][   T24] usb 3-1: setting power OFF
[  109.857559][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  109.860118][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  109.863595][   T24] (NULL device *): no alternate interface
[  109.887727][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  109.966165][   T24] usb 1-1: USB disconnect, device number 12
[  110.006934][   T95] usb 3-1: USB disconnect, device number 14
[  110.646997][ T7464] loop0: detected capacity change from 0 to 256
[  110.656558][ T7464] exFAT-fs (loop0): bogus data start sector
[  110.658853][ T7464] exFAT-fs (loop0): failed to read boot sector
[  110.663335][ T7464] exFAT-fs (loop0): failed to recognize exfat type
[  110.767499][ T7468] loop0: detected capacity change from 0 to 512
[  110.781089][ T7468] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  110.784946][ T7468] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[  110.789473][ T7468] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.556: inode #15: comm syz.0.556: iget: illegal inode #
[  110.795391][ T7468] EXT4-fs (loop0): Remounting filesystem read-only
[  110.802686][ T7468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.809564][ T7468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.851575][ T2278] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  110.980149][ T7477] Driver unsupported XDP return value 0 on prog  (id 49) dev N/A, expect packet loss!
[  111.009079][ T7479] wg1 speed is unknown, defaulting to 1000
[  111.015837][ T7479] wg1 speed is unknown, defaulting to 1000
[  111.019334][ T7479] wg1 speed is unknown, defaulting to 1000
[  111.024826][ T2278] usb 3-1: config 4 has an invalid interface number: 231 but max is 0
[  111.027508][ T7479] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  111.030278][ T2278] usb 3-1: config 4 has no interface number 0
[  111.032186][ T7479] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  111.034845][ T2278] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  111.038628][ T2278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.045754][ T2278] usb 3-1: Product: syz
[  111.047665][ T2278] usb 3-1: Manufacturer: syz
[  111.049961][ T2278] usb 3-1: SerialNumber: syz
[  111.057371][ T7479] wg1 speed is unknown, defaulting to 1000
[  111.058766][ T2278] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  111.072785][ T7479] wg1 speed is unknown, defaulting to 1000
[  111.077629][ T7479] wg1 speed is unknown, defaulting to 1000
[  111.265947][ T2278] vp7045: USB control message 'out' went wrong.
[  111.276437][ T2278] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  111.296915][ T2278] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  111.311592][ T2278] usb 3-1: USB disconnect, device number 15
[  111.529842][   T95] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  111.681867][   T95] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.685731][   T95] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.688950][   T95] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  111.693188][   T95] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.701411][   T95] usb 4-1: config 0 descriptor??
[  111.921636][ T7510] loop2: detected capacity change from 0 to 4096
[  111.925886][ T7510] ntfs3(loop2): It is recommened to use chkdsk.
[  111.929154][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  111.932540][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  111.935029][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  111.937647][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  111.940855][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00
[  111.943634][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00
[  111.946803][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00
[  111.949500][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00
[  111.952580][ T7510] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00
[  112.000088][ T5916] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  112.112840][   T95] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  112.159911][ T5916] usb 1-1: Using ep0 maxpacket: 32
[  112.164288][ T5916] usb 1-1: config 4 has an invalid interface number: 128 but max is 0
[  112.167774][ T5916] usb 1-1: config 4 has no interface number 0
[  112.171005][ T5916] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.175732][ T5916] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.180723][ T5916] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  112.184421][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.199163][ T5916] hub 1-1:4.128: USB hub found
[  112.309760][ T2278] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  112.310452][   T95] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -71
[  112.319107][   T95] usb 4-1: USB disconnect, device number 9
[  112.399315][ T5916] hub 1-1:4.128: 2 ports detected
[  112.401657][ T5916] hub 1-1:4.128: Using single TT (err -22)
[  112.483203][ T2278] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  112.487306][ T2278] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  112.491260][ T2278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.505108][ T2278] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1
[  112.530924][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  112.603291][ T5916] hub 1-1:4.128: hub_hub_status failed (err = -71)
[  112.606465][ T5916] hub 1-1:4.128: config failed, can't get hub status (err -71)
[  112.632965][ T5916] usb 1-1: USB disconnect, device number 13
[  112.710908][   T95] usb 3-1: USB disconnect, device number 16
[  112.944879][ T7526] loop3: detected capacity change from 0 to 4096
[  112.963562][ T7526] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  112.981639][ T7526] ntfs3(loop3): Failed to load $Extend (-22).
[  112.984046][ T7526] ntfs3(loop3): Failed to initialize $Extend.
[  113.343204][ T7545] loop2: detected capacity change from 0 to 128
[  113.366124][ T7545] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.371648][ T7545] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.407559][ T5847] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.459258][ T1091] wlan1: Creating new IBSS network, BSSID 7e:c3:07:4f:af:5f
[  113.509766][   T95] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  113.597847][ T7552] loop0: detected capacity change from 0 to 4096
[  113.682512][   T95] usb 4-1: Using ep0 maxpacket: 32
[  113.697990][   T95] usb 4-1: config 0 has an invalid interface number: 151 but max is 0
[  113.700740][ T7558] __nla_validate_parse: 8 callbacks suppressed
[  113.700752][ T7558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.598'.
[  113.704936][   T95] usb 4-1: config 0 has no interface number 0
[  113.711619][   T95] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  113.716159][   T95] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  113.728656][   T95] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  113.734924][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.738770][   T95] usb 4-1: Product: syz
[  113.741456][   T95] usb 4-1: Manufacturer: syz
[  113.743452][   T95] usb 4-1: SerialNumber: syz
[  113.747545][   T95] usb 4-1: config 0 descriptor??
[  113.828822][ T7564] loop0: detected capacity change from 0 to 2048
[  114.016460][   T95] usb 4-1: USB disconnect, device number 10
[  114.044806][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.733366][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'.
[  114.803349][ T7577] loop2: detected capacity change from 0 to 256
[  114.808350][ T7577] exfat: Deprecated parameter 'namecase'
[  114.823615][ T7577] exfat: Deprecated parameter 'utf8'
[  114.828704][ T7577] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  114.877559][ T7581] loop3: detected capacity change from 0 to 2048
[  114.915900][ T7581] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  114.928357][ T7581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.050035][ T7587] loop2: detected capacity change from 0 to 32768
[  115.154805][ T7587] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.175904][ T2278] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  115.190595][ T7587] XFS (loop2): Ending clean mount
[  115.329892][ T2278] usb 1-1: Using ep0 maxpacket: 32
[  115.353639][ T7602] loop3: detected capacity change from 0 to 32768
[  115.356704][ T2278] usb 1-1: config 0 interface 0 has no altsetting 0
[  115.361966][ T2278] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  115.364821][ T2278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.379862][ T2278] usb 1-1: Product: syz
[  115.383137][ T2278] usb 1-1: Manufacturer: syz
[  115.385040][ T2278] usb 1-1: SerialNumber: syz
[  115.389960][ T2278] usb 1-1: config 0 descriptor??
[  115.392617][ T7602] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  115.406465][ T7602] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  115.420944][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  115.432099][ T5847] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.490832][ T7602] syz.3.615 (7602) used greatest stack depth: 19376 bytes left
[  115.563253][ T6056] ocfs2: Unmounting device (7,3) on (node local)
[  115.813375][ T2278] gs_usb 1-1:0.0: Configuring for 2 interfaces
[  116.014323][ T2278] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  116.017255][ T2278] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  116.022466][ T2278] usb 1-1: USB disconnect, device number 14
[  116.059781][   T95] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  116.214108][   T95] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82
[  116.219142][   T95] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  116.224394][   T95] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.229553][   T95] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06
[  116.233901][   T95] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  116.237191][   T95] usb 4-1: SerialNumber: syz
[  116.453138][   T95] yealink 4-1:36.0: invalid payload size 0, expected 16
[  116.461223][   T95] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input7
[  116.471114][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  116.474250][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  116.477247][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  116.480367][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  116.483668][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  116.486727][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  116.489752][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  116.492957][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  116.495662][    C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  116.515949][   T95] usb 4-1: USB disconnect, device number 11
[  116.585292][ T7619] loop2: detected capacity change from 0 to 512
[  116.588670][ T7619] EXT4-fs: Ignoring removed nobh option
[  116.611568][ T7619] EXT4-fs (loop2): Test dummy encryption mode enabled
[  116.656152][ T7619] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.621: iget: bad i_size value: 38620345925642
[  116.664768][ T7619] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.621: couldn't read orphan inode 15 (err -117)
[  116.671619][ T7619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.710839][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.735182][ T7621] loop0: detected capacity change from 0 to 32768
[  116.741593][ T7621] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.622 (7621)
[  116.747090][ T7621] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  117.133474][ T7639] Invalid source name
[  117.135367][ T7639] UBIFS error (pid: 7639): cannot open "/dev/sg0", error -22
[  117.441073][ T7647] loop2: detected capacity change from 0 to 4096
[  117.496863][ T7647] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  117.535057][ T7647] ntfs3(loop2): Failed to load $Extend (-22).
[  117.537617][ T7647] ntfs3(loop2): Failed to initialize $Extend.
[  118.024766][ T7664] delete_channel: no stack
[  118.234730][ T7666] loop2: detected capacity change from 0 to 1024
[  118.296835][   T36] hfsplus: b-tree write err: -5, ino 4
[  118.305966][ T7649] loop0: detected capacity change from 0 to 32768
[  118.312966][ T7649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.634 (7649)
[  118.326945][ T7649] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  118.427639][  T973] kernel write not supported for file /binder/failed_transaction_log (pid: 973 comm: kworker/0:2)
[  118.886567][  T973] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  119.040185][  T973] usb 1-1: Using ep0 maxpacket: 32
[  119.046852][  T973] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.054505][  T973] usb 1-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  119.070616][  T973] usb 1-1: config 1 interface 0 has no altsetting 0
[  119.082387][  T973] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  119.094836][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.098418][  T973] usb 1-1: Product: syz
[  119.102152][  T973] usb 1-1: Manufacturer: 톲폻稀뢇
[  119.104555][  T973] usb 1-1: SerialNumber: syz
[  119.226426][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.356568][  T973] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  119.367745][  T973] usb 1-1: USB disconnect, device number 15
[  119.488725][ T7715] loop3: detected capacity change from 0 to 256
[  119.536039][ T7717] loop2: detected capacity change from 0 to 512
[  119.579549][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.598870][ T7717] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.637923][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.900574][ T7738] loop0: detected capacity change from 0 to 1024
[  120.935326][ T5855] Bluetooth: hci2: command 0x0405 tx timeout
[  121.646124][ T7776] can0: slcan on ttyS3.
[  121.720241][ T7780] loop2: detected capacity change from 0 to 256
[  121.754977][ T7776] can0 (unregistered): slcan off ttyS3.
[  121.769405][ T7782] loop3: detected capacity change from 0 to 1764
[  122.409823][ T7796] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.215358][ T7812] loop0: detected capacity change from 0 to 512
[  123.243795][ T7812] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup
[  123.248394][ T7812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  123.318401][ T7817] loop3: detected capacity change from 0 to 128
[  123.348572][ T7817] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.354518][ T7817] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.442502][ T6056] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.544444][ T7830] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  123.544444][ T7830] The task syz.2.707 (7830) triggered the difference, watch for misbehavior.
[  123.550791][ T7829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  123.619236][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'.
[  123.929768][   T95] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  124.062132][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.096596][   T95] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  124.101435][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  124.115931][   T95] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  124.125844][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  124.132989][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  124.138530][   T95] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  124.142568][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  124.146964][   T95] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  124.152474][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  124.157127][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  124.163090][   T95] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  124.166305][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  124.171117][   T95] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  124.175979][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  124.184751][   T95] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  124.193392][   T95] usb 4-1: string descriptor 0 read error: -22
[  124.196193][   T95] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  124.200321][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.210147][   T95] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  124.420355][ T2278] usb 4-1: USB disconnect, device number 12
[  124.957352][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.730'.
[  125.277077][ T7906] netlink: 'syz.2.744': attribute type 1 has an invalid length.
[  125.294714][ T7906] netlink: 'syz.2.744': attribute type 2 has an invalid length.
[  126.965427][ T7925] loop2: detected capacity change from 0 to 512
[  126.968882][ T7925] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  127.149772][  T973] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  127.199762][ T2278] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  127.309731][  T973] usb 1-1: Using ep0 maxpacket: 16
[  127.315701][  T973] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6
[  127.319843][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.323468][  T973] usb 1-1: Product: syz
[  127.325330][  T973] usb 1-1: Manufacturer: syz
[  127.328305][  T973] usb 1-1: SerialNumber: syz
[  127.333972][  T973] usb 1-1: config 0 descriptor??
[  127.338885][  T973] safe_serial 1-1:0.0: safe_serial converter detected
[  127.344712][  T973] usb 1-1: safe_serial converter now attached to ttyUSB0
[  127.359741][ T2278] usb 4-1: Using ep0 maxpacket: 16
[  127.364510][ T2278] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.368593][ T2278] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  127.373630][ T2278] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  127.378971][ T2278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.383043][ T2278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  127.386500][ T2278] usb 4-1: SerialNumber: syz
[  127.392455][ T7924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  127.396433][ T2278] cdc_acm 4-1:1.0: skipping garbage
[  127.399436][ T2278] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12
[  127.542738][ T2278] usb 1-1: USB disconnect, device number 16
[  127.549845][ T2278] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  127.554761][ T2278] safe_serial 1-1:0.0: device disconnected
[  127.605334][  T973] usb 4-1: USB disconnect, device number 13
[  127.953571][ T7932] loop2: detected capacity change from 0 to 32768
[  127.957255][ T7932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.755 (7932)
[  127.965132][ T7932] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.969164][ T7932] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  127.986603][ T7932] BTRFS info (device loop2): enabling ssd optimizations
[  127.989034][ T7932] BTRFS info (device loop2): enabling free space tree
[  128.023723][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.082592][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[  128.091081][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[  128.313316][ T7967] overlay: Bad value for 'workdir'
[  129.109798][ T2278] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  129.305947][ T2278] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  129.319787][ T2278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  129.329873][ T2278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  129.347092][ T2278] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  129.359953][ T2278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.363549][ T2278] usb 4-1: Product: syz
[  129.365474][ T2278] usb 4-1: Manufacturer: syz
[  129.367674][ T2278] usb 4-1: SerialNumber: syz
[  129.380482][ T2278] usb 4-1: config 0 descriptor??
[  129.395359][ T2278] port100 4-1:0.0: NFC: Could not get supported command types
[  129.606719][ T7310] usb 4-1: USB disconnect, device number 14
[  129.785691][ T7981] wg1 speed is unknown, defaulting to 1000
[  129.975558][ T7997] fuse: Bad value for 'fd'
[  130.035510][ T2278] IPVS: starting estimator thread 0...
[  130.132221][ T8000] IPVS: using max 50 ests per chain, 120000 per kthread
[  130.399751][ T2278] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  130.561672][ T2278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.565986][ T2278] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[  130.569885][ T2278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.575436][ T2278] usb 4-1: config 0 descriptor??
[  130.581871][ T2278] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[  130.782531][ T2278] pwc: send_video_command error -71
[  130.784981][ T2278] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  130.788858][ T2278] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  130.794714][ T2278] usb 4-1: USB disconnect, device number 15
[  131.343089][   T33] audit: type=1326 audit(1758639251.262:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe0f8ec29 code=0x7ffc0000
[  131.354862][ T8024] netlink: 'syz.3.788': attribute type 21 has an invalid length.
[  131.357410][ T8024] netlink: 128 bytes leftover after parsing attributes in process `syz.3.788'.
[  131.365625][   T33] audit: type=1326 audit(1758639251.262:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe0f8ec29 code=0x7ffc0000
[  131.368294][ T8024] netlink: 'syz.3.788': attribute type 4 has an invalid length.
[  131.373160][   T33] audit: type=1326 audit(1758639251.262:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.787" exe="/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcbe0f8ec29 code=0x7ffc0000
[  131.373182][   T33] audit: type=1326 audit(1758639251.262:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe0f8ec29 code=0x7ffc0000
[  131.373202][   T33] audit: type=1326 audit(1758639251.262:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe0f8ec29 code=0x7ffc0000
[  131.373218][   T33] audit: type=1326 audit(1758639251.262:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.787" exe="/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcbe0f8ec29 code=0x7ffc0000
[  131.373233][   T33] audit: type=1326 audit(1758639251.262:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe0f8ec29 code=0x7ffc0000
[  131.373247][   T33] audit: type=1326 audit(1758639251.262:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe0f8ec29 code=0x7ffc0000
[  131.424274][ T8024] netlink: 'syz.3.788': attribute type 5 has an invalid length.
[  131.427214][ T8024] netlink: 3 bytes leftover after parsing attributes in process `syz.3.788'.
[  131.482442][ T8029] loop3: detected capacity change from 0 to 1764
[  132.466997][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.469793][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.523185][ T8073] netlink: 96 bytes leftover after parsing attributes in process `syz.0.809'.
[  132.535513][ T8071] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  132.631951][ T8079] loop2: detected capacity change from 0 to 128
[  132.645697][ T8079] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  132.667794][ T8079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.722063][ T8085] loop3: detected capacity change from 0 to 8
[  132.726776][ T8085] SQUASHFS error: Failed to read block 0x62: -5
[  132.729563][ T8085] squashfs image failed sanity check
[  132.782250][ T8087] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  132.796518][ T8087] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  132.803397][ T8089] netlink: 'syz.2.817': attribute type 1 has an invalid length.
[  132.806603][ T8089] netlink: 228 bytes leftover after parsing attributes in process `syz.2.817'.
[  132.897990][ T8095] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  133.072837][ T8105] loop3: detected capacity change from 0 to 128
[  133.110007][ T8105] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  133.118208][ T8105] hpfs: filesystem error: improperly stopped
[  133.134213][ T8105] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  133.137787][ T8105] hpfs: You really don't want any checks? You are crazy...
[  133.148717][ T8105] hpfs: hpfs_map_sector(): read error
[  133.153616][ T8105] hpfs: code page support is disabled
[  133.157543][ T8105] hpfs: hpfs_map_4sectors(): unaligned read
[  133.162291][ T8105] hpfs: hpfs_map_4sectors(): unaligned read
[  133.165075][ T8105] hpfs: filesystem error: unable to find root dir
[  133.256376][ T8103] loop0: detected capacity change from 0 to 32768
[  133.276964][ T8103] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.824 (8103)
[  133.289299][ T8103] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  133.292162][ T8111] loop2: detected capacity change from 0 to 16
[  133.320492][ T8111] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  133.491348][ T8119] netlink: 'syz.3.829': attribute type 1 has an invalid length.
[  133.493972][ T8119] netlink: 'syz.3.829': attribute type 1 has an invalid length.
[  133.496869][ T8119] netlink: 'syz.3.829': attribute type 1 has an invalid length.
[  133.501137][ T8119] nbd: error processing sock list
[  133.509030][ T8119] block nbd0: shutting down sockets
[  133.631699][ T8117] loop0: detected capacity change from 0 to 40427
[  133.639124][ T8117] F2FS-fs (loop0): Image doesn't support compression
[  133.643015][ T8117] F2FS-fs (loop0): LFS is not compatible with ATGC
[  133.649916][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  134.201389][ T2278] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  134.351708][ T2278] usb 1-1: Using ep0 maxpacket: 16
[  134.356081][ T2278] usb 1-1: unable to get BOS descriptor or descriptor too short
[  134.366511][ T2278] usb 1-1: config 6 has an invalid interface number: 202 but max is 0
[  134.372216][ T2278] usb 1-1: config 6 has no interface number 0
[  134.374769][ T2278] usb 1-1: config 6 interface 202 altsetting 244 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  134.384948][ T2278] usb 1-1: config 6 interface 202 altsetting 244 bulk endpoint 0xB has invalid maxpacket 8
[  134.389140][ T2278] usb 1-1: config 6 interface 202 has no altsetting 0
[  134.397413][ T2278] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d4.1f
[  134.401730][ T2278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.405060][ T2278] usb 1-1: Product: syz
[  134.406826][ T2278] usb 1-1: Manufacturer: syz
[  134.408806][ T2278] usb 1-1: SerialNumber: syz
[  134.415323][ T8127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  134.636073][ T2278] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 7 is not bulk.
[  134.644161][ T2278] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 8 is not bulk.
[  134.648397][ T2278] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[  134.658938][ T2278] usb 1-1: USB disconnect, device number 17
[  135.487703][ T8162] loop2: detected capacity change from 0 to 256
[  135.492118][ T8162] exfat: Deprecated parameter 'namecase'
[  135.509080][ T8162] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  135.522796][   T33] audit: type=1326 audit(1758639255.442:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.2.847" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29b958ec29 code=0x0
[  135.667927][ T8163] block device autoloading is deprecated and will be removed.
[  135.899198][ T8174] loop3: detected capacity change from 0 to 256
[  135.903559][ T8174] exfat: Deprecated parameter 'namecase'
[  135.909961][ T8174] exfat: Deprecated parameter 'utf8'
[  135.913711][ T8174] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  135.920660][ T8174] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  136.268879][ T8177] loop3: detected capacity change from 0 to 1024
[  136.272670][ T8177] EXT4-fs: Ignoring removed bh option
[  136.282507][ T8177] EXT4-fs: inline encryption not supported
[  136.286359][ T8177] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  136.293948][ T8177] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  136.311241][ T8177] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.852: lblock 2 mapped to illegal pblock 2 (length 1)
[  136.319088][ T8177] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  136.322889][ T8177] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.852: lblock 0 mapped to illegal pblock 48 (length 1)
[  136.329513][ T8177] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.852: Failed to acquire dquot type 0
[  136.336201][ T8177] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  136.342912][ T8177] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.852: mark_inode_dirty error
[  136.357831][ T8177] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  136.362313][ T8177] EXT4-fs (loop3): 1 orphan inode deleted
[  136.365638][ T8177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.381537][ T1089] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  136.391516][ T1089] __quota_error: 1 callbacks suppressed
[  136.391529][ T1089] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  136.404187][ T1089] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u9:3: Failed to release dquot type 0
[  136.436210][ T1089] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm kworker/u9:3: lblock 2 mapped to illegal pblock 2 (length 1)
[  136.448548][ T1089] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  136.454338][ T1089] EXT4-fs error (device loop3): ext4_write_dquot:6917: comm kworker/u9:3: Failed to commit dquot type 0
[  136.471741][ T1089] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  136.486070][ T6056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.494342][ T6056] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  136.504786][ T6056] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  136.509028][ T6056] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  136.625169][ T8191] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  136.627543][ T8191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  136.633547][ T8191] vhci_hcd vhci_hcd.0: Device attached
[  136.639575][ T8191] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5)
[  136.641762][ T8191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  136.652475][ T8191] vhci_hcd vhci_hcd.0: Device attached
[  136.666712][ T8191] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7)
[  136.669121][ T8191] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  136.685932][ T8191] vhci_hcd vhci_hcd.0: Device attached
[  136.688476][ T8191] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  136.707111][ T8191] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11)
[  136.709681][ T8191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  136.730217][ T8191] vhci_hcd vhci_hcd.0: Device attached
[  136.739236][ T8191] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  136.762919][ T8191] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  136.790197][ T8191] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  136.805813][ T8191] vhci_hcd vhci_hcd.0: port 0 already used
[  136.810389][ T8196] vhci_hcd: connection closed
[  136.811333][ T8194] vhci_hcd: connection closed
[  136.813346][ T8192] vhci_hcd: connection closed
[  136.817369][   T13] vhci_hcd: stop threads
[  136.822800][ T8200] vhci_hcd: connection closed
[  136.825441][   T13] vhci_hcd: release socket
[  136.830616][   T13] vhci_hcd: disconnect device
[  136.832979][   T13] vhci_hcd: stop threads
[  136.834818][   T13] vhci_hcd: release socket
[  136.836720][   T13] vhci_hcd: disconnect device
[  136.838796][   T13] vhci_hcd: stop threads
[  136.841604][   T13] vhci_hcd: release socket
[  136.844640][   T13] vhci_hcd: disconnect device
[  136.846776][   T13] vhci_hcd: stop threads
[  136.848540][   T13] vhci_hcd: release socket
[  136.851306][   T13] vhci_hcd: disconnect device
[  136.870991][ T2278] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  136.874016][ T2278] usb 39-1: enqueue for inactive port 0
[  136.940786][ T2278] vhci_hcd: vhci_device speed not set
[  137.049787][   T95] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  137.053108][ T7310] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  137.201606][   T95] usb 3-1: Using ep0 maxpacket: 16
[  137.205661][ T7310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  137.211198][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.215772][ T7310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  137.221214][   T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.225242][ T7310] usb 1-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  137.228905][ T7310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.232406][   T95] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  137.236021][   T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.241870][ T7310] usb 1-1: config 0 descriptor??
[  137.246270][ T8213] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  137.248549][   T95] usb 3-1: config 0 descriptor??
[  137.658818][ T7310] hid (null): report_id 57294 is invalid
[  137.669122][   T95] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x1
[  137.674766][ T7310] asus 0003:0B05:18C6.0006: collection stack underflow
[  137.677258][ T7310] asus 0003:0B05:18C6.0006: item 0 1 0 12 parsing failed
[  137.682212][   T95] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  137.686542][ T7310] asus 0003:0B05:18C6.0006: Asus hid parse failed: -22
[  137.689024][ T7310] asus 0003:0B05:18C6.0006: probe with driver asus failed with error -22
[  137.867472][ T7310] usb 1-1: USB disconnect, device number 18
[  137.879308][ T5916] usb 3-1: USB disconnect, device number 17
[  138.912122][ T8258] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  138.917021][ T8258] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  139.080352][   T95] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  139.229106][ T8257] loop2: detected capacity change from 0 to 32768
[  139.232941][ T8257] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.883 (8257)
[  139.246284][ T8257] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.251739][ T8257] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  139.256999][   T95] usb 4-1: config 3 has an invalid interface number: 238 but max is 0
[  139.261710][   T95] usb 4-1: config 3 has no interface number 0
[  139.264129][   T95] usb 4-1: config 3 interface 238 has no altsetting 0
[  139.269244][   T95] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=92.99
[  139.275047][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.278909][   T95] usb 4-1: Product: syz
[  139.282018][   T95] usb 4-1: Manufacturer: syz
[  139.284390][   T95] usb 4-1: SerialNumber: syz
[  139.337648][ T8257] BTRFS info (device loop2): enabling ssd optimizations
[  139.341685][ T8257] BTRFS info (device loop2): enabling free space tree
[  139.387979][ T5847] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.505579][   T95] usb 4-1: unsupported MDLM descriptors
[  139.519956][   T95] usb 4-1: USB disconnect, device number 16
[  139.686202][ T8280] loop0: detected capacity change from 0 to 128
[  139.936653][ T8298] loop0: detected capacity change from 0 to 1024
[  139.941117][ T2278] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  139.941852][ T8298] tmpfs: Unknown parameter 'errors'
[  139.966648][ T2278] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  140.187181][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'.
[  140.234565][ T8300] loop2: detected capacity change from 0 to 32768
[  140.240900][ T8300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.895 (8300)
[  140.267729][ T8300] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  140.279297][ T8300] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  140.421178][ T8300] BTRFS info (device loop2): enabling ssd optimizations
[  140.426211][ T8300] BTRFS info (device loop2): enabling free space tree
[  140.509183][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  140.780955][   T95] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  140.941463][   T95] usb 1-1: Using ep0 maxpacket: 16
[  140.951220][   T95] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  140.954186][   T95] usb 1-1: config 0 has no interface number 0
[  140.956206][   T95] usb 1-1: config 0 interface 51 has no altsetting 0
[  140.971679][   T95] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5
[  140.975230][   T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.978102][   T95] usb 1-1: Product: syz
[  140.979949][ T8346] syzkaller1: entered promiscuous mode
[  140.979959][ T8346] syzkaller1: entered allmulticast mode
[  140.984239][   T95] usb 1-1: Manufacturer: syz
[  140.986254][   T95] usb 1-1: SerialNumber: syz
[  140.989323][   T95] usb 1-1: config 0 descriptor??
[  140.997052][   T95] usb 1-1: bad CDC descriptors
[  141.207546][   T95] usb 1-1: USB disconnect, device number 19
[  141.339397][ T8356] loop3: detected capacity change from 0 to 32768
[  141.342267][ T5916] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  141.348157][ T8356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.914 (8356)
[  141.358897][ T8356] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.363340][ T8356] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  141.384618][ T8356] BTRFS info (device loop3): enabling ssd optimizations
[  141.387609][ T8356] BTRFS info (device loop3): using spread ssd allocation scheme
[  141.391185][ T8356] BTRFS info (device loop3): enabling free space tree
[  141.453557][ T6056] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.501620][ T5916] usb 3-1: Using ep0 maxpacket: 32
[  141.522125][ T5916] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  141.534685][ T5916] usb 3-1: Dual-Role OTG device on HNP port
[  141.543706][ T5916] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74
[  141.547425][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.551253][ T5916] usb 3-1: Product: syz
[  141.557791][ T5916] usb 3-1: Manufacturer: syz
[  141.567110][ T5916] usb 3-1: SerialNumber: syz
[  141.576883][ T5916] usb 3-1: config 0 descriptor??
[  141.581857][ T5916] rndis_host 3-1:0.0: skipping garbage
[  141.584204][ T5916] rndis_host 3-1:0.0: invalid descriptor buffer length
[  141.587009][ T5916] usb 3-1: bad CDC descriptors
[  141.589563][ T5916] cdc_acm 3-1:0.0: skipping garbage
[  141.592429][ T5916] cdc_acm 3-1:0.0: invalid descriptor buffer length
[  141.633575][ T8376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.916'.
[  141.637292][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.916'.
[  141.642639][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.916'.
[  141.747298][ T8382] loop0: detected capacity change from 0 to 256
[  141.781728][ T8384] netlink: 64 bytes leftover after parsing attributes in process `syz.3.920'.
[  141.789549][   T95] usb 3-1: USB disconnect, device number 18
[  142.144304][ T8390] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  142.147625][ T8390] overlayfs: failed to set xattr on upper
[  142.150224][ T8390] overlayfs: ...falling back to redirect_dir=nofollow.
[  142.153247][ T8390] overlayfs: ...falling back to index=off.
[  142.155884][ T8390] overlayfs: ...falling back to uuid=null.
[  142.211741][ T8391] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  142.519945][ T8397] loop2: detected capacity change from 0 to 4096
[  142.535038][ T8398] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.719794][ T7310] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  142.894824][ T8409] loop3: detected capacity change from 0 to 4096
[  142.903356][ T7310] usb 1-1: unable to get BOS descriptor or descriptor too short
[  142.915084][ T7310] usb 1-1: config 5 has an invalid interface number: 58 but max is 0
[  142.918192][ T7310] usb 1-1: config 5 has no interface number 0
[  142.922661][ T8409] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  142.923572][ T7310] usb 1-1: config 5 interface 58 has no altsetting 0
[  142.936097][ T7310] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= a.af
[  142.942624][ T7310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.946142][ T7310] usb 1-1: Product: syz
[  142.948074][ T7310] usb 1-1: Manufacturer: syz
[  142.950491][ T7310] usb 1-1: SerialNumber: syz
[  142.955427][ T8409] ntfs3(loop3): ino=1a, mi_enum_attr
[  142.958280][ T8409] ntfs3(loop3): ino=1a, mi_enum_attr
[  142.968020][ T8409] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  143.048197][ T8417] IPv4: Oversized IP packet from 127.202.26.0
[  143.106574][ T8423] loop3: detected capacity change from 0 to 256
[  143.122057][ T8423] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x96d79dd0, utbl_chksum : 0xe619d30d)
[  143.138028][ T8425] autofs: Bad value for 'fd'
[  143.179815][ T7310] usb 1-1: USB disconnect, device number 20
[  143.317669][ T8437] loop3: detected capacity change from 0 to 256
[  143.349877][   T33] audit: type=1800 audit(1758639263.262:19): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.939" name="bus" dev="loop3" ino=1048640 res=0 errno=0
[  143.628703][ T8450] befs: (nullb0): No write support. Marking filesystem read-only
[  143.636237][ T8450] befs: (nullb0): invalid magic header
[  143.654955][  T973] IPVS: starting estimator thread 0...
[  143.739839][ T8451] IPVS: using max 38 ests per chain, 91200 per kthread
[  143.749797][ T5916] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  143.903366][ T5916] usb 3-1: Using ep0 maxpacket: 16
[  143.922521][ T5916] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.927944][ T5916] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.932831][ T5916] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  143.938451][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0
[  143.942356][ T5916] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  143.946550][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.960263][ T5916] usb 3-1: config 0 descriptor??
[  144.170229][   T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  144.323326][   T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  144.327421][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.339931][   T24] usb 1-1: config 0 descriptor??
[  144.432061][ T5916] kye 0003:0458:0087.0009: unknown main item tag 0x0
[  144.434314][ T5916] kye 0003:0458:0087.0009: unknown main item tag 0x0
[  144.436534][ T5916] kye 0003:0458:0087.0009: unknown main item tag 0x0
[  144.438756][ T5916] kye 0003:0458:0087.0009: unknown main item tag 0x0
[  144.442450][ T5916] kye 0003:0458:0087.0009: unknown main item tag 0x0
[  144.455009][ T5916] kye 0003:0458:0087.0009: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0
[  144.561244][   T24] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  144.609830][ T3566] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  144.641190][ T5916] usb 3-1: USB disconnect, device number 19
[  144.762706][   T24] [drm:udl_init] *ERROR* Selecting channel failed
[  144.794477][   T24] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3
[  144.796864][   T24] [drm] Initialized udl on minor 3
[  144.806791][   T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.813656][   T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  144.827200][   T24] usb 1-1: USB disconnect, device number 21
[  144.829393][ T7310] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.835885][ T7310] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  145.075997][ T8459] loop3: detected capacity change from 0 to 4096
[  145.080415][ T8459] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  145.096358][ T8459] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  145.404778][ T8477] netlink: 'syz.2.957': attribute type 10 has an invalid length.
[  145.412868][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.420118][ T8477] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  145.434455][ T8477] bond0: entered promiscuous mode
[  145.436534][ T8477] bond_slave_0: entered promiscuous mode
[  145.438369][ T8463] loop3: detected capacity change from 0 to 32768
[  145.438962][ T8477] bond_slave_1: entered promiscuous mode
[  145.444830][ T8477] batadv0: entered promiscuous mode
[  145.457786][ T8463] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.483602][ T8463] XFS (loop3): Ending clean mount
[  145.515193][ T6056] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.570220][   T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  145.729857][ T5916] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  145.732183][   T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[  145.736540][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.746689][   T24] usb 1-1: config 0 descriptor??
[  145.753275][   T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[  145.897017][ T5916] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  145.901068][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.909143][ T5916] usb 3-1: config 0 descriptor??
[  145.921494][ T5916] gspca_main: spca508-2.14.0 probing 8086:0110
[  145.976667][   T24] gspca_sn9c20x: Write register 1000 failed -71
[  145.980468][   T24] gspca_sn9c20x: Device initialization failed
[  145.983497][   T24] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  145.991822][   T24] usb 1-1: USB disconnect, device number 22
[  146.132881][ T5916] gspca_spca508: reg_read err -32
[  146.338564][ T5916] gspca_spca508: reg_read err -71
[  146.341062][ T5916] gspca_spca508: reg_read err -71
[  146.343420][ T5916] gspca_spca508: reg_read err -71
[  146.345789][ T5916] gspca_spca508: reg write: error -71
[  146.347768][ T5916] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[  146.354302][ T5916] usb 3-1: USB disconnect, device number 20
[  146.994807][ T8507] capability: warning: `syz.2.966' uses 32-bit capabilities (legacy support in use)
[  147.040982][ T8512] Invalid ELF header magic: != ELF
[  147.153769][ T8526] loop3: detected capacity change from 0 to 128
[  147.296094][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'.
[  147.929894][   T95] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  148.105645][   T95] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  148.109016][   T95] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.112713][   T95] usb 4-1: config 0 has no interface number 0
[  148.115145][   T95] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  148.119136][   T95] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.126233][   T95] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  148.133448][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.136843][   T95] usb 4-1: Product: syz
[  148.138586][   T95] usb 4-1: Manufacturer: syz
[  148.141295][   T95] usb 4-1: SerialNumber: syz
[  148.146590][   T95] usb 4-1: config 0 descriptor??
[  148.302439][ T8573] loop2: detected capacity change from 0 to 64
[  148.313829][ T8573] syz.2.997: attempt to access beyond end of device
[  148.313829][ T8573] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64
[  148.319777][ T8573] Buffer I/O error on dev loop2, logical block 512, async page read
[  148.322453][ T8573] syz.2.997: attempt to access beyond end of device
[  148.322453][ T8573] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64
[  148.326619][ T8573] Buffer I/O error on dev loop2, logical block 56576, async page read
[  148.793272][  T973] usb 4-1: USB disconnect, device number 17
[  148.987141][ T8581] loop0: detected capacity change from 0 to 4096
[  149.013023][ T8581] overlayfs: overlapping lowerdir path
[  149.463708][ T8599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.822777][   T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  150.069863][   T24] usb 3-1: Using ep0 maxpacket: 16
[  150.074489][   T24] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  150.079123][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  150.083764][   T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  150.087509][   T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  150.091978][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  150.098591][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.102883][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  150.105812][   T24] usb 3-1: SerialNumber: syz
[  150.111427][ T8601] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  150.116371][   T24] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  150.119984][   T24] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  150.268996][ T8609] loop0: detected capacity change from 0 to 4096
[  150.324972][   T24] usb 3-1: USB disconnect, device number 21
[  150.340694][ T8611] loop0: detected capacity change from 0 to 4096
[  150.432455][ T8615] netlink: 'syz.0.1015': attribute type 34 has an invalid length.
[  150.474755][ T8617] vlan2: entered allmulticast mode
[  150.476693][ T8617] batadv0: entered allmulticast mode
[  150.554771][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'.
[  150.711146][ T8629] loop0: detected capacity change from 0 to 8
[  150.761910][ T8632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1023'.
[  150.829546][ T8639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.879250][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1029'.
[  150.926992][ T7310] libceph: connect (1)[c::]:6789 error -101
[  150.932537][ T7310] libceph: mon0 (1)[c::]:6789 connect error
[  150.944207][ T8656] loop2: detected capacity change from 0 to 8
[  151.008851][   T33] audit: type=1326 audit(1758639270.922:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b958ec29 code=0x7ffc0000
[  151.017778][   T33] audit: type=1326 audit(1758639270.942:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b958ec29 code=0x7ffc0000
[  151.030657][ T8651] ceph: No mds server is up or the cluster is laggy
[  151.033683][   T33] audit: type=1326 audit(1758639270.952:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f29b958ec29 code=0x7ffc0000
[  151.056714][   T33] audit: type=1326 audit(1758639270.952:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b958ec29 code=0x7ffc0000
[  151.069802][   T33] audit: type=1326 audit(1758639270.952:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b958ec29 code=0x7ffc0000
[  151.296939][ T8670] loop2: detected capacity change from 0 to 2048
[  151.366517][ T8670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.539859][ T7310] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  151.709856][  T973] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  151.879813][  T973] usb 4-1: Using ep0 maxpacket: 32
[  151.883914][  T973] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.887929][  T973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  151.894353][  T973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  151.903743][  T973] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.910365][  T973] usb 4-1: config 1 interface 1 has no altsetting 0
[  151.916073][  T973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  151.922304][  T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.925785][  T973] usb 4-1: Product: syz
[  151.927549][  T973] usb 4-1: Manufacturer: syz
[  151.931335][  T973] usb 4-1: SerialNumber: syz
[  152.058112][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.109590][ T8685] loop2: detected capacity change from 0 to 8
[  152.118700][ T8685] SQUASHFS error: zlib decompression failed, data probably corrupt
[  152.126710][ T8685] SQUASHFS error: Failed to read block 0x9b: -5
[  152.128911][ T8685] SQUASHFS error: Unable to read metadata cache entry [99]
[  152.136330][ T8685] SQUASHFS error: Unable to read inode 0x127
[  152.152191][  T973] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  152.159359][  T973] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  152.209872][ T7310] usb 1-1: Using ep0 maxpacket: 8
[  152.218058][  T973] usb 4-1: USB disconnect, device number 18
[  152.223338][ T7310] usb 1-1: config 0 has an invalid interface number: 229 but max is 0
[  152.235529][ T7310] usb 1-1: config 0 has no interface number 0
[  152.253009][ T7310] usb 1-1: New USB device found, idVendor=0830, idProduct=0003, bcdDevice=9a.68
[  152.256792][ T7310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.273650][ T7310] usb 1-1: Product: syz
[  152.275420][ T7310] usb 1-1: Manufacturer: syz
[  152.277316][ T7310] usb 1-1: SerialNumber: syz
[  152.307463][ T7310] usb 1-1: config 0 descriptor??
[  152.322857][ T7310] usb 1-1: active config #0 != 1 ??
[  152.336504][ T8689] loop2: detected capacity change from 0 to 1764
[  152.526106][   T95] usb 1-1: USB disconnect, device number 23
[  152.669778][ T7310] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  152.819758][ T7310] usb 3-1: Using ep0 maxpacket: 8
[  152.824784][ T7310] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  152.828200][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  152.833349][ T7310] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  152.838085][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  152.843756][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  152.850485][ T7310] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  152.853497][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  152.858407][ T7310] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  152.863802][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  152.869003][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  152.875985][ T7310] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  152.878693][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  152.887579][ T7310] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  152.892019][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  152.895507][ T7310] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  152.912329][ T7310] usb 3-1: string descriptor 0 read error: -22
[  152.914521][ T7310] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  152.917527][ T7310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.929816][ T7310] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  153.007176][ T8709] loop3: detected capacity change from 0 to 512
[  153.073374][ T8713] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  153.138766][ T7310] usb 3-1: USB disconnect, device number 22
[  153.197749][ T8721] loop3: detected capacity change from 0 to 512
[  153.203301][ T8721] EXT4-fs: Ignoring removed bh option
[  153.206749][ T8721] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  153.222655][ T8721] EXT4-fs (loop3): 1 truncate cleaned up
[  153.226392][ T8721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.267293][ T6056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.283119][ T8728] loop0: detected capacity change from 0 to 128
[  153.563235][ T8746] deleting an unspecified loop device is not supported.
[  153.569930][ T2278] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  153.727519][ T2278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.731960][ T2278] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00
[  153.735442][ T2278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.741811][ T8756] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1081'.
[  153.746599][ T2278] usb 1-1: config 0 descriptor??
[  153.755210][ T8758] bridge: RTM_NEWNEIGH with invalid ether address
[  154.068011][ T8763] loop3: detected capacity change from 0 to 40427
[  154.073884][ T8763] F2FS-fs (loop3): invalid crc value
[  154.148997][ T8763] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  154.156333][ T8763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  154.174948][   T33] audit: type=1800 audit(1758639274.092:25): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1084" name="bus" dev="loop3" ino=10 res=0 errno=0
[  154.187819][ T2278] semitek 0003:1EA7:0907.000A: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.0-1/input0
[  154.201240][ T6056] syz-executor: attempt to access beyond end of device
[  154.201240][ T6056] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  154.206116][ T6056] CPU: 1 UID: 0 PID: 6056 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  154.206132][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.206140][ T6056] Call Trace:
[  154.206145][ T6056]  <TASK>
[  154.206151][ T6056]  dump_stack_lvl+0x189/0x250
[  154.206173][ T6056]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.206187][ T6056]  ? __pfx_queue_work_on+0x10/0x10
[  154.206199][ T6056]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  154.206218][ T6056]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  154.206245][ T6056]  f2fs_handle_critical_error+0x37c/0x540
[  154.206269][ T6056]  f2fs_write_end_io+0x886/0xb60
[  154.206297][ T6056]  __submit_merged_bio+0x27a/0x6a0
[  154.206319][ T6056]  __submit_merged_write_cond+0x255/0x530
[  154.206343][ T6056]  f2fs_write_data_pages+0x261d/0x3000
[  154.206381][ T6056]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  154.206426][ T6056]  ? __mod_zone_page_state+0xd7/0x140
[  154.206450][ T6056]  ? folios_put_refs+0x560/0x640
[  154.206469][ T6056]  ? __pfx_folios_put_refs+0x10/0x10
[  154.206479][ T6056]  ? rcu_is_watching+0x15/0xb0
[  154.206495][ T6056]  ? __lock_acquire+0xab9/0xd20
[  154.206523][ T6056]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  154.206534][ T6056]  do_writepages+0x32e/0x550
[  154.206557][ T6056]  ? do_raw_spin_unlock+0x4d/0x240
[  154.206605][ T6056]  filemap_fdatawrite+0x199/0x240
[  154.206620][ T6056]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  154.206676][ T6056]  ? do_raw_spin_unlock+0x4d/0x240
[  154.206693][ T6056]  f2fs_sync_dirty_inodes+0x31f/0x830
[  154.206719][ T6056]  f2fs_write_checkpoint+0x95a/0x1df0
[  154.206751][ T6056]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  154.206807][ T6056]  ? kill_f2fs_super+0x298/0x6c0
[  154.206824][ T6056]  kill_f2fs_super+0x2c3/0x6c0
[  154.206842][ T6056]  ? __pfx_kill_f2fs_super+0x10/0x10
[  154.206853][ T6056]  ? radix_tree_delete_item+0x2b6/0x400
[  154.206871][ T6056]  ? shrinker_free+0x2ce/0x3e0
[  154.206886][ T6056]  deactivate_locked_super+0xbc/0x130
[  154.206904][ T6056]  cleanup_mnt+0x425/0x4c0
[  154.206917][ T6056]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.206933][ T6056]  task_work_run+0x1d4/0x260
[  154.206951][ T6056]  ? __pfx_task_work_run+0x10/0x10
[  154.206965][ T6056]  ? __x64_sys_umount+0x122/0x160
[  154.206985][ T6056]  ? exit_to_user_mode_loop+0x40/0x110
[  154.207005][ T6056]  exit_to_user_mode_loop+0xec/0x110
[  154.207022][ T6056]  do_syscall_64+0x2bd/0x3b0
[  154.207033][ T6056]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.207045][ T6056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.207055][ T6056]  ? exc_page_fault+0x9f/0xf0
[  154.207067][ T6056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.207077][ T6056] RIP: 0033:0x7f4d8098ff57
[  154.207088][ T6056] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  154.207099][ T6056] RSP: 002b:00007ffcc3907c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  154.207111][ T6056] RAX: 0000000000000000 RBX: 00007f4d80a11c2d RCX: 00007f4d8098ff57
[  154.207119][ T6056] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc3907d30
[  154.207126][ T6056] RBP: 00007ffcc3907d30 R08: 0000000000000000 R09: 0000000000000000
[  154.207132][ T6056] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc3908dc0
[  154.207139][ T6056] R13: 00007f4d80a11c2d R14: 00000000000259d9 R15: 00007ffcc3908e00
[  154.207162][ T6056]  </TASK>
[  154.207167][ T6056] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  154.279262][ T8767] loop2: detected capacity change from 0 to 32768
[  154.362996][   T24] usb 1-1: USB disconnect, device number 24
[  154.737694][ T8780] loop3: detected capacity change from 0 to 32768
[  154.743521][ T8780] jfs_mount: Mount Failure: superblock is corrupt!
[  154.747635][ T8780] Mount JFS Failure: -22
[  154.749430][ T8780] jfs_mount failed w/return code = -22
[  154.876531][ T8786] loop2: detected capacity change from 0 to 40427
[  154.882370][ T8786] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  154.886049][ T8786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  154.891119][ T8786] F2FS-fs (loop2): invalid crc value
[  154.926181][ T8786] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  154.929356][ T8791] loop3: detected capacity change from 0 to 512
[  154.933866][ T8786] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  154.936463][ T8786] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  154.953263][ T8791] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  155.002870][ T8791] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  155.018321][ T8791] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1093: bg 0: block 248: padding at end of block bitmap is not set
[  155.026522][ T8791] Quota error (device loop3): write_blk: dquota write failed
[  155.028970][ T8791] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  155.040263][ T8791] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1093: Failed to acquire dquot type 1
[  155.055095][ T8791] EXT4-fs (loop3): 1 truncate cleaned up
[  155.070461][ T8791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  155.099698][   T33] audit: type=1800 audit(1758639275.012:26): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1093" name="file1" dev="loop3" ino=15 res=0 errno=0
[  155.192698][ T6056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  155.621750][ T8815] loop3: detected capacity change from 0 to 512
[  155.638226][ T8815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.685291][ T6056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.932911][ T8821] loop2: detected capacity change from 0 to 4096
[  155.937068][ T8821] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  156.005288][ T8821] ntfs3(loop2): Failed to load $Extend (-22).
[  156.008036][ T8821] ntfs3(loop2): Failed to initialize $Extend.
[  156.184121][ T8835] loop3: detected capacity change from 0 to 4096
[  156.198109][ T8835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.227181][ T6056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.334655][ T8832] loop0: detected capacity change from 0 to 32768
[  156.450064][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  156.600504][    T9] usb 3-1: Using ep0 maxpacket: 16
[  156.604660][    T9] usb 3-1: config 0 has an invalid interface number: 249 but max is 0
[  156.607956][    T9] usb 3-1: config 0 has no interface number 0
[  156.611927][ T8853] loop0: detected capacity change from 0 to 128
[  156.613574][    T9] usb 3-1: config 0 interface 249 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64
[  156.618302][    T9] usb 3-1: config 0 interface 249 has no altsetting 0
[  156.624376][    T9] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1
[  156.628005][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.633004][    T9] usb 3-1: Product: syz
[  156.634817][    T9] usb 3-1: Manufacturer: syz
[  156.636716][    T9] usb 3-1: SerialNumber: syz
[  156.641219][    T9] usb 3-1: config 0 descriptor??
[  156.644567][ T8839] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  156.653660][    T9] aircable 3-1:0.249: aircable converter detected
[  156.658503][    T9] usb 3-1: aircable converter now attached to ttyUSB0
[  156.813407][ T8855] loop0: detected capacity change from 0 to 32768
[  156.817370][ T8855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1119 (8855)
[  156.822916][ T8855] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  156.864518][ T7310] usb 3-1: USB disconnect, device number 23
[  156.871656][ T7310] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[  156.875261][ T7310] aircable 3-1:0.249: device disconnected
[  157.120199][ T8864] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  157.208376][ T8868] loop0: detected capacity change from 0 to 16
[  157.289220][ T8872] loop0: detected capacity change from 0 to 4096
[  157.551771][ T8877] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  157.589223][ T8877] CIFS mount error: No usable UNC path provided in device string!
[  157.589223][ T8877] 
[  157.607929][ T8877] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  157.815025][ T8883] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  158.018591][ T8885] loop2: detected capacity change from 0 to 32768
[  158.024409][ T8885] jfs_mount: dbMount failed w/rc = -22
[  158.028005][ T8885] Mount JFS Failure: -22
[  158.029956][ T8885] jfs_mount failed w/return code = -22
[  158.119722][ T7310] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  158.392906][ T7310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.397548][ T7310] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  158.402239][ T7310] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  158.405831][ T7310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.411435][ T7310] usb 1-1: config 0 descriptor??
[  158.416340][ T7310] gspca_main: spca501-2.14.0 probing 0000:0000
[  158.973416][ T7310] gspca_spca501: reg write: error -71
[  158.975349][ T7310] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  158.977857][ T7310] spca501 1-1:0.0: probe with driver spca501 failed with error -22
[  158.981797][ T7310] usb 1-1: USB disconnect, device number 25
[  159.212352][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1141'.
[  159.234155][ T8907] tipc: Started in network mode
[  159.236479][ T8907] tipc: Node identity ac14140f, cluster identity 4711
[  159.242161][ T8907] tipc: New replicast peer: 255.255.255.255
[  159.245343][ T8907] tipc: Enabled bearer <udp:syz2>, priority 10
[  159.252810][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'.
[  159.256610][ T8907] tipc: Disabling bearer <udp:syz2>
[  159.341753][ T8913] binder: 8912:8913 ioctl c0306201 2000000003c0 returned -22
[  159.837080][ T8939] loop0: detected capacity change from 0 to 2048
[  159.876106][ T8943] loop3: detected capacity change from 0 to 256
[  159.879535][ T8943] exfat: Deprecated parameter 'namecase'
[  159.883953][ T8943] exfat: Deprecated parameter 'namecase'
[  159.898950][ T8943] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  159.981732][ T8951] xt_l2tp: missing protocol rule (udp|l2tpip)
[  160.444494][ T8959] loop0: detected capacity change from 0 to 32768
[  160.451887][ T8959] btrfs: Bad value for 'metadata_ratio'
[  160.624165][ T8961] loop2: detected capacity change from 0 to 32768
[  160.634400][   T33] audit: type=1800 audit(1758639280.552:27): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1166" name="file1" dev="loop2" ino=4 res=0 errno=0
[  160.988892][ T8976] loop2: detected capacity change from 0 to 128
[  161.012233][ T8976] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.023783][ T8976] ext4 filesystem being mounted at /395/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  161.045505][ T8983] loop3: detected capacity change from 0 to 2048
[  161.067182][ T5847] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.069080][ T8983] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.182221][ T8995] bridge0: port 3(syz_tun) entered blocking state
[  161.184943][ T8995] bridge0: port 3(syz_tun) entered disabled state
[  161.198380][ T8995] syz_tun: entered allmulticast mode
[  161.202730][ T8995] syz_tun: entered promiscuous mode
[  161.204859][ T8995] bridge0: port 3(syz_tun) entered blocking state
[  161.206999][ T8995] bridge0: port 3(syz_tun) entered forwarding state
[  161.383187][ T8998] loop2: detected capacity change from 0 to 32768
[  161.404119][ T8998] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.436333][ T8998] XFS (loop2): Ending clean mount
[  161.443756][ T8998] XFS (loop2): Quotacheck needed: Please wait.
[  161.472334][ T8998] XFS (loop2): Quotacheck: Done.
[  161.513915][ T5847] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.528847][ T9027] loop3: detected capacity change from 0 to 16
[  161.544663][ T9027] erofs (device loop3): failed to read inode meta block (nid: 18446744073575399424): -117
[  161.849859][ T7310] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  161.859802][   T95] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  161.919893][   T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  162.000105][ T7310] usb 4-1: Using ep0 maxpacket: 8
[  162.004176][ T7310] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  162.007723][ T7310] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  162.011911][ T7310] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  162.015902][ T7310] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  162.020019][ T7310] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.024351][ T7310] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  162.028346][ T7310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.035188][   T95] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  162.038748][   T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.045009][   T95] usb 1-1: Product: syz
[  162.046537][   T95] usb 1-1: Manufacturer: syz
[  162.048121][   T95] usb 1-1: SerialNumber: syz
[  162.053203][   T95] r8152-cfgselector 1-1: Unknown version 0x0000
[  162.055346][   T95] r8152-cfgselector 1-1: config 0 descriptor??
[  162.079717][   T24] usb 3-1: Using ep0 maxpacket: 16
[  162.085139][   T24] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  162.088865][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.091969][   T24] usb 3-1: Product: syz
[  162.093758][   T24] usb 3-1: Manufacturer: syz
[  162.095716][   T24] usb 3-1: SerialNumber: syz
[  162.099828][   T24] usb 3-1: config 0 descriptor??
[  162.261938][   T95] r8152-cfgselector 1-1: Needed 1 retries to read version
[  162.264422][   T95] r8152-cfgselector 1-1: Unknown version 0x0000
[  162.266920][   T95] r8152-cfgselector 1-1: bad CDC descriptors
[  162.305413][   T24] usb 3-1: ignoring: not an USB2CAN converter
[  162.452281][    T9] usb 4-1: USB disconnect, device number 19
[  162.463917][ T2278] r8152-cfgselector 1-1: USB disconnect, device number 26
[  162.507789][  T973] usb 3-1: USB disconnect, device number 24
[  163.122121][ T9049] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  163.215767][ T9057] netlink: 'syz.2.1208': attribute type 1 has an invalid length.
[  163.219048][ T9057] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1208'.
[  163.239893][   T95] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  163.366740][ T9067] netlink: 'syz.2.1213': attribute type 39 has an invalid length.
[  163.391601][   T95] usb 1-1: Using ep0 maxpacket: 16
[  163.395911][   T95] usb 1-1: config 0 has an invalid interface number: 49 but max is 0
[  163.399351][   T95] usb 1-1: config 0 has no interface number 0
[  163.402933][   T95] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  163.411297][   T95] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  163.416131][   T95] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  163.421181][   T95] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  163.428051][   T95] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  163.428070][   T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.428083][   T95] usb 1-1: Product: syz
[  163.428092][   T95] usb 1-1: Manufacturer: syz
[  163.428101][   T95] usb 1-1: SerialNumber: syz
[  163.435489][   T95] usb 1-1: config 0 descriptor??
[  163.450383][ T9039] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  163.450563][ T9039] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  163.686772][   T95] usb 1-1: USB disconnect, device number 27
[  164.102035][ T9076] loop2: detected capacity change from 0 to 32768
[  164.118896][ T9076] JBD2: Ignoring recovery information on journal
[  164.173653][ T9076] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  164.257396][ T5847] ocfs2: Unmounting device (7,2) on (node local)
[  164.320479][ T9080] ==================================================================
[  164.323884][ T9080] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  164.327014][ T9080] Read of size 4 at addr ffff888029cd89c4 by task syz.0.1219/9080
[  164.330623][ T9080] 
[  164.331596][ T9080] CPU: 0 UID: 0 PID: 9080 Comm: syz.0.1219 Not tainted syzkaller #0 PREEMPT(full) 
[  164.331607][ T9080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.331612][ T9080] Call Trace:
[  164.331617][ T9080]  <TASK>
[  164.331620][ T9080]  dump_stack_lvl+0x189/0x250
[  164.331631][ T9080]  ? __kasan_check_byte+0x12/0x40
[  164.331643][ T9080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.331652][ T9080]  ? lock_release+0x4b/0x3e0
[  164.331662][ T9080]  ? __virt_addr_valid+0x4a5/0x5c0
[  164.331673][ T9080]  print_report+0xca/0x240
[  164.331680][ T9080]  ? xfrm_alloc_spi+0x570/0xf30
[  164.331689][ T9080]  kasan_report+0x118/0x150
[  164.331699][ T9080]  ? xfrm_alloc_spi+0x570/0xf30
[  164.331708][ T9080]  xfrm_alloc_spi+0x570/0xf30
[  164.331717][ T9080]  ? xfrm_alloc_spi+0x2a0/0xf30
[  164.331728][ T9080]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  164.331736][ T9080]  ? xfrm_find_acq+0x87/0xa0
[  164.331746][ T9080]  xfrm_alloc_userspi+0x70b/0xc90
[  164.331759][ T9080]  ? apparmor_capable+0x137/0x1b0
[  164.331769][ T9080]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  164.331778][ T9080]  ? __nla_parse+0x40/0x60
[  164.331786][ T9080]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.331796][ T9080]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  164.331810][ T9080]  ? __pfx___mutex_trylock_common+0x10/0x10
[  164.331818][ T9080]  ? rcu_is_watching+0x15/0xb0
[  164.331825][ T9080]  ? trace_contention_end+0x39/0x120
[  164.331832][ T9080]  ? __mutex_lock+0x335/0x1350
[  164.331840][ T9080]  netlink_rcv_skb+0x208/0x470
[  164.331848][ T9080]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  164.331857][ T9080]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.331866][ T9080]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.331872][ T9080]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.331879][ T9080]  xfrm_netlink_rcv+0x79/0x90
[  164.331887][ T9080]  netlink_unicast+0x82f/0x9e0
[  164.331898][ T9080]  ? __pfx_netlink_unicast+0x10/0x10
[  164.331908][ T9080]  ? netlink_sendmsg+0x642/0xb30
[  164.331914][ T9080]  ? skb_put+0x11b/0x210
[  164.331922][ T9080]  netlink_sendmsg+0x805/0xb30
[  164.331930][ T9080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.331938][ T9080]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.331945][ T9080]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.331952][ T9080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.331959][ T9080]  __sock_sendmsg+0x21c/0x270
[  164.331969][ T9080]  ____sys_sendmsg+0x505/0x830
[  164.331978][ T9080]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.331987][ T9080]  ? import_iovec+0x74/0xa0
[  164.331995][ T9080]  ___sys_sendmsg+0x21f/0x2a0
[  164.332003][ T9080]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.332016][ T9080]  ? __fget_files+0x2a/0x420
[  164.332024][ T9080]  ? __fget_files+0x3a0/0x420
[  164.332035][ T9080]  __x64_sys_sendmsg+0x19b/0x260
[  164.332047][ T9080]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.332061][ T9080]  ? rcu_is_watching+0x15/0xb0
[  164.332073][ T9080]  ? do_syscall_64+0xbe/0x3b0
[  164.332087][ T9080]  do_syscall_64+0xfa/0x3b0
[  164.332097][ T9080]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.332109][ T9080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.332118][ T9080]  ? exc_page_fault+0x9f/0xf0
[  164.332129][ T9080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.332141][ T9080] RIP: 0033:0x7fcbe0f8ec29
[  164.332151][ T9080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.332160][ T9080] RSP: 002b:00007fcbdf1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.332173][ T9080] RAX: ffffffffffffffda RBX: 00007fcbe11d5fa0 RCX: 00007fcbe0f8ec29
[  164.332183][ T9080] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  164.332191][ T9080] RBP: 00007fcbe1011e41 R08: 0000000000000000 R09: 0000000000000000
[  164.332200][ T9080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.332207][ T9080] R13: 00007fcbe11d6038 R14: 00007fcbe11d5fa0 R15: 00007ffd0571ad78
[  164.332218][ T9080]  </TASK>
[  164.332222][ T9080] 
[  164.485210][ T9080] Allocated by task 7017:
[  164.486589][ T9080]  kasan_save_track+0x3e/0x80
[  164.488201][ T9080]  __kasan_slab_alloc+0x6c/0x80
[  164.490050][ T9080]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  164.492258][ T9080]  xfrm_state_alloc+0x24/0x2f0
[  164.494232][ T9080]  __find_acq_core+0x8a7/0x1c00
[  164.496210][ T9080]  xfrm_find_acq+0x78/0xa0
[  164.498056][ T9080]  xfrm_alloc_userspi+0x6b3/0xc90
[  164.500206][ T9080]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.502209][ T9080]  netlink_rcv_skb+0x208/0x470
[  164.504182][ T9080]  xfrm_netlink_rcv+0x79/0x90
[  164.506188][ T9080]  netlink_unicast+0x82f/0x9e0
[  164.508113][ T9080]  netlink_sendmsg+0x805/0xb30
[  164.510099][ T9080]  __sock_sendmsg+0x21c/0x270
[  164.512114][ T9080]  ____sys_sendmsg+0x505/0x830
[  164.514083][ T9080]  ___sys_sendmsg+0x21f/0x2a0
[  164.516041][ T9080]  __x64_sys_sendmsg+0x19b/0x260
[  164.518065][ T9080]  do_syscall_64+0xfa/0x3b0
[  164.519966][ T9080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.522426][ T9080] 
[  164.523434][ T9080] Freed by task 973:
[  164.524944][ T9080]  kasan_save_track+0x3e/0x80
[  164.526714][ T9080]  kasan_save_free_info+0x46/0x50
[  164.528318][ T9080]  __kasan_slab_free+0x5b/0x80
[  164.529904][ T9080]  kmem_cache_free+0x18f/0x400
[  164.531560][ T9080]  xfrm_state_gc_task+0x52d/0x6b0
[  164.533263][ T9080]  process_scheduled_works+0xae1/0x17b0
[  164.535137][ T9080]  worker_thread+0x8a0/0xda0
[  164.537001][ T9080]  kthread+0x711/0x8a0
[  164.538705][ T9080]  ret_from_fork+0x439/0x7d0
[  164.540555][ T9080]  ret_from_fork_asm+0x1a/0x30
[  164.542601][ T9080] 
[  164.543488][ T9080] The buggy address belongs to the object at ffff888029cd8900
[  164.543488][ T9080]  which belongs to the cache xfrm_state of size 928
[  164.547992][ T9080] The buggy address is located 196 bytes inside of
[  164.547992][ T9080]  freed 928-byte region [ffff888029cd8900, ffff888029cd8ca0)
[  164.552858][ T9080] 
[  164.553675][ T9080] The buggy address belongs to the physical page:
[  164.555772][ T9080] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029cd9680 pfn:0x29cd8
[  164.559071][ T9080] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  164.562026][ T9080] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  164.565060][ T9080] page_type: f5(slab)
[  164.566674][ T9080] raw: 00fff00000000040 ffff888104f95640 dead000000000122 0000000000000000
[  164.569971][ T9080] raw: ffff888029cd9680 00000000800e000a 00000000f5000000 0000000000000000
[  164.572756][ T9080] head: 00fff00000000040 ffff888104f95640 dead000000000122 0000000000000000
[  164.575868][ T9080] head: ffff888029cd9680 00000000800e000a 00000000f5000000 0000000000000000
[  164.578683][ T9080] head: 00fff00000000002 ffffea0000a73601 00000000ffffffff 00000000ffffffff
[  164.581582][ T9080] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  164.585026][ T9080] page dumped because: kasan: bad access detected
[  164.587330][ T9080] page_owner tracks the page as allocated
[  164.589165][ T9080] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6278, tgid 6277 (syz.3.110), ts 71056822335, free_ts 64055918620
[  164.595116][ T9080]  post_alloc_hook+0x240/0x2a0
[  164.596710][ T9080]  get_page_from_freelist+0x21e4/0x22c0
[  164.598482][ T9080]  __alloc_frozen_pages_noprof+0x181/0x370
[  164.600294][ T9080]  alloc_pages_mpol+0x232/0x4a0
[  164.601903][ T9080]  allocate_slab+0x8a/0x370
[  164.603360][ T9080]  ___slab_alloc+0xbeb/0x1420
[  164.604922][ T9080]  kmem_cache_alloc_noprof+0x283/0x3c0
[  164.606714][ T9080]  xfrm_state_alloc+0x24/0x2f0
[  164.608275][ T9080]  xfrm_add_sa+0x17d1/0x4070
[  164.609747][ T9080]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.611363][ T9080]  netlink_rcv_skb+0x208/0x470
[  164.612962][ T9080]  xfrm_netlink_rcv+0x79/0x90
[  164.614509][ T9080]  netlink_unicast+0x82f/0x9e0
[  164.616100][ T9080]  netlink_sendmsg+0x805/0xb30
[  164.617689][ T9080]  __sock_sendmsg+0x21c/0x270
[  164.619242][ T9080]  ____sys_sendmsg+0x505/0x830
[  164.621077][ T9080] page last free pid 5593 tgid 5593 stack trace:
[  164.623326][ T9080]  __free_frozen_pages+0xbc4/0xd30
[  164.625023][ T9080]  __put_partials+0x156/0x1a0
[  164.626625][ T9080]  put_cpu_partial+0x17c/0x250
[  164.628209][ T9080]  __slab_free+0x2d5/0x3c0
[  164.629930][ T9080]  qlist_free_all+0x97/0x140
[  164.631931][ T9080]  kasan_quarantine_reduce+0x148/0x160
[  164.634276][ T9080]  __kasan_slab_alloc+0x22/0x80
[  164.636352][ T9080]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  164.638896][ T9080]  __alloc_skb+0x112/0x2d0
[  164.640800][ T9080]  alloc_skb_with_frags+0xca/0x890
[  164.642940][ T9080]  sock_alloc_send_pskb+0x857/0x990
[  164.645109][ T9080]  unix_dgram_sendmsg+0x461/0x1850
[  164.647168][ T9080]  __sock_sendmsg+0x21c/0x270
[  164.649052][ T9080]  sock_write_iter+0x258/0x330
[  164.650983][ T9080]  do_iter_readv_writev+0x61c/0x8b0
[  164.653192][ T9080]  vfs_writev+0x31a/0x960
[  164.655004][ T9080] 
[  164.656024][ T9080] Memory state around the buggy address:
[  164.658383][ T9080]  ffff888029cd8880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  164.661669][ T9080]  ffff888029cd8900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.664800][ T9080] >ffff888029cd8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.668109][ T9080]                                            ^
[  164.670648][ T9080]  ffff888029cd8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.673918][ T9080]  ffff888029cd8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.677105][ T9080] ==================================================================
[  164.680788][ T9080] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  164.683753][ T9080] CPU: 0 UID: 0 PID: 9080 Comm: syz.0.1219 Not tainted syzkaller #0 PREEMPT(full) 
[  164.687555][ T9080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.691435][ T9080] Call Trace:
[  164.692620][ T9080]  <TASK>
[  164.693617][ T9080]  dump_stack_lvl+0x99/0x250
[  164.695174][ T9080]  ? __asan_memcpy+0x40/0x70
[  164.696922][ T9080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.698915][ T9080]  ? __pfx__printk+0x10/0x10
[  164.700832][ T9080]  vpanic+0x281/0x750
[  164.702549][ T9080]  ? __pfx_vpanic+0x10/0x10
[  164.704537][ T9080]  ? irqentry_exit+0x74/0x90
[  164.706536][ T9080]  panic+0xb9/0xc0
[  164.708131][ T9080]  ? __pfx_panic+0x10/0x10
[  164.710024][ T9080]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  164.712566][ T9080]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.714950][ T9080]  ? xfrm_alloc_spi+0x570/0xf30
[  164.716973][ T9080]  check_panic_on_warn+0x89/0xb0
[  164.719090][ T9080]  ? xfrm_alloc_spi+0x570/0xf30
[  164.721136][ T9080]  end_report+0x78/0x160
[  164.722912][ T9080]  kasan_report+0x129/0x150
[  164.724861][ T9080]  ? xfrm_alloc_spi+0x570/0xf30
[  164.726932][ T9080]  xfrm_alloc_spi+0x570/0xf30
[  164.728897][ T9080]  ? xfrm_alloc_spi+0x2a0/0xf30
[  164.730957][ T9080]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  164.733153][ T9080]  ? xfrm_find_acq+0x87/0xa0
[  164.735129][ T9080]  xfrm_alloc_userspi+0x70b/0xc90
[  164.737369][ T9080]  ? apparmor_capable+0x137/0x1b0
[  164.739542][ T9080]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  164.741918][ T9080]  ? __nla_parse+0x40/0x60
[  164.743840][ T9080]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.745964][ T9080]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  164.748303][ T9080]  ? __pfx___mutex_trylock_common+0x10/0x10
[  164.750750][ T9080]  ? rcu_is_watching+0x15/0xb0
[  164.752745][ T9080]  ? trace_contention_end+0x39/0x120
[  164.754988][ T9080]  ? __mutex_lock+0x335/0x1350
[  164.756976][ T9080]  netlink_rcv_skb+0x208/0x470
[  164.759010][ T9080]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  164.761233][ T9080]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.763435][ T9080]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.765635][ T9080]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.767866][ T9080]  xfrm_netlink_rcv+0x79/0x90
[  164.769901][ T9080]  netlink_unicast+0x82f/0x9e0
[  164.771950][ T9080]  ? __pfx_netlink_unicast+0x10/0x10
[  164.774095][ T9080]  ? netlink_sendmsg+0x642/0xb30
[  164.776219][ T9080]  ? skb_put+0x11b/0x210
[  164.778019][ T9080]  netlink_sendmsg+0x805/0xb30
[  164.780103][ T9080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.782348][ T9080]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.784476][ T9080]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.786672][ T9080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.788857][ T9080]  __sock_sendmsg+0x21c/0x270
[  164.790803][ T9080]  ____sys_sendmsg+0x505/0x830
[  164.792775][ T9080]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.794975][ T9080]  ? import_iovec+0x74/0xa0
[  164.796936][ T9080]  ___sys_sendmsg+0x21f/0x2a0
[  164.798955][ T9080]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.801108][ T9080]  ? __fget_files+0x2a/0x420
[  164.803089][ T9080]  ? __fget_files+0x3a0/0x420
[  164.805100][ T9080]  __x64_sys_sendmsg+0x19b/0x260
[  164.807203][ T9080]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.809488][ T9080]  ? rcu_is_watching+0x15/0xb0
[  164.811513][ T9080]  ? do_syscall_64+0xbe/0x3b0
[  164.813511][ T9080]  do_syscall_64+0xfa/0x3b0
[  164.815348][ T9080]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.817420][ T9080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.819998][ T9080]  ? exc_page_fault+0x9f/0xf0
[  164.821902][ T9080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.824333][ T9080] RIP: 0033:0x7fcbe0f8ec29
[  164.826101][ T9080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.833964][ T9080] RSP: 002b:00007fcbdf1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.837421][ T9080] RAX: ffffffffffffffda RBX: 00007fcbe11d5fa0 RCX: 00007fcbe0f8ec29
[  164.840686][ T9080] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  164.843822][ T9080] RBP: 00007fcbe1011e41 R08: 0000000000000000 R09: 0000000000000000
[  164.847032][ T9080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.850206][ T9080] R13: 00007fcbe11d6038 R14: 00007fcbe11d5fa0 R15: 00007ffd0571ad78
[  164.853347][ T9080]  </TASK>
[  164.855475][ T9080] Kernel Offset: disabled
[  164.857255][ T9080] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:54:44  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012f3 RDI=00000000000012f4 RBP=00000000000003f8 RSP=ffffc90004fc69f0
R8 =ffff88801f440237 R9 =1ffff11003e88046 R10=dffffc0000000000 R11=ffffffff854fbd20
R12=dffffc0000000000 R13=ffffffff99b03907 R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854fbd9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcbdf1f66c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000500 CR3=0000000022a74000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8168840d ffffffff8133c59e
XMM02=00007fcbe11a7498 ffffffff8133c59e XMM03=00007fcbe11a74a8 00007fcbe11a74a0
XMM04=00007fcbe1d0d100 00007fcbe11a7460 XMM05=00007fcbe11a7478 00007fcbe11a74c0
XMM06=00007fcbe11a74b8 00007fcbe11a74b0 XMM07=00007fcbe11a74a8 00007fcbe11a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fcbe1012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000202 RCX=0000000080000000 RDX=0000000000000000
RSI=ffffffff8dba99bd RDI=ffffffff8be34000 RBP=ffff888022466130 RSP=ffffc900034ef390
R8 =ffff88801c194b57 R9 =1ffff1100383296a R10=dffffc0000000000 R11=ffffed100383296b
R12=0000000000000000 R13=0000000000000000 R14=ffffffff8e13a0e0 R15=ffff888022465640
RIP=ffffffff8b7a81ac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556e4b5500 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556e4d8608 CR3=0000000026a3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f29b9612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
