last executing test programs:

4.056325254s ago: executing program 3 (id=685):
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setopts(0x4200, r0, 0x6, 0x17)

3.807160355s ago: executing program 3 (id=688):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000000c0)={[{@nossd_spread}, {}, {@flushoncommit}, {@max_inline={'max_inline', 0x3d, [0x25, 0x38]}}, {@nodatasum}, {@discard}, {@datasum}, {@discard_sync}]}, 0x1, 0x50f3, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)

2.678406954s ago: executing program 0 (id=698):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1})

2.580353578s ago: executing program 1 (id=700):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004000, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$eJzs28tO1FAcx/Ffy8x0wPtt40YTTXTjFIdJRnbyAL6AOzIUQixixA3EhLLxPXwMd76JWxeS6BPU9MZYpJ1ecFrk+0mG+dP0d86Zhv9wShgBuLRuhl8NGeqGle/7hw8lvX4lqZMb7c1lgQD+Gd+Imj5L7+zD/fwUgIth4efZx63MBv+SFCbvAsBFdry2EO4DvhrSt18fJz/iR7fg/uF4zZSCIbzo+yTfk/qF8kdG+Hy/M80GD0vpAQwvY//yOco/UTq/WHT98fxLp/JLs4LBLVPgyAyfnj5K569IuirpmqTrkm7E91q3JN1ORpB3Mv/GqfnvFVw/UEfw0zdIHSnUtun8IOcEKz8fdM/mtussl5p1qhvnn5fIPP6j7sX5YcX5k/xKxbwV5weTXXcj86yXFUcH8pl/9X85M/s/y+74pKzT/50K/Q8gsrd/8GbddZ335QuzUqqVRb/+1ahbHDZ+Ec67SC5qcKTje5qd+lRprgfxPC14ySWKxXYsI7to6A0JwNzYH3be2Xv7B8+2d9a3nC3n7XC0+mK0MhyNV+3Nsess23V25wDabPpLXyryN/P8fwkCAAAAAAAAAAAAAABNuCPpbtOLAAAAADAX5/OZoe8TKfucpl8jAAAAAAAAAAAAAAAAAAAA8L/4HQAA//+UhDYo")
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

2.500475351s ago: executing program 3 (id=701):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x10c, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xe0, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_ctinfo={0xd0, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0xa1, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.316275009s ago: executing program 0 (id=702):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00')
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg(r1, &(0x7f000000eb80)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="9e", 0x1}], 0x1}}], 0x1, 0xc010)
close_range(r0, 0xffffffffffffffff, 0x0)

2.31552135s ago: executing program 1 (id=703):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xffffffff, 0x0, 0x10000})
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0)

2.149490706s ago: executing program 0 (id=704):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0xce, '\x00', 0x4, 0x4})

2.07298704s ago: executing program 1 (id=705):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000005580)='./file0\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@jqfmt_vfsold}]}, 0x1, 0x3d4, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x0)
pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="2fae16d725b177266d0eceb1df4098e3532c49bfea528bfd8b4a74aff0a29776a89fce5f747646acf16d48dd92b3efe460fee179fd6171273c278396a002efd1abae1f65cbc119aae24fd9509a8044b72e04", 0x52}, {&(0x7f0000000180)="c174fb6a9a92b118b8b9e9251de7fb1b3618fc5d3da996f0ec1afcc0b7ff2e15d06d35dc37a4a5ab8537f52b4b1bcaad136adab49718de042c1225c8f1d1b7a334547a4ee93c6b6b5bf947316e68beab852e0dbd2028cd1bbd3f6256b3c7defc0897c235583a822c8145dd093b2c7eca44e4f13b9f53fd8054b15fa208ff76fe11bed9b1287c750b38888f7ec4ad40ef8475bd0e3b092db60e", 0x99}, {&(0x7f0000000cc0)="21c73b7bc7934f3198309ed4c4f7ffaaa51d4ed1db8656f83717f6e53643bfeffe7ca915a568ef2a884fcdc6c6782449d0eedcdb0a15dbfce834cf183afb448104fcef91c82196dffebe3fee6543d5aa267b8652bb3bf92346f6c5b60923bb9202805a001ebff42ae5ef621a46db2d1d713cfeaf1106730b395761539a18008ca68bb0a5c36689503e9a470f4e59492ad62e4a41ff510f9d9b9639420060b550a25b551e6d5f93322f01f3d3df415b5641615036b57f2b440bdd1ab487fb350f7782ea0d2f8b66b2d3b04fb5225614e7565213d3c2fa286c9d1ae15dfebe1a51a602e285249a3d9666d9e52df3eb60d1e90e3c23316d0f34c739aa8d13fe85185579ccb77141e38e82a08d25530d53c37000770c66abb7ee86187d4cfdf6520ed46ed71be93f8159947a58d8af9a34ee16d6226ec29fe20b0b60e410c4dfef4a72295ffd2d309db0b02e4d25c714a14037b1f567ed848a25595d26ce92ef14f200a35631d595b0d62fb411ab255c5269a9daa60b77452d02f996cfa2b2292e59673026513a0f92be7fe94703eb11c1a05a05ff26ec6f57f6991b2cfbff32ba470c502babb3278d372132363c31d20c6470082616381841e20c7f9b7318967060e921fb11abb1eac5d6bdf5d26e712152f6729d20252be9a35b69a03bd01f16cbe68568e441f7d6601143c56694f4e9666d71b0f6f0ff4ed4af44dd114019b352a3a1b17178acbbf97032a506875b2ff380132552e57eff04b650bb4b65b663068a4ffc7fa429e00f280945fe91da008d3b53391c00db7b20ac92faad8a0f3d3dee8dd4332c9b510b87816b1d99535eb3f8b218e473eb3ed8badde55c245d1bc307732dbdfb3cb62256f732eac6929aba104f7431b82b8ee8ed259947efe54c50e553f04c73666fb552c75d951ad673ff48430b3166160c7af24f0281ff2f93c69d4a97c848834f56b5d80a923ed4dce0c393a2e6e6ac4bd42ee7e9405fec650fe4ca0845d52c4327d26e9ae24e45b3e19ce8d10c181fbc241d381190eb6efdc7dea6186186ae7b283da379ee95194aedf930c66835509572f64b85c6c74a458cc1c38f1e5583317ed5a217bc539c70f5b3f3d866f0a3f0c7d68be72d01bc6aa6756b2054de4b30d2b40506dda1799eba599e22bf79cc967e2a096643bdac2ca78f1dd85db73d72e1f992c0ee99eae0264b2ab006a03cd01844310e7f1b1e6bb32dc4698a255779c1784802396977218bc37e7f9468b22a3c3bd3442fe118a06f28e76a5e713a84226346fe48e224d4622708c1b2eb56727b1636d721750a21e528a741396103c7bca94074ca96a16fcb7792b2844dd2a8a8b4dba79c8153c7dd8419c5777c97837a883f930e9cb1560eea8bd6808a022f3cbea1114d0c7d9e1a11c3390c1caade3c0d653cfca1ac0f57cddecd05d0dea514446a9e78214f61563d25dc7a90c388b7a52d87b799d4aeb594e7d9c73697663efe71163052c3fc5a16af048317da68c784cb5d559e230e6019138c467fc7ee8c3b5441d6fdb745843fc28263b6502ca7c1f070fb38a6129a183f13c95c06122126d6a400084c3d83c8fc9c28b25c35414bea3895da4b12ecc652174e08245b3012349368efcd7eacdac0fe24bd49c2524580d2d60ae1a6dcc261046a3aed5a31b55ef489571f61c2f0fc3cee4d3d62f9fc81537174d3be1a98418bb425a0dc81998e9c9928b164773ea54faec003f5fea0e6c66d2f1b0dd72df84a7ea20a8071a0218682f4e8023c61dad749e7fab881031b372c24807de75e1cf49f222825d18c10e63b2b3572aca265a6158820345aed4efcdd4dfe3024eadf0cc326db97b69f8e6de6a3fee3937f9d2daff479bf38ac9954657506a59842e8bc1ca3d4fe86ff955b48c49bebed07327413f5fbf02b2fb543d6f047a43eb5052ab8b44cc323f247b738467d32d45da85e694d8d84e8c43e93f79d7842f077a0638ccca2230bcc3218395245f18857e7a6f59939f71036181235e18d87d84bfc7f78f054c7ed5babc48f83378935f99abebba8accf54c4754c8d733846aceda002dd2a1e56a72b0a016e8fdf87ebde01cbb10b9f6255ca9cc70611493d28f6bd39b760eb3f30d2e516a786cf8a36be9757bbb8272de3b79e6a68a7c84b2944238dc3a05975ceb7db3dac364666a58e9f5656a3e9e4cf1101db7ddc9b00ea3e55eaf4e831c9e83695eb7d3114dbb43daf57885ba95520f5329d0a98fa0ccd1e551db8b223b67ed9bde660e21421b65c7bf4d8c781110ceb3b92fdf5d3f3b8cbd43745f19a103496ce2e6426519ee2649280bb7c3c0368507afe500cf432c7bb376f9401b3cb8359da6ee6bb99d259a07b247b66356aa8d72987b65d60a60b9be42e26bd88c5336577ef0fec2612c69ace6036c81dfb89decca7fd3596d1a1750d641bc1bacef52b687654dab1bc0ea989c9b439605fa19163a0dcb9a2cc4e3df550d4d667cf74895e04b7d390f617e8f4e1f701233d85b1a4bb20892cac4c97c30291a91259e241ab27c288088b3b268112db00025271500b4cb180f460fee71a547bf67f6b7d5eae9a032f40133e8f8d03aaf7dd3069cefc031a993eeb09ad882dfa92db1af5417bb591f39a366ea8f69f04b26ba4b99910ea0be060fb7fd3511b1600ed539d1cd276be32677f961e71eac06526f5fe8392ab7b62567688c17056a69613f2a2f7be60a24eef88b165e9e7630ec0eb781cad3fe4ec603215415c98c75065bb693e32724b52484ead3d10f72322adb4f5e8a84edf579165c8ccc58615838c40eed19504ed7a686a2f49d376b1a946a29234be5f13cd1ca133ae0d1696575d6b2bd4a99df221ab2a2436e3eaea0dcd77068d9b93e6455a694114686cd24bc911993176333e571262a5e7567fab3e78671d578e399bfbceb579dc285e3cf957a97e7c527adc9108e03effb2cb5f1a58d4361a26b4ac4c6c6809fcc9456396370e024ee4a389ea2475aaa10444e521bfbfd294ace45c5a3fc47b9235b9405d283a5c95d6bd205146068a1f29a7be00e4bc659ff85053593251bdeb0866d2f12f0f2b936e10dd903e0ab43819f8b14fec33e7d594c9f89c5bbda70782a19a87c43ec536020e22f80e178e90353460496171a6a5d030671f460119827556e9be32e14ac3160d7431f573c95a4c80035287f49168cfe610e2ad302666b968776475c9fc6da3a51baca07542afd3887dcbc10642545c60fa53c7b7c608640aa772d300dd7e7dab800c5820040f759f35f04752ef65d87368d429b4d8b34b7141660c6d9285cde3134cb7dd5e02a6dc989c58f93be21d2e347e5d561d345086a1c7eacd5e941edd883d438451fedec14787d3bcc0a60a052cb696710d6ea395edf87ba2017ebc6e6c65e67beafca411ba43b09a8b67e1883e15b145eda473a59e3e6c621a133afb7f946d70e14beeb35daf2198de279689aa1c7b47b83d65138b8d6ae175638b26bc93d2ca669ea68754062b7ed8d6200def82f48deae0ac4b344d9cff8e791c8f62ce9edc1f8b6c35bc0fb33164dc6f9270cba87e353ab0f217174429ec50c97135006b5e950f4e1d763850ede5aaac87917cdfb5b69e479ad8e2862b4575c7a8b343a174f5d700882c5526c8e885cc5d02127220ecc9968a22c13136248569c5eed13e58feac2afd1a87099fa251e5e1b02feeeb8c6b193c34f60883cde57f104fdfa9818c011f3a946e3ff05bf9280423e2a68499ba6bb00d10986ded36d9485d3f193c5964ed4fd3656098f990b758693b1a5f58135ae00a12ed2e17dde1be1946f5f045a06fd2c0f713a27c40c8e648ecfc766dab91524995bd23e7c3ca2074ce9126e8bc814b354b4c3d762148e781fc584e5c9b58e7e47c408813af93415f35887ead14876b4c1909019e86c96fe895205bc827f13e27eb1fdec4d3ed4c22aed55db64e326242034b2cff8019c20e90bd126617b1e8a43b771524e8b8cf7fa0936e46ebd2a8e439542dd015a52ec7f944bbf66a2de9465f36718cff92418ff8863c7b384a99dda9b6c29ff36b7aa79b0164bfb714a1628f51050c45f6018e50a5309a5ff49607f5fc4bd82a457a641797708af10bc7ac676f1c6fd8a5a8117b03aa940e59a1a0546387d3c5aa421d86f3f1f0a5d62eb5e0d3f21ec773caa421187862fef0f37d620b2811340b153d769c13249526119aaac571379b1e50238b714e754b6dd8da1d517ecaf2c8f7d70a409e948c526f44b0ed4ebb3290b44c6777434a00ac122a9516cceff537d156107a762220b926a9b97b2415d8814903550502a7b7da4eed4884fd055b5c97689df68e9a1c62beefade4c0908aa7d655e15a23b00d9f05eed0b94feb44f6a752732e7e4ef23707f58139e2a6eca408fd65d6644663a0e9f9f9909b4efb91030c3776bc762b2b61b021d3a2126865a07a12fa96740ed58bdab27d37b0b9cc887d6d055bcfe2f9cc788e2141c09fd3f8bd068c8c478a79371cd33058a23c35a7ba839bef742b997c63d28b870d3d8b98135cdff19e1aa2f0b6be80754404a823fa930ca4e47b3b24e986e6d90e90455bf5e6f8291444cfbb7fd99b206b5f9f4133ca0f0a08e1fc7ae8728a3fb4a33b2636f047990281dc26d5a449e7de738afaf067c7cf56a5e1b72417c42da9d1b450174c01bf1692f3791dbc5bf864debfca3500cc73ad390924e4ab6c6cc0d07cd066fac4df4a1b6897093cea5be2d87228d2ae2fb7bf08f484812f58cdfe7e8655dddaf1db92d65d8420fe82d869705b8d9d1dc19e8b37a1c7d418d7556e3b48b3b1e2942d0aa88e6e64fb4ed3232b2a7431372560ae25f679c651c7a11f69894c2810db4b47a18ade06ccbcf15766cd9af202c183f67573c0965345bc57357dc59f40bf1628bec5762619942a7b78b7333315c09fa9b2bc048007c48dbb3a0536749fc4a703d811431ae6d1be03530aa9728c57821a200b7c22eff60af91007b1bd3674a41862829dcf4cfa5d045fe658ad2ae2373ed8b09106a89767ae513d2f1b08df29ce46985f193040d562b5e6f1c7b45f26553da38d24e22e9393832fe355a64e42be1b11e341352a365e89c853dba698586c9c8bad47f68ba68d738dbf9049f179b76c1b1f1998fb47c33650dd66585014fb4cfc073d9c2298b0ebb95ee3a31f695666868f0f5916ddb1cbd3b151a8702f496d667d1b49bcdf5dcb0280558c5bd66e4d2ae54980a0b3e61611dbc0568f2a3e7fa97f5f40af63ddfc6eca00c86608e6975e6db927ee93b8e9388afd16fc354254207598fabca792e01931462eac34ad7e3e96b7fe3f754787c282a479fb9389fda58ad23b28925ed64cc8b0fe199e0d9457284f524798462fb8c2345826e8cfb2dfe56f5ad3079a90f7fab48d1b8052e1c96750871edb6b577537c327adc4a5096b81e5ff094e66a710dcd8c0dd746a24f82367bf0399f232c562ae", 0xf0c}], 0x3, 0x5412, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0xa, 0xc741, 0x80, 0x1})

1.885768018s ago: executing program 3 (id=706):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC, @ANYBLOB=',nostrict,\x00'], 0xfd, 0xc22, &(0x7f00000002c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.865787379s ago: executing program 0 (id=707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x5c}}, 0x0)

1.717349446s ago: executing program 0 (id=710):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
setresuid(0x0, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000001}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.717045346s ago: executing program 1 (id=711):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000240)={[{@sysvgroups}, {@auto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsold}, {@acl}]}, 0x81, 0x502, &(0x7f0000000a00)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x2000, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]})

1.552489552s ago: executing program 3 (id=713):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@flushoncommit}, {@compress}, {@nospace_cache}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@compress}, {@user_subvol_rm}, {@ssd}, {@enospc_debug}, {@clear_cache}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@skip_balance}, {@nodiscard}, {@commit={'commit', 0x3d, 0x5f}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x8042, 0x0)
pwrite64(r0, &(0x7f00000003c0)="0e85", 0x2, 0x8080c61)
fallocate(r0, 0x3, 0x80007, 0x8000c60)

1.536834803s ago: executing program 2 (id=714):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x64, 0x6, 0x878, 0x648, 0x648, 0x2a8, 0x648, 0x2a8, 0x7a8, 0x7a8, 0x7a8, 0x7a8, 0x7a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0x0, 0x0, 0xff000000], [0x0, 0xff], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [0xffffffff], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@private2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x10, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e20, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@rt={{0x138}, {0x0, [0x4], 0x8, 0x30, 0x2, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @loopback, @mcast2, @mcast2, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast1, @mcast1, @local, @local, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1], 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private, 0x37}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8d8)

1.505914354s ago: executing program 0 (id=715):
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
set_mempolicy(0x2, &(0x7f0000000100)=0x7, 0x6)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)

1.39366461s ago: executing program 2 (id=716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, r2, 0x2f, 0x2034, r2}, 0x20)

1.242618546s ago: executing program 1 (id=717):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000002180)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1bf)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)

1.201880638s ago: executing program 2 (id=718):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10001, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x28, &(0x7f0000000100)="4c287bea56504901967e40dc8c55f811acf1642dfa32d5aa12d16735480878d2f5ecf26117b5d835"})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

1.049745795s ago: executing program 2 (id=719):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
read(r1, &(0x7f0000000040)=""/190, 0xbe)

939.236289ms ago: executing program 2 (id=720):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000009c0)=ANY=[], 0x2, 0x6329, &(0x7f0000000a40)="$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")
syz_read_part_table(0x5fd, &(0x7f0000000240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r0, 0x0, 0x0, 0xfecc)

906.22643ms ago: executing program 3 (id=721):
unshare(0x2c020400)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$getflags(r0, 0x401)

482.744389ms ago: executing program 32 (id=721):
unshare(0x2c020400)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$getflags(r0, 0x401)

1.71149ms ago: executing program 2 (id=723):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
setresuid(0x0, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000001}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 1 (id=730):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r2=>0x0}, &(0x7f0000000880)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0xfffffff7, 0x20}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts.
[   59.111772][ T5771] cgroup: Unknown subsys name 'net'
[   59.242168][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.607514][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.454401][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.463455][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.485772][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.489990][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.501731][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.505567][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.509789][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.521541][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.523771][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.532534][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.537864][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.546076][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.551873][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.557968][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.566986][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   62.574652][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.579609][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.586248][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   62.600533][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.600803][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   62.622224][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.660274][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.668437][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   62.676346][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   63.055930][ T5781] chnl_net:caif_netlink_parms(): no params data found
[   63.137781][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   63.211630][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   63.279400][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   63.322745][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.331242][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.338843][ T5781] bridge_slave_0: entered allmulticast mode
[   63.346473][ T5781] bridge_slave_0: entered promiscuous mode
[   63.383818][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.391045][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.398333][ T5782] bridge_slave_0: entered allmulticast mode
[   63.404984][ T5782] bridge_slave_0: entered promiscuous mode
[   63.414104][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.421445][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.428710][ T5781] bridge_slave_1: entered allmulticast mode
[   63.435655][ T5781] bridge_slave_1: entered promiscuous mode
[   63.463551][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.470889][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.478206][ T5782] bridge_slave_1: entered allmulticast mode
[   63.485044][ T5782] bridge_slave_1: entered promiscuous mode
[   63.506559][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.513713][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.520963][ T5784] bridge_slave_0: entered allmulticast mode
[   63.528755][ T5784] bridge_slave_0: entered promiscuous mode
[   63.536769][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.543852][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.551457][ T5784] bridge_slave_1: entered allmulticast mode
[   63.558928][ T5784] bridge_slave_1: entered promiscuous mode
[   63.625386][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.642592][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.653981][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.666174][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.698088][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.720971][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.791260][ T5781] team0: Port device team_slave_0 added
[   63.800605][ T5781] team0: Port device team_slave_1 added
[   63.806898][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.814012][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.821386][ T5783] bridge_slave_0: entered allmulticast mode
[   63.828104][ T5783] bridge_slave_0: entered promiscuous mode
[   63.836463][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.843576][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.850774][ T5783] bridge_slave_1: entered allmulticast mode
[   63.858415][ T5783] bridge_slave_1: entered promiscuous mode
[   63.867751][ T5784] team0: Port device team_slave_0 added
[   63.876955][ T5782] team0: Port device team_slave_0 added
[   63.913019][ T5784] team0: Port device team_slave_1 added
[   63.932367][ T5782] team0: Port device team_slave_1 added
[   63.939686][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.946820][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.973078][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.987223][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.994194][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.020223][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.074702][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.087425][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.097736][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.104684][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.132424][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.154127][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.161146][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.187084][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.219876][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.226963][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.253139][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.274566][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.281667][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.307720][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.321305][ T5783] team0: Port device team_slave_0 added
[   64.330737][ T5783] team0: Port device team_slave_1 added
[   64.391337][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.398436][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.425303][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.441114][ T5781] hsr_slave_0: entered promiscuous mode
[   64.447899][ T5781] hsr_slave_1: entered promiscuous mode
[   64.472876][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.479872][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.505890][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.550527][ T5782] hsr_slave_0: entered promiscuous mode
[   64.558124][ T5782] hsr_slave_1: entered promiscuous mode
[   64.564173][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.572062][ T5782] Cannot create hsr debugfs directory
[   64.602103][ T5784] hsr_slave_0: entered promiscuous mode
[   64.608783][ T5784] hsr_slave_1: entered promiscuous mode
[   64.614800][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.623293][ T5784] Cannot create hsr debugfs directory
[   64.678454][ T5791] Bluetooth: hci2: command tx timeout
[   64.681776][ T5790] Bluetooth: hci1: command tx timeout
[   64.684811][ T5791] Bluetooth: hci0: command tx timeout
[   64.701740][ T5783] hsr_slave_0: entered promiscuous mode
[   64.709379][ T5783] hsr_slave_1: entered promiscuous mode
[   64.715561][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.723123][ T5783] Cannot create hsr debugfs directory
[   64.755971][ T5791] Bluetooth: hci3: command tx timeout
[   65.055409][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.071004][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.095966][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.111934][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.156929][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.180282][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.207112][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.217277][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.277476][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   65.288656][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   65.298313][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   65.310539][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   65.416171][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.432466][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.442424][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.458928][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.530898][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.578222][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.601521][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[   65.631536][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.642833][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.650149][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.678068][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.685254][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.710937][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   65.747049][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.760527][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   65.787187][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.794345][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.807773][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.814861][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.840957][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.848148][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.881316][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   65.893851][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.901019][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.930183][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.937353][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.964278][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.983533][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.990710][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.371833][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.479909][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.513226][ T5781] veth0_vlan: entered promiscuous mode
[   66.552712][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.566951][ T5781] veth1_vlan: entered promiscuous mode
[   66.608792][ T5784] veth0_vlan: entered promiscuous mode
[   66.619256][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.654648][ T5784] veth1_vlan: entered promiscuous mode
[   66.669605][ T5781] veth0_macvtap: entered promiscuous mode
[   66.683486][ T5781] veth1_macvtap: entered promiscuous mode
[   66.727140][ T5783] veth0_vlan: entered promiscuous mode
[   66.755839][ T5791] Bluetooth: hci1: command tx timeout
[   66.755864][ T5794] Bluetooth: hci0: command tx timeout
[   66.766739][ T5790] Bluetooth: hci2: command tx timeout
[   66.779071][ T5782] veth0_vlan: entered promiscuous mode
[   66.789306][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.809153][ T5783] veth1_vlan: entered promiscuous mode
[   66.823186][ T5784] veth0_macvtap: entered promiscuous mode
[   66.836244][ T5794] Bluetooth: hci3: command tx timeout
[   66.838450][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.857044][ T5784] veth1_macvtap: entered promiscuous mode
[   66.876731][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.885676][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.894359][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.904274][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.937122][ T5782] veth1_vlan: entered promiscuous mode
[   66.953282][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.964837][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.979959][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.990494][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.002153][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.013580][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.043701][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.052936][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.061742][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.070977][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.093581][ T5783] veth0_macvtap: entered promiscuous mode
[   67.121622][ T5783] veth1_macvtap: entered promiscuous mode
[   67.151190][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.166523][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.202643][ T5782] veth0_macvtap: entered promiscuous mode
[   67.228835][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.229941][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.247276][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.258456][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.268462][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.279186][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.290836][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.302463][ T5782] veth1_macvtap: entered promiscuous mode
[   67.331329][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.342771][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.352632][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.363108][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.373471][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.383943][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.402851][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.447948][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.461054][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.467222][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.474239][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.488968][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.499596][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.517612][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.527168][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.539683][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.549979][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.564748][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.575671][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.586163][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.597561][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.616277][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.631777][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.641186][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.669345][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.717372][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.729129][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.737921][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.746956][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.802583][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.831576][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.948010][ T5872] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.956669][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.973819][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.056775][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.064607][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.190830][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.243441][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.376906][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.384771][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.606954][ T5879] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm
[   68.721481][ T5892] syz.1.2[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   68.760377][ T5892] loop1: detected capacity change from 0 to 1024
[   68.837672][ T5794] Bluetooth: hci0: command tx timeout
[   68.843152][ T5790] Bluetooth: hci2: command tx timeout
[   68.846083][ T5791] Bluetooth: hci1: command tx timeout
[   68.878965][ T5892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.915848][ T5791] Bluetooth: hci3: command tx timeout
[   69.153436][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.595729][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   69.618045][ T5926] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   69.624785][ T5926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   69.633916][ T5926] vhci_hcd vhci_hcd.0: Device attached
[   69.636256][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.785699][    T8] usb 4-1: Using ep0 maxpacket: 32
[   69.807995][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.840538][    T8] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[   69.862781][    T9] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   69.883535][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.898866][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.916813][    T8] usb 4-1: Product: syz
[   69.921154][    T8] usb 4-1: Manufacturer: syz
[   69.926044][    T9] usb 1-1: Product: syz
[   69.930219][    T9] usb 1-1: Manufacturer: syz
[   69.934930][    T8] usb 4-1: SerialNumber: syz
[   69.935427][ T5835] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[   69.942121][    T9] usb 1-1: SerialNumber: syz
[   69.962200][    T8] usb 4-1: config 0 descriptor??
[   69.983779][    T9] usb 1-1: config 0 descriptor??
[   69.993450][    T8] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[   70.206505][ T5926] loop1: detected capacity change from 0 to 32768
[   70.300384][ T5926] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.480833][ T5926] XFS (loop1): Ending clean mount
[   70.511019][ T5926] XFS (loop1): Quotacheck needed: Please wait.
[   70.587901][ T5926] XFS (loop1): Quotacheck: Done.
[   70.610569][ T5953] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   70.626705][ T5927] vhci_hcd: unknown pdu 1
[   70.633486][   T11] vhci_hcd: stop threads
[   70.639507][   T11] vhci_hcd: release socket
[   70.646541][   T11] vhci_hcd: disconnect device
[   70.845868][    T8] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[   70.854033][    T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   70.864317][    T8] gspca_pac7302: probe of 4-1:0.0 failed with error -71
[   70.872843][    T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[   70.891624][    T8] usb 4-1: USB disconnect, device number 2
[   70.899224][    T9] asix: probe of 1-1:0.0 failed with error -71
[   70.915482][ T5791] Bluetooth: hci1: command tx timeout
[   70.915805][ T5794] Bluetooth: hci0: command tx timeout
[   70.925334][ T5790] Bluetooth: hci2: command tx timeout
[   70.933950][    T9] usb 1-1: USB disconnect, device number 2
[   70.995381][ T5790] Bluetooth: hci3: command tx timeout
[   71.005834][   T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   71.147014][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   71.200592][   T28] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   71.214853][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.240508][   T28] usb 3-1: Product: syz
[   71.244758][   T28] usb 3-1: Manufacturer: syz
[   71.259711][   T28] usb 3-1: SerialNumber: syz
[   71.281170][   T28] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   71.325335][ T5773] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   71.488270][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[   71.495776][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[   71.672890][ T5966] loop0: detected capacity change from 0 to 2048
[   71.688944][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.710295][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.770545][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.800705][ T5972] Bluetooth: MGMT ver 1.22
[   71.888435][ T5974] loop3: detected capacity change from 0 to 1024
[   72.011735][    T9] usb 3-1: USB disconnect, device number 2
[   72.019382][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.836594][ T5773] usb 3-1: Service connection timeout for: 256
[   72.847595][ T5773] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[   72.872775][ T5773] ath9k_htc: Failed to initialize the device
[   72.894825][    T9] usb 3-1: ath9k_htc: USB layer deinitialized
[   73.055674][   T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   73.154738][ T6001] loop0: detected capacity change from 0 to 512
[   73.170971][ T5986] loop1: detected capacity change from 0 to 32768
[   73.203159][ T6001] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.52: inode has both inline data and extents flags
[   73.205392][ T5986] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   73.235621][ T6001] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.52: couldn't read orphan inode 15 (err -117)
[   73.256246][   T28] usb 4-1: Using ep0 maxpacket: 32
[   73.268305][   T28] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   73.286502][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.298911][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.342215][   T28] usb 4-1: config 0 descriptor??
[   73.366351][ T6010] loop2: detected capacity change from 0 to 8192
[   73.401057][ T5986] XFS (loop1): Ending clean mount
[   73.417697][ T6010] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   73.510976][ T6010] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   73.521420][ T6010] REISERFS (device loop2): using ordered data mode
[   73.528096][ T6010] reiserfs: using flush barriers
[   73.539378][ T6010] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   73.557847][ T6010] REISERFS (device loop2): checking transaction log (loop2)
[   73.586858][ T6010] REISERFS (device loop2): Using r5 hash to sort names
[   73.597253][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.598113][ T6010] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   73.625063][   T28] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   73.690736][   T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   73.732126][   T28] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   73.755242][   T28] usb 4-1: media controller created
[   73.824619][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   73.838374][ T5993] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[   73.864244][ T5782] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   73.914894][   T28] az6027: usb out operation failed. (-71)
[   73.940176][   T28] az6027: usb out operation failed. (-71)
[   73.948196][   T28] stb0899_attach: Driver disabled by Kconfig
[   73.977969][   T28] az6027: no front-end attached
[   73.977969][   T28] 
[   73.997591][   T28] az6027: usb out operation failed. (-71)
[   74.023298][   T28] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   74.059294][   T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[   74.077628][    T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   74.118058][   T28] dvb-usb: schedule remote query interval to 400 msecs.
[   74.135080][   T28] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   74.152047][   T28] usb 4-1: USB disconnect, device number 3
[   74.268718][ T6021] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.55'.
[   74.281723][    T8] usb 1-1: Using ep0 maxpacket: 32
[   74.283215][   T28] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   74.298156][    T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   74.307955][    T8] usb 1-1: config 0 has no interface number 0
[   74.321122][ T6021] openvswitch: netlink: Flow key attribute not present in set flow.
[   74.341481][    T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   74.356216][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.374515][    T8] usb 1-1: Product: syz
[   74.380450][    T8] usb 1-1: Manufacturer: syz
[   74.404150][    T8] usb 1-1: SerialNumber: syz
[   74.425323][    T8] usb 1-1: config 0 descriptor??
[   74.438025][    T8] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   74.680030][    T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   74.705730][    T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   74.982235][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[   75.075420][ T5835] vhci_hcd: vhci_device speed not set
[   75.151976][ T6036] loop3: detected capacity change from 0 to 512
[   75.183849][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   75.195306][    T8] usb 1-1: USB disconnect, device number 3
[   75.203420][ T6036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.217634][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   75.235833][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   75.249174][    T8] quatech2 1-1:0.51: device disconnected
[   75.369143][ T6036] EXT4-fs (loop3): shut down requested (2)
[   75.518263][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.640097][ T6047] netlink: 'syz.3.67': attribute type 15 has an invalid length.
[   76.155505][ T6066] mmap: syz.2.75 (6066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   76.233039][ T6068] netlink: 'syz.3.76': attribute type 1 has an invalid length.
[   76.390639][ T6076] overlayfs: workdir and upperdir must reside under the same mount
[   76.933507][ T6090] can0: slcan on ttyS3.
[   77.144955][ T6098] loop2: detected capacity change from 0 to 8192
[   77.145871][ T6096] can0 (unregistered): slcan off ttyS3.
[   77.289172][ T6102] loop1: detected capacity change from 0 to 4096
[   77.330711][ T6102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.690535][ T6112] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.737498][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.160267][ T6127] loop0: detected capacity change from 0 to 512
[   78.169044][ T6127] EXT4-fs: Ignoring removed oldalloc option
[   78.182575][ T6127] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46593!=33349)
[   78.185691][ T5835] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   78.216113][ T6127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   78.237997][ T6130] loop3: detected capacity change from 0 to 64
[   78.244894][ T6130] =======================================================
[   78.244894][ T6130] WARNING: The mand mount option has been deprecated and
[   78.244894][ T6130]          and is ignored by this kernel. Remove the mand
[   78.244894][ T6130]          option from the mount to silence this warning.
[   78.244894][ T6130] =======================================================
[   78.279767][    C1] vkms_vblank_simulate: vblank timer overrun
[   78.289693][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.300927][ T6132] loop2: detected capacity change from 0 to 256
[   78.318288][ T6132] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   78.329913][ T6132] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   78.339810][ T6130] minix_free_block (loop3:21): bit already cleared
[   78.372310][ T6132] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   78.401433][ T5835] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   78.425331][ T5835] usb 2-1: config 0 has no interface number 0
[   78.455417][ T5835] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   78.486081][ T5835] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.497176][ T5835] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   78.506817][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.520206][ T5835] usb 2-1: config 0 descriptor??
[   78.939178][ T6157] loop3: detected capacity change from 0 to 1024
[   78.949578][ T6157] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   78.966288][ T6157] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   78.974557][ T6157] EXT4-fs (loop3): orphan cleanup on readonly fs
[   78.990847][ T6157] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.115: Invalid inode table block 0 in block_group 0
[   79.009035][ T6157] EXT4-fs (loop3): Remounting filesystem read-only
[   79.019709][ T6157] Quota error (device loop3): write_blk: dquota write failed
[   79.028462][ T6157] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   79.039690][ T6157] EXT4-fs (loop3): 1 truncate cleaned up
[   79.054401][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.065555][ T6160] vlan2: entered allmulticast mode
[   79.125059][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.154789][ T5835] uclogic 0003:28BD:0094.0001: pen parameters not found
[   79.185260][ T5835] uclogic 0003:28BD:0094.0001: interface is invalid, ignoring
[   79.205746][ T5835] usb 2-1: USB disconnect, device number 2
[   79.309337][ T6165] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   79.615377][ T5773] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   79.662362][   T42] tipc: Subscription rejected, illegal request
[   79.804149][ T5773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.838597][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   79.859038][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[   79.870551][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   79.885756][ T5773] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   79.897163][ T5773] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   79.911674][ T5773] usb 1-1: Manufacturer: syz
[   79.923531][ T5773] usb 1-1: config 0 descriptor??
[   80.178568][ T6168] loop0: detected capacity change from 0 to 2048
[   80.202725][ T6168] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   80.254089][ T6202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.257474][ T6168] syz.0.120: attempt to access beyond end of device
[   80.257474][ T6168] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[   80.333777][ T6204] loop1: detected capacity change from 0 to 512
[   80.513718][ T5790] block nbd0: Receive control failed (result -32)
[   80.535249][ T5773] rc_core: IR keymap rc-hauppauge not found
[   80.541224][ T5773] Registered IR keymap rc-empty
[   80.547081][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.584240][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.625593][ T5773] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   80.640172][ T5773] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[   80.645694][ T6213] block nbd1: server does not support multiple connections per device.
[   80.657881][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.670441][ T6213] block nbd1: shutting down sockets
[   80.676996][ T6219] loop3: detected capacity change from 0 to 256
[   80.695917][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.725489][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.765484][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.801610][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.845587][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.855414][  T786] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   80.886095][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.915783][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   80.954055][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   81.003786][ T5773] mceusb 1-1:0.0: Error: mce write urb status = -71
[   81.036898][ T5773] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   81.046073][ T5773] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   81.058638][ T5773] usb 1-1: USB disconnect, device number 4
[   81.061835][  T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   81.093740][  T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.106822][  T786] usb 3-1: New USB device found, idVendor=056a, idProduct=f43b, bcdDevice=ff.ff
[   81.122739][  T786] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0
[   81.132640][  T786] usb 3-1: Manufacturer: syz
[   81.163207][  T786] usb 3-1: config 0 descriptor??
[   81.231616][    T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   81.282884][ T6231] loop3: detected capacity change from 0 to 512
[   81.301009][ T6231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.313678][ T6231] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.356941][ T6231] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.3.148: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   81.380079][ T6231] EXT4-fs (loop3): Remounting filesystem read-only
[   81.402877][ T6215] loop2: detected capacity change from 0 to 512
[   81.414663][ T6215] EXT4-fs: quotafile must be on filesystem root
[   81.424636][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.451897][    T8] usb 2-1: config 0 has no interfaces?
[   81.457609][    T8] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[   81.466835][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.479665][    T8] usb 2-1: config 0 descriptor??
[   81.704015][  T786] wacom 0003:056A:F43B.0002: Unknown device_type for 'syz'. Ignoring.
[   81.722686][  T787] cfg80211: failed to load regulatory.db
[   81.794281][  T786] usb 2-1: USB disconnect, device number 3
[   81.944381][    T9] usb 3-1: USB disconnect, device number 3
[   82.084871][ T6251] loop0: detected capacity change from 0 to 32768
[   82.097824][ T6251] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   82.125173][ T6251] XFS (loop0): Ending clean mount
[   82.172365][ T5783] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   82.623437][ T6272] ubi31: attaching mtd0
[   82.648588][ T6272] ubi31 error: ubi_attach_mtd_dev: bad VID header (909340517) or data offsets (909340581)
[   82.701947][ T6274] netlink: 'syz.1.161': attribute type 9 has an invalid length.
[   83.365269][ T5773] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   83.432901][ T6303] vxcan1: tx drop: invalid da for name 0x0000000000000003
[   83.507353][ T6305] loop0: detected capacity change from 0 to 16
[   83.517466][ T6305] erofs: (device loop0): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block)
[   83.558024][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.569213][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.579149][ T5773] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   83.588452][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.609791][ T5773] usb 2-1: config 0 descriptor??
[   83.625486][  T787] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   83.828740][  T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   83.848419][  T787] usb 4-1: config 1 has no interface number 0
[   83.858998][  T787] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   83.870619][  T787] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   83.882057][  T787] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   83.892294][  T787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   83.905987][  T787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 153, setting to 64
[   83.920285][  T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   83.928986][ T6318] loop0: detected capacity change from 0 to 128
[   83.930079][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.944580][  T787] usb 4-1: Product: syz
[   83.945969][ T6318] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   83.949378][  T787] usb 4-1: Manufacturer: syz
[   83.970262][  T787] usb 4-1: SerialNumber: syz
[   83.970533][ T6318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.979543][ T6300] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   84.062097][ T5773] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   84.076306][ T5773] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   84.084211][ T5773] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   84.097476][ T5773] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   84.105041][ T5773] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   84.124748][ T5773] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[   84.167204][ T6320] loop0: detected capacity change from 0 to 8192
[   84.180074][ T6320] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   84.200703][ T6320] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   84.213895][ T6320] REISERFS (device loop0): using journaled data mode
[   84.223292][ T6320] reiserfs: using flush barriers
[   84.241873][  T787] cdc_ncm 4-1:1.1: bind() failure
[   84.248308][ T6320] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   84.273335][ T5773] playstation 0003:054C:0DF2.0003: Invalid byte count transferred, expected 20 got 0
[   84.280345][ T6320] REISERFS (device loop0): checking transaction log (loop0)
[   84.283225][  T787] usb 4-1: USB disconnect, device number 4
[   84.296500][ T6320] REISERFS (device loop0): Using r5 hash to sort names
[   84.297301][ T5773] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22
[   84.303940][ T6320] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   84.330927][ T6320] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   84.375997][ T5773] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense
[   84.377571][ T6320] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   84.384699][ T5773] playstation 0003:054C:0DF2.0003: Failed to create dualsense.
[   84.404308][ T5773] playstation: probe of 0003:054C:0DF2.0003 failed with error -22
[   84.419985][ T6320] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   84.439678][ T6320] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   84.546366][  T786] usb 2-1: USB disconnect, device number 4
[   84.571175][ T6327] loop2: detected capacity change from 0 to 64
[   84.741129][ T6331] loop0: detected capacity change from 0 to 4096
[   84.752271][ T6331] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[   84.977451][ T6339] loop3: detected capacity change from 0 to 2048
[   85.436060][ T6360] netlink: 84 bytes leftover after parsing attributes in process `syz.3.200'.
[   85.532000][ T6362] loop2: detected capacity change from 0 to 512
[   85.551074][ T6364] process 'syz.3.202' launched './file0' with NULL argv: empty string added
[   85.636011][ T6367] Zero length message leads to an empty skb
[   85.934624][ T6358] loop0: detected capacity change from 0 to 32768
[   85.963181][ T6358] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   86.086513][ T6358] XFS (loop0): Ending clean mount
[   86.106099][ T6358] XFS (loop0): Quotacheck needed: Please wait.
[   86.137307][ T5773] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   86.164347][ T6358] XFS (loop0): Quotacheck: Done.
[   86.181547][ T6392] loop2: detected capacity change from 0 to 512
[   86.208997][ T6392] EXT4-fs: Ignoring removed orlov option
[   86.235294][ T6392] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   86.286119][ T6392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[   86.302079][ T6392] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.211: corrupted in-inode xattr: e_value size too large
[   86.303437][ T5783] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   86.331266][ T6392] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.211: couldn't read orphan inode 15 (err -117)
[   86.348910][ T6392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.378395][ T5773] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   86.391427][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.410486][ T5773] usb 2-1: Product: syz
[   86.417926][ T5773] usb 2-1: Manufacturer: syz
[   86.422785][ T5773] usb 2-1: SerialNumber: syz
[   86.429928][ T5773] usb 2-1: config 0 descriptor??
[   86.468421][ T6390] loop3: detected capacity change from 0 to 40427
[   86.501052][ T6390] F2FS-fs (loop3): invalid crc value
[   86.538279][ T6390] F2FS-fs (loop3): Found nat_bits in checkpoint
[   86.573237][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.648681][ T6390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   86.888276][ T5784] syz-executor: attempt to access beyond end of device
[   86.888276][ T5784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.928105][ T5784] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   87.260875][ T5773] usb 2-1: Firmware version (0.0) predates our first public release.
[   87.273941][ T5773] usb 2-1: Please update to version 0.2 or newer
[   87.317854][ T6406] loop2: detected capacity change from 0 to 32768
[   87.331598][ T6406] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.214 (6406)
[   87.347733][ T5773] usb 2-1: USB disconnect, device number 5
[   87.420587][ T6406] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.448778][ T6406] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   87.459719][ T6406] BTRFS info (device loop2): enabling auto defrag
[   87.466239][ T6406] BTRFS info (device loop2): use no compression
[   87.472520][ T6406] BTRFS info (device loop2): force clearing of disk cache
[   87.480770][ T6406] BTRFS info (device loop2): max_inline at 4096
[   87.487954][ T6406] BTRFS info (device loop2): disabling free space tree
[   87.547781][ T6406] BTRFS info (device loop2): enabling ssd optimizations
[   87.554808][ T6406] BTRFS info (device loop2): auto enabling async discard
[   87.573708][ T6406] BTRFS info (device loop2): rebuilding free space tree
[   87.658425][ T6406] BTRFS info (device loop2): disabling free space tree
[   87.669798][ T6406] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   87.680299][ T6406] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   87.745417][ T5781] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.945332][  T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   88.043499][ T6440] PID 6440 killed due to inadequate hugepage pool
[   88.093084][ T6446] netlink: 'syz.2.224': attribute type 6 has an invalid length.
[   88.145728][  T787] usb 4-1: Using ep0 maxpacket: 16
[   88.162195][  T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.180459][  T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   88.189999][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.201114][  T787] usb 4-1: config 0 descriptor??
[   88.212224][  T787] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[   88.477424][ T5143] bcm5974 4-1:0.0: could not read from device
[   88.498339][ T6437] bcm5974 4-1:0.0: could not read from device
[   88.507899][ T5143] bcm5974 4-1:0.0: could not read from device
[   88.515737][  T787] usb 4-1: USB disconnect, device number 5
[   88.527109][ T5143] bcm5974 4-1:0.0: could not read from device
[   88.575077][ T6465] loop2: detected capacity change from 0 to 4096
[   88.647026][ T6467] tipc: Started in network mode
[   88.652250][ T6467] tipc: Node identity ac14140f, cluster identity 4711
[   88.662136][ T6467] tipc: New replicast peer: 255.255.255.255
[   88.670449][ T6467] tipc: Enabled bearer <udp:syz2>, priority 10
[   89.402255][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.247'.
[   89.429574][ T6494] loop2: detected capacity change from 0 to 4096
[   89.445446][ T6494] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[   89.651359][ T6505] loop1: detected capacity change from 0 to 128
[   89.795892][ T5835] tipc: Node number set to 2886997007
[   89.929046][ T6519] loop1: detected capacity change from 0 to 256
[   90.040452][ T6519] FAT-fs (loop1): Directory bread(block 64) failed
[   90.056791][ T6519] FAT-fs (loop1): Directory bread(block 65) failed
[   90.083965][ T6519] FAT-fs (loop1): Directory bread(block 66) failed
[   90.100888][ T6519] FAT-fs (loop1): Directory bread(block 67) failed
[   90.135398][ T6519] FAT-fs (loop1): Directory bread(block 68) failed
[   90.151820][ T6519] FAT-fs (loop1): Directory bread(block 69) failed
[   90.165100][ T6527] sock: sock_set_timeout: `syz.0.263' (pid 6527) tries to set negative timeout
[   90.176808][ T6519] FAT-fs (loop1): Directory bread(block 70) failed
[   90.183368][ T6519] FAT-fs (loop1): Directory bread(block 71) failed
[   90.205319][ T6519] FAT-fs (loop1): Directory bread(block 72) failed
[   90.222136][ T6519] FAT-fs (loop1): Directory bread(block 73) failed
[   90.375036][ T6530] syz.0.264 (6530) used greatest stack depth: 19048 bytes left
[   90.709365][ T6542] loop0: detected capacity change from 0 to 4096
[   90.723363][ T6542] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[   90.751175][ T6542] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   90.875322][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[   90.882385][ T6549] Bluetooth: hci4: Frame reassembly failed (-84)
[   90.951497][ T6551] loop0: detected capacity change from 0 to 256
[   90.958862][ T6551] exfat: Deprecated parameter 'utf8'
[   90.964302][ T6551] exfat: Deprecated parameter 'utf8'
[   90.982831][ T6551] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[   91.108480][ T6558] loop0: detected capacity change from 0 to 2048
[   91.131751][ T6558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.202595][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.745645][ T6595] netlink: 'syz.3.291': attribute type 10 has an invalid length.
[   91.754032][ T6597] capability: warning: `syz.1.292' uses deprecated v2 capabilities in a way that may be insecure
[   91.824991][ T6595] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.079252][ T6611] capability: warning: `syz.1.299' uses 32-bit capabilities (legacy support in use)
[   92.551498][ T6634] loop3: detected capacity change from 0 to 4096
[   92.573757][ T6634] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   92.616448][ T6634] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[   92.627841][ T6634] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   92.641199][ T6634] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   92.661129][ T6634] ntfs: volume version 3.1.
[   92.820657][ T1296] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[   92.842216][ T5784] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   92.866809][ T6646] @: renamed from vlan0 (while UP)
[   92.919944][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   93.225426][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.425271][    T8] usb 1-1: Using ep0 maxpacket: 8
[   93.444027][    T8] usb 1-1: config 0 has no interfaces?
[   93.453067][    T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   93.472432][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.505048][    T8] usb 1-1: config 0 descriptor??
[   93.592068][ T6652] loop3: detected capacity change from 0 to 40427
[   93.620963][ T6652] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   93.635748][ T6652] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   93.695323][ T6652] F2FS-fs (loop3): Found nat_bits in checkpoint
[   93.757803][    T8] usb 1-1: USB disconnect, device number 5
[   93.835247][ T6652] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   93.847674][ T6652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   94.383895][ T6673] loop1: detected capacity change from 0 to 8
[   94.391718][ T6675] loop0: detected capacity change from 0 to 16
[   94.408436][ T6673] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   94.418804][ T6675] erofs: (device loop0): mounted with root inode @ nid 36.
[   94.847334][ T6694] loop0: detected capacity change from 0 to 64
[   94.895223][   T27] audit: type=1800 audit(1763643972.224:2): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.335" name="file1" dev="loop0" ino=5 res=0 errno=0
[   94.960235][   T27] audit: type=1804 audit(1763643972.234:3): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.335" name="/newroot/78/file1/file1" dev="loop0" ino=5 res=1 errno=0
[   95.314468][ T6686] loop3: detected capacity change from 0 to 32768
[   95.343649][ T6686] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.322 (6686)
[   95.376527][ T6686] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   95.398612][ T6686] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   95.425252][ T6686] BTRFS info (device loop3): using free space tree
[   95.545249][ T6686] BTRFS info (device loop3): enabling ssd optimizations
[   95.552240][ T6686] BTRFS info (device loop3): auto enabling async discard
[   95.623383][ T6698] loop2: detected capacity change from 0 to 32768
[   95.639561][ T6698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.336 (6698)
[   95.660211][ T6698] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.685576][ T6698] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   95.715447][ T6698] BTRFS info (device loop2): using free space tree
[   95.768256][ T5784] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   95.775774][ T6698] BTRFS info (device loop2): enabling ssd optimizations
[   95.831306][ T6698] BTRFS info (device loop2): auto enabling async discard
[   95.941495][ T6738] loop1: detected capacity change from 0 to 512
[   95.998625][ T6738] EXT4-fs: Ignoring removed nobh option
[   96.017592][ T6738] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   96.075754][ T6738] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.342: iget: bad i_size value: 38620345925642
[   96.120345][ T6738] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.342: couldn't read orphan inode 15 (err -117)
[   96.165100][ T6738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.249061][   T42] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[   96.269570][ T5781] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.290369][   T42] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   96.344756][   T42] EXT4-fs (loop1): This should not happen!! Data will be lost
[   96.344756][   T42] 
[   96.352654][   T59] tipc: Subscription rejected, illegal request
[   96.370795][   T42] EXT4-fs (loop1): Total free blocks count 0
[   96.377297][   T42] EXT4-fs (loop1): Free/Dirty block details
[   96.383258][   T42] EXT4-fs (loop1): free_blocks=0
[   96.412264][   T42] EXT4-fs (loop1): dirty_blocks=1
[   96.430877][   T42] EXT4-fs (loop1): Block reservation details
[   96.462894][   T42] EXT4-fs (loop1): i_reserved_data_blocks=1
[   96.513176][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.543334][    T8] kernel read not supported for file /video7 (pid: 8 comm: kworker/0:0)
[   97.386176][ T5835] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   97.576952][ T5835] usb 4-1: Using ep0 maxpacket: 16
[   97.593933][ T5835] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[   97.605324][ T5835] usb 4-1: config 0 has no interface number 0
[   97.616985][ T5835] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[   97.635436][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.653644][ T5835] usb 4-1: Product: syz
[   97.673893][ T5835] usb 4-1: Manufacturer: syz
[   97.681063][ T5835] usb 4-1: SerialNumber: syz
[   97.697146][ T5835] usb 4-1: config 0 descriptor??
[   97.710759][ T5835] hub 4-1:0.132: bad descriptor, ignoring hub
[   97.724171][ T5835] hub: probe of 4-1:0.132 failed with error -5
[   97.737329][ T5835] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input11
[   97.799042][ T6773] loop1: detected capacity change from 0 to 8192
[   97.808512][ T6773] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   97.821615][ T6773] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   97.831919][ T6773] REISERFS (device loop1): using ordered data mode
[   97.833840][   T27] audit: type=1800 audit(1763643975.164:4): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.335" name="file1" dev="loop0" ino=5 res=0 errno=0
[   97.838607][ T6773] reiserfs: using flush barriers
[   97.842895][ T6773] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   97.876994][ T6778] warning: `syz.2.358' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   97.896553][ T6773] REISERFS (device loop1): checking transaction log (loop1)
[   97.983304][ T6780] loop2: detected capacity change from 0 to 2048
[   98.026530][ T6780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.081294][ T6773] REISERFS (device loop1): Using tea hash to sort names
[   98.090315][ T6773] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   98.125330][ T6773] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   98.146794][ T5773] usb 4-1: USB disconnect, device number 6
[   98.191003][ T6773] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[   98.208254][ T6773] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   98.613577][ T6792] netlink: 'syz.2.365': attribute type 10 has an invalid length.
[   98.680194][ T6792] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   98.764918][ T6791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.795601][ T6794] netlink: 27 bytes leftover after parsing attributes in process `syz.3.366'.
[   98.809315][ T6796] loop1: detected capacity change from 0 to 128
[   98.839866][ T6796] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   98.867548][ T6796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.263262][ T6810] loop0: detected capacity change from 0 to 128
[   99.668498][ T6823] Illegal XDP return value 4294967274 on prog  (id 42) dev N/A, expect packet loss!
[   99.877017][ T6810] loop0: detected capacity change from 0 to 32768
[   99.904232][ T6810] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.359 (6810)
[   99.929224][ T6810] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   99.955325][ T6810] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   99.964818][ T6810] BTRFS info (device loop0): turning on sync discard
[   99.996268][ T6810] BTRFS info (device loop0): turning on async discard
[  100.013312][ T6810] BTRFS info (device loop0): using free space tree
[  100.047564][ T6817] loop2: detected capacity change from 0 to 32768
[  100.084381][ T6817] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  100.133098][ T6810] BTRFS info (device loop0): enabling ssd optimizations
[  100.195419][ T6817] XFS (loop2): Ending clean mount
[  100.256724][ T6821] loop3: detected capacity change from 0 to 32768
[  100.347911][ T6825] loop1: detected capacity change from 0 to 32768
[  100.352303][ T5783] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  100.361819][ T6825] (syz.1.380,6825,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.373178][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  100.389596][ T6825] (syz.1.380,6825,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.396413][ T6821] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  100.497384][ T6825] JBD2: Ignoring recovery information on journal
[  100.630481][ T6853] loop0: detected capacity change from 0 to 128
[  100.685035][ T6853] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  100.685675][ T6825] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  100.725603][ T6853] hpfs: filesystem error: improperly stopped
[  100.731639][ T6853] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  100.761871][ T6853] hpfs: You really don't want any checks? You are crazy...
[  100.797606][ T6853] hpfs: hpfs_map_sector(): read error
[  100.803029][ T6853] hpfs: code page support is disabled
[  100.828149][ T6853] hpfs: hpfs_map_4sectors(): unaligned read
[  100.834617][ T6853] hpfs: hpfs_map_4sectors(): unaligned read
[  100.844331][ T6821] syz.3.378 (6821) used greatest stack depth: 18736 bytes left
[  100.859469][ T6853] hpfs: filesystem error: unable to find root dir
[  101.025773][ T5784] ocfs2: Unmounting device (7,3) on (node local)
[  101.089220][ T6862] loop0: detected capacity change from 0 to 64
[  101.145215][ T6862] Trying to free block not in datazone
[  101.155538][ T6862] Trying to free block not in datazone
[  101.167132][ T6862] Trying to free block not in datazone
[  101.198755][ T6862] Trying to free block not in datazone
[  101.207902][ T6862] minix_free_inode: bit 5 already cleared
[  101.231038][ T5782] ocfs2: Unmounting device (7,1) on (node local)
[  101.529751][ T6868] loop3: detected capacity change from 0 to 4096
[  101.626259][ T6872] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  101.700405][ T6859] loop2: detected capacity change from 0 to 32768
[  101.719767][ T6859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.384 (6859)
[  101.749480][ T6877] loop0: detected capacity change from 0 to 256
[  101.763965][ T6859] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.779522][ T6877] FAT-fs (loop0): Directory bread(block 64) failed
[  101.787959][ T6859] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  101.790117][ T6877] FAT-fs (loop0): Directory bread(block 65) failed
[  101.797384][ T6859] BTRFS info (device loop2): using free space tree
[  101.807304][ T6877] FAT-fs (loop0): Directory bread(block 66) failed
[  101.820842][ T6877] FAT-fs (loop0): Directory bread(block 67) failed
[  101.827869][ T6877] FAT-fs (loop0): Directory bread(block 68) failed
[  101.832610][ T6859] BTRFS info (device loop2): enabling ssd optimizations
[  101.834504][ T6877] FAT-fs (loop0): Directory bread(block 69) failed
[  101.847121][ T6859] BTRFS info (device loop2): auto enabling async discard
[  101.849246][ T6877] FAT-fs (loop0): Directory bread(block 70) failed
[  101.863340][ T6877] FAT-fs (loop0): Directory bread(block 71) failed
[  101.870130][ T6877] FAT-fs (loop0): Directory bread(block 72) failed
[  101.885325][ T6877] FAT-fs (loop0): Directory bread(block 73) failed
[  101.974223][ T5781] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.550694][ T6917] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  102.580209][   T59] Bluetooth: hci4: Frame reassembly failed (-84)
[  102.624129][ T6916] loop1: detected capacity change from 0 to 4096
[  102.633805][ T6916] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  102.738074][ T6921] netlink: 4444 bytes leftover after parsing attributes in process `syz.2.403'.
[  102.783641][ T6905] loop0: detected capacity change from 0 to 32768
[  102.791939][ T6905] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.396 (6905)
[  102.811769][ T6905] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.823554][ T6905] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  102.841171][ T6905] BTRFS info (device loop0): turning on flush-on-commit
[  102.849298][ T6905] BTRFS info (device loop0): use zlib compression, level 3
[  102.856987][ T6905] BTRFS info (device loop0): disabling free space tree
[  102.863973][ T6905] BTRFS info (device loop0): enabling disk space caching
[  102.871709][ T6905] BTRFS info (device loop0): setting nodatasum
[  102.878325][ T6905] BTRFS info (device loop0): turning off barriers
[  102.885008][ T6905] BTRFS info (device loop0): enabling ssd optimizations
[  102.893125][ T6905] BTRFS info (device loop0): force clearing of disk cache
[  102.900699][ T6905] BTRFS info (device loop0): disk space caching is enabled
[  102.972251][ T6905] BTRFS info (device loop0): rebuilding free space tree
[  103.009375][ T6905] BTRFS info (device loop0): disabling free space tree
[  103.028623][ T6905] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  103.053559][ T6905] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  103.333912][ T5783] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.391845][ T6942] loop1: detected capacity change from 0 to 32768
[  103.474302][ T6942] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.535699][ T5773] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.549904][ T6942] XFS (loop1): Ending clean mount
[  103.618648][ T5782] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.781790][ T5773] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  103.808803][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.839279][ T5773] usb 3-1: config 0 descriptor??
[  104.066477][ T5773] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  104.095347][ T5773] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  104.279816][ T5773] [drm:udl_init] *ERROR* Selecting channel failed
[  104.308129][ T5773] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  104.317063][ T5773] [drm] Initialized udl on minor 2
[  104.328918][ T5773] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  104.342163][ T5773] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  104.357014][  T787] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  104.367912][ T5773] usb 3-1: USB disconnect, device number 4
[  104.375873][  T787] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  104.494346][ T6986] netlink: 'syz.1.423': attribute type 21 has an invalid length.
[  104.502219][ T6986] netlink: 128 bytes leftover after parsing attributes in process `syz.1.423'.
[  104.511355][ T6986] netlink: 'syz.1.423': attribute type 4 has an invalid length.
[  104.519067][ T6986] netlink: 'syz.1.423': attribute type 5 has an invalid length.
[  104.527011][ T6986] netlink: 3 bytes leftover after parsing attributes in process `syz.1.423'.
[  104.595417][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  104.595759][ T5794] Bluetooth: hci4: command 0x1003 tx timeout
[  104.994606][ T6988] loop1: detected capacity change from 0 to 40427
[  105.019981][ T6988] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  105.028473][ T6988] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  105.043497][ T6988] F2FS-fs (loop1): invalid crc value
[  105.072332][ T6988] F2FS-fs (loop1): Found nat_bits in checkpoint
[  105.160968][ T6998] loop3: detected capacity change from 0 to 4096
[  105.169350][ T6988] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  105.181246][ T6988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  105.213371][ T7008] loop0: detected capacity change from 0 to 64
[  105.301751][ T7010] loop2: detected capacity change from 0 to 512
[  105.346133][ T7010] EXT4-fs: Ignoring removed i_version option
[  105.351623][   T59] kworker/u4:4: attempt to access beyond end of device
[  105.351623][   T59] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  105.379245][   T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  105.380045][ T7010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  105.387142][   T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  105.438141][ T6988] VFS:Filesystem freeze failed
[  105.481489][ T7010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.502489][ T7010] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.679470][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.849262][ T5773] IPVS: starting estimator thread 0...
[  105.959060][ T7031] IPVS: using max 20 ests per chain, 48000 per kthread
[  106.409851][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[  106.435187][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[  106.476903][ T7050] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  106.505409][ T7050] macvlan2: entered allmulticast mode
[  106.510841][ T7050] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  106.694839][ T7038] loop0: detected capacity change from 0 to 40427
[  106.702771][ T7038] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  106.725658][ T7038] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  106.748223][ T7038] F2FS-fs (loop0): invalid crc value
[  106.756729][ T7041] loop3: detected capacity change from 0 to 32768
[  106.786308][ T7038] F2FS-fs (loop0): Found nat_bits in checkpoint
[  106.892113][ T7038] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  106.902650][ T7038] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  107.099478][ T7052] loop1: detected capacity change from 0 to 32768
[  107.127538][ T7052] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  107.227940][ T7052] XFS (loop1): Ending clean mount
[  107.319597][ T7060] loop2: detected capacity change from 0 to 32768
[  107.381449][ T5782] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  108.028047][ T7090] loop1: detected capacity change from 0 to 2048
[  108.045010][ T7090] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  108.053429][ T7090] UDF-fs: Scanning with blocksize 512 failed
[  108.074926][ T7090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.135272][  T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  108.238026][ T7098] loop3: detected capacity change from 0 to 512
[  108.249748][ T7098] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  108.294704][ T7098] EXT4-fs (loop3): 1 orphan inode deleted
[  108.302468][ T7098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.316872][   T42] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  108.325307][  T787] usb 3-1: Using ep0 maxpacket: 32
[  108.332346][ T7098] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.334258][  T787] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  108.351761][   T42] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:2: Failed to release dquot type 1
[  108.363856][  T787] usb 3-1: config 0 has no interface number 0
[  108.363904][  T787] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  108.368500][  T787] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  108.399094][   T27] audit: type=1800 audit(1763643985.734:5): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.466" name="bus" dev="loop3" ino=16 res=0 errno=0
[  108.401260][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.434582][  T787] usb 3-1: Product: syz
[  108.464934][  T787] usb 3-1: Manufacturer: syz
[  108.466268][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.469648][  T787] usb 3-1: SerialNumber: syz
[  108.501153][  T787] usb 3-1: config 0 descriptor??
[  108.507244][ T7081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  108.639760][ T7114] program syz.3.472 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.731348][ T7081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  108.792227][ T7118] loop0: detected capacity change from 0 to 512
[  108.827917][ T7118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.854438][ T7121] tap0: tun_chr_ioctl cmd 2148553947
[  108.860431][ T7118] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.952089][ T7126] loop3: detected capacity change from 0 to 4096
[  108.963373][ T7126] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  109.014661][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.031705][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'.
[  109.052796][ T7126] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  109.173659][ T7133] loop1: detected capacity change from 0 to 512
[  109.184780][ T7133] EXT4-fs (loop1): orphan cleanup on readonly fs
[  109.195330][ T7133] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  109.211049][ T7133] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  109.245923][ T7133] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.480: attempt to clear invalid blocks 2 len 1
[  109.273003][ T7133] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.480: invalid indirect mapped block 1819239214 (level 0)
[  109.311136][ T7133] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.480: invalid indirect mapped block 1819239214 (level 1)
[  109.337787][ T7133] EXT4-fs (loop1): 1 truncate cleaned up
[  109.344883][ T7133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  109.369872][  T787] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  109.385460][  T787] asix: probe of 3-1:0.188 failed with error -71
[  109.396921][  T787] usb 3-1: USB disconnect, device number 5
[  109.445912][ T7133] EXT4-fs (loop1): shut down requested (2)
[  109.515193][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.223123][ T7144] loop1: detected capacity change from 0 to 32768
[  110.267229][ T7144] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  110.287810][ T7144] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  110.353232][ T7144] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  110.420909][ T7170] loop0: detected capacity change from 0 to 128
[  110.439747][ T7144] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  110.456642][ T7170] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.480589][ T7170] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.625380][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  110.716801][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.855225][    T9] usb 4-1: Using ep0 maxpacket: 16
[  110.866967][    T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  110.885617][    T9] usb 4-1: config 0 has no interface number 0
[  110.891796][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  110.928709][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  110.954154][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  110.969389][    T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  110.986704][    T9] usb 4-1: Product: syz
[  110.995487][    T9] usb 4-1: SerialNumber: syz
[  111.005617][    T9] usb 4-1: config 0 descriptor??
[  111.013906][    T9] cm109 4-1:0.8: invalid payload size 0, expected 4
[  111.038620][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12
[  111.325929][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.334972][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.336039][ T7188] loop0: detected capacity change from 0 to 32768
[  111.342159][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.354709][ T7188] 
[  111.354709][ T7188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  111.354709][ T7188] 
[  111.356945][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.374000][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.381165][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.388368][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.395554][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.402827][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.410022][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  111.430067][    T9] usb 4-1: USB disconnect, device number 7
[  111.435972][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  111.716399][ T5783] 
[  111.716399][ T5783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  111.716399][ T5783] 
[  111.731178][    T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  111.738300][ T5783] 
[  111.738300][ T5783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  111.738300][ T5783] 
[  112.034687][   T27] audit: type=1400 audit(1763643989.364:6): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A202020202030206B420A4C617A79467265653A202020202020202020202020202030206B420A416E6F6E4875676550616765733A20202020202020202030206B420A53686D656D506D644D61707065643A202020202020202030206B420A46696C65506D644D61707065643A20202020202020202030206B420A5368617265645F48756765746C623A202020202020202030206B420A50 pid=7201 comm="syz.3.505"
[  112.079379][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.143416][ T7206] loop1: detected capacity change from 0 to 128
[  112.172580][ T7206] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.227532][ T7206] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.269902][ T7206] EXT4-fs warning (device loop1): ext4_group_add:1742: No reserved GDT blocks, can't resize
[  112.374716][ T5782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.423893][ T7221] loop3: detected capacity change from 0 to 512
[  112.452017][ T7223] loop2: detected capacity change from 0 to 512
[  112.491377][ T7223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.545970][ T7223] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.630430][ T7232] loop0: detected capacity change from 0 to 256
[  112.651995][ T7235] overlayfs: workdir and upperdir must reside under the same mount
[  112.663657][ T7223] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.2.513: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  112.692560][ T7237] loop1: detected capacity change from 0 to 1024
[  112.696084][ T7223] EXT4-fs (loop2): Remounting filesystem read-only
[  112.707506][ T7232] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  112.738099][ T7237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.770794][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.817922][ T7237] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.521: Abort forced by user
[  112.830739][ T7237] EXT4-fs (loop1): Remounting filesystem read-only
[  112.845430][ T7237] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  112.976720][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.206907][ T7254] loop0: detected capacity change from 0 to 1024
[  113.258260][ T7254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.448281][ T7247] loop3: detected capacity change from 0 to 32768
[  113.461924][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.542359][   T27] audit: type=1800 audit(1763643990.864:7): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.523" name="file2" dev="loop3" ino=5 res=0 errno=0
[  113.582092][ T7248] loop2: detected capacity change from 0 to 40427
[  113.599911][ T7248] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  113.615197][ T7248] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  113.663753][ T7248] F2FS-fs (loop2): Found nat_bits in checkpoint
[  113.771611][ T7268] loop1: detected capacity change from 0 to 512
[  113.788415][ T7268] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.531: inode has both inline data and extents flags
[  113.806009][ T7268] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.531: couldn't read orphan inode 15 (err -117)
[  113.814741][ T7271] loop0: detected capacity change from 0 to 256
[  113.825360][ T7248] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  113.832422][ T7248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  113.844237][ T7268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.007211][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.077094][ T7248] syz.2.524 (7248): drop_caches: 2
[  114.196685][ T5794] Bluetooth: hci3: command tx timeout
[  114.365275][    T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  114.407555][ T7286] loop3: detected capacity change from 0 to 256
[  114.476078][ T7286] FAT-fs (loop3): Directory bread(block 64) failed
[  114.482648][ T7286] FAT-fs (loop3): Directory bread(block 65) failed
[  114.499562][ T7286] FAT-fs (loop3): Directory bread(block 66) failed
[  114.513520][ T7282] loop1: detected capacity change from 0 to 32768
[  114.520427][ T7286] FAT-fs (loop3): Directory bread(block 67) failed
[  114.527232][ T7286] FAT-fs (loop3): Directory bread(block 68) failed
[  114.540462][ T7286] FAT-fs (loop3): Directory bread(block 69) failed
[  114.548568][ T7286] FAT-fs (loop3): Directory bread(block 70) failed
[  114.555243][ T7286] FAT-fs (loop3): Directory bread(block 71) failed
[  114.562463][ T7286] FAT-fs (loop3): Directory bread(block 72) failed
[  114.563687][    T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  114.569367][ T7286] FAT-fs (loop3): Directory bread(block 73) failed
[  114.601449][ T7282] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  114.625239][    T9] usb 1-1: config 0 has no interface number 0
[  114.641652][    T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  114.682347][    T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.726106][    T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  114.754479][   T27] audit: type=1800 audit(1763643992.084:8): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.535" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  114.775305][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.792330][    T9] usb 1-1: config 0 descriptor??
[  114.800217][ T7282] (syz.1.535,7282,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  114.910118][ T5782] ocfs2: Unmounting device (7,1) on (node local)
[  115.459252][    T9] uclogic 0003:28BD:0094.0004: pen parameters not found
[  115.475826][    T9] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring
[  115.501965][    T9] usb 1-1: USB disconnect, device number 6
[  115.676411][ T7308] loop1: detected capacity change from 0 to 32768
[  115.726019][ T7308] JBD2: Ignoring recovery information on journal
[  115.777071][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'.
[  115.793536][ T7308] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  116.011720][ T5782] ocfs2: Unmounting device (7,1) on (node local)
[  116.067084][ T7316] loop2: detected capacity change from 0 to 40427
[  116.088051][ T7316] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  116.123224][ T7316] F2FS-fs (loop2): invalid crc value
[  116.145075][ T7316] F2FS-fs (loop2): Found nat_bits in checkpoint
[  116.236940][ T7316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  116.429317][ T5781] syz-executor: attempt to access beyond end of device
[  116.429317][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  116.454677][ T7340] loop3: detected capacity change from 0 to 22
[  116.461912][ T7340] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  116.475465][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  116.504532][ T7340] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  116.703755][ T7344] loop1: detected capacity change from 0 to 1024
[  117.038853][ T7342] loop0: detected capacity change from 0 to 32768
[  117.046732][ T7351] loop1: detected capacity change from 0 to 512
[  117.062426][ T7342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.561 (7342)
[  117.083435][ T7351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  117.110806][ T7342] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.131657][ T7351] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.149573][ T7342] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  117.180990][ T7342] BTRFS info (device loop0): force clearing of disk cache
[  117.208475][ T7342] BTRFS info (device loop0): enabling auto defrag
[  117.236667][ T7342] BTRFS info (device loop0): max_inline at 0
[  117.242710][ T7342] BTRFS info (device loop0): enabling disk space caching
[  117.270531][ T7342] BTRFS info (device loop0): disk space caching is enabled
[  117.284675][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  117.415349][ T7342] BTRFS info (device loop0): enabling ssd optimizations
[  117.446033][ T7342] BTRFS info (device loop0): rebuilding free space tree
[  117.465494][ T7342] BTRFS info (device loop0): disabling free space tree
[  117.471759][ T7383] loop2: detected capacity change from 0 to 256
[  117.472422][ T7342] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  117.538054][ T7342] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  117.643674][ T7360] loop3: detected capacity change from 0 to 32768
[  117.663546][ T7387] loop2: detected capacity change from 0 to 512
[  117.694853][ T7387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  117.714327][ T5783] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.719529][ T7360] syz.3.567: attempt to access beyond end of device
[  117.719529][ T7360] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  117.742915][ T7360] lbmIODone: I/O error in JFS log
[  117.751502][ T7387] EXT4-fs (loop2): 1 truncate cleaned up
[  117.753574][ T7360] *** Log Format Error ! ***
[  117.764814][ T7387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.782449][ T7360] lmLogInit: exit(-22)
[  117.803159][ T7360] lmLogOpen: exit(-22)
[  117.806629][ T7387] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #2: block 13: comm syz.2.573: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  117.836005][ T7387] EXT4-fs (loop2): Remounting filesystem read-only
[  117.892400][ T7360] ERROR: (device loop3): jfs_link: read-only filesystem
[  117.892400][ T7360] 
[  117.925086][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.952815][ T7360] ERROR: (device loop3): remounting filesystem as read-only
[  118.121256][ T7394] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  118.316433][  T787] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  118.519960][  T787] usb 1-1: Using ep0 maxpacket: 32
[  118.537692][  T787] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  118.560087][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.587400][  T787] usb 1-1: config 0 descriptor??
[  118.616493][ T5773] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  118.627272][  T787] gspca_main: sunplus-2.14.0 probing 041e:400b
[  118.700945][ T7424] trusted_key: syz.1.596 sent an empty control message without MSG_MORE.
[  118.832712][ T5773] usb 3-1: config 0 has no interfaces?
[  118.839289][ T5773] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  118.852708][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.880332][ T5773] usb 3-1: config 0 descriptor??
[  118.943695][ T7435] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  119.013360][ T7437] loop1: detected capacity change from 0 to 256
[  119.039945][ T7437] FAT-fs (loop1): Directory bread(block 64) failed
[  119.051096][ T7437] FAT-fs (loop1): Directory bread(block 65) failed
[  119.058179][ T7437] FAT-fs (loop1): Directory bread(block 66) failed
[  119.064804][ T7437] FAT-fs (loop1): Directory bread(block 67) failed
[  119.076456][ T7437] FAT-fs (loop1): Directory bread(block 68) failed
[  119.083025][ T7437] FAT-fs (loop1): Directory bread(block 69) failed
[  119.093478][ T7437] FAT-fs (loop1): Directory bread(block 70) failed
[  119.101553][ T7437] FAT-fs (loop1): Directory bread(block 71) failed
[  119.111760][ T7437] FAT-fs (loop1): Directory bread(block 72) failed
[  119.121483][ T7437] FAT-fs (loop1): Directory bread(block 73) failed
[  119.207545][    T8] usb 3-1: USB disconnect, device number 6
[  119.441574][  T787] gspca_sunplus: reg_r err -71
[  119.446796][  T787] sunplus: probe of 1-1:0.0 failed with error -71
[  119.449237][ T7439] loop3: detected capacity change from 0 to 40427
[  119.461560][  T787] usb 1-1: USB disconnect, device number 7
[  119.462255][ T7439] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  119.489503][ T7439] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  119.513822][ T7439] F2FS-fs (loop3): Found nat_bits in checkpoint
[  119.563518][ T7439] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  119.571763][ T7439] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  120.069885][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'.
[  120.080057][ T7462] netlink: 'syz.0.605': attribute type 14 has an invalid length.
[  120.165273][ T7439] syz.3.595 (7439): drop_caches: 2
[  120.302405][ T7468] loop1: detected capacity change from 0 to 128
[  120.405568][ T7470] netlink: 'syz.0.610': attribute type 10 has an invalid length.
[  120.432528][ T7470] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  120.660736][ T7477] netlink: 'syz.0.613': attribute type 1 has an invalid length.
[  120.959170][ T7486] loop1: detected capacity change from 0 to 256
[  121.090275][ T7486] FAT-fs (loop1): Directory bread(block 64) failed
[  121.125508][ T7486] FAT-fs (loop1): Directory bread(block 65) failed
[  121.132188][ T7486] FAT-fs (loop1): Directory bread(block 66) failed
[  121.179527][ T7486] FAT-fs (loop1): Directory bread(block 67) failed
[  121.186495][ T7486] FAT-fs (loop1): Directory bread(block 68) failed
[  121.193053][ T7486] FAT-fs (loop1): Directory bread(block 69) failed
[  121.199742][ T7486] FAT-fs (loop1): Directory bread(block 70) failed
[  121.215263][ T7486] FAT-fs (loop1): Directory bread(block 71) failed
[  121.221919][ T7486] FAT-fs (loop1): Directory bread(block 72) failed
[  121.228524][ T7486] FAT-fs (loop1): Directory bread(block 73) failed
[  121.326427][ T7497] loop2: detected capacity change from 0 to 2048
[  121.416072][ T7497] Alternate GPT is invalid, using primary GPT.
[  121.432840][ T7497]  loop2: p2 p3 p7
[  121.624758][ T7506] loop1: detected capacity change from 0 to 4096
[  121.647232][ T7506] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  121.672232][ T7506] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  121.684457][ T7506] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  121.700148][ T7506] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  121.713081][ T7506] ntfs: volume version 3.1.
[  121.793822][   T42] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  121.811262][ T5782] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  121.920502][ T7508] loop3: detected capacity change from 0 to 32768
[  121.925403][ T5822] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  121.945564][ T7508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.626 (7508)
[  121.960934][ T7508] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.972906][   T49] wlan1: Trigger new scan to find an IBSS to join
[  121.987292][ T7508] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  122.004862][ T7508] BTRFS info (device loop3): force clearing of disk cache
[  122.029561][ T7508] BTRFS info (device loop3): enabling auto defrag
[  122.045242][ T7508] BTRFS info (device loop3): max_inline at 0
[  122.061625][ T7508] BTRFS info (device loop3): enabling disk space caching
[  122.081712][ T7508] BTRFS info (device loop3): disk space caching is enabled
[  122.125330][ T5822] usb 3-1: Using ep0 maxpacket: 8
[  122.132574][ T5822] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  122.147259][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.171382][ T5822] pvrusb2: Hardware description: Terratec Grabster AV400
[  122.184699][ T7508] BTRFS info (device loop3): enabling ssd optimizations
[  122.189289][ T5822] pvrusb2: **********
[  122.205216][ T5822] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  122.206307][ T7508] BTRFS info (device loop3): rebuilding free space tree
[  122.235203][ T5822] pvrusb2: Important functionality might not be entirely working.
[  122.235352][ T7508] BTRFS info (device loop3): disabling free space tree
[  122.251221][ T5822] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  122.254328][ T7508] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.281696][ T7508] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.285293][ T5822] pvrusb2: **********
[  122.382678][ T5784] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.389401][ T2314] pvrusb2: Invalid write control endpoint
[  122.504999][ T2314] pvrusb2: Invalid write control endpoint
[  122.538287][ T2314] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  122.569551][ T2314] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  122.593241][ T2314] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  122.622342][ T2314] pvrusb2: Device being rendered inoperable
[  122.655340][ T2314] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  122.682646][ T2314] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  122.696992][ T7510] pvrusb2: Killing an I2C write to 0 that is too large (desired=8192 limit=61)
[  122.738031][  T786] usb 3-1: USB disconnect, device number 7
[  122.738922][ T2314] pvrusb2: Attached sub-driver cx25840
[  122.788479][ T2314] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  122.815244][ T2314] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  123.141398][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  123.165995][ T7550] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  123.182058][ T7552] loop3: detected capacity change from 0 to 256
[  123.203737][ T7552] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  123.221103][ T7552] FAT-fs (loop3): Filesystem has been set read-only
[  123.228950][ T7552] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  123.243828][ T7552] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  123.262668][   T27] audit: type=1800 audit(1763644000.594:9): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.639" name="file1" dev="loop3" ino=1048630 res=0 errno=0
[  123.290695][ T7552] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  123.309110][ T7545] loop1: detected capacity change from 0 to 32768
[  123.321443][ T7545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.635 (7545)
[  123.344095][ T7545] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.354792][ T7545] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  123.369273][ T7545] BTRFS info (device loop1): turning on flush-on-commit
[  123.376784][ T7545] BTRFS info (device loop1): use zlib compression, level 3
[  123.384089][ T7545] BTRFS info (device loop1): disabling free space tree
[  123.392296][ T7545] BTRFS info (device loop1): enabling disk space caching
[  123.399981][ T7545] BTRFS info (device loop1): setting nodatasum
[  123.406458][ T7545] BTRFS info (device loop1): turning off barriers
[  123.413078][ T7545] BTRFS info (device loop1): enabling ssd optimizations
[  123.421892][ T7545] BTRFS info (device loop1): force clearing of disk cache
[  123.429938][ T7545] BTRFS info (device loop1): disk space caching is enabled
[  123.465975][ T7545] BTRFS info (device loop1): rebuilding free space tree
[  123.478466][ T7557] loop2: detected capacity change from 0 to 4096
[  123.484488][ T7545] BTRFS info (device loop1): disabling free space tree
[  123.493678][ T7545] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.505070][ T7545] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.647336][ T5782] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.653419][ T7574] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  123.738981][ T7576] loop3: detected capacity change from 0 to 512
[  123.747396][ T7576] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  123.765025][ T7576] EXT4-fs (loop3): invalid journal inode
[  123.778756][ T7576] EXT4-fs (loop3): can't get journal size
[  123.835535][ T7576] EXT4-fs (loop3): 1 truncate cleaned up
[  123.842499][ T7576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.993320][ T7582] loop2: detected capacity change from 0 to 512
[  124.017613][ T7582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.035099][ T7582] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.111327][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.142067][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.988653][ T7620] loop3: detected capacity change from 0 to 8192
[  125.000757][ T7620] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  125.013955][ T7620] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  125.023400][ T7620] REISERFS (device loop3): using ordered data mode
[  125.030029][ T7620] reiserfs: using flush barriers
[  125.036913][ T7620] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.053606][ T7620] REISERFS (device loop3): checking transaction log (loop3)
[  125.064730][ T7620] REISERFS (device loop3): Using r5 hash to sort names
[  125.071865][ T7620] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  125.155493][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  125.430782][ T5790] Bluetooth: Wrong link type (-57)
[  125.522459][ T7635] loop1: detected capacity change from 0 to 2048
[  125.583534][ T7635]  loop1: p1 < > p4
[  125.606575][ T7635] loop1: p4 start 42180 is beyond EOD, truncated
[  125.645299][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'.
[  126.190745][ T7655] netlink: 80 bytes leftover after parsing attributes in process `syz.1.676'.
[  126.533680][ T7649] loop2: detected capacity change from 0 to 32768
[  126.549344][ T7649] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.673 (7649)
[  126.571902][ T7649] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  126.582548][ T7649] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  126.605251][ T7649] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  126.620985][ T7649] BTRFS info (device loop2): use zstd compression, level 3
[  126.628454][ T7649] BTRFS info (device loop2): using free space tree
[  126.750444][ T7649] BTRFS info (device loop2): enabling ssd optimizations
[  126.773823][ T7649] BTRFS info (device loop2): auto enabling async discard
[  126.820389][ T7659] loop1: detected capacity change from 0 to 32768
[  126.845519][   T27] audit: type=1800 audit(1763644004.174:10): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.673" name="file1" dev="loop2" ino=260 res=0 errno=0
[  126.884197][ T5781] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  126.925239][   T27] audit: type=1800 audit(1763644004.254:11): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.678" name="file1" dev="loop1" ino=4 res=0 errno=0
[  126.948630][ T7659] syz.1.678: attempt to access beyond end of device
[  126.948630][ T7659] loop1: rw=34817, sector=4680064, nr_sectors = 120 limit=32768
[  126.975308][  T112] blkno = 8ed30, nblocks = f
[  126.979982][  T112] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  126.979982][  T112] 
[  126.998800][   T11] wlan1: Trigger new scan to find an IBSS to join
[  127.036468][  T112] ERROR: (device loop1): remounting filesystem as read-only
[  127.342566][ T7692] loop2: detected capacity change from 0 to 4096
[  127.353697][ T7692] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  127.879381][ T7695] loop3: detected capacity change from 0 to 32768
[  127.893630][ T7695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.688 (7695)
[  127.929037][ T7695] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.949281][ T7695] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  127.959847][   T11] wlan1: Creating new IBSS network, BSSID fe:7a:9a:2d:5f:68
[  127.974286][ T7695] BTRFS info (device loop3): allowing degraded mounts
[  127.981507][ T7695] BTRFS info (device loop3): turning on flush-on-commit
[  127.983309][ T7708] loop0: detected capacity change from 0 to 512
[  127.992707][ T7695] BTRFS info (device loop3): max_inline at 0
[  128.000941][ T7695] BTRFS info (device loop3): setting nodatasum
[  128.011699][ T7695] BTRFS info (device loop3): turning on sync discard
[  128.018968][ T7695] BTRFS info (device loop3): setting datasum
[  128.025059][ T7695] BTRFS info (device loop3): using free space tree
[  128.044400][ T7708] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  128.085827][ T7708] EXT4-fs (loop0): invalid journal inode
[  128.087447][ T7695] BTRFS info (device loop3): enabling ssd optimizations
[  128.091905][ T7708] EXT4-fs (loop0): can't get journal size
[  128.146573][ T7708] EXT4-fs (loop0): 1 truncate cleaned up
[  128.153746][ T7708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.193816][   T27] audit: type=1800 audit(1763644005.524:12): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.688" name="file1" dev="loop3" ino=260 res=0 errno=0
[  128.418505][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.563698][ T7737] loop1: detected capacity change from 0 to 64
[  128.618412][ T5784] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.629993][ T7737] syz.1.700: attempt to access beyond end of device
[  128.629993][ T7737] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  128.661476][ T7737] Buffer I/O error on dev loop1, logical block 134217734, async page read
[  129.146361][ T7749] loop1: detected capacity change from 0 to 512
[  129.184211][ T7749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.209530][ T7753] loop3: detected capacity change from 0 to 2048
[  129.241789][ T7753] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  129.267926][ T7753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.332600][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.363130][ T7753] overlayfs: upper fs needs to support d_type.
[  129.406520][ T7753] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  129.416227][ T7753] overlayfs: failed to set xattr on upper
[  129.422051][ T7753] overlayfs: ...falling back to redirect_dir=nofollow.
[  129.434951][ T7753] overlayfs: ...falling back to index=off.
[  129.458421][ T7753] overlayfs: ...falling back to uuid=null.
[  129.476198][ T7764] loop1: detected capacity change from 0 to 512
[  129.514118][ T7764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  129.526437][ T5784] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh
[  129.541461][ T5784] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh
[  129.590645][ T7764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.656476][ T7764] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.844513][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.991914][ T7779] loop1: detected capacity change from 0 to 256
[  130.023839][ T7779] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  130.088408][   T27] audit: type=1800 audit(1763644007.424:13): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.717" name="file1" dev="loop1" ino=1048631 res=0 errno=0
[  130.090607][ T7779] exFAT-fs (loop1): error, tried to truncate zeroed cluster.
[  130.125548][ T7779] exFAT-fs (loop1): Filesystem has been set read-only
[  130.216710][ T7779] exFAT-fs (loop1): hint_cluster is invalid (1), rewind to the first cluster
[  130.288754][ T7779] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[  130.308545][ T7779] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805a7d1b60 iblock : 9, err : -5)
[  130.335517][ T7779] exFAT-fs (loop1): error, tried to truncate zeroed cluster.
[  130.353838][ T7779] syz.1.717: attempt to access beyond end of device
[  130.353838][ T7779] loop1: rw=2049, sector=34359738488, nr_sectors = 8 limit=256
[  130.773004][ T7783] loop2: detected capacity change from 0 to 32768
[  130.806037][ T7783] 
[  130.806037][ T7783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.806037][ T7783] 
[  130.884238][ T7783] 
[  130.884238][ T7783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.884238][ T7783] 
[  130.900509][ T7783] 
[  130.900509][ T7783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.900509][ T7783] 
[  130.912652][ T7783] 
[  130.912652][ T7783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.912652][ T7783] 
[  130.923920][ T7783] 
[  130.923920][ T7783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.923920][ T7783] 
[  130.934970][ T7783] 
[  130.934970][ T7783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.934970][ T7783] 
[  130.971971][  T111] 
[  130.971971][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.971971][  T111] 
[  130.992217][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.012840][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.021461][   T12] 
[  131.021461][   T12]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.021461][   T12] 
[  131.021729][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.038533][   T12] 
[  131.038533][   T12]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.038533][   T12] 
[  131.041816][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.050761][ T5781] 
[  131.050761][ T5781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.050761][ T5781] 
[  131.065344][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  131.072998][ T5781] 
[  131.072998][ T5781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.072998][ T5781] 
[  131.075300][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.100823][  T112] ==================================================================
[  131.108907][  T112] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80
[  131.116549][  T112] Read of size 8 at addr ffff88807831e0d8 by task jfsCommit/112
[  131.124176][  T112] 
[  131.126514][  T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0
[  131.133707][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  131.143769][  T112] Call Trace:
[  131.147400][  T112]  <TASK>
[  131.150338][  T112]  dump_stack_lvl+0x16c/0x230
[  131.155032][  T112]  ? __lock_acquire+0x7c80/0x7c80
[  131.160069][  T112]  ? show_regs_print_info+0x20/0x20
[  131.165275][  T112]  ? load_image+0x3b0/0x3b0
[  131.169785][  T112]  ? __virt_addr_valid+0x469/0x540
[  131.174900][  T112]  print_report+0xac/0x220
[  131.179321][  T112]  ? __lock_acquire+0xff/0x7c80
[  131.184179][  T112]  kasan_report+0x117/0x150
[  131.188694][  T112]  ? __lock_acquire+0xff/0x7c80
[  131.193551][  T112]  __lock_acquire+0xff/0x7c80
[  131.198234][  T112]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  131.204215][  T112]  ? lock_chain_count+0x20/0x20
[  131.209073][  T112]  ? lockdep_hardirqs_on+0x98/0x150
[  131.214273][  T112]  ? verify_lock_unused+0x140/0x140
[  131.219478][  T112]  ? __schedule+0x14da/0x44d0
[  131.224170][  T112]  lock_acquire+0x197/0x410
[  131.228683][  T112]  ? __mutex_lock+0x3b4/0xcc0
[  131.233375][  T112]  ? asan.module_dtor+0x20/0x20
[  131.238232][  T112]  ? mutex_spin_on_owner+0x27e/0x340
[  131.243526][  T112]  ? read_lock_is_recursive+0x20/0x20
[  131.248905][  T112]  _raw_spin_lock+0x2e/0x40
[  131.253418][  T112]  ? __mutex_lock+0x3b4/0xcc0
[  131.258100][  T112]  __mutex_lock+0x3b4/0xcc0
[  131.262596][  T112]  ? jfs_syncpt+0x25/0x90
[  131.266910][  T112]  ? mutex_lock_nested+0x20/0x20
[  131.271835][  T112]  ? __rwlock_init+0x150/0x150
[  131.276585][  T112]  jfs_syncpt+0x25/0x90
[  131.280724][  T112]  txEnd+0x2e5/0x520
[  131.284605][  T112]  jfs_lazycommit+0x5a6/0xa60
[  131.289266][  T112]  ? txFreelock+0x5a0/0x5a0
[  131.293750][  T112]  ? do_task_dead+0xd0/0xd0
[  131.298234][  T112]  ? __kthread_parkme+0x7a/0x1c0
[  131.303163][  T112]  kthread+0x2fa/0x390
[  131.307215][  T112]  ? txFreelock+0x5a0/0x5a0
[  131.311701][  T112]  ? kthread_blkcg+0xd0/0xd0
[  131.316271][  T112]  ret_from_fork+0x48/0x80
[  131.320673][  T112]  ? kthread_blkcg+0xd0/0xd0
[  131.325243][  T112]  ret_from_fork_asm+0x11/0x20
[  131.329995][  T112]  </TASK>
[  131.332995][  T112] 
[  131.335310][  T112] Allocated by task 7783:
[  131.339620][  T112]  kasan_set_track+0x4e/0x70
[  131.344191][  T112]  __kasan_kmalloc+0x8f/0xa0
[  131.348761][  T112]  lmLogOpen+0x2df/0xfb0
[  131.352981][  T112]  jfs_mount_rw+0xea/0x670
[  131.357384][  T112]  jfs_fill_super+0x592/0xac0
[  131.362046][  T112]  mount_bdev+0x22b/0x2d0
[  131.366360][  T112]  legacy_get_tree+0xea/0x180
[  131.371022][  T112]  vfs_get_tree+0x8c/0x280
[  131.375420][  T112]  do_new_mount+0x24b/0xa40
[  131.379902][  T112]  __se_sys_mount+0x2da/0x3c0
[  131.384554][  T112]  do_syscall_64+0x55/0xb0
[  131.388954][  T112]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.394827][  T112] 
[  131.397133][  T112] Freed by task 5781:
[  131.401089][  T112]  kasan_set_track+0x4e/0x70
[  131.405659][  T112]  kasan_save_free_info+0x2e/0x50
[  131.410665][  T112]  ____kasan_slab_free+0x126/0x1e0
[  131.415757][  T112]  slab_free_freelist_hook+0x130/0x1b0
[  131.421202][  T112]  __kmem_cache_free+0xba/0x1f0
[  131.426035][  T112]  lmLogClose+0x297/0x520
[  131.430366][  T112]  jfs_umount+0x2ef/0x3c0
[  131.434678][  T112]  jfs_put_super+0x8c/0x190
[  131.439164][  T112]  generic_shutdown_super+0x134/0x2b0
[  131.444519][  T112]  kill_block_super+0x44/0x90
[  131.449178][  T112]  deactivate_locked_super+0x97/0x100
[  131.454535][  T112]  cleanup_mnt+0x429/0x4c0
[  131.458931][  T112]  task_work_run+0x1ce/0x250
[  131.463505][  T112]  exit_to_user_mode_loop+0xe6/0x110
[  131.468773][  T112]  exit_to_user_mode_prepare+0xf6/0x180
[  131.474299][  T112]  syscall_exit_to_user_mode+0x1a/0x50
[  131.479738][  T112]  do_syscall_64+0x61/0xb0
[  131.484138][  T112]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.490011][  T112] 
[  131.492318][  T112] Last potentially related work creation:
[  131.498017][  T112]  kasan_save_stack+0x3e/0x60
[  131.502675][  T112]  __kasan_record_aux_stack+0xaf/0xc0
[  131.508033][  T112]  call_rcu+0x158/0x930
[  131.512172][  T112]  taprio_destroy+0x263/0x550
[  131.516828][  T112]  qdisc_create+0xbf2/0x1050
[  131.521401][  T112]  tc_modify_qdisc+0xb33/0x1cc0
[  131.526234][  T112]  rtnetlink_rcv_msg+0x7c7/0xf10
[  131.531151][  T112]  netlink_rcv_skb+0x216/0x480
[  131.535895][  T112]  netlink_unicast+0x751/0x8d0
[  131.540638][  T112]  netlink_sendmsg+0x8c1/0xbe0
[  131.545383][  T112]  ____sys_sendmsg+0x5bf/0x950
[  131.550135][  T112]  ___sys_sendmsg+0x220/0x290
[  131.554793][  T112]  __se_sys_sendmsg+0x1a5/0x270
[  131.559639][  T112]  do_syscall_64+0x55/0xb0
[  131.564043][  T112]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.569927][  T112] 
[  131.572237][  T112] The buggy address belongs to the object at ffff88807831e000
[  131.572237][  T112]  which belongs to the cache kmalloc-1k of size 1024
[  131.586285][  T112] The buggy address is located 216 bytes inside of
[  131.586285][  T112]  freed 1024-byte region [ffff88807831e000, ffff88807831e400)
[  131.600199][  T112] 
[  131.602513][  T112] The buggy address belongs to the physical page:
[  131.608919][  T112] page:ffffea0001e0c600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78318
[  131.619054][  T112] head:ffffea0001e0c600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  131.627970][  T112] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  131.636378][  T112] page_type: 0xffffffff()
[  131.640689][  T112] raw: 00fff00000000840 ffff888017841dc0 0000000000000000 dead000000000001
[  131.649255][  T112] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  131.657823][  T112] page dumped because: kasan: bad access detected
[  131.664221][  T112] page_owner tracks the page as allocated
[  131.669930][  T112] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 59, tgid 59 (kworker/u4:4), ts 68844042743, free_ts 68822312965
[  131.690235][  T112]  post_alloc_hook+0x1cd/0x210
[  131.694998][  T112]  get_page_from_freelist+0x195c/0x19f0
[  131.700550][  T112]  __alloc_pages+0x1e3/0x460
[  131.705148][  T112]  alloc_slab_page+0x5d/0x170
[  131.709828][  T112]  new_slab+0x87/0x2e0
[  131.713891][  T112]  ___slab_alloc+0xc6d/0x1300
[  131.718556][  T112]  __kmem_cache_alloc_node+0x1a2/0x260
[  131.724022][  T112]  __kmalloc+0xa4/0x240
[  131.728165][  T112]  ___neigh_create+0x6d2/0x2440
[  131.733011][  T112]  ip6_finish_output2+0x159e/0x1650
[  131.738196][  T112]  ndisc_send_skb+0xbed/0x14b0
[  131.742949][  T112]  ndisc_send_ns+0xcc/0x150
[  131.747438][  T112]  addrconf_dad_work+0xa25/0x14e0
[  131.752449][  T112]  process_scheduled_works+0xa45/0x15b0
[  131.757979][  T112]  worker_thread+0xa55/0xfc0
[  131.762551][  T112]  kthread+0x2fa/0x390
[  131.766604][  T112] page last free stack trace:
[  131.771260][  T112]  free_unref_page_prepare+0x7ce/0x8e0
[  131.776705][  T112]  free_unref_page+0x32/0x2e0
[  131.781370][  T112]  __unfreeze_partials+0x1cf/0x210
[  131.786470][  T112]  put_cpu_partial+0x17c/0x250
[  131.791223][  T112]  __slab_free+0x31d/0x410
[  131.795625][  T112]  qlist_free_all+0x75/0xe0
[  131.800112][  T112]  kasan_quarantine_reduce+0x143/0x160
[  131.805557][  T112]  __kasan_slab_alloc+0x22/0x80
[  131.810397][  T112]  slab_post_alloc_hook+0x6e/0x4d0
[  131.815494][  T112]  kmem_cache_alloc+0x11e/0x2e0
[  131.820330][  T112]  getname_flags+0xbb/0x500
[  131.824818][  T112]  vfs_fstatat+0x111/0x1b0
[  131.829214][  T112]  __x64_sys_newfstatat+0x117/0x190
[  131.834394][  T112]  do_syscall_64+0x55/0xb0
[  131.838797][  T112]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.844674][  T112] 
[  131.846985][  T112] Memory state around the buggy address:
[  131.852592][  T112]  ffff88807831df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  131.860640][  T112]  ffff88807831e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.868680][  T112] >ffff88807831e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.876720][  T112]                                                     ^
[  131.883634][  T112]  ffff88807831e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.891678][  T112]  ffff88807831e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.899719][  T112] ==================================================================
[  131.907774][  T112] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  131.914946][  T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0
[  131.922123][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  131.932158][  T112] Call Trace:
[  131.935426][  T112]  <TASK>
[  131.938346][  T112]  dump_stack_lvl+0x16c/0x230
[  131.943013][  T112]  ? show_regs_print_info+0x20/0x20
[  131.948199][  T112]  ? load_image+0x3b0/0x3b0
[  131.952690][  T112]  panic+0x2c0/0x710
[  131.956577][  T112]  ? bpf_jit_dump+0xd0/0xd0
[  131.961065][  T112]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  131.966942][  T112]  ? _raw_spin_unlock+0x40/0x40
[  131.971774][  T112]  ? print_memory_metadata+0x314/0x400
[  131.977219][  T112]  ? __lock_acquire+0xff/0x7c80
[  131.982052][  T112]  check_panic_on_warn+0x84/0xa0
[  131.986972][  T112]  ? __lock_acquire+0xff/0x7c80
[  131.991805][  T112]  end_report+0x6f/0x140
[  131.996032][  T112]  kasan_report+0x128/0x150
[  132.000522][  T112]  ? __lock_acquire+0xff/0x7c80
[  132.005364][  T112]  __lock_acquire+0xff/0x7c80
[  132.010030][  T112]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  132.015994][  T112]  ? lock_chain_count+0x20/0x20
[  132.020831][  T112]  ? lockdep_hardirqs_on+0x98/0x150
[  132.026011][  T112]  ? verify_lock_unused+0x140/0x140
[  132.031193][  T112]  ? __schedule+0x14da/0x44d0
[  132.035861][  T112]  lock_acquire+0x197/0x410
[  132.040348][  T112]  ? __mutex_lock+0x3b4/0xcc0
[  132.045012][  T112]  ? asan.module_dtor+0x20/0x20
[  132.049852][  T112]  ? mutex_spin_on_owner+0x27e/0x340
[  132.055128][  T112]  ? read_lock_is_recursive+0x20/0x20
[  132.060492][  T112]  _raw_spin_lock+0x2e/0x40
[  132.064976][  T112]  ? __mutex_lock+0x3b4/0xcc0
[  132.069637][  T112]  __mutex_lock+0x3b4/0xcc0
[  132.074127][  T112]  ? jfs_syncpt+0x25/0x90
[  132.078453][  T112]  ? mutex_lock_nested+0x20/0x20
[  132.083376][  T112]  ? __rwlock_init+0x150/0x150
[  132.088124][  T112]  jfs_syncpt+0x25/0x90
[  132.092263][  T112]  txEnd+0x2e5/0x520
[  132.096143][  T112]  jfs_lazycommit+0x5a6/0xa60
[  132.100805][  T112]  ? txFreelock+0x5a0/0x5a0
[  132.105293][  T112]  ? do_task_dead+0xd0/0xd0
[  132.109790][  T112]  ? __kthread_parkme+0x7a/0x1c0
[  132.114716][  T112]  kthread+0x2fa/0x390
[  132.118767][  T112]  ? txFreelock+0x5a0/0x5a0
[  132.123253][  T112]  ? kthread_blkcg+0xd0/0xd0
[  132.127824][  T112]  ret_from_fork+0x48/0x80
[  132.132224][  T112]  ? kthread_blkcg+0xd0/0xd0
[  132.136796][  T112]  ret_from_fork_asm+0x11/0x20
[  132.141556][  T112]  </TASK>
[  132.144789][  T112] Kernel Offset: disabled
[  132.149094][  T112] Rebooting in 86400 seconds..