last executing test programs:

5m13.364098578s ago: executing program 1 (id=63):
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594efbb"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000)

5m11.979416721s ago: executing program 1 (id=78):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, 0x0)

5m11.905241543s ago: executing program 1 (id=79):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x1000880, &(0x7f00000000c0)=ANY=[], 0x5, 0x204, &(0x7f0000000140)="$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")

5m11.834509612s ago: executing program 1 (id=80):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040), 0xfea0)
creat(&(0x7f0000000140)='./bus\x00', 0xa6)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r3 = open(0x0, 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)

5m11.571674692s ago: executing program 1 (id=81):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01')
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)})

5m9.311838444s ago: executing program 1 (id=103):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

5m9.206097673s ago: executing program 32 (id=103):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

1m48.931117821s ago: executing program 3 (id=1850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd07, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1200}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0xfff8, 0x1a, 0x2}}]}, 0x30}}, 0x0)

1m48.896002414s ago: executing program 3 (id=1851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c000000070a05000000000000000000020000060900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

1m48.831612241s ago: executing program 3 (id=1852):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef9, 0x0, 0x0, 0x884], [0x1000000], [0xfb]], '\x00', [{0x8001}, {0x0, 0x100}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}]})

1m48.831358874s ago: executing program 3 (id=1853):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$eJzs3M1vFGUYAPBnZtsiX7YifvChVtHY+NHSgsrBgxpNPGhiogc81rYQZKGG1kQI0WoMHg2Jd+PRxL/Ak16MejLxqndDQgwX0NOa2Z1pt8t2ocu2g+zvlwy873z0fZ6deXffmbfbAPrWaPZPErEjIv6IiOFGdfUOo43/rl05P/PPlfMzSdRqb/+d1Pe7euX8TLFrcdz2vDKWRqSfJ7GvTbsLZ8+dnK5W587k9YnFUx9MLJw99+yJU9PH547PnZ46cuTwockXnp96rid5ZjFd3fvx/P49r7978c2Zoxff++W7pMi/JY9VlrpucrTTxidqta5/8O1oZ1M5GSgxENalEhHZ6Rqs9//hqMTKyRuO1z4rNThgQ9Vqtdr2tTcv1YA7WBJlRwCUo/igz+5/i2WThh63hcsvN26Asryv5Utjy0Ck+T6DLfe3vTQaEUeX/v06W6LTcwgAgB75IRv/PNNu/JfG/U373Z3PDY1ExD0RsSsi7o2I3RFxX0R93wci4sF1tt86SXL9+Ce91FViNykb/72Yz22tHv8Vo78YqeS1nfX8B5NjJ6pzB/PXZCwGt2T1yQ5t/Pjq71+uta15/JctWfvFWDCP49LAltXHzE4vTt9Kzs0ufxqxd6Bd/snyTEASEXsiYm+XbZx46tv9a227cf4d9GCeqfZNxJON878ULfkXks7zkxN3RXXu4ERxVVzv198uvLVW+7eUfw9k539b2+t/Of+RpHm+dmH9bVz484s172m6vf6Hknfq5aF83UfTi4tnJiOGkjcaQTevn1o5tqgX+2f5jx1o3/93xcorsS8isov4oYh4OCIeyWN/NCIei4gDHfL/+ZXH3+8+/42V5T+7rvO/UhiK1jXtC5WTP32/qtGR9eSfnf/D9dJYvuZm3v9uJq7urmYAAAD4/0kjYkck6fhyOU3Hxxu/L787tqXV+YXFp4/Nf3h6tvEdgZEYTIsnXcNNz0Mn89v6oj7VUj+UPzf+qrK1Xh+fma/Olp089Lnta/T/zF+VsqMDNpzva0H/0v+hf+n/0L/0f+hfbfr/1jLiADZfu8//T0qIA9h8Lf1/edrvpRJiATaX+3/oX/o/9C/9H/rSwta48ZfkFTagUPx9hXLDqES3h0da/mt4xxQG84vhdonn5HS1xDclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvovAAD//+qG390=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1002, 0x0, 0x9, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0, 0x0)

1m48.714881102s ago: executing program 3 (id=1856):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xfffffffffffffffe, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0xc7, 0x0, 0x0, 0x800}, 0xee)

1m48.252184279s ago: executing program 3 (id=1861):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40861}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)

1m48.189411511s ago: executing program 33 (id=1861):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40861}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)

1m13.263357048s ago: executing program 2 (id=2156):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x2000844, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xff, 0x23d, &(0x7f0000000a40)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)

1m13.263193215s ago: executing program 2 (id=2157):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x0, 0x1b3, &(0x7f00000009c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

1m13.173481249s ago: executing program 2 (id=2158):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0)
sendfile(r0, r0, 0x0, 0x30)

1m13.173149696s ago: executing program 2 (id=2159):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m13.033470411s ago: executing program 2 (id=2160):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147cca3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6dab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d9f47e89c4044eadde57cdefd15f25b822d2eaf2205df0d6b71b63ee0b63cb598f26509af36fd3578f6f4198a0843cc1b1bd780015007ab9709cc6211e3b5c685b972b5c5e95f054a7a9fe149282f679c8466b9734e3850ec98419dd0c887715902f9e7802842085bc606f30c2654869e9e3701fd0fc69137fe165592689465eebd5cafad7c29de2adadec42a818d8ee389ca1fe33a1ef23617c89116a3a458b56612e4c36c43a9150d5331adbb0beb01a062b1f1349fc2ecea76cb7c40cdfe378185f3099b1d71414d0fda5a47f8593260cc0bd723a4cca81435f041321635f91bcb15aac48883a9617fb4e58c19b18cf3a7e1299a07f45325fcd05a7c30f47e77073dcc584f7e0516cb74c55a0a2a30dc9f3163948f7c233ad1fff87a2c3ad0fb71cc6433e9bd7c3209de0cba9552f5c7c0ccde745b2c314f24eccf206bdb745564539dd62d655a33d40a507660668c30f7720280c86c104e58d30d6cb65814e00b55ff9a33f3ed375dfb4b47d89a599f31a0d612827a8f6e2a73eb376e11160ddbc0d79e3a11d5a99fa9c98f559efeb1e0a196d6da225f8c145334989fae4eafc05bbad0dc880e923d6b2ed2890eed8255bd2f8296b8d689762aa02e1399045bc0cbec07ec937f2e6dfac960460574e2e00dc39221a4a0c31dbbfa4973e8b064afe87bdfe6bc1405d9ae867d05316247465aceddf5c95825d73a9b119dab89ac982fff04e5d140a8391bd6f1831a9b7519ba86abc94993fe918a1b640d57e276027d9ef490065235935407f7eda364a2235a"], 0x564)

1m12.832441419s ago: executing program 2 (id=2166):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, 0x0)

1m12.629518546s ago: executing program 34 (id=2166):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, 0x0)

3.994884744s ago: executing program 0 (id=3005):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000022c0)='./file2\x00', 0x1200400, &(0x7f0000000900)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d63703835322c6e6f6e756d7461696c3d302c636865636b3d7374726963742c636865636b3d7374726963742c73686f72746e616d653d6d697865642c757466383d302c00000000786c6174653d312c756e695f786c6174653d302c73686f72746e612e6d653d77696e6e742c756e695f786c6174653d304a1b4eab3b56a8e8a1"], 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

3.872568261s ago: executing program 0 (id=3011):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x800)

2.882541383s ago: executing program 5 (id=3024):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x810084, &(0x7f0000001d40)=ANY=[], 0x5, 0x686, &(0x7f00000001c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2.859181071s ago: executing program 5 (id=3025):
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0)

1.459609148s ago: executing program 5 (id=3028):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1.459414569s ago: executing program 5 (id=3029):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ppoll(&(0x7f0000000080)=[{r2, 0x4}], 0x1, 0x0, &(0x7f0000000180), 0x8)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

869.879446ms ago: executing program 0 (id=3031):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000100)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@numtail}, {@uni_xlate}, {@fat=@errors_continue}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@uni_xlate}, {@numtail}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}]}, 0x21, 0x360, &(0x7f0000000900)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000600)={[{@data_writeback}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

869.505518ms ago: executing program 4 (id=3032):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x1, 0x6}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff4, 0x8}, @jmp={0x5, 0x1, 0x6, 0x0, 0xa, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x2}, 0x94)

782.181647ms ago: executing program 4 (id=3033):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)

781.765832ms ago: executing program 0 (id=3034):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xb95a, &(0x7f0000017a80)="$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")

731.741412ms ago: executing program 4 (id=3035):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x8)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)={0x28, 0x4, 0x0, {0x4, 0x1}}, 0x28)

682.808866ms ago: executing program 4 (id=3036):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file5\x00', 0x800000, &(0x7f0000000580)={[{@nodiscard}, {@noinline_xattr}, {@memory_low}, {@errors_remount}, {@jqfmt_vfsv0}, {@disable_roll_forward}, {}, {@adaptive_mode}, {@disable_roll_forward}, {@noinline_data}, {@nocheckpoint_merge}, {@age_extent_cache}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x8f8}}, {@gc_merge}, {@disable_ext_identify}]}, 0x1, 0x551f, &(0x7f000000e0c0)="$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")

411.969612ms ago: executing program 5 (id=3037):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
setrlimit(0xf, 0x0)

331.784317ms ago: executing program 5 (id=3038):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)

59.981112ms ago: executing program 4 (id=3039):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x4)

59.767397ms ago: executing program 0 (id=3040):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000340300f10400000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

235.89µs ago: executing program 4 (id=3041):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='mmap_lock_acquire_returned\x00', r0}, 0x18)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0xfe, 0x0)

0s ago: executing program 0 (id=3042):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f00000003c0)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x10}}, {@keep_last_dots}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@errors_continue}, {@zero_size_dir}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x9, 0x152a, &(0x7f0000000680)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x202141b, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000000c0)='./bus\x00')

kernel console output (not intermixed with test programs):

t 1
[  271.351875][  T792] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[  271.357593][  T792] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  271.364616][  T792] usb 3-1: USB disconnect, device number 58
[  271.376252][  T792] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  271.380944][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.383152][  T792] keyspan 3-1:0.133: device disconnected
[  271.403279][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.420333][   T12] bond0 (unregistering): Released all slaves
[  271.578376][T11098] loop0: detected capacity change from 0 to 1024
[  271.727271][T11072] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.730498][T11072] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.734661][T11072] bridge_slave_0: entered allmulticast mode
[  271.738626][T11072] bridge_slave_0: entered promiscuous mode
[  271.758969][T11072] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.767424][T11072] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.770682][T11072] bridge_slave_1: entered allmulticast mode
[  271.777131][T11072] bridge_slave_1: entered promiscuous mode
[  272.206557][T11072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.221844][T11072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.280200][T11072] team0: Port device team_slave_0 added
[  272.310658][T11072] team0: Port device team_slave_1 added
[  272.705278][ T5240] Bluetooth: hci2: command tx timeout
[  272.718608][   T53] hfsplus: b-tree write err: -5, ino 4
[  272.771238][   T12] hsr_slave_0: left promiscuous mode
[  272.781118][   T12] hsr_slave_1: left promiscuous mode
[  272.786571][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.790431][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.795569][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.801456][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.830108][   T12] veth1_macvtap: left promiscuous mode
[  272.836760][   T12] veth0_macvtap: left promiscuous mode
[  272.843440][   T12] veth1_vlan: left promiscuous mode
[  273.115218][T11124] loop2: detected capacity change from 0 to 4096
[  273.158096][T11124] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  273.160933][T11124] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  273.176062][   T33] audit: type=1800 audit(1758720826.489:129): pid=11124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1878" name="file1" dev="loop2" ino=30 res=0 errno=0
[  273.231120][T11123] ntfs3(loop2): ino=1e, "file1" attr_set_size
[  273.294307][   T53] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  273.297297][ T5846] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  273.300270][ T5846] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  273.315611][ T5846] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  273.318881][ T1088] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  273.347712][ T5240] Bluetooth: Wrong link type (-57)
[  273.460367][T11130] loop0: detected capacity change from 0 to 32768
[  273.481392][T11130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1881 (11130)
[  273.512377][T11130] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  273.519858][T11130] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  273.704758][T11130] BTRFS info (device loop0): enabling ssd optimizations
[  273.707728][T11130] BTRFS info (device loop0): enabling free space tree
[  273.714736][   T12] team0 (unregistering): Port device team_slave_1 removed
[  273.735506][ T5844] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  273.821642][   T12] team0 (unregistering): Port device team_slave_0 removed
[  274.291955][T11159] loop2: detected capacity change from 0 to 1024
[  274.644791][T11072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.648799][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.660244][T11072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.669298][T11072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.678809][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.714853][T11072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.735992][ T5240] Bluetooth: hci2: command tx timeout
[  274.838421][T11072] hsr_slave_0: entered promiscuous mode
[  274.841792][T11072] hsr_slave_1: entered promiscuous mode
[  274.845309][T11072] debugfs: 'hsr0' already exists in 'hsr'
[  274.847666][T11072] Cannot create hsr debugfs directory
[  275.359730][T11072] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  275.387354][T11072] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  275.423298][T11072] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  275.458914][T11072] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  275.517967][T11200] loop0: detected capacity change from 0 to 1024
[  275.556669][   T36] hfsplus: b-tree write err: -5, ino 4
[  275.590274][T11072] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.637241][T11072] 8021q: adding VLAN 0 to HW filter on device team0
[  275.658391][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.661345][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.680896][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.683772][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.792563][ T6555] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  275.813987][T11222] input: syz1 as /devices/virtual/input/input31
[  275.908264][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.955044][ T6555] usb 3-1: Using ep0 maxpacket: 32
[  275.959258][ T6555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.967047][ T6555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.970954][ T6555] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  275.993323][ T6555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.003224][ T6555] usb 3-1: config 0 descriptor??
[  276.096380][T11072] veth0_vlan: entered promiscuous mode
[  276.105818][T11072] veth1_vlan: entered promiscuous mode
[  276.132656][T11072] veth0_macvtap: entered promiscuous mode
[  276.138266][T11072] veth1_macvtap: entered promiscuous mode
[  276.150230][T11072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.159282][T11072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.177009][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.180451][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.190205][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.199254][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.223240][   T95] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  276.268615][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.271456][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.296843][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.300089][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.385093][   T95] usb 1-1: unable to get BOS descriptor or descriptor too short
[  276.390817][   T95] usb 1-1: config 3 has an invalid interface number: 8 but max is 3
[  276.405891][   T95] usb 1-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config
[  276.410164][   T95] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4
[  276.417248][   T95] usb 1-1: config 3 has no interface number 0
[  276.419509][   T95] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11
[  276.424384][   T95] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  276.430614][   T95] usb 1-1: config 3 interface 8 has no altsetting 0
[  276.438627][   T95] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  276.441859][   T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.450412][   T95] usb 1-1: Product: syz
[  276.459936][   T95] usb 1-1: Manufacturer: syz
[  276.461936][   T95] usb 1-1: SerialNumber: syz
[  276.469317][ T6555] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  276.675314][ T6555] usb 3-1: USB disconnect, device number 59
[  276.689276][   T95] appledisplay 1-1:3.8: Error while getting initial brightness: -71
[  276.705780][   T95] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -71
[  276.714368][   T95] usbhid 1-1:3.8: can't add hid device: -22
[  276.716930][   T95] usbhid 1-1:3.8: probe with driver usbhid failed with error -22
[  276.721170][   T95] usb 1-1: USB disconnect, device number 52
[  276.727621][T11240] loop4: detected capacity change from 0 to 32768
[  276.752673][T11240] XFS (loop4): Invalid device [./bus], error=-2
[  276.822362][ T5240] Bluetooth: hci2: command tx timeout
[  277.815882][T11258] loop4: detected capacity change from 0 to 512
[  277.851987][T11258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.857828][T11258] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.887233][T11072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.539897][T11272] loop0: detected capacity change from 0 to 32768
[  278.544427][T11272] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  278.544427][T11272] members_v1 (size 8):
[  278.544427][T11272] field ends before start of entries
[  278.554504][T11272] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  278.607497][T11276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.642258][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  278.685689][T11278] loop0: detected capacity change from 0 to 1024
[  278.717912][T11278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.815598][ T5913] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  278.822361][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.858956][ T5913] usb 5-1: config 0 descriptor??
[  278.867975][T11278] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.1917: Abort forced by user
[  278.886227][ T5913] usb 5-1: selecting invalid altsetting 1
[  278.891807][T11278] EXT4-fs (loop0): Remounting filesystem read-only
[  278.895446][ T5240] Bluetooth: hci2: command tx timeout
[  278.912364][T11278] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  279.249243][ T5913] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  279.251632][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.262665][ T5913] usb 5-1: USB disconnect, device number 2
[  279.349901][T11287] loop0: detected capacity change from 0 to 4096
[  279.369707][T11288] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.370611][T11287] NILFS (loop0): corrupt root inode
[  280.131964][T11312] loop2: detected capacity change from 0 to 256
[  280.165370][T11312] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[  280.169790][T11312] exFAT-fs (loop2): failed to count the number of clusters in root
[  280.174161][T11312] exFAT-fs (loop2): failed to recognize exfat type
[  280.557469][T11326] loop4: detected capacity change from 0 to 32768
[  280.593876][ T5945] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  280.662702][ T5880] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  280.680638][T11330] loop4: detected capacity change from 0 to 1024
[  280.752380][ T5945] usb 3-1: Using ep0 maxpacket: 32
[  280.757574][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short
[  280.763857][ T5945] usb 3-1: config 7 has an invalid interface number: 187 but max is 0
[  280.767294][ T5945] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  280.771809][ T5945] usb 3-1: config 7 has no interface number 0
[  280.775702][ T5945] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0
[  280.785265][ T5945] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0
[  280.790885][ T5945] usb 3-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  280.800700][ T5945] usb 3-1: config 7 interface 187 has no altsetting 0
[  280.806874][ T5945] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  280.810954][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.815017][ T5880] usb 1-1: Using ep0 maxpacket: 16
[  280.818947][ T5945] usb 3-1: Product: syz
[  280.821917][ T5945] usb 3-1: Manufacturer: syz
[  280.824820][ T5945] usb 3-1: SerialNumber: syz
[  280.827151][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  280.834889][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  280.851819][ T5880] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  280.856838][T11336] sctp: [Deprecated]: syz.4.1942 (pid 11336) Use of int in max_burst socket option deprecated.
[  280.856838][T11336] Use struct sctp_assoc_value instead
[  280.864806][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.868304][ T5880] usb 1-1: Product: syz
[  280.870186][ T5880] usb 1-1: Manufacturer: syz
[  280.873187][ T5880] usb 1-1: SerialNumber: syz
[  280.879001][ T5880] usb 1-1: config 0 descriptor??
[  280.887071][ T5880] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  280.891133][ T5880] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  281.060953][ T5945] usb 3-1: Not enough endpoints found in device, aborting!
[  281.192374][ T6555] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  281.261538][ T5945] usb 3-1: USB disconnect, device number 60
[  281.362247][ T6555] usb 5-1: Using ep0 maxpacket: 8
[  281.367543][ T6555] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  281.370953][ T6555] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  281.375520][ T6555] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  281.379504][ T6555] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  281.384852][ T6555] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  281.388988][ T6555] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  281.396002][ T6555] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  281.399781][ T6555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.409425][ T6555] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  281.492740][ T5880] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  281.496063][ T5880] em28xx 1-1:0.0: Config register raw data: 0x67
[  281.498787][ T5880] em28xx 1-1:0.0: I2S Audio (1 sample rate(s))
[  281.501406][ T5880] em28xx 1-1:0.0: No AC97 audio processor
[  281.612995][ T6555] usb 5-1: USB disconnect, device number 3
[  281.824156][T11342] loop2: detected capacity change from 0 to 512
[  281.852311][T11342] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1945: bad orphan inode 15
[  281.857633][T11342] ext4_test_bit(bit=14, block=5) = 0
[  281.861431][T11342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.890345][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.916454][ T5880] usb 1-1: USB disconnect, device number 53
[  281.949061][T11346] input: syz1 as /devices/virtual/input/input32
[  282.089162][T11352] loop2: detected capacity change from 0 to 2048
[  282.124077][ T5845]  loop2: p1 p3 p4
[  282.127844][ T5845] loop2: p4 size 589824 extends beyond EOD, truncated
[  282.141921][T11352]  loop2: p1 p3 p4
[  282.144925][T11352] loop2: p4 size 589824 extends beyond EOD, truncated
[  282.160352][ T5299]  loop2: p1 p3 p4
[  282.166905][ T5299] loop2: p4 size 589824 extends beyond EOD, truncated
[  282.170248][T11354] sp0: Synchronizing with TNC
[  282.204355][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  282.225032][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  282.254965][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  282.266674][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  282.300504][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  282.307822][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  282.493061][T11369] loop0: detected capacity change from 0 to 256
[  282.503546][T11369] exfat: Deprecated parameter 'utf8'
[  282.521285][T11369] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  283.172250][T11383] ptrace attach of "/syz-executor exec"[5844] was attempted by ""[11383]
[  283.431394][T11389] loop2: detected capacity change from 0 to 8
[  283.447360][T11389] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  283.461739][T11389] cramfs: Error -3 while decompressing!
[  283.467295][T11389] cramfs: ffffffff99bf86a8(1306)->ffff888126cff000(4096)
[  283.470249][T11389] cramfs: bad data blocksize 3221485966
[  283.475846][T11389] cramfs: Error -3 while decompressing!
[  283.478369][T11389] cramfs: ffffffff99bf86a8(1306)->ffff888126cff000(4096)
[  283.481530][   T33] audit: type=1800 audit(1758720836.789:130): pid=11389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1962" name="file2" dev="loop2" ino=348 res=0 errno=0
[  283.508991][T11391] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1963'.
[  283.792001][T11403] loop0: detected capacity change from 0 to 16
[  283.808728][T11403] erofs (device loop0): mounted with root inode @ nid 36.
[  283.832577][T11403] syz.0.1968: attempt to access beyond end of device
[  283.832577][T11403] loop0: rw=0, sector=48, nr_sectors = 16 limit=16
[  283.837282][T11403] erofs (device loop0): read error -5 @ 43 of nid 36
[  283.894940][T11393] loop4: detected capacity change from 0 to 32768
[  283.912633][T11393] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  283.929598][T11412] loop0: detected capacity change from 0 to 2048
[  283.935764][T11412] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359
[  283.960505][T11412] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.991921][T11393] XFS (loop4): Ending clean mount
[  284.013425][T11393] XFS (loop4): Quotacheck needed: Please wait.
[  284.051864][T11393] XFS (loop4): Quotacheck: Done.
[  284.105013][T11072] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.124329][ T6555] usb 3-1: new low-speed USB device number 61 using dummy_hcd
[  284.324556][ T6555] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  284.327763][ T6555] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  284.331662][ T6555] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.366421][ T6555] usb 3-1: string descriptor 0 read error: -22
[  284.368886][ T6555] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  284.373241][ T6555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.390584][ T6555] usb 3-1: 0:2 : does not exist
[  284.552282][ T5913] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  284.595577][    T9] usb 3-1: USB disconnect, device number 61
[  284.612405][T11429] binder: 11427:11429 unknown command 0
[  284.612429][T11428] binder: 11427:11428 ioctl c0306201 200000000540 returned -14
[  284.614475][T11429] binder: 11427:11429 ioctl c0306201 200000000640 returned -22
[  284.724183][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  284.730610][ T5913] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  284.736739][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.740273][ T5913] usb 1-1: Product: syz
[  284.741842][ T5913] usb 1-1: Manufacturer: syz
[  284.743981][ T5913] usb 1-1: SerialNumber: syz
[  284.747714][ T5913] usb 1-1: config 0 descriptor??
[  284.754414][ T5913] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  284.962202][ T6555] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  285.112174][ T6555] usb 5-1: Using ep0 maxpacket: 8
[  285.116256][ T6555] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  285.119334][ T6555] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  285.123586][ T6555] usb 5-1: config 179 has no interface number 0
[  285.135372][ T6555] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7
[  285.140084][ T6555] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  285.154090][ T6555] usb 5-1: config 179 interface 65 has no altsetting 0
[  285.159105][ T6555] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  285.163367][ T6555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.383363][    T9] usb 5-1: USB disconnect, device number 4
[  285.578976][ T5913] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  285.585541][ T5913] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  285.593348][ T5913] usb 1-1: USB disconnect, device number 54
[  285.658126][T11451] loop4: detected capacity change from 0 to 256
[  285.662511][T11451] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  285.666093][T11451] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  285.674312][T11451] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  285.682997][ T5880] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  285.717281][T11451] exFAT-fs (loop4): error, broken FAT chain.
[  285.720335][T11451] exFAT-fs (loop4): Filesystem has been set read-only
[  285.723989][T11451] exFAT-fs (loop4): error, failed to bmap (inode : ffff88802ba40158 iblock : 0, err : -5)
[  285.728772][T11451] exFAT-fs (loop4): write: fail to zero from 0 to 3707(-5)
[  285.788552][T11453] loop4: detected capacity change from 0 to 2048
[  285.825054][ T5845] Alternate GPT is invalid, using primary GPT.
[  285.827801][ T5845]  loop4: p1 p2 p3
[  285.839197][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.845442][ T5880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.855834][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.858581][T11453] Alternate GPT is invalid, using primary GPT.
[  285.859722][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.862834][T11453]  loop4: p1 p2 p3
[  285.867285][ T5880] usb 3-1: Product: syz
[  285.870841][ T5880] usb 3-1: Manufacturer: syz
[  285.874964][ T5880] usb 3-1: SerialNumber: syz
[  285.886697][ T5880] cdc_mbim 3-1:1.0: skipping garbage
[  285.974653][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  285.981504][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  285.981733][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  286.898995][T11475] random: crng reseeded on system resumption
[  286.938122][ T5880] cdc_mbim 3-1:1.0: bind() failure
[  287.010146][ T5880] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  287.021790][ T5880] cdc_ncm 3-1:1.1: bind() failure
[  287.030041][ T5880] usb 3-1: USB disconnect, device number 62
[  287.080267][T11481] loop4: detected capacity change from 0 to 512
[  287.096783][T11481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  287.104922][T11481] EXT4-fs (loop4): orphan cleanup on readonly fs
[  287.118740][T11481] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1993: bg 0: block 248: padding at end of block bitmap is not set
[  287.127353][T11481] Quota error (device loop4): write_blk: dquota write failed
[  287.129967][T11481] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  287.133368][T11481] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1993: Failed to acquire dquot type 1
[  287.141553][T11481] EXT4-fs (loop4): 1 truncate cleaned up
[  287.148908][T11481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  287.167932][T11481] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  287.183797][T11072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.279341][T11489] loop4: detected capacity change from 0 to 1024
[  287.296597][T11489] EXT4-fs: Ignoring removed oldalloc option
[  287.299281][T11489] EXT4-fs: Ignoring removed orlov option
[  287.310195][T11489] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  287.331005][T11489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.360218][T11489] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1994: Allocating blocks 497-513 which overlap fs metadata
[  287.397005][T11072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.554624][T11508] loop2: detected capacity change from 0 to 512
[  287.572898][T11508] EXT4-fs (loop2): orphan cleanup on readonly fs
[  287.591052][T11508] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1999: bg 0: block 248: padding at end of block bitmap is not set
[  287.616498][T11508] Quota error (device loop2): write_blk: dquota write failed
[  287.622588][T11508] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  287.626891][T11508] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1999: Failed to acquire dquot type 1
[  287.638994][T11508] EXT4-fs (loop2): 1 truncate cleaned up
[  287.646809][T11508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  288.062181][ T6555] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[  288.216420][ T6555] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.220721][ T6555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  288.240462][ T6555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  288.246574][ T6555] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  288.260869][ T6555] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  288.265127][ T6555] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  288.269050][ T6555] usb 3-1: Manufacturer: syz
[  288.285935][ T6555] usb 3-1: config 0 descriptor??
[  288.591545][T11529] loop4: detected capacity change from 0 to 2048
[  288.592348][ T6555] rc_core: IR keymap rc-hauppauge not found
[  288.612215][ T6555] Registered IR keymap rc-empty
[  288.617775][T11530] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.619857][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  288.780431][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  288.803130][ T6555] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  288.809659][ T6555] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33
[  288.820571][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  288.842298][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  288.859389][    C1] mceusb 3-1:0.0: short-range (0x3a) receiver active
[  288.863551][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  288.882931][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  288.919812][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  288.956399][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  288.990184][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.013091][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.042800][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.077597][ T6555] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.113875][ T6555] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  289.117215][ T6555] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x3a active)
[  289.140325][    T9] usb 3-1: USB disconnect, device number 63
[  289.206536][T11537] loop0: detected capacity change from 0 to 32768
[  289.210624][T11537] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2006 (11537)
[  289.223183][T11537] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  289.227417][T11537] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  289.260224][T11537] BTRFS info (device loop0): enabling ssd optimizations
[  289.263809][T11537] BTRFS info (device loop0): enabling free space tree
[  289.382280][ T5844] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  289.701435][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.773942][T11566] loop2: detected capacity change from 0 to 4096
[  289.828183][T11566] ntfs3(loop2): ino=1e, "file1" attr_set_size
[  289.922446][ T5880] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  289.927232][T11568] loop2: detected capacity change from 0 to 4096
[  289.933794][T11568] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  289.951880][T11568] ntfs3(loop2): Failed to load $MFT (-22).
[  289.993253][T11562] loop4: detected capacity change from 0 to 32768
[  290.015477][T11562] ERROR: (device loop4): diAllocAG: error reading iag
[  290.015477][T11562] 
[  290.030423][T11562] ialloc: diAlloc returned -5!
[  290.084795][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.096692][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.100845][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  290.115863][ T5880] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  290.119836][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.125511][ T5880] usb 1-1: config 0 descriptor??
[  290.557834][ T5880] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  290.575047][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  290.738162][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  290.741402][    T9] usb 5-1: config 1 has no interface number 1
[  290.747437][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  290.754402][    T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  290.764694][    T9] usb 5-1: string descriptor 0 read error: -22
[  290.767240][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  290.771591][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.787056][    T9] usb 5-1: found format II with max.bitrate = 2, frame size=62645
[  290.790366][    T9] usb 5-1: found format II with max.bitrate = 2, frame size=62645
[  290.807704][ T5880] usb 1-1: USB disconnect, device number 55
[  290.836455][T11572] loop2: detected capacity change from 0 to 131072
[  290.840819][T11572] F2FS-fs (loop2): Test dummy encryption mode enabled
[  290.845593][T11572] F2FS-fs (loop2): invalid crc value
[  290.901301][T11572] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  290.907783][T11572] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  291.069056][    T9] usb 5-1: USB disconnect, device number 5
[  291.578871][T11586] loop4: detected capacity change from 0 to 128
[  291.600921][T11586] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  291.607716][T11586] hpfs: filesystem error: improperly stopped
[  291.610166][T11586] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  291.613718][T11586] hpfs: You really don't want any checks? You are crazy...
[  291.616968][T11586] hpfs: hpfs_map_sector(): read error
[  291.619315][T11586] hpfs: code page support is disabled
[  291.621753][T11586] hpfs: hpfs_map_4sectors(): unaligned read
[  291.639659][T11586] hpfs: hpfs_map_4sectors(): unaligned read
[  291.649779][T11586] hpfs: filesystem error: unable to find root dir
[  291.742457][    T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  291.996326][T11595] loop4: detected capacity change from 0 to 32768
[  292.006173][T11595] XFS (loop4): invalid logbufsize: 40 [not 16k,32k,64k,128k or 256k]
[  292.026117][T11597] loop0: detected capacity change from 0 to 32768
[  292.120101][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  292.130316][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  292.137269][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  292.140499][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  292.154808][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  292.157859][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.166351][    T9] usb 3-1: config 0 descriptor??
[  292.704997][    T9] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max
[  292.725429][    T9] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  293.772247][ T6555] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  294.212129][ T6555] usb 1-1: Using ep0 maxpacket: 32
[  294.216318][ T6555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.220330][ T6555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.225379][ T6555] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  294.228361][ T6555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.233056][ T6555] usb 1-1: config 0 descriptor??
[  294.649144][ T6555] ft260 0003:0403:6030.001F: unknown main item tag 0x7
[  294.821017][T11624] loop4: detected capacity change from 0 to 32768
[  294.835811][ T5880] usb 3-1: USB disconnect, device number 64
[  294.850284][ T6555] ft260 0003:0403:6030.001F: chip code: 6424 8183
[  294.879707][T11624] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  294.885456][T11624] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  295.080791][ T6555] ft260 0003:0403:6030.001F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  295.169483][T11624] XFS (loop4): Ending clean mount
[  295.180818][T11624] XFS (loop4): Quotacheck needed: Please wait.
[  295.224045][T11624] XFS (loop4): Quotacheck: Done.
[  295.228570][   T33] audit: type=1800 audit(2000000007.760:131): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2034" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  295.247082][T11072] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  295.291409][ T6555] ft260 0003:0403:6030.001F: failed to retrieve status: -32, no wakeup
[  295.428570][T11640] loop4: detected capacity change from 0 to 2048
[  295.444890][T11641] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.465733][   T33] audit: type=1800 audit(2000000008.000:132): pid=11640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2037" name="bus" dev="loop4" ino=2097152 res=0 errno=0
[  295.492960][T11640] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12
[  295.496335][ T6555] ft260 0003:0403:6030.001F: failed to reset I2C controller: -71
[  295.509923][T11640] Remounting filesystem read-only
[  295.526086][ T6555] usb 1-1: USB disconnect, device number 56
[  295.570389][T11640] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  295.640388][T11645] loop2: detected capacity change from 0 to 8
[  295.645711][T11645] SQUASHFS error: lzo decompression failed, data probably corrupt
[  295.648858][T11645] SQUASHFS error: Failed to read block 0x91: -5
[  295.651445][T11645] SQUASHFS error: Unable to read metadata cache entry [8f]
[  295.654684][T11645] SQUASHFS error: Unable to read inode 0x11f
[  295.922278][T11647] loop2: detected capacity change from 0 to 40427
[  295.929160][T11647] F2FS-fs (loop2): invalid crc value
[  295.979031][T11647] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  295.983650][T11647] F2FS-fs (loop2): Start checkpoint disabled!
[  295.990238][T11647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  296.002182][   T33] audit: type=1804 audit(2000000008.530:133): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2040" name="/newroot/682/file1/bus" dev="loop2" ino=10 res=1 errno=0
[  296.011018][   T33] audit: type=1800 audit(2000000008.540:134): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2040" name="bus" dev="loop2" ino=10 res=0 errno=0
[  296.046664][T11647] Invalid ELF header magic: != ELF
[  296.070865][   T36] kworker/u10:1: attempt to access beyond end of device
[  296.070865][   T36] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  296.079453][   T36] kworker/u10:1: attempt to access beyond end of device
[  296.079453][   T36] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  296.086835][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  296.086849][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.086856][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[  296.086872][   T36] Call Trace:
[  296.086877][   T36]  <TASK>
[  296.086882][   T36]  dump_stack_lvl+0x189/0x250
[  296.086895][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.086903][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  296.086910][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  296.086922][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  296.086938][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  296.086952][   T36]  f2fs_write_end_io+0x886/0xb60
[  296.086968][   T36]  __submit_merged_bio+0x27a/0x6a0
[  296.086981][   T36]  __submit_merged_write_cond+0x255/0x530
[  296.086995][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  296.087018][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.087031][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  296.087055][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  296.087070][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  296.087081][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  296.087101][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.087108][   T36]  do_writepages+0x32e/0x550
[  296.087121][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  296.087129][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  296.087142][   T36]  __writeback_single_inode+0x145/0xff0
[  296.087151][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  296.087162][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  296.087176][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.087196][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  296.087224][   T36]  ? rcu_is_watching+0x15/0xb0
[  296.087237][   T36]  wb_writeback+0x43b/0xaf0
[  296.087249][   T36]  ? queue_io+0x381/0x590
[  296.087260][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  296.087272][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.087285][   T36]  wb_workfn+0x409/0xef0
[  296.087300][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  296.087310][   T36]  ? __lock_acquire+0xab9/0xd20
[  296.087325][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  296.087335][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.087344][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  296.087350][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  296.087358][   T36]  process_scheduled_works+0xae1/0x17b0
[  296.087378][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  296.087393][   T36]  worker_thread+0x8a0/0xda0
[  296.087413][   T36]  kthread+0x711/0x8a0
[  296.087424][   T36]  ? __pfx_worker_thread+0x10/0x10
[  296.087431][   T36]  ? __pfx_kthread+0x10/0x10
[  296.087441][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.087451][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.087456][   T36]  ? __pfx_kthread+0x10/0x10
[  296.087465][   T36]  ret_from_fork+0x439/0x7d0
[  296.087474][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  296.087484][   T36]  ? __switch_to_asm+0x39/0x70
[  296.087493][   T36]  ? __switch_to_asm+0x33/0x70
[  296.087500][   T36]  ? __pfx_kthread+0x10/0x10
[  296.087509][   T36]  ret_from_fork_asm+0x1a/0x30
[  296.087526][   T36]  </TASK>
[  296.087529][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  296.316686][   T33] audit: type=1326 audit(2000000008.850:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.0.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  296.342408][   T33] audit: type=1326 audit(2000000008.850:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.0.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  296.384629][   T33] audit: type=1326 audit(2000000008.850:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.0.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  296.433452][   T33] audit: type=1326 audit(2000000008.850:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.0.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  296.453248][   T33] audit: type=1326 audit(2000000008.850:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.0.2049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  296.565333][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'.
[  296.609072][T11668] loop0: detected capacity change from 0 to 40427
[  296.612620][T11668] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  296.622205][T11668] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  296.635795][T11668] F2FS-fs (loop0): invalid crc value
[  296.706494][T11668] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  296.719521][T11668] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[  296.724358][T11668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  296.910295][   T33] audit: type=1800 audit(2000000009.440:140): pid=11690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2057" name="bus" dev="overlay" ino=3403 res=0 errno=0
[  297.343630][T11699] loop0: detected capacity change from 0 to 512
[  297.348267][T11699] EXT4-fs: Ignoring removed i_version option
[  297.360308][T11699] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  297.383234][T11699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  297.386726][T11699] System zones: 1-12
[  297.388497][T11699] EXT4-fs (loop0): orphan cleanup on readonly fs
[  297.391428][T11699] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2062: invalid indirect mapped block 12 (level 1)
[  297.400669][T11699] EXT4-fs (loop0): Remounting filesystem read-only
[  297.404144][T11699] EXT4-fs (loop0): 1 truncate cleaned up
[  297.406971][T11699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  297.438007][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  297.688936][T11713] input: syz1 as /devices/virtual/input/input35
[  297.849964][T11707] loop0: detected capacity change from 0 to 32768
[  297.868435][T11707] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  297.880282][T11707] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  297.966090][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  298.783101][T11751] loop2: detected capacity change from 0 to 32768
[  299.765650][T11751] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  299.765665][T11751]   allowing incompatible features above 0.0: (unknown version)
[  299.765669][T11751]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  299.795028][T11751] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  299.798806][T11751] bcachefs (loop2): initializing new filesystem
[  299.808856][T11751] bcachefs (loop2): going read-write
[  299.815134][T11751] bcachefs (loop2): marking superblocks
[  299.826737][T11779] 9pnet: p9_errstr2errno: server reported unknown error 000
[  299.842712][T11751] bcachefs (loop2): initializing freespace
[  299.862817][T11751] bcachefs (loop2): done initializing freespace
[  299.881257][T11751] bcachefs (loop2): reading snapshots table
[  299.883685][T11751] bcachefs (loop2): reading snapshots done
[  299.935591][T11751] bcachefs (loop2): done starting filesystem
[  300.021463][ T5846] bcachefs (loop2): shutting down
[  300.025161][ T5846] bcachefs (loop2): going read-only
[  300.027416][ T5846] bcachefs (loop2): finished waiting for writes to stop
[  300.035378][ T5846] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  300.080415][ T5846] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  300.093662][ T5846] bcachefs (loop2): clean shutdown complete, journal seq 4
[  300.097383][ T5846] bcachefs (loop2): marking filesystem clean
[  300.203326][ T5846] bcachefs (loop2): shutdown complete
[  300.266629][T11796] fuse: Bad value for 'fd'
[  300.635953][T11823] fuse: Bad value for 'fd'
[  300.638869][T11823] netlink: 'syz.4.2108': attribute type 3 has an invalid length.
[  300.641588][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'.
[  300.693642][T11827] raw_sendmsg: syz.4.2110 forgot to set AF_INET. Fix it!
[  300.711313][T11819] loop0: detected capacity change from 0 to 32768
[  300.716588][T11819] (syz.0.2105,11819,0):ocfs2_initialize_super:2019 ERROR: Invalid number of node slots (0)
[  300.720413][T11819] (syz.0.2105,11819,0):ocfs2_fill_super:1177 ERROR: status = -22
[  301.462359][ T6555] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  301.614488][ T6555] usb 1-1: config 1 has an invalid interface number: 236 but max is 1
[  301.619361][ T6555] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.627457][ T6555] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  301.631432][ T6555] usb 1-1: config 1 has no interface number 2
[  301.635440][ T6555] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  301.640269][ T6555] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  301.647774][ T6555] usb 1-1: config 1 interface 1 has no altsetting 0
[  301.656847][ T6555] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  301.660978][ T6555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.665217][ T6555] usb 1-1: Product: syz
[  301.667181][ T6555] usb 1-1: Manufacturer: syz
[  301.669311][ T6555] usb 1-1: SerialNumber: syz
[  301.683933][T11852] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  301.689150][ T6555] cdc_ncm 1-1:1.0: skipping garbage
[  301.697314][ T6555] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  301.701207][ T6555] cdc_ncm 1-1:1.0: bind() failure
[  301.711587][ T6555] cdc_ncm 1-1:1.236: CDC Union missing and no IAD found
[  301.715886][ T6555] cdc_ncm 1-1:1.236: bind() failure
[  302.158179][ T6555] usb 1-1: USB disconnect, device number 57
[  302.481645][T11882] loop2: detected capacity change from 0 to 512
[  302.485871][T11882] EXT4-fs: Ignoring removed mblk_io_submit option
[  302.488922][T11882] EXT4-fs: Ignoring removed mblk_io_submit option
[  302.496908][T11882] EXT4-fs (loop2): Test dummy encryption mode enabled
[  302.501038][T11882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  302.513092][T11882] EXT4-fs (loop2): 1 truncate cleaned up
[  302.520837][T11882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.380878][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.972260][    T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  304.225308][    T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  304.231628][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.239878][    T9] usb 3-1: Product: syz
[  304.243605][    T9] usb 3-1: Manufacturer: syz
[  304.249917][    T9] usb 3-1: SerialNumber: syz
[  304.260690][    T9] usb 3-1: config 0 descriptor??
[  304.269566][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2147'.
[  304.475417][    T9] usb 3-1: USB disconnect, device number 65
[  304.701658][T11940] xt_l2tp: missing protocol rule (udp|l2tpip)
[  304.743188][T11942] fuse: Bad value for 'fd'
[  305.013999][T11948] loop2: detected capacity change from 0 to 512
[  305.046418][T11950] loop2: detected capacity change from 0 to 8
[  305.050298][T11950] SQUASHFS error: zlib decompression failed, data probably corrupt
[  305.056723][T11950] SQUASHFS error: Failed to read block 0x9b: -5
[  305.059579][T11950] SQUASHFS error: Unable to read metadata cache entry [99]
[  305.065165][T11950] SQUASHFS error: Unable to read inode 0x127
[  305.148634][T11954] loop2: detected capacity change from 0 to 2048
[  305.161343][T11954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.190432][T11954] overlayfs: upper fs needs to support d_type.
[  305.197531][T11954] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  305.200394][T11954] overlayfs: failed to set xattr on upper
[  305.203584][T11954] overlayfs: ...falling back to redirect_dir=nofollow.
[  305.206470][T11954] overlayfs: ...falling back to index=off.
[  305.208852][T11954] overlayfs: ...falling back to uuid=null.
[  305.248671][ T5846] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  305.254147][ T5846] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  305.470228][T11960] loop0: detected capacity change from 0 to 2048
[  305.481086][T11960] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  305.484844][T11960] UDF-fs: Scanning with blocksize 512 failed
[  305.503991][T11960] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.590047][ T5878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.602161][ T5878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.696785][ T5878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.701594][ T5878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.709806][T11968] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2169'.
[  305.820099][ T5878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.825080][ T5878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.905298][ T5878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.908847][ T5878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.973330][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  305.984929][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  305.989217][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  305.995559][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  305.999823][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.042251][    T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  306.095716][ T5878] bond1: left allmulticast mode
[  306.098825][ T5878] bond1: left promiscuous mode
[  306.101927][ T5878] bridge0: port 3(bond1) entered disabled state
[  306.106751][ T5878] bridge_slave_1: left allmulticast mode
[  306.108953][ T5878] bridge_slave_1: left promiscuous mode
[  306.111291][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.118000][ T5878] bridge_slave_0: left allmulticast mode
[  306.120434][ T5878] bridge_slave_0: left promiscuous mode
[  306.126623][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.217284][    T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  306.221288][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.241216][    T9] usb 1-1: Product: syz
[  306.243420][    T9] usb 1-1: Manufacturer: syz
[  306.245344][    T9] usb 1-1: SerialNumber: syz
[  306.252436][    T9] usb 1-1: config 0 descriptor??
[  306.261067][    T9] gspca_main: sq905c-2.14.0 probing 2770:9052
[  306.475072][    T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  306.478225][    T9] sq905c 1-1:0.0: Get version command failed
[  306.480848][    T9] sq905c 1-1:0.0: probe with driver sq905c failed with error -71
[  306.497870][    T9] usb 1-1: USB disconnect, device number 58
[  306.716939][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.723114][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.728114][ T5878] bond0 (unregistering): Released all slaves
[  306.925552][ T5878] bond1 (unregistering): Released all slaves
[  307.350825][T12000] loop0: detected capacity change from 0 to 32768
[  307.355324][T12000] XFS: ikeep mount option is deprecated.
[  307.394167][T12000] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  307.430273][T12000] XFS (loop0): Ending clean mount
[  307.437420][T12000] XFS (loop0): Quotacheck needed: Please wait.
[  307.520867][T11982] chnl_net:caif_netlink_parms(): no params data found
[  307.554458][T12000] XFS (loop0): Quotacheck: Done.
[  307.621766][ T5844] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  307.659719][ T5878] hsr_slave_0: left promiscuous mode
[  307.684228][ T5878] hsr_slave_1: left promiscuous mode
[  307.686772][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.690226][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.716622][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.719885][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.759387][ T5878] veth1_macvtap: left promiscuous mode
[  307.788168][ T5878] veth0_macvtap: left promiscuous mode
[  307.801125][ T5878] veth1_vlan: left promiscuous mode
[  307.805605][ T5878] veth0_vlan: left promiscuous mode
[  307.969184][T12031] loop0: detected capacity change from 0 to 1024
[  307.980785][T12031] EXT4-fs: Ignoring removed i_version option
[  308.012258][T12031] EXT4-fs: inline encryption not supported
[  308.015641][T12031] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  308.034208][T12031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.096873][ T5856] Bluetooth: hci1: command tx timeout
[  308.120027][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.268786][T12044] overlayfs: failed to clone upperpath
[  308.630287][    T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  308.804772][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  308.808894][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  308.828377][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  308.835303][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  308.847384][    T9] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  308.847706][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  308.851247][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.871321][    T9] usb 1-1: Product: syz
[  308.873422][    T9] usb 1-1: Manufacturer: syz
[  308.875439][    T9] usb 1-1: SerialNumber: syz
[  308.885490][    T9] usb 1-1: config 0 descriptor??
[  308.890769][    T9] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  308.933849][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  309.161842][    T9] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22
[  309.323705][    T9] usb 1-1: USB disconnect, device number 59
[  309.863557][T11982] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.865926][T11982] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.868542][T11982] bridge_slave_0: entered allmulticast mode
[  309.876042][T11982] bridge_slave_0: entered promiscuous mode
[  309.879922][T11982] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.883669][T11982] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.886739][T11982] bridge_slave_1: entered allmulticast mode
[  309.893608][T11982] bridge_slave_1: entered promiscuous mode
[  309.969368][T11982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.976907][T11982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.031258][T11982] team0: Port device team_slave_0 added
[  310.043988][T11982] team0: Port device team_slave_1 added
[  310.088772][T11982] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.091802][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.102742][T11982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.111844][T11982] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.115517][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.127360][T11982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.132745][ T6555] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  310.174306][ T5856] Bluetooth: hci1: command tx timeout
[  310.186190][ T5878] IPVS: stop unused estimator thread 0...
[  310.239330][T11982] hsr_slave_0: entered promiscuous mode
[  310.254115][T11982] hsr_slave_1: entered promiscuous mode
[  310.312429][ T6555] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.320144][ T6555] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  310.334886][ T6555] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  310.338223][ T6555] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  310.357529][ T6555] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  310.360432][ T6555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.372093][ T6555] usb 1-1: Product: syz
[  310.373592][ T6555] usb 1-1: Manufacturer: syz
[  310.376191][ T6555] usb 1-1: SerialNumber: syz
[  310.556706][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  310.556720][   T33] audit: type=1326 audit(2000000023.090:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12089 comm="syz.4.2208" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x0
[  310.615982][ T6555] usb 1-1: 0:2 : does not exist
[  310.630460][T11982] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  310.633646][ T6555] usb 1-1: USB disconnect, device number 60
[  310.661872][T11982] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  310.678828][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  310.687729][T11982] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  310.701606][T11982] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  310.771544][T11982] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.776187][T11982] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.780568][T11982] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.783646][T11982] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.871391][T11982] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.890819][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.897086][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.914686][T11982] 8021q: adding VLAN 0 to HW filter on device team0
[  310.935038][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.937691][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.945068][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.947682][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.120040][T11982] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.299032][T11982] veth0_vlan: entered promiscuous mode
[  311.308797][T11982] veth1_vlan: entered promiscuous mode
[  311.329383][T11982] veth0_macvtap: entered promiscuous mode
[  311.335284][T11982] veth1_macvtap: entered promiscuous mode
[  311.349481][T11982] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.359243][T11982] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.369627][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.373737][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.378791][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.385909][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.454022][ T6555] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  311.487775][ T3605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.490531][ T3605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.519060][ T3605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.521801][ T3605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.624126][ T6555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.630301][ T6555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.635246][ T6555] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  311.640380][ T6555] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  311.645917][ T6555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.651685][ T6555] usb 1-1: config 0 descriptor??
[  312.089682][ T6555] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  312.252544][ T5856] Bluetooth: hci1: command tx timeout
[  312.386304][ T5880] usb 1-1: USB disconnect, device number 61
[  312.664721][T12147] sd 0:0:0:0: PR command failed: 1026
[  312.667230][T12147] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  312.670502][T12147] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  313.252604][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2226'.
[  313.438508][T12180] loop0: detected capacity change from 0 to 512
[  313.469159][T12180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.475043][T12180] ext4 filesystem being mounted at /686/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.521009][T12180] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  313.817038][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.878593][T12195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2240'.
[  313.884146][T12195] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2240'.
[  314.293895][ T6555] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  314.332827][ T5856] Bluetooth: hci1: command tx timeout
[  314.475961][ T6555] usb 6-1: config 0 has an invalid interface number: 170 but max is 0
[  314.479648][ T6555] usb 6-1: config 0 has no interface number 0
[  314.482893][ T6555] usb 6-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7
[  314.487321][ T6555] usb 6-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[  314.491269][ T6555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.498982][ T6555] usb 6-1: config 0 descriptor??
[  314.509120][ T6555] HFC-S_USB 6-1:0.170: probe with driver HFC-S_USB failed with error -5
[  314.723316][ T5945] usb 6-1: USB disconnect, device number 2
[  314.848186][T12226] loop0: detected capacity change from 0 to 2048
[  314.865012][T12226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.869814][T12226] ext4 filesystem being mounted at /694/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.907037][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.761333][T12279] fuse: Bad value for 'fd'
[  315.790436][   T33] audit: type=1400 audit(2000000028.320:143): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=12278 comm="syz.5.2276"
[  315.918367][T12286] loop0: detected capacity change from 0 to 764
[  315.936200][T12286] isofs: isofs_export_get_parent(): child directory not normalized!
[  316.280336][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2292'.
[  316.612674][T12322] overlayfs: failed to clone upperpath
[  316.849597][T12336] loop5: detected capacity change from 0 to 512
[  316.858921][T12336] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  316.869183][T12336] EXT4-fs (loop5): 1 truncate cleaned up
[  316.873793][T12336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.976371][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.349232][T12355] loop0: detected capacity change from 0 to 64
[  317.605043][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'.
[  317.740820][T11982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.087839][T12376] loop5: detected capacity change from 0 to 32768
[  318.101504][T12376] bcachefs (/dev/loop5): error reading superblock: block size (0) smaller than device block size (512)
[  318.114097][T12376] bcachefs: bch2_fs_get_tree() error: block_size_too_small
[  318.146132][T12380] loop0: detected capacity change from 0 to 32768
[  318.176176][T12380] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  318.188763][T12380] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  318.251789][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  318.582959][    T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  318.732343][    T9] usb 1-1: Using ep0 maxpacket: 8
[  318.736737][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  318.741097][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  318.746694][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  318.751387][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  318.758642][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  318.762853][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.768730][  T792] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  318.922146][  T792] usb 6-1: Using ep0 maxpacket: 16
[  318.938118][T12386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.950761][T12386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.956727][  T792] usb 6-1: unable to get BOS descriptor or descriptor too short
[  318.960847][  T792] usb 6-1: unable to read config index 0 descriptor/start: -71
[  318.965344][  T792] usb 6-1: can't read configurations, error -71
[  318.974916][    T9] usb 1-1: GET_CAPABILITIES returned 0
[  318.977405][    T9] usbtmc 1-1:16.0: can't read capabilities
[  319.197032][    T9] usb 1-1: USB disconnect, device number 62
[  319.382515][ T5240] Bluetooth: hci2: command 0x0406 tx timeout
[  320.042149][  T792] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  320.196951][  T792] usb 6-1: config 8 has an invalid interface number: 80 but max is 0
[  320.205464][  T792] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  320.209810][  T792] usb 6-1: config 8 has no interface number 0
[  320.216617][  T792] usb 6-1: config 8 interface 80 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  320.221165][  T792] usb 6-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  320.226482][  T792] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14
[  320.231642][  T792] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  320.237676][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.254520][T12402] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  320.260880][  T792] usb 6-1: NFC: intf ffff888122897000 id ffffffff8eb55080
[  320.478387][  T792] usb 6-1: USB disconnect, device number 4
[  320.980605][T12426] loop0: detected capacity change from 0 to 128
[  321.299066][T12444] loop5: detected capacity change from 0 to 512
[  321.324562][T12444] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  321.361557][T12444] EXT4-fs (loop5): mount failed
[  321.692249][ T5945] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  321.816110][T12460] loop5: detected capacity change from 0 to 32768
[  321.827319][T12460] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (61 != 1)
[  321.827319][T12460] downgrade (size 64):
[  321.827319][T12460] version:	61.634: (unknown version)
[  321.827319][T12460] recovery passes:	check_topology,alloc_read,stripes_read,initialize_subvolumes,check_allocations,trans_mark_dev_sbs,set_may_go_rw,journal_replay,check_lrus,check_backpointers_to_extents,reconstruct_snapshots,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_unreachable_inodes,check_directory_structure,check_nlinks,check_rebalance_work,delete_dead_inodes
[  321.827319][T12460] errors:	
[  321.827319][T12460] version:	0.0: (unknown version)
[  321.827319][T12460] recovery passes:	check_unreachable_inodes
[  321.827319][T12460] errors:	
[  321.827319][T12460] 
[  321.884482][ T5945] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  321.889957][ T5945] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  321.895702][ T5945] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  321.902688][ T5945] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  321.906276][T12460] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[  321.910617][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.934119][T12454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  322.287474][   T33] audit: type=1326 audit(2000000034.821:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.5.2360" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff78bd8ec29 code=0x0
[  322.346646][ T5945] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  322.355699][ T5945] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input36
[  322.401090][ T5945] usb 1-1: USB disconnect, device number 63
[  322.403870][    C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  323.222696][T12505] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  323.474665][T12519] loop0: detected capacity change from 0 to 256
[  325.259738][T12561] batadv0: entered promiscuous mode
[  325.266165][T12561] macvtap1: entered promiscuous mode
[  325.274774][T12561] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  325.284211][T12561] batadv0: left promiscuous mode
[  325.382399][ T5856] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  325.642651][T12584] 9pnet_fd: Insufficient options for proto=fd
[  325.817767][T12599] veth1_macvtap: left promiscuous mode
[  325.820404][T12599] macsec0: entered allmulticast mode
[  325.848173][T12599] veth1_macvtap: entered promiscuous mode
[  325.850814][T12599] veth1_macvtap: entered allmulticast mode
[  325.854197][T12599] macsec0: left allmulticast mode
[  325.856480][T12599] veth1_macvtap: left allmulticast mode
[  326.124486][T12601] loop0: detected capacity change from 0 to 32768
[  326.148338][T12612] loop5: detected capacity change from 0 to 512
[  326.161749][T12612] EXT4-fs: Ignoring removed oldalloc option
[  326.169826][T12601] JBD2: journal file too short 1,0
[  326.169896][T12612] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2413: corrupted in-inode xattr: e_value size too large
[  326.178792][T12612] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2413: couldn't read orphan inode 15 (err -117)
[  326.179324][T12601] (syz.0.2408,12601,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  326.187064][T12612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.191601][T12601] (syz.0.2408,12601,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  326.197661][T12601] (syz.0.2408,12601,1):ocfs2_check_volume:2432 ERROR: status = -22
[  326.204131][T12601] (syz.0.2408,12601,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  326.211687][T12601] (syz.0.2408,12601,1):ocfs2_fill_super:1177 ERROR: status = -22
[  326.235019][T11982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.274262][T12617] : renamed from vlan1 (while UP)
[  326.545260][T12632] binder: 12631:12632 ioctl c0306201 2000000001c0 returned -14
[  326.626802][T12621] loop5: detected capacity change from 0 to 32768
[  326.717231][T12636] loop0: detected capacity change from 0 to 8192
[  326.729584][  T792] kernel write not supported for file /sg0 (pid: 792 comm: kworker/1:2)
[  326.796173][T12638] loop5: detected capacity change from 0 to 64
[  326.817394][T12638] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  327.900109][T12641] syz.0.2425 (12641): drop_caches: 2
[  329.696147][T12665] loop0: detected capacity change from 0 to 40427
[  329.719216][T12665] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  329.722543][T12665] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  329.727793][T12665] F2FS-fs (loop0): invalid crc value
[  329.779447][T12665] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  329.787475][T12665] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  329.790377][T12665] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  330.215625][T12679] loop5: detected capacity change from 0 to 47
[  330.371129][T12684] loop5: detected capacity change from 0 to 4096
[  330.397905][T12684] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  330.699313][T12697] loop0: detected capacity change from 0 to 1024
[  330.704571][T12697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.956473][T12691] loop5: detected capacity change from 0 to 32768
[  330.961788][T12691] jfs_mount: Mount Failure: superblock is corrupt!
[  330.970539][T12691] Mount JFS Failure: -22
[  330.975478][T12691] jfs_mount failed w/return code = -22
[  331.241538][T12718] loop5: detected capacity change from 0 to 8
[  331.323187][T12722] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  331.344631][T12724] tipc: Failed to remove unknown binding: 66,1,1/0:419792577/419792579
[  331.348321][T12724] tipc: Failed to remove unknown binding: 66,1,1/0:419792577/419792579
[  331.367839][T12722] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  331.619361][T12746] loop0: detected capacity change from 0 to 2048
[  331.696890][T12746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.868909][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.265301][T12759] loop5: detected capacity change from 0 to 131072
[  332.270625][T12759] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  332.274289][T12759] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  332.279550][T12759] F2FS-fs (loop5): invalid crc value
[  332.339903][T12759] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  332.353532][T12759] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  332.356119][T12759] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  332.374149][T12759] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  333.220723][T12800] loop5: detected capacity change from 0 to 32768
[  333.226724][T12800] (syz.5.2491,12800,0):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  333.236598][T12800] (syz.5.2491,12800,0):ocfs2_fill_super:1177 ERROR: status = -22
[  333.241798][T12800] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=02020202)
[  334.169103][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'.
[  334.801051][T12854] loop0: detected capacity change from 0 to 32768
[  334.975151][T12858] ip6gretap1: entered allmulticast mode
[  334.998828][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'.
[  335.213913][T12875] netlink: 'syz.4.2523': attribute type 10 has an invalid length.
[  335.219332][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2523'.
[  335.227160][T12875] dummy0: entered promiscuous mode
[  335.234251][T12875] bridge0: port 3(dummy0) entered blocking state
[  335.240309][T12875] bridge0: port 3(dummy0) entered disabled state
[  335.255428][T12875] dummy0: entered allmulticast mode
[  335.259513][T12875] bridge0: port 3(dummy0) entered blocking state
[  335.262366][T12875] bridge0: port 3(dummy0) entered forwarding state
[  336.104282][T12901] loop5: detected capacity change from 0 to 1024
[  336.109775][T12901] EXT4-fs: Ignoring removed nomblk_io_submit option
[  336.143732][T12901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.171615][T11982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.259099][T12917] loop0: detected capacity change from 0 to 256
[  336.316985][T12921] loop0: detected capacity change from 0 to 1024
[  336.327645][T12921] ext4: Unknown parameter 'smackfstransmute'
[  336.342785][   T33] audit: type=1326 audit(2000000048.871:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.354066][   T33] audit: type=1326 audit(2000000048.871:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.363990][   T33] audit: type=1326 audit(2000000048.891:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.374667][   T33] audit: type=1326 audit(2000000048.891:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.383901][   T33] audit: type=1326 audit(2000000048.891:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.394094][   T33] audit: type=1326 audit(2000000048.911:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.401479][   T33] audit: type=1326 audit(2000000048.911:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.412500][   T33] audit: type=1326 audit(2000000048.911:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.428779][   T33] audit: type=1326 audit(2000000048.921:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.441592][   T33] audit: type=1326 audit(2000000048.921:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x7ffc0000
[  336.483221][ T5913] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  336.592835][  T792] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  336.634920][ T5913] usb 6-1: Using ep0 maxpacket: 16
[  336.639325][ T5913] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  336.643027][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.647373][ T5913] usb 6-1: config 0 has no interface number 0
[  336.656622][ T5913] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  336.660447][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.665410][ T5913] usb 6-1: Product: syz
[  336.667261][ T5913] usb 6-1: Manufacturer: syz
[  336.669279][ T5913] usb 6-1: SerialNumber: syz
[  336.677102][ T5913] usb 6-1: config 0 descriptor??
[  336.686550][ T5913] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[  336.689263][ T5913] usb 6-1: No valid video chain found.
[  336.746289][  T792] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  336.749814][  T792] usb 1-1: config 0 has no interface number 0
[  336.755634][  T792] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.760261][  T792] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.764743][  T792] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  336.771676][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.782597][  T792] usb 1-1: config 0 descriptor??
[  336.888545][ T5913] usb 6-1: USB disconnect, device number 5
[  337.198239][  T792] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0
[  337.204904][  T792] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0
[  337.207942][  T792] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0
[  337.210875][  T792] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0
[  337.214693][  T792] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0
[  337.217915][  T792] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0
[  337.221181][  T792] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0
[  337.232692][  T792] prodikeys 0003:041E:2801.0021: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1
[  337.239006][  T792] hid_prodikeys: hid-prodikeys: failed to find output report
[  337.239006][  T792] 
[  337.396604][ T5880] usb 1-1: USB disconnect, device number 64
[  337.467380][T12971] loop5: detected capacity change from 0 to 512
[  337.509283][T12971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.516504][T12971] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.557752][T12971] EXT4-fs warning (device loop5): ext4_group_add:1716: Can't resize non-sparse filesystem further
[  337.580551][T11982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.898616][T12982] loop5: detected capacity change from 0 to 40427
[  337.954171][T12982] F2FS-fs (loop5): build fault injection rate: 771
[  337.972816][T12982] F2FS-fs (loop5): invalid crc value
[  338.096751][T12982] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  338.115099][T12982] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  338.159919][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2575'.
[  338.169293][T13004] 8021q: VLANs not supported on gre0
[  338.208112][T11982] syz-executor: attempt to access beyond end of device
[  338.208112][T11982] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  338.226691][T11982] CPU: 1 UID: 0 PID: 11982 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  338.226713][T11982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  338.226721][T11982] Call Trace:
[  338.226727][T11982]  <TASK>
[  338.226733][T11982]  dump_stack_lvl+0x189/0x250
[  338.226757][T11982]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.226773][T11982]  ? __pfx_queue_work_on+0x10/0x10
[  338.226786][T11982]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  338.226806][T11982]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  338.226836][T11982]  f2fs_handle_critical_error+0x37c/0x540
[  338.226860][T11982]  f2fs_write_end_io+0x886/0xb60
[  338.226891][T11982]  __submit_merged_bio+0x27a/0x6a0
[  338.226915][T11982]  __submit_merged_write_cond+0x255/0x530
[  338.226939][T11982]  f2fs_write_data_pages+0x261d/0x3000
[  338.226982][T11982]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  338.227044][T11982]  ? folios_put_refs+0x559/0x640
[  338.227069][T11982]  ? __lock_acquire+0xab9/0xd20
[  338.227102][T11982]  ? do_raw_spin_lock+0x121/0x290
[  338.227127][T11982]  ? do_raw_spin_unlock+0x4d/0x240
[  338.227143][T11982]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  338.227156][T11982]  do_writepages+0x32e/0x550
[  338.227210][T11982]  ? do_raw_spin_unlock+0x4d/0x240
[  338.227231][T11982]  filemap_fdatawrite+0x199/0x240
[  338.227249][T11982]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  338.227306][T11982]  ? do_raw_spin_unlock+0x4d/0x240
[  338.227325][T11982]  f2fs_sync_dirty_inodes+0x31f/0x830
[  338.227352][T11982]  f2fs_write_checkpoint+0x95a/0x1df0
[  338.227386][T11982]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  338.227435][T11982]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  338.227448][T11982]  ? kfree+0x18e/0x440
[  338.227464][T11982]  ? kill_f2fs_super+0x298/0x6c0
[  338.227483][T11982]  kill_f2fs_super+0x2c3/0x6c0
[  338.227500][T11982]  ? __pfx_kill_f2fs_super+0x10/0x10
[  338.227512][T11982]  ? radix_tree_delete_item+0x2b6/0x400
[  338.227531][T11982]  ? shrinker_free+0x2ce/0x3e0
[  338.227545][T11982]  deactivate_locked_super+0xbc/0x130
[  338.227563][T11982]  cleanup_mnt+0x425/0x4c0
[  338.227577][T11982]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.227592][T11982]  task_work_run+0x1d4/0x260
[  338.227611][T11982]  ? __pfx_task_work_run+0x10/0x10
[  338.227624][T11982]  ? __x64_sys_umount+0x122/0x160
[  338.227645][T11982]  ? exit_to_user_mode_loop+0x40/0x110
[  338.227665][T11982]  exit_to_user_mode_loop+0xec/0x110
[  338.227680][T11982]  do_syscall_64+0x2bd/0x3b0
[  338.227691][T11982]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.227702][T11982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.227715][T11982]  ? exc_page_fault+0x9f/0xf0
[  338.227729][T11982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.227741][T11982] RIP: 0033:0x7ff78bd8ff57
[  338.227754][T11982] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  338.227765][T11982] RSP: 002b:00007ffe7758ceb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  338.227780][T11982] RAX: 0000000000000000 RBX: 00007ff78be11c2d RCX: 00007ff78bd8ff57
[  338.227788][T11982] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7758cf70
[  338.227796][T11982] RBP: 00007ffe7758cf70 R08: 0000000000000000 R09: 0000000000000000
[  338.227803][T11982] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7758e000
[  338.227811][T11982] R13: 00007ff78be11c2d R14: 0000000000052868 R15: 00007ffe7758e040
[  338.227835][T11982]  </TASK>
[  338.227840][T11982] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  338.450118][T13012] loop0: detected capacity change from 0 to 760
[  338.464559][T13012] isofs_fill_super: root inode is not a directory. Corrupted media?
[  338.930800][T13038] netlink: 'syz.0.2592': attribute type 18 has an invalid length.
[  340.092871][ T5945] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  340.242379][ T5945] usb 6-1: Using ep0 maxpacket: 8
[  340.248414][ T5945] usb 6-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  340.254483][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.259681][ T5945] usb 6-1: Product: syz
[  340.262197][ T5945] usb 6-1: Manufacturer: syz
[  340.264226][ T5945] usb 6-1: SerialNumber: syz
[  340.274581][ T5945] usb 6-1: config 0 descriptor??
[  340.283529][ T5945] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  340.288447][ T5945] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37
[  340.301632][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2610'.
[  340.491402][ T5945] usb 6-1: USB disconnect, device number 6
[  340.667532][T13153] loop0: detected capacity change from 0 to 32768
[  340.695045][T13153] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  340.912291][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  341.316756][T13174] loop0: detected capacity change from 0 to 40427
[  341.358775][T13174] F2FS-fs (loop0): invalid crc value
[  341.472736][T13174] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  341.478480][T13174] F2FS-fs (loop0): Start checkpoint disabled!
[  341.491465][T13174] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  342.054346][T13189] loop5: detected capacity change from 0 to 64
[  342.066513][   T26] kworker/u9:0: attempt to access beyond end of device
[  342.066513][   T26] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  342.075553][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  342.075566][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.075572][   T26] Workqueue: writeback wb_workfn (flush-7:0)
[  342.075588][   T26] Call Trace:
[  342.075592][   T26]  <TASK>
[  342.075596][   T26]  dump_stack_lvl+0x189/0x250
[  342.075609][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.075633][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  342.075641][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  342.075652][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  342.075668][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  342.075683][   T26]  f2fs_write_end_io+0x886/0xb60
[  342.075700][   T26]  __submit_merged_bio+0x27a/0x6a0
[  342.075713][   T26]  __submit_merged_write_cond+0x255/0x530
[  342.075726][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  342.075749][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  342.075767][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  342.075792][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  342.075802][   T26]  ? look_up_lock_class+0x74/0x170
[  342.075815][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  342.075825][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  342.075837][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  342.075853][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  342.075861][   T26]  do_writepages+0x32e/0x550
[  342.075875][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  342.075882][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  342.075896][   T26]  __writeback_single_inode+0x145/0xff0
[  342.075905][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  342.075916][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  342.075938][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  342.075967][   T26]  ? rcu_is_watching+0x15/0xb0
[  342.075979][   T26]  wb_writeback+0x43b/0xaf0
[  342.075992][   T26]  ? queue_io+0x381/0x590
[  342.076002][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  342.076016][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.076029][   T26]  wb_workfn+0x409/0xef0
[  342.076044][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  342.076054][   T26]  ? __lock_acquire+0xab9/0xd20
[  342.076069][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  342.076080][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.076090][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  342.076096][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  342.076104][   T26]  process_scheduled_works+0xae1/0x17b0
[  342.076125][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  342.076140][   T26]  worker_thread+0x8a0/0xda0
[  342.076183][   T26]  kthread+0x711/0x8a0
[  342.076195][   T26]  ? __pfx_worker_thread+0x10/0x10
[  342.076202][   T26]  ? __pfx_kthread+0x10/0x10
[  342.076211][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.076222][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.076228][   T26]  ? __pfx_kthread+0x10/0x10
[  342.076237][   T26]  ret_from_fork+0x439/0x7d0
[  342.076247][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  342.076257][   T26]  ? __switch_to_asm+0x39/0x70
[  342.076266][   T26]  ? __switch_to_asm+0x33/0x70
[  342.076274][   T26]  ? __pfx_kthread+0x10/0x10
[  342.076283][   T26]  ret_from_fork_asm+0x1a/0x30
[  342.076299][   T26]  </TASK>
[  342.076303][   T26] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  342.567792][T13213] team0: Device xfrm1 is of different type
[  342.872211][  T792] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  343.035662][  T792] usb 6-1: config 0 has an invalid interface number: 168 but max is 0
[  343.042420][  T792] usb 6-1: config 0 has no interface number 0
[  343.051487][  T792] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  343.059344][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.070180][  T792] usb 6-1: config 0 descriptor??
[  343.097818][T13252] loop0: detected capacity change from 0 to 2048
[  343.101315][T13252] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[  343.110837][T13252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  343.165732][T13254] loop0: detected capacity change from 0 to 128
[  343.181719][T13254] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.188085][T13254] ext4 filesystem being mounted at /837/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  343.296110][ T5856] Bluetooth: hci1: Malformed LE Event: 0x0d
[  343.300908][  T792] usb 6-1: string descriptor 0 read error: -71
[  343.311617][  T792] usb-storage 6-1:0.168: USB Mass Storage device detected
[  343.323165][  T792] usb-storage 6-1:0.168: Quirks match for vid 05ab pid 0060: 2
[  343.658308][  T792] usb 6-1: USB disconnect, device number 7
[  344.091950][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  344.392157][ T5880] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  344.552161][ T5880] usb 1-1: Using ep0 maxpacket: 32
[  344.565695][ T5880] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  344.570740][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.582242][ T5880] usb 1-1: Product: syz
[  344.584196][ T5880] usb 1-1: Manufacturer: syz
[  344.586357][ T5880] usb 1-1: SerialNumber: syz
[  344.595447][ T5880] usb 1-1: config 0 descriptor??
[  344.603700][ T5880] cdc_ether 1-1:0.0: More than one union descriptor, skipping ...
[  344.610639][ T5880] usb 1-1: bad CDC descriptors
[  344.615995][ T5880] usb 1-1: unsupported MDLM descriptors
[  344.806042][ T5880] usb 1-1: USB disconnect, device number 65
[  344.868578][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2673'.
[  345.116360][T13299] loop5: detected capacity change from 0 to 32768
[  345.868947][T13314] loop0: detected capacity change from 0 to 32768
[  345.925419][T13314] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  345.929259][T13314] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  345.951632][T13314] XFS (loop0): Ending clean mount
[  345.971711][ T5844] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  346.258883][T13330] netlink: 'syz.5.2688': attribute type 1 has an invalid length.
[  346.317842][T13333] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2690'.
[  346.564531][ T6555] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  346.655321][T13346] loop5: detected capacity change from 0 to 32768
[  346.669710][T13346] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page
[  346.669710][T13346] 
[  346.674659][T13346] ERROR: (device loop5): remounting filesystem as read-only
[  346.677304][T13346] ialloc: diAlloc returned -5!
[  346.748067][ T6555] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  346.754357][ T6555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.760713][ T6555] usb 1-1: config 0 descriptor??
[  346.766633][ T6555] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  347.080065][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2704'.
[  347.115163][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  347.173004][ T6555] gp8psk: usb out operation failed.
[  347.174337][T13366] loop5: detected capacity change from 0 to 2048
[  347.175330][ T6555] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  347.183986][T13366] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: fsck is running on the filesystem
[  347.190145][T13366] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  347.203822][ T6555] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  347.223553][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  347.236641][ T6555] usb 1-1: USB disconnect, device number 66
[  347.568160][   T33] kauditd_printk_skb: 59 callbacks suppressed
[  347.568175][   T33] audit: type=1326 audit(2000000316.098:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.4.2713" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f405a78ec29 code=0x0
[  347.971057][T13392] loop0: detected capacity change from 0 to 1024
[  348.020992][ T1089] hfsplus: b-tree write err: -5, ino 4
[  348.098667][T13396] loop0: detected capacity change from 0 to 65
[  348.110187][T13396] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  348.474769][T13406] loop5: detected capacity change from 0 to 64
[  348.508301][T13398] loop0: detected capacity change from 0 to 32768
[  348.584930][T13398] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  348.602401][ T5856] Bluetooth: hci1: hcon ffff888034de8000 sent 1 < count 7
[  348.605475][ T5856] Bluetooth: hci1: hcon ffff888034de8000 sent 0 < count 64
[  348.634935][T13398] XFS (loop0): Ending clean mount
[  348.687606][ T5844] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  348.995060][T13433] loop0: detected capacity change from 0 to 256
[  348.998792][T13433] vfat: Deprecated parameter 'posix'
[  349.001629][T13433] FAT-fs: "posix" option is obsolete, not supported now
[  349.119385][T13439] loop0: detected capacity change from 0 to 256
[  349.125686][T13437] loop5: detected capacity change from 0 to 1024
[  349.139356][T13439] exfat: Deprecated parameter 'namecase'
[  349.172998][T13439] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d)
[  349.190228][   T26] hfsplus: b-tree write err: -5, ino 4
[  349.416062][T13453] loop0: detected capacity change from 0 to 256
[  349.448240][T13453] exfat: Deprecated parameter 'utf8'
[  349.450606][T13453] exfat: Deprecated parameter 'utf8'
[  349.476055][T13453] exfat: Deprecated parameter 'namecase'
[  349.490892][T13453] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  349.809772][T13467] loop0: detected capacity change from 0 to 4096
[  349.875375][T13467] NILFS (loop0): invalid segment: Checksum error in segment payload
[  349.880236][T13467] NILFS (loop0): trying rollback from an earlier position
[  349.906015][T13467] NILFS (loop0): recovery complete
[  349.909356][T13472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  350.619651][T13489] loop5: detected capacity change from 0 to 128
[  350.653011][T13489] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  350.668148][T13489] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.715254][T11982] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  350.956202][T13515] IPv6: NLM_F_CREATE should be specified when creating new route
[  351.006748][   T33] audit: type=1326 audit(2000000319.528:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.0.2770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  351.032624][   T33] audit: type=1326 audit(2000000319.538:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.0.2770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  351.052316][   T33] audit: type=1326 audit(2000000319.538:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.0.2770" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  351.066927][   T33] audit: type=1326 audit(2000000319.538:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.0.2770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  351.077341][   T33] audit: type=1326 audit(2000000319.538:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.0.2770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa16d8ec29 code=0x7ffc0000
[  351.218959][T13523] Invalid ELF header type: 0 != 1
[  352.164209][T13556] loop0: detected capacity change from 0 to 1024
[  352.170815][T13556] hfsplus: bad catalog entry type
[  352.197741][ T2254] hfsplus: b-tree write err: -5, ino 4
[  352.795185][T13570] loop0: detected capacity change from 0 to 32768
[  352.946039][T13572] loop0: detected capacity change from 0 to 512
[  353.000109][T13572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  353.008857][T13572] ext4 filesystem being mounted at /870/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.034172][T13572] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  353.039162][T13572] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  353.048428][T13572] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2792: Failed to acquire dquot type 0
[  353.096032][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  353.356559][T13594] netlink: 'syz.5.2802': attribute type 1 has an invalid length.
[  353.372509][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2802'.
[  353.802236][ T6555] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  353.858235][T13623] IPv6: Can't replace route, no match found
[  353.964482][ T6555] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  353.968655][ T6555] usb 6-1: config 0 interface 0 has no altsetting 0
[  353.974382][ T6555] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  353.978223][ T6555] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  353.981796][ T6555] usb 6-1: Product: syz
[  353.986724][ T6555] usb 6-1: Manufacturer: syz
[  353.988726][ T6555] usb 6-1: SerialNumber: syz
[  353.994517][ T6555] usb 6-1: config 0 descriptor??
[  354.000994][ T6555] usb 6-1: selecting invalid altsetting 0
[  354.152362][ T5880] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  354.205309][    T9] usb 6-1: USB disconnect, device number 8
[  354.304434][ T5880] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  354.308956][ T5880] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  354.314602][ T5880] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  354.319983][ T5880] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  354.323942][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.337129][ T5880] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  354.377067][ T5880] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2
[  354.541528][ T5880] usb 1-1: USB disconnect, device number 67
[  354.910753][T13641] netlink: 'syz.4.2824': attribute type 10 has an invalid length.
[  354.923716][T13641] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  354.944963][T13643] netlink: 'syz.5.2825': attribute type 2 has an invalid length.
[  354.948526][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2825'.
[  355.390928][T13663] loop0: detected capacity change from 0 to 4096
[  355.418748][T13663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.508722][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.562991][ T6555] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  356.605861][T13692] netlink: 'syz.0.2845': attribute type 4 has an invalid length.
[  356.622235][T13692] netlink: 'syz.0.2845': attribute type 4 has an invalid length.
[  356.712147][ T6555] usb 6-1: Using ep0 maxpacket: 32
[  356.720382][ T6555] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  356.730327][ T6555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.744360][ T6555] usb 6-1: config 0 descriptor??
[  356.858880][T13698] loop0: detected capacity change from 0 to 4096
[  356.866298][T13698] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  356.886217][T13698] ntfs3(loop0): ino=19, mi_enum_attr
[  356.888403][T13698] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  357.024128][ T6555] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  357.068544][ T6555] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  357.095604][ T6555] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  357.104648][ T6555] usb 6-1: media controller created
[  357.245659][T13701] loop5: detected capacity change from 0 to 256
[  357.258167][ T6555] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  357.299808][T13701] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d)
[  357.604626][T13709] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  358.120651][T13723] loop0: detected capacity change from 0 to 128
[  358.151218][T13723] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  358.158946][T13723] ext4 filesystem being mounted at /898/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  358.326705][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  358.897063][ T6555] az6027: usb out operation failed. (-71)
[  358.909431][ T6555] az6027: usb out operation failed. (-71)
[  358.910169][ T6555] stb0899_attach: Driver disabled by Kconfig
[  358.911672][ T6555] az6027: no front-end attached
[  358.911672][ T6555] 
[  358.930233][ T6555] az6027: usb out operation failed. (-71)
[  358.931204][ T6555] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  358.990924][ T6555] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38
[  358.996869][ T6555] dvb-usb: schedule remote query interval to 400 msecs.
[  359.018939][ T6555] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  359.026791][ T6555] usb 6-1: USB disconnect, device number 9
[  359.099315][ T6555] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  359.597788][T13742] loop5: detected capacity change from 0 to 4096
[  359.633033][T13743] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  359.718476][T13745] loop5: detected capacity change from 0 to 164
[  359.753027][T13745] Unable to read rock-ridge attributes
[  359.774323][T13745] Unable to read rock-ridge attributes
[  359.873139][ T6555] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  359.887874][T13752] 9pnet_fd: Insufficient options for proto=fd
[  359.891817][T13750] loop5: detected capacity change from 0 to 2048
[  359.918842][T13753] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  359.935358][T13750] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  359.951207][T13750] Remounting filesystem read-only
[  360.022349][ T6555] usb 1-1: Using ep0 maxpacket: 8
[  360.033743][ T6555] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  360.036763][ T6555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.039650][ T6555] usb 1-1: Product: syz
[  360.041081][ T6555] usb 1-1: Manufacturer: syz
[  360.047397][ T6555] usb 1-1: SerialNumber: syz
[  360.050399][ T6555] usb 1-1: config 0 descriptor??
[  360.098249][T13759] loop5: detected capacity change from 0 to 1024
[  360.111396][T13759] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  360.120160][T13759] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2872: Invalid block bitmap block 0 in block_group 0
[  360.140116][T13759] Quota error (device loop5): write_blk: dquota write failed
[  360.144149][T13759] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  360.148387][T13759] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2872: Failed to acquire dquot type 0
[  360.153843][T13759] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.2872: Freeing blocks not in datazone - block = 0, count = 4096
[  360.163668][T13759] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2872: Invalid inode bitmap blk 0 in block_group 0
[  360.169324][T13759] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  360.173137][ T1089] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8
[  360.176952][ T1089] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u9:5: Failed to release dquot type 0
[  360.185145][T13759] EXT4-fs (loop5): 1 orphan inode deleted
[  360.189109][T13759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.217921][T11982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.265472][ T6555] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  360.546773][T13764] loop5: detected capacity change from 0 to 40427
[  360.553597][T13764] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  360.557089][T13764] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  360.586896][T13764] F2FS-fs (loop5): invalid crc value
[  360.645472][T13764] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  360.652750][T13764] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  360.655651][T13764] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  361.104957][ T6555] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  361.117292][ T6555] usb 1-1: USB disconnect, device number 68
[  362.643473][T13837] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  363.322220][   T95] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  363.472786][   T95] usb 1-1: Using ep0 maxpacket: 8
[  363.477120][   T95] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  363.481504][   T95] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  363.486427][   T95] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  363.490399][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.709682][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'.
[  363.711765][ T5945] usb 1-1: USB disconnect, device number 69
[  364.175373][T13875] loop5: detected capacity change from 0 to 32768
[  364.180067][T13875] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2910 (13875)
[  364.187604][T13875] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  364.191015][T13875] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  364.211935][T13875] BTRFS info (device loop5): enabling ssd optimizations
[  364.214462][T13875] BTRFS info (device loop5): enabling free space tree
[  364.216768][T13875] BTRFS info (device loop5): use lzo compression, level 1
[  364.274020][T11982] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  364.342128][T13893] loop0: detected capacity change from 0 to 4096
[  364.353706][T13894] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  364.372319][   T33] audit: type=1800 audit(2000000332.898:220): pid=13893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2912" name="file1" dev="loop0" ino=15 res=0 errno=0
[  365.486775][T13909] netlink: 'syz.0.2918': attribute type 1 has an invalid length.
[  370.671335][T13983] loop0: detected capacity change from 0 to 4096
[  370.676115][T13983] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  370.696592][T13983] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  370.701377][T13983] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  370.721544][T13983] ntfs3(loop0): ino=1b, mi_enum_attr
[  370.790137][T13985] loop5: detected capacity change from 0 to 512
[  370.809468][T13985] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  370.823641][T13985] EXT4-fs (loop5): 1 truncate cleaned up
[  370.827605][T13985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.862804][T11982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.867241][T13991] loop0: detected capacity change from 0 to 512
[  370.870283][T13991] EXT4-fs: Ignoring removed bh option
[  370.895674][T13991] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  370.904678][T13991] EXT4-fs (loop0): 1 truncate cleaned up
[  370.907767][T13991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.974225][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.025849][T13996] loop5: detected capacity change from 0 to 8
[  371.054376][T13996] SQUASHFS error: zlib decompression failed, data probably corrupt
[  371.057591][T13996] SQUASHFS error: Failed to read block 0x9b: -5
[  371.060168][T13996] SQUASHFS error: Unable to read metadata cache entry [99]
[  371.069658][T13996] SQUASHFS error: Unable to read inode 0x127
[  371.396660][T13998] loop0: detected capacity change from 0 to 32768
[  371.452305][T13998]  loop0: p9 p11 p16
[  371.706351][T13936] udevd[13936]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory
[  371.741401][T14023] udevd[14023]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory
[  371.744863][T14022] udevd[14022]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory
[  372.391145][T14031] loop5: detected capacity change from 0 to 32768
[  372.396109][T14031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2968 (14031)
[  372.405989][T14031] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  372.410408][T14031] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  372.533409][T14031] BTRFS info (device loop5): enabling ssd optimizations
[  372.536375][T14031] BTRFS info (device loop5): enabling free space tree
[  372.622463][T11982] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  373.004419][T14075] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  373.402629][   T33] audit: type=1326 audit(2000000341.938:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.4.2980" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f405a78ec29 code=0x0
[  373.650435][T14086] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2983'.
[  373.951973][T14103] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  374.128641][T14119] loop5: detected capacity change from 0 to 512
[  374.143027][T14119] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  374.167816][T14121] netlink: 'syz.0.3000': attribute type 2 has an invalid length.
[  374.176561][T14119] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2999: invalid indirect mapped block 4294967295 (level 0)
[  374.185185][T14119] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2999: invalid indirect mapped block 4294967295 (level 1)
[  374.195002][T14119] EXT4-fs (loop5): 1 orphan inode deleted
[  374.211239][T14119] EXT4-fs (loop5): 1 truncate cleaned up
[  374.214162][T14119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.280497][T11982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.329737][T14132] loop0: detected capacity change from 0 to 256
[  374.353021][T14135] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3006'.
[  374.364924][T14132] FAT-fs (loop0): Directory bread(block 64) failed
[  374.367244][T14132] FAT-fs (loop0): Directory bread(block 65) failed
[  374.369983][T14132] FAT-fs (loop0): Directory bread(block 66) failed
[  374.375206][T14132] FAT-fs (loop0): Directory bread(block 67) failed
[  374.377995][T14132] FAT-fs (loop0): Directory bread(block 68) failed
[  374.380355][T14132] FAT-fs (loop0): Directory bread(block 69) failed
[  374.384297][T14132] FAT-fs (loop0): Directory bread(block 70) failed
[  374.396265][T14132] FAT-fs (loop0): Directory bread(block 71) failed
[  374.399120][T14132] FAT-fs (loop0): Directory bread(block 72) failed
[  374.401840][T14132] FAT-fs (loop0): Directory bread(block 73) failed
[  374.582260][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  375.391943][T14177] loop5: detected capacity change from 0 to 1024
[  375.692254][   T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  375.860137][   T24] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  375.864046][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.867119][   T24] usb 6-1: Product: syz
[  375.868967][   T24] usb 6-1: Manufacturer: syz
[  375.871025][   T24] usb 6-1: SerialNumber: syz
[  375.880043][   T24] usb 6-1: config 0 descriptor??
[  375.885861][   T24] usb 6-1: Waiting for MOTU Microbook II to boot up...
[  375.888991][   T24] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22
[  375.892718][   T24] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  376.092906][   T24] usb 6-1: USB disconnect, device number 10
[  377.416592][T14204] loop0: detected capacity change from 0 to 256
[  377.435620][T14204] FAT-fs (loop0): Directory bread(block 64) failed
[  377.438649][T14204] FAT-fs (loop0): Directory bread(block 65) failed
[  377.441907][T14204] FAT-fs (loop0): Directory bread(block 66) failed
[  377.447858][T14204] FAT-fs (loop0): Directory bread(block 67) failed
[  377.450602][T14204] FAT-fs (loop0): Directory bread(block 68) failed
[  377.454010][T14204] FAT-fs (loop0): Directory bread(block 69) failed
[  377.456874][T14204] FAT-fs (loop0): Directory bread(block 70) failed
[  377.459569][T14204] FAT-fs (loop0): Directory bread(block 71) failed
[  377.464858][T14204] FAT-fs (loop0): Directory bread(block 72) failed
[  377.467870][T14204] FAT-fs (loop0): Directory bread(block 73) failed
[  377.498220][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'.
[  377.947598][T14212] loop0: detected capacity change from 0 to 65536
[  377.991060][T14212] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  378.011168][T14212] XFS (loop0): Ending clean mount
[  378.014509][T14212] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  378.206731][T14221] loop5: detected capacity change from 0 to 32768
[  378.281701][T14221] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  378.329249][T14235] loop0: detected capacity change from 0 to 256
[  378.340057][T14221] 
[  378.340873][T14221] ======================================================
[  378.343351][T14221] WARNING: possible circular locking dependency detected
[  378.346056][T14221] syzkaller #0 Not tainted
[  378.347899][T14221] ------------------------------------------------------
[  378.350138][T14221] syz.5.3038/14221 is trying to acquire lock:
[  378.353078][T14221] ffff88803ba55df8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  378.356910][T14221] 
[  378.356910][T14221] but task is already holding lock:
[  378.359281][T14221] ffff88802eecc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  378.362150][T14221] 
[  378.362150][T14221] which lock already depends on the new lock.
[  378.362150][T14221] 
[  378.365693][T14221] 
[  378.365693][T14221] the existing dependency chain (in reverse order) is:
[  378.368998][T14221] 
[  378.368998][T14221] -> #3 (jbd2_handle){++++}-{0:0}:
[  378.371977][T14221]        lock_acquire+0x120/0x360
[  378.373865][T14221]        jbd2_journal_lock_updates+0xaa/0x360
[  378.376471][T14221]        __ocfs2_flush_truncate_log+0x2ba/0x10e0
[  378.379084][T14221]        ocfs2_flush_truncate_log+0x4f/0x70
[  378.381658][T14221]        ocfs2_sync_fs+0x116/0x310
[  378.383873][T14221]        sync_filesystem+0x1cf/0x230
[  378.386194][T14221]        generic_shutdown_super+0x6f/0x2c0
[  378.388709][T14221]        kill_block_super+0x44/0x90
[  378.390979][T14221]        deactivate_locked_super+0xbc/0x130
[  378.393399][T14221]        cleanup_mnt+0x425/0x4c0
[  378.395538][T14221]        task_work_run+0x1d4/0x260
[  378.397736][T14221]        exit_to_user_mode_loop+0xec/0x110
[  378.400241][T14221]        do_syscall_64+0x2bd/0x3b0
[  378.402352][T14221]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.405071][T14221] 
[  378.405071][T14221] -> #2 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}:
[  378.409557][T14221]        lock_acquire+0x120/0x360
[  378.411771][T14221]        down_write+0x96/0x1f0
[  378.413866][T14221]        ocfs2_run_deallocs+0xdce/0x14d0
[  378.416295][T14221]        ocfs2_commit_truncate+0x1c58/0x21d0
[  378.418877][T14221]        ocfs2_truncate_file+0xca2/0x1420
[  378.421313][T14221]        ocfs2_setattr+0x1520/0x1b40
[  378.423598][T14221]        notify_change+0xb36/0xe40
[  378.425846][T14221]        do_truncate+0x1a4/0x220
[  378.427891][T14221]        path_openat+0x306c/0x3830
[  378.430117][T14221]        do_filp_open+0x1fa/0x410
[  378.432268][T14221]        do_sys_openat2+0x121/0x1c0
[  378.434493][T14221]        __x64_sys_open+0x11e/0x150
[  378.436875][T14221]        do_syscall_64+0xfa/0x3b0
[  378.439118][T14221]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.441868][T14221] 
[  378.441868][T14221] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  378.445625][T14221]        lock_acquire+0x120/0x360
[  378.447799][T14221]        down_write+0x96/0x1f0
[  378.449850][T14221]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  378.452602][T14221]        ocfs2_truncate_file+0xda0/0x1420
[  378.455068][T14221]        ocfs2_setattr+0x1520/0x1b40
[  378.457366][T14221]        notify_change+0xb36/0xe40
[  378.459578][T14221]        do_truncate+0x1a4/0x220
[  378.461729][T14221]        path_openat+0x306c/0x3830
[  378.464150][T14221]        do_filp_open+0x1fa/0x410
[  378.466443][T14221]        do_sys_openat2+0x121/0x1c0
[  378.468584][T14221]        __x64_sys_open+0x11e/0x150
[  378.470785][T14221]        do_syscall_64+0xfa/0x3b0
[  378.472982][T14221]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.475663][T14221] 
[  378.475663][T14221] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  378.478920][T14221]        validate_chain+0xb9b/0x2140
[  378.481086][T14221]        __lock_acquire+0xab9/0xd20
[  378.483128][T14221]        lock_acquire+0x120/0x360
[  378.485344][T14221]        down_read+0x46/0x2e0
[  378.487478][T14221]        ocfs2_init_acl+0x2f9/0x720
[  378.489784][T14221]        ocfs2_mknod+0x1321/0x2050
[  378.492011][T14221]        ocfs2_create+0x1a5/0x440
[  378.494018][T14221]        path_openat+0x14f4/0x3830
[  378.496139][T14221]        do_filp_open+0x1fa/0x410
[  378.498148][T14221]        do_sys_openat2+0x121/0x1c0
[  378.500409][T14221]        __x64_sys_openat+0x138/0x170
[  378.502711][T14221]        do_syscall_64+0xfa/0x3b0
[  378.504894][T14221]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.507590][T14221] 
[  378.507590][T14221] other info that might help us debug this:
[  378.507590][T14221] 
[  378.512189][T14221] Chain exists of:
[  378.512189][T14221]   &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle
[  378.512189][T14221] 
[  378.518844][T14221]  Possible unsafe locking scenario:
[  378.518844][T14221] 
[  378.522012][T14221]        CPU0                    CPU1
[  378.524322][T14221]        ----                    ----
[  378.526593][T14221]   rlock(jbd2_handle);
[  378.528411][T14221]                                lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]);
[  378.532760][T14221]                                lock(jbd2_handle);
[  378.535720][T14221]   rlock(&oi->ip_xattr_sem);
[  378.537726][T14221] 
[  378.537726][T14221]  *** DEADLOCK ***
[  378.537726][T14221] 
[  378.541302][T14221] 8 locks held by syz.5.3038/14221:
[  378.543528][T14221]  #0: ffff888123bd6428 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  378.547453][T14221]  #1: ffff88803ba560c0 (&type->i_mutex_dir_key#29){++++}-{4:4}, at: path_openat+0x8da/0x3830
[  378.551784][T14221]  #2: ffff8881035c09c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  378.557749][T14221]  #3: ffff88803ba56f40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  378.563542][T14221]  #4: ffff8881035c1840 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  378.569334][T14221]  #5: ffff888123bd6618 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  378.573483][T14221]  #6: ffff888021a15ce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  378.578123][T14221]  #7: ffff88802eecc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  378.582204][T14221] 
[  378.582204][T14221] stack backtrace:
[  378.584733][T14221] CPU: 1 UID: 0 PID: 14221 Comm: syz.5.3038 Not tainted syzkaller #0 PREEMPT(full) 
[  378.584750][T14221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.584758][T14221] Call Trace:
[  378.584766][T14221]  <TASK>
[  378.584774][T14221]  dump_stack_lvl+0x189/0x250
[  378.584795][T14221]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.584836][T14221]  ? __pfx__printk+0x10/0x10
[  378.584853][T14221]  ? stack_trace_save+0x9c/0xe0
[  378.584873][T14221]  print_circular_bug+0x2ee/0x310
[  378.584889][T14221]  check_noncircular+0x134/0x160
[  378.584905][T14221]  validate_chain+0xb9b/0x2140
[  378.584925][T14221]  __lock_acquire+0xab9/0xd20
[  378.584945][T14221]  ? ocfs2_init_acl+0x2f9/0x720
[  378.584959][T14221]  lock_acquire+0x120/0x360
[  378.584975][T14221]  ? ocfs2_init_acl+0x2f9/0x720
[  378.584991][T14221]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  378.585010][T14221]  down_read+0x46/0x2e0
[  378.585023][T14221]  ? ocfs2_init_acl+0x2f9/0x720
[  378.585038][T14221]  ocfs2_init_acl+0x2f9/0x720
[  378.585052][T14221]  ? ocfs2_mknod_locked+0x148/0x250
[  378.585067][T14221]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  378.585081][T14221]  ? dquot_alloc_inode+0x216/0xa50
[  378.585096][T14221]  ? ocfs2_block_signals+0x94/0xe0
[  378.585108][T14221]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  378.585122][T14221]  ? ocfs2_init_security_get+0x139/0x1a0
[  378.585140][T14221]  ocfs2_mknod+0x1321/0x2050
[  378.585156][T14221]  ? __pfx_ocfs2_mknod+0x10/0x10
[  378.585168][T14221]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  378.585184][T14221]  ? __lock_acquire+0xab9/0xd20
[  378.585206][T14221]  ? look_up_lock_class+0x74/0x170
[  378.585219][T14221]  ? register_lock_class+0x51/0x320
[  378.585237][T14221]  ? __lock_acquire+0xab9/0xd20
[  378.585255][T14221]  ? __lock_acquire+0xab9/0xd20
[  378.585274][T14221]  ? do_raw_spin_lock+0x121/0x290
[  378.585290][T14221]  ? do_raw_spin_unlock+0x4d/0x240
[  378.585306][T14221]  ? rcu_is_watching+0x15/0xb0
[  378.585318][T14221]  ? ocfs2_lookup+0x5b9/0x9b0
[  378.585331][T14221]  ocfs2_create+0x1a5/0x440
[  378.585342][T14221]  ? __pfx_ocfs2_lookup+0x10/0x10
[  378.585354][T14221]  ? from_kgid+0x1b0/0x650
[  378.585369][T14221]  ? __pfx_ocfs2_create+0x10/0x10
[  378.585380][T14221]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  378.585393][T14221]  ? inode_permission+0x149/0x470
[  378.585404][T14221]  ? __pfx_ocfs2_permission+0x10/0x10
[  378.585414][T14221]  ? bpf_lsm_inode_create+0x9/0x20
[  378.585427][T14221]  ? __pfx_ocfs2_create+0x10/0x10
[  378.585445][T14221]  path_openat+0x14f4/0x3830
[  378.585458][T14221]  ? arch_stack_walk+0xfc/0x150
[  378.585481][T14221]  ? __pfx_path_openat+0x10/0x10
[  378.585494][T14221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.585512][T14221]  do_filp_open+0x1fa/0x410
[  378.585526][T14221]  ? __lock_acquire+0xab9/0xd20
[  378.585544][T14221]  ? __pfx_do_filp_open+0x10/0x10
[  378.585565][T14221]  ? _raw_spin_unlock+0x28/0x50
[  378.585583][T14221]  ? alloc_fd+0x64c/0x6c0
[  378.585605][T14221]  do_sys_openat2+0x121/0x1c0
[  378.585618][T14221]  ? __se_sys_futex+0x36f/0x400
[  378.585632][T14221]  ? __pfx_do_sys_openat2+0x10/0x10
[  378.585646][T14221]  ? rcu_is_watching+0x15/0xb0
[  378.585658][T14221]  __x64_sys_openat+0x138/0x170
[  378.585672][T14221]  do_syscall_64+0xfa/0x3b0
[  378.585684][T14221]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.585695][T14221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.585706][T14221]  ? exc_page_fault+0x9f/0xf0
[  378.585718][T14221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.585730][T14221] RIP: 0033:0x7ff78bd8ec29
[  378.585742][T14221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.585753][T14221] RSP: 002b:00007ff78cc68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  378.585767][T14221] RAX: ffffffffffffffda RBX: 00007ff78bfd5fa0 RCX: 00007ff78bd8ec29
[  378.585775][T14221] RDX: 0000000000101042 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  378.585784][T14221] RBP: 00007ff78be11e41 R08: 0000000000000000 R09: 0000000000000000
[  378.585792][T14221] R10: 00000000000000b0 R11: 0000000000000246 R12: 0000000000000000
[  378.585799][T14221] R13: 00007ff78bfd6038 R14: 00007ff78bfd5fa0 R15: 00007ffe7758dc28
[  378.585841][T14221]  </TASK>
[  378.593368][T14235] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x96d79dd0, utbl_chksum : 0xe619d30d)
[  378.595501][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.795678][T11982] ocfs2: Unmounting device (7,5) on (node local)

VM DIAGNOSIS:
13:35:31  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44e7b RBX=1ffff11026cc7f61 RCX=ffff888104e51cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90006947ac0 RSP=ffffc90006947940
R8 =ffffffff8fa3a737 R9 =1ffffffff1f474e6 R10=dffffc0000000000 R11=fffffbfff1f474e7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44e63 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555571ee4500 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000066c0 CR3=00000000425c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0064656e72757465 725f657269757163
XMM02=00007f405a9a7498 00007f405a9a7470 XMM03=00007f405a9a74a8 00007f405a9a74a0
XMM04=00007f405b50d100 00007f405a9a7460 XMM05=00007f405a9a7478 00007f405a9a74c0
XMM06=00007f405a9a74b8 00007f405a9a74b0 XMM07=00007f405a9a74a8 00007f405a9a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f405a812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000580e RDI=000000000000580f RBP=00000000000003f8 RSP=ffffc900073368f0
R8 =ffff8881069f0237 R9 =1ffff11020d3e046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b02900 R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff78cc686c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30e23ffc CR3=000000010e84c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007ff78be12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
