last executing test programs:

6.543765109s ago: executing program 1 (id=424):
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_io_uring_setup(0x108, &(0x7f0000000400)={0x0, 0x5841, 0x400, 0x0, 0x8b}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

6.276886361s ago: executing program 1 (id=429):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5558, &(0x7f0000000a00)="$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")
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380), &(0x7f0000000640)=@ng={0x4, 0x3}, 0x2, 0x0)
mmap$xdp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000004, 0x12, r0, 0x180000000)

6.211794741s ago: executing program 3 (id=430):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))

5.993835222s ago: executing program 3 (id=431):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x5}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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")
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200})
lstat(&(0x7f0000002c80)='./bus\x00', &(0x7f0000002cc0))

5.127832768s ago: executing program 2 (id=435):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x18d, &(0x7f00000001c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000180)=""/49, 0x2d)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/182, 0xb6)

4.71536768s ago: executing program 2 (id=436):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x100c000, &(0x7f0000000280)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@enospc_debug}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd")
chdir(&(0x7f0000000080)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0x90fff9)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0xfffffffffffffffc, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

4.270929803s ago: executing program 3 (id=437):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
readv(r1, &(0x7f0000000180)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1)

4.008702075s ago: executing program 1 (id=439):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1a10810, &(0x7f00000081c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="d435d9afbeca2782ae19ed8bd41575ea7d9c9874c548e8a3b6d356a39d4518f41339a72ccd509df9e4d9d79abcc2f6da6768bd4f40d0beffba62fb5009c1e93fd4fe41778354a47dc025c852e30590bfb3cccdb6c83b0fdb27f16f03d72df1eac33d4948589efe30db71a5f7e31a303bf4ed9f3125c0a7aa0008ddaa", @ANYRES8], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

3.764833747s ago: executing program 3 (id=440):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000000000000000001"])

2.751997893s ago: executing program 3 (id=441):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
setrlimit(0xd, &(0x7f0000000080)={0x3, 0xf})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)="90"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"})

2.240961466s ago: executing program 3 (id=444):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000000000)='S', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.859323608s ago: executing program 0 (id=446):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x10, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x475, &(0x7f0000001240)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0))

1.804346259s ago: executing program 1 (id=447):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.729979279s ago: executing program 2 (id=448):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)

1.288176191s ago: executing program 0 (id=449):
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0000, 0x0)
r0 = memfd_secret(0x0)
close_range(r0, r0, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
futimesat(r0, 0x0, 0x0)

1.249227192s ago: executing program 1 (id=450):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0xabd, &(0x7f0000000e00)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.067711793s ago: executing program 0 (id=451):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180))
close(r0)

951.495724ms ago: executing program 2 (id=452):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000300)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@hide}, {@session={'session', 0x3d, 0x32}}, {@map_off}, {@map_acorn}, {@mode={'mode', 0x3d, 0xb2eb}}, {@check_strict}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
read$FUSE(r0, &(0x7f0000003740)={0x2020}, 0xffffff01)

759.338145ms ago: executing program 0 (id=453):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2e, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x4000000)

597.131026ms ago: executing program 0 (id=454):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

499.828367ms ago: executing program 2 (id=455):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_io_uring_setup(0x49b, &(0x7f0000000180)={0x0, 0x4885, 0x400, 0x3, 0x192}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x3}})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

337.347447ms ago: executing program 0 (id=456):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = dup(r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x8c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

151.244059ms ago: executing program 2 (id=457):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/3, 0x3}, 0x9}], 0x1, 0x60010020, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

0s ago: executing program 1 (id=458):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
close(r0)
socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts.
[   73.207498][ T5778] cgroup: Unknown subsys name 'net'
[   73.372184][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.974515][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   77.040069][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.048471][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.057362][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.065963][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.074639][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.081874][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.090530][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.098930][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.104705][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   77.106899][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.121591][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.129331][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.129364][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.136812][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.152351][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   77.159905][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.168058][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.173752][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.186542][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.196595][ T5805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   77.204338][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.212280][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.219511][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   77.231191][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.719750][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   77.730584][ T5791] chnl_net:caif_netlink_parms(): no params data found
[   77.763625][ T5790] chnl_net:caif_netlink_parms(): no params data found
[   77.904827][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   77.958961][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.967447][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.975624][ T5791] bridge_slave_0: entered allmulticast mode
[   77.982594][ T5791] bridge_slave_0: entered promiscuous mode
[   78.031220][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.038569][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.046038][ T5791] bridge_slave_1: entered allmulticast mode
[   78.052850][ T5791] bridge_slave_1: entered promiscuous mode
[   78.071702][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.079178][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.086568][ T5787] bridge_slave_0: entered allmulticast mode
[   78.093996][ T5787] bridge_slave_0: entered promiscuous mode
[   78.130061][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.137377][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.145089][ T5790] bridge_slave_0: entered allmulticast mode
[   78.152113][ T5790] bridge_slave_0: entered promiscuous mode
[   78.159776][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.167364][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.174601][ T5787] bridge_slave_1: entered allmulticast mode
[   78.181503][ T5787] bridge_slave_1: entered promiscuous mode
[   78.200425][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.210463][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.218174][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.225591][ T5790] bridge_slave_1: entered allmulticast mode
[   78.233017][ T5790] bridge_slave_1: entered promiscuous mode
[   78.285075][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.321207][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.357197][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.369501][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.380933][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.390805][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.398234][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.405448][ T5788] bridge_slave_0: entered allmulticast mode
[   78.412284][ T5788] bridge_slave_0: entered promiscuous mode
[   78.424412][ T5791] team0: Port device team_slave_0 added
[   78.432982][ T5791] team0: Port device team_slave_1 added
[   78.461574][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.468816][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.476137][ T5788] bridge_slave_1: entered allmulticast mode
[   78.483004][ T5788] bridge_slave_1: entered promiscuous mode
[   78.547997][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.555142][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.581280][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.595829][ T5790] team0: Port device team_slave_0 added
[   78.602328][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.609962][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.636426][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.650730][ T5787] team0: Port device team_slave_0 added
[   78.659324][ T5787] team0: Port device team_slave_1 added
[   78.680375][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.700894][ T5790] team0: Port device team_slave_1 added
[   78.749564][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.795403][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.802394][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.828874][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.842247][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.849741][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.880579][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.895331][ T5788] team0: Port device team_slave_0 added
[   78.907922][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.914999][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.941053][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.965303][ T5788] team0: Port device team_slave_1 added
[   78.990768][ T5791] hsr_slave_0: entered promiscuous mode
[   78.998632][ T5791] hsr_slave_1: entered promiscuous mode
[   79.006160][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.013149][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.039589][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.121140][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.128811][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.155069][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.167777][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.174794][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.200763][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.250570][ T5787] hsr_slave_0: entered promiscuous mode
[   79.256756][ T5798] Bluetooth: hci0: command tx timeout
[   79.264281][ T5798] Bluetooth: hci3: command tx timeout
[   79.268716][ T5787] hsr_slave_1: entered promiscuous mode
[   79.276638][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.284687][ T5787] Cannot create hsr debugfs directory
[   79.305192][ T5790] hsr_slave_0: entered promiscuous mode
[   79.311544][ T5790] hsr_slave_1: entered promiscuous mode
[   79.318150][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.325760][ T5790] Cannot create hsr debugfs directory
[   79.333795][ T5803] Bluetooth: hci1: command tx timeout
[   79.339507][ T5798] Bluetooth: hci2: command tx timeout
[   79.374556][ T5788] hsr_slave_0: entered promiscuous mode
[   79.380889][ T5788] hsr_slave_1: entered promiscuous mode
[   79.387848][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.395730][ T5788] Cannot create hsr debugfs directory
[   79.779262][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.794177][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.805987][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.818216][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.887305][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.904546][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.925193][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.935943][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.013976][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.029350][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.050784][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.088670][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.140000][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.150928][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.167444][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.177801][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.208056][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.286207][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[   80.311851][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.319280][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.347999][   T72] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.355276][   T72] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.399800][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.453414][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   80.477478][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.502052][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.509238][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.525665][   T72] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.532810][   T72] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.547530][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.598442][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   80.628346][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   80.649358][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.656575][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.673600][   T72] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.680744][   T72] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.732232][ T5790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   80.747930][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.771257][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.778450][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.828382][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.835590][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.911563][ T5788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   80.943135][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.002647][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.122587][ T5791] veth0_vlan: entered promiscuous mode
[   81.152736][ T5791] veth1_vlan: entered promiscuous mode
[   81.256728][ T5791] veth0_macvtap: entered promiscuous mode
[   81.287941][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.302835][ T5791] veth1_macvtap: entered promiscuous mode
[   81.334408][ T5798] Bluetooth: hci3: command tx timeout
[   81.339857][ T5798] Bluetooth: hci0: command tx timeout
[   81.378542][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.415608][ T5803] Bluetooth: hci2: command tx timeout
[   81.418648][ T5798] Bluetooth: hci1: command tx timeout
[   81.432365][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.453453][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.462409][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.471306][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.480171][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.510222][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.529761][ T5790] veth0_vlan: entered promiscuous mode
[   81.552610][ T5790] veth1_vlan: entered promiscuous mode
[   81.580751][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.699093][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.709664][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.807126][ T5790] veth0_macvtap: entered promiscuous mode
[   81.821768][ T5787] veth0_vlan: entered promiscuous mode
[   81.847839][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.857891][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.868322][ T5790] veth1_macvtap: entered promiscuous mode
[   81.900768][ T5788] veth0_vlan: entered promiscuous mode
[   81.916769][ T5787] veth1_vlan: entered promiscuous mode
[   81.936076][ T5788] veth1_vlan: entered promiscuous mode
[   81.976888][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.009695][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.022166][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.095800][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.107262][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.119126][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.133266][ T5787] veth0_macvtap: entered promiscuous mode
[   82.187259][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.223781][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.232526][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.272947][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.312400][ T5787] veth1_macvtap: entered promiscuous mode
[   82.339534][ T5788] veth0_macvtap: entered promiscuous mode
[   82.361213][ T5788] veth1_macvtap: entered promiscuous mode
[   82.417404][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.428849][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.438764][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.449919][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.464398][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.524047][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.555793][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.567287][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.582673][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.596916][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.617719][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.636658][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.648433][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.661980][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.683186][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.700473][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.722404][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.751375][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.764473][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.776085][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.786782][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.800450][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.811158][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.824921][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.829318][ T5887] syz.3.8[5887]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   82.858222][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.877614][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.889641][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.898550][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.939567][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.973645][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.974763][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.992053][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.001031][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.011471][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.159002][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.174082][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.199746][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.238126][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.284368][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.292246][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.415217][ T5798] Bluetooth: hci0: command tx timeout
[   83.420742][ T5798] Bluetooth: hci3: command tx timeout
[   83.463039][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.487188][ T5887] loop3: detected capacity change from 0 to 32768
[   83.490029][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.494548][ T5798] Bluetooth: hci1: command tx timeout
[   83.507327][ T5803] Bluetooth: hci2: command tx timeout
[   83.526063][ T5887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8 (5887)
[   83.545909][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.564957][ T5887] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   83.582157][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.608233][ T5887] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   83.630327][ T5887] BTRFS info (device loop3): using free space tree
[   83.866286][ T5911] loop0: detected capacity change from 0 to 8
[   83.952683][ T5887] BTRFS info (device loop3): enabling ssd optimizations
[   84.009548][ T5887] BTRFS info (device loop3): auto enabling async discard
[   84.104599][ T5915] loop2: detected capacity change from 0 to 764
[   84.455738][ T5917] netlink: 'syz.1.11': attribute type 21 has an invalid length.
[   84.573299][ T5791] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.762759][ T5927] loop0: detected capacity change from 0 to 512
[   84.788225][ T5927] =======================================================
[   84.788225][ T5927] WARNING: The mand mount option has been deprecated and
[   84.788225][ T5927]          and is ignored by this kernel. Remove the mand
[   84.788225][ T5927]          option from the mount to silence this warning.
[   84.788225][ T5927] =======================================================
[   84.960959][ T5927] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   84.981547][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.381194][ T5943] loop2: detected capacity change from 0 to 64
[   85.495499][ T5798] Bluetooth: hci3: command tx timeout
[   85.501019][ T5803] Bluetooth: hci0: command tx timeout
[   85.575209][ T5798] Bluetooth: hci1: command tx timeout
[   85.580664][ T5798] Bluetooth: hci2: command tx timeout
[   86.034122][ T5961] input: syz0 as /devices/virtual/input/input5
[   86.244724][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'.
[   86.257200][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[   86.278318][ T5964] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.288839][ T5964] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.297840][ T5964] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.306657][ T5964] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.542934][ T5971] Bluetooth: MGMT ver 1.22
[   86.694278][   T28] audit: type=1326 audit(1762211796.363:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   86.754136][   T28] audit: type=1326 audit(1762211796.363:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   86.796114][  T968] cfg80211: failed to load regulatory.db
[   86.853370][ T5959] loop1: detected capacity change from 0 to 32768
[   86.864757][   T28] audit: type=1326 audit(1762211796.373:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   86.941187][   T28] audit: type=1326 audit(1762211796.373:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   86.991670][   T28] audit: type=1326 audit(1762211796.373:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   87.015303][   T28] audit: type=1326 audit(1762211796.373:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   87.040219][   T28] audit: type=1326 audit(1762211796.373:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   87.067391][ T5959] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.080577][   T28] audit: type=1326 audit(1762211796.373:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   87.108433][   T28] audit: type=1326 audit(1762211796.383:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   87.130638][   T28] audit: type=1326 audit(1762211796.383:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7ab8f6c9 code=0x7ffc0000
[   87.152674][    C0] vkms_vblank_simulate: vblank timer overrun
[   87.203901][ T5959] XFS (loop1): Ending clean mount
[   87.254029][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   87.257111][ T5959] XFS (loop1): Quotacheck needed: Please wait.
[   87.340982][ T5959] XFS (loop1): Quotacheck: Done.
[   87.475421][    T8] usb 3-1: Using ep0 maxpacket: 16
[   87.492704][    T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   87.512913][    T8] usb 3-1: config 0 has no interface number 0
[   87.527063][    T8] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   87.540224][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.556529][    T8] usb 3-1: Product: syz
[   87.575392][    T8] usb 3-1: Manufacturer: syz
[   87.580036][    T8] usb 3-1: SerialNumber: syz
[   87.615399][    T8] usb 3-1: config 0 descriptor??
[   87.646201][    T8] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   87.763350][ T5986] loop0: detected capacity change from 0 to 32768
[   87.786775][ T5986] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.38 (5986)
[   87.817230][ T5986] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.844315][ T5986] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   87.873633][ T5986] BTRFS info (device loop0): doing ref verification
[   87.878227][ T5790] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.911940][ T5986] BTRFS info (device loop0): max_inline at 0
[   87.940288][ T5986] BTRFS info (device loop0): force clearing of disk cache
[   88.001627][ T5986] BTRFS info (device loop0): turning on sync discard
[   88.020207][ T5986] BTRFS info (device loop0): using free space tree
[   88.050004][ T5986] workqueue: max_active 4096 requested for btrfs-worker is out of range, clamping between 1 and 512
[   88.102325][ T5986] workqueue: max_active 4096 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[   88.130279][ T5986] workqueue: max_active 4096 requested for btrfs-endio is out of range, clamping between 1 and 512
[   88.161875][ T5986] workqueue: max_active 4096 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[   88.243230][ T5986] workqueue: max_active 4096 requested for btrfs-rmw is out of range, clamping between 1 and 512
[   88.295619][ T5986] workqueue: max_active 4096 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[   88.323658][ T5986] workqueue: max_active 4096 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[   88.513899][ T5986] BTRFS info (device loop0): enabling ssd optimizations
[   88.572514][ T5986] BTRFS info (device loop0): rebuilding free space tree
[   88.650291][    T8] gspca_spca1528: reg_w err -71
[   88.657380][    T8] spca1528: probe of 3-1:0.1 failed with error -71
[   88.685535][    T8] usb 3-1: USB disconnect, device number 2
[   88.858081][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   88.941291][  T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   89.105388][ T6025] loop0: detected capacity change from 0 to 256
[   89.133083][ T6025] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d)
[   89.183641][  T788] usb 2-1: Using ep0 maxpacket: 8
[   89.190929][  T788] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   89.201443][  T788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   89.213895][  T788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   89.225394][  T788] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.243193][  T788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   89.297928][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.534276][  T788] usb 2-1: GET_CAPABILITIES returned 0
[   89.539834][  T788] usbtmc 2-1:16.0: can't read capabilities
[   89.706709][ T6036] loop3: detected capacity change from 0 to 64
[   89.811418][ T5794] usb 2-1: USB disconnect, device number 2
[   90.010338][ T6040] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   90.054922][ T6041] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   90.148532][ T6027] loop0: detected capacity change from 0 to 32768
[   90.210817][ T6027] 
[   90.210817][ T6027]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.210817][ T6027] 
[   90.318603][ T6027] read_mapping_page failed!
[   90.333715][ T6027] ERROR: (device loop0): txCommit: 
[   90.333715][ T6027] 
[   90.377089][ T6044] read_mapping_page failed!
[   90.383059][ T6044] ERROR: (device loop0): txCommit: 
[   90.383059][ T6044] 
[   90.502815][ T5787] 
[   90.502815][ T5787]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.502815][ T5787] 
[   90.526252][ T6048] netlink: 'syz.2.56': attribute type 2 has an invalid length.
[   90.587652][ T6050] loop3: detected capacity change from 0 to 128
[   90.595333][ T5787] 
[   90.595333][ T5787]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.595333][ T5787] 
[   90.653639][ T6050] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.752142][ T6050] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   90.819270][ T6055] loop1: detected capacity change from 0 to 128
[   90.876534][ T6058] syz_tun: entered allmulticast mode
[   90.884740][ T6055] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   90.911157][ T6055] hpfs: filesystem error: improperly stopped
[   90.913111][ T6050] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.58: Corrupt dir, invalid name for '.', running e2fsck is recommended
[   90.940056][ T6055] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   90.947938][ T6055] hpfs: You really don't want any checks? You are crazy...
[   90.964950][ T6055] hpfs: hpfs_map_sector(): read error
[   90.970374][ T6055] hpfs: code page support is disabled
[   90.995487][ T6055] hpfs: hpfs_map_4sectors(): unaligned read
[   91.002140][ T6055] hpfs: hpfs_map_4sectors(): unaligned read
[   91.033732][ T6055] hpfs: filesystem error: unable to find root dir
[   91.090270][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.182750][ T6064] loop2: detected capacity change from 0 to 512
[   91.259903][ T6070] loop3: detected capacity change from 0 to 1024
[   91.268303][ T6064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.268484][ T6070] EXT4-fs: Ignoring removed orlov option
[   91.291068][ T6066] capability: warning: `syz.0.65' uses deprecated v2 capabilities in a way that may be insecure
[   91.313944][ T6064] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   91.367553][ T6070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.547458][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.680654][ T6080] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.087864][ T6094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.73'.
[   92.091251][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.098029][ T6090] loop2: detected capacity change from 0 to 4096
[   92.112500][ T6094] netlink: 43 bytes leftover after parsing attributes in process `syz.1.73'.
[   92.132760][ T6094] netlink: 'syz.1.73': attribute type 6 has an invalid length.
[   92.171333][ T6094] netlink: 'syz.1.73': attribute type 5 has an invalid length.
[   92.220776][ T6094] netlink: 43 bytes leftover after parsing attributes in process `syz.1.73'.
[   92.231463][ T6090] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   92.278519][ T6090] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[   92.288240][ T6097] syz.3.72 uses obsolete (PF_INET,SOCK_PACKET)
[   92.660863][ T6102] syzkaller1: entered promiscuous mode
[   92.673297][ T6102] syzkaller1: entered allmulticast mode
[   93.083582][ T5856] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   93.182105][ T6120] loop3: detected capacity change from 0 to 4096
[   93.230078][ T6120] ntfs: volume version 3.1.
[   93.306603][ T5856] usb 3-1: Using ep0 maxpacket: 16
[   93.327944][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.371340][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.387967][ T5856] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[   93.400131][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.421734][ T5856] usb 3-1: config 0 descriptor??
[   93.916207][ T5856] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0001/input/input6
[   94.023894][ T6127] loop1: detected capacity change from 0 to 32768
[   94.069119][ T5856] creative-sb0540 0003:041E:3100.0001: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0
[   94.129281][ T6127] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   94.155515][ T5856] usb 3-1: USB disconnect, device number 3
[   94.203010][ T6127] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   94.359129][ T6132] fido_id[6132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   94.470906][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'.
[   94.547819][ T5790] ocfs2: Unmounting device (7,1) on (node local)
[   94.674484][ T6130] loop0: detected capacity change from 0 to 40427
[   94.708121][ T6130] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff
[   94.736407][ T6130] F2FS-fs (loop0): invalid crc value
[   94.789690][ T6130] F2FS-fs (loop0): Found nat_bits in checkpoint
[   94.951889][ T6130] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   95.241892][ T5787] syz-executor: attempt to access beyond end of device
[   95.241892][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   95.302670][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   95.970176][ T6164] loop3: detected capacity change from 0 to 4096
[   96.041652][ T6170] loop1: detected capacity change from 0 to 512
[   96.072146][ T6170] EXT4-fs: inline encryption not supported
[   96.102117][ T6170] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.162426][ T6170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.218960][ T6170] EXT4-fs (loop1): 1 truncate cleaned up
[   96.228893][ T6172] loop2: detected capacity change from 0 to 2048
[   96.270540][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.329771][ T6172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.339796][ T6170] EXT4-fs error (device loop1): ext4_check_dx_root:2266: inode #2: comm syz.1.101: Corrupt dir, invalid name for '..', running e2fsck is recommended
[   96.436670][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.488109][ T6172] EXT4-fs (loop2): shut down requested (2)
[   96.541514][ T6172] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   96.655232][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.824061][  T788] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   96.870654][ T6193] process 'syz.2.108' launched './file1' with NULL argv: empty string added
[   97.025541][  T788] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   97.049303][  T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.088937][  T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   97.112855][  T788] usb 1-1: config 1 has no interface number 0
[   97.133688][  T788] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[   97.170475][  T788] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[   97.217668][  T788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   97.233504][  T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.258356][  T788] usb 1-1: Product: syz
[   97.262559][  T788] usb 1-1: Manufacturer: syz
[   97.279522][  T788] usb 1-1: SerialNumber: syz
[   97.390421][ T6204] loop6: detected capacity change from 0 to 7
[   97.402124][ T6204]  loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[   97.441853][ T6204] loop6: p1 start 808464432 is beyond EOD, truncated
[   97.468986][ T6204] loop6: p2 start 808464432 is beyond EOD, truncated
[   97.478182][ T6204] loop6: p3 start 1647464728 is beyond EOD, truncated
[   97.487329][ T6204] loop6: p4 start 795518791 is beyond EOD, truncated
[   97.508326][ T6204] loop6: p5 start 2486255029 is beyond EOD, truncated
[   97.516071][ T6204] loop6: p6 start 15424914 is beyond EOD, truncated
[   97.522793][ T6204] loop6: p7 start 1048303966 is beyond EOD, truncated
[   97.535512][ T6204] loop6: p8 start 2911682089 is beyond EOD, truncated
[   97.542796][ T6204] loop6: p9 start 2659512263 is beyond EOD, truncated
[   97.582071][ T6204] loop6: p10 start 701677152 is beyond EOD, truncated
[   97.590248][ T6204] loop6: p11 start 1318919440 is beyond EOD, truncated
[   97.603328][ T6204] loop6: p12 start 555041894 is beyond EOD, truncated
[   97.854764][  T788] usb 1-1: USB disconnect, device number 2
[   98.212668][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.229062][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.238693][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.255199][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.277062][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.291163][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.303563][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.314411][ T6229] program syz.2.125 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.328395][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.337546][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.349596][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.357553][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.393634][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.437670][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.454818][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.464143][  T968] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.490665][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.503710][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.511730][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.533029][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.545528][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.553320][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.564239][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.575650][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.584373][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.592156][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.600026][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.607917][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.615984][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.623800][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.631660][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.639508][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.647551][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.655481][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.663371][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.700583][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.710983][  T968] usb 4-1: unable to get BOS descriptor or descriptor too short
[   98.733154][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.747173][  T968] usb 4-1: unable to read config index 0 descriptor/start: -71
[   98.755802][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.778555][  T968] usb 4-1: can't read configurations, error -71
[   98.785902][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.795130][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'.
[   98.816853][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.860750][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.885255][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.893031][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.933682][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.941458][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   98.982881][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.010575][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.034316][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.042099][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.052462][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.132'.
[   99.065533][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.073304][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.115743][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.136001][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.185049][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.192848][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.224453][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.232245][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.267752][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.302608][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.314728][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.332688][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.352566][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.379644][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.394033][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.412103][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.448025][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.459866][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.485352][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.511955][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.534496][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.542275][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.556062][ T6254] cgroup: fork rejected by pids controller in /syz1
[   99.563843][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.571629][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.591586][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.608824][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.616849][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.633616][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.651617][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.663523][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.671296][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: unknown main item tag 0x0
[   99.711949][ T5949] hid-generic 0007:FFFFFFF8:0FFF.0002: hidraw0: <UNKNOWN> HID v0.07 Device [syz1] on syz0
[   99.773607][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   99.855583][ T6258] fido_id[6258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   99.949432][ T6251] loop0: detected capacity change from 0 to 32768
[   99.996822][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.012464][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.025326][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  100.035027][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  100.043094][    T9] usb 3-1: SerialNumber: syz
[  100.051170][ T6251] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  100.208127][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.250226][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  100.294893][    T9] usb 3-1: 0:2 : does not exist
[  100.396443][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.408783][    T9] usb 3-1: USB disconnect, device number 4
[  100.498268][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  100.607955][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.718882][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.746455][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[  100.957685][ T6270] loop3: detected capacity change from 0 to 512
[  101.028050][ T6270] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  101.059340][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'.
[  101.069656][ T6270] System zones: 0-2, 18-18, 34-34
[  101.134712][ T6270] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.144: bg 0: block 248: padding at end of block bitmap is not set
[  101.254862][ T6270] __quota_error: 1 callbacks suppressed
[  101.254878][ T6270] Quota error (device loop3): write_blk: dquota write failed
[  101.325244][ T6270] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  101.357834][ T6270] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.144: Failed to acquire dquot type 1
[  101.373655][ T5949] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  101.427970][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  101.440628][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  101.451155][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  101.460947][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  101.471436][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  101.483982][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  101.489247][ T6270] EXT4-fs (loop3): 1 truncate cleaned up
[  101.530379][ T6270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.544477][ T6270] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.623754][ T5949] usb 3-1: Using ep0 maxpacket: 8
[  101.632847][ T5949] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  101.642598][ T5949] usb 3-1: config 179 has no interface number 0
[  101.658400][ T5949] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  101.679879][ T5949] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  101.701930][ T5949] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  101.724389][ T5949] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  101.764209][ T5949] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  101.798131][ T5949] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  101.841810][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.869980][ T6277] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  101.943202][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.142985][ T6301] Illegal XDP return value 4294967262 on prog  (id 17) dev syz_tun, expect packet loss!
[  102.279045][ T5949] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7
[  102.596864][ T5949] usb 3-1: USB disconnect, device number 5
[  102.596941][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  102.611375][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  102.626274][ T5949] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  103.088201][ T6284] chnl_net:caif_netlink_parms(): no params data found
[  103.494751][ T6310] loop3: detected capacity change from 0 to 32768
[  103.522801][ T6310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.152 (6310)
[  103.587180][ T5803] Bluetooth: hci3: command tx timeout
[  103.616142][ T6310] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.653824][   T35] hsr_slave_0: left promiscuous mode
[  103.653840][ T6310] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  103.669380][ T6310] BTRFS info (device loop3): force clearing of disk cache
[  103.687449][ T6310] BTRFS info (device loop3): enabling ssd optimizations
[  103.705988][ T6310] BTRFS info (device loop3): using spread ssd allocation scheme
[  103.723813][ T6310] BTRFS info (device loop3): enabling disk space caching
[  103.729571][   T35] hsr_slave_1: left promiscuous mode
[  103.753676][ T6310] BTRFS info (device loop3): turning on sync discard
[  103.770609][ T6310] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  103.803973][ T6310] BTRFS info (device loop3): use zstd compression, level 3
[  103.811272][ T6310] BTRFS info (device loop3): setting nodatacow, compression disabled
[  103.833952][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.841450][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.853688][ T6310] BTRFS info (device loop3): disk space caching is enabled
[  103.894824][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.902259][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.940628][   T35] bridge_slave_1: left allmulticast mode
[  103.981418][   T35] bridge_slave_1: left promiscuous mode
[  104.022211][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.106181][ T6310] BTRFS info (device loop3): rebuilding free space tree
[  104.120534][   T35] bridge_slave_0: left allmulticast mode
[  104.154822][ T6310] BTRFS info (device loop3): disabling free space tree
[  104.172104][   T35] bridge_slave_0: left promiscuous mode
[  104.183614][ T6310] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  104.203736][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.228258][ T6310] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  104.348792][   T35] veth1_macvtap: left promiscuous mode
[  104.354916][   T35] veth0_macvtap: left promiscuous mode
[  104.360580][   T35] veth1_vlan: left promiscuous mode
[  104.393976][   T35] veth0_vlan: left promiscuous mode
[  104.631740][ T5791] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.402303][ T6374] loop2: detected capacity change from 0 to 64
[  105.660508][ T5803] Bluetooth: hci3: command tx timeout
[  105.733380][   T35] team0 (unregistering): Port device team_slave_1 removed
[  105.807269][   T35] team0 (unregistering): Port device team_slave_0 removed
[  105.895888][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.976497][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.211670][ T6376] loop2: detected capacity change from 0 to 32768
[  106.260849][ T6376] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.368786][ T6376] XFS (loop2): Ending clean mount
[  106.592937][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.946699][ T6408] loop2: detected capacity change from 0 to 2048
[  107.004152][ T6408] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  107.021854][ T6408] NILFS (loop2): mounting unchecked fs
[  107.054293][ T6408] NILFS (loop2): recovery complete
[  107.059662][ T5800] udevd[5800]: incorrect nilfs2 checksum on /dev/loop2
[  107.073391][ T6409] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.122749][   T35] bond0 (unregistering): Released all slaves
[  107.312204][ T6411] loop2: detected capacity change from 0 to 1024
[  107.326980][ T6411] EXT4-fs: Ignoring removed orlov option
[  107.341797][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'.
[  107.356283][ T6370] netlink: 52 bytes leftover after parsing attributes in process `syz.0.164'.
[  107.403082][ T6411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.403214][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.423675][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.430883][ T6284] bridge_slave_0: entered allmulticast mode
[  107.439213][ T6284] bridge_slave_0: entered promiscuous mode
[  107.470248][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.494736][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.501979][ T6284] bridge_slave_1: entered allmulticast mode
[  107.548945][ T6284] bridge_slave_1: entered promiscuous mode
[  107.618672][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.700128][ T6284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.740421][ T5803] Bluetooth: hci3: command tx timeout
[  107.742962][ T6284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.882122][ T6284] team0: Port device team_slave_0 added
[  107.925546][ T6284] team0: Port device team_slave_1 added
[  107.956937][ T6419] loop3: detected capacity change from 0 to 8192
[  108.008135][ T6419] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.074528][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.093991][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.204081][ T6284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.237041][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.267991][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.358565][ T6284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.566740][ T6429] syzkaller1: entered promiscuous mode
[  108.595448][ T6429] syzkaller1: entered allmulticast mode
[  108.704532][ T6284] hsr_slave_0: entered promiscuous mode
[  108.718522][ T6284] hsr_slave_1: entered promiscuous mode
[  108.733039][ T6284] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.742003][ T6284] Cannot create hsr debugfs directory
[  109.817057][ T5803] Bluetooth: hci3: command tx timeout
[  110.000918][ T6454] loop3: detected capacity change from 0 to 40427
[  110.032655][ T6454] F2FS-fs (loop3): heap/no_heap options were deprecated
[  110.099322][ T6454] F2FS-fs (loop3): invalid crc value
[  110.159269][ T6454] F2FS-fs (loop3): Found nat_bits in checkpoint
[  110.353642][ T6454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  110.503903][  T788] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  110.564080][ T6284] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  110.592263][ T6284] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  110.613966][ T5791] syz-executor: attempt to access beyond end of device
[  110.613966][ T5791] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.644348][ T6284] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  110.663257][ T5791] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  110.685167][ T6284] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  110.706133][  T788] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  110.725649][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.747052][  T788] usb 3-1: config 0 descriptor??
[  110.988143][  T788] [drm] vendor descriptor length:6 data:06 5f 01 00 04 00 00 00 00 00 00
[  110.996723][ T6284] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.040024][ T6284] 8021q: adding VLAN 0 to HW filter on device team0
[  111.072826][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.080181][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.130441][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.137655][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.206451][  T788] [drm:udl_init] *ERROR* Selecting channel failed
[  111.262222][  T788] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  111.278327][ T6284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.299348][ T6284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.310076][  T788] [drm] Initialized udl on minor 2
[  111.337382][  T788] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  111.367580][  T788] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  111.402078][ T5794] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  111.427529][  T788] usb 3-1: USB disconnect, device number 6
[  111.436989][ T5794] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  111.860329][ T6284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.040034][ T6284] veth0_vlan: entered promiscuous mode
[  112.096769][ T6284] veth1_vlan: entered promiscuous mode
[  112.200490][ T6284] veth0_macvtap: entered promiscuous mode
[  112.226230][ T6284] veth1_macvtap: entered promiscuous mode
[  112.276925][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.333583][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.356598][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.380215][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.390224][  T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  112.409779][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.426609][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.455417][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.520780][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.562169][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.586222][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.602721][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.612782][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.613531][  T788] usb 3-1: Using ep0 maxpacket: 32
[  112.630583][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.643414][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.664534][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.678786][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.689401][  T788] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  112.692412][ T6284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.712997][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.728971][  T788] usb 3-1: config 0 descriptor??
[  112.742093][ T6284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.767375][ T6284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.777055][ T6284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.934199][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.970038][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.104548][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.136457][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.256867][  T788] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  113.620767][ T5794] usb 3-1: USB disconnect, device number 7
[  114.338736][ T6587] loop2: detected capacity change from 0 to 512
[  114.392959][ T6587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.407254][ T6595] loop1: detected capacity change from 0 to 128
[  114.419369][ T6595] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  114.432519][ T6595] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  114.445865][ T6587] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.599988][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.766987][   T59] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  115.012451][ T6610] loop0: detected capacity change from 0 to 256
[  115.093817][ T5794] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  115.099564][ T6610] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.142882][ T6610] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  115.179604][ T6610] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d)
[  115.303680][ T5794] usb 4-1: Using ep0 maxpacket: 16
[  115.314969][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.356509][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.384483][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  115.391651][ T5794] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  115.433640][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.454565][ T5794] usb 4-1: config 0 descriptor??
[  115.816674][ T6630] loop2: detected capacity change from 0 to 256
[  115.884462][ T5794] hid (null): global environment stack underflow
[  115.902106][ T6630] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  115.913638][ T5794] hid (null): report_id 0 is invalid
[  115.919764][ T5794] hid (null): global environment stack underflow
[  115.946743][ T5794] hid (null): report_id 0 is invalid
[  115.952110][ T5794] hid (null): report_id 0 is invalid
[  116.009432][ T6607] loop1: detected capacity change from 0 to 32768
[  116.025125][ T5794] hid (null): global environment stack underflow
[  116.117578][ T5794] usb 4-1: USB disconnect, device number 4
[  116.223908][ T6607] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.346317][ T6633] loop0: detected capacity change from 0 to 32768
[  116.365829][ T6633] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  116.374567][ T6633] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  116.440284][ T6633] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  116.460411][  T968] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  116.471998][  T968] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  116.561861][ T6607] XFS (loop1): Ending clean mount
[  116.572291][  T968] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms
[  116.603910][ T6607] XFS (loop1): Quotacheck needed: Please wait.
[  116.615899][  T968] gfs2: fsid=syz:syz.0: jid=0: Done
[  116.633808][ T6633] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  116.720953][ T6607] XFS (loop1): Quotacheck: Done.
[  116.791924][ T6633] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[  116.802655][ T6633] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  116.802655][ T6633]   inode = 12 2341
[  116.802655][ T6633]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[  116.821536][ T6633] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  116.832399][ T6633] gfs2: fsid=syz:syz.0:  H: s:SH f:H e:0 p:6633 [syz.0.227] __gfs2_lookup+0x90/0x270
[  116.842392][ T6633] gfs2: fsid=syz:syz.0:  I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[  116.850879][ T6633] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  116.860493][ T6633] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  116.869449][ T6633] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  116.878883][ T6633] gfs2: fsid=syz:syz.0: File system withdrawn
[  116.885066][ T6633] CPU: 0 PID: 6633 Comm: syz.0.227 Not tainted syzkaller #0
[  116.892382][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  116.897331][ T6607] XFS (loop1): User initiated shutdown received.
[  116.902535][ T6633] Call Trace:
[  116.902574][ T6633]  <TASK>
[  116.902589][ T6633]  dump_stack_lvl+0x16c/0x230
[  116.902622][ T6633]  ? kobject_uevent_env+0x363/0x8c0
[  116.902643][ T6633]  ? show_regs_print_info+0x20/0x20
[  116.902669][ T6633]  ? load_image+0x3b0/0x3b0
[  116.902691][ T6633]  ? kobject_uevent_env+0x363/0x8c0
[  116.902727][ T6633]  gfs2_withdraw+0xe50/0x13b0
[  116.902770][ T6633]  ? gfs2_lm+0x220/0x220
[  116.902797][ T6633]  ? load_image+0x3b0/0x3b0
[  116.902825][ T6633]  ? gfs2_consist_inode_i+0xf5/0x110
[  116.902855][ T6633]  gfs2_dirent_scan+0x525/0x650
[  116.902878][ T6633]  ? gfs2_dirent_search+0x7e0/0x7e0
[  116.902897][ T6633]  ? gfs2_dirent_search+0x7e0/0x7e0
[  116.902917][ T6633]  gfs2_dirent_search+0x2e1/0x7e0
[  116.902941][ T6633]  ? gfs2_permission+0x370/0x430
[  116.902967][ T6633]  ? __might_sleep+0xe0/0xe0
[  116.902991][ T6633]  ? gfs2_dir_search+0x220/0x220
[  116.903010][ T6633]  ? gfs2_lookupi+0x5a0/0x5a0
[  116.903035][ T6633]  ? do_raw_spin_lock+0x121/0x2c0
[  116.903068][ T6633]  gfs2_dir_search+0x4d/0x220
[  116.903092][ T6633]  gfs2_lookupi+0x3d9/0x5a0
[  116.903125][ T6633]  ? gfs2_lookup_meta+0x170/0x170
[  116.903149][ T6633]  ? d_alloc_parallel+0x13e4/0x1530
[  117.023630][ T6633]  ? __gfs2_lookup+0x90/0x270
[  117.028386][ T6633]  __gfs2_lookup+0x90/0x270
[  117.032923][ T6633]  ? lockdep_softirqs_off+0x430/0x430
[  117.038398][ T6633]  ? gfs2_atomic_open+0x220/0x220
[  117.043444][ T6633]  ? __init_waitqueue_head+0xa9/0x150
[  117.048851][ T6633]  __lookup_slow+0x281/0x3b0
[  117.053461][ T6633]  ? lookup_one_len+0x2c0/0x2c0
[  117.058355][ T6633]  ? down_read+0x1ac/0x2e0
[  117.062783][ T6633]  lookup_slow+0x53/0x70
[  117.067038][ T6633]  walk_component+0x2be/0x3f0
[  117.071724][ T6633]  ? path_lookupat+0x15c/0x440
[  117.076544][ T6633]  path_lookupat+0x169/0x440
[  117.081162][ T6633]  filename_lookup+0x1f4/0x510
[  117.085941][ T6633]  ? __virt_addr_valid+0x18c/0x540
[  117.091095][ T6633]  ? hashlen_string+0x110/0x110
[  117.095980][ T6633]  ? strncpy_from_user+0x197/0x2e0
[  117.101105][ T6633]  ? getname_flags+0x20a/0x500
[  117.105893][ T6633]  user_path_at_empty+0x42/0x60
[  117.110775][ T6633]  path_setxattr+0x274/0x550
[  117.115386][ T6633]  ? simple_xattrs_free+0x150/0x150
[  117.120624][ T6633]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  117.126621][ T6633]  ? lock_chain_count+0x20/0x20
[  117.131489][ T6633]  __x64_sys_lsetxattr+0xb8/0xd0
[  117.136465][ T6633]  do_syscall_64+0x55/0xb0
[  117.140899][ T6633]  ? clear_bhb_loop+0x40/0x90
[  117.145591][ T6633]  ? clear_bhb_loop+0x40/0x90
[  117.150285][ T6633]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.156187][ T6633] RIP: 0033:0x7fef7ab8f6c9
[  117.160620][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.180234][ T6633] RSP: 002b:00007fef7babc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  117.188657][ T6633] RAX: ffffffffffffffda RBX: 00007fef7ade5fa0 RCX: 00007fef7ab8f6c9
[  117.196640][ T6633] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000140
[  117.204625][ T6633] RBP: 00007fef7ac11f91 R08: 0000000000000000 R09: 0000000000000000
[  117.212611][ T6633] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[  117.220606][ T6633] R13: 00007fef7ade6038 R14: 00007fef7ade5fa0 R15: 00007ffd2630c828
[  117.228600][ T6633]  </TASK>
[  117.236519][ T6607] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  117.249869][ T6607] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  117.458384][ T6284] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.120827][ T6649] loop2: detected capacity change from 0 to 32768
[  118.136964][    T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  118.168656][ T6649] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.228 (6649)
[  118.219551][ T6649] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  118.245886][ T6649] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  118.267607][ T6649] BTRFS info (device loop2): setting nodatacow, compression disabled
[  118.286730][ T6649] BTRFS info (device loop2): setting datacow
[  118.292878][ T6649] BTRFS info (device loop2): doing ref verification
[  118.305437][ T6649] BTRFS info (device loop2): force clearing of disk cache
[  118.312694][ T6649] BTRFS info (device loop2): turning off barriers
[  118.326742][ T6649] BTRFS info (device loop2): enabling ssd optimizations
[  118.352379][    T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  118.365353][ T6649] BTRFS info (device loop2): max_inline at 7
[  118.371392][ T6649] BTRFS info (device loop2): using free space tree
[  118.383753][    T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  118.404108][    T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  118.413514][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.433559][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  118.459684][ T6666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.486242][    T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  118.499563][ T6685] loop3: detected capacity change from 0 to 256
[  118.583240][ T6685] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  118.673904][    T9] usb 2-1: Using ep0 maxpacket: 32
[  118.683262][ T6649] BTRFS info (device loop2): rebuilding free space tree
[  118.707399][    T9] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  118.763555][    T9] usb 2-1: config 0 has no interface number 0
[  118.769810][    T9] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  118.794289][    T8] usb 1-1: USB disconnect, device number 3
[  118.806925][    T9] usb 2-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  118.841145][    T9] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[  118.863911][    T9] usb 2-1: config 0 interface 126 has no altsetting 0
[  118.875406][    T9] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  118.891596][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.930049][    T9] usb 2-1: Product: syz
[  118.950545][    T9] usb 2-1: Manufacturer: syz
[  118.961849][    T9] usb 2-1: SerialNumber: syz
[  118.973700][    T9] usb 2-1: config 0 descriptor??
[  118.979977][ T6672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  119.434489][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.452000][ T5788] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.469206][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.501923][    T9] ir_usb 2-1:0.126: IR Dongle converter detected
[  119.725910][    T9] usb 2-1: IR Dongle converter now attached to ttyUSB0
[  119.980745][    T9] usb 2-1: USB disconnect, device number 3
[  120.020567][    T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  120.047567][    T9] ir_usb 2-1:0.126: device disconnected
[  120.683715][ T6726] loop2: detected capacity change from 0 to 256
[  120.713834][ T6720] loop0: detected capacity change from 0 to 32768
[  120.757060][ T6720] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  120.823063][ T6720] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  120.861366][ T6726] FAT-fs (loop2): Directory bread(block 64) failed
[  120.891558][ T6726] FAT-fs (loop2): Directory bread(block 65) failed
[  120.899020][ T6726] FAT-fs (loop2): Directory bread(block 66) failed
[  120.905709][ T6726] FAT-fs (loop2): Directory bread(block 67) failed
[  120.912526][ T6726] FAT-fs (loop2): Directory bread(block 68) failed
[  120.919253][ T6726] FAT-fs (loop2): Directory bread(block 69) failed
[  120.925993][ T6726] FAT-fs (loop2): Directory bread(block 70) failed
[  120.932645][ T6726] FAT-fs (loop2): Directory bread(block 71) failed
[  120.939726][ T6726] FAT-fs (loop2): Directory bread(block 72) failed
[  120.951178][ T6726] FAT-fs (loop2): Directory bread(block 73) failed
[  121.230353][ T6726] syz.2.244: attempt to access beyond end of device
[  121.230353][ T6726] loop2: rw=524288, sector=1256, nr_sectors = 4 limit=256
[  121.282731][ T6726] syz.2.244: attempt to access beyond end of device
[  121.282731][ T6726] loop2: rw=0, sector=1256, nr_sectors = 4 limit=256
[  121.329936][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  121.436681][   T28] audit: type=1800 audit(1762212087.119:13): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048610 res=0 errno=0
[  121.863480][    C1] sched: RT throttling activated
[  121.901316][ T6740] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  122.442283][ T6751] loop0: detected capacity change from 0 to 128
[  122.540920][ T6751] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  122.604579][ T6751] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  122.644731][ T6755] loop2: detected capacity change from 0 to 16
[  122.729473][ T6755] erofs: (device loop2): mounted with root inode @ nid 36.
[  123.185600][ T6762] loop2: detected capacity change from 0 to 512
[  123.197303][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  123.281831][ T6762] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  123.375474][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.399415][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  123.434971][ T6731] loop1: detected capacity change from 0 to 262144
[  123.453342][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  123.466853][ T6762] UDF-fs: error (device loop2): udf_read_inode: (ino 19) failed ident=264
[  123.507460][ T6731] F2FS-fs (loop1): Found nat_bits in checkpoint
[  123.514094][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  123.517292][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  123.592135][ T6731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  123.617079][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  123.653843][    T9] usb 4-1: Product: syz
[  123.665822][    T9] usb 4-1: Manufacturer: syz
[  123.690276][    T9] usb 4-1: SerialNumber: syz
[  123.949260][    T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  124.093549][ T5856] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  124.273656][ T5856] usb 3-1: Using ep0 maxpacket: 16
[  124.295096][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.313723][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.333736][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  124.343050][ T6769] loop0: detected capacity change from 0 to 32768
[  124.354686][ T5856] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  124.375946][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.401186][ T6769] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.414359][ T5856] usb 3-1: config 0 descriptor??
[  124.498933][ T6769] XFS (loop0): Ending clean mount
[  124.609912][   T28] audit: type=1804 audit(1762212090.289:14): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.257" name="/newroot/66/file1/file1" dev="loop0" ino=6150 res=1 errno=0
[  124.707141][ T5787] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.914299][ T5856] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input8
[  124.962529][ T5856] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  125.208745][    T9] usb 3-1: USB disconnect, device number 8
[  125.543547][ T5949] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  125.728235][ T5949] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  125.730686][ T6791] loop1: detected capacity change from 0 to 128
[  125.737519][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.777059][ T5949] usb 1-1: config 0 descriptor??
[  125.802007][ T5949] usb-storage 1-1:0.0: USB Mass Storage device detected
[  125.853035][ T5949] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1
[  126.009082][  T788] usb 4-1: USB disconnect, device number 5
[  126.036082][  T788] usblp0: removed
[  126.130680][    T9] usb 1-1: USB disconnect, device number 4
[  126.191814][ T6800] IPVS: Scheduler module ip_vs_ not found
[  126.662263][ T6812] netlink: 96 bytes leftover after parsing attributes in process `syz.1.272'.
[  126.880630][ T6805] loop2: detected capacity change from 0 to 32768
[  126.943321][ T6805] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  126.997806][   T28] audit: type=1800 audit(1762212092.679:15): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.268" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  127.018330][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.168144][ T5788] ocfs2: Unmounting device (7,2) on (node local)
[  127.901262][ T6842] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  127.950301][ T6842] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  128.106106][ T6830] loop3: detected capacity change from 0 to 32768
[  128.213894][ T5856] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  128.239234][ T6846] loop1: detected capacity change from 0 to 1024
[  128.466364][ T5856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.477239][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.507884][ T5856] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.533545][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.557692][ T5856] usb 3-1: Product: syz
[  128.561906][ T5856] usb 3-1: Manufacturer: syz
[  128.572263][ T6850] sctp: [Deprecated]: syz.1.288 (pid 6850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.572263][ T6850] Use struct sctp_sack_info instead
[  128.577004][ T5856] usb 3-1: SerialNumber: syz
[  128.597964][ T6840] loop0: detected capacity change from 0 to 32768
[  128.627031][ T6840] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.283 (6840)
[  128.667746][ T6850] sctp: [Deprecated]: syz.1.288 (pid 6850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.667746][ T6850] Use struct sctp_sack_info instead
[  128.723753][ T6840] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  128.735100][ T6840] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  128.745052][ T6840] BTRFS info (device loop0): using free space tree
[  128.849102][ T5856] usb 3-1: 0:2 : does not exist
[  128.894458][ T6840] BTRFS info (device loop0): enabling ssd optimizations
[  128.901460][ T6840] BTRFS info (device loop0): auto enabling async discard
[  128.941242][ T5856] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  129.021262][ T5856] usb 3-1: USB disconnect, device number 9
[  129.115187][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.310417][ T5787] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  129.722177][ T6852] loop3: detected capacity change from 0 to 32768
[  129.862304][ T6883] loop0: detected capacity change from 0 to 512
[  129.900718][ T6883] EXT4-fs: inline encryption not supported
[  129.939685][ T6879] loop2: detected capacity change from 0 to 4096
[  129.964459][ T6883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  130.022661][ T6883] EXT4-fs (loop0): 1 truncate cleaned up
[  130.068070][ T6883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.103375][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'.
[  130.113385][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'.
[  130.142319][ T6879] ntfs: volume version 3.1.
[  130.174964][ T6883] EXT4-fs error (device loop0): ext4_check_dx_root:2266: inode #2: comm syz.0.294: Corrupt dir, invalid name for '..', running e2fsck is recommended
[  130.337193][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.798108][ T6898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  130.805859][ T6898] IPv6: NLM_F_CREATE should be set when creating new route
[  130.813217][ T6898] IPv6: NLM_F_CREATE should be set when creating new route
[  130.820520][ T6898] IPv6: NLM_F_CREATE should be set when creating new route
[  130.993965][ T6900] netlink: 9 bytes leftover after parsing attributes in process `syz.0.300'.
[  131.034403][ T6900] netlink: 9 bytes leftover after parsing attributes in process `syz.0.300'.
[  131.248704][ T6905] loop2: detected capacity change from 0 to 4096
[  131.253089][ T6890] loop1: detected capacity change from 0 to 32768
[  131.316842][ T6890] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.297 (6890)
[  131.421330][ T6890] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  131.471990][ T6890] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  131.500613][ T6890] BTRFS info (device loop1): using free space tree
[  131.571481][ T6912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  131.578785][ T6912] IPv6: NLM_F_CREATE should be set when creating new route
[  131.620641][ T6905] ntfs3: loop2: ino=1e, "file1" attr_set_size
[  131.675114][ T6890] BTRFS info (device loop1): enabling ssd optimizations
[  131.682244][ T6890] BTRFS info (device loop1): auto enabling async discard
[  132.028604][ T6284] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.192186][ T5800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (5800)
[  132.309424][ T6936] binder: 6935:6936 ioctl c018620b 200000000100 returned -14
[  132.655100][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.314'.
[  132.846670][ T6947] syzkaller1: entered promiscuous mode
[  132.858145][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  132.865444][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  132.884824][ T6947] syzkaller1: entered allmulticast mode
[  133.546169][ T6975] loop0: detected capacity change from 0 to 512
[  133.576968][ T6975] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  133.626554][ T6975] EXT4-fs (loop0): invalid journal inode
[  133.632460][ T6975] EXT4-fs (loop0): can't get journal size
[  133.702701][ T6975] EXT4-fs (loop0): 1 truncate cleaned up
[  133.710331][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.866860][ T6964] loop2: detected capacity change from 0 to 32768
[  133.907382][ T6964] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  134.011255][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.138942][ T5800] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  134.677175][ T6979] loop1: detected capacity change from 0 to 32768
[  134.711077][ T6979] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  135.113680][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  135.130017][ T6284] ocfs2: Unmounting device (7,1) on (node local)
[  135.156651][ T7003] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  135.180608][ T7002] tap0: tun_chr_ioctl cmd 1074025677
[  135.193823][ T7002] tap0: linktype set to 773
[  135.323830][    T9] usb 4-1: Using ep0 maxpacket: 8
[  135.356716][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  135.376395][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.403663][    T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  135.434692][    T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  135.461076][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  135.483552][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.501675][    T9] usb 4-1: Product: syz
[  135.516733][    T9] usb 4-1: Manufacturer: syz
[  135.521381][    T9] usb 4-1: SerialNumber: syz
[  135.794933][    T9] cdc_ncm 4-1:1.0: bind() failure
[  135.816946][    T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  135.827418][    T9] cdc_ncm 4-1:1.1: bind() failure
[  135.847413][    T9] usb 4-1: USB disconnect, device number 6
[  135.991754][ T7022] loop0: detected capacity change from 0 to 4096
[  136.007467][ T7022] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  136.040902][ T7022] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  136.060262][ T7022] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  136.125191][ T7022] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  136.149711][ T7022] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  136.200635][ T7022] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  136.209541][ T7022] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  136.231400][ T7022] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  136.240194][ T7022] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  136.261488][ T7022] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  136.285025][ T7022] ntfs: volume version 3.1.
[  136.371403][ T7013] loop2: detected capacity change from 0 to 32768
[  136.422021][ T7013] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  136.630520][ T7013] XFS (loop2): Ending clean mount
[  136.751040][ T7034] loop3: detected capacity change from 0 to 2048
[  136.782638][ T7034] EXT4-fs: Ignoring removed mblk_io_submit option
[  136.843732][ T7034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.922540][ T7034] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.343: bg 0: block 234: padding at end of block bitmap is not set
[  136.956715][ T7034] EXT4-fs (loop3): Remounting filesystem read-only
[  136.974025][ T7034] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -5)
[  137.010630][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.076527][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.625321][ T7048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.632692][ T7039] loop0: detected capacity change from 0 to 32768
[  137.842506][ T7051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.093833][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  138.176273][ T7058] loop2: detected capacity change from 0 to 1024
[  138.204190][ T7058] EXT4-fs: inline encryption not supported
[  138.210080][ T7058] EXT4-fs: Ignoring removed i_version option
[  138.253018][ T7058] EXT4-fs: Ignoring removed orlov option
[  138.262130][ T7058] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  138.300170][ T7058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.319326][   T23] usb 4-1: New USB device found, idVendor=050e, idProduct=a4a1, bcdDevice= 0.40
[  138.367640][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.410927][   T23] usb 4-1: Product: syz
[  138.428656][   T23] usb 4-1: Manufacturer: syz
[  138.433304][   T23] usb 4-1: SerialNumber: syz
[  138.571458][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.697567][ T7068] loop1: detected capacity change from 0 to 512
[  138.735508][ T7068] EXT4-fs (loop1): Test dummy encryption mode enabled
[  138.750772][ T7068] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  138.768176][ T7068] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.356: bad orphan inode 131083
[  138.798060][ T7068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.055699][ T7068] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  139.101240][ T6284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.298649][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'.
[  139.306316][ T5949] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  139.442545][ T7089] syzkaller1: entered promiscuous mode
[  139.448299][ T7089] syzkaller1: entered allmulticast mode
[  139.487818][   T23] cdc_ncm 4-1:1.0: bind() failure
[  139.516145][   T23] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  139.524060][   T23] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  139.538199][   T23] usbtest: probe of 4-1:1.1 failed with error -71
[  139.545006][ T5949] usb 3-1: Using ep0 maxpacket: 32
[  139.555379][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.586116][   T23] usb 4-1: USB disconnect, device number 7
[  139.592097][ T5949] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00
[  139.625297][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.636415][ T5949] usb 3-1: config 0 descriptor??
[  140.094957][ T5949] wacom 0003:056A:4004.0006: hidraw0: USB HID vb.27 Device [HID 056a:4004] on usb-dummy_hcd.2-1/input0
[  140.325618][ T5856] usb 3-1: USB disconnect, device number 10
[  140.622664][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'.
[  141.828914][ T7135] loop2: detected capacity change from 0 to 32768
[  142.004609][ T7144] warning: `syz.1.389' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  142.053749][ T7142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.242759][ T7141] loop3: detected capacity change from 0 to 32768
[  142.270153][ T7139] loop0: detected capacity change from 0 to 32768
[  142.304084][ T7139] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  142.314585][ T7139] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  142.360294][ T7141] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4
[  142.360294][ T7141] 
[  142.375472][ T7141] ERROR: (device loop3): remounting filesystem as read-only
[  142.452256][ T7139] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  142.457052][ T5791] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4
[  142.457052][ T5791] 
[  142.508418][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  142.521936][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  142.595270][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 73ms
[  142.613824][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  142.619564][ T7139] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  143.155577][ T7157] loop3: detected capacity change from 0 to 2048
[  143.221567][ T7157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.268517][ T7155] loop1: detected capacity change from 0 to 8192
[  143.913753][   T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  144.135501][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.153535][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.166066][   T23] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  144.215203][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.252552][   T23] usb 1-1: config 0 descriptor??
[  144.363682][ T5794] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  144.553536][ T5794] usb 3-1: Using ep0 maxpacket: 32
[  144.561081][ T5794] usb 3-1: config 0 interface 0 has no altsetting 0
[  144.577067][ T5794] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  144.593830][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.601908][ T5794] usb 3-1: Product: syz
[  144.632082][ T5794] usb 3-1: Manufacturer: syz
[  144.637151][ T5794] usb 3-1: SerialNumber: syz
[  144.654422][ T5794] usb 3-1: config 0 descriptor??
[  144.661396][ T7181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'.
[  144.899044][ T7185] netlink: 27 bytes leftover after parsing attributes in process `syz.1.405'.
[  145.089910][   T23] hid-led 0003:27B8:01ED.0007: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[  145.112084][ T5794] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  145.157105][   T23] hid-led 0003:27B8:01ED.0007: ThingM blink(1) v1 initialized
[  145.306841][ T7183] loop3: detected capacity change from 0 to 32768
[  145.322253][ T7193] loop1: detected capacity change from 0 to 1024
[  145.382444][   T23] usb 1-1: USB disconnect, device number 5
[  145.411434][ T7183] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  145.535952][ T5794] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  145.549240][ T5794] gs_usb: probe of 3-1:0.0 failed with error -22
[  145.708082][ T5791] ocfs2: Unmounting device (7,3) on (node local)
[  145.755975][    T8] usb 3-1: USB disconnect, device number 11
[  145.973935][ T7201] syzkaller1: entered promiscuous mode
[  145.996352][ T7201] syzkaller1: entered allmulticast mode
[  146.094121][ T7203] mmap: syz.3.410 (7203) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  146.852051][ T7235] loop2: detected capacity change from 0 to 1024
[  147.175492][ T7244] loop2: detected capacity change from 0 to 128
[  147.182885][    C1] sd 0:0:1:0: [sda] tag#5255 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  147.193422][    C1] sd 0:0:1:0: [sda] tag#5255 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00
[  147.209016][ T7244] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  147.271956][ T7244] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  147.396752][   T59] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  147.651382][ T7233] loop0: detected capacity change from 0 to 32768
[  147.663378][ T7233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.425 (7233)
[  147.720165][ T7233] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.762057][ T7233] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  147.791820][ T7233] BTRFS info (device loop0): using free space tree
[  147.995577][ T7233] BTRFS info (device loop0): enabling ssd optimizations
[  148.002591][ T7233] BTRFS info (device loop0): auto enabling async discard
[  148.169308][ T7246] loop3: detected capacity change from 0 to 32768
[  148.201396][ T7246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.431 (7246)
[  148.202118][ T7271] loop2: detected capacity change from 0 to 8
[  148.263620][ T7240] loop1: detected capacity change from 0 to 40427
[  148.275884][ T7246] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.298346][ T7240] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  148.303001][ T7271] SQUASHFS error: Unable to read directory block [1d0:62]
[  148.323102][ T7246] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  148.349248][ T7240] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  148.373988][ T7246] BTRFS info (device loop3): turning off barriers
[  148.392307][ T7246] BTRFS info (device loop3): setting nodatasum
[  148.417771][ T7246] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  148.432527][ T7246] BTRFS info (device loop3): use zstd compression, level 3
[  148.441149][ T7240] F2FS-fs (loop1): invalid crc value
[  148.479236][ T7246] BTRFS info (device loop3): using free space tree
[  148.497418][ T7240] F2FS-fs (loop1): Found nat_bits in checkpoint
[  148.629765][   T59] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  148.820668][ T7240] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  148.856789][ T7240] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  149.078189][ T5791] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.628348][ T7300] loop3: detected capacity change from 0 to 1024
[  149.671082][ T7300] EXT4-fs: inline encryption not supported
[  149.704103][ T7300] EXT4-fs: Ignoring removed i_version option
[  149.729667][ T7300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  149.839095][ T7292] loop2: detected capacity change from 0 to 32768
[  149.844141][ T7300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.860000][ T7292] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.436 (7292)
[  149.956457][ T7292] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  149.977483][ T5787] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.999518][ T7292] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  150.048419][ T7292] BTRFS info (device loop2): force zlib compression, level 3
[  150.080509][ T7292] BTRFS info (device loop2): force clearing of disk cache
[  150.124386][ T7292] BTRFS info (device loop2): setting nodatasum
[  150.158115][ T7292] BTRFS info (device loop2): allowing degraded mounts
[  150.197309][ T7300] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.440: Allocating blocks 497-513 which overlap fs metadata
[  150.211616][ T7292] BTRFS info (device loop2): enabling disk space caching
[  150.245310][ T7292] BTRFS info (device loop2): disk space caching is enabled
[  150.266643][ T7300] EXT4-fs (loop3): pa ffff888078313910: logic 256, phys. 385, len 8
[  150.275361][ T7300] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  150.483727][ T7292] BTRFS info (device loop2): enabling ssd optimizations
[  150.494075][ T7320] netlink: 48 bytes leftover after parsing attributes in process `syz.0.438'.
[  150.521732][ T7292] BTRFS info (device loop2): auto enabling async discard
[  150.529427][ T7320] netlink: 48 bytes leftover after parsing attributes in process `syz.0.438'.
[  150.576792][ T7292] BTRFS info (device loop2): rebuilding free space tree
[  150.663827][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.677352][ T7292] BTRFS info (device loop2): disabling free space tree
[  150.732002][ T7292] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.774047][ T7292] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.791853][ T7324] loop1: detected capacity change from 0 to 4096
[  150.819433][ T7324] NILFS (loop1): invalid segment: Checksum error in segment payload
[  150.860865][ T7324] NILFS (loop1): trying rollback from an earlier position
[  151.009043][ T7324] NILFS (loop1): recovery complete
[  151.051456][ T7331] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  151.071470][ T7332] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.218813][ T7334] BTRFS info (device loop2): balance: start -d -m
[  151.258968][ T7334] BTRFS info (device loop2): unable to make block group 8519680 ro
[  151.302070][ T7340] netlink: 428 bytes leftover after parsing attributes in process `syz.0.445'.
[  151.308242][ T7334] BTRFS info (device loop2): space_info DATA+METADATA has 499712 free, is full
[  151.320784][ T7334] BTRFS info (device loop2): space_info total=11534336, used=4800512, pinned=0, reserved=4759552, may_use=1474560, readonly=0 zone_unusable=0
[  151.332612][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.445'.
[  151.335362][ T7334] BTRFS info (device loop2): global_block_rsv: size 983040 reserved 983040
[  151.353300][ T7334] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[  151.361137][ T7334] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[  151.368872][ T7334] BTRFS info (device loop2): delayed_block_rsv: size 32768 reserved 32768
[  151.377513][ T7334] BTRFS info (device loop2): delayed_refs_rsv: size 458752 reserved 458752
[  151.431986][ T7334] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  151.444168][ T7334] BTRFS info (device loop2): 1 enospc errors during balance
[  151.451921][ T7334] BTRFS info (device loop2): balance: canceled
[  151.502149][ T7342] loop0: detected capacity change from 0 to 512
[  151.520232][ T7342] EXT4-fs (loop0): Test dummy encryption mode enabled
[  151.538215][ T5788] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  151.548976][ T5794] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  151.594823][ T7342] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  151.632876][ T7344] netlink: 'syz.1.447': attribute type 22 has an invalid length.
[  151.665315][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'.
[  151.699370][ T7342] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.446: bad orphan inode 131083
[  151.731352][ T7342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.790105][ T5794] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  151.799717][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.811471][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.823313][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  151.832301][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.842868][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.854142][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  151.871089][ T7344] Zero length message leads to an empty skb
[  151.895222][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.923623][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.957982][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  151.996080][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.020432][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  152.034100][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  152.059808][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.075112][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  152.093603][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  152.133640][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.147524][ T7348] loop1: detected capacity change from 0 to 2048
[  152.164722][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  152.187093][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  152.211843][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.223303][ T7353] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.242757][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  152.254148][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  152.282886][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.294426][ T5794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  152.318049][ T5794] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  152.352939][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.368439][ T5794] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  152.378192][ T5794] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  152.398315][ T5794] usb 4-1: Product: syz
[  152.402527][ T5794] usb 4-1: Manufacturer: syz
[  152.429750][ T5794] usb 4-1: SerialNumber: syz
[  152.432858][ T7357] loop2: detected capacity change from 0 to 1764
[  152.442250][ T5794] usb 4-1: config 0 descriptor??
[  152.460028][ T7357] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  152.463168][ T7353] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  152.495935][ T5794] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  152.540684][ T7353] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  152.603541][ T7353] Remounting filesystem read-only
[  152.614594][ T1076] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  152.636314][ T1076] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  152.646818][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.655878][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.669583][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.681776][ T1076] NILFS (loop1): discard dirty page: offset=0, ino=3
[  152.716891][ T1076] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  152.724539][ T1076] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  152.733732][ T1076] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  152.741675][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.756518][ T1076] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  152.764825][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.778289][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.798896][ T1076] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  152.827716][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.852999][ T1076] NILFS (loop1): discard dirty page: offset=98304, ino=3
[  152.868638][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.882918][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.899427][ T1076] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  152.908419][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.922802][ T1076] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  152.930699][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.973025][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  152.997937][ T1076] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  153.007669][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  153.024749][ T1076] NILFS (loop1): discard dirty page: offset=0, ino=18
[  153.032033][ T1076] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  153.042615][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  153.057558][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  153.066707][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  153.081882][ T7367] veth1_to_hsr: entered promiscuous mode
[  153.091804][ T7367] macvlan2: entered promiscuous mode
[  153.097332][ T1076] NILFS (loop1): discard dirty page: offset=0, ino=2
[  153.107467][ T7367] veth1_to_hsr: left promiscuous mode
[  153.109182][ T1076] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  153.153193][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  153.191515][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  153.205564][ T1076] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  153.217345][ T7348] NILFS (loop1): mounting fs with errors
[  153.276370][ T7353] ------------[ cut here ]------------
[  153.282444][ T7353] WARNING: CPU: 1 PID: 7353 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4d0
[  153.291452][ T7353] Modules linked in:
[  153.295779][ T7353] CPU: 1 PID: 7353 Comm: segctord Not tainted syzkaller #0
[  153.303014][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  153.313283][ T7353] RIP: 0010:mark_buffer_dirty+0x2bb/0x4d0
[  153.319155][ T7353] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 bf ac fc ff e8 6a fa 89 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 ea 57 e8 ff e8 55 fa 89 ff <0f> 0b e9 84 fd ff ff e8 49 fa 89 ff 0f 0b e9 b0 fd ff ff e8 3d fa
[  153.338879][ T7353] RSP: 0018:ffffc900052a76f0 EFLAGS: 00010293
[  153.345763][ T7353] RAX: ffffffff81fb953b RBX: ffff888061c7d570 RCX: ffff88802902bc00
[  153.354530][ T7353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  153.362544][ T7353] RBP: ffffc900052a7b01 R08: ffff888061c7d577 R09: 1ffff1100c38faae
[  153.370714][ T7353] R10: dffffc0000000000 R11: ffffed100c38faaf R12: 1ffff1100b8d6cf7
[  153.378798][ T7353] R13: ffff88805c6b67c8 R14: ffff888079d78328 R15: 1ffff1100b8d6cf9
[  153.386846][ T7353] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  153.395863][ T7353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.402510][ T7353] CR2: 0000555569a965c8 CR3: 000000007d9f6000 CR4: 00000000003506e0
[  153.410568][ T7353] Call Trace:
[  153.414080][ T7353]  <TASK>
[  153.417087][ T7353]  nilfs_segctor_do_construct+0x32c/0x6870
[  153.423005][ T7353]  ? mark_lock+0x94/0x320
[  153.427449][ T7353]  ? verify_lock_unused+0x140/0x140
[  153.432742][ T7353]  ? verify_lock_unused+0x140/0x140
[  153.438065][ T7353]  ? nilfs_transaction_unlock+0x220/0x220
[  153.443882][ T7353]  ? nilfs_bmap_test_and_clear_dirty+0x50/0x70
[  153.450124][ T7353]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  153.456328][ T7353]  ? __lock_acquire+0x7c80/0x7c80
[  153.461390][ T7353]  ? __rwlock_init+0x150/0x150
[  153.466355][ T7353]  ? do_raw_spin_unlock+0x121/0x230
[  153.471635][ T7353]  ? _raw_spin_unlock+0x28/0x40
[  153.476594][ T7353]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  153.476883][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.482106][ T7353]  nilfs_segctor_construct+0x17b/0x690
[  153.495023][ T7353]  nilfs_segctor_thread+0x4f6/0x1000
[  153.500405][ T7353]  ? nilfs_iput_work_func+0x70/0x70
[  153.505687][ T7353]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  153.511646][ T7353]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  153.517667][ T7353]  ? wake_bit_function+0x200/0x200
[  153.522864][ T7353]  ? __kthread_parkme+0x7a/0x1c0
[  153.527907][ T7353]  kthread+0x2fa/0x390
[  153.532044][ T7353]  ? nilfs_iput_work_func+0x70/0x70
[  153.537365][ T7353]  ? kthread_blkcg+0xd0/0xd0
[  153.542027][ T7353]  ret_from_fork+0x48/0x80
[  153.546574][ T7353]  ? kthread_blkcg+0xd0/0xd0
[  153.551233][ T7353]  ret_from_fork_asm+0x11/0x20
[  153.556155][ T7353]  </TASK>
[  153.559826][ T7353] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  153.567123][ T7353] CPU: 1 PID: 7353 Comm: segctord Not tainted syzkaller #0
[  153.574417][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  153.584474][ T7353] Call Trace:
[  153.587755][ T7353]  <TASK>
[  153.590687][ T7353]  dump_stack_lvl+0x16c/0x230
[  153.595378][ T7353]  ? show_regs_print_info+0x20/0x20
[  153.600581][ T7353]  ? load_image+0x3b0/0x3b0
[  153.605095][ T7353]  panic+0x2c0/0x710
[  153.609010][ T7353]  ? bpf_jit_dump+0xd0/0xd0
[  153.613517][ T7353]  ? ret_from_fork_asm+0x11/0x20
[  153.618490][ T7353]  __warn+0x2e0/0x470
[  153.622487][ T7353]  ? mark_buffer_dirty+0x2bb/0x4d0
[  153.627613][ T7353]  ? mark_buffer_dirty+0x2bb/0x4d0
[  153.632737][ T7353]  report_bug+0x2be/0x4f0
[  153.637084][ T7353]  ? mark_buffer_dirty+0x2bb/0x4d0
[  153.642217][ T7353]  ? mark_buffer_dirty+0x2bb/0x4d0
[  153.647339][ T7353]  ? mark_buffer_dirty+0x2bd/0x4d0
[  153.652462][ T7353]  handle_bug+0xcf/0x120
[  153.656714][ T7353]  exc_invalid_op+0x1a/0x50
[  153.661231][ T7353]  asm_exc_invalid_op+0x1a/0x20
[  153.666098][ T7353] RIP: 0010:mark_buffer_dirty+0x2bb/0x4d0
[  153.671835][ T7353] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 bf ac fc ff e8 6a fa 89 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 ea 57 e8 ff e8 55 fa 89 ff <0f> 0b e9 84 fd ff ff e8 49 fa 89 ff 0f 0b e9 b0 fd ff ff e8 3d fa
[  153.691447][ T7353] RSP: 0018:ffffc900052a76f0 EFLAGS: 00010293
[  153.697518][ T7353] RAX: ffffffff81fb953b RBX: ffff888061c7d570 RCX: ffff88802902bc00
[  153.705490][ T7353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  153.713466][ T7353] RBP: ffffc900052a7b01 R08: ffff888061c7d577 R09: 1ffff1100c38faae
[  153.721480][ T7353] R10: dffffc0000000000 R11: ffffed100c38faaf R12: 1ffff1100b8d6cf7
[  153.729455][ T7353] R13: ffff88805c6b67c8 R14: ffff888079d78328 R15: 1ffff1100b8d6cf9
[  153.737525][ T7353]  ? mark_buffer_dirty+0x2bb/0x4d0
[  153.742662][ T7353]  nilfs_segctor_do_construct+0x32c/0x6870
[  153.748580][ T7353]  ? mark_lock+0x94/0x320
[  153.752921][ T7353]  ? verify_lock_unused+0x140/0x140
[  153.758161][ T7353]  ? verify_lock_unused+0x140/0x140
[  153.763388][ T7353]  ? nilfs_transaction_unlock+0x220/0x220
[  153.769135][ T7353]  ? nilfs_bmap_test_and_clear_dirty+0x50/0x70
[  153.775302][ T7353]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  153.780773][ T7353]  ? __lock_acquire+0x7c80/0x7c80
[  153.785803][ T7353]  ? __rwlock_init+0x150/0x150
[  153.790572][ T7353]  ? do_raw_spin_unlock+0x121/0x230
[  153.795788][ T7353]  ? _raw_spin_unlock+0x28/0x40
[  153.800644][ T7353]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  153.806128][ T7353]  nilfs_segctor_construct+0x17b/0x690
[  153.811605][ T7353]  nilfs_segctor_thread+0x4f6/0x1000
[  153.816922][ T7353]  ? nilfs_iput_work_func+0x70/0x70
[  153.822129][ T7353]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  153.828024][ T7353]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  153.833921][ T7353]  ? wake_bit_function+0x200/0x200
[  153.839038][ T7353]  ? __kthread_parkme+0x7a/0x1c0
[  153.843995][ T7353]  kthread+0x2fa/0x390
[  153.848072][ T7353]  ? nilfs_iput_work_func+0x70/0x70
[  153.853289][ T7353]  ? kthread_blkcg+0xd0/0xd0
[  153.857890][ T7353]  ret_from_fork+0x48/0x80
[  153.862315][ T7353]  ? kthread_blkcg+0xd0/0xd0
[  153.866916][ T7353]  ret_from_fork_asm+0x11/0x20
[  153.871723][ T7353]  </TASK>
[  153.875087][ T7353] Kernel Offset: disabled
[  153.879507][ T7353] Rebooting in 86400 seconds..