last executing test programs:

7.247278486s ago: executing program 0 (id=1683):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b11, 0x0)

5.252213695s ago: executing program 0 (id=1697):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)={@val, @void, @eth={@multicast, @remote, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x6e, 0x65, 0x0, 0x1, 0x11, 0x0, @loopback, @rand_addr=0x64010101}, "d915cb083e96a518d7fa0f3697b4212f1771f86b3ed9fac34c10b880692239d3dc0ecab74a6224f5a1037c92d78b784a9f2daa4923fcee532edda46895c57a5862aa6c530c503f1218bf41258600942f43a84dbcf9a217748d05"}}}}}, 0x88)

5.07620507s ago: executing program 0 (id=1699):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x36, {0x36, 0x0, "009cf99d3a75c941d96eece731442bb0a38776bbf78d9627c930a1d1803ac3d9ce914077ecc38f24e9a03b9223d6a808df61f935"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.982550542s ago: executing program 1 (id=1716):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

3.953010585s ago: executing program 4 (id=1717):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4188aec6, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

3.547696489s ago: executing program 1 (id=1722):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000020c0)=""/2, 0x2, 0x0, 0x0, 0x0)

3.457441527s ago: executing program 4 (id=1724):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000580)={0x0, 0x0, 0x2, r2, 0xe})

3.378377224s ago: executing program 1 (id=1726):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014e40900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000018500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3.18378303s ago: executing program 1 (id=1728):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
mount$9p_fd(0x20100000, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}})

2.980275227s ago: executing program 4 (id=1731):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCXONC(r0, 0x540a, 0x2)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))

2.903898714s ago: executing program 0 (id=1732):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000040)=0x10000, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0x2, 0x4e21, 0x0, @dev}, 0x1c)
write$binfmt_elf64(r0, 0x0, 0x0)

2.767804406s ago: executing program 0 (id=1735):
prlimit64(0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000092101ef7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.229447791s ago: executing program 3 (id=1739):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.183958175s ago: executing program 1 (id=1740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0)

2.079485884s ago: executing program 1 (id=1742):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, 0x0)

2.036748927s ago: executing program 3 (id=1743):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97000fc82900feee0f000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

1.915563588s ago: executing program 4 (id=1744):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000000e00)=ANY=[@ANYBLOB="6e6f7374726963742c696f636861727365743d64656661756f7672732c706172746974696f6e3d31383434363734343037333730393438363037390000000072732c6769643d69676e6f72652c6e6f7672732c6769643d666f726765742c646d6f64653d30303030303030303030303030303030303030303030322c00c7118491c9f4395b4589354da4d203570c68add9f49abe73ec9b11e001f7f6b434fa740ce47a3c13d6274c4da4576d60d7d85990202b32b890bb6b7976a505ac32b013d93660"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f00000002c0), 0x64)
connect$vsock_stream(r0, &(0x7f0000001240)={0x28, 0x0, 0xffffd8ef, @local}, 0x10)

1.821652056s ago: executing program 2 (id=1745):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0xc0096616, &(0x7f0000000700)=@v1={0x0, @aes128, 0x0, @desc2})

1.611947643s ago: executing program 3 (id=1746):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlink(&(0x7f0000000700)='./file1\x00')

1.390183753s ago: executing program 2 (id=1747):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x303, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)

1.345696156s ago: executing program 3 (id=1748):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, "601e6d5768a6d033481100"}})

1.236290895s ago: executing program 2 (id=1749):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.057068381s ago: executing program 3 (id=1750):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00598f2f223a0a12f76404ad3bd59a04fbd75d1008c039c51a2a013e63af1c9ed7416faa1e2ea98d0f1c7337a5c81920988a4299a77054cdb12285fd7a0e5b43382d962372b73042593a5bd6b7db4a1b3721c62f11018727c29f3a1bd1e554474ea0d1da2a20b205df342a04a34b65e16a23e8e7811a984963073ebcbead85f9e4332bdef4c1ce54a1c6f7a47b75aa95b9e8cb616be40a0000b1309ee426d1803ef09abb9509846c34b9ac0bf109cedbd12c850effda9ae677566159f9c83da7ff6e247e3ac43c0a663c8c83650692e474bac2c047b238601bd5187d6bed82fe2034512ef11b74a98252198c4402bcf3165561157678e9d50831c27d1094a04d8c7607d7164033cda7a8170482"], 0x1, 0x4436, &(0x7f0000004480)="$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")
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)
io_setup(0x2e, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

1.056710261s ago: executing program 2 (id=1751):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239c9442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49fffffffffffffffffdf87f38e08ed924527c0e45f594c78d3212d9e47dc2a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x147042, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

1.017034094s ago: executing program 4 (id=1752):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

779.543404ms ago: executing program 4 (id=1753):
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000005d80), 0x1, 0x5ce8, &(0x7f0000005dc0)="$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")
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x6000400)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r1, 0xfffffffffffffffd, 0x58)

561.724123ms ago: executing program 2 (id=1754):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setreuid(r1, r1)
semget$private(0x0, 0xc, 0x721)
semctl$IPC_RMID(0x0, 0x0, 0x10)

560.575203ms ago: executing program 0 (id=1755):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

227.785661ms ago: executing program 2 (id=1756):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_RESVSP(r0, 0x80106f05, &(0x7f00000000c0)={0x0, 0x4, 0x32, 0x100000000})

0s ago: executing program 3 (id=1757):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'dh\x00'}, 0x2c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

3: loop0: Mark volume as dirty due to NTFS errors
[  164.395891][ T3790] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  164.515733][ T4338] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  164.712852][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'.
[  164.765892][ T3790] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.790001][ T3790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.802437][ T3790] usb 5-1: config 1 interface 1 has no altsetting 0
[  164.895989][ T4338] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  164.915363][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.940328][ T4338] usb 3-1: config 0 descriptor??
[  164.972025][ T3790] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  164.982474][ T4338] cp210x 3-1:0.0: cp210x converter detected
[  164.996199][ T3790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.008756][ T6720] loop0: detected capacity change from 0 to 256
[  165.015264][ T3790] usb 5-1: Product: syz
[  165.019943][ T3790] usb 5-1: Manufacturer: syz
[  165.024561][ T3790] usb 5-1: SerialNumber: syz
[  165.030396][ T6720] exfat: Deprecated parameter 'utf8'
[  165.036120][ T6720] exfat: Deprecated parameter 'namecase'
[  165.043964][ T6720] exfat: Deprecated parameter 'namecase'
[  165.053697][ T6720] exfat: Deprecated parameter 'utf8'
[  165.059460][ T6720] exfat: Deprecated parameter 'utf8'
[  165.077581][ T6720] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  165.091347][ T3790] usb 5-1: selecting invalid altsetting 1
[  165.103381][ T3790] usb 5-1: selecting invalid altsetting 0
[  165.109852][ T3790] usb 5-1: selecting invalid altsetting 0
[  165.127135][ T3790] cdc_ncm 5-1:1.0: bind() failure
[  165.149880][ T3790] usb 5-1: selecting invalid altsetting 0
[  165.165941][ T3790] usbtest: probe of 5-1:1.1 failed with error -22
[  165.444004][ T6731] loop3: detected capacity change from 0 to 1024
[  165.466486][ T6731] EXT4-fs: Ignoring removed oldalloc option
[  165.473025][ T6731] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  165.489975][ T6731] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data
[  165.645891][ T4338] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  165.663343][ T4338] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  165.719378][ T4338] usb 3-1: cp210x converter now attached to ttyUSB0
[  165.734054][ T4338] usb 3-1: USB disconnect, device number 9
[  165.775282][ T4338] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  165.799213][ T4338] cp210x 3-1:0.0: device disconnected
[  165.915917][ T3683] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  166.165890][ T3683] usb 1-1: Using ep0 maxpacket: 16
[  166.245879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.305969][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.346657][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.386931][ T3683] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  166.422907][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.473222][ T3683] usb 1-1: config 0 descriptor??
[  166.531318][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  166.933395][ T6768] loop3: detected capacity change from 0 to 256
[  166.944394][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.958530][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.979524][ T3683] hid (null): unknown global tag 0xd
[  166.985086][ T3683] hid (null): unknown global tag 0xd
[  166.993920][ T3683] hid (null): report_id 40203 is invalid
[  167.005534][ T3683] hid (null): invalid report_size -1862471209
[  167.016678][ T3683] hid (null): invalid report_size -1217885453
[  167.023337][   T27] kauditd_printk_skb: 8 callbacks suppressed
[  167.023351][   T27] audit: type=1800 audit(1728582841.417:156): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.983" name=C1FEDC30 dev="loop3" ino=1048645 res=0 errno=0
[  167.023534][ T3683] hid (null): bogus close delimiter
[  167.073952][ T3683] hid (null): unknown global tag 0xc
[  167.079551][ T3683] hid (null): global environment stack overflow
[  167.091781][ T3798] usb 5-1: USB disconnect, device number 12
[  167.216007][ T3683] usb 1-1: string descriptor 0 read error: -71
[  167.253130][ T3683] usb 1-1: Max retries (5) exceeded reading string descriptor 200
[  167.261165][ T3683] letsketch: probe of 0003:6161:4D15.000B failed with error -32
[  167.283638][ T3683] usb 1-1: USB disconnect, device number 9
[  167.591356][ T6788] loop2: detected capacity change from 0 to 512
[  167.606776][ T6788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  167.634667][ T6788] EXT4-fs (loop2): 1 truncate cleaned up
[  167.640759][ T6788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  167.692047][ T3646] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  167.724312][ T3646] EXT4-fs (loop2): unmounting filesystem.
[  168.038908][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1001'.
[  168.060295][ T4040] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  168.315877][ T4040] usb 1-1: Using ep0 maxpacket: 8
[  168.382297][ T6824] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  168.400134][   T27] audit: type=1326 audit(1728582842.797:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.1006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29f817dff9 code=0x0
[  168.630410][ T4040] usb 1-1: New USB device found, idVendor=19d2, idProduct=1119, bcdDevice=39.9d
[  168.649402][ T4040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.681180][ T4040] usb 1-1: Product: syz
[  168.695432][ T4040] usb 1-1: Manufacturer: syz
[  168.710629][ T4040] usb 1-1: SerialNumber: syz
[  168.722791][ T4040] usb 1-1: config 0 descriptor??
[  168.776690][ T4040] usb 1-1: bad CDC descriptors
[  168.884545][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  169.225386][ T6799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.252757][ T6832] loop3: detected capacity change from 0 to 32768
[  169.261974][ T6848] loop2: detected capacity change from 0 to 256
[  169.273576][ T6799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.298690][ T6832] XFS: attr2 mount option is deprecated.
[  169.304875][ T6848] exfat: Deprecated parameter 'utf8'
[  169.337639][ T6832] XFS: ikeep mount option is deprecated.
[  169.338447][ T3798] usb 1-1: USB disconnect, device number 10
[  169.343314][ T6832] XFS: noikeep mount option is deprecated.
[  169.357452][ T6848] exfat: Deprecated parameter 'namecase'
[  169.386059][ T6848] exfat: Deprecated parameter 'namecase'
[  169.420750][ T6848] exfat: Deprecated parameter 'utf8'
[  169.442758][ T6848] exfat: Deprecated parameter 'utf8'
[  169.454270][ T6832] XFS (loop3): Mounting V5 Filesystem
[  169.470329][ T6848] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  169.515926][ T6860] loop4: detected capacity change from 0 to 256
[  169.597837][ T6832] XFS (loop3): Ending clean mount
[  169.611879][ T6832] XFS (loop3): Quotacheck needed: Please wait.
[  169.711634][ T6832] XFS (loop3): Quotacheck: Done.
[  169.783433][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  169.952226][ T3644] XFS (loop3): Unmounting Filesystem
[  169.990448][ T6870] device team_slave_0 entered promiscuous mode
[  169.997299][ T6870] device team_slave_1 entered promiscuous mode
[  170.023911][ T6870] device macvlan2 entered promiscuous mode
[  170.030185][ T6870] device team0 entered promiscuous mode
[  170.053648][ T6870] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  170.117126][ T6870] device team0 left promiscuous mode
[  170.123110][ T6870] device team_slave_0 left promiscuous mode
[  170.129168][ T6870] device team_slave_1 left promiscuous mode
[  170.564608][ T6878] loop3: detected capacity change from 0 to 8192
[  170.618773][ T6876] loop0: detected capacity change from 0 to 32768
[  170.628145][ T6876] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1028 (6876)
[  170.644534][ T6876] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.655359][ T6876] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  170.667497][ T6876] BTRFS info (device loop0): setting nodatacow, compression disabled
[  170.676358][ T6876] BTRFS info (device loop0): enabling auto defrag
[  170.686259][ T6876] BTRFS info (device loop0): max_inline at 0
[  170.705837][ T6876] BTRFS info (device loop0): using free space tree
[  170.782011][ T6886] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  171.016287][ T3798] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  171.073484][ T6907] loop4: detected capacity change from 0 to 256
[  171.328335][ T5622] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.560006][ T3798] usb 3-1: New USB device found, idVendor=0df6, idProduct=004b, bcdDevice=56.d7
[  171.582267][ T3798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.596320][ T3681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.603636][ T3798] usb 3-1: Product: syz
[  171.642240][ T3798] usb 3-1: Manufacturer: syz
[  171.657192][ T3798] usb 3-1: SerialNumber: syz
[  171.693423][ T3798] usb 3-1: config 0 descriptor??
[  171.755160][ T3798] r8712u: register rtl8712_netdev_ops to netdev_ops
[  171.763288][ T3798] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  171.985848][ T3798] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed
[  172.002791][ T3798] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  172.026619][ T3798] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  172.061128][ T6922] loop4: detected capacity change from 0 to 1024
[  172.072760][ T3681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.094687][ T3798] usb 3-1: USB disconnect, device number 10
[  172.191557][ T6924] loop0: detected capacity change from 0 to 1024
[  172.213070][ T6922] hfsplus: xattr searching failed
[  172.304003][ T3681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.332336][ T6909] loop3: detected capacity change from 0 to 40427
[  172.364909][ T6909] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  172.373529][   T56] hfsplus: b-tree write err: -5, ino 3
[  172.383276][ T3636] hfsplus: node 4:3 still has 1 user(s)!
[  172.383373][ T6909] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  172.402419][   T56] hfsplus: b-tree write err: -5, ino 4
[  172.412654][ T3650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.434097][ T3650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.443239][ T3650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.470385][ T3650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.480437][ T3650] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  172.488017][ T3650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  172.515009][ T3681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.548087][ T6909] F2FS-fs (loop3): Found nat_bits in checkpoint
[  172.807365][ T6909] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  172.825840][ T6909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  173.093963][ T6939] loop0: detected capacity change from 0 to 8192
[  173.461361][ T6925] chnl_net:caif_netlink_parms(): no params data found
[  173.473784][ T6959] Context (ID=0x1) not attached to queue pair (handle=0x2:0x0)
[  173.940976][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.956255][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.983935][ T6925] device bridge_slave_0 entered promiscuous mode
[  174.041391][ T6980] loop0: detected capacity change from 0 to 1024
[  174.060064][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.086843][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.133219][ T6925] device bridge_slave_1 entered promiscuous mode
[  174.309392][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.396980][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.405833][ T3795] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  174.515925][ T3653] Bluetooth: hci5: command tx timeout
[  174.550274][ T6925] team0: Port device team_slave_0 added
[  174.563154][ T6925] team0: Port device team_slave_1 added
[  174.565538][ T6994] loop0: detected capacity change from 0 to 128
[  174.641975][ T6977] loop4: detected capacity change from 0 to 32768
[  174.657470][ T6977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1061 (6977)
[  174.731672][ T6977] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.743554][ T6996] loop2: detected capacity change from 0 to 16
[  174.750719][ T6977] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  174.764418][ T6977] BTRFS info (device loop4): using free space tree
[  174.774413][ T6996] erofs: (device loop2): mounted with root inode @ nid 36.
[  174.776265][ T3795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.813234][ T3795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.814506][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.833807][ T3795] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  174.865758][ T3795] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  174.883929][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.885174][ T3795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.936584][ T3795] usb 4-1: config 0 descriptor??
[  174.956524][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.030013][ T6977] BTRFS info (device loop4): enabling ssd optimizations
[  175.201536][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.214681][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.281150][ T3636] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.307014][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.348791][ T4040] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  175.352872][ T4339] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  175.432346][ T3795] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  175.493951][ T3795] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  175.615846][ T4040] usb 1-1: Using ep0 maxpacket: 8
[  175.635826][ T4339] usb 3-1: Using ep0 maxpacket: 8
[  175.718158][ T3653] Bluetooth: hci1: command 0x0406 tx timeout
[  175.727356][ T3642] Bluetooth: hci0: command 0x0c1a tx timeout
[  175.728419][ T3638] Bluetooth: hci2: command 0x0406 tx timeout
[  175.733449][ T3642] Bluetooth: hci3: command 0x0406 tx timeout
[  175.750643][ T6918] usb 4-1: USB disconnect, device number 7
[  175.776305][ T4040] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  175.784543][ T4040] usb 1-1: config 0 has no interface number 0
[  175.786043][ T4339] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  175.865762][ T4339] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  175.905601][ T4339] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  175.932146][ T4339] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  175.952900][ T6925] device hsr_slave_0 entered promiscuous mode
[  175.959698][ T4339] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.976150][ T4040] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  175.982287][ T4339] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  175.985256][ T4040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.985280][ T4040] usb 1-1: Product: syz
[  175.995062][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.023949][ T4040] usb 1-1: Manufacturer: syz
[  176.040631][ T4040] usb 1-1: SerialNumber: syz
[  176.046752][ T4040] usb 1-1: config 0 descriptor??
[  176.052275][ T6925] device hsr_slave_1 entered promiscuous mode
[  176.097886][ T4040] radio-usb-si4713 1-1:0.128: Si4713 development board discovered: (10C4:8244)
[  176.113458][ T3681] device hsr_slave_0 left promiscuous mode
[  176.121767][ T3681] device hsr_slave_1 left promiscuous mode
[  176.130484][ T3681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.139778][ T3681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.148087][ T3681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.156689][ T3681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.164577][ T3681] device bridge_slave_1 left promiscuous mode
[  176.171656][ T3681] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.180856][ T3681] device bridge_slave_0 left promiscuous mode
[  176.188504][ T3681] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.221065][ T3681] device veth1_macvtap left promiscuous mode
[  176.227344][ T3681] device veth0_macvtap left promiscuous mode
[  176.233822][ T3681] device veth1_vlan left promiscuous mode
[  176.241065][ T3681] device veth0_vlan left promiscuous mode
[  176.295865][ T4339] usb 3-1: GET_CAPABILITIES returned 0
[  176.301664][ T4339] usbtmc 3-1:16.0: can't read capabilities
[  176.321050][ T7035] loop4: detected capacity change from 0 to 32768
[  176.422368][ T7035] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  176.512217][ T4339] usb 3-1: USB disconnect, device number 11
[  176.597035][ T3642] Bluetooth: hci5: command tx timeout
[  176.642764][ T3636] ocfs2: Unmounting device (7,4) on (node local)
[  177.074363][ T7039] loop3: detected capacity change from 0 to 32768
[  177.093802][ T7039] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.1070 (7039)
[  177.145980][ T7039] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  177.174191][ T7039] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  177.183630][ T7039] BTRFS info (device loop3): using free space tree
[  177.394094][ T7039] BTRFS info (device loop3): enabling ssd optimizations
[  177.470678][   T27] audit: type=1804 audit(1728582851.867:158): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1070" name="/newroot/213/file0/file1" dev="loop3" ino=260 res=1 errno=0
[  177.493810][ T4040] radio-usb-si4713: probe of 1-1:0.128 failed with error -71
[  177.501776][ T4040] usbhid 1-1:0.128: couldn't find an input interrupt endpoint
[  177.511572][ T4040] usb 1-1: USB disconnect, device number 11
[  177.663884][ T3644] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  178.082007][ T3681] team0 (unregistering): Port device team_slave_1 removed
[  178.142313][ T3681] team0 (unregistering): Port device team_slave_0 removed
[  178.194559][ T3681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.253227][ T3681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.675948][ T3642] Bluetooth: hci5: command tx timeout
[  178.883865][ T3681] bond0 (unregistering): Released all slaves
[  179.884230][ T7096] loop3: detected capacity change from 0 to 128
[  180.032154][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1083'.
[  180.052602][ T7096] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  180.092454][ T7096] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  180.222089][ T3644] EXT4-fs (loop3): unmounting filesystem.
[  180.325282][ T7107] loop3: detected capacity change from 0 to 128
[  180.386805][ T7075] loop4: detected capacity change from 0 to 40427
[  180.421810][ T7075] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  180.440885][ T7083] loop2: detected capacity change from 0 to 40427
[  180.446138][ T7075] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  180.484220][ T7083] F2FS-fs (loop2): invalid crc value
[  180.498571][ T7083] F2FS-fs (loop2): Found nat_bits in checkpoint
[  180.524349][ T7075] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff
[  180.549062][ T7075] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6
[  180.630867][ T7075] F2FS-fs (loop4): invalid crc value
[  180.735388][ T7083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  180.736607][ T7075] F2FS-fs (loop4): Found nat_bits in checkpoint
[  180.756168][ T3642] Bluetooth: hci5: command tx timeout
[  180.823649][ T6925] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  180.856746][ T6925] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  180.925281][ T6925] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  180.961676][ T6925] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.990013][ T7075] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  181.004052][ T7075] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  181.159073][ T7123] loop0: detected capacity change from 0 to 8192
[  181.202851][ T7123] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  181.226926][ T7123] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  181.266367][ T7123] REISERFS (device loop0): using ordered data mode
[  181.272923][ T7123] reiserfs: using flush barriers
[  181.291322][ T3636] syz-executor: attempt to access beyond end of device
[  181.291322][ T3636] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  181.308383][ T3636] syz-executor: attempt to access beyond end of device
[  181.308383][ T3636] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  181.334031][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.392456][ T7123] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  181.416984][ T6925] 8021q: adding VLAN 0 to HW filter on device team0
[  181.423986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  181.437040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  181.485053][ T7123] REISERFS (device loop0): checking transaction log (loop0)
[  181.498060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  181.542549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  181.566628][   T56] kworker/u4:4: attempt to access beyond end of device
[  181.566628][   T56] loop4: rw=2049, sector=40960, nr_sectors = 128 limit=40427
[  181.596114][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.603236][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.637685][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  181.680877][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  181.711897][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  181.734422][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.741592][ T4004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.810600][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  181.826541][ T7123] REISERFS (device loop0): Using tea hash to sort names
[  181.863344][ T7123] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  181.935879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.962797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  182.011897][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  182.024512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  182.038934][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  182.050925][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  182.096644][ T3796] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  182.128939][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  182.157845][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  182.192661][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  182.238868][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.264444][ T6925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  182.418604][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.497698][ T3796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.518873][ T3796] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 69
[  182.555777][ T4339] kernel write not supported for file /sequencer2 (pid: 4339 comm: kworker/0:18)
[  182.608415][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.706031][ T3796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  182.717386][ T7163] loop0: detected capacity change from 0 to 16
[  182.724224][ T7163] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  182.735099][ T3796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.765882][ T3796] usb 4-1: Product: syz
[  182.770091][ T3796] usb 4-1: Manufacturer: syz
[  182.803217][ T3796] usb 4-1: SerialNumber: syz
[  182.863087][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.080416][ T7140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  183.099540][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.232581][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  183.241682][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  183.284351][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.355355][ T7174] loop0: detected capacity change from 0 to 1024
[  183.399332][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  183.436898][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.450124][ T7174] hfsplus: xattr searching failed
[  183.508215][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.527161][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.571286][ T6925] device veth0_vlan entered promiscuous mode
[  183.573958][ T7157] loop2: detected capacity change from 0 to 32768
[  183.584558][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.593237][   T56] hfsplus: b-tree write err: -5, ino 3
[  183.603463][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.613651][ T5622] hfsplus: node 4:3 still has 1 user(s)!
[  183.699064][ T6925] device veth1_vlan entered promiscuous mode
[  183.747110][ T7189] loop0: detected capacity change from 0 to 512
[  183.754287][ T7189] ext4: Bad value for 'min_batch_time'
[  183.760650][ T7140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  183.797303][ T3653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.811117][ T3653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.824723][ T3653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.844170][ T3629] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  183.873029][   T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.889505][   T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  183.900879][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.926797][ T7157] XFS (loop2): Mounting V5 Filesystem
[  183.938525][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  183.947573][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.987059][ T6925] device veth0_macvtap entered promiscuous mode
[  184.057373][ T3796] cdc_ncm 4-1:1.0: bind() failure
[  184.085807][ T3796] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  184.116184][ T3796] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  184.130637][ T6925] device veth1_macvtap entered promiscuous mode
[  184.145803][ T3796] usbtest: probe of 4-1:1.1 failed with error -71
[  184.165809][ T3796] usb 4-1: USB disconnect, device number 8
[  184.249947][ T7157] XFS (loop2): Ending clean mount
[  184.261830][ T7157] XFS (loop2): Quotacheck needed: Please wait.
[  184.319122][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.332948][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.343500][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.359430][ T7157] XFS (loop2): Quotacheck: Done.
[  184.365465][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.375805][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.387039][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.397902][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.419211][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.445747][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.457156][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.471682][ T3646] XFS (loop2): Unmounting Filesystem
[  184.472813][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.486881][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  184.542070][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  184.576753][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  184.604593][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  184.733804][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.774930][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.780914][ T7216] loop3: detected capacity change from 0 to 64
[  184.796041][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.837828][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.858451][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.893373][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.913925][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.927709][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.938142][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.950210][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.963219][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.978219][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  185.008118][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  185.058589][ T6925] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.097010][ T6925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.123498][ T6925] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.147803][ T6925] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.353748][ T7231] loop0: detected capacity change from 0 to 64
[  185.383445][ T7233] netlink: 'syz.2.1111': attribute type 11 has an invalid length.
[  185.391942][ T3968] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  185.637262][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.677652][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.795590][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  185.817242][ T7186] chnl_net:caif_netlink_parms(): no params data found
[  185.826118][ T3968] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  185.834552][ T3968] usb 4-1: config 0 has no interface number 0
[  185.851621][ T3968] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.875875][ T3968] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.956331][ T3642] Bluetooth: hci1: command tx timeout
[  185.976208][ T3968] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  185.988766][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1122'.
[  185.996713][ T3968] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  186.002438][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.014429][ T3968] usb 4-1: Manufacturer: syz
[  186.016328][ T3968] usb 4-1: config 0 descriptor??
[  186.095740][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.157027][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  186.525470][ T3968] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.000D/input/input13
[  186.608048][ T3968] sony 0003:054C:03D5.000D: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18
[  186.761262][   T27] audit: type=1326 audit(1728582861.157:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.1129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c5797dff9 code=0x0
[  186.812323][ T3683] usb 4-1: USB disconnect, device number 9
[  186.893891][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.902839][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.925255][ T7186] device bridge_slave_0 entered promiscuous mode
[  186.988150][    T9] device hsr_slave_0 left promiscuous mode
[  187.016909][    T9] device hsr_slave_1 left promiscuous mode
[  187.038359][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.058543][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.074111][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.093633][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.119766][    T9] device bridge_slave_1 left promiscuous mode
[  187.134021][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.152688][    T9] device bridge_slave_0 left promiscuous mode
[  187.167062][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.205522][    T9] device veth1_macvtap left promiscuous mode
[  187.222502][    T9] device veth0_macvtap left promiscuous mode
[  187.231262][    T9] device veth1_vlan left promiscuous mode
[  187.244282][    T9] device veth0_vlan left promiscuous mode
[  187.316046][ T3798] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  187.565880][ T3798] usb 2-1: Using ep0 maxpacket: 8
[  187.706063][ T3798] usb 2-1: config 0 has no interfaces?
[  187.866159][ T3798] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.879902][ T3798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.894607][ T3798] usb 2-1: Product: syz
[  187.902465][ T3798] usb 2-1: Manufacturer: syz
[  187.911379][ T3798] usb 2-1: SerialNumber: syz
[  187.925608][ T3798] usb 2-1: config 0 descriptor??
[  188.050137][ T3653] Bluetooth: hci1: command tx timeout
[  188.189388][ T3798] usb 2-1: USB disconnect, device number 9
[  188.201152][    T9] team0 (unregistering): Port device team_slave_1 removed
[  188.258305][    T9] team0 (unregistering): Port device team_slave_0 removed
[  188.312320][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.364051][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.075283][    T9] bond0 (unregistering): Released all slaves
[  189.153324][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.161155][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.169551][ T7186] device bridge_slave_1 entered promiscuous mode
[  189.306908][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.372936][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.619093][ T7186] team0: Port device team_slave_0 added
[  189.670498][ T7186] team0: Port device team_slave_1 added
[  189.843151][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.855717][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.959986][ T7186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.015770][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.041543][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.115941][ T3642] Bluetooth: hci1: command tx timeout
[  190.170173][ T7351] vxcan1: tx address claim with different name
[  190.184182][ T7186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.514506][ T7329] loop0: detected capacity change from 0 to 32768
[  190.590855][ T7186] device hsr_slave_0 entered promiscuous mode
[  190.626323][ T7186] device hsr_slave_1 entered promiscuous mode
[  190.662065][ T7186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.687590][ T7186] Cannot create hsr debugfs directory
[  190.980673][ T7369] loop3: detected capacity change from 0 to 256
[  190.985236][ T7336] loop2: detected capacity change from 0 to 40427
[  191.014662][ T7336] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  191.083682][ T7336] F2FS-fs (loop2): invalid crc value
[  191.144904][ T7336] F2FS-fs (loop2): Found nat_bits in checkpoint
[  191.313172][ T7336] F2FS-fs (loop2): Start checkpoint disabled!
[  191.353442][ T7336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  191.490813][ T7336] syz.2.1144: attempt to access beyond end of device
[  191.490813][ T7336] loop2: rw=524288, sector=45072, nr_sectors = 24 limit=40427
[  191.545798][ T7336] syz.2.1144: attempt to access beyond end of device
[  191.545798][ T7336] loop2: rw=0, sector=45072, nr_sectors = 8 limit=40427
[  191.644639][   T27] audit: type=1800 audit(1728582866.037:160): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1144" name="/" dev="loop2" ino=8 res=0 errno=0
[  191.653874][ T7389] loop0: detected capacity change from 0 to 2048
[  191.870996][   T35] kworker/u4:2: attempt to access beyond end of device
[  191.870996][   T35] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  192.132838][ T7186] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  192.163107][ T7186] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  192.196784][ T3642] Bluetooth: hci1: command tx timeout
[  192.216899][ T7186] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  192.258450][ T7186] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  192.489577][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.515931][ T3798] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  192.524249][ T7186] 8021q: adding VLAN 0 to HW filter on device team0
[  192.571919][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.614513][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.710516][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  192.758224][ T3798] usb 1-1: Using ep0 maxpacket: 16
[  192.759701][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.807428][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.815352][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.878650][ T3798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.899460][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  192.928304][ T3798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.976762][ T3798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  192.994394][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.027513][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.045003][ T3798] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  193.077662][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.084268][ T7383] loop3: detected capacity change from 0 to 32768
[  193.084817][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.091327][ T3798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.152251][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.161800][ T3798] usb 1-1: config 0 descriptor??
[  193.171463][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.181560][ T7383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1165 (7383)
[  193.197768][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  193.244488][ T7383] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.271957][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.299342][ T7383] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  193.310136][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.330391][ T7383] BTRFS info (device loop3): use zlib compression, level 3
[  193.352094][ T7383] BTRFS info (device loop3): using free space tree
[  193.412537][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  193.432623][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  193.483631][ T7422] loop2: detected capacity change from 0 to 2048
[  193.518018][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  193.549491][ T7383] BTRFS info (device loop3): enabling ssd optimizations
[  193.566393][ T7422] EXT4-fs: Ignoring removed bh option
[  193.624906][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  193.659261][ T7422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  193.669943][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  193.699838][ T3798] HID 045e:07da: Invalid code 65791 type 1
[  193.699951][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  193.742636][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.762731][ T3798] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input14
[  193.803747][ T3646] EXT4-fs (loop2): unmounting filesystem.
[  193.835228][ T3798] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  193.847332][ T3644] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  194.013876][ T4339] usb 1-1: USB disconnect, device number 12
[  194.111902][ T7447] loop2: detected capacity change from 0 to 512
[  194.120215][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  194.120261][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  194.308210][ T7447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  194.348268][ T7447] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038 (0x7fffffff)
[  194.480800][ T7447] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  194.615346][ T7459] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28
[  194.646759][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.656364][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.705881][ T7186] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.718659][ T7459] EXT4-fs (loop2): This should not happen!! Data will be lost
[  194.718659][ T7459] 
[  194.802383][ T7459] EXT4-fs (loop2): Total free blocks count 0
[  194.832722][ T7459] EXT4-fs (loop2): Free/Dirty block details
[  194.856115][ T7459] EXT4-fs (loop2): free_blocks=65280
[  194.885900][ T7459] EXT4-fs (loop2): dirty_blocks=1
[  194.897396][ T7459] EXT4-fs (loop2): Block reservation details
[  194.904105][ T7469] rtc_cmos 00:00: Alarms can be up to one day in the future
[  194.922865][ T7459] EXT4-fs (loop2): i_reserved_data_blocks=1
[  195.126642][ T3646] EXT4-fs (loop2): unmounting filesystem.
[  195.550745][ T7492] netlink: 'syz.1.1179': attribute type 10 has an invalid length.
[  195.560465][ T3796] rtc_cmos 00:00: Alarms can be up to one day in the future
[  195.576405][ T3796] rtc_cmos 00:00: Alarms can be up to one day in the future
[  195.583868][ T7492] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1179'.
[  195.604786][ T3796] rtc_cmos 00:00: Alarms can be up to one day in the future
[  195.616838][ T3796] rtc_cmos 00:00: Alarms can be up to one day in the future
[  195.631976][ T3796] rtc rtc0: __rtc_set_alarm: err=-22
[  195.771357][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  195.796609][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  195.878804][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  195.888056][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  195.908032][ T7186] device veth0_vlan entered promiscuous mode
[  195.933731][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  195.970891][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  195.974809][ T7508] loop3: detected capacity change from 0 to 1024
[  195.998802][ T7186] device veth1_vlan entered promiscuous mode
[  196.099374][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  196.110164][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  196.148011][ T3708] hfsplus: b-tree write err: -5, ino 4
[  196.184292][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  196.223016][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  196.250319][ T7186] device veth0_macvtap entered promiscuous mode
[  196.291810][ T7186] device veth1_macvtap entered promiscuous mode
[  196.361356][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.395761][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.445820][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.490474][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.510713][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.537772][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.555723][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.585727][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.637446][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.676947][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.707383][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.740546][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.775727][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.805974][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.833719][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.854372][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.874123][ T7502] loop2: detected capacity change from 0 to 40427
[  196.875446][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.905785][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.921053][ T7502] F2FS-fs (loop2): invalid crc value
[  196.926727][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.938044][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.949428][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.961006][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.962078][ T7502] F2FS-fs (loop2): Found nat_bits in checkpoint
[  196.985168][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  197.006092][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  197.024582][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  197.045127][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  197.054123][ T7502] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  197.064309][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  197.073182][ T7502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  197.100722][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  197.140612][ T7186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.158700][ T7186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.199352][ T7186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.216844][ T7186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.251624][ T3646] syz-executor: attempt to access beyond end of device
[  197.251624][ T3646] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  197.445596][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.468141][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.547941][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  197.577929][ T4004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.597626][ T4004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.672735][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  198.155856][ T3798] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  198.412492][ T3798] usb 1-1: Using ep0 maxpacket: 8
[  198.538985][ T3798] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  198.551567][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  198.570359][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  198.604247][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  198.718257][ T3798] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  198.726055][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  198.738713][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  198.756675][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  198.848076][ T3798] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  198.862915][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  198.932113][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  198.964786][ T3798] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  199.231109][ T3798] usb 1-1: string descriptor 0 read error: -22
[  199.249290][ T3798] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  199.276039][ T3729] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  199.280187][ T3798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.369067][ T3798] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  199.648440][ T4339] usb 1-1: USB disconnect, device number 13
[  199.695830][ T3729] usb 5-1: config 0 has an invalid interface number: 18 but max is 0
[  199.714375][ T3729] usb 5-1: config 0 has no interface number 0
[  199.741706][ T3729] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.781165][ T3729] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.895816][ T3729] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  199.915289][ T3729] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  199.945711][ T3729] usb 5-1: Manufacturer: syz
[  199.966763][ T3729] usb 5-1: config 0 descriptor??
[  200.011420][ T7588] loop2: detected capacity change from 0 to 32768
[  200.028651][ T7588] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1214 (7588)
[  200.098227][ T7588] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.125893][ T7588] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  200.154926][ T7588] BTRFS info (device loop2): using free space tree
[  200.279612][ T7592] loop3: detected capacity change from 0 to 40427
[  200.313805][ T7592] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  200.335250][ T7592] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  200.403717][ T7592] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  200.482756][ T3729] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.000F/input/input15
[  200.540511][ T7592] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  200.548044][ T7588] BTRFS info (device loop2): enabling ssd optimizations
[  200.559784][ T3729] sony 0003:054C:03D5.000F: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18
[  200.563715][ T7592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  200.601470][ T7592] syz.3.1216: attempt to access beyond end of device
[  200.601470][ T7592] loop3: rw=2049, sector=53248, nr_sectors = 32 limit=40427
[  200.736954][ T3729] usb 5-1: USB disconnect, device number 13
[  200.841805][ T3646] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.925554][ T3644] syz-executor: attempt to access beyond end of device
[  200.925554][ T3644] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.384875][ T7632] loop0: detected capacity change from 0 to 4096
[  201.522853][ T7632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  201.613908][ T7641] loop3: detected capacity change from 0 to 512
[  201.623967][ T7641] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  201.662218][ T7641] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  201.675395][ T7641] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  201.696819][ T7641] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  201.705584][ T7641] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000]
[  201.714125][ T7641] EXT4-fs (loop3): failed to initialize system zone (-117)
[  201.733213][ T7641] EXT4-fs (loop3): mount failed
[  201.757421][ T5622] EXT4-fs (loop0): unmounting filesystem.
[  202.105792][ T3968] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  202.395874][ T3968] usb 3-1: Using ep0 maxpacket: 8
[  202.516767][ T3968] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  202.528118][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  202.574852][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  202.631470][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  202.765742][ T7656] loop3: detected capacity change from 0 to 32768
[  202.784990][ T3968] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  202.804785][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  202.845722][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  202.861521][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  202.902640][ T7656] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  202.953068][ T3968] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  202.964076][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  202.977496][ T7656] (syz.3.1232,7656,0):ocfs2_rename:1280 ERROR: status = -2
[  202.985938][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  202.997561][ T3968] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  203.010321][ T7656] (syz.3.1232,7656,1):ocfs2_rename:1685 ERROR: status = -2
[  203.044961][ T3644] ocfs2: Unmounting device (7,3) on (node local)
[  203.165778][ T3684] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  203.275970][ T3968] usb 3-1: string descriptor 0 read error: -22
[  203.282387][ T3968] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  203.292627][ T3968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.355784][ T3798] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  203.358043][ T3968] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  203.560763][ T3796] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  203.586007][ T3684] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  203.595067][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  203.605392][ T3716] usb 3-1: USB disconnect, device number 12
[  203.636519][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  203.648572][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  203.663460][ T3684] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  203.673120][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.694559][ T3684] usb 5-1: config 0 descriptor??
[  203.718398][ T7675] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  203.737391][ T3798] usb 1-1: config 0 has an invalid interface number: 18 but max is 0
[  203.746316][ T3798] usb 1-1: config 0 has no interface number 0
[  203.752742][ T3798] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.764860][ T3798] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.805833][ T3796] usb 4-1: Using ep0 maxpacket: 8
[  203.876625][ T3798] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  203.886147][ T3798] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  203.894330][ T3798] usb 1-1: Manufacturer: syz
[  203.901821][ T3798] usb 1-1: config 0 descriptor??
[  203.927567][ T3796] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  203.935996][ T3796] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  203.947508][ T3796] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  203.957633][ T3796] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  203.967807][ T3796] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  203.982303][ T3796] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  203.991494][ T3796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.197986][ T3684] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd
[  204.208727][ T3684] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  204.233325][ T3684] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  204.265885][ T3796] usb 4-1: GET_CAPABILITIES returned 0
[  204.271433][ T3796] usbtmc 4-1:16.0: can't read capabilities
[  204.391732][ T3798] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0011/input/input17
[  204.478178][ T3798] sony 0003:054C:03D5.0011: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18
[  204.498101][ T3798] usb 4-1: USB disconnect, device number 10
[  204.501127][ T3684] usb 5-1: USB disconnect, device number 14
[  204.620784][ T3796] usb 1-1: USB disconnect, device number 14
[  205.681797][ T7717] loop0: detected capacity change from 0 to 256
[  205.741330][ T7717] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  205.839321][ T3708] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.148221][ T3708] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.303812][ T3708] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.461281][ T3708] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.530913][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'.
[  206.785729][ T3968] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  207.055754][ T3968] usb 1-1: Using ep0 maxpacket: 8
[  207.175994][ T3968] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  207.194765][ T3968] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  207.228826][ T3968] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  207.291168][ T3968] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  207.321845][ T3968] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.364762][ T3968] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  207.384497][ T3968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.397664][ T7755] loop4: detected capacity change from 0 to 256
[  207.682688][ T3642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  207.702427][ T3642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  207.711771][ T3642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  207.719477][ T3968] usb 1-1: GET_CAPABILITIES returned 0
[  207.725256][ T3968] usbtmc 1-1:16.0: can't read capabilities
[  207.734268][ T3642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  207.747414][ T3642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  207.755325][ T3642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  207.976206][ T3716] usb 1-1: USB disconnect, device number 15
[  208.362909][ T7766] chnl_net:caif_netlink_parms(): no params data found
[  208.916733][ T3716] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  209.029323][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.047348][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.072828][ T7766] device bridge_slave_0 entered promiscuous mode
[  209.109904][ T3708] device hsr_slave_0 left promiscuous mode
[  209.130571][ T3708] device hsr_slave_1 left promiscuous mode
[  209.152624][ T3708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.175972][ T3716] usb 1-1: Using ep0 maxpacket: 16
[  209.190923][ T3708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.228022][ T3708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.243646][ T3708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.270424][ T3708] device bridge_slave_1 left promiscuous mode
[  209.302363][ T3716] usb 1-1: config 0 has no interfaces?
[  209.312129][ T3716] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  209.324922][ T3708] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.341736][ T3716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.370129][ T3716] usb 1-1: config 0 descriptor??
[  209.396155][ T3708] device bridge_slave_0 left promiscuous mode
[  209.402783][ T3708] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.551838][ T3708] device veth1_macvtap left promiscuous mode
[  209.560759][ T3708] device veth0_macvtap left promiscuous mode
[  209.579872][ T3708] device veth1_vlan left promiscuous mode
[  209.594605][ T3708] device veth0_vlan left promiscuous mode
[  209.594933][ T7827] loop4: detected capacity change from 0 to 256
[  209.665316][ T7827] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  209.795773][ T3653] Bluetooth: hci3: command tx timeout
[  210.000569][ T7837] ALSA: mixer_oss: invalid OSS volume ''
[  210.959325][ T7862] netlink: 'syz.1.1308': attribute type 3 has an invalid length.
[  211.235192][ T3708] team0 (unregistering): Port device team_slave_1 removed
[  211.297648][ T3708] team0 (unregistering): Port device team_slave_0 removed
[  211.357145][ T3708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.419545][ T3708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.881549][ T3653] Bluetooth: hci3: command tx timeout
[  212.071619][ T3708] bond0 (unregistering): Released all slaves
[  212.142732][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.150290][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.158804][ T7766] device bridge_slave_1 entered promiscuous mode
[  212.229680][ T7766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.269062][ T3796] usb 1-1: USB disconnect, device number 16
[  212.317730][ T7766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.488584][ T7766] team0: Port device team_slave_0 added
[  212.497656][ T7766] team0: Port device team_slave_1 added
[  212.645810][ T7766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.689121][ T7766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.745906][ T7766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.785943][ T7766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.808338][ T7766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.954577][ T7766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.963848][ T7890] loop4: detected capacity change from 0 to 512
[  213.150169][ T7766] device hsr_slave_0 entered promiscuous mode
[  213.158640][ T7766] device hsr_slave_1 entered promiscuous mode
[  213.174454][ T7766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.186421][ T7766] Cannot create hsr debugfs directory
[  213.612133][ T7877] syz.3.1316 (7877): drop_caches: 2
[  213.635236][ T7890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  213.675220][ T7890] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff)
[  213.755893][ T7890] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  213.936633][ T7186] EXT4-fs (loop4): unmounting filesystem.
[  213.976251][ T3653] Bluetooth: hci3: command tx timeout
[  214.270049][ T7925] loop4: detected capacity change from 0 to 4096
[  214.291215][ T4040] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  214.334160][ T7929] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.371901][   T27] audit: type=1800 audit(1728582888.757:161): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1325" name="file1" dev="loop4" ino=15 res=0 errno=0
[  214.421712][   T27] audit: type=1800 audit(1728582888.767:162): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1325" name="file1" dev="loop4" ino=15 res=0 errno=0
[  214.435192][ T7766] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  214.460238][ T7766] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  214.470993][ T7766] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  214.480923][ T7766] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  214.575835][ T4040] usb 2-1: Using ep0 maxpacket: 8
[  214.605819][ T3968] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  214.654077][ T7766] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.680042][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  214.688867][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  214.706327][ T4040] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  214.717431][ T7766] 8021q: adding VLAN 0 to HW filter on device team0
[  214.724425][ T4040] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  214.751706][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  214.752723][ T4040] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  214.768850][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  214.778346][ T4040] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  214.792415][ T4040] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  214.803409][ T4040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.811030][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.819022][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.831803][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  214.841396][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  214.850549][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.857706][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.882909][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  214.894119][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  214.914539][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  214.949833][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  214.970073][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  214.996267][ T3968] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  215.008244][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  215.031195][ T3968] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  215.054148][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  215.062844][ T3968] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  215.085820][ T4040] usb 2-1: usb_control_msg returned -32
[  215.091625][ T4040] usbtmc 2-1:16.0: can't read capabilities
[  215.105893][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  215.114484][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  215.145452][ T3968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.183420][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  215.196130][ T7930] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  215.231384][ T7766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  215.296752][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  215.326022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  215.334592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  215.445493][ T3798] usb 1-1: USB disconnect, device number 17
[  215.589969][ T7950] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  215.741097][ T7936] loop4: detected capacity change from 0 to 40427
[  215.782023][ T7936] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  215.794238][ T3683] usb 2-1: USB disconnect, device number 10
[  215.822195][ T7936] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  215.854715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.887081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  215.895175][ T7936] F2FS-fs (loop4): invalid crc value
[  215.901524][ T7766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.919912][ T7936] F2FS-fs (loop4): Found nat_bits in checkpoint
[  215.981446][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  215.991210][ T7936] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  215.999561][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  216.003057][ T7936] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  216.041754][ T3642] Bluetooth: hci3: command tx timeout
[  216.064644][ T7766] device veth0_vlan entered promiscuous mode
[  216.081276][ T7766] device veth1_vlan entered promiscuous mode
[  216.092373][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  216.143623][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  216.163134][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  216.189830][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  216.217096][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  216.307428][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  216.339076][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  216.372541][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  216.402685][ T7766] device veth0_macvtap entered promiscuous mode
[  216.436521][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  216.456717][ T7766] device veth1_macvtap entered promiscuous mode
[  216.530345][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.564950][ T7980] loop0: detected capacity change from 0 to 256
[  216.571748][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.613559][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.635905][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.668346][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.722125][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.753415][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.779617][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.802302][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.833702][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.848764][ T7766] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.862060][ T4004] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  216.863155][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  216.901773][ T4004] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  216.942895][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  216.987559][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.042692][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.056571][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.081527][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.115240][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.141734][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.217744][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.260632][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.305442][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.334682][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.356639][ T7766] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.369227][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  217.389814][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  217.452781][ T7766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.511513][ T7766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.535956][ T8003] loop0: detected capacity change from 0 to 1024
[  217.551205][ T7766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.609673][ T7766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.825853][ T3797] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  217.869830][ T8003] EXT4-fs: Ignoring removed orlov option
[  217.909994][ T8003] EXT4-fs (loop0): Test dummy encryption mode enabled
[  217.949413][ T8003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  218.174543][ T8003] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  218.203816][ T3797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.232885][ T3797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.256767][ T3797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  218.325767][ T3797] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  218.334883][ T3797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.427902][ T5622] EXT4-fs (loop0): unmounting filesystem.
[  218.442117][ T3797] usb 4-1: config 0 descriptor??
[  218.480508][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1348'.
[  218.529338][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.575771][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.605309][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  218.616792][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.656321][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.708775][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  218.938489][ T3797] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  218.961214][   T27] audit: type=1326 audit(1728582893.357:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a57dff9 code=0x7ffc0000
[  218.999114][ T3797] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  219.034932][   T27] audit: type=1326 audit(1728582893.377:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a57dff9 code=0x7ffc0000
[  219.112800][   T27] audit: type=1326 audit(1728582893.387:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f722a57dff9 code=0x7ffc0000
[  219.135323][    C0] vkms_vblank_simulate: vblank timer overrun
[  219.143088][   T27] audit: type=1326 audit(1728582893.387:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a57dff9 code=0x7ffc0000
[  219.166354][    C0] vkms_vblank_simulate: vblank timer overrun
[  219.174104][   T27] audit: type=1326 audit(1728582893.387:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a57dff9 code=0x7ffc0000
[  219.197492][    C0] vkms_vblank_simulate: vblank timer overrun
[  219.209536][ T3968] usb 4-1: USB disconnect, device number 11
[  219.401240][ T8041] loop0: detected capacity change from 0 to 40427
[  219.409007][ T8041] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  219.417233][ T8041] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  219.430147][ T8041] F2FS-fs (loop0): invalid crc value
[  219.440502][ T8041] F2FS-fs (loop0): Found nat_bits in checkpoint
[  219.497681][ T8041] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  219.504892][ T8041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  219.665034][ T8059] loop2: detected capacity change from 0 to 512
[  219.686783][ T8063] loop4: detected capacity change from 0 to 2048
[  219.694898][ T8059] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  219.718775][    C0] vkms_vblank_simulate: vblank timer overrun
[  219.732532][ T8059] EXT4-fs: error: could not find journal device path
[  219.763042][ T8063] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  219.788286][ T5675] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  219.803290][ T8059] loop2: detected capacity change from 0 to 128
[  219.841481][ T8059] UDF-fs: bad mount option "/dev/snd/pcmC#D#p" or missing value
[  219.897177][ T8063] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  219.939636][   T51] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  219.962705][ T5675] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  220.001690][   T51] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  220.079029][ T8074] loop3: detected capacity change from 0 to 128
[  220.133406][ T7186] EXT4-fs (loop4): unmounting filesystem.
[  220.173805][ T8074] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  220.265089][ T8074] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  220.296648][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.569884][ T3644] EXT4-fs (loop3): unmounting filesystem.
[  220.724624][ T8089] loop3: detected capacity change from 0 to 512
[  220.772582][ T8089] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  220.777933][ T8092] loop0: detected capacity change from 0 to 256
[  220.805132][ T8089] EXT4-fs (loop3): invalid journal inode
[  220.827133][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'.
[  220.838902][ T8089] EXT4-fs (loop3): can't get journal size
[  220.854094][ T8092] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  220.881976][ T8089] EXT4-fs (loop3): 1 truncate cleaned up
[  220.926358][ T8089] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  221.179622][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1367'.
[  221.182989][ T3644] EXT4-fs (loop3): unmounting filesystem.
[  221.312993][ T8104] loop3: detected capacity change from 0 to 512
[  221.351202][ T8104] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1369: casefold flag without casefold feature
[  221.370636][ T8104] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1369: couldn't read orphan inode 15 (err -117)
[  221.436398][ T8104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  221.535789][ T3968] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  221.573311][ T3644] EXT4-fs (loop3): unmounting filesystem.
[  221.826390][ T3968] usb 1-1: Using ep0 maxpacket: 8
[  221.968252][ T3968] usb 1-1: config 0 has no interfaces?
[  222.021933][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'.
[  222.097523][ T8115] loop4: detected capacity change from 0 to 40427
[  222.126812][ T8115] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  222.138955][ T3968] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  222.155542][ T8115] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  222.164894][ T3968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.184412][ T3968] usb 1-1: Product: syz
[  222.189267][ T8115] F2FS-fs (loop4): invalid crc value
[  222.196257][ T3968] usb 1-1: Manufacturer: syz
[  222.206158][ T3968] usb 1-1: SerialNumber: syz
[  222.217732][ T3968] usb 1-1: config 0 descriptor??
[  222.230147][ T8125] loop3: detected capacity change from 0 to 1764
[  222.238230][ T8115] F2FS-fs (loop4): Found nat_bits in checkpoint
[  222.385009][ T8115] F2FS-fs (loop4): Start checkpoint disabled!
[  222.450950][ T8115] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  222.470114][ T3968] usb 1-1: USB disconnect, device number 18
[  222.477434][ T8115] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  222.725578][ T3708] kworker/u4:6: attempt to access beyond end of device
[  222.725578][ T3708] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  223.240706][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'.
[  223.629748][ T8167] Process accounting resumed
[  223.728772][ T3796] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  223.801961][ T8172] device macvlan2 entered promiscuous mode
[  223.808581][ T8172] device bond_slave_0 entered promiscuous mode
[  223.815447][ T8172] device bond_slave_1 entered promiscuous mode
[  223.868792][ T8172] device bond0 entered promiscuous mode
[  223.886896][ T8172] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  223.914724][ T8172] team0: Port device macvlan2 added
[  223.986023][ T3796] usb 5-1: Using ep0 maxpacket: 32
[  224.102809][ T8182] loop3: detected capacity change from 0 to 256
[  224.106099][ T3796] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  224.127468][ T3796] usb 5-1: config 0 has no interface number 0
[  224.133957][ T3796] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.152479][ T3796] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.175102][ T3796] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  224.187088][ T8182] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  224.194144][ T3796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.221226][ T3796] usb 5-1: config 0 descriptor??
[  224.389817][ T8191] overlayfs: missing 'lowerdir'
[  224.462387][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'.
[  224.657843][ T8201] loop2: detected capacity change from 0 to 4096
[  224.726290][ T8205] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.745354][ T3796] ft260 0003:0403:6030.0013: unknown main item tag 0x0
[  224.759155][ T3796] ft260 0003:0403:6030.0013: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input1
[  224.774477][   T27] audit: type=1800 audit(1728582899.167:168): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1409" name="file1" dev="loop2" ino=15 res=0 errno=0
[  224.815806][ T4339] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  224.850885][   T27] audit: type=1800 audit(1728582899.167:169): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1409" name="file1" dev="loop2" ino=15 res=0 errno=0
[  224.921627][   T27] audit: type=1800 audit(1728582899.197:170): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1409" name="file1" dev="loop2" ino=15 res=0 errno=0
[  224.956036][ T3796] ft260 0003:0403:6030.0013: chip code: 6424 8183
[  225.055859][ T4339] usb 4-1: Using ep0 maxpacket: 8
[  225.126064][ T3798] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  225.139024][ T8218] loop2: detected capacity change from 0 to 512
[  225.151423][ T8218] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  225.166195][ T3796] ft260 0003:0403:6030.0013: uart interface is not supported
[  225.176684][ T4339] usb 4-1: config 0 has no interfaces?
[  225.181843][ T8220] device syzkaller1 entered promiscuous mode
[  225.193288][ T8218] EXT4-fs (loop2): 1 truncate cleaned up
[  225.206488][ T8218] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  225.282393][ T7766] EXT4-fs (loop2): unmounting filesystem.
[  225.347324][ T4339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  225.375852][ T3798] usb 1-1: Using ep0 maxpacket: 16
[  225.387021][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.415548][ T4339] usb 4-1: Product: syz
[  225.425761][ T4339] usb 4-1: Manufacturer: syz
[  225.430437][ T4339] usb 4-1: SerialNumber: syz
[  225.442544][ T3796] usb 5-1: USB disconnect, device number 15
[  225.450784][ T4339] usb 4-1: config 0 descriptor??
[  225.486186][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'.
[  225.496900][ T3798] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.510331][ T3798] usb 1-1: config 0 interface 0 has no altsetting 0
[  225.525850][ T3798] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  225.545897][ T3798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.573964][ T3798] usb 1-1: config 0 descriptor??
[  225.722776][ T3795] usb 4-1: USB disconnect, device number 12
[  226.060787][ T3798] hid (null): unknown global tag 0xc
[  226.069978][ T3798] hid (null): bogus close delimiter
[  226.097255][ T3798] hid (null): report_id 0 is invalid
[  226.115550][ T3798] hid (null): unknown global tag 0xe
[  226.138065][ T3798] cougar 0003:060B:500A.0014: usage count exceeds max: fixing up report descriptor
[  226.148918][ T3798] cougar 0003:060B:500A.0014: unexpected long global item
[  226.160755][ T3798] cougar 0003:060B:500A.0014: parse failed
[  226.170470][ T3798] cougar: probe of 0003:060B:500A.0014 failed with error -22
[  226.170891][ T8247] loop2: detected capacity change from 0 to 4096
[  226.249954][ T8249] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.293742][ T3798] usb 1-1: USB disconnect, device number 19
[  226.295193][   T27] audit: type=1800 audit(1728582900.687:171): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1429" name="file1" dev="loop2" ino=15 res=0 errno=0
[  227.168229][ T8271] loop0: detected capacity change from 0 to 64
[  227.324913][ T8273] loop4: detected capacity change from 0 to 1024
[  227.355356][ T8273] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  227.372265][ T8273] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  227.428722][ T8273] JBD2: no valid journal superblock found
[  227.434622][ T8273] EXT4-fs (loop4): error loading journal
[  227.573540][ T3683] kernel write not supported for file /input/event2 (pid: 3683 comm: kworker/1:5)
[  227.694673][ T8258] loop3: detected capacity change from 0 to 40427
[  227.746712][ T8258] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  227.764840][ T8258] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  227.814707][ T8258] F2FS-fs (loop3): invalid crc value
[  227.878838][ T8258] F2FS-fs (loop3): Found nat_bits in checkpoint
[  227.891503][ T8296] loop2: detected capacity change from 0 to 16
[  227.935089][ T8296] erofs: (device loop2): mounted with root inode @ nid 36.
[  227.982313][   T27] audit: type=1800 audit(1728582902.377:172): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1450" name="file1" dev="loop2" ino=86 res=0 errno=0
[  228.045502][ T8258] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  228.090290][ T8258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  228.151751][   T27] audit: type=1804 audit(1728582902.547:173): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1432" name="/newroot/287/bus/file0" dev="loop3" ino=10 res=1 errno=0
[  228.192091][ T8304] loop4: detected capacity change from 0 to 4096
[  228.272411][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1454'.
[  228.295128][ T8309] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.340901][   T27] audit: type=1800 audit(1728582902.737:174): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1453" name="file1" dev="loop4" ino=15 res=0 errno=0
[  229.581106][ T8340] loop3: detected capacity change from 0 to 256
[  229.614711][ T8340] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1105abd0, checksum : 0x1119abd0)
[  229.636099][ T8340] exFAT-fs (loop3): invalid boot region
[  229.656079][ T8340] exFAT-fs (loop3): failed to recognize exfat type
[  229.843175][ T8351] all (unregistering): Released all slaves
[  229.975894][ T4040] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  230.034339][ T8357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  230.174675][ T8365] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1481'.
[  230.196769][ T8365] device gretap0 entered promiscuous mode
[  230.228763][ T8365] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1481'.
[  230.243691][ T8365] device gretap0 left promiscuous mode
[  230.254938][ T4040] usb 4-1: Using ep0 maxpacket: 16
[  230.536185][ T4040] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  230.560950][ T4040] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  230.582263][ T4040] usb 4-1: Product: syz
[  230.615033][ T4040] usb 4-1: Manufacturer: syz
[  230.638149][ T4040] usb 4-1: SerialNumber: syz
[  230.666714][ T4040] usb 4-1: config 0 descriptor??
[  230.921361][ T3683] usb 4-1: USB disconnect, device number 13
[  231.298337][ T8417] device syzkaller1 entered promiscuous mode
[  232.468435][ T8477] loop4: detected capacity change from 0 to 128
[  232.607408][ T8477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  232.638508][ T8477] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff)
[  232.797702][ T8491] delete_channel: no stack
[  232.993801][ T7186] EXT4-fs (loop4): unmounting filesystem.
[  233.151860][ T8505] loop2: detected capacity change from 0 to 512
[  233.278088][ T8505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  233.354414][ T8505] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff)
[  233.639951][ T8527] loop4: detected capacity change from 0 to 1024
[  233.656669][ T7766] EXT4-fs (loop2): unmounting filesystem.
[  233.760615][ T8527] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  234.545888][ T4040] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  234.825859][ T4040] usb 3-1: Using ep0 maxpacket: 8
[  235.015640][    C0] sched: RT throttling activated
[  235.131724][ T8539] loop3: detected capacity change from 0 to 131072
[  235.146180][ T8539] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0)
[  235.147035][ T4040] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  235.155595][ T8539] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  235.179447][ T8539] F2FS-fs (loop3): invalid crc value
[  235.237948][ T8539] F2FS-fs (loop3): Found nat_bits in checkpoint
[  235.255113][ T4040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.270217][ T4040] usb 3-1: Product: syz
[  235.274815][ T4040] usb 3-1: Manufacturer: syz
[  235.280060][ T4040] usb 3-1: SerialNumber: syz
[  235.286373][ T8539] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  235.293434][ T8539] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  235.294681][ T4040] usb 3-1: config 0 descriptor??
[  235.353921][ T8535] loop4: detected capacity change from 0 to 32768
[  235.389466][ T8535] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1555 (8535)
[  235.445766][ T8535] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.475912][ T8535] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  235.494657][ T8535] BTRFS info (device loop4): using free space tree
[  235.642505][ T4040] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  235.825950][ T8535] BTRFS info (device loop4): enabling ssd optimizations
[  236.073484][ T7186] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.178762][ T4040] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32
[  236.206224][ T4040] usb 3-1: USB disconnect, device number 13
[  236.710146][ T8583] netlink: 'syz.4.1564': attribute type 2 has an invalid length.
[  236.854058][ T8591] loop4: detected capacity change from 0 to 1024
[  236.893533][ T8591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  236.919423][   T27] audit: type=1800 audit(1728582911.317:175): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1571" name="bus" dev="loop4" ino=18 res=0 errno=0
[  236.958537][ T7186] EXT4-fs (loop4): unmounting filesystem.
[  237.011096][ T3682] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  237.365264][ T8610] loop2: detected capacity change from 0 to 1024
[  237.387516][ T8610] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  237.397551][ T8610] EXT4-fs (loop2): orphan cleanup on readonly fs
[  237.405063][ T8610] EXT4-fs error (device loop2): ext4_free_blocks:6212: comm syz.2.1578: Freeing blocks not in datazone - block = 0, count = 4096
[  237.424502][ T8610] EXT4-fs (loop2): 1 orphan inode deleted
[  237.426140][ T3682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  237.430750][ T8610] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  237.476959][ T3682] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  237.517896][ T7766] EXT4-fs (loop2): unmounting filesystem.
[  237.586061][ T3682] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  237.596509][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  237.643508][ T3682] usb 2-1: SerialNumber: syz
[  237.910241][ T8622] loop4: detected capacity change from 0 to 4096
[  237.947708][ T8622] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  237.960520][ T3682] usb 2-1: 0:2 : does not exist
[  237.993850][ T3682] usb 2-1: USB disconnect, device number 11
[  238.035904][ T8622] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  239.203489][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1605'.
[  239.247841][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1605'.
[  239.362341][ T8673] loop2: detected capacity change from 0 to 4096
[  239.372905][ T8673] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  239.426606][ T8677] loop3: detected capacity change from 0 to 16
[  239.450029][ T8677] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  239.465154][ T8675] loop4: detected capacity change from 0 to 2048
[  239.482863][   T27] audit: type=1800 audit(1728582913.877:176): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1607" name="bus" dev="loop2" ino=33 res=0 errno=0
[  239.542823][   T27] audit: type=1800 audit(1728582913.927:177): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1607" name="bus" dev="loop2" ino=33 res=0 errno=0
[  239.646512][ T8675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  239.662208][ T8687] loop3: detected capacity change from 0 to 1024
[  239.727667][ T8675] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.1608: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  239.777614][    T9] hfsplus: b-tree write err: -5, ino 4
[  239.885402][ T8675] EXT4-fs (loop4): Remounting filesystem read-only
[  239.986120][ T7186] EXT4-fs (loop4): unmounting filesystem.
[  240.208196][ T8705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.412157][ T3682] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  240.718235][ T3682] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  240.815950][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  240.845371][ T3682] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  240.886764][ T3682] usb 5-1: config 0 interface 0 has no altsetting 0
[  240.988723][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.006109][ T3682] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.034681][ T8743] loop3: detected capacity change from 0 to 64
[  241.052731][ T3682] usb 5-1: config 0 interface 0 has no altsetting 0
[  241.166398][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.181412][ T3682] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.218994][ T3682] usb 5-1: config 0 interface 0 has no altsetting 0
[  241.326103][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.335076][ T3682] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.389710][ T3682] usb 5-1: config 0 interface 0 has no altsetting 0
[  241.532523][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.545812][ T3682] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.588763][ T3682] usb 5-1: config 0 interface 0 has no altsetting 0
[  241.672545][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.703500][ T3682] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.735431][ T3682] usb 5-1: config 0 interface 0 has no altsetting 0
[  241.853977][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.875866][ T3682] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.894241][ T3682] usb 5-1: config 0 interface 0 has no altsetting 0
[  242.015973][ T3682] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  242.049023][ T3682] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  242.067280][ T3682] usb 5-1: config 0 interface 0 has no altsetting 0
[  242.246043][ T3682] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  242.259627][ T3682] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  242.277111][ T3682] usb 5-1: Product: syz
[  242.286008][ T3682] usb 5-1: Manufacturer: syz
[  242.293059][ T3682] usb 5-1: SerialNumber: syz
[  242.299917][ T3682] usb 5-1: config 0 descriptor??
[  242.333493][ T8764] loop2: detected capacity change from 0 to 32768
[  242.359313][ T8764] XFS (loop2): Mounting V5 Filesystem
[  242.380004][ T3682] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  242.424893][ T8764] XFS (loop2): Ending clean mount
[  242.542779][ T7766] XFS (loop2): Unmounting Filesystem
[  242.607033][ T3682] usb 5-1: USB disconnect, device number 16
[  242.637781][ T3682] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  243.143202][ T8797] loop2: detected capacity change from 0 to 512
[  243.215967][ T8797] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  243.234983][ T8797] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  243.247597][ T8797] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1650: Failed to acquire dquot type 1
[  243.265439][ T8797] EXT4-fs (loop2): 1 truncate cleaned up
[  243.278336][ T8797] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  243.292418][ T8797] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038 (0x7fffffff)
[  243.375722][ T4339] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  243.430050][ T7766] EXT4-fs (loop2): unmounting filesystem.
[  243.463336][ T8803] loop4: detected capacity change from 0 to 256
[  243.616723][ T4339] usb 4-1: Using ep0 maxpacket: 8
[  243.738155][ T4339] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  243.759316][ T4339] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  243.791350][ T4339] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  243.827774][ T4339] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  243.848158][ T4339] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  243.889850][ T4339] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  243.912824][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.187831][ T4339] usb 4-1: usb_control_msg returned -32
[  244.193979][ T4339] usbtmc 4-1:16.0: can't read capabilities
[  244.387579][ T8808] loop4: detected capacity change from 0 to 32768
[  244.402129][ T3796] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  244.417479][ T8808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1661 (8808)
[  244.451015][ T8808] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.497592][ T8808] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  244.518277][ T8808] BTRFS info (device loop4): using free space tree
[  244.655824][ T3796] usb 2-1: Using ep0 maxpacket: 16
[  244.663421][ T8808] BTRFS info (device loop4): enabling ssd optimizations
[  244.779103][ T3796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.802112][ T3796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  244.842493][ T3796] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  244.851710][   T27] audit: type=1800 audit(1728582919.237:178): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1661" name="bus" dev="loop4" ino=263 res=0 errno=0
[  244.891506][ T3796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.916356][ T3796] usb 2-1: config 0 descriptor??
[  245.258163][ T8860] loop2: detected capacity change from 0 to 64
[  245.335490][ T7186] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.358095][   T56] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  245.466337][ T3796] usbhid 2-1:0.0: can't add hid device: -71
[  245.480474][ T3796] usbhid: probe of 2-1:0.0 failed with error -71
[  245.510620][ T3796] usb 2-1: USB disconnect, device number 12
[  246.119958][   T14] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  246.150231][ T3798] usb 4-1: USB disconnect, device number 14
[  246.215130][ T3683] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  246.365723][   T14] usb 1-1: Using ep0 maxpacket: 8
[  246.481136][ T3683] usb 5-1: Using ep0 maxpacket: 8
[  246.485946][   T14] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  246.494586][   T14] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.508831][   T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  246.519674][   T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  246.547349][   T14] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.567131][   T14] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  246.570766][ T8897] loop2: detected capacity change from 0 to 2048
[  246.582874][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.615277][ T8897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  246.652233][ T8897] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  246.674955][ T8897] EXT4-fs (loop2): Remounting filesystem read-only
[  246.686060][ T4038] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  246.698585][ T8897] EXT4-fs error (device loop2): __ext4_remount:6448: comm syz.2.1692: Abort forced by user
[  246.725869][ T3800] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  246.734543][ T7766] EXT4-fs (loop2): unmounting filesystem.
[  246.826271][ T3683] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  246.845914][   T14] usb 1-1: usb_control_msg returned -32
[  246.847735][ T3683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.852320][   T14] usbtmc 1-1:16.0: can't read capabilities
[  246.866236][ T3683] usb 5-1: Product: syz
[  246.870527][ T3683] usb 5-1: Manufacturer: syz
[  246.875147][ T3683] usb 5-1: SerialNumber: syz
[  246.890639][ T3683] usb 5-1: config 0 descriptor??
[  246.957931][ T3683] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  246.988021][ T3800] usb 4-1: Using ep0 maxpacket: 8
[  247.044368][ T3798] usb 1-1: USB disconnect, device number 20
[  247.056036][ T4038] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  247.067694][ T4038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  247.079244][ T4038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  247.090992][ T4038] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  247.104115][ T4038] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  247.108129][ T3800] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.114844][ T4038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.137911][ T4038] usb 2-1: config 0 descriptor??
[  247.144493][ T3800] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024
[  247.156226][ T8895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  247.172393][ T3800] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  247.184138][ T3800] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  247.203667][ T3800] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  247.366587][ T3800] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  247.380339][ T3800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.400171][ T3800] usb 4-1: Product: syz
[  247.404626][ T3800] usb 4-1: Manufacturer: syz
[  247.411930][ T3800] usb 4-1: SerialNumber: syz
[  247.607840][ T4038] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd
[  247.620324][ T4038] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  247.645372][ T4038] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  247.706270][ T3800] cdc_ncm 4-1:1.0: bind() failure
[  247.723404][ T3800] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  247.743533][ T3800] cdc_ncm 4-1:1.1: bind() failure
[  247.771751][ T3800] usb 4-1: USB disconnect, device number 15
[  247.909036][ T3729] usb 2-1: USB disconnect, device number 13
[  248.052082][ T8919] loop2: detected capacity change from 0 to 4096
[  248.066598][ T3683] gspca_sonixj: reg_w1 err -71
[  248.202547][ T3683] sonixj: probe of 5-1:0.0 failed with error -71
[  248.231989][ T3683] usb 5-1: USB disconnect, device number 17
[  248.246182][ T3798] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  248.265541][ T8921] IPVS: Error connecting to the multicast addr
[  248.626111][ T3798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.652941][ T3798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.665866][ T3798] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  248.705778][ T3798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.747699][ T3798] usb 1-1: config 0 descriptor??
[  248.979734][ T8948] loop2: detected capacity change from 0 to 4096
[  248.995483][ T8948] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  249.188125][ T8962] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0
[  249.199350][ T8963] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 1
[  249.212374][ T8964] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 2
[  249.217730][ T3798] pyra 0003:1E7D:2C24.0016: item fetching failed at offset 4/5
[  249.232849][ T8965] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 3
[  249.292696][ T3798] pyra 0003:1E7D:2C24.0016: parse failed
[  249.325776][ T3798] pyra: probe of 0003:1E7D:2C24.0016 failed with error -22
[  249.377613][ T8970] loop3: detected capacity change from 0 to 64
[  249.457334][ T8974] loop2: detected capacity change from 0 to 256
[  249.465521][ T3795] usb 1-1: USB disconnect, device number 21
[  249.853228][ T8988] device macvlan2 entered promiscuous mode
[  250.458059][ T9010] loop2: detected capacity change from 0 to 8192
[  250.507684][ T9010] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  250.526855][ T9010] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  250.541886][ T9010] REISERFS (device loop2): using ordered data mode
[  250.549652][ T9010] reiserfs: using flush barriers
[  250.556424][ T9010] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  250.575935][ T3683] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  250.586698][ T9017] Zero length message leads to an empty skb
[  250.596378][ T9010] REISERFS (device loop2): checking transaction log (loop2)
[  250.688176][ T9010] REISERFS (device loop2): Using tea hash to sort names
[  250.695409][ T9010] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  250.711978][ T9010] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  251.069076][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.077997][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.092993][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.102660][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.110900][ T9026] device syzkaller1 entered promiscuous mode
[  251.122007][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.138231][ T3683] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  251.150947][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.155695][ T3683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.167680][ T9030] loop4: detected capacity change from 0 to 2048
[  251.172618][ T3683] usb 1-1: Product: syz
[  251.185467][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.193729][ T3683] usb 1-1: Manufacturer: syz
[  251.205810][ T3683] usb 1-1: SerialNumber: syz
[  251.205910][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.240494][ T3683] r8152-cfgselector 1-1: config 0 descriptor??
[  251.256023][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.278895][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.280200][ T9033] loop2: detected capacity change from 0 to 128
[  251.312265][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.321420][ T9030] UDF-fs: iocharset defauovrs not found
[  251.338487][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.339308][ T9033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  251.357154][ T9033] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  251.399715][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.430479][ T9037] loop3: detected capacity change from 0 to 2048
[  251.446306][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.453831][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.482670][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.484107][ T9033] syz.2.1745 (pid 9033) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  251.508575][ T9038] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.531052][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.536088][ T3683] r8152-cfgselector 1-1: Unknown version 0x0000
[  251.553600][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.570524][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.572448][   T27] audit: type=1804 audit(1728582925.967:179): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1746" name="/newroot/348/file0/file1" dev="loop3" ino=15 res=1 errno=0
[  251.578921][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.607012][ T3683] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  251.616164][ T7766] EXT4-fs (loop2): unmounting filesystem.
[  251.622064][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.669133][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.721769][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.735202][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.755483][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.772100][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.782223][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.794337][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.804985][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.818774][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.838895][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.850033][ T3795] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  251.860744][ T3683] usb 1-1: USB disconnect, device number 22
[  251.890522][ T3795] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  252.132449][ T9049] loop2: detected capacity change from 0 to 4096
[  252.180331][ T9049] NILFS (loop2): invalid segment: Checksum error in segment payload
[  252.188789][ T9049] NILFS (loop2): trying rollback from an earlier position
[  252.195983][ T3795] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  252.215933][ T9049] NILFS (loop2): recovery complete
[  252.256348][ T9055] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  252.280643][   T27] audit: type=1800 audit(1728582926.677:180): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1751" name="file2" dev="loop2" ino=12 res=0 errno=0
[  252.550698][ T9047] loop3: detected capacity change from 0 to 32768
[  252.566258][ T3795] usb 2-1: config 0 has no interfaces?
[  252.571812][ T3795] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  252.611613][ T3795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.627177][ T3795] usb 2-1: config 0 descriptor??
[  252.632541][ T9047] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  252.821431][   T27] audit: type=1804 audit(1728582927.217:181): pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1750" name="/newroot/350/file1/file0" dev="loop3" ino=17058 res=1 errno=0
[  252.843110][    C0] vkms_vblank_simulate: vblank timer overrun
[  252.884100][ T3795] usb 2-1: USB disconnect, device number 14
[  252.983267][ T3644] ocfs2: Unmounting device (7,3) on (node local)
[  252.996339][   T28] INFO: task syz.1.414:5058 blocked for more than 143 seconds.
[  253.004031][   T28]       Not tainted 6.1.112-syzkaller #0
[  253.045306][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  253.073694][ T9056] loop4: detected capacity change from 0 to 32768
[  253.075558][   T28] task:syz.1.414       state:D stack:26640 pid:5058  ppid:3635   flags:0x00004004
[  253.137780][   T28] Call Trace:
[  253.141136][   T28]  <TASK>
[  253.144092][   T28]  __schedule+0x143f/0x4570
[  253.178925][   T28]  ? release_firmware_map_entry+0x186/0x186
[  253.190203][   T28]  ? blk_check_plugged+0x250/0x250
[  253.205572][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  253.215244][   T28]  ? blk_check_plugged+0x250/0x250
[  253.265801][   T28]  ? print_irqtrace_events+0x210/0x210
[  253.271324][   T28]  ? _raw_spin_lock_irq+0xdb/0x110
[  253.290603][ T9067] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  253.301407][   T28]  schedule+0xbf/0x180
[  253.310289][   T28]  io_schedule+0x88/0x100
[  253.320529][   T28]  folio_wait_bit_common+0x878/0x1290
[  253.338646][   T28]  ? folio_wait_bit+0x20/0x20
[  253.354883][   T28]  ? migration_entry_wait_on_locked+0x1160/0x1160
[  253.405099][   T28]  ? erofs_map_blocks+0x14d0/0x14d0
[  253.425710][   T28]  ? bio_add_page+0x3a4/0x750
[  253.430477][   T28]  z_erofs_runqueue+0x993/0x1ca0
[  253.442368][   T28]  ? z_erofs_do_read_page+0x3bd0/0x3bd0
[  253.448693][   T28]  ? __lock_acquire+0x1f80/0x1f80
[  253.462194][   T28]  ? z_erofs_pcluster_readmore+0x41a/0x450
[  253.477705][   T28]  z_erofs_readahead+0xc26/0x1030
[  253.482982][   T28]  ? z_erofs_read_folio+0x760/0x760
[  253.496987][   T28]  ? __lock_acquire+0x1f80/0x1f80
[  253.502654][   T28]  ? blk_start_plug+0x95/0x110
[  253.508048][   T28]  read_pages+0x17f/0x830
[  253.512437][   T28]  ? folio_add_lru+0x34d/0xd70
[  253.517626][   T28]  ? folio_add_lru+0x34d/0xd70
[  253.522415][   T28]  ? page_cache_ra_unbounded+0x7b0/0x7b0
[  253.528632][   T28]  ? __lock_acquire+0x125b/0x1f80
[  253.533793][   T28]  ? __filemap_add_folio+0x1ba0/0x1ba0
[  253.539685][   T28]  page_cache_ra_unbounded+0x68b/0x7b0
[  253.546107][   T28]  force_page_cache_ra+0x2a3/0x300
[  253.551377][   T28]  generic_fadvise+0x553/0x7b0
[  253.556743][   T28]  ? dump_task+0x620/0x620
[  253.561223][   T28]  ? __fget_files+0x28/0x4a0
[  253.566707][   T28]  ? __fdget+0x182/0x210
[  253.571523][   T28]  __x64_sys_fadvise64+0x138/0x180
[  253.575588][ T9065] loop2: detected capacity change from 0 to 32768
[  253.582919][   T28]  do_syscall_64+0x3b/0xb0
[  253.590205][   T28]  ? clear_bhb_loop+0x45/0xa0
[  253.602977][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  253.610665][   T28] RIP: 0033:0x7fc2ea77dff9
[  253.615200][   T28] RSP: 002b:00007fc2eb61f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  253.624586][   T28] RAX: ffffffffffffffda RBX: 00007fc2ea936058 RCX: 00007fc2ea77dff9
[  253.638125][ T9065] JBD2: Ignoring recovery information on journal
[  253.639072][   T28] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004
[  253.652874][   T28] RBP: 00007fc2ea7f0296 R08: 0000000000000000 R09: 0000000000000000
[  253.661499][   T28] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  253.670099][   T28] R13: 0000000000000001 R14: 00007fc2ea936058 R15: 00007ffe892aaf78
[  253.685435][   T28]  </TASK>
[  253.687581][ T9065] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  253.688978][   T28] 
[  253.688978][   T28] Showing all locks held in the system:
[  253.709905][   T28] 1 lock held by rcu_tasks_kthre/12:
[  253.722780][   T28]  #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  253.735164][   T28] 1 lock held by rcu_tasks_trace/13:
[  253.740620][   T28]  #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  253.752322][   T28] 1 lock held by khungtaskd/28:
[  253.757269][   T28]  #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  253.767541][   T28] 3 locks held by kworker/u4:3/51:
[  253.772834][   T28] 2 locks held by kworker/u4:4/56:
[  253.778622][   T28]  #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  253.790011][   T28]  #1: ffffc90001577d20 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  253.800511][   T28] 2 locks held by getty/3397:
[  253.805226][   T28]  #0: ffff88802e4cd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  253.815279][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  253.829324][   T28] 1 lock held by syz.1.414/5058:
[  253.834414][   T28]  #0: ffff888058a88338 (mapping.invalidate_lock#7){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0
[  253.846226][   T28] 1 lock held by syz-executor/7186:
[  253.851786][   T28]  #0: ffff88807a9ee0e0 (&type->s_umount_key#54){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0
[  253.862836][   T28] 1 lock held by syz-executor/7766:
[  253.868197][   T28]  #0: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  253.879427][   T28] 
[  253.881813][   T28] =============================================
[  253.881813][   T28] 
[  253.886264][ T7766] ocfs2: Unmounting device (7,2) on (node local)
[  253.890463][   T28] NMI backtrace for cpu 1
[  253.901007][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0
[  253.908990][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  253.919055][   T28] Call Trace:
[  253.922340][   T28]  <TASK>
[  253.925288][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  253.930024][   T28]  ? preempt_schedule_thunk+0x16/0x18
[  253.935406][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  253.940861][   T28]  ? panic+0x764/0x764
[  253.944930][   T28]  ? vprintk_emit+0x622/0x740
[  253.949626][   T28]  ? printk_sprint+0x490/0x490
[  253.954381][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  253.959502][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  253.964519][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  253.971445][   T28]  ? _printk+0xd1/0x111
[  253.975858][   T28]  ? panic+0x764/0x764
[  253.979926][   T28]  ? __wake_up_klogd+0xcc/0x100
[  253.984801][   T28]  ? panic+0x764/0x764
[  253.988932][   T28]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[  253.995176][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  254.001352][   T28]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[  254.007417][   T28]  watchdog+0xf88/0xfd0
[  254.011573][   T28]  ? watchdog+0x1f8/0xfd0
[  254.015897][   T28]  kthread+0x28d/0x320
[  254.019956][   T28]  ? hungtask_pm_notify+0x50/0x50
[  254.024972][   T28]  ? kthread_blkcg+0xd0/0xd0
[  254.029572][   T28]  ret_from_fork+0x1f/0x30
[  254.033993][   T28]  </TASK>
[  254.037599][   T28] Sending NMI from CPU 1 to CPUs 0:
[  254.042851][    C0] NMI backtrace for cpu 0
[  254.042862][    C0] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.1.112-syzkaller #0
[  254.042878][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  254.042887][    C0] Workqueue: bat_events batadv_nc_worker
[  254.043000][    C0] RIP: 0010:check_preemption_disabled+0x4b/0x110
[  254.043023][    C0] Code: 8b 05 71 ab 5b 75 a9 ff ff ff 7f 74 22 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 c7 00 00 00 89 d8 48 83 c4 10 5b 41 5c <41> 5e 41 5f c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02
[  254.043036][    C0] RSP: 0018:ffffc900015779c8 EFLAGS: 00000286
[  254.043047][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff816aaa17
[  254.043058][    C0] RDX: 0000000000000000 RSI: ffffffff8b5d7160 RDI: ffffffff8b5d7120
[  254.043068][    C0] RBP: ffffc90001577b38 R08: dffffc0000000000 R09: fffffbfff1d33f2e
[  254.043078][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920002aef4c
[  254.043089][    C0] R13: ffffffff8a77cf6e R14: ffffffff8a77cf6e R15: dffffc0000000000
[  254.043099][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  254.043111][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.043121][    C0] CR2: 000055558fca25c8 CR3: 000000001eb4d000 CR4: 00000000003506f0
[  254.043134][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  254.043143][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  254.043151][    C0] Call Trace:
[  254.043157][    C0]  <NMI>
[  254.043163][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  254.043178][    C0]  ? read_lock_is_recursive+0x10/0x10
[  254.043200][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  254.043215][    C0]  ? nmi_handle+0x25/0x440
[  254.043243][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  254.043264][    C0]  ? nmi_handle+0x12e/0x440
[  254.043284][    C0]  ? nmi_handle+0x25/0x440
[  254.043304][    C0]  ? check_preemption_disabled+0x4b/0x110
[  254.043322][    C0]  ? default_do_nmi+0x62/0x150
[  254.043337][    C0]  ? exc_nmi+0xa8/0x100
[  254.043359][    C0]  ? end_repeat_nmi+0x16/0x31
[  254.043380][    C0]  ? batadv_nc_purge_paths+0x30e/0x3b0
[  254.043399][    C0]  ? batadv_nc_purge_paths+0x30e/0x3b0
[  254.043421][    C0]  ? lock_release+0xc7/0xa20
[  254.043445][    C0]  ? check_preemption_disabled+0x4b/0x110
[  254.043463][    C0]  ? check_preemption_disabled+0x4b/0x110
[  254.043481][    C0]  ? check_preemption_disabled+0x4b/0x110
[  254.043499][    C0]  </NMI>
[  254.043503][    C0]  <TASK>
[  254.043508][    C0]  ? batadv_nc_purge_paths+0x30e/0x3b0
[  254.043527][    C0]  rcu_is_watching+0x11/0xb0
[  254.043541][    C0]  ? batadv_nc_purge_paths+0x30e/0x3b0
[  254.043560][    C0]  lock_release+0xd6/0xa20
[  254.043580][    C0]  ? read_lock_is_recursive+0x10/0x10
[  254.043601][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  254.043620][    C0]  ? do_raw_spin_lock+0x14a/0x370
[  254.043634][    C0]  ? __bpf_trace_softirq+0x10/0x10
[  254.043656][    C0]  ? __rwlock_init+0x140/0x140
[  254.043671][    C0]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  254.043691][    C0]  ? batadv_nc_purge_paths+0x30e/0x3b0
[  254.043711][    C0]  _raw_spin_unlock_bh+0x17/0x30
[  254.043728][    C0]  ? batadv_nc_purge_paths+0x3b0/0x3b0
[  254.043747][    C0]  batadv_nc_purge_paths+0x30e/0x3b0
[  254.043773][    C0]  batadv_nc_worker+0x324/0x610
[  254.043792][    C0]  ? batadv_nc_worker+0xc7/0x610
[  254.043813][    C0]  ? process_one_work+0x7a9/0x11d0
[  254.043829][    C0]  process_one_work+0x8a9/0x11d0
[  254.043853][    C0]  ? worker_detach_from_pool+0x260/0x260
[  254.043871][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  254.043887][    C0]  ? kthread_data+0x4e/0xc0
[  254.043909][    C0]  ? wq_worker_running+0x97/0x190
[  254.043924][    C0]  worker_thread+0xa47/0x1200
[  254.043951][    C0]  kthread+0x28d/0x320
[  254.043963][    C0]  ? worker_clr_flags+0x190/0x190
[  254.043978][    C0]  ? kthread_blkcg+0xd0/0xd0
[  254.043992][    C0]  ret_from_fork+0x1f/0x30
[  254.044017][    C0]  </TASK>
[  254.540980][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  254.547884][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0
[  254.555782][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  254.565931][   T28] Call Trace:
[  254.569209][   T28]  <TASK>
[  254.572147][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  254.576849][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  254.582335][   T28]  ? panic+0x764/0x764
[  254.586442][   T28]  ? llist_add_batch+0x160/0x1d0
[  254.591404][   T28]  ? vscnprintf+0x59/0x80
[  254.595844][   T28]  panic+0x318/0x764
[  254.599783][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  254.605924][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  254.611364][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  254.617595][   T28]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[  254.623746][   T28]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[  254.629880][   T28]  watchdog+0xfc7/0xfd0
[  254.634020][   T28]  ? watchdog+0x1f8/0xfd0
[  254.638349][   T28]  kthread+0x28d/0x320
[  254.642515][   T28]  ? hungtask_pm_notify+0x50/0x50
[  254.647879][   T28]  ? kthread_blkcg+0xd0/0xd0
[  254.652466][   T28]  ret_from_fork+0x1f/0x30
[  254.656874][   T28]  </TASK>
[  254.660222][   T28] Kernel Offset: disabled
[  254.664661][   T28] Rebooting in 86400 seconds..