last executing test programs:

2m57.086826701s ago: executing program 1 (id=512):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m56.864435696s ago: executing program 1 (id=515):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x3d, 0x2)

2m56.812397727s ago: executing program 1 (id=516):
syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000100)={0x1, 0x100000000, 0x9, 0x400000, 0x4000040c, 0x4fe4, 0x2401})

2m56.662988036s ago: executing program 1 (id=517):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
creat(0x0, 0x16)
syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x1, 0x1}}, 0x14)

2m56.456406068s ago: executing program 1 (id=519):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)

2m55.871891514s ago: executing program 1 (id=524):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000fff, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061ac50997d3bef609ff2172ff7fdbea6e7b7b6aa548c50a1fc2ed1e831fa79a00001000", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0x49, 0xa]}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0xea54, 0x4, 0x0, 0x4}, &(0x7f00000000c0)=0x10)

2m55.763398768s ago: executing program 32 (id=524):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000fff, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061ac50997d3bef609ff2172ff7fdbea6e7b7b6aa548c50a1fc2ed1e831fa79a00001000", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0x49, 0xa]}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0xea54, 0x4, 0x0, 0x4}, &(0x7f00000000c0)=0x10)

2m36.813549361s ago: executing program 3 (id=741):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000c0000000300000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000020c0)={r0, &(0x7f0000000000), &(0x7f0000002000)=""/154}, 0x20)

2m36.080903641s ago: executing program 3 (id=748):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

2m35.98869174s ago: executing program 3 (id=749):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0x1000}, &(0x7f0000000180)=0x8)

2m35.898786857s ago: executing program 3 (id=750):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
mount_setattr(r1, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20)

2m35.68211816s ago: executing program 3 (id=751):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002340)=ANY=[@ANYBLOB="2000000005143101000000000000000008000100020000e1070003"], 0x20}}, 0x0)

2m35.203396172s ago: executing program 3 (id=752):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)

2m34.750648383s ago: executing program 33 (id=752):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)

1m27.632833394s ago: executing program 0 (id=1502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8040, 0x21800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}]}, 0x38}}, 0x0)

1m27.38092019s ago: executing program 0 (id=1503):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100)
close(r0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m27.314100742s ago: executing program 0 (id=1504):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='oom_score_adj < -', 0x11)

1m27.313766049s ago: executing program 0 (id=1505):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x12040cc, &(0x7f00000003c0)={[{@shortname_winnt}, {@shortname_winnt}, {@numtail}, {}, {@rodir}, {@utf8}, {@fat=@discard}, {@fat=@nfs_nostale_ro}, {@rodir}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

1m27.238621228s ago: executing program 0 (id=1506):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280"], 0x24}}, 0x0)

1m26.832072212s ago: executing program 0 (id=1510):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x19c, &(0x7f0000000000)="$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")

1m26.706866604s ago: executing program 34 (id=1510):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x19c, &(0x7f0000000000)="$eJzs0L9qFFEUx/HvuXP3XyDqqlisYBYMrhOCuzOKhdVitQEXLGwEUyybNSvOqslsoZJAGgnIYl5Bq7RiYSWiYB0sRAsdm7SZIliIqIzMzFXwGXI/MHPn/Jg55zDDcCUsAb/31/q0yTgc4j2CBmYkz5TKz5em/pXktvKSyyafCOmbBRNTCx88vN0LgsFq/VKd6n8B8C3L/kXhDCcUsdBGPu2v9Xtp16TNSC1V4IjpueI+oaanOa5wSBoTFj4u5CMPN8eje83wZ5Iko97yYHlwx/fPX2xdaJXwmzdvBYMpEPexKJ6yjtul1KXirlNY5NGOnmJeEHeoIkfmYoqLbO04Z0/Pxyh3jwThTSOm9EUP6+oaZyjfSJfvcEx4htNl9goVhSYd1OogV9UL8fQH/b2gKG84zrn+3WBp87qSH8XttuyVxdul0PDw57xs+xpHectmxGxEJ2I7YvcrIq/SKRPzf/VGen9uqpOcgiL3e+PxqleEd9Lo4qdXFaazdirbqwqvzTfm4PPfB8uyLMuyLMuyLOsA+BMAAP//afJoUg==")

2.517390343s ago: executing program 2 (id=2344):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f0000002500)=""/4098}, 0x94)

2.449327631s ago: executing program 2 (id=2346):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2a3, &(0x7f0000000900)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

2.322193751s ago: executing program 2 (id=2349):
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x6)

2.083334589s ago: executing program 5 (id=2355):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
chdir(0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r1, 0x0, 0x1, 0x2000402)
write(r0, &(0x7f0000000200)='2', 0x1)

1.769011377s ago: executing program 5 (id=2359):
r0 = syz_open_dev$mtd(&(0x7f0000000180), 0xffffffff00000000, 0x81c0)
ioctl$OTPERASE(r0, 0x400c4d19, 0x0)

1.681906048s ago: executing program 5 (id=2360):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0xfff}, {0xf, 0xffffffffffffff7f}]})

1.681583601s ago: executing program 2 (id=2361):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000000500)='\x00', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="017ee0fef2d7e577"}})

1.606767342s ago: executing program 5 (id=2362):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9507ed387dbe9abc89b6f858f", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1.225485533s ago: executing program 4 (id=2363):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x3b)

1.097084142s ago: executing program 4 (id=2364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae7}, {0x6, 0x0, 0x7, 0x3}]}, 0x10)

923.912703ms ago: executing program 4 (id=2365):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd9f, &(0x7f0000001480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000000)=[0x1002], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}})

631.352987ms ago: executing program 5 (id=2366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000440)={[{@nodatasum}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@space_cache_v1}, {@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x37, 0x30, 0x35, 0x39, 0x31]}}, {@treelog}, {@commit={'commit', 0x3d, 0xb}}, {@acl}, {@ssd}]}, 0xff, 0x5122, &(0x7f000000b580)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)

631.063061ms ago: executing program 2 (id=2367):
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fc1046", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3, [0xffff, 0xf]}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}}}}}}}}}, 0x0)

533.985766ms ago: executing program 4 (id=2368):
syz_read_part_table(0x108c, &(0x7f00000010c0)="$eJzs0DFO60AQBuB/82LnWQKBKDgHJ4CcgAshRENJS0/LIbgMl6BBGmQ7cUJHg2i+r/Cs1+uZXxv+1O3deZfHtKp6mHc2x5/brtbZ99+6dBnm5Uufcbl7u6mqYTlWVe9ZL12uTuZjVX3+j3WcsE6yTbr+MPwim4+67w998jk+Xp+Svq3SVun+TSH2KdvUbu/5bSpDW3aG4+zby9Ml0fXPbwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfs9XAAAA//+YchiH")

368.696757ms ago: executing program 2 (id=2369):
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0)

306.475321ms ago: executing program 4 (id=2370):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42914}, 0x4000014)
unshare(0x6020400)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

68.002308ms ago: executing program 5 (id=2371):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x240}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

0s ago: executing program 4 (id=2372):
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x2, 0x6)
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
write$tun(r4, &(0x7f0000000440)={@void, @void, @ipv6=@generic={0x0, 0x6, "29c189", 0x0, 0x15, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x28)
splice(r0, 0x0, r4, 0x0, 0x80000000, 0x3)
write(r2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

75] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.311064][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.315562][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.318280][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.385657][ T5685] DVB: Unable to find symbol stv0299_attach()
[  144.443201][ T5685] DVB: Unable to find symbol tda8083_attach()
[  144.446918][ T5685] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  144.461092][ T5685] usb 3-1: USB disconnect, device number 11
[  144.540766][ T3159] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  144.696713][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.712202][ T3159] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  144.723601][ T3159] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.727605][ T3159] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.735178][ T3159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.738486][ T3159] usb 1-1: Product: syz
[  144.740413][ T3159] usb 1-1: Manufacturer: syz
[  144.742547][ T3159] usb 1-1: SerialNumber: syz
[  144.765463][ T5614] Bluetooth: hci2: command tx timeout
[  144.931999][ T7790] veth0_vlan: entered promiscuous mode
[  144.938583][ T7790] veth1_vlan: entered promiscuous mode
[  144.990166][ T7790] veth0_macvtap: entered promiscuous mode
[  144.996911][ T7790] veth1_macvtap: entered promiscuous mode
[  145.002094][ T3159] usb 1-1: 0:1 : does not exist
[  145.010749][ T3159] usb 1-1: unit 6 not found!
[  145.012003][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.016773][ T3159] usb 1-1: unit 2 not found!
[  145.036896][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.078116][ T3159] usb 1-1: USB disconnect, device number 11
[  145.147916][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.163423][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.197177][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.245076][ T5477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.248564][ T5477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.332134][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.334578][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.371306][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.381159][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.627728][ T7934] loop0: detected capacity change from 0 to 512
[  145.640566][ T7934] EXT4-fs: Ignoring removed oldalloc option
[  145.659449][ T7934] EXT4-fs: Ignoring removed i_version option
[  145.668774][ T7934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  145.686125][ T7938] loop4: detected capacity change from 0 to 256
[  145.688363][ T7934] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.784: invalid block
[  145.689187][ T7938] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  145.704297][ T7934] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  145.716548][ T7934] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.784: invalid indirect mapped block 4294967295 (level 1)
[  145.721751][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  145.721777][    C1] EXT4-fs (loop0): initial error at time 1786547462: ext4_get_branch:178: inode 11: block 4294967295
[  145.721804][    C1] EXT4-fs (loop0): last error at time 1786547462: ext4_get_branch:178: inode 11: block 4294967295
[  145.736556][ T7938] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.747046][ T7934] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  145.766770][ T7934] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.784: invalid indirect mapped block 4294967295 (level 1)
[  145.775872][ T7934] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  145.782556][ T7934] EXT4-fs (loop0): 2 truncates cleaned up
[  145.790946][ T7934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.802291][ T7934] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.0.784: path /262/file0/file0: bad entry in directory: directory entry overrun - offset=64, inode=0, rec_len=1024, size=60 fake=0
[  145.856909][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.072210][ T7946] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  146.076396][ T7946] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  146.082209][ T7946] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  146.236191][  T802] IPVS: starting estimator thread 0...
[  146.335780][ T7953] IPVS: using max 67 ests per chain, 160800 per kthread
[  146.522302][ T7961] mmap: syz.4.794 (7961) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  146.741640][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'.
[  146.752992][ T7967] loop2: detected capacity change from 0 to 8192
[  146.765974][ T7967] FAT-fs (loop2): bogus logical sector size 516
[  146.776512][ T7967] FAT-fs (loop2): Can't find a valid FAT filesystem
[  147.029955][ T5614] Bluetooth: hci2: command tx timeout
[  147.373601][ T8007] loop0: detected capacity change from 0 to 8
[  147.632105][ T8011] loop0: detected capacity change from 0 to 32768
[  147.636623][ T8011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.818 (8011)
[  147.642670][ T8011] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.645817][ T8011] BTRFS info (device loop0): using sha256 checksum algorithm
[  147.684760][ T8011] BTRFS info (device loop0): enabling ssd optimizations
[  147.687808][ T8011] BTRFS info (device loop0): turning on async discard
[  147.692350][ T8011] BTRFS info (device loop0): enabling free space tree
[  147.768421][ T5603] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.275848][ T8040] loop4: detected capacity change from 0 to 128
[  148.300498][ T8040] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  148.311187][ T8040] hpfs: filesystem error: improperly stopped
[  148.313211][ T8040] hpfs: You really don't want any checks? You are crazy...
[  148.315732][ T8040] hpfs: hpfs_map_sector(): read error
[  148.317460][ T8040] hpfs: code page support is disabled
[  148.320132][ T8040] hpfs: hpfs_map_4sectors(): unaligned read
[  148.322120][ T8040] hpfs: hpfs_map_4sectors(): unaligned read
[  148.324026][ T8040] hpfs: filesystem error: unable to find root dir
[  148.545420][ T5669] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  148.707908][ T5669] usb 1-1: Using ep0 maxpacket: 32
[  148.711026][ T5669] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0117, bcdDevice=99.87
[  148.718420][ T5669] usb 1-1: config 8 has an invalid interface number: 62 but max is 0
[  148.723733][ T5669] usb 1-1: config 8 has no interface number 0
[  148.726919][ T5669] usb 1-1: config 8 interface 62 altsetting 6 has an endpoint descriptor with address 0x52, changing to 0x2
[  148.741667][ T5669] usb 1-1: config 8 interface 62 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 32
[  148.754409][ T5669] usb 1-1: config 8 interface 62 altsetting 6 bulk endpoint 0xB has invalid maxpacket 8
[  148.764716][ T5669] usb 1-1: config 8 interface 62 has no altsetting 0
[  148.795137][ T5669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.803706][ T5669] usb 1-1: Product: syz
[  148.812028][ T5669] usb 1-1: Manufacturer: syz
[  148.821548][ T5669] usb 1-1: SerialNumber: syz
[  148.881457][ T8042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  148.888719][ T8042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  149.235759][ T5669] kvaser_usb 1-1:8.62: error -ENODEV: Cannot get usb endpoint(s)
[  149.268568][ T5669] usb 1-1: USB disconnect, device number 12
[  149.288212][ T5614] Bluetooth: hci2: command tx timeout
[  149.777605][ T8067] loop2: detected capacity change from 0 to 512
[  149.829791][ T8067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.833734][ T8067] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.073701][ T8077] sctp: [Deprecated]: syz.0.841 (pid 8077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.073701][ T8077] Use struct sctp_sack_info instead
[  150.135846][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.411740][ T8076] loop4: detected capacity change from 0 to 32768
[  150.458381][ T8076] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.840 (8076)
[  150.595942][ T8076] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.600523][ T8076] BTRFS info (device loop4): using sha256 checksum algorithm
[  150.713507][ T8076] BTRFS info (device loop4): enabling ssd optimizations
[  150.716463][ T8076] BTRFS info (device loop4): turning on async discard
[  150.719156][ T8076] BTRFS info (device loop4): enabling free space tree
[  150.878740][ T7790] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.369601][ T8129] loop4: detected capacity change from 0 to 1024
[  151.402332][ T8131] netlink: 'syz.0.858': attribute type 10 has an invalid length.
[  151.409347][ T8129] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  151.415144][ T8131] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  151.423771][ T8131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.429865][ T8127] loop2: detected capacity change from 0 to 8192
[  151.526211][ T8127]  loop2: p1 < > p2 < > p4 < >
[  151.539251][ T8127] loop2: partition table partially beyond EOD, truncated
[  151.543817][ T8127] loop2: p1 start 83886080 is beyond EOD, truncated
[  151.550480][ T8127] loop2: p2 start 16776960 is beyond EOD, truncated
[  151.574164][ T8129] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.857: lblock 1 mapped to illegal pblock 1 (length 1)
[  151.594163][ T8129] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  151.595677][ T8129] Quota error (device loop4): write_blk: dquota write failed
[  151.602178][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  151.602192][    C0] EXT4-fs (loop4): initial error at time 1786547467: ext4_map_blocks:833: inode 3: block 1
[  151.602210][    C0] EXT4-fs (loop4): last error at time 1786547467: ext4_map_blocks:833: inode 3: block 1
[  151.652250][ T8129] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  151.668636][ T8129] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.857: Failed to acquire dquot type 0
[  151.681722][ T8129] loop4: lost filesystem error report for type 5 error -117
[  151.682508][ T8129] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.857: Freeing blocks not in datazone - block = 0, count = 4096
[  151.704356][ T8129] loop4: lost filesystem error report for type 5 error -117
[  151.736212][ T8129] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.857: Invalid inode bitmap blk 0 in block_group 0
[  151.752473][  T287] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u9:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  151.773473][  T287] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  151.790476][ T8129] loop4: lost filesystem error report for type 5 error -117
[  151.829460][  T287] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  151.838840][ T8129] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem
[  151.842569][ T8129] loop4: lost filesystem error report for type 5 error -117
[  151.848396][  T287] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u9:4: Failed to release dquot type 0
[  151.862195][ T8129] EXT4-fs (loop4): 1 orphan inode deleted
[  151.871558][  T287] loop4: lost filesystem error report for type 5 error -117
[  151.876435][ T8129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.935298][ T7790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.073263][ T8149] netlink: 'syz.0.868': attribute type 8 has an invalid length.
[  152.551100][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.875'.
[  152.591103][ T8169] macsec1: entered promiscuous mode
[  152.601342][ T8169] bridge0: entered promiscuous mode
[  152.684431][ T8171] loop2: detected capacity change from 0 to 8
[  153.470824][ T8184] loop2: detected capacity change from 0 to 32768
[  153.492416][ T8184] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.533165][ T8184] XFS (loop2): Ending clean mount
[  153.649735][ T5602] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.922348][ T8210] loop4: detected capacity change from 0 to 128
[  154.013054][ T8210] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.019068][ T8210] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.134260][ T7790] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.832499][ T8267] syz.2.916 (8267) used greatest stack depth: 20448 bytes left
[  155.062581][ T8283] xt_CT: No such helper "netbios-ns"
[  155.078269][   T33] audit: type=1326 audit(1786547470.739:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.2.925" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7a99e0d9 code=0x0
[  155.434081][ T8298] MTRR 1 not used
[  155.663954][ T8300] loop0: detected capacity change from 0 to 32768
[  155.695232][ T8300] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  155.699982][ T8300] JBD2: Ignoring recovery information on journal
[  155.787108][ T8300] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  155.911745][ T5603] ocfs2: Unmounting device (7,0) on (node local)
[  156.048372][ T8325] veth0: entered promiscuous mode
[  156.056989][ T8321] veth0: left promiscuous mode
[  156.344419][ T3159] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  156.506781][ T3159] usb 3-1: Using ep0 maxpacket: 32
[  156.514291][ T3159] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  156.546004][ T3159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.553597][ T3159] usb 3-1: Product: syz
[  156.557327][ T3159] usb 3-1: Manufacturer: syz
[  156.560371][ T3159] usb 3-1: SerialNumber: syz
[  156.569653][ T3159] usb 3-1: config 0 descriptor??
[  156.702134][ T5716] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  156.769563][   T33] audit: type=1326 audit(1786547472.299:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  156.783645][   T33] audit: type=1326 audit(1786547472.308:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  156.795874][   T33] audit: type=1326 audit(1786547472.317:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.948" exe="/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  156.814289][   T33] audit: type=1326 audit(1786547472.317:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  156.823103][   T33] audit: type=1326 audit(1786547472.317:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  156.837035][ T3159] airspy 3-1:0.0: usb_control_msg() failed -71 request 09
[  156.839271][ T3159] airspy 3-1:0.0: Could not detect board
[  156.841168][ T3159] airspy 3-1:0.0: probe with driver airspy failed with error -71
[  156.859596][ T3159] usb 3-1: USB disconnect, device number 12
[  156.907584][ T5716] usb 1-1: Using ep0 maxpacket: 16
[  156.912626][ T5716] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  156.926011][ T5716] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[  156.933786][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  156.944739][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  156.957457][ T5716] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  156.966851][ T5716] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.986731][ T5716] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  156.990715][ T5716] usb 1-1: Manufacturer: syz
[  156.998014][ T5716] usb 1-1: config 0 descriptor??
[  157.297633][ T5716] rc_core: IR keymap rc-hauppauge not found
[  157.301775][ T5716] Registered IR keymap rc-empty
[  157.308099][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.334588][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.357886][ T5716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  157.366973][ T5716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4
[  157.443367][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.494922][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.525510][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.547244][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.583297][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.602298][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.629962][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.659315][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.682786][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.700029][ T5716] mceusb 1-1:0.0: Error: mce write urb status = -71
[  157.732443][ T5716] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  157.740370][ T5716] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  157.751643][ T5716] usb 1-1: USB disconnect, device number 13
[  157.842603][ T8395] loop4: detected capacity change from 0 to 4096
[  157.846703][ T8395] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  157.848932][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'.
[  157.934125][ T8395] ntfs3(loop4): ino=19, mi_enum_attr
[  157.941237][ T8395] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  158.403440][ T5716] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  158.442102][ T5716] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  158.869124][ T8421] loop0: detected capacity change from 0 to 4096
[  158.950534][ T8421] ntfs3(loop0): Failed to initialize $Secure::$SII (-22).
[  158.953519][ T8421] ntfs3(loop0): Failed to initialize $Secure (-22).
[  159.404582][ T8431] loop0: detected capacity change from 0 to 256
[  159.407100][ T8431] vfat: Bad value for 'shortname'
[  159.422508][ T8431] loop0: detected capacity change from 0 to 1024
[  159.425842][ T8431] ext4: Unknown parameter 'nouser_xattr'
[  161.324079][ T8443] loop2: detected capacity change from 0 to 512
[  161.328379][ T8443] EXT4-fs: Ignoring removed orlov option
[  161.331091][ T8443] EXT4-fs (loop2): filesystem has both journal inode and journal device!
[  161.348824][ T8445] 9p: Bad value for 'wfdno'
[  161.681498][ T8462] loop2: detected capacity change from 0 to 4096
[  161.711807][ T8463] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.712726][ T8462] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  161.767456][ T8462] Remounting filesystem read-only
[  161.814804][ T5669] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  161.914777][ T8465] loop0: detected capacity change from 0 to 32768
[  161.917457][ T8465] BTRFS error: failed to parse compression option 'zstd:nobarrier'
[  161.981225][ T5669] usb 5-1: Using ep0 maxpacket: 16
[  161.992098][ T5669] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  162.019118][ T5669] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  162.022152][ T5669] usb 5-1: config 0 has no interface number 0
[  162.024110][ T5669] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  162.027161][ T5669] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  162.031521][ T8475] loop2: detected capacity change from 0 to 8
[  162.035923][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.041996][ T5669] usb 5-1: Product: syz
[  162.043412][ T5669] usb 5-1: Manufacturer: syz
[  162.049540][ T5669] usb 5-1: SerialNumber: syz
[  162.059997][ T5669] usb 5-1: config 0 descriptor??
[  162.065041][ T8458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  162.067836][ T8458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  162.302911][ T8458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  162.307712][ T8458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  162.530819][ T5669] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  162.564172][ T8483] loop2: detected capacity change from 0 to 32768
[  162.966474][ T5669] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  162.970363][ T5669] asix 5-1:0.34: probe with driver asix failed with error -71
[  162.981521][ T5669] usb 5-1: USB disconnect, device number 2
[  163.255111][  T802] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  163.377866][ T8509] loop2: detected capacity change from 0 to 512
[  163.394594][ T8509] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  163.418716][ T8509] EXT4-fs (loop2): 1 truncate cleaned up
[  163.423592][ T8509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.434783][  T802] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  163.441741][  T802] usb 1-1: config 0 interface 0 has no altsetting 0
[  163.446206][  T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.453414][  T802] usb 1-1: config 0 descriptor??
[  163.631488][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.716267][ T8520] loop4: detected capacity change from 0 to 764
[  163.765914][ T8522] loop2: detected capacity change from 0 to 764
[  163.794168][ T8522] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  163.933277][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  163.937937][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  163.945624][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  163.950617][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  163.953025][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  163.955191][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  163.957286][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  163.963990][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  163.967578][  T802] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  164.158074][  T802] usb 1-1: USB disconnect, device number 14
[  165.011435][ T3159] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  165.183942][ T3159] usb 1-1: Using ep0 maxpacket: 32
[  165.187261][ T3159] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  165.192529][ T3159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.206555][ T3159] gspca_main: nw80x-2.14.0 probing 055f:d001
[  165.412845][ T5716] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  165.594840][ T5716] usb 5-1: Using ep0 maxpacket: 8
[  165.608670][ T5716] usb 5-1: descriptor type invalid, skip
[  165.613107][ T5716] usb 5-1: descriptor type invalid, skip
[  165.617996][ T5716] usb 5-1: descriptor type invalid, skip
[  165.626621][ T5716] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  165.632269][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  165.636040][ T5716] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  165.642601][ T5716] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  165.653004][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.657976][ T5716] usb 5-1: Product: syz
[  165.661831][ T5716] usb 5-1: Manufacturer: syz
[  165.663955][ T5716] usb 5-1: SerialNumber: syz
[  165.879178][ T3159] gspca_nw80x: reg_w err -71
[  165.881198][ T3159] nw80x 1-1:16.0: probe with driver nw80x failed with error -71
[  165.887883][ T3159] usb 1-1: USB disconnect, device number 15
[  165.910109][ T5716] cdc_ncm 5-1:1.0: bind() failure
[  165.914988][ T5716] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  165.917616][ T5716] cdc_ncm 5-1:1.1: bind() failure
[  165.924505][ T5716] usb 5-1: USB disconnect, device number 3
[  165.941410][ T5669] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  166.104655][ T5669] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  166.108600][ T5669] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[  166.111485][ T5669] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.115299][ T5669] usb 3-1: config 0 has no interface number 0
[  166.117790][ T5669] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  166.121702][ T5669] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  166.125300][ T5669] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  166.129555][ T5669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.137348][ T5669] usb 3-1: config 0 descriptor??
[  166.152424][ T5669] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  166.365096][ T5661] usb 3-1: Failed to submit usb control message: -71
[  166.368820][ T5661] usb 3-1: unable to send the bmi data to the device: -71
[  166.371601][ T5661] usb 3-1: unable to get target info from device
[  166.374325][ T3159] usb 3-1: USB disconnect, device number 13
[  166.378966][ T5661] usb 3-1: could not get target info (-71)
[  166.381539][ T5661] usb 3-1: could not probe fw (-71)
[  166.498133][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'.
[  166.500968][ T8564] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  166.693142][ T8566] loop4: detected capacity change from 0 to 32768
[  166.747158][ T8566] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.775070][ T8566] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  166.793651][ T8566] XFS (loop4): Starting recovery (logdev: internal)
[  166.848164][ T8566] XFS (loop4): Ending recovery (logdev: internal)
[  167.036292][ T7790] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  167.718593][ T8615] loop2: detected capacity change from 0 to 128
[  168.174386][  T802] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  168.320224][ T8634] loop2: detected capacity change from 0 to 256
[  168.332113][ T8634] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  168.360923][ T8634] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[  168.378694][  T802] usb 1-1: Using ep0 maxpacket: 32
[  168.382898][  T802] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  168.389855][  T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.397868][  T802] usb 1-1: config 0 descriptor??
[  168.555837][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'.
[  168.629798][  T802] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  168.640971][ T5672] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  168.664939][  T802] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  168.671303][  T802] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  168.680248][ T8644] netlink: 'syz.2.1066': attribute type 10 has an invalid length.
[  168.688686][  T802] usb 1-1: media controller created
[  168.698543][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  168.701842][  T802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  168.707966][ T8644] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  168.724806][ T8644] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1066'.
[  168.755530][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.763907][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.770965][ T8644] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  168.778255][ T8644] bond0 (unregistering): Released all slaves
[  168.838803][ T5672] usb 5-1: Using ep0 maxpacket: 8
[  168.855719][ T5672] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  168.865789][  T802] az6027: usb out operation failed. (-71)
[  168.877740][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.891786][ T5672] usb 5-1: Product: syz
[  168.893832][ T5672] usb 5-1: Manufacturer: syz
[  168.904931][ T5672] usb 5-1: SerialNumber: syz
[  168.920715][ T5672] usb 5-1: config 0 descriptor??
[  168.943346][  T802] az6027: usb out operation failed. (-71)
[  168.948925][  T802] stb0899_attach: Driver disabled by Kconfig
[  168.960054][  T802] az6027: no front-end attached
[  168.960054][  T802] 
[  168.971291][  T802] az6027: usb out operation failed. (-71)
[  168.973704][ T8648] syzkaller0: entered promiscuous mode
[  168.977080][  T802] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  168.985957][  T802] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[  169.009039][  T802] dvb-usb: schedule remote query interval to 400 msecs.
[  169.016557][  T802] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  169.030904][  T802] usb 1-1: USB disconnect, device number 16
[  169.118347][  T802] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  169.177374][ T5672] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  169.952841][ T8656] loop0: detected capacity change from 0 to 256
[  169.956471][ T8656] exfat: Deprecated parameter 'utf8'
[  169.962296][ T8656] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  169.997737][ T8656] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  170.109286][ T5672] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  170.127738][ T5672] usb 5-1: USB disconnect, device number 4
[  170.371004][ T8660] loop0: detected capacity change from 0 to 32768
[  170.512573][ T8660] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  170.546932][ T8660] JBD2: Ignoring recovery information on journal
[  170.606120][ T8660] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  170.881979][ T8660] syz.0.1074 (8660) used greatest stack depth: 20200 bytes left
[  171.121347][ T5603] ocfs2: Unmounting device (7,0) on (node local)
[  171.316507][ T8666] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in;
[  171.316507][ T8666]    program syz.0.1076 not setting count and/or reply_len properly
[  173.568614][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'.
[  173.571983][ T8687] netlink: 'syz.4.1082': attribute type 2 has an invalid length.
[  174.069076][   T33] audit: type=1800 audit(1786547744.276:18): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1092" name="local" dev="configfs" ino=18189 res=0 errno=0
[  174.086398][   T33] audit: type=1800 audit(1786547744.285:19): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1092" name="scan_secs" dev="configfs" ino=17115 res=0 errno=0
[  174.108899][ T3159] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  174.282816][ T3159] usb 3-1: Using ep0 maxpacket: 8
[  174.287897][ T3159] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  174.297403][ T3159] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  174.302096][ T3159] usb 3-1: config 0 interface 0 has no altsetting 0
[  174.305365][ T3159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.317358][ T3159] usb 3-1: config 0 descriptor??
[  174.767031][ T3159] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0
[  174.769915][ T3159] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0
[  174.772456][ T3159] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0
[  174.774566][ T3159] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0
[  174.776675][ T3159] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0
[  174.778756][ T3159] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0
[  174.782781][ T3159] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0
[  174.788872][ T3159] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.02 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0
[  174.998869][ T3159] usb 3-1: USB disconnect, device number 14
[  176.568386][ T8731] loop0: detected capacity change from 0 to 512
[  176.702481][ T8731] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1100: inode has both inline data and extents flags
[  176.731973][ T8731] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  176.732424][ T8731] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1100: couldn't read orphan inode 15 (err -117)
[  176.743164][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  176.745801][    C0] EXT4-fs (loop0): initial error at time 1786547746: ext4_orphan_get:1399: inode 15
[  176.749384][    C0] EXT4-fs (loop0): last error at time 1786547746: ext4_orphan_get:1399: inode 15
[  176.757477][ T8731] loop0: lost filesystem error report for type 5 error -117
[  176.759253][ T8731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.939907][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.082231][ T8732] loop2: detected capacity change from 0 to 32768
[  177.101131][ T8732] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1102 (8732)
[  177.134523][ T8732] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.142937][ T8732] BTRFS info (device loop2): using crc32c checksum algorithm
[  177.267420][ T8732] BTRFS info (device loop2): enabling ssd optimizations
[  177.277110][ T8732] BTRFS info (device loop2): turning on flush-on-commit
[  177.295212][ T8732] BTRFS info (device loop2): enabling free space tree
[  177.299707][ T8732] BTRFS info (device loop2): enabling auto defrag
[  177.309700][ T8732] BTRFS info (device loop2): use lzo compression, level 1
[  177.318832][ T8732] BTRFS info (device loop2): max_inline set to 4096
[  177.339656][ T8738] loop4: detected capacity change from 0 to 32768
[  177.391552][ T5602] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.406012][ T8738] ERROR: (device loop4): diAllocAG: numfree > numinos
[  177.406012][ T8738] 
[  177.521001][ T8738] ERROR: (device loop4): remounting filesystem as read-only
[  177.526523][ T8738] ialloc: diAlloc returned -5!
[  177.751553][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'.
[  177.934171][ T8761] loop0: detected capacity change from 0 to 40427
[  177.946726][ T8761] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  177.949457][ T8761] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  177.972069][ T8761] F2FS-fs (loop0): build fault injection rate: 17008
[  177.980250][ T8761] F2FS-fs (loop0): build fault injection type: 0x6
[  177.992601][ T8761] F2FS-fs (loop0): invalid crc value
[  178.045963][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'.
[  178.091606][ T8777] ip6gretap1: entered promiscuous mode
[  178.100083][ T8777] ip6gretap1: entered allmulticast mode
[  178.247690][ T8761] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.320417][ T8761] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  178.325930][ T8761] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  178.378658][   T33] audit: type=1326 audit(1786547748.243:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.4.1120" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  178.394760][   T33] audit: type=1326 audit(1786547748.271:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.4.1120" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  178.410336][   T33] audit: type=1326 audit(1786547748.271:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.4.1120" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  178.432028][   T33] audit: type=1326 audit(1786547748.271:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.4.1120" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  179.017037][ T8817] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  179.026211][ T8817] overlayfs: overlapping lowerdir path
[  179.148063][   T33] audit: type=1326 audit(1786547748.954:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.0.1133" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff423f9e0d9 code=0x7ffc0000
[  179.170637][   T33] audit: type=1326 audit(1786547748.954:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.0.1133" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff423f9e0d9 code=0x7ffc0000
[  179.178833][   T33] audit: type=1326 audit(1786547748.963:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.0.1133" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff423f9e0d9 code=0x7ffc0000
[  179.209464][   T33] audit: type=1326 audit(1786547748.963:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.0.1133" exe="/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ff423f9e0d9 code=0x7ffc0000
[  179.242376][ T8811] loop4: detected capacity change from 0 to 32768
[  179.269653][ T8811] XFS (loop4): invalid logbufsize: 51200 [not 16k,32k,64k,128k or 256k]
[  179.344294][ T8827] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1135'.
[  179.351467][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1135'.
[  179.453904][ T8830] team0 (unregistering): Port device team_slave_0 removed
[  179.468251][ T8830] team0 (unregistering): Port device team_slave_1 removed
[  179.668688][ T8838] loop4: detected capacity change from 0 to 4096
[  179.676702][ T8838] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  179.706656][ T8838] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  179.799588][ T3159] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  180.065943][ T3159] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  180.073835][ T3159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.099793][ T3159] usb 3-1: config 0 descriptor??
[  180.151802][ T8850] overlayfs: missing 'lowerdir'
[  180.295186][ T8856] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  180.367336][ T8833] batman_adv: batadv0: Adding interface: macvtap1
[  180.370134][ T8833] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.380873][ T8833] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  180.600190][ T8860] loop0: detected capacity change from 0 to 32768
[  180.623572][ T8860] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  180.650949][ T8860] XFS (loop0): Ending clean mount
[  180.702838][ T8860] XFS (loop0): Quotacheck needed: Please wait.
[  180.840934][ T8860] XFS (loop0): Quotacheck: Done.
[  180.886604][ T5603] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  180.959908][ T8833] batman_adv: batadv0: Removing interface: macvtap1
[  181.377779][ T5672] usb 3-1: USB disconnect, device number 15
[  181.534455][ T8897] loop4: detected capacity change from 0 to 32768
[  181.540536][ T8897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1158 (8897)
[  181.564285][ T8897] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  181.568501][ T8897] BTRFS info (device loop4): using sha256 checksum algorithm
[  181.617871][ T8905] openvswitch: netlink: Actions may not be safe on all matching packets
[  181.650051][ T8897] BTRFS info (device loop4): enabling ssd optimizations
[  181.653057][ T8897] BTRFS info (device loop4): turning on sync discard
[  181.656370][ T8897] BTRFS info (device loop4): enabling free space tree
[  181.658997][ T8897] BTRFS info (device loop4): use zlib compression, level 3
[  181.696725][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  181.696761][   T33] audit: type=1800 audit(1786547751.307:33): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1158" name="file1" dev="loop4" ino=260 res=0 errno=0
[  181.782847][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'.
[  182.243832][ T8927] loop2: detected capacity change from 0 to 8
[  182.284585][ T8927] SQUASHFS error: Failed to read block 0x62: -5
[  182.300080][ T8927] squashfs image failed sanity check
[  182.605649][ T7790] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  183.649797][   T33] audit: type=1326 audit(1786547753.106:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.676963][   T33] audit: type=1326 audit(1786547753.106:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.684707][   T33] audit: type=1326 audit(1786547753.106:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.705599][   T33] audit: type=1326 audit(1786547753.115:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.713943][ T5477] tipc: Subscription rejected, illegal request
[  183.739493][   T33] audit: type=1326 audit(1786547753.115:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.786983][   T33] audit: type=1326 audit(1786547753.115:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.797829][   T33] audit: type=1326 audit(1786547753.115:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.815960][   T33] audit: type=1326 audit(1786547753.115:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.828043][   T33] audit: type=1326 audit(1786547753.115:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.4.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3aed59e0d9 code=0x7ffc0000
[  183.994311][ T8983] loop4: detected capacity change from 0 to 40427
[  183.997993][ T8983] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  184.001060][ T8983] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  184.005320][ T8983] F2FS-fs (loop4): invalid crc value
[  184.075970][ T8983] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.084459][ T8983] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  184.086777][ T8983] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  184.737356][ T9028] loop0: detected capacity change from 0 to 1024
[  184.748519][ T9028] EXT4-fs: Ignoring removed mblk_io_submit option
[  184.778841][ T9028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.798647][ T9028] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1212: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  184.828416][ T9028] EXT4-fs (loop0): Remounting filesystem read-only
[  184.885369][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'.
[  184.917206][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.262429][ T9053] loop0: detected capacity change from 0 to 512
[  185.284580][ T9053] EXT4-fs (loop0): 1 truncate cleaned up
[  185.288523][ T9053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.320499][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.697129][ T9057] loop2: detected capacity change from 0 to 32768
[  185.706229][ T9057] (syz.2.1224,9057,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  185.723230][ T9057] (syz.2.1224,9057,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  185.788078][ T9057] JBD2: Ignoring recovery information on journal
[  185.836116][ T9057] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  185.890835][ T9078] loop4: detected capacity change from 0 to 128
[  185.930714][ T9078] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  185.940808][ T9078] hpfs: filesystem error: improperly stopped
[  185.945906][ T9078] hpfs: You really don't want any checks? You are crazy...
[  185.953011][ T9078] hpfs: hpfs_map_sector(): read error
[  185.957602][ T9078] hpfs: code page support is disabled
[  185.972767][ T9078] hpfs: hpfs_map_4sectors(): unaligned read
[  185.976482][ T9078] hpfs: hpfs_map_4sectors(): unaligned read
[  185.977293][ T5614] Bluetooth: hci1: Malformed LE Event: 0x0d
[  185.978674][ T9078] hpfs: filesystem error: unable to find root dir
[  185.982791][ T5477] ocfs2: Finishing quota recovery on device (7,2) for slot 0
[  186.057419][ T5614] Bluetooth: hci2: adv larger than maximum supported
[  186.057493][ T5614] Bluetooth: hci2: Malformed LE Event: 0x0d
[  186.293771][ T9084] syz.2.1224 (9084) used greatest stack depth: 19688 bytes left
[  186.387316][ T5602] ocfs2: Unmounting device (7,2) on (node local)
[  186.672598][ T9094] netlink: 'syz.4.1241': attribute type 27 has an invalid length.
[  186.772924][ T9100] cgroup: fork rejected by pids controller in /syz4
[  187.032020][ T9111] loop2: detected capacity change from 0 to 1764
[  187.106895][ T9113] tipc: Started in network mode
[  187.108975][ T9113] tipc: Node identity e213a741907b, cluster identity 4711
[  187.112023][ T9113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.116009][ T9113] syzkaller0: entered promiscuous mode
[  187.118401][ T9113] syzkaller0: entered allmulticast mode
[  187.130226][ T9113] tipc: Resetting bearer <eth:syzkaller0>
[  187.142969][ T9112] tipc: Resetting bearer <eth:syzkaller0>
[  187.190319][ T9112] tipc: Disabling bearer <eth:syzkaller0>
[  187.356525][ T5477] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.474882][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.490425][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.499594][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.504932][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.508021][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.653580][ T5477] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.801558][ T5477] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.926316][ T5477] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.322898][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'.
[  188.512810][ T5477] bridge_slave_1: left allmulticast mode
[  188.521644][ T5477] bridge_slave_1: left promiscuous mode
[  188.534819][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.551267][ T5477] bridge_slave_0: left allmulticast mode
[  188.553107][ T5477] bridge_slave_0: left promiscuous mode
[  188.555118][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.162860][ T5477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.197922][ T5477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.206085][ T5477] bond0 (unregistering): Released all slaves
[  189.391010][ T9152] loop2: detected capacity change from 0 to 40427
[  189.422303][ T9152] F2FS-fs (loop2): build fault injection type: 0x7
[  189.427840][ T9152] F2FS-fs (loop2): invalid crc value
[  189.446720][ T9154] XFS (mtdblock0): Invalid superblock magic number
[  189.613421][ T9152] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  189.643492][ T9152] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  189.665693][ T9152] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  189.677926][ T9152] F2FS-fs (loop2): Start checkpoint disabled!
[  189.752484][ T5614] Bluetooth: hci2: command tx timeout
[  189.757699][ T9152] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  189.767981][ T9152] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  189.829964][ T5477] hsr_slave_0: left promiscuous mode
[  189.850195][ T5477] hsr_slave_1: left promiscuous mode
[  189.852968][ T5477] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.855891][ T5477] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.869001][ T5477] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.872078][ T5477] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.902995][ T9152] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  189.912635][ T5477] veth1_macvtap: left promiscuous mode
[  189.917338][ T5477] veth0_macvtap: left promiscuous mode
[  189.921177][ T5477] veth1_vlan: left promiscuous mode
[  189.926795][ T5477] veth0_vlan: left promiscuous mode
[  189.929197][ T9175] loop0: detected capacity change from 0 to 256
[  191.078625][ T5477] team0 (unregistering): Port device team_slave_1 removed
[  191.096254][ T5477] team0 (unregistering): Port device team_slave_0 removed
[  191.152299][ T9188] loop0: detected capacity change from 0 to 512
[  191.164773][ T9188] EXT4-fs (loop0): Test dummy encryption mode enabled
[  191.225611][ T9188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.277351][ T9188] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  191.306072][ T9188] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  191.333668][ T5347] 8021q: adding VLAN 0 to HW filter on device eth9
[  191.336754][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.667488][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.670017][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.684477][ T9123] bridge_slave_0: entered allmulticast mode
[  191.692843][ T9123] bridge_slave_0: entered promiscuous mode
[  191.696699][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.699757][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.702286][ T9123] bridge_slave_1: entered allmulticast mode
[  191.702690][ T9220] netlink: 'syz.2.1280': attribute type 21 has an invalid length.
[  191.705623][ T9123] bridge_slave_1: entered promiscuous mode
[  191.779045][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.789603][ T5347] 8021q: adding VLAN 0 to HW filter on device eth10
[  191.801592][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.853589][ T9230] loop2: detected capacity change from 0 to 512
[  191.869707][ T9230] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  191.874509][ T9230] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[  191.895448][ T9123] team0: Port device team_slave_0 added
[  191.907564][ T9123] team0: Port device team_slave_1 added
[  191.954803][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.961636][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  191.970540][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.984969][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.988771][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.008821][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.059558][ T9237] overlayfs: cannot append lower layer
[  192.079026][ T9123] hsr_slave_0: entered promiscuous mode
[  192.086551][ T9123] hsr_slave_1: entered promiscuous mode
[  192.300861][ T9245] vti0: entered promiscuous mode
[  192.302559][ T9245] vti0: entered allmulticast mode
[  192.318797][ T5347] 8021q: adding VLAN 0 to HW filter on device eth11
[  192.388846][ T9232] loop0: detected capacity change from 0 to 131072
[  192.392261][ T9232] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  192.394511][ T9232] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  192.398608][ T9232] F2FS-fs (loop0): invalid crc value
[  192.437502][ T9232] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.453612][ T9232] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  192.456422][ T9232] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  193.038165][ T9269] netlink: 'syz.2.1293': attribute type 46 has an invalid length.
[  193.149454][ T9273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1294'.
[  193.663647][ T9123] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  193.670518][ T9123] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  193.685616][ T9123] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  193.710002][ T9123] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  193.720510][ T9123] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  193.738436][ T9123] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  193.742479][ T9123] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  193.754528][ T9123] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  193.920963][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.968957][ T9123] 8021q: adding VLAN 0 to HW filter on device team0
[  193.999682][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.001967][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.007561][ T3217] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.010037][ T3217] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.014306][ T9324] loop2: detected capacity change from 0 to 4096
[  194.082500][ T9327] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.425473][ T9352] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  194.507658][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.515911][ T9356] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1316'.
[  194.730040][ T9376] loop0: detected capacity change from 0 to 4096
[  194.743044][ T9377] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.809637][ T9123] veth0_vlan: entered promiscuous mode
[  194.829459][ T9123] veth1_vlan: entered promiscuous mode
[  194.881300][ T9123] veth0_macvtap: entered promiscuous mode
[  194.900642][ T9123] veth1_macvtap: entered promiscuous mode
[  194.923941][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.953485][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.007411][ T5477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.026475][ T5477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.042931][ T5477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.082656][ T5661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.212546][ T3412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.219544][ T3412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.252559][ T6300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.256770][ T6300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.432816][ T9395] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[  195.957380][ T9405] Can't find a SQUASHFS superblock on nullb0
[  196.142358][ T9414] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  196.737575][ T9436] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1348'.
[  197.591328][ T9490] loop4: detected capacity change from 0 to 64
[  197.688258][   T33] kauditd_printk_skb: 17 callbacks suppressed
[  197.688274][   T33] audit: type=1326 audit(1786547766.070:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.4.1375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  197.717213][   T33] audit: type=1326 audit(1786547766.070:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.4.1375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  197.727915][   T33] audit: type=1326 audit(1786547766.070:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.4.1375" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  197.738167][   T33] audit: type=1326 audit(1786547766.070:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.4.1375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  197.747450][   T33] audit: type=1326 audit(1786547766.070:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.4.1375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  198.135157][ T9515] batadv_slave_1: entered promiscuous mode
[  198.138861][ T9514] batadv_slave_1: left promiscuous mode
[  198.226693][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'.
[  198.336053][ T5614] Bluetooth: hci0: unexpected event for opcode 0x2039
[  198.465687][ T9534] loop0: detected capacity change from 0 to 128
[  198.481143][ T9534] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  198.518451][ T9534] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  198.540974][   T33] audit: type=1800 audit(1786547766.845:65): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1393" name="file1" dev="loop0" ino=1048643 res=0 errno=0
[  198.643095][ T9536] vlan2: entered allmulticast mode
[  198.646852][ T9536] bond0: entered allmulticast mode
[  198.651428][ T9536] bond_slave_0: entered allmulticast mode
[  198.659311][ T9536] bond_slave_1: entered allmulticast mode
[  198.677123][ T9536] bridge0: port 3(vlan2) entered blocking state
[  198.686597][ T9536] bridge0: port 3(vlan2) entered disabled state
[  198.689840][ T6299] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  198.701878][ T9536] vlan2: entered promiscuous mode
[  198.704149][ T9536] bond0: entered promiscuous mode
[  198.706575][ T9536] bond_slave_0: entered promiscuous mode
[  198.709242][ T9536] bond_slave_1: entered promiscuous mode
[  198.713143][ T9536] bridge0: port 3(vlan2) entered blocking state
[  198.717435][ T9536] bridge0: port 3(vlan2) entered forwarding state
[  198.847562][ T9541] loop2: detected capacity change from 0 to 4096
[  198.857689][ T9541] EXT4-fs: Ignoring removed orlov option
[  198.864728][ T9541] EXT4-fs (loop2): Test dummy encryption mode enabled
[  198.894958][ T9541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.145881][ T9541] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  199.276616][ T9560] loop4: detected capacity change from 0 to 8192
[  199.330771][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.924574][ T5716] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  200.037996][ T9590] loop0: detected capacity change from 0 to 256
[  200.109605][ T5716] usb 3-1: Using ep0 maxpacket: 32
[  200.114167][ T5716] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  200.124680][ T5716] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config
[  200.137536][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.149523][ T5716] usb 3-1: Product: syz
[  200.154584][ T5716] usb 3-1: Manufacturer: syz
[  200.162539][ T5716] usb 3-1: SerialNumber: syz
[  200.173069][ T5716] usb 3-1: config 0 descriptor??
[  200.194833][ T5716] cdc_ether 3-1:0.0: missing cdc header descriptor
[  200.199698][ T5716] usb 3-1: unsupported MDLM descriptors
[  200.446177][ T5716] usb 3-1: USB disconnect, device number 16
[  201.294584][ T9610] loop2: detected capacity change from 0 to 512
[  201.324273][ T9610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.414842][ T9610] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.1425: bg 0: bad block bitmap checksum
[  201.471092][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.540556][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  201.543256][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  201.611149][ T9615] loop4: detected capacity change from 0 to 512
[  201.619369][ T9615] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  201.652886][ T9615] EXT4-fs (loop4): mount failed
[  201.864082][ T9613] loop2: detected capacity change from 0 to 32768
[  201.874915][ T9613] Mount JFS Failure: -5
[  201.881313][ T9613] jfs_mount failed w/return code = -5
[  202.276561][ T9629] loop2: detected capacity change from 0 to 128
[  202.299213][ T9629] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  202.319924][ T9629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.565538][ T9637] loop2: detected capacity change from 0 to 2048
[  202.605103][ T9637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.634081][ T5672] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  202.672703][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.782472][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'.
[  202.798001][ T5672] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  202.806033][ T5672] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  202.810257][ T5672] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.815741][ T5672] usb 5-1: config 0 interface 0 has no altsetting 0
[  202.821719][ T5672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.836938][ T5672] usb 5-1: config 0 descriptor??
[  202.951532][ T9656] FAT-fs (loop2): bogus number of reserved sectors
[  202.955592][ T9656] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors)
[  202.966316][ T9656] FAT-fs (loop2): Can't find a valid FAT filesystem
[  203.330492][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x1
[  203.336537][ T9675] netlink: 'syz.2.1452': attribute type 1 has an invalid length.
[  203.341188][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x5
[  203.347394][ T9675] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1452'.
[  203.351310][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x6
[  203.352808][ T9675] netlink: 'syz.2.1452': attribute type 1 has an invalid length.
[  203.362833][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0
[  203.370976][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0
[  203.377467][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0
[  203.391956][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0
[  203.402194][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0
[  203.407004][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0
[  203.410197][ T5672] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0
[  203.541443][ T5672] hid-led 0003:0FC5:B080.0008: probe with driver hid-led failed with error -71
[  203.562729][ T5672] usb 5-1: USB disconnect, device number 5
[  203.667493][ T9684] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  204.136206][ T9691] set_capacity_and_notify: 1 callbacks suppressed
[  204.136224][ T9691] loop4: detected capacity change from 0 to 256
[  204.144674][ T9691] exfat: Deprecated parameter 'namecase'
[  204.154478][ T9691] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  204.414445][ T9703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1465'.
[  204.475569][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1465'.
[  204.602099][ T9712] loop4: detected capacity change from 0 to 256
[  204.611010][ T9712] exfat: Deprecated parameter 'namecase'
[  204.616906][ T9712] exfat: Deprecated parameter 'namecase'
[  204.619425][ T9712] exfat: Deprecated parameter 'utf8'
[  204.622190][ T9712] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  204.631880][ T9712] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x02ffffff)
[  204.636679][ T9712] exFAT-fs (loop4): Filesystem has been set read-only
[  204.640608][ T9712] exFAT-fs (loop4): failed to count the number of clusters in root
[  204.643807][ T9712] exFAT-fs (loop4): failed to recognize exfat type
[  204.737649][   T33] audit: type=1326 audit(1786547772.575:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  204.753628][   T33] audit: type=1326 audit(1786547772.575:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  204.778628][   T33] audit: type=1326 audit(1786547772.575:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  204.798259][   T33] audit: type=1326 audit(1786547772.575:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  204.814808][   T33] audit: type=1326 audit(1786547772.584:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  204.826533][   T33] audit: type=1326 audit(1786547772.584:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  204.839531][   T33] audit: type=1326 audit(1786547772.584:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  204.858543][   T33] audit: type=1326 audit(1786547772.584:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  204.878523][   T33] audit: type=1326 audit(1786547772.584:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.4.1470" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f160679e0d9 code=0x7ffc0000
[  205.071779][ T9727] syzkaller0: entered promiscuous mode
[  205.075110][ T9727] syzkaller0: entered allmulticast mode
[  205.114825][ T9729] loop4: detected capacity change from 0 to 2048
[  205.123785][ T9729] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.742371][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'.
[  205.826671][ T9767] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  205.960025][ T9777] loop0: detected capacity change from 0 to 1024
[  205.976758][ T9777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  205.989417][ T9777] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.015864][ T3159] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  206.066443][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  206.177889][ T5716] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  206.201732][ T3159] usb 3-1: unable to get BOS descriptor or descriptor too short
[  206.205098][ T3159] usb 3-1: not running at top speed; connect to a high speed hub
[  206.207935][ T3159] usb 3-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb
[  206.212639][ T3159] usb 3-1: config 13 has an invalid interface number: 102 but max is 0
[  206.215497][ T3159] usb 3-1: config 13 has no interface number 0
[  206.219716][ T3159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.224116][ T3159] usb 3-1: Product: syz
[  206.225552][ T3159] usb 3-1: Manufacturer: syz
[  206.227258][ T3159] usb 3-1: SerialNumber: syz
[  206.302461][ T9781] loop0: detected capacity change from 0 to 32768
[  206.332231][ T9781] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.345006][ T9781] XFS (loop0): Ending clean mount
[  206.349700][ T9781] XFS (loop0): Quotacheck needed: Please wait.
[  206.372990][ T5716] usb 5-1: Using ep0 maxpacket: 16
[  206.390252][ T5716] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  206.392844][ T9781] XFS (loop0): Quotacheck: Done.
[  206.394652][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.407425][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.410621][ T5716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  206.414819][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.427453][ T5716] usb 5-1: config 0 descriptor??
[  206.465373][ T3159] cdc_phonet 3-1:13.102: probe with driver cdc_phonet failed with error -22
[  206.478822][ T3159] usb 3-1: USB disconnect, device number 17
[  206.549561][   T33] audit: type=1800 audit(1786547774.245:75): pid=9781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1501" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0
[  206.659499][ T5603] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.908023][ T5716] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input7
[  206.983633][ T9798] loop0: detected capacity change from 0 to 128
[  207.100043][ T5603] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  207.144665][ T5603] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  207.204156][ T9802] block2mtd: error: cannot open device 
[  207.312349][ T5716] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  207.333589][ T5716] usb 5-1: USB disconnect, device number 6
[  207.749373][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  207.758291][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  207.771001][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  207.776754][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  207.783347][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  208.510304][   T13] bridge_slave_0: left allmulticast mode
[  208.512699][   T13] bridge_slave_0: left promiscuous mode
[  208.516239][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.764533][ T9849] netlink: 'syz.4.1524': attribute type 1 has an invalid length.
[  209.038133][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.047866][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.054572][   T13] bond0 (unregistering): Released all slaves
[  209.084068][ T5347] 8021q: adding VLAN 0 to HW filter on device eth9
[  209.167108][   T13] tipc: Left network mode
[  209.524926][ T9860] loop2: detected capacity change from 0 to 32768
[  209.567377][ T9860] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  209.585965][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.613283][ T9860] XFS (loop2): Ending clean mount
[  209.619261][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.707360][ T5602] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  210.049650][ T5614] Bluetooth: hci1: command tx timeout
[  210.259935][ T9884] loop2: detected capacity change from 0 to 32768
[  210.289714][ T9884] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  210.289714][ T9884] 
[  210.299408][ T9884] xtLookup: xtSearch returned -5
[  210.305266][ T9884] free_index: error reading directory table
[  210.390302][ T5347] 8021q: adding VLAN 0 to HW filter on device eth10
[  210.465115][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.489903][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.492888][ T9810] bridge_slave_0: entered allmulticast mode
[  210.524878][ T3159] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  210.528744][ T9810] bridge_slave_0: entered promiscuous mode
[  210.539775][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.545740][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.548589][ T9810] bridge_slave_1: entered allmulticast mode
[  210.557478][ T9810] bridge_slave_1: entered promiscuous mode
[  210.672184][ T9810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.690293][ T9810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.720180][ T3159] usb 5-1: Using ep0 maxpacket: 8
[  210.725214][ T3159] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  210.734266][ T3159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.741005][ T3159] usb 5-1: Product: syz
[  210.743134][ T3159] usb 5-1: Manufacturer: syz
[  210.744690][ T3159] usb 5-1: SerialNumber: syz
[  210.751805][ T9901] loop2: detected capacity change from 0 to 512
[  210.755942][ T3159] usb 5-1: config 0 descriptor??
[  210.761805][ T3159] gspca_main: se401-2.14.0 probing 047d:5003
[  210.776240][   T13] IPVS: stop unused estimator thread 0...
[  210.786074][ T9901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.795251][ T9810] team0: Port device team_slave_0 added
[  210.809774][ T9810] team0: Port device team_slave_1 added
[  210.815250][ T9901] ext4 filesystem being mounted at /607/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.843203][ T5347] 8021q: adding VLAN 0 to HW filter on device eth11
[  210.867214][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.870695][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.878864][ T9810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.885559][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.889264][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.898379][ T9810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.913097][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.008298][ T9810] hsr_slave_0: entered promiscuous mode
[  211.012216][ T9810] hsr_slave_1: entered promiscuous mode
[  211.014958][ T9810] debugfs: 'hsr0' already exists in 'hsr'
[  211.022181][ T9810] Cannot create hsr debugfs directory
[  211.176762][ T5347] 8021q: adding VLAN 0 to HW filter on device eth12
[  211.206241][ T3159] gspca_se401: ExtraFeatures: 255
[  211.349278][ T9925] loop2: detected capacity change from 0 to 1024
[  211.391702][ T9925] hfsplus: bad catalog entry type
[  211.427097][ T9810] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  211.437657][ T3159] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  211.451549][ T9810] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  211.464446][ T9810] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  211.486820][ T9810] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  211.502265][ T9810] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  211.535687][ T3159] usb 5-1: USB disconnect, device number 7
[  211.537315][ T9810] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  211.690202][ T9810] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  211.720852][ T9810] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  211.885846][ T9810] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.921009][ T9810] 8021q: adding VLAN 0 to HW filter on device team0
[  211.935781][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.938376][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.952085][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.954974][ T6294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.225372][ T3159] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  212.290288][ T5614] Bluetooth: hci1: command tx timeout
[  212.399978][ T9810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.440511][ T3159] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91
[  212.449863][ T3159] usb 3-1: config 0 has an invalid interface number: 252 but max is 0
[  212.459697][ T3159] usb 3-1: config 0 has no interface number 0
[  212.476182][ T3159] usb 3-1: config 0 interface 252 has no altsetting 0
[  212.502853][ T3159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.508706][ T3159] usb 3-1: Product: syz
[  212.510571][ T3159] usb 3-1: Manufacturer: syz
[  212.512538][ T3159] usb 3-1: SerialNumber: syz
[  212.518907][ T3159] usb 3-1: config 0 descriptor??
[  212.527202][ T9975] syzkaller0: entered promiscuous mode
[  212.533263][ T9975] syzkaller0: entered allmulticast mode
[  212.649977][ T9810] veth0_vlan: entered promiscuous mode
[  212.674144][ T9810] veth1_vlan: entered promiscuous mode
[  212.718883][ T9810] veth0_macvtap: entered promiscuous mode
[  212.744637][ T9810] veth1_macvtap: entered promiscuous mode
[  212.776844][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.793850][ T3159] usb 3-1: USB disconnect, device number 18
[  212.802542][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.843178][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.853297][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.937224][ T5477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.949181][ T5477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.166783][ T9987] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  213.183719][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.199869][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.270855][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.273679][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.467771][T10000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1565'.
[  213.490867][T10000] bridge0: port 3(syz_tun) entered disabled state
[  213.495275][T10000] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.535139][T10000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1565'.
[  213.690768][T10014] loop5: detected capacity change from 0 to 4096
[  213.704918][T10014] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  213.788803][T10019] loop4: detected capacity change from 0 to 512
[  213.803302][T10019] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  214.145646][T10045] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  214.145646][T10045] The task syz.5.1583 (10045) triggered the difference, watch for misbehavior.
[  214.544821][ T5614] Bluetooth: hci1: command tx timeout
[  214.595802][T10059] loop4: detected capacity change from 0 to 32768
[  214.678683][T10061] loop2: detected capacity change from 0 to 2048
[  214.693734][T10061] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  214.724164][T10066] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.820808][T10068] loop4: detected capacity change from 0 to 4096
[  214.839396][T10068] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  214.887714][T10068] ntfs3(loop4): ino=19, mi_enum_attr
[  214.891825][T10068] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  214.894965][T10068] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  215.234010][T10086] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  215.270853][T10088] CIFS: Attempting to mount //127.0.0.1/test
[  215.717566][T10103] loop5: detected capacity change from 0 to 4096
[  215.725617][T10103] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  215.968135][T10099] loop2: detected capacity change from 0 to 131072
[  215.972246][T10099] F2FS-fs (loop2): invalid crc value
[  216.000113][T10103] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  216.014730][T10099] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  216.020870][T10099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  216.171505][T10088] CIFS: VFS: cifs_mount failed w/return code = -112
[  216.600918][T10120] loop2: detected capacity change from 0 to 1024
[  216.626289][T10111] loop4: detected capacity change from 0 to 40427
[  216.641776][T10111] F2FS-fs (loop4): build fault injection rate: 19
[  216.652173][T10111] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  216.661667][T10111] F2FS-fs (loop4): invalid crc value
[  216.697907][T10111] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  216.791814][T10111] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  216.800277][ T5614] Bluetooth: hci1: command tx timeout
[  216.811979][T10111] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  216.826944][T10111] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  216.846242][T10131] loop2: detected capacity change from 0 to 2048
[  216.848921][T10131] EXT4-fs: Ignoring removed i_version option
[  216.869770][T10131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.875357][T10111] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  216.875412][T10131] ext4 filesystem being mounted at /634/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.984939][T10111] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x519/0xfd0
[  217.054299][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.095332][   T33] audit: type=1326 audit(1786547783.980:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.131553][   T33] audit: type=1326 audit(1786547783.980:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.151333][   T33] audit: type=1326 audit(1786547783.980:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.159570][   T33] audit: type=1326 audit(1786547783.980:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.167394][   T33] audit: type=1326 audit(1786547783.980:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.175884][   T33] audit: type=1326 audit(1786547783.980:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.185413][   T33] audit: type=1326 audit(1786547783.980:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.193973][   T33] audit: type=1326 audit(1786547783.980:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.201235][   T33] audit: type=1326 audit(1786547783.980:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.209642][   T33] audit: type=1326 audit(1786547783.980:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3eb9e0d9 code=0x7ffc0000
[  217.778647][T10163] loop5: detected capacity change from 0 to 8
[  217.869865][T10153] loop2: detected capacity change from 0 to 32768
[  217.891502][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1638'.
[  217.895090][T10153] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.897497][T10175] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1638'.
[  217.949222][T10153] XFS (loop2): Ending clean mount
[  217.982928][T10153] XFS (loop2): Quotacheck needed: Please wait.
[  218.044518][T10153] XFS (loop2): Quotacheck: Done.
[  218.116027][ T5602] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.324358][T10193] binder: BC_ACQUIRE_RESULT not supported
[  218.327584][T10193] binder: 10192:10193 ioctl c0306201 200000000100 returned -22
[  218.375204][T10195] loop5: detected capacity change from 0 to 64
[  218.381592][T10195] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop5
[  218.419197][T10197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1643'.
[  218.499684][T10199] loop5: detected capacity change from 0 to 2048
[  218.539842][T10199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.544633][T10201] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0)
[  218.813165][T10208] loop4: detected capacity change from 0 to 1024
[  218.832014][T10208] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  218.862569][T10208] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.1648: lblock 1 mapped to illegal pblock 1 (length 1)
[  218.895083][T10208] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  218.896271][T10208] EXT4-fs (loop4): Remounting filesystem read-only
[  218.902721][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  218.902742][    C0] EXT4-fs (loop4): initial error at time 1786547785: ext4_map_blocks:833: inode 3: block 1
[  218.902773][    C0] EXT4-fs (loop4): last error at time 1786547785: ext4_map_blocks:833: inode 3: block 1
[  218.953499][T10214] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  218.972718][T10208] EXT4-fs (loop4): 1 orphan inode deleted
[  218.984637][T10208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.075511][ T9123] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.673545][ T3159] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  219.858519][ T3159] usb 5-1: unable to get BOS descriptor or descriptor too short
[  219.875074][ T3159] usb 5-1: not running at top speed; connect to a high speed hub
[  219.883982][ T3159] usb 5-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=49.7c
[  219.898471][ T3159] usb 5-1: config 5 has an invalid interface number: 51 but max is 0
[  219.914358][ T3159] usb 5-1: config 5 has no interface number 0
[  219.929634][ T3159] usb 5-1: config 5 interface 51 has no altsetting 0
[  219.962954][ T3159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.974913][ T3159] usb 5-1: Product: syz
[  219.979954][ T3159] usb 5-1: Manufacturer: syz
[  219.983820][ T3159] usb 5-1: SerialNumber: syz
[  220.007314][T10247] ip6t_REJECT: ECHOREPLY is not supported
[  220.059398][T10249] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  220.078030][T10249] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  220.209193][T10255] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1669'.
[  220.238352][T10257] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  220.265186][ T3159] safe_serial 5-1:5.51: safe_serial converter detected
[  220.274272][ T3159] usb 5-1: safe_serial converter now attached to ttyUSB0
[  220.279227][ T3159] usb 5-1: USB disconnect, device number 8
[  220.283901][ T3159] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  220.288991][ T3159] safe_serial 5-1:5.51: device disconnected
[  220.481615][T10251] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.1667'.
[  220.618665][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1674'.
[  220.683051][T10268] Trying to free block not in datazone
[  220.721686][T10268] Trying to free block not in datazone
[  220.832922][T10272] SQUASHFS error: lzo decompression failed, data probably corrupt
[  220.835927][T10272] SQUASHFS error: Failed to read block 0x91: -5
[  220.838198][T10272] SQUASHFS error: Unable to read metadata cache entry [8f]
[  220.841520][T10272] SQUASHFS error: Unable to read inode 0x11f
[  221.039915][T10284] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  221.081935][T10286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1684'.
[  221.248282][T10295] bond1: Removing last arp target with arp_interval on
[  221.271495][T10295] 8021q: adding VLAN 0 to HW filter on device bond1
[  221.507804][T10315] set_capacity_and_notify: 4 callbacks suppressed
[  221.507823][T10315] loop2: detected capacity change from 0 to 4096
[  221.518185][T10315] EXT4-fs (loop2): Test dummy encryption mode enabled
[  221.547194][T10315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.550496][T10319] loop4: detected capacity change from 0 to 8
[  221.809494][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.080877][T10335] loop2: detected capacity change from 0 to 512
[  222.098830][T10335] EXT4-fs: Ignoring removed orlov option
[  222.104333][T10335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  222.116495][T10335] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #16: comm syz.2.1703: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  222.131494][T10335] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  222.142052][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  222.147346][    C0] EXT4-fs (loop2): initial error at time 1786547788: ext4_ext_check_inode:521: inode 16
[  222.150659][    C0] EXT4-fs (loop2): last error at time 1786547788: ext4_ext_check_inode:521: inode 16
[  222.188337][T10335] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1703: couldn't read orphan inode 16 (err -117)
[  222.203721][T10335] loop2: lost filesystem error report for type 5 error -117
[  222.204143][T10335] EXT4-fs (loop2): 1 orphan inode deleted
[  222.210155][T10335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.291325][T10335] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  222.348013][T10335] overlayfs: failed to verify upper root origin
[  222.377390][T10343] tipc: Started in network mode
[  222.383253][T10343] tipc: Node identity 0010000000000000002, cluster identity 1
[  222.386535][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.578390][T10328] loop4: detected capacity change from 0 to 32768
[  222.670522][T10328] JBD2: Ignoring recovery information on journal
[  222.724321][T10328] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  222.981316][ T9123] ocfs2: Unmounting device (7,4) on (node local)
[  223.238258][ T3159] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  223.421755][ T3159] usb 6-1: Using ep0 maxpacket: 16
[  223.426976][ T3159] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  223.434371][ T3159] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  223.446941][ T3159] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  223.461103][ T3159] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  223.479621][ T3159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  223.491052][ T3159] usb 6-1: SerialNumber: syz
[  223.525495][T10363] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  223.664937][T10376] loop4: detected capacity change from 0 to 32768
[  223.775891][ T3159] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12
[  223.803667][ T3159] usb 6-1: USB disconnect, device number 2
[  224.184339][T10396] loop4: detected capacity change from 0 to 4096
[  224.257325][T10396] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  224.436675][T10404] loop2: detected capacity change from 0 to 128
[  224.492012][T10404] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  224.523301][T10404] ext4 filesystem being mounted at /677/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  224.556543][ T5602] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.701884][T10413] loop2: detected capacity change from 0 to 512
[  224.719128][T10413] EXT4-fs: Ignoring removed nobh option
[  224.740191][T10413] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #3: comm syz.2.1730: corrupted inode contents
[  224.750702][T10413] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  224.751247][T10413] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #3: comm syz.2.1730: mark_inode_dirty error
[  224.754183][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  224.754197][    C0] EXT4-fs (loop2): initial error at time 1786547791: ext4_do_update_inode:5742: inode 3
[  224.754211][    C0] EXT4-fs (loop2): last error at time 1786547791: ext4_do_update_inode:5742: inode 3
[  224.788110][ T5669] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  224.812508][T10413] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  224.825016][T10413] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #3: comm syz.2.1730: corrupted inode contents
[  224.853939][T10413] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  224.854439][T10413] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.1730: mark_inode_dirty error
[  224.890794][T10413] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  224.892271][T10413] __quota_error: 35 callbacks suppressed
[  224.892284][T10413] Quota error (device loop2): write_blk: dquota write failed
[  224.922279][T10413] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  224.935844][T10413] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1730: Failed to acquire dquot type 0
[  224.948169][T10413] loop2: lost filesystem error report for type 5 error -117
[  224.962356][ T5669] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  224.987621][ T5669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.994518][ T5669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.005898][T10413] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1730: corrupted inode contents
[  225.012839][T10413] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.012995][ T5669] usb 6-1: config 0 descriptor??
[  225.037761][T10413] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.1730: mark_inode_dirty error
[  225.045154][T10413] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.051208][T10413] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1730: corrupted inode contents
[  225.060291][T10413] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.060721][T10413] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1730: mark_inode_dirty error
[  225.075014][T10413] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.084140][T10413] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1730: corrupted inode contents
[  225.100583][T10413] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.101061][T10413] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  225.108294][T10413] loop2: lost filesystem error report for type 5 error -117
[  225.108737][T10413] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1730: corrupted inode contents
[  225.120267][T10413] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.120738][T10413] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.1730: mark_inode_dirty error
[  225.137108][T10413] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  225.153554][T10413] loop2: lost filesystem error report for type 5 error -117
[  225.154918][T10413] EXT4-fs (loop2): 1 truncate cleaned up
[  225.161986][T10413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.168518][T10413] ext4 filesystem being mounted at /678/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.220804][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.312598][ T5669] usbhid 6-1:0.0: can't add hid device: -71
[  225.314546][ T5669] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  225.340795][ T5669] usb 6-1: USB disconnect, device number 3
[  225.891948][ T5669] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  225.921880][T10447] syzkaller0: entered promiscuous mode
[  225.923717][T10447] syzkaller0: entered allmulticast mode
[  226.077337][ T5669] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  226.111047][ T5669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.133491][ T5669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.162730][ T5669] usb 6-1: config 0 descriptor??
[  226.552440][T10475] loop4: detected capacity change from 0 to 64
[  226.835952][T10485] vivid-000: disconnect
[  226.843030][T10484] vivid-000: reconnect
[  226.894715][T10483] loop4: detected capacity change from 0 to 4096
[  226.940694][T10487] netlink: 'syz.2.1764': attribute type 2 has an invalid length.
[  226.993032][T10483] Cannot load nls macromanian˃O0x0000000000000000
[  227.076945][ T5669] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[  227.093697][ T5669] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input9
[  227.229287][T10492] nbd: couldn't find device at index 524288
[  227.327201][T10494] tipc: Failed to remove unknown binding: 66,0,0/0:1625072210/1625072211
[  227.346286][T10494] tipc: Failed to remove unknown binding: 66,0,0/0:1625072210/1625072211
[  227.563032][ T5662] usb 6-1: USB disconnect, device number 4
[  227.563148][    C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  227.600893][T10500] loop4: detected capacity change from 0 to 8
[  227.615033][T10500] SQUASHFS error: zlib decompression failed, data probably corrupt
[  227.623038][T10500] SQUASHFS error: Failed to read block 0x9b: -5
[  227.630146][T10500] SQUASHFS error: Unable to read metadata cache entry [99]
[  227.634469][T10500] SQUASHFS error: Unable to read inode 0x127
[  227.818035][T10496] loop2: detected capacity change from 0 to 32768
[  227.841245][T10496] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.878107][T10496] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  227.897453][T10496] XFS (loop2): Starting recovery (logdev: internal)
[  227.947604][T10496] XFS (loop2): Ending recovery (logdev: internal)
[  227.975886][T10496] XFS (loop2): Quotacheck needed: Please wait.
[  228.080590][T10496] XFS (loop2): Quotacheck: Done.
[  228.113886][ T5602] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  229.002821][ T5662] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  229.009604][T10534] loop5: detected capacity change from 0 to 32768
[  229.179590][ T5662] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  229.200730][ T5662] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  229.207040][ T5662] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  229.227786][ T5662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.240434][ T5662] usb 3-1: Product: syz
[  229.241848][ T5662] usb 3-1: Manufacturer: syz
[  229.243747][ T5662] usb 3-1: SerialNumber: syz
[  229.250114][T10530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  229.262500][T10530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  229.274238][ T5662] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  229.299584][T10538] loop4: detected capacity change from 0 to 2048
[  229.390813][T10538]  loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22
[  230.583368][ T5662] mos7840 3-1:1.0: probe with driver mos7840 failed with error -71
[  230.729981][ T5662] usb 3-1: USB disconnect, device number 19
[  231.254085][T10552] loop5: detected capacity change from 0 to 1024
[  231.264341][T10552] EXT4-fs: Ignoring removed orlov option
[  231.313708][T10552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.445645][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.778258][ T5662] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  231.962813][ T5662] usb 6-1: Using ep0 maxpacket: 16
[  231.970815][ T5662] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  231.985851][ T5662] usb 6-1: config 0 has no interfaces?
[  231.995172][ T5662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.007385][ T5662] usb 6-1: config 0 descriptor??
[  232.068138][ T5616] udevd[5616]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  232.088439][ T5875] udevd[5875]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  232.151994][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  232.158442][T10567] udevd[10567]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory
[  232.166391][ T5605] udevd[5605]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  232.171433][ T6366] udevd[6366]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  232.178850][T10568] udevd[10568]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory
[  232.191274][T10570] udevd[10570]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory
[  232.205094][T10572] udevd[10572]: inotify_add_watch(7, /dev/loop4p13, 10) failed: No such file or directory
[  232.213530][T10571] udevd[10571]: inotify_add_watch(7, /dev/loop4p12, 10) failed: No such file or directory
[  232.265842][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.343468][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.672716][T10599] loop2: detected capacity change from 0 to 32768
[  234.852948][ T5669] usb 6-1: USB disconnect, device number 5
[  235.504331][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1815'.
[  235.671484][T10608] loop4: detected capacity change from 0 to 32768
[  235.889792][T10626] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1817'.
[  236.456224][T10645] xt_ecn: cannot match TCP bits for non-tcp packets
[  237.532286][T10677] loop5: detected capacity change from 0 to 2048
[  237.563015][T10677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.605104][ T5685] Process accounting resumed
[  237.662650][ T6299] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  237.671252][T10683] loop4: detected capacity change from 0 to 2048
[  237.708870][ T6299] EXT4-fs (loop5): Remounting filesystem read-only
[  237.754061][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.773879][T10683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.824277][T10689] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  237.931170][ T9123] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.954216][  T802] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  238.129231][  T802] usb 3-1: Using ep0 maxpacket: 8
[  238.138969][  T802] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  238.166141][  T802] usb 3-1: config 0 has an invalid interface number: 4 but max is 0
[  238.179142][  T802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.192421][  T802] usb 3-1: config 0 has no interface number 0
[  238.198621][  T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.214616][T10704] loop4: detected capacity change from 0 to 8
[  238.230657][  T802] usb 3-1: config 0 descriptor??
[  238.266029][  T802] hub 3-1:0.4: bad descriptor, ignoring hub
[  238.284265][  T802] hub 3-1:0.4: probe with driver hub failed with error -5
[  238.291136][  T802] sierra 3-1:0.4: Sierra USB modem converter detected
[  238.507875][  T802] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  238.518536][ T5662] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  238.547552][  T802] usb 3-1: USB disconnect, device number 20
[  238.584163][  T802] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  238.605432][  T802] sierra 3-1:0.4: device disconnected
[  238.680221][ T5662] usb 5-1: Using ep0 maxpacket: 32
[  238.683682][ T5662] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  238.689202][ T5662] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.694378][ T5662] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.700686][ T5662] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  238.708550][ T5662] usb 5-1: Product: syz
[  238.710472][ T5662] usb 5-1: Manufacturer: syz
[  238.727680][ T5662] hub 5-1:4.0: USB hub found
[  238.861996][T10708] loop5: detected capacity change from 0 to 256
[  238.967830][ T5662] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  239.236954][T10717] loop5: detected capacity change from 0 to 1024
[  239.240756][T10717] EXT4-fs: quotafile must be on filesystem root
[  239.325494][ T5685] usb 5-1: USB disconnect, device number 9
[  239.608335][T10722] loop2: detected capacity change from 0 to 32768
[  239.711773][T10722] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  239.819602][T10722] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  239.847368][T10722] XFS (loop2): Starting recovery (logdev: internal)
[  239.886157][T10722] XFS (loop2): Ending recovery (logdev: internal)
[  239.919394][ T5602] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  240.206041][ T5685] kernel read not supported for file /mdstat (pid: 5685 comm: kworker/1:5)
[  240.689053][T10747] loop5: detected capacity change from 0 to 128
[  240.767377][T10747] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  240.850046][ T9810] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  242.672148][T10740] loop2: detected capacity change from 0 to 40427
[  242.817658][T10740] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  242.835350][T10740] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  243.491781][ T5685] kernel read not supported for file /vcsa (pid: 5685 comm: kworker/1:5)
[  243.616290][T10775] loop2: detected capacity change from 0 to 512
[  243.628932][T10775] EXT4-fs: Ignoring removed oldalloc option
[  243.646799][T10775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  243.674851][T10775] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #11: comm syz.2.1873: corrupted in-inode xattr: invalid ea_ino
[  243.696275][T10775] fserror_report: 1 callbacks suppressed
[  243.696285][T10775] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  243.708816][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  243.714144][    C1] EXT4-fs (loop2): initial error at time 1786547808: ext4_iget_extra_inode:5180: inode 11
[  243.717362][    C1] EXT4-fs (loop2): last error at time 1786547808: ext4_iget_extra_inode:5180: inode 11
[  243.728910][T10775] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1873: couldn't read orphan inode 11 (err -117)
[  243.740338][T10775] loop2: lost filesystem error report for type 5 error -117
[  243.742812][T10775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.032073][T10786] loop4: detected capacity change from 0 to 512
[  244.035213][ T5685] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  244.057599][T10786] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1877: inode has both inline data and extents flags
[  244.090761][T10786] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  244.092459][T10786] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1877: couldn't read orphan inode 15 (err -117)
[  244.099506][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  244.099518][    C1] EXT4-fs (loop4): initial error at time 1786547808: ext4_orphan_get:1399: inode 15
[  244.099537][    C1] EXT4-fs (loop4): last error at time 1786547808: ext4_orphan_get:1399: inode 15
[  244.114601][T10786] loop4: lost filesystem error report for type 5 error -117
[  244.115531][T10786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.213400][ T5685] usb 3-1: Using ep0 maxpacket: 32
[  244.226412][ T5685] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=fe.8f
[  244.235520][ T5685] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  244.238420][ T5685] usb 3-1: config 0 has no interface number 0
[  244.241711][ T5685] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  244.249422][ T5685] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  244.259190][ T5685] usb 3-1: config 0 interface 48 has no altsetting 0
[  244.309388][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.312177][ T5685] usb 3-1: Product: syz
[  244.313671][ T5685] usb 3-1: Manufacturer: syz
[  244.315239][ T5685] usb 3-1: SerialNumber: syz
[  244.319920][ T5685] usb 3-1: config 0 descriptor??
[  244.513434][ T9123] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.578919][ T5685] usb 3-1: USB disconnect, device number 21
[  244.955378][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'.
[  245.175806][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.333810][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'.
[  245.872257][ T3159] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  246.126557][ T3159] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  246.131512][ T3159] usb 5-1: config 0 has no interfaces?
[  246.133958][ T3159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.142454][ T3159] usb 5-1: config 0 descriptor??
[  246.377840][  T802] usb 5-1: USB disconnect, device number 10
[  246.749530][T10752] Set syz0 is full, maxelem 65536 reached
[  246.792733][ T3159] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  247.046891][ T3159] usb 3-1: Using ep0 maxpacket: 16
[  247.050928][ T3159] usb 3-1: unable to get BOS descriptor or descriptor too short
[  247.054488][ T3159] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=da.36
[  247.059538][ T3159] usb 3-1: config 5 has an invalid interface number: 49 but max is 0
[  247.067711][ T3159] usb 3-1: config 5 has no interface number 0
[  247.072981][ T3159] usb 3-1: config 5 interface 49 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  247.086962][ T3159] usb 3-1: config 5 interface 49 has no altsetting 0
[  247.103691][ T3159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.119521][ T3159] usb 3-1: Product: syz
[  247.120865][ T3159] usb 3-1: Manufacturer: syz
[  247.127519][ T3159] usb 3-1: SerialNumber: syz
[  247.181794][T10837] tmpfs: Bad value for 'mpol'
[  247.398110][ T3159] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.49/input/input10
[  247.441616][ T5035] bcm5974 3-1:5.49: could not read from device
[  247.467345][ T5035] bcm5974 3-1:5.49: could not read from device
[  247.473458][ T3159] usb 3-1: USB disconnect, device number 22
[  247.483970][ T5035] bcm5974 3-1:5.49: could not read from device
[  248.550478][T10850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1904'.
[  249.618539][T10858] loop5: detected capacity change from 0 to 512
[  249.631990][T10858] EXT4-fs: Ignoring removed i_version option
[  249.688633][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1909'.
[  249.707343][T10858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.726164][T10858] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.850867][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.196470][T10880] xt_HMARK: spi-set and port-set can't be combined
[  250.291023][T10878] xt_CT: You must specify a L4 protocol and not use inversions on it
[  250.580411][ T3159] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  250.754800][ T3159] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  250.764870][ T3159] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  250.767837][ T3159] usb 3-1: Product: syz
[  250.769801][ T3159] usb 3-1: SerialNumber: syz
[  250.777658][ T3159] usb 3-1: config 0 descriptor??
[  250.783677][ T3159] hso 3-1:0.0: Not our interface
[  251.017914][ T5669] usb 3-1: USB disconnect, device number 23
[  251.599017][T10908] loop4: detected capacity change from 0 to 8
[  251.687608][T10908] SQUASHFS error: Unable to read inode 0xa7
[  252.756183][T10910] loop2: detected capacity change from 0 to 40427
[  252.766560][T10910] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[  253.093791][T10921] loop5: detected capacity change from 0 to 512
[  253.112810][T10921] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1936: inode has both inline data and extents flags
[  253.128514][T10921] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  253.129765][T10921] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1936: couldn't read orphan inode 15 (err -117)
[  253.137846][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  253.139896][    C1] EXT4-fs (loop5): initial error at time 1786547817: ext4_orphan_get:1399: inode 15
[  253.142905][    C1] EXT4-fs (loop5): last error at time 1786547817: ext4_orphan_get:1399: inode 15
[  253.166905][T10921] loop5: lost filesystem error report for type 5 error -117
[  253.176932][T10921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.191288][T10927] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  253.297925][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.001489][T10958] VFS: file-max limit 0 reached
[  254.287874][   T33] audit: type=1326 audit(1786547818.286:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.5.1957" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f3eb9e0d9 code=0x0
[  254.434239][T10973] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  255.237918][T11008] loop4: detected capacity change from 0 to 512
[  255.271815][T11008] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1972: inode has both inline data and extents flags
[  255.297320][T11008] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  255.297646][T11008] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1972: couldn't read orphan inode 15 (err -117)
[  255.305513][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  255.305554][    C1] EXT4-fs (loop4): initial error at time 1786547819: ext4_orphan_get:1399: inode 15
[  255.305576][    C1] EXT4-fs (loop4): last error at time 1786547819: ext4_orphan_get:1399: inode 15
[  255.380603][T11008] loop4: lost filesystem error report for type 5 error -117
[  255.391802][T11008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.625713][ T9123] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.917033][T11036] loop2: detected capacity change from 0 to 512
[  255.924806][T11036] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  255.941368][T11034] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1984'.
[  255.948701][T11036] EXT4-fs (loop2): 1 truncate cleaned up
[  255.954017][T11036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.966837][T11036] EXT4-fs error (device loop2): ext4_empty_dir:3101: inode #2: block 13: comm syz.2.1985: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1
[  255.986842][T11036] EXT4-fs (loop2): Remounting filesystem read-only
[  255.989781][T11036] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #2: comm syz.2.1985: directory missing '..'
[  256.021515][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.443709][ T5716] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  256.621363][ T5716] usb 5-1: Using ep0 maxpacket: 32
[  256.625873][ T5716] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  256.647657][ T5716] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  256.655720][ T5716] usb 5-1: config 0 has no interface number 0
[  256.662931][ T5716] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  256.678917][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.686007][ T5716] usb 5-1: Product: syz
[  256.687356][ T5716] usb 5-1: Manufacturer: syz
[  256.690047][ T5716] usb 5-1: SerialNumber: syz
[  256.708504][ T5716] usb 5-1: config 0 descriptor??
[  256.729780][ T5716] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  256.740363][ T5716] em28xx 5-1:0.132: Video interface 132 found:
[  256.816196][T11055] loop5: detected capacity change from 0 to 4096
[  256.873028][T11055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.961255][T11055] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  256.971534][T11063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1996'.
[  256.975027][T11055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  256.985856][T11055] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring
[  256.996802][T11055] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  257.030324][T11055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  257.038330][T11055] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  257.086041][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.247737][ T5716] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  257.388869][   T33] audit: type=1326 audit(1786547821.155:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11074 comm="syz.2.2002" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7a99e0d9 code=0x0
[  257.405997][T11076] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2003'.
[  257.520482][T11079] netlink: 'syz.2.2005': attribute type 2 has an invalid length.
[  257.697453][ T5716] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0)
[  257.708409][ T5716] em28xx 5-1:0.132: board has no eeprom
[  257.982179][ T5716] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  257.987066][ T5716] em28xx 5-1:0.132: analog set to bulk mode.
[  257.991840][ T5662] em28xx 5-1:0.132: Registering V4L2 extension
[  258.021765][ T5716] usb 5-1: USB disconnect, device number 11
[  258.038180][ T5716] em28xx 5-1:0.132: Disconnecting em28xx
[  258.042213][T11085] loop2: detected capacity change from 0 to 32768
[  258.117452][ T5662] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  258.122707][ T5662] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  258.128156][ T5662] em28xx 5-1:0.132: No AC97 audio processor
[  258.146720][ T5662] usb 5-1: Decoder not found
[  258.148680][ T5662] em28xx 5-1:0.132: failed to create media graph
[  258.151408][ T5662] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  258.169024][ T5662] em28xx 5-1:0.132: Remote control support is not available for this card.
[  258.174759][ T5716] em28xx 5-1:0.132: Closing input extension
[  258.215097][ T5716] em28xx 5-1:0.132: Freeing device
[  258.281557][   T33] audit: type=1800 audit(1786547821.949:121): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2006" name="file1" dev="loop2" ino=7 res=0 errno=0
[  258.340398][   T33] audit: type=1800 audit(1786547822.023:122): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2006" name="file1" dev="loop2" ino=7 res=0 errno=0
[  258.726788][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2012'.
[  258.993124][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2014'.
[  259.188926][T11105] loop5: detected capacity change from 0 to 512
[  259.209312][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'.
[  259.212488][T11105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  259.306934][T11105] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.2015: corrupted xattr entries
[  259.345552][T11105] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  259.348320][    C0] EXT4-fs (loop5): initial error at time 1786547822: xattr_find_entry:337: inode 15
[  259.353937][    C0] EXT4-fs (loop5): last error at time 1786547822: xattr_find_entry:337: inode 15
[  259.362076][T11105] EXT4-fs (loop5): Remounting filesystem read-only
[  259.364236][T11105] EXT4-fs (loop5): 1 truncate cleaned up
[  259.377656][T11110] loop4: detected capacity change from 0 to 4096
[  259.385533][T11105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.391562][T11110] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  259.480611][T11110] ntfs3(loop4): ino=18, mi_enum_attr
[  259.482810][T11110] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  259.496402][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.173198][ T5669] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  260.181431][T11145] loop2: detected capacity change from 0 to 512
[  260.190704][T11145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  260.208603][T11145] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2032: bg 0: block 393: padding at end of block bitmap is not set
[  260.214358][T11145] loop2: lost filesystem error report for type 5 error -117
[  260.215606][    C1] EXT4-fs (loop2): initial error at time 1786547823: ext4_validate_block_bitmap:441
[  260.220953][    C1] EXT4-fs (loop2): last error at time 1786547823: ext4_validate_block_bitmap:441
[  260.225021][T11145] EXT4-fs (loop2): Remounting filesystem read-only
[  260.228222][T11145] EXT4-fs (loop2): 2 truncates cleaned up
[  260.231516][T11145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.241403][T11145] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  260.259684][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.356489][ T5669] usb 6-1: Using ep0 maxpacket: 16
[  260.363721][ T5669] usb 6-1: New USB device found, idVendor=056a, idProduct=08b1, bcdDevice= 0.00
[  260.377820][ T5669] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.389086][ T5669] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.404174][ T5669] usb 6-1: config 0 interface 0 has no altsetting 0
[  260.408675][ T5669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.424369][ T5669] usb 6-1: config 0 descriptor??
[  260.888254][ T5669] wacom 0003:056A:08B1.000A: unknown main item tag 0x6
[  260.898134][ T5669] wacom 0003:056A:08B1.000A: ignoring exceeding usage max
[  260.901645][ T5669] wacom 0003:056A:08B1.000A: Unknown device_type for 'HID 056a:08b1'. Ignoring.
[  261.103308][ T5716] usb 6-1: USB disconnect, device number 6
[  261.236213][T11160] loop2: detected capacity change from 0 to 4096
[  261.242806][T11160] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  261.479209][T11168] comedi comedi1: unsupported base address 0x184
[  261.537877][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'.
[  261.559780][T11173] 9pnet_fd: p9_fd_create_tcp (11173): problem connecting socket to 127.0.0.1
[  261.624786][   T33] audit: type=1800 audit(1786547825.058:123): pid=11175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2044" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  261.726356][T11177] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  261.738198][T11177] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  262.093351][T11169] syz_tun (unregistering): left allmulticast mode
[  262.103359][T11169] syz_tun (unregistering): left promiscuous mode
[  262.110656][T11169] bridge0: port 3(syz_tun) entered disabled state
[  262.332635][T11199] loop2: detected capacity change from 0 to 512
[  262.359708][T11199] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  262.381458][T11203] loop4: detected capacity change from 0 to 164
[  262.397173][T11203] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  262.405591][T11199] EXT4-fs (loop2): orphan cleanup on readonly fs
[  262.414702][T11199] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  262.446541][T11199] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  262.453674][T11199] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2056: bad orphan inode 768
[  262.457996][T11203] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  262.465067][T11199] loop2: lost filesystem error report for type 5 error -117
[  262.466233][T11199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  262.525172][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.931123][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2065'.
[  262.937745][ T5662] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  263.108496][ T5662] usb 3-1: Using ep0 maxpacket: 16
[  263.115725][ T5662] usb 3-1: unable to get BOS descriptor or descriptor too short
[  263.127440][ T5662] usb 3-1: New USB device found, idVendor=07aa, idProduct=9601, bcdDevice=89.4c
[  263.135065][ T5662] usb 3-1: config 121 has an invalid interface number: 127 but max is 1
[  263.140029][ T5662] usb 3-1: config 121 has an invalid interface number: 127 but max is 1
[  263.145565][T11223] netlink: 'syz.4.2067': attribute type 29 has an invalid length.
[  263.148084][ T5662] usb 3-1: config 121 has 1 interface, different from the descriptor's value: 2
[  263.155191][ T5662] usb 3-1: config 121 has no interface number 0
[  263.159188][ T5662] usb 3-1: config 121 interface 127 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64
[  263.168923][ T5662] usb 3-1: config 121 interface 127 has no altsetting 0
[  263.181424][ T5662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.189743][ T5662] usb 3-1: Product: syz
[  263.196304][ T5662] usb 3-1: Manufacturer: syz
[  263.203370][ T5662] usb 3-1: SerialNumber: syz
[  263.475137][ T5662] dm9601 3-1:121.127: probe with driver dm9601 failed with error -22
[  263.493595][ T5662] usb 3-1: USB disconnect, device number 24
[  263.699615][T11244] netlink: 'syz.5.2077': attribute type 1 has an invalid length.
[  263.752694][ T5614] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  263.758228][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: kworker/u11:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.758263][ T5614] Tainted: [L]=SOFTLOCKUP
[  263.758267][ T5614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.758275][ T5614] Workqueue: hci1 hci_rx_work
[  263.758295][ T5614] Call Trace:
[  263.758300][ T5614]  <TASK>
[  263.758305][ T5614]  dump_stack_lvl+0xe8/0x150
[  263.758324][ T5614]  sysfs_create_dir_ns+0x271/0x2a0
[  263.758340][ T5614]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  263.758353][ T5614]  ? do_raw_spin_unlock+0x4d/0x210
[  263.758366][ T5614]  kobject_add_internal+0x622/0xcd0
[  263.758379][ T5614]  kobject_add+0x163/0x240
[  263.758394][ T5614]  ? __pfx_kobject_add+0x10/0x10
[  263.758409][ T5614]  ? get_device_parent+0x366/0x3a0
[  263.758421][ T5614]  device_add+0x3fa/0xb80
[  263.758431][ T5614]  hci_conn_add_sysfs+0xd5/0x210
[  263.758443][ T5614]  le_conn_complete_evt+0xfef/0x1580
[  263.758459][ T5614]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  263.758469][ T5614]  ? __mutex_unlock_slowpath+0x731/0x900
[  263.758484][ T5614]  ? skb_pull_data+0xf0/0x200
[  263.758496][ T5614]  hci_le_enh_conn_complete_evt+0x189/0x490
[  263.758511][ T5614]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  263.758527][ T5614]  hci_event_packet+0x67a/0xf10
[  263.758542][ T5614]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  263.758554][ T5614]  ? __pfx_hci_event_packet+0x10/0x10
[  263.758567][ T5614]  ? audit_tree_freeing_mark+0x8d0/0xb20
[  263.758578][ T5614]  ? hci_send_to_monitor+0xe2/0x590
[  263.758589][ T5614]  hci_rx_work+0x3ee/0x1020
[  263.758603][ T5614]  ? process_scheduled_works+0xa20/0x14e0
[  263.758613][ T5614]  process_scheduled_works+0xa8e/0x14e0
[  263.758634][ T5614]  ? __pfx_process_scheduled_works+0x10/0x10
[  263.758645][ T5614]  ? assign_work+0x3cf/0x5d0
[  263.758656][ T5614]  worker_thread+0xa47/0xfb0
[  263.758671][ T5614]  ? __kthread_parkme+0x71/0x1f0
[  263.758685][ T5614]  kthread+0x388/0x470
[  263.758696][ T5614]  ? __pfx_worker_thread+0x10/0x10
[  263.758710][ T5614]  ? __pfx_kthread+0x10/0x10
[  263.758731][ T5614]  ret_from_fork+0x514/0xb70
[  263.758781][ T5614]  ? __pfx_ret_from_fork+0x10/0x10
[  263.758802][ T5614]  ? __switch_to+0xc89/0x1420
[  263.758823][ T5614]  ? __pfx_kthread+0x10/0x10
[  263.758839][ T5614]  ret_from_fork_asm+0x1a/0x30
[  263.758870][ T5614]  </TASK>
[  263.846072][ T5614] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  263.851808][ T5614] Bluetooth: hci1: failed to register connection device
[  264.186239][T11252] loop2: detected capacity change from 0 to 2048
[  264.233606][T11252] EXT4-fs (loop2): failed to initialize system zone (-117)
[  264.264753][T11252] EXT4-fs (loop2): mount failed
[  264.390554][T11250] loop4: detected capacity change from 0 to 32768
[  264.425574][T11250] JBD2: Ignoring recovery information on journal
[  264.499239][T11250] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  264.624640][ T9123] ocfs2: Unmounting device (7,4) on (node local)
[  264.982229][T11272] loop5: detected capacity change from 0 to 736
[  265.473167][ T3159] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  265.583495][T11275] loop5: detected capacity change from 0 to 32768
[  265.586896][T11281] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0
[  265.627121][T11275] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  265.655412][ T3159] usb 5-1: Using ep0 maxpacket: 32
[  265.665686][ T3159] usb 5-1: unable to get BOS descriptor or descriptor too short
[  265.678176][ T3159] usb 5-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40
[  265.683721][T11275] XFS (loop5): Ending clean mount
[  265.697119][ T3159] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.713438][ T3159] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.720859][ T3159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.725037][ T3159] usb 5-1: Product: syz
[  265.726371][ T3159] usb 5-1: Manufacturer: syz
[  265.727900][ T3159] usb 5-1: SerialNumber: syz
[  265.739734][ T3159] snd_usb_podhd 5-1:1.0: Line 6 POD HD500 found
[  265.741671][ T3159] usb 5-1: selecting invalid altsetting 1
[  265.744825][ T3159] snd_usb_podhd 5-1:1.0: set_interface failed
[  265.747555][ T3159] snd_usb_podhd 5-1:1.0: Line 6 POD HD500 now disconnected
[  265.750092][ T3159] snd_usb_podhd 5-1:1.0: probe with driver snd_usb_podhd failed with error -22
[  265.821009][ T9810] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  266.104297][ T3159] usb 5-1: USB disconnect, device number 12
[  266.216411][T11302] loop5: detected capacity change from 0 to 128
[  266.259784][T11302] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  266.271693][T11302] hpfs: filesystem error: improperly stopped
[  266.276275][T11302] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  266.281354][T11302] hpfs: You really don't want any checks? You are crazy...
[  266.300327][T11302] hpfs: Code page index out of array
[  266.302322][T11302] hpfs: code page support is disabled
[  266.315515][T11302] hpfs: hpfs_map_4sectors(): unaligned read
[  266.320828][T11302] hpfs: hpfs_map_4sectors(): unaligned read
[  266.322688][T11302] hpfs: filesystem error: unable to find root dir
[  266.919262][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'.
[  267.118249][T11325] loop4: detected capacity change from 0 to 4096
[  267.134001][T11325] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  267.164922][T11325] ntfs3(loop4): ino=19, mi_enum_attr
[  267.167210][T11325] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  267.533506][T11335] loop2: detected capacity change from 0 to 4096
[  267.546021][T11335] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  267.566375][T11335] ntfs3(loop2): ino=1, mi_enum_attr
[  267.568034][T11335] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  267.637476][T11335] ntfs3(loop2): Failed to load $MFTMirr (-2).
[  268.014889][T11349] loop5: detected capacity change from 0 to 2048
[  268.079891][T11349] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  268.127646][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  268.130045][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  268.657414][ T5662] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  268.747257][T11362] loop4: detected capacity change from 0 to 512
[  268.762186][T11362] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  268.789444][T11362] EXT4-fs error (device loop4): __ext4_fill_super:5600: inode #2: comm syz.4.2123: iget: special inode unallocated
[  268.806329][T11362] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  268.806750][T11362] EXT4-fs (loop4): get root inode failed
[  268.810244][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  268.810257][    C1] EXT4-fs (loop4): initial error at time 1786547831: __ext4_fill_super:5600: inode 2
[  268.810277][    C1] EXT4-fs (loop4): last error at time 1786547831: __ext4_fill_super:5600: inode 2
[  268.870831][ T5662] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00
[  268.888959][ T5662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.894244][T11362] EXT4-fs (loop4): mount failed
[  268.897899][ T5662] usb 3-1: Product: syz
[  268.903580][ T5662] usb 3-1: Manufacturer: syz
[  268.905090][ T5662] usb 3-1: SerialNumber: syz
[  268.923492][ T5662] gspca_main: spca500-2.14.0 probing 046d:0900
[  269.492631][ T5662] gspca_spca500: reg write: error -32
[  269.495321][ T5662] gspca_spca500: reg write: error -32
[  269.500047][ T5662] gspca_spca500: reg write: error -32
[  269.505416][ T5662] gspca_spca500: reg write: error -32
[  269.510129][ T5662] gspca_spca500: reg write: error -32
[  269.518163][ T5662] gspca_spca500: reg write: error -32
[  269.526727][ T5662] gspca_spca500: reg write: error -32
[  269.537122][ T5662] gspca_spca500: reg write: error -32
[  269.544172][ T5662] gspca_spca500: reg write: error -32
[  269.554903][ T5662] gspca_spca500: reg write: error -32
[  269.563106][ T5662] gspca_spca500: reg write: error -32
[  269.570350][ T5662] gspca_spca500: reg write: error -32
[  269.574550][ T5662] gspca_spca500: reg write: error -32
[  269.602774][ T5662] gspca_spca500: reg write: error -32
[  270.029986][T11383] sit1: entered promiscuous mode
[  270.322734][   T10] usb 3-1: USB disconnect, device number 25
[  270.349301][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2136'.
[  270.396721][T11394] vlan0: entered promiscuous mode
[  270.640581][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2140'.
[  271.148704][T11417] kernel profiling enabled (shift: 7)
[  271.613188][T11417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  272.165426][T11435] loop5: detected capacity change from 0 to 4096
[  272.179015][T11437] loop4: detected capacity change from 0 to 512
[  272.212695][T11435] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  272.245557][T11435] ntfs3(loop5): ino=1a, mi_enum_attr
[  272.249310][T11435] ntfs3(loop5): ino=1a, mi_enum_attr
[  272.252942][T11435] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  272.550321][T11428] ceph: No mds server is up or the cluster is laggy
[  272.819157][  T802] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  273.004651][  T802] usb 6-1: not running at top speed; connect to a high speed hub
[  273.009803][  T802] usb 6-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=b5.97
[  273.031814][  T802] usb 6-1: config 14 has an invalid interface number: 168 but max is 0
[  273.037851][  T802] usb 6-1: config 14 has no interface number 0
[  273.042951][  T802] usb 6-1: config 14 interface 168 has no altsetting 0
[  273.052739][  T802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.059562][  T802] usb 6-1: Product: syz
[  273.061236][  T802] usb 6-1: Manufacturer: syz
[  273.068011][  T802] usb 6-1: SerialNumber: syz
[  273.315064][  T802] gspca_main: sunplus-2.14.0 probing 08ca:2016
[  273.321461][  T802] gspca_sunplus: reg_w_riv err -71
[  273.328573][  T802] sunplus 6-1:14.168: probe with driver sunplus failed with error -71
[  273.356608][  T802] usb 6-1: USB disconnect, device number 7
[  274.581732][T11484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2176'.
[  274.585064][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'.
[  274.996906][T11497] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2181'.
[  275.013633][T11497] loop5: detected capacity change from 0 to 512
[  275.021997][T11497] EXT4-fs: Ignoring removed orlov option
[  275.034183][T11497] EXT4-fs: Ignoring removed nobh option
[  275.043248][   T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  275.091082][T11497] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  275.103882][T11497] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2181: invalid indirect mapped block 2683928664 (level 1)
[  275.117161][T11497] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  275.123193][T11497] EXT4-fs (loop5): 1 truncate cleaned up
[  275.128282][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  275.128301][    C1] EXT4-fs (loop5): initial error at time 1786547837: ext4_free_branches:1023: inode 13
[  275.128325][    C1] EXT4-fs (loop5): last error at time 1786547837: ext4_free_branches:1023: inode 13
[  275.139820][T11497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.179129][T11497] bridge0: port 3(syz_tun) entered blocking state
[  275.196428][T11497] bridge0: port 3(syz_tun) entered disabled state
[  275.198646][T11497] syz_tun: entered allmulticast mode
[  275.201168][T11497] syz_tun: entered promiscuous mode
[  275.203012][T11497] bridge0: port 3(syz_tun) entered blocking state
[  275.205091][T11497] bridge0: port 3(syz_tun) entered forwarding state
[  275.258398][   T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  275.271611][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.304878][   T10] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  275.328932][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.333136][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.335235][   T10] usb 3-1: Product: syz
[  275.342492][   T10] usb 3-1: Manufacturer: syz
[  275.362796][   T10] usb 3-1: SerialNumber: syz
[  275.470622][T11469] syz.4.2168 (11469): drop_caches: 2
[  275.890120][   T10] usb 3-1: unable to init card! (ret=-110)
[  275.892550][   T10] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  276.042084][T11514] sg_write: process 436 (syz.5.2188) changed security contexts after opening file descriptor, this is not allowed.
[  276.129127][   T10] usb 3-1: USB disconnect, device number 26
[  276.514886][ T5716] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  276.690391][ T5716] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  276.697690][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.727103][ T5716] usb 6-1: config 0 descriptor??
[  276.745286][ T5716] pwc: Philips SPC 900NC USB webcam detected.
[  277.396989][ T5716] pwc: send_video_command error -71
[  277.398697][ T5716] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  277.460684][ T5716] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[  277.475822][ T5716] usb 6-1: USB disconnect, device number 8
[  278.162194][ T5662] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  278.327460][ T5662] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  278.339625][ T5662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.349712][ T5662] usb 3-1: config 0 descriptor??
[  278.356122][ T5662] cp210x 3-1:0.0: cp210x converter detected
[  278.389770][ T5716] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  278.564862][ T5716] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[  278.569899][ T5716] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  278.574081][ T5716] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  278.586862][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.589948][ T5716] usb 6-1: Product: syz
[  278.591424][ T5716] usb 6-1: Manufacturer: syz
[  278.595256][ T5716] usb 6-1: SerialNumber: syz
[  278.621639][ T5716] kalmia 6-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -90
[  278.625195][ T5716] kalmia 6-1:1.0: probe with driver kalmia failed with error -90
[  278.843181][ T5716] usb 6-1: USB disconnect, device number 9
[  279.096193][ T5662] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  279.103298][ T5662] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  279.109470][ T5662] usb 3-1: cp210x converter now attached to ttyUSB0
[  279.127647][ T5662] usb 3-1: USB disconnect, device number 27
[  279.137011][ T5662] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  279.145091][ T5662] cp210x 3-1:0.0: device disconnected
[  279.586724][T11574] loop5: detected capacity change from 0 to 1024
[  279.596589][T11574] journal_path: Non-blockdev passed as './file1'
[  279.603538][T11574] EXT4-fs: error: could not find journal device path
[  279.814179][T11578] loop4: detected capacity change from 0 to 2048
[  279.877166][T11581] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.501816][T11602] trusted_key: encrypted_key: insufficient parameters specified
[  281.062140][T11599] loop4: detected capacity change from 0 to 32768
[  282.019205][T11609] vhci_hcd vhci_hcd.0: failed to lookup sock
[  282.262668][T11617] <-a
[  282.438612][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2240'.
[  282.736136][ T5662] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  282.882118][T11653] xt_hashlimit: size too large, truncated to 1048576
[  282.923968][ T5662] usb 5-1: unable to get BOS descriptor or descriptor too short
[  282.929402][ T5662] usb 5-1: not running at top speed; connect to a high speed hub
[  282.934529][ T5662] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08
[  282.944102][ T5662] usb 5-1: config 53 has an invalid interface number: 154 but max is 0
[  282.948475][ T5662] usb 5-1: config 53 has no interface number 0
[  282.952540][ T5662] usb 5-1: config 53 interface 154 has no altsetting 0
[  282.959689][ T5662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.964528][ T5662] usb 5-1: Product: syz
[  282.967062][ T5662] usb 5-1: Manufacturer: syz
[  282.970420][ T5662] usb 5-1: SerialNumber: syz
[  283.226659][ T5662] go7007 5-1:53.154: probe with driver go7007 failed with error -12
[  283.237206][ T5662] usb 5-1: USB disconnect, device number 13
[  283.978971][T11675] loop4: detected capacity change from 0 to 128
[  284.025937][ T5662] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  284.153230][  T802] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  284.190825][ T5662] usb 6-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98
[  284.196843][ T5662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.203547][ T5662] usb 6-1: config 0 descriptor??
[  284.214811][ T5662] pwc: Creative Labs Webcam 5 detected.
[  284.318918][  T802] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  284.329058][ T3159] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  284.329734][  T802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.339664][  T802] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  284.350433][  T802] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  284.354193][  T802] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  284.372219][  T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.435531][ T5662] pwc: Failed to set LED on/off time (-71)
[  284.444067][ T5662] pwc: send_video_command error -71
[  284.450199][ T5662] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  284.453688][ T5662] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[  284.462706][ T5662] usb 6-1: USB disconnect, device number 10
[  284.504542][ T3159] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  284.515241][ T3159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.518497][ T3159] usb 5-1: Product: syz
[  284.520404][ T3159] usb 5-1: Manufacturer: syz
[  284.522579][ T3159] usb 5-1: SerialNumber: syz
[  284.528357][ T3159] usb 5-1: config 0 descriptor??
[  284.632832][  T802] usb 3-1: USB disconnect, device number 28
[  284.979528][ T3159] usb 5-1: Firmware: major: 0, minor: 65, hardware type: UNKNOWN (38)
[  285.202864][ T3159] usb 5-1: failed to fetch extended address, random address set
[  285.210546][ T3159] usb 5-1: atusb_probe: initialization failed, error = -524
[  285.214084][ T3159] atusb 5-1:0.0: probe with driver atusb failed with error -524
[  285.230112][ T3159] usb 5-1: USB disconnect, device number 14
[  285.331705][T11689] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2270'.
[  285.400873][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2274'.
[  285.491718][T11699] netlink: 'syz.2.2277': attribute type 4 has an invalid length.
[  285.501504][T11699] netlink: 'syz.2.2277': attribute type 4 has an invalid length.
[  285.791930][ T3159] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  285.976180][ T3159] usb 3-1: Using ep0 maxpacket: 32
[  285.984168][ T3159] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  285.996905][ T3159] usb 3-1: config 0 has an invalid interface number: 28 but max is 0
[  286.003541][ T3159] usb 3-1: config 0 has no interface number 0
[  286.008313][ T3159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.026387][ T3159] usb 3-1: config 0 descriptor??
[  286.258515][ T3159] usb 3-1: USB disconnect, device number 29
[  286.402271][T11728] loop5: detected capacity change from 0 to 40427
[  286.410005][ T5662] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  286.418120][T11728] F2FS-fs (loop5): build fault injection rate: 174
[  286.429866][T11728] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  286.444654][T11728] F2FS-fs (loop5): invalid crc value
[  286.523853][T11728] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  286.532830][T11728] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  286.576725][ T9810] syz-executor: attempt to access beyond end of device
[  286.576725][ T9810] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  286.590643][ T9810] CPU: 1 UID: 0 PID: 9810 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  286.590697][ T9810] Tainted: [L]=SOFTLOCKUP
[  286.590704][ T9810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.590712][ T9810] Call Trace:
[  286.590718][ T9810]  <TASK>
[  286.590725][ T9810]  dump_stack_lvl+0xe8/0x150
[  286.590752][ T9810]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  286.590775][ T9810]  f2fs_write_end_io+0x124b/0x1710
[  286.590808][ T9810]  __submit_merged_bio+0x258/0x6a0
[  286.590834][ T9810]  ? rcu_is_watching+0x15/0xb0
[  286.590861][ T9810]  __submit_merged_write_cond+0x3c9/0x4e0
[  286.590884][ T9810]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  286.590916][ T9810]  f2fs_write_data_pages+0x2a27/0x36f0
[  286.590935][ T9810]  ? __lock_acquire+0x683/0x2cf0
[  286.590978][ T9810]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  286.591024][ T9810]  ? lockdep_unlock+0x5d/0xd0
[  286.591039][ T9810]  ? __lock_acquire+0x13e8/0x2cf0
[  286.591055][ T9810]  ? __pfx_hlock_conflict+0x10/0x10
[  286.591072][ T9810]  ? __bfs+0x153/0x290
[  286.591088][ T9810]  ? __pfx_hlock_conflict+0x10/0x10
[  286.591120][ T9810]  ? lockdep_unlock+0x5d/0xd0
[  286.591155][ T9810]  ? __lock_acquire+0x13e8/0x2cf0
[  286.591193][ T9810]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  286.591212][ T9810]  do_writepages+0x338/0x560
[  286.591239][ T9810]  ? do_raw_spin_unlock+0x4d/0x210
[  286.591258][ T9810]  filemap_fdatawrite+0x1e9/0x2f0
[  286.591276][ T9810]  ? __hrtimer_rearm_deferred+0x99/0x420
[  286.591294][ T9810]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  286.591340][ T9810]  ? preempt_schedule_common+0x82/0xd0
[  286.591359][ T9810]  ? preempt_schedule_thunk+0x16/0x40
[  286.591379][ T9810]  f2fs_sync_dirty_inodes+0x30e/0x830
[  286.591411][ T9810]  f2fs_write_checkpoint+0xa3d/0x2710
[  286.591428][ T9810]  ? __lock_acquire+0x683/0x2cf0
[  286.591467][ T9810]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  286.591523][ T9810]  kill_f2fs_super+0x2f6/0x700
[  286.591547][ T9810]  ? __pfx_kill_f2fs_super+0x10/0x10
[  286.591573][ T9810]  ? call_rcu+0x64b/0x8b0
[  286.591592][ T9810]  ? lockdep_hardirqs_on+0x7a/0x110
[  286.591621][ T9810]  deactivate_locked_super+0xbc/0x130
[  286.591643][ T9810]  cleanup_mnt+0x3d3/0x460
[  286.591696][ T9810]  task_work_run+0x1d9/0x270
[  286.591718][ T9810]  ? __pfx_task_work_run+0x10/0x10
[  286.591738][ T9810]  exit_to_user_mode_loop+0x1fa/0x730
[  286.591753][ T9810]  ? rcu_is_watching+0x15/0xb0
[  286.591769][ T9810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.591783][ T9810]  do_syscall_64+0x353/0x580
[  286.591800][ T9810]  ? trace_irq_disable+0x3b/0x140
[  286.591826][ T9810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.591840][ T9810] RIP: 0033:0x7f0f3eb9f317
[  286.591855][ T9810] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  286.591866][ T9810] RSP: 002b:00007ffde7f24388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  286.591880][ T9810] RAX: 0000000000000000 RBX: 00007f0f3ec34474 RCX: 00007f0f3eb9f317
[  286.591888][ T9810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde7f24440
[  286.591897][ T9810] RBP: 00007ffde7f24440 R08: 00007ffde7f25440 R09: 00000000ffffffff
[  286.591906][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde7f254d0
[  286.591914][ T9810] R13: 00007f0f3ec34474 R14: 0000000000042b75 R15: 00007ffde7f25510
[  286.591937][ T9810]  </TASK>
[  286.592086][ T9810] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  286.726498][ T5662] usb 5-1: Using ep0 maxpacket: 8
[  286.733929][ T9810] CPU: 1 UID: 0 PID: 9810 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  286.733975][ T9810] Tainted: [L]=SOFTLOCKUP
[  286.733981][ T9810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.733990][ T9810] Call Trace:
[  286.733997][ T9810]  <TASK>
[  286.734004][ T9810]  dump_stack_lvl+0xe8/0x150
[  286.734031][ T9810]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  286.734055][ T9810]  f2fs_write_end_io+0x124b/0x1710
[  286.734090][ T9810]  __submit_merged_bio+0x258/0x6a0
[  286.734107][ T9810]  ? rcu_is_watching+0x15/0xb0
[  286.734130][ T9810]  __submit_merged_write_cond+0x3c9/0x4e0
[  286.734155][ T9810]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  286.734191][ T9810]  f2fs_write_data_pages+0x2a27/0x36f0
[  286.734209][ T9810]  ? __lock_acquire+0x683/0x2cf0
[  286.734254][ T9810]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  286.734307][ T9810]  ? lockdep_unlock+0x5d/0xd0
[  286.734323][ T9810]  ? __lock_acquire+0x13e8/0x2cf0
[  286.734338][ T9810]  ? __pfx_hlock_conflict+0x10/0x10
[  286.734357][ T9810]  ? __bfs+0x153/0x290
[  286.734374][ T9810]  ? __pfx_hlock_conflict+0x10/0x10
[  286.734406][ T9810]  ? lockdep_unlock+0x5d/0xd0
[  286.734421][ T9810]  ? __lock_acquire+0x13e8/0x2cf0
[  286.734457][ T9810]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  286.734477][ T9810]  do_writepages+0x338/0x560
[  286.734505][ T9810]  ? do_raw_spin_unlock+0x4d/0x210
[  286.734524][ T9810]  filemap_fdatawrite+0x1e9/0x2f0
[  286.734542][ T9810]  ? __hrtimer_rearm_deferred+0x99/0x420
[  286.734559][ T9810]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  286.734607][ T9810]  ? preempt_schedule_common+0x82/0xd0
[  286.734634][ T9810]  ? preempt_schedule_thunk+0x16/0x40
[  286.734686][ T9810]  f2fs_sync_dirty_inodes+0x30e/0x830
[  286.734719][ T9810]  f2fs_write_checkpoint+0xa3d/0x2710
[  286.734738][ T9810]  ? __lock_acquire+0x683/0x2cf0
[  286.734780][ T9810]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  286.734843][ T9810]  kill_f2fs_super+0x2f6/0x700
[  286.734868][ T9810]  ? __pfx_kill_f2fs_super+0x10/0x10
[  286.734897][ T9810]  ? call_rcu+0x64b/0x8b0
[  286.734917][ T9810]  ? lockdep_hardirqs_on+0x7a/0x110
[  286.734947][ T9810]  deactivate_locked_super+0xbc/0x130
[  286.734970][ T9810]  cleanup_mnt+0x3d3/0x460
[  286.734992][ T9810]  task_work_run+0x1d9/0x270
[  286.735015][ T9810]  ? __pfx_task_work_run+0x10/0x10
[  286.735043][ T9810]  exit_to_user_mode_loop+0x1fa/0x730
[  286.735061][ T9810]  ? rcu_is_watching+0x15/0xb0
[  286.735082][ T9810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.735098][ T9810]  do_syscall_64+0x353/0x580
[  286.735115][ T9810]  ? trace_irq_disable+0x3b/0x140
[  286.735137][ T9810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.735150][ T9810] RIP: 0033:0x7f0f3eb9f317
[  286.735166][ T9810] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  286.735178][ T9810] RSP: 002b:00007ffde7f24388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  286.735194][ T9810] RAX: 0000000000000000 RBX: 00007f0f3ec34474 RCX: 00007f0f3eb9f317
[  286.735203][ T9810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde7f24440
[  286.735212][ T9810] RBP: 00007ffde7f24440 R08: 00007ffde7f25440 R09: 00000000ffffffff
[  286.735221][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde7f254d0
[  286.735231][ T9810] R13: 00007f0f3ec34474 R14: 0000000000042b75 R15: 00007ffde7f25510
[  286.735255][ T9810]  </TASK>
[  286.870429][ T5662] usb 5-1: unable to get BOS descriptor or descriptor too short
[  286.873573][ T5662] usb 5-1: New USB device found, idVendor=182d, idProduct=0269, bcdDevice=ef.45
[  286.878917][ T5662] usb 5-1: config 195 has an invalid interface number: 255 but max is 2
[  286.881832][ T5662] usb 5-1: config 195 has an invalid descriptor of length 0, skipping remainder of the config
[  286.885284][ T5662] usb 5-1: config 195 has 1 interface, different from the descriptor's value: 3
[  286.888789][ T5662] usb 5-1: config 195 has no interface number 0
[  286.891138][ T5662] usb 5-1: config 195 interface 255 altsetting 4 endpoint 0xC has invalid wMaxPacketSize 0
[  286.894273][ T5662] usb 5-1: config 195 interface 255 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  286.899087][ T5662] usb 5-1: config 195 interface 255 has no altsetting 0
[  286.907121][ T5662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.910230][ T5662] usb 5-1: Product: syz
[  286.911568][ T5662] usb 5-1: Manufacturer: syz
[  286.913178][ T5662] usb 5-1: SerialNumber: syz
[  286.927277][ T9810] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  287.143526][ T5662] sisusb 5-1:195.255: Invalid USB2VGA device
[  287.145985][ T5662] sisusb 5-1:195.255: probe with driver sisusb failed with error -22
[  287.156371][ T5662] usb 5-1: USB disconnect, device number 15
[  287.188218][T11735] netlink: 'syz.2.2292': attribute type 2 has an invalid length.
[  288.119400][T11766] loop5: detected capacity change from 0 to 4096
[  288.194598][T11766] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  288.224914][T11766] ntfs3(loop5): ino=1a, mi_enum_attr
[  288.229227][T11766] ntfs3(loop5): ino=1a, mi_enum_attr
[  288.233319][T11766] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  288.545695][T11781] loop4: detected capacity change from 0 to 4096
[  288.574665][T11781] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  288.587168][T11781] ntfs3(loop4): Failed to load $Extend (-22).
[  288.594662][T11781] ntfs3(loop4): Failed to initialize $Extend.
[  288.675255][ T5662] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  288.733621][T11779] loop5: detected capacity change from 0 to 32768
[  288.744005][T11779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2310 (11779)
[  288.848419][T11779] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  288.863552][ T5662] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  288.868688][T11779] BTRFS info (device loop5): using crc32c checksum algorithm
[  288.879584][ T5662] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.895615][ T5662] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  288.909371][ T5662] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  288.926076][ T5662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.199453][T11779] BTRFS info (device loop5): enabling ssd optimizations
[  289.206766][T11779] BTRFS info (device loop5): turning on flush-on-commit
[  289.218422][T11779] BTRFS info (device loop5): enabling free space tree
[  289.226626][T11779] BTRFS info (device loop5): enabling auto defrag
[  289.242854][ T5662] cxacru 3-1:1.0: receive of cm 0x90 failed (-71)
[  289.261444][T11779] BTRFS info (device loop5): use lzo compression, level 1
[  289.267567][ T5662] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  289.275466][T11779] BTRFS info (device loop5): max_inline set to 4096
[  289.302959][   T33] audit: type=1807 audit(1786547850.589:124): action=measure func=FILE_CHECK UNKNOWN=obj_ res=0
[  289.311654][ T5662] cxacru 3-1:1.0: probe with driver cxacru failed with error -22
[  289.334169][   T33] audit: type=1802 audit(1786547850.626:125): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.2314" res=0 errno=0
[  289.353457][ T5662] usb 3-1: USB disconnect, device number 30
[  289.365052][T11803] ima: policy update failed
[  289.370851][   T33] audit: type=1802 audit(1786547850.663:126): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2314" res=0 errno=0
[  289.483148][T11806] loop4: detected capacity change from 0 to 256
[  289.622314][ T9810] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  290.034181][T11821] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2316'.
[  290.051882][T11821] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2316'.
[  290.066758][T11821] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2316'.
[  290.072278][T11821] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2316'.
[  290.426216][T11829] loop5: detected capacity change from 0 to 40427
[  290.442569][T11829] F2FS-fs (loop5): invalid crc value
[  290.486748][T11829] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  290.496700][T11829] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  290.499382][T11829] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  290.503151][T11829] F2FS-fs (loop5): Start checkpoint disabled!
[  290.514642][T11829] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  290.519132][T11829] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  290.535124][T11829] syz.5.2326: attempt to access beyond end of device
[  290.535124][T11829] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  290.542849][T11829] syz.5.2326: attempt to access beyond end of device
[  290.542849][T11829] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  290.548485][T11829] syz.5.2326: attempt to access beyond end of device
[  290.548485][T11829] loop5: rw=2049, sector=77824, nr_sectors = 8 limit=40427
[  290.553474][T11829] syz.5.2326: attempt to access beyond end of device
[  290.553474][T11829] loop5: rw=2049, sector=77832, nr_sectors = 8 limit=40427
[  290.557721][T11829] syz.5.2326: attempt to access beyond end of device
[  290.557721][T11829] loop5: rw=2049, sector=77840, nr_sectors = 8 limit=40427
[  290.562096][T11829] syz.5.2326: attempt to access beyond end of device
[  290.562096][T11829] loop5: rw=2049, sector=77848, nr_sectors = 8 limit=40427
[  290.566876][T11829] syz.5.2326: attempt to access beyond end of device
[  290.566876][T11829] loop5: rw=2049, sector=77856, nr_sectors = 8 limit=40427
[  290.571703][T11829] syz.5.2326: attempt to access beyond end of device
[  290.571703][T11829] loop5: rw=2049, sector=77864, nr_sectors = 8 limit=40427
[  290.575916][T11829] syz.5.2326: attempt to access beyond end of device
[  290.575916][T11829] loop5: rw=2049, sector=77872, nr_sectors = 8 limit=40427
[  290.637345][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  290.637362][   T36] Tainted: [L]=SOFTLOCKUP
[  290.637366][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.637371][   T36] Workqueue: writeback wb_workfn (flush-7:5)
[  290.637386][   T36] Call Trace:
[  290.637390][   T36]  <TASK>
[  290.637394][   T36]  dump_stack_lvl+0xe8/0x150
[  290.637409][   T36]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  290.637421][   T36]  f2fs_write_end_io+0x124b/0x1710
[  290.637441][   T36]  __submit_merged_bio+0x258/0x6a0
[  290.637449][   T36]  ? rcu_is_watching+0x15/0xb0
[  290.637465][   T36]  __submit_merged_write_cond+0x3c9/0x4e0
[  290.637477][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  290.637496][   T36]  f2fs_write_data_pages+0x2a27/0x36f0
[  290.637521][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  290.637537][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  290.637563][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  290.637579][   T36]  ? __lock_acquire+0x683/0x2cf0
[  290.637597][   T36]  ? set_raw_inline+0x28b/0x390
[  290.637605][   T36]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  290.637620][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  290.637630][   T36]  do_writepages+0x338/0x560
[  290.637644][   T36]  ? reacquire_held_locks+0x104/0x190
[  290.637655][   T36]  ? writeback_sb_inodes+0x450/0x1b00
[  290.637668][   T36]  __writeback_single_inode+0x12e/0xf90
[  290.637681][   T36]  writeback_sb_inodes+0x9de/0x1b00
[  290.637689][   T36]  ? __lock_acquire+0x683/0x2cf0
[  290.637709][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  290.637736][   T36]  ? rcu_is_watching+0x15/0xb0
[  290.637748][   T36]  ? queue_io+0x2d3/0x470
[  290.637777][   T36]  wb_writeback+0x41c/0xad0
[  290.637788][   T36]  ? queue_io+0x291/0x470
[  290.637800][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  290.637808][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  290.637823][   T36]  wb_workfn+0x431/0x10f0
[  290.637838][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  290.637845][   T36]  ? rcu_is_watching+0x15/0xb0
[  290.637856][   T36]  ? trace_hrtimer_start+0x82/0x200
[  290.637870][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  290.637879][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  290.637888][   T36]  ? process_scheduled_works+0xa20/0x14e0
[  290.637897][   T36]  ? process_scheduled_works+0xa20/0x14e0
[  290.637908][   T36]  ? rcu_is_watching+0x15/0xb0
[  290.637920][   T36]  ? process_scheduled_works+0xa20/0x14e0
[  290.637928][   T36]  process_scheduled_works+0xa8e/0x14e0
[  290.637948][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  290.637959][   T36]  ? assign_work+0x3cf/0x5d0
[  290.637970][   T36]  worker_thread+0xa47/0xfb0
[  290.637990][   T36]  kthread+0x388/0x470
[  290.638000][   T36]  ? __pfx_worker_thread+0x10/0x10
[  290.638008][   T36]  ? __pfx_kthread+0x10/0x10
[  290.638019][   T36]  ret_from_fork+0x514/0xb70
[  290.638032][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  290.638043][   T36]  ? __switch_to+0xc89/0x1420
[  290.638053][   T36]  ? __pfx_kthread+0x10/0x10
[  290.638064][   T36]  ret_from_fork_asm+0x1a/0x30
[  290.638082][   T36]  </TASK>
[  290.638119][   T36] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  290.761054][ T3159] loop5: lost filesystem error report for type 5 error -108
[  291.258046][T11858] xt_hashlimit: size too large, truncated to 1048576
[  291.357983][T11862] bond0: (slave macvlan2): Opening slave failed
[  291.614551][T11854] loop5: detected capacity change from 0 to 32768
[  292.094623][T11891] CIFS: VFS: UNC: path must begin with // or \\
[  292.102625][T11891] Malformed UNC in devname
[  292.102625][T11891] 
[  292.108336][T11891] CIFS: VFS: Malformed UNC in devname
[  292.206869][T11895] loop4: detected capacity change from 0 to 512
[  292.225027][T11895] EXT4-fs (loop4): bad s_want_extra_isize: 65312
[  292.321380][T11897] FAULT_INJECTION: forcing a failure.
[  292.321380][T11897] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  292.345457][T11897] CPU: 1 UID: 0 PID: 11897 Comm: syz.5.2355 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  292.345475][T11897] Tainted: [L]=SOFTLOCKUP
[  292.345478][T11897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.345484][T11897] Call Trace:
[  292.345489][T11897]  <TASK>
[  292.345493][T11897]  dump_stack_lvl+0xe8/0x150
[  292.345511][T11897]  should_fail_ex+0x40c/0x560
[  292.345526][T11897]  prepare_alloc_pages+0x230/0x650
[  292.345543][T11897]  __alloc_frozen_pages_noprof+0x12f/0x380
[  292.345557][T11897]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  292.345572][T11897]  ? __pfx_policy_nodemask+0x10/0x10
[  292.345592][T11897]  alloc_pages_mpol+0x212/0x380
[  292.345607][T11897]  folio_alloc_mpol_noprof+0x39/0x160
[  292.345621][T11897]  shmem_alloc_and_add_folio+0x43e/0xf60
[  292.345630][T11897]  ? filemap_get_entry+0xcd/0x3f0
[  292.345642][T11897]  ? __pfx_filemap_get_entry+0x10/0x10
[  292.345650][T11897]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  292.345659][T11897]  ? shmem_allowable_huge_orders+0x325/0x6c0
[  292.345691][T11897]  shmem_get_folio_gfp+0x5da/0x16d0
[  292.345712][T11897]  shmem_fallocate+0x962/0xeb0
[  292.345730][T11897]  ? __pfx_shmem_fallocate+0x10/0x10
[  292.345741][T11897]  ? vfs_fallocate+0x5e0/0x7e0
[  292.345759][T11897]  vfs_fallocate+0x65a/0x7e0
[  292.345767][T11897]  ? __fget_files+0x2a/0x420
[  292.345780][T11897]  ? __pfx_vfs_fallocate+0x10/0x10
[  292.345795][T11897]  __x64_sys_fallocate+0xbf/0x110
[  292.345803][T11897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.345812][T11897]  do_syscall_64+0x174/0x580
[  292.345826][T11897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.345835][T11897] RIP: 0033:0x7f0f3eb9e0d9
[  292.345845][T11897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.345853][T11897] RSP: 002b:00007f0f3fb45028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  292.345863][T11897] RAX: ffffffffffffffda RBX: 00007f0f3ee25fa0 RCX: 00007f0f3eb9e0d9
[  292.345870][T11897] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004
[  292.345875][T11897] RBP: 00007f0f3ec35024 R08: 0000000000000000 R09: 0000000000000000
[  292.345879][T11897] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000000
[  292.345884][T11897] R13: 00007f0f3ee26038 R14: 00007f0f3ee25fa0 R15: 00007ffde7f25118
[  292.345897][T11897]  </TASK>
[  293.214479][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'.
[  293.437851][T11920] loop4: detected capacity change from 0 to 4096
[  293.501291][T11920] NILFS (loop4): invalid segment: Checksum error in segment payload
[  293.512415][T11920] NILFS (loop4): trying rollback from an earlier position
[  293.540012][T11920] NILFS (loop4): recovery complete
[  293.556160][T11921] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.601178][T11920] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 4098 already freed
[  293.679170][T11920] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  293.805647][T11927] loop4: detected capacity change from 0 to 8192
[  293.821064][T11923] loop5: detected capacity change from 0 to 32768
[  293.825334][T11923] btrfs: Deprecated parameter 'usebackuproot'
[  293.827304][T11923] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  293.834971][T11923] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2366 (11923)
[  293.846526][T11923] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  293.850076][T11923] BTRFS info (device loop5): using crc32c checksum algorithm
[  293.852315][T11923] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  293.922935][   T75] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  293.981524][T11923] BTRFS error (device loop5): failed to load root extent
[  293.984284][T11923] BTRFS warning (device loop5): try to load backup roots slot 1
[  293.989874][   T75] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  294.006910][T11923] BTRFS warning (device loop5): couldn't read tree root
[  294.009792][T11923] BTRFS warning (device loop5): try to load backup roots slot 2
[  294.014301][  T287] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  294.028689][T11923] BTRFS warning (device loop5): couldn't read tree root
[  294.031433][T11923] BTRFS warning (device loop5): try to load backup roots slot 3
[  294.046644][T11923] BTRFS info (device loop5): rebuilding free space tree
[  294.109703][T11923] BTRFS info (device loop5): disabling free space tree
[  294.112348][T11923] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  294.116944][T11923] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  294.133679][T11923] BTRFS info (device loop5): checking UUID tree
[  294.142338][T11923] BTRFS info (device loop5): enabling ssd optimizations
[  294.144381][T11923] BTRFS info (device loop5): turning on async discard
[  294.146402][T11923] BTRFS info (device loop5): enabling disk space caching
[  294.150093][T11923] BTRFS info (device loop5): force clearing of disk cache
[  294.152355][T11923] BTRFS info (device loop5): trying to use backup root at mount time
[  294.155239][T11923] BTRFS info (device loop5): use zstd compression, level 3
[  294.158082][T11923] BTRFS info (device loop5): max_inline set to 4096
[  294.202964][ T5669] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  294.238732][ T9810] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  294.378274][ T5669] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  294.389244][ T5669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  294.393990][ T5669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  294.403251][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.406100][ T5669] usb 3-1: Product: syz
[  294.429591][ T5669] usb 3-1: Manufacturer: syz
[  294.431153][ T5669] usb 3-1: SerialNumber: syz
[  294.782217][ T5669] usb 3-1: config 0 descriptor??
[  294.784601][T11942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  294.795778][    C0] port100 3-1:0.0: NFC: Urb failure (status -71)
[  294.816732][ T5669] port100 3-1:0.0: NFC: Could not get supported command types
[  295.057583][ T5716] usb 3-1: USB disconnect, device number 31
[  297.172515][    T9] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  299.775299][    T9] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  320.327288][ T5607] Bluetooth: hci2: command 0x040f tx timeout
[  322.575465][ T5614] Bluetooth: hci2: command 0x040f tx timeout
[  324.829612][ T5614] Bluetooth: hci2: command 0x040f tx timeout
[  327.083837][ T5614] Bluetooth: hci2: command 0x040f tx timeout
[  334.720717][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  334.723311][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  342.516904][ T5614] Bluetooth: hci1: command 0x0406 tx timeout
[  401.303524][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  401.308074][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  467.893695][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  467.895966][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  534.476191][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  534.480242][ T1372] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
15:18:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000058598 RBX=ffff888121023c80 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000058598 RDI=0000000000000838 RBP=ffffc90000147b70 RSP=ffffc90000147ab0
R8 =ffffffff81b3fb45 R9 =0000000000080000 R10=0000000000000000 R11=ffffffff8174d530
R12=0000000000058598 R13=dffffc0000000000 R14=000000001000812f R15=0000000000000020
RIP=ffffffff8175fdd9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d954000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f606c869866 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000555592950d08
XMM02=0001800308100002 8004140800048e08 XMM03=0800019003740800 0188030180c08008
XMM04=013810000180040a 0800048e08000100 XMM05=000008060a0172f2 08080001b0030008
XMM06=0001a8031de00800 01a0037408000198 XMM07=0340800800019003 7408000188030180
XMM08=6502000100000000 1001ffffffffffff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000027c965 RBX=ffffffff819b4450 RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8e228b3b RDI=ffffffff8c4bbe80 RBP=ffffc90000197f10 RSP=ffffc90000197e40
R8 =ffff88823c6338db R9 =1ffff110478c671b R10=dffffc0000000000 R11=ffffed10478c671c
R12=0000000000000000 R13=1ffff1102c09e000 R14=1ffff92000032fd0 R15=dffffc0000000000
RIP=ffffffff8bd0b18f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f54000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005635c66b0c48 CR3=00000001bd7e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000555592950d08
XMM02=0001800308100002 8004140800048e08 XMM03=0800019003740800 0188030180c08008
XMM04=013810000180040a 0800048e08000100 XMM05=000008060a0172f2 08080001b0030008
XMM06=0001a8031de00800 01a0037408000198 XMM07=0340800800019003 7408000188030180
XMM08=6502000100000000 1001ffffffffffff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
