last executing test programs:

5m52.332453302s ago: executing program 4 (id=30):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0))

5m51.373060708s ago: executing program 4 (id=47):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000003c0)=0x4, 0x4)

5m51.113358663s ago: executing program 4 (id=50):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x256, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf)
pwrite64(r0, &(0x7f0000000640)="cfac", 0x2, 0x7ff)

5m50.748987224s ago: executing program 4 (id=53):
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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")
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')

5m49.96206678s ago: executing program 4 (id=63):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xa69, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffd62c}], 0x1c)

5m49.313981377s ago: executing program 4 (id=72):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)

5m48.999867876s ago: executing program 32 (id=72):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)

4m9.693127705s ago: executing program 3 (id=1155):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x83, &(0x7f0000000080), &(0x7f0000000000)=0x4)

4m9.549933613s ago: executing program 3 (id=1156):
r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x7f, 0x0, &(0x7f0000000000)=[r0]}, 0x1)

4m9.462982568s ago: executing program 3 (id=1158):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1218001, &(0x7f0000000700)={[{@gid}, {@type={'type', 0x3d, "5ed07ee6"}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@codepage={'codepage', 0x3d, 'koi8-u'}}]}, 0x2, 0x342, &(0x7f0000000100)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101080, 0x129)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

4m9.173986995s ago: executing program 3 (id=1160):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

4m8.936848338s ago: executing program 3 (id=1164):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @loopback, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)

4m8.522725712s ago: executing program 3 (id=1169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)

4m8.233732139s ago: executing program 33 (id=1169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)

3m40.853851704s ago: executing program 2 (id=1470):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl(r0, 0x8b01, &(0x7f0000000040))

3m40.696312063s ago: executing program 2 (id=1472):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "0100"}]}}, 0x0}, 0x0)

3m38.595253645s ago: executing program 2 (id=1501):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x7, 0x4459, &(0x7f000000c3c0)="$eJzs3T9sY3cdAPDvewnkcrRHUjoUCQlLVAIBipJOQCqRy+XumvTCoQMqxOJzEvcu4MSnxEEMHdKtEhMSA2KoQGLLVGVgpOwsLIxlPgkGFiSkiiA/Pyd+L7Ziin0hp89nyM/v9z/+vvfz7w32S9M0jcPIVLb3K7XdSnPz7f3XKj9tNg526pE+I63H2/uXOT4FU4Pe+HHESewvz/1bd7731msRf9z6y9OTk5OTbCGYjL4Wel7/8x/vbPamXWmpTbvfzquj/p3+z34UES+fm1fbRET88PcRSUTczPOW83Q6Im5Ep+ytd37+sDKi2XzwUf316sfr7x0vvrp29P7x04EVk4hfNz7/9Uc7f/vSxOJfvzqi4QEAAAAAAAAAAAAAAAAAuOLuPrj/g+/OL8SHSUweJb3f183L83TQ92NPRuaL4/9nAQAAAAAAAAAAAAAAAAAA4P/U2ff/K8lLfb7/v5KnSwPan3x7/HNkfFa/c3/l9vxC/vz35Fz5N/Ksv9+ciNnSc9/f7fP895ul9uXzqe3o2ujm351fd9yZSNK5wnGazs1F/DZ/8PsryfW00dxvfe3t5sHu1ujmcVUV4995en/hLMgf6N8v/tEn/sul/vvFf7Q+F+Wztn388PypXPSpMU7pCinGf2Jgvd+9mwwV/1ulds8i/nxyxfhPZnnTvRWWOgtAO/6/mLw4/iul/scV/xsRUUnac60UVoD2HqadP2i/QlEx/p1FsbB05m9kn+t/qp3+qxT/26X+L2v9Pyx/ENFXMf6fzvKK27Oz6382vfj6v1Pq/zLi357/4UWf/2SK8Z/qZE4WqmTv5LDr/91S/2OIf/cH4zrzvJEUzoCjpDP/Qb9XR1Ex/udvzM7u/9Kh9n9vlNr3j//oLs7u/Lrjdu//usv/V5LO/R/9FeM/PbDesNf/aqnduNf/pWz/xydVjP/1LK+4d57J/g4b/7VS/+OKf7YrudaNf7YItG8J4t9Tnfzf2P8NpRj/z3Qy094ah9nfbP+XnI97ef//Zqn/S9v/p+Md9XlRjP8LA+u14//nIT7/75XajT/+EfP5CfCncQ/0HCrG/8WB9bLr/9rF8V8/e/mHeAbx//I4OwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ApbzdCaSdK5wnKZzcxG38uNX4nqyUduqbjSamz/Zj1jJ8yvxUvKo0dyoNarbu82terXWaDQ3I27n5S/HtWS/0WxVd2pP7pz2NZ08rtf2Whv1Wisi7ub5X4gXu31tbLd2ak8i4o3Tss+mzb0nj2u71a3tvW/Nz8/Px+rpHGaT+s9a9d1WZ/ROacTaaduZpGdyWfGbp3N5Iflx82Bvt9bI8u/1tGk0N2uNnjbredkvYzZp7R3sbtZa9Wqj+ag73lAmho/Nf2MpT1dWH3z/wb2Fc+UPk066PJ7hAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiRDxe/+auImOwcpRFRSfIX7XSqXP+Dj+qvVz9ef+948dW1o/ePn+b1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXTpGiRgKwgA8eSkUK49hFZLONqKIFkYET6DH8DB6lFzCO1hYbLvFsuxuUuxLYGEh3fc1AzO8N1P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCmx7fu/bVuIoq43FxE9OXx/Hmo33fz78vFL2RJTy/d/UPdRP/5+7cLQe52aP23aT9dr74+YqaOfrKcHP7NTffkZvN2NW2N9417r6NIVUS0w/ymSKmqTq4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WWXRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADApAAAAP//B8EmyA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xd, 0x10000002000003})

3m36.891575263s ago: executing program 2 (id=1515):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)

3m36.351866395s ago: executing program 2 (id=1518):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
exit(0xffffffffffffffa9)
openat(r0, &(0x7f0000000280)='./file0\x00', 0x101000, 0x1b5)

3m35.808732756s ago: executing program 2 (id=1520):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m35.427338999s ago: executing program 34 (id=1520):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

26.366043214s ago: executing program 7 (id=3679):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x889, 0x4, 0xfcf4, 0x8, 0x14, "2f9b416c74f74046"})

26.275996039s ago: executing program 7 (id=3681):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000002d80)={[{@noquota}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}, {@nodiscard}, {@discard}, {@errors_continue}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

25.042732731s ago: executing program 7 (id=3694):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x6f22, 0x0, @loopback={0x2}}, 0x1c)

24.858967931s ago: executing program 7 (id=3695):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

24.149975842s ago: executing program 7 (id=3702):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f)

22.829892129s ago: executing program 7 (id=3708):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88002)
io_setup(0x4, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='\x00', 0xffffff90, 0x7, 0x0, 0x2}])

22.533266156s ago: executing program 35 (id=3708):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88002)
io_setup(0x4, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='\x00', 0xffffff90, 0x7, 0x0, 0x2}])

5.795891665s ago: executing program 1 (id=3858):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000002940)=0x3ff)

4.755868485s ago: executing program 1 (id=3873):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)

4.456173703s ago: executing program 1 (id=3876):
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)

3.761015433s ago: executing program 5 (id=3883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xaf11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)

3.441760651s ago: executing program 1 (id=3886):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1)

3.361245236s ago: executing program 5 (id=3887):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1)

3.223230394s ago: executing program 0 (id=3888):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c55, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x30c, &(0x7f0000000780)="$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")

3.154451927s ago: executing program 1 (id=3889):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@gquota}, {@nolargeio}, {@prjquota}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
sendfile(r0, r0, 0x0, 0x1000200201005)

2.952251809s ago: executing program 0 (id=3891):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a051902f7000000000109022400010000500a0904000004030003000921faff08012207000905810303"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000001c80)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "496075ea"}, @local=@item_012={0x0, 0x2, 0x5}, @global]}}, 0x0}, 0x0)

2.269956849s ago: executing program 5 (id=3896):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0)

2.090973319s ago: executing program 5 (id=3897):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)={0x28, r0, 0x62c21a4ade68aba1, 0x0, 0x25dfdbf9, {{0x32}, {@val={0x8, 0x1, 0x60}, @void, @val={0xc, 0x99, {0x7, 0xa}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010)

1.753923999s ago: executing program 5 (id=3901):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00')

1.520521862s ago: executing program 6 (id=3903):
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}})

1.290000366s ago: executing program 1 (id=3904):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006)

1.289782616s ago: executing program 8 (id=3905):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653df374617469633a372d393a302f4e"])

1.278185216s ago: executing program 6 (id=3906):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r1}, 0x48, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2}, 0x0)

1.131835675s ago: executing program 6 (id=3907):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(anubis-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)

1.05399814s ago: executing program 8 (id=3908):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0}, 0x0)

898.291378ms ago: executing program 0 (id=3909):
syz_mount_image$nilfs2(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', 0x2004091, &(0x7f0000000880)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, 0x0)

898.174809ms ago: executing program 8 (id=3910):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303031302c63726561746f723d917ff2342c666f7263652c6e6c733d6b6f69382d752c63726561746f723dab9643f32c6465636f6d706f73652c666f7263652c6465636f6d706f73652c00f269cce791d4f7eac9d5176d"], 0x2, 0x6a7, &(0x7f0000000f00)="$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")
mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200, 0x180)

683.69841ms ago: executing program 6 (id=3911):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000002340), r1}}, 0x18)

598.268376ms ago: executing program 8 (id=3912):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

517.897601ms ago: executing program 5 (id=3913):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x40000000, 0x1, 0x0, r1, 0x0}])

435.736605ms ago: executing program 6 (id=3914):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x20000000, 0x2, 0x3ff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000005e000155c6fb029866dd4200000005"], 0x1c}}, 0x0)

290.737014ms ago: executing program 0 (id=3915):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp6, 0x1}, 0x20)

200.745689ms ago: executing program 0 (id=3916):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)='\x00#\x00', 0x3}, {&(0x7f00000001c0)="7510f6b645eae909000000127979833ed116a15049409eb1d4250dd6ed2d2a88e3cc980e2fbfdee7a6e2e3423fcc5a44f53ca40484d999b18d229187ff094e28fa381dff00000080c31d", 0x4a}], 0x2}}], 0x1, 0x4)

93.961275ms ago: executing program 8 (id=3917):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x24, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004)

4.8576ms ago: executing program 8 (id=3918):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x34, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)

4.38482ms ago: executing program 0 (id=3919):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0)

0s ago: executing program 6 (id=3920):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5)
fallocate(r0, 0x8, 0x4000, 0x4000)

kernel console output (not intermixed with test programs):

16.859412][ T4973] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  316.876066][ T4973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31
[  316.902381][ T4562] EXT4-fs (loop5): unmounting filesystem.
[  316.910422][ T4973] dvb-usb: schedule remote query interval to 150 msecs.
[  316.963198][ T4973] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  317.011935][ T4973] usb 7-1: USB disconnect, device number 17
[  317.079189][ T4973] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  317.116475][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  317.122849][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  317.198406][T11804] sg_write: process 1147 (syz.0.2797) changed security contexts after opening file descriptor, this is not allowed.
[  317.343992][T11807] Invalid ELF header len 10
[  318.438699][T11853] set_capacity_and_notify: 3 callbacks suppressed
[  318.438717][T11853] loop7: detected capacity change from 0 to 1024
[  318.448661][T11851] loop1: detected capacity change from 0 to 1024
[  318.596341][   T34] hfsplus: b-tree write err: -5, ino 4
[  318.677609][T11833] loop6: detected capacity change from 0 to 32768
[  318.701917][    T9] hfsplus: b-tree write err: -5, ino 4
[  318.722870][T11833] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  319.003686][ T7136] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  319.099589][T11871] loop1: detected capacity change from 0 to 256
[  319.151805][T11871] FAT-fs (loop1): Directory bread(block 64) failed
[  319.206263][T11871] FAT-fs (loop1): Directory bread(block 65) failed
[  319.233082][T11871] FAT-fs (loop1): Directory bread(block 66) failed
[  319.241732][T11871] FAT-fs (loop1): Directory bread(block 67) failed
[  319.295288][T11871] FAT-fs (loop1): Directory bread(block 68) failed
[  319.316586][T11871] FAT-fs (loop1): Directory bread(block 69) failed
[  319.356167][T11871] FAT-fs (loop1): Directory bread(block 70) failed
[  319.362748][T11871] FAT-fs (loop1): Directory bread(block 71) failed
[  319.399322][T11871] FAT-fs (loop1): Directory bread(block 72) failed
[  319.430263][T11877] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0008 with DS=0xf
[  319.442457][T11871] FAT-fs (loop1): Directory bread(block 73) failed
[  319.470430][T11879] loop6: detected capacity change from 0 to 4096
[  319.528226][T11879] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  319.717494][T11879] ntfs3: loop6: ntfs_sync_inode r=1e failed, -22.
[  319.847694][    T9] ntfs3: loop6: ntfs3_write_inode r=1e failed, -22.
[  319.895844][ T7535] ntfs3: loop6: ntfs_evict_inode r=1e failed, -22.
[  319.915567][ T7535] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  320.472868][T11914] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2849'.
[  320.949509][T11932] loop1: detected capacity change from 0 to 1024
[  321.074972][   T34] hfsplus: b-tree write err: -5, ino 4
[  321.193806][ T5564] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  321.388721][ T5564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.406183][ T5564] usb 6-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  321.418914][ T5564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.428879][ T5564] usb 6-1: config 0 descriptor??
[  321.889132][ T5564] wacom 0003:056A:00E3.0030: unknown main item tag 0x0
[  321.908612][ T5564] wacom 0003:056A:00E3.0030: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.5-1/input0
[  322.069868][ T5564] usb 6-1: USB disconnect, device number 21
[  322.110942][T11970] fido_id[11970]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00E3.0030/report_descriptor': No such device
[  322.463291][ T5566] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  322.654789][ T5566] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  322.675016][ T5566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.703469][ T5566] usb 1-1: config 0 descriptor??
[  323.140151][ T5566] hid-alps 0003:044E:120C.0031: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0
[  323.343328][ T5566] usb 1-1: USB disconnect, device number 31
[  323.460643][T12001] fido_id[12001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  323.517014][T12008] loop6: detected capacity change from 0 to 2048
[  323.561597][T12008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.794149][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2898'.
[  323.821667][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2898'.
[  323.993264][ T4971] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  324.138831][T12031] loop7: detected capacity change from 0 to 128
[  324.200795][T12031] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  324.213411][ T4971] usb 2-1: Using ep0 maxpacket: 32
[  324.230093][ T4971] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  324.245235][T12031] hpfs: filesystem error: improperly stopped
[  324.251302][T12031] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  324.268250][ T4971] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  324.298548][ T4971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  324.299476][T12035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2904'.
[  324.317264][T12031] hpfs: You really don't want any checks? You are crazy...
[  324.338012][ T4971] usb 2-1: config 1 has no interface number 0
[  324.356248][T12031] hpfs: hpfs_map_sector(): read error
[  324.360828][ T4971] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  324.361645][T12031] hpfs: code page support is disabled
[  324.361754][T12031] hpfs: hpfs_map_4sectors(): unaligned read
[  324.419065][ T4971] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  324.423455][T12031] hpfs: hpfs_map_4sectors(): unaligned read
[  324.462643][ T4971] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  324.463717][T12031] hpfs: filesystem error: unable to find root dir
[  324.509608][ T4971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.512689][T12031] 
[  324.542518][ T4971] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  324.668295][T12031] hpfs: hpfs_map_4sectors(): unaligned read
[  324.699527][T12018] loop6: detected capacity change from 0 to 32768
[  324.714388][T12031] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  324.753072][ T4971] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  324.861583][T12018] XFS (loop6): Mounting V5 Filesystem
[  324.970965][T12018] XFS (loop6): Ending clean mount
[  324.986875][T12018] XFS (loop6): Quotacheck needed: Please wait.
[  325.233731][T12018] XFS (loop6): Quotacheck: Done.
[  325.244764][   T32] usb 2-1: USB disconnect, device number 19
[  325.252076][   T32] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  325.389798][ T7535] XFS (loop6): Unmounting Filesystem
[  325.463431][ T5566] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  325.653427][ T5566] usb 1-1: Using ep0 maxpacket: 8
[  325.664422][ T5566] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  325.699913][ T5566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.717125][ T5566] usb 1-1: Product: syz
[  325.721526][ T5566] usb 1-1: Manufacturer: syz
[  325.750352][ T5566] usb 1-1: SerialNumber: syz
[  325.804055][ T5566] usb 1-1: config 0 descriptor??
[  326.018550][ T5566] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  326.073270][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  326.100069][T12079] loop6: detected capacity change from 0 to 8192
[  326.360435][T12092] tipc: Started in network mode
[  326.393946][T12092] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  326.439128][ T5566] gspca_sunplus: reg_w_riv err -71
[  326.443411][T12092] tipc: Enabled bearer <eth:ipvlan1>, priority 0
[  326.456717][ T5566] sunplus: probe of 1-1:0.0 failed with error -71
[  326.509647][ T5566] usb 1-1: USB disconnect, device number 32
[  326.667391][T12102] loop1: detected capacity change from 0 to 512
[  326.705298][T12102] EXT4-fs: Ignoring removed bh option
[  326.762173][T12102] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  326.781465][T12102] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  326.814965][T12102] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  326.843030][T12102] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  326.904849][T12102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  326.931555][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2938'.
[  327.033660][T12112] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  327.041412][T12102] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  327.107637][T12117] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  327.138253][T12117] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  327.175723][T12117] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  327.319867][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  327.571096][ T4973] tipc: Node number set to 10136234
[  327.794410][T12114] loop5: detected capacity change from 0 to 32768
[  327.828484][T12114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2939 (12114)
[  327.908648][T12114] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  327.933294][T12114] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  327.946191][T12138] loop6: detected capacity change from 0 to 256
[  328.006342][T12114] BTRFS info (device loop5): using free space tree
[  328.055356][T12138] FAT-fs (loop6): Directory bread(block 64) failed
[  328.061946][T12138] FAT-fs (loop6): Directory bread(block 65) failed
[  328.103535][T12138] FAT-fs (loop6): Directory bread(block 66) failed
[  328.110280][T12138] FAT-fs (loop6): Directory bread(block 67) failed
[  328.157567][T12138] FAT-fs (loop6): Directory bread(block 68) failed
[  328.164545][T12138] FAT-fs (loop6): Directory bread(block 69) failed
[  328.171194][T12138] FAT-fs (loop6): Directory bread(block 70) failed
[  328.178339][T12138] FAT-fs (loop6): Directory bread(block 71) failed
[  328.185694][T12138] FAT-fs (loop6): Directory bread(block 72) failed
[  328.192854][T12138] FAT-fs (loop6): Directory bread(block 73) failed
[  328.322055][T12162] loop7: detected capacity change from 0 to 64
[  328.371969][T12114] BTRFS info (device loop5): enabling ssd optimizations
[  328.407099][T12167] loop1: detected capacity change from 0 to 512
[  328.589335][ T4562] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  328.976209][T12178] loop7: detected capacity change from 0 to 64
[  329.303282][ T5514] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  329.433379][ T4284] Bluetooth: hci0: command 0x0406 tx timeout
[  329.449655][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2965'.
[  329.523209][ T5514] usb 1-1: Using ep0 maxpacket: 32
[  329.532108][ T5514] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  329.576891][ T5514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.600354][ T5514] usb 1-1: Product: syz
[  329.605154][ T5514] usb 1-1: Manufacturer: syz
[  329.620868][ T5514] usb 1-1: SerialNumber: syz
[  329.626706][T12196] sp0: Synchronizing with TNC
[  329.660525][ T5514] usb 1-1: config 0 descriptor??
[  329.712494][ T5514] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  329.731734][ T5514] dvb-usb: bulk message failed: -22 (2/0)
[  329.749935][ T5514] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  329.769066][ T5514] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  329.778256][ T5514] usb 1-1: media controller created
[  329.802745][ T5514] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  329.847678][ T5514] usb 1-1: selecting invalid altsetting 7
[  329.878308][ T5514] cxusb: set interface failed
[  329.883050][ T5514] dvb-usb: bulk message failed: -22 (1/0)
[  329.901644][T12175] cxusb: i2c wr: len=80 is too big!
[  329.901644][T12175] 
[  330.032786][ T5514] DVB: Unable to find symbol lgdt330x_attach()
[  330.041596][ T5514] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  330.173247][ T5514] rc_core: IR keymap rc-dvico-portable not found
[  330.179632][ T5514] Registered IR keymap rc-empty
[  330.212529][ T5514] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  330.238372][ T5514] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input35
[  330.279812][ T5514] dvb-usb: schedule remote query interval to 100 msecs.
[  330.287223][ T5514] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  330.323549][ T5514] usb 1-1: USB disconnect, device number 33
[  330.426126][ T5514] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  330.519009][T12211] loop5: detected capacity change from 0 to 32768
[  330.580901][T12211] read_mapping_page failed!
[  330.603318][T12211] ERROR: (device loop5): txCommit: 
[  330.603318][T12211] 
[  331.022609][T12234] loop6: detected capacity change from 0 to 4096
[  331.067567][T12234] NILFS (loop6): invalid segment: Checksum error in segment payload
[  331.103831][T12234] NILFS (loop6): trying rollback from an earlier position
[  331.144610][T12234] NILFS (loop6): recovery complete
[  331.183770][T12240] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  331.279751][T12243] 9pnet_fd: p9_fd_create_tcp (12243): problem binding to privport
[  331.505253][T12249] loop5: detected capacity change from 0 to 512
[  331.548263][T12249] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  331.595357][T12249] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2994: inode has both inline data and extents flags
[  331.623513][T12249] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2994: couldn't read orphan inode 15 (err -117)
[  331.705969][T12249] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  331.733703][T12249] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #2: comm syz.5.2994: invalid size
[  331.806376][ T4562] EXT4-fs (loop5): unmounting filesystem.
[  331.910293][T12266] loop5: detected capacity change from 0 to 64
[  332.617729][ T5514] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  332.813320][ T5514] usb 6-1: Using ep0 maxpacket: 16
[  332.821121][ T5514] usb 6-1: config 0 has an invalid interface number: 71 but max is 1
[  332.834457][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3012'.
[  332.843916][ T5514] usb 6-1: config 0 has an invalid interface number: 220 but max is 1
[  332.852471][ T5514] usb 6-1: config 0 has no interface number 0
[  332.859131][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3012'.
[  332.883457][ T5514] usb 6-1: config 0 has no interface number 1
[  332.887824][T12290] netlink: 'syz.6.3012': attribute type 6 has an invalid length.
[  332.889575][ T5514] usb 6-1: config 0 interface 71 has no altsetting 0
[  332.931930][ T5514] usb 6-1: config 0 interface 220 has no altsetting 0
[  332.947149][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'.
[  332.947920][ T5514] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=1b.69
[  332.965975][ T5514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.971633][T12292] device macvlan2 entered promiscuous mode
[  332.974015][ T5514] usb 6-1: Product: syz
[  332.974034][ T5514] usb 6-1: Manufacturer: syz
[  332.974048][ T5514] usb 6-1: SerialNumber: syz
[  333.002214][ T5514] usb 6-1: config 0 descriptor??
[  333.120589][T12296] loop6: detected capacity change from 0 to 64
[  333.167444][T12299] loop1: detected capacity change from 0 to 22
[  333.174596][T12299] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  333.200900][T12299] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  333.265951][ T5514] usb 6-1: USB disconnect, device number 22
[  333.523974][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.71/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  333.625604][T12309] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3022'.
[  333.723815][T12311] loop1: detected capacity change from 0 to 4096
[  333.743281][T12311] EXT4-fs: Ignoring removed mblk_io_submit option
[  333.753246][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  333.808191][T12311] EXT4-fs (loop1): Test dummy encryption mode enabled
[  333.838840][T12311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  333.917200][ T4284] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  333.926042][ T4284] Bluetooth: hci2: Injecting HCI hardware error event
[  333.936805][ T4285] Bluetooth: hci2: hardware error 0x00
[  334.020567][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  334.028087][T12322] loop6: detected capacity change from 0 to 256
[  334.118994][T12322] FAT-fs (loop6): Directory bread(block 64) failed
[  334.153227][T12322] FAT-fs (loop6): Directory bread(block 65) failed
[  334.199471][T12322] FAT-fs (loop6): Directory bread(block 66) failed
[  334.221275][T12322] FAT-fs (loop6): Directory bread(block 67) failed
[  334.242599][T12322] FAT-fs (loop6): Directory bread(block 68) failed
[  334.263294][T12322] FAT-fs (loop6): Directory bread(block 69) failed
[  334.280201][T12322] FAT-fs (loop6): Directory bread(block 70) failed
[  334.290244][T12322] FAT-fs (loop6): Directory bread(block 71) failed
[  334.303504][T12322] FAT-fs (loop6): Directory bread(block 72) failed
[  334.320451][T12322] FAT-fs (loop6): Directory bread(block 73) failed
[  334.535133][ T5514] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  334.627949][T12324] loop5: detected capacity change from 0 to 32768
[  334.710551][T12324] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  334.753731][ T5514] usb 1-1: Using ep0 maxpacket: 32
[  334.761484][ T5514] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  334.774580][ T5514] usb 1-1: config 0 interface 0 has no altsetting 0
[  334.781215][ T5514] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  334.790571][ T5514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.801772][ T5514] usb 1-1: config 0 descriptor??
[  334.823861][T12324] (syz.5.3028,12324,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  334.932442][ T4562] (syz-executor,4562,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76
[  334.964779][ T4562] ocfs2: Unmounting device (7,5) on (node local)
[  335.219132][T12353] IPVS: ip_vs_add_dest(): server weight less than zero
[  335.293351][ T5514] hid-picolcd 0003:04D8:F002.0032: No report with id 0xf3 found
[  335.310325][ T5514] hid-picolcd 0003:04D8:F002.0032: No report with id 0xf4 found
[  335.326713][T12357] netlink: 'syz.1.3043': attribute type 2 has an invalid length.
[  335.422758][ T4971] usb 1-1: USB disconnect, device number 34
[  335.653598][ T5514] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  335.696987][T12370] loop1: detected capacity change from 0 to 512
[  335.704203][T12370] EXT4-fs: Ignoring removed mblk_io_submit option
[  335.721414][T12370] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  335.730803][T12370] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.3049: attempt to clear invalid blocks 2 len 1
[  335.749391][T12370] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  335.771671][T12370] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3049: invalid indirect mapped block 1819239214 (level 0)
[  335.790649][T12370] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3049: invalid indirect mapped block 1819239214 (level 1)
[  335.808569][T12370] EXT4-fs (loop1): 1 truncate cleaned up
[  335.814555][T12370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  335.876026][ T5514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.885229][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  335.892263][ T5514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.905971][ T5514] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  335.909490][   T32] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  335.921522][ T5514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.954435][ T5514] usb 6-1: config 0 descriptor??
[  335.993572][ T4285] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  336.037013][T12374] loop1: detected capacity change from 0 to 256
[  336.087023][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.112066][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.144730][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.145441][   T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.182814][   T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.193193][   T32] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  336.199204][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.202259][   T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.210259][   T32] usb 7-1: config 0 descriptor??
[  336.225107][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.240142][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.249606][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.259320][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.268789][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.278618][T12374] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  336.292473][   T26] audit: type=1800 audit(1769513671.680:265): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3050" name="file1" dev="loop1" ino=1048894 res=0 errno=0
[  336.382752][ T5514] hid-led 0003:04D8:F372.0033: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.5-1/input0
[  336.486305][ T5514] hid-led 0003:04D8:F372.0033: Greynut Luxafor initialized
[  336.631295][ T5566] usb 6-1: USB disconnect, device number 23
[  336.643507][   T32] petalynx 0003:18B1:0037.0034: unknown main item tag 0x0
[  336.653461][   T32] petalynx 0003:18B1:0037.0034: unknown global tag 0xe
[  336.660353][   T32] petalynx 0003:18B1:0037.0034: item 0 0 1 14 parsing failed
[  336.689051][   T32] petalynx 0003:18B1:0037.0034: parse failed
[  336.704995][   T32] petalynx: probe of 0003:18B1:0037.0034 failed with error -22
[  336.758788][   T32] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  336.761546][T12383] fido_id[12383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  336.791693][ T5563] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  336.814213][ T5563] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  336.822995][ T5563] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  336.843918][ T5563] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  336.889164][ T5563] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  336.914757][ T5563] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  336.944023][ T5563] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  336.963922][ T5563] usb 7-1: USB disconnect, device number 18
[  336.975881][ T5564] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  337.010109][ T5564] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  337.023987][ T5564] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  337.051963][ T5564] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  337.065459][ T5564] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  337.079728][T12394] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.3056'.
[  337.087283][ T5564] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  337.103321][   T32] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  337.112188][T12394] netlink: zone id is out of range
[  337.123596][   T32] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  337.125959][T12394] netlink: zone id is out of range
[  337.148268][   T32] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  337.156651][T12394] netlink: zone id is out of range
[  337.156663][T12394] netlink: zone id is out of range
[  337.156670][T12394] netlink: zone id is out of range
[  337.156677][T12394] netlink: zone id is out of range
[  337.156685][T12394] netlink: zone id is out of range
[  337.156692][T12394] netlink: zone id is out of range
[  337.156699][T12394] netlink: zone id is out of range
[  337.156706][T12394] netlink: zone id is out of range
[  337.311946][   T32] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  337.347835][T12400] loop5: detected capacity change from 0 to 1024
[  337.387615][T12400] hfsplus: bad catalog entry type
[  337.472610][T12402] loop1: detected capacity change from 0 to 512
[  337.497774][ T4375] hfsplus: b-tree write err: -5, ino 4
[  337.602773][T12402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  337.644592][T12402] ext4 filesystem being mounted at /664/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.997955][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  338.423249][T12430] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  338.436229][T12412] loop7: detected capacity change from 0 to 32768
[  338.530702][T12412] XFS (loop7): Mounting V5 Filesystem
[  338.640385][T12412] XFS (loop7): Ending clean mount
[  338.680458][T12444] loop1: detected capacity change from 0 to 24
[  338.687861][T12412] XFS (loop7): Quotacheck needed: Please wait.
[  338.801774][T12412] XFS (loop7): Quotacheck: Done.
[  339.017829][ T8531] XFS (loop7): Unmounting Filesystem
[  339.271901][T12424] loop6: detected capacity change from 0 to 32768
[  339.382688][T12424] read_mapping_page failed!
[  339.402901][T12424] ERROR: (device loop6): txCommit: 
[  339.402901][T12424] 
[  340.232386][T12483] loop5: detected capacity change from 0 to 4096
[  340.254061][T12483] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  340.381356][T12483] ntfs: volume version 3.1.
[  340.407303][T12483] ntfs: (device loop5): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported.
[  340.433325][T12483] ntfs: (device loop5): load_system_files(): Failed to mark quotas out of date.  Mounting read-only.  Run chkdsk.
[  340.524173][T12495] netlink: 47 bytes leftover after parsing attributes in process `syz.7.3098'.
[  340.867634][T12500] loop6: detected capacity change from 0 to 4096
[  340.920710][T12500] ntfs: volume version 3.1.
[  341.553668][T12502] loop7: detected capacity change from 0 to 32768
[  341.560589][T12506] loop1: detected capacity change from 0 to 32768
[  341.594378][T12502] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 scanned by syz.7.3102 (12502)
[  341.641615][T12506] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3104 (12506)
[  341.701179][T12506] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  341.702412][T12502] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  341.766334][T12502] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  341.778845][T12506] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  341.814334][T12502] BTRFS info (device loop7): enabling ssd optimizations
[  341.824516][T12506] BTRFS info (device loop1): using free space tree
[  341.846643][T12502] BTRFS info (device loop7): turning off barriers
[  341.888533][T12502] BTRFS info (device loop7): using free space tree
[  341.913427][T12529] mkiss: ax0: crc mode is auto.
[  342.168054][T12506] BTRFS info (device loop1): enabling ssd optimizations
[  342.452154][ T4279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  342.575336][ T8531] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  342.593194][ T4971] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  342.803405][ T4971] usb 6-1: Using ep0 maxpacket: 32
[  342.810718][ T4971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.852512][ T4971] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  342.903340][ T4971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.924609][ T4971] usb 6-1: config 0 descriptor??
[  343.049094][T12522] loop6: detected capacity change from 0 to 40427
[  343.105860][T12522] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  343.163326][T12522] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  343.232424][T12522] F2FS-fs (loop6): invalid crc value
[  343.323423][T12522] F2FS-fs (loop6): Found nat_bits in checkpoint
[  343.337494][ T4971] cypress 0003:04B4:DE61.0035: item fetching failed at offset 0/2
[  343.376228][ T4971] cypress 0003:04B4:DE61.0035: parse failed
[  343.382201][ T4971] cypress: probe of 0003:04B4:DE61.0035 failed with error -22
[  343.433246][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout
[  343.439432][ T4285] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  343.538984][ T4971] usb 6-1: USB disconnect, device number 24
[  343.710859][T12522] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  343.733578][T12522] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  343.871438][T12522] syz.6.3111: attempt to access beyond end of device
[  343.871438][T12522] loop6: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  343.944705][T12522] syz.6.3111: attempt to access beyond end of device
[  343.944705][T12522] loop6: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[  343.986710][T12522] F2FS-fs (loop6): Issue discard(4614, 4614, 1019) failed, ret: -5
[  343.986754][T12522] F2FS-fs (loop6): Issue discard(5637, 5637, 10747) failed, ret: -5
[  344.140460][T12609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3127'.
[  344.873439][ T5566] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  345.065851][ T5566] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  345.086347][ T5566] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  345.123375][ T5566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.143667][T12644] loop6: detected capacity change from 0 to 256
[  345.160625][ T5566] gspca_main: stv0680-2.14.0 probing 041e:4007
[  345.189060][T12644] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  345.214950][T12616] loop5: detected capacity change from 0 to 32768
[  345.363078][T12616] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  345.382997][T12616] XFS (loop5): Mounting V5 Filesystem
[  345.534076][T12616] XFS (loop5): Ending clean mount
[  345.545772][T12616] XFS (loop5): Quotacheck needed: Please wait.
[  345.583401][ T4971] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  345.635588][T12616] XFS (loop5): Quotacheck: Done.
[  345.735560][ T4562] XFS (loop5): Unmounting Filesystem
[  345.823392][ T4971] usb 7-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  345.832933][ T4971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.853453][ T4971] usb 7-1: config 0 descriptor??
[  345.875384][ T4971] gspca_main: etoms-2.14.0 probing 102c:6151
[  345.963267][T12589] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  346.130725][ T4971] usb 7-1: USB disconnect, device number 19
[  346.153434][T12589] usb 1-1: Using ep0 maxpacket: 8
[  346.164596][T12589] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.193438][T12589] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.213277][T12589] usb 1-1: config 0 interface 0 has no altsetting 0
[  346.219980][T12589] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  346.232794][T12669] loop5: detected capacity change from 0 to 32768
[  346.233735][ T5566] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  346.257623][T12669] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.3152 (12669)
[  346.277702][ T5566] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  346.285141][T12589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.301059][ T5566] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  346.318613][T12589] usb 1-1: config 0 descriptor??
[  346.351551][T12669] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  346.364624][T12669] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  346.379535][T12669] BTRFS info (device loop5): using free space tree
[  346.519558][T12669] BTRFS info (device loop5): enabling ssd optimizations
[  346.554706][ T4971] usb 2-1: USB disconnect, device number 20
[  346.584454][T12669] BTRFS warning (device loop5): can't clear the free_space_tree,verity,compat_ro:4,compat_ro:6,compat_ro:10,compat_ro:12,compat_ro:14,compat_ro:19,compat_ro:20,compat_ro:23,compat_ro:24,compat_ro:25,compat_ro:26,compat_ro:28,compat_ro:29,compat_ro:32,compat_ro:33,compat_ro:35,compat_ro:37,compat_ro:38,compat_ro:39,compat_ro:41,compat_ro:42,compat_ro:43,compat_ro:44,compat_ro:45,compat_ro:46,compat_ro:52,compat_ro:55,compat_ro:57,compat_ro:61,compat_ro:63 feature bits while mounted
[  346.628855][    C1] vkms_vblank_simulate: vblank timer overrun
[  346.716180][ T4562] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  346.721920][T12690] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3153'.
[  346.743764][T12589] smartjoyplus 0003:0B43:0003.0036: ignoring exceeding usage max
[  346.752383][T12589] smartjoyplus 0003:0B43:0003.0036: unbalanced collection at end of report description
[  346.818135][T12589] smartjoyplus 0003:0B43:0003.0036: parse failed
[  346.833712][T12589] smartjoyplus: probe of 0003:0B43:0003.0036 failed with error -22
[  346.948777][ T4459] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop5 scanned by udevd (4459)
[  347.068457][ T4318] usb 1-1: USB disconnect, device number 35
[  347.111370][T12695] vivid-000: disconnect
[  347.165414][T12694] vivid-000: reconnect
[  347.308550][T12703] loop6: detected capacity change from 0 to 512
[  347.383804][T12703] EXT4-fs: Ignoring removed oldalloc option
[  347.453284][ T4327] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  347.464123][T12703] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  347.479494][T12703] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.499849][T12703] EXT4-fs (loop6): resizing filesystem from 128 to 2 blocks
[  347.508102][T12703] EXT4-fs warning (device loop6): ext4_resize_fs:2051: can't shrink FS - resize aborted
[  347.647053][ T7535] EXT4-fs (loop6): unmounting filesystem.
[  347.661759][ T4327] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  347.686992][ T4327] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  347.723955][ T4327] usb 2-1: Product: syz
[  347.728321][ T4327] usb 2-1: Manufacturer: syz
[  347.732952][ T4327] usb 2-1: SerialNumber: syz
[  347.774572][ T4327] usb 2-1: config 0 descriptor??
[  347.989815][ T4327] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  348.092896][T12710] loop5: detected capacity change from 0 to 32768
[  348.121239][T12710] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.3161 (12710)
[  348.169352][T12710] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  348.191869][ T4327] peak_usb 2-1:0.0 can0: sending command failure: -22
[  348.203253][ T4327] peak_usb 2-1:0.0 can0: sending command failure: -22
[  348.210084][ T4327] peak_usb 2-1:0.0 can0: sending command failure: -22
[  348.223326][T12710] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  348.247137][T12710] BTRFS info (device loop5): using free space tree
[  348.310918][ T4327] peak_usb: probe of 2-1:0.0 failed with error -22
[  348.406863][   T32] usb 2-1: USB disconnect, device number 21
[  348.460558][T12710] BTRFS info (device loop5): enabling ssd optimizations
[  348.537130][T12738] device netdevsim0 entered promiscuous mode
[  348.579003][T12738] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready
[  348.618331][T12738] net_ratelimit: 3660 callbacks suppressed
[  348.618366][T12738] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  348.709980][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3167'.
[  348.743346][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3167'.
[  348.757317][ T4562] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  348.784044][T12740] netlink: 'syz.7.3167': attribute type 14 has an invalid length.
[  348.813563][T12740] netlink: 'syz.7.3167': attribute type 11 has an invalid length.
[  348.892977][T12718] loop6: detected capacity change from 0 to 32768
[  349.101529][ T4458] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop5 scanned by udevd (4458)
[  349.188385][T12718] XFS (loop6): Mounting V5 Filesystem
[  349.318751][T12718] XFS (loop6): Ending clean mount
[  349.410076][T12718] XFS (loop6): Quotacheck needed: Please wait.
[  349.418656][T12766] netlink: 'syz.7.3175': attribute type 32 has an invalid length.
[  349.519426][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3175'.
[  349.563990][T12718] XFS (loop6): Quotacheck: Done.
[  349.596413][T12766] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  349.865136][ T7535] XFS (loop6): Unmounting Filesystem
[  349.950974][T12778] loop1: detected capacity change from 0 to 22
[  350.004151][T12778] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  350.032971][T12778] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  350.360183][T12789] loop5: detected capacity change from 0 to 1024
[  350.398074][T12789] EXT4-fs: Ignoring removed bh option
[  350.452888][T12789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  350.540144][T12789] EXT4-fs warning (device loop5): ext4_resize_begin:74: won't resize using backup superblock at 1
[  350.712985][ T4562] EXT4-fs (loop5): unmounting filesystem.
[  350.990349][T12803] netlink: 'syz.5.3190': attribute type 12 has an invalid length.
[  351.004310][T12803] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3190'.
[  351.233982][T12811] loop6: detected capacity change from 0 to 16
[  351.267140][T12811] erofs: (device loop6): mounted with root inode @ nid 36.
[  351.335371][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'.
[  351.349454][T12816] netlink: 312 bytes leftover after parsing attributes in process `syz.5.3196'.
[  351.352383][T12811] erofs: (device loop6): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  351.379923][T12811] syz.6.3194: attempt to access beyond end of device
[  351.379923][T12811] loop6: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  351.722016][T12831] loop6: detected capacity change from 0 to 128
[  351.963306][T12587] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  352.017049][T12840] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  352.028402][ T4327] kernel write not supported for file task/800/attr/keycreate (pid: 4327 comm: kworker/0:6)
[  352.100008][T12842] loop6: detected capacity change from 0 to 64
[  352.144626][T12587] usb 2-1: Using ep0 maxpacket: 8
[  352.165024][T12587] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  352.189094][T12587] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  352.200078][T12587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.209874][T12587] usb 2-1: Product: syz
[  352.222008][T12587] usb 2-1: Manufacturer: syz
[  352.227604][T12587] usb 2-1: SerialNumber: syz
[  352.241895][T12587] usb 2-1: config 0 descriptor??
[  352.255798][T12587] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  352.264205][T12587] usb 2-1: setting power ON
[  352.268837][T12587] dvb-usb: bulk message failed: -22 (2/0)
[  352.293868][T12587] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  352.319333][T12587] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  352.330425][T12587] usb 2-1: media controller created
[  352.348470][T12587] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  352.393543][ T4285] Bluetooth: hci0: command 0x0405 tx timeout
[  352.405100][T12587] usb 2-1: selecting invalid altsetting 6
[  352.410874][T12587] usb 2-1: digital interface selection failed (-22)
[  352.417941][T12587] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  352.431687][T12587] usb 2-1: setting power OFF
[  352.436707][T12587] dvb-usb: bulk message failed: -22 (2/0)
[  352.444463][T12587] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  352.460977][T12829] dvb-usb: bulk message failed: -22 (3/0)
[  352.466877][T12587] (NULL device *): no alternate interface
[  352.473532][T12829] cxusb: i2c wr: len=80 is too big!
[  352.473532][T12829] 
[  352.547076][T12587] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  352.578152][T12587] usb 2-1: USB disconnect, device number 22
[  353.000602][T12872] bridge0: port 4(veth1_to_bridge) entered blocking state
[  353.008281][T12872] bridge0: port 4(veth1_to_bridge) entered disabled state
[  353.016718][T12872] device veth1_to_bridge entered promiscuous mode
[  353.023910][T12872] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  353.042548][T12872] bridge0: port 4(veth1_to_bridge) entered blocking state
[  353.050802][T12874] loop5: detected capacity change from 0 to 512
[  353.052405][T12872] bridge0: port 4(veth1_to_bridge) entered forwarding state
[  353.102751][T12874] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  353.242553][ T4562] EXT4-fs (loop5): unmounting filesystem.
[  353.280769][T12880] vivid-003: disconnect
[  353.299889][T12878] vivid-003: reconnect
[  353.406205][T12883] loop6: detected capacity change from 0 to 1764
[  353.539300][T12883] iso9660: Corrupted directory entry in block 2 of inode 1920
[  353.707775][T12895] tipc: Started in network mode
[  353.712696][T12895] tipc: Node identity -, cluster identity 4711
[  353.981064][T12908] loop1: detected capacity change from 0 to 128
[  354.026169][T12908] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  354.084454][T12908] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  354.239087][   T75] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  354.663546][T12906] loop6: detected capacity change from 0 to 32768
[  355.162451][T12920] loop1: detected capacity change from 0 to 32768
[  355.203870][T12920] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  355.371409][T12942] loop5: detected capacity change from 0 to 128
[  355.482846][T12942] VFS: Found a Xenix FS (block size = 512) on device loop5
[  355.509537][T12942] sysv_count_free_blocks: cannot read free-list block
[  355.528446][ T4458] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  355.645635][T12942] sysv_count_free_inodes: unable to read inode table
[  355.729794][T12953] loop7: detected capacity change from 0 to 64
[  355.732959][T12950] loop6: detected capacity change from 0 to 2048
[  355.785473][ T4562] sysv_free_block: trying to free block not in datazone
[  355.803350][ T4562] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  355.822076][T12950] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  355.847291][T12953] hfs: keylen 94 too large
[  355.878303][T12950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.307171][T12966] loop5: detected capacity change from 0 to 1024
[  356.384717][T12966] EXT4-fs error (device loop5): __ext4_fill_super:5423: comm syz.5.3264: inode #2: comm syz.5.3264: iget: illegal inode #
[  356.423942][T12966] EXT4-fs (loop5): get root inode failed
[  356.443184][T12966] EXT4-fs (loop5): mount failed
[  356.928810][T12957] loop1: detected capacity change from 0 to 40427
[  357.001302][T12957] F2FS-fs (loop1): invalid crc value
[  357.030543][T12957] F2FS-fs (loop1): Found nat_bits in checkpoint
[  357.194217][T12957] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  357.221099][T12957] F2FS-fs (loop1): Start checkpoint disabled!
[  357.266583][T12957] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  357.604101][T13000] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3278'.
[  358.477357][T13028] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  358.518950][T13030] loop1: detected capacity change from 0 to 64
[  358.926778][T13044] program syz.7.3298 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  359.640144][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3311'.
[  359.650580][   T26] audit: type=1326 audit(1769513695.040:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9af9aeb9 code=0x7ffc0000
[  359.687516][   T26] audit: type=1326 audit(1769513695.040:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0e9af9aeb9 code=0x7ffc0000
[  359.717654][   T26] audit: type=1326 audit(1769513695.040:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9af9aeb9 code=0x7ffc0000
[  359.815398][   T26] audit: type=1326 audit(1769513695.040:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9af9aeb9 code=0x7ffc0000
[  359.903226][   T26] audit: type=1326 audit(1769513695.040:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0e9af9aeb9 code=0x7ffc0000
[  359.942185][T13082] loop7: detected capacity change from 0 to 256
[  359.948641][   T26] audit: type=1326 audit(1769513695.040:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9af9aeb9 code=0x7ffc0000
[  359.993786][   T32] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  360.013055][T13082] FAT-fs (loop7): Directory bread(block 64) failed
[  360.019751][T13082] FAT-fs (loop7): Directory bread(block 65) failed
[  360.033279][   T26] audit: type=1326 audit(1769513695.040:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9af9aeb9 code=0x7ffc0000
[  360.083778][T13082] FAT-fs (loop7): Directory bread(block 66) failed
[  360.090365][T13082] FAT-fs (loop7): Directory bread(block 67) failed
[  360.127007][T13082] FAT-fs (loop7): Directory bread(block 68) failed
[  360.153259][   T14] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  360.153278][T13082] FAT-fs (loop7): Directory bread(block 69) failed
[  360.153502][T13082] FAT-fs (loop7): Directory bread(block 70) failed
[  360.183182][   T32] usb 6-1: Using ep0 maxpacket: 32
[  360.189625][   T32] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  360.209163][   T32] usb 6-1: config 0 has no interface number 0
[  360.215474][   T32] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  360.226875][T13082] FAT-fs (loop7): Directory bread(block 71) failed
[  360.234004][T13082] FAT-fs (loop7): Directory bread(block 72) failed
[  360.241103][T13082] FAT-fs (loop7): Directory bread(block 73) failed
[  360.248098][   T32] usb 6-1: config 0 interface 1 has no altsetting 0
[  360.257257][   T32] usb 6-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a
[  360.303173][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.311247][   T32] usb 6-1: Product: syz
[  360.323375][   T32] usb 6-1: Manufacturer: syz
[  360.333302][   T14] usb 7-1: Using ep0 maxpacket: 32
[  360.343747][   T32] usb 6-1: SerialNumber: syz
[  360.344573][   T14] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.354526][   T32] usb 6-1: config 0 descriptor??
[  360.403241][   T14] usb 7-1: config 0 interface 0 has no altsetting 0
[  360.438282][   T14] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  360.467363][   T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.497548][   T14] usb 7-1: config 0 descriptor??
[  360.621294][   T32] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces
[  360.638585][   T32] cx231xx 6-1:0.1: Not found matching IAD interface
[  360.656578][   T32] usb 6-1: USB disconnect, device number 25
[  360.753642][ T5202] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  360.923949][   T14] magicmouse 0003:05AC:0265.0037: hidraw0: USB HID v0.07 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0
[  360.963279][ T5202] usb 1-1: Using ep0 maxpacket: 16
[  360.970394][ T5202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.982171][ T5202] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  360.991644][ T5202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.008409][ T5202] usb 1-1: config 0 descriptor??
[  361.053461][T12587] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  361.137814][ T5577] usb 7-1: USB disconnect, device number 20
[  361.245449][T12587] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.259016][T12587] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  361.269193][T12587] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  361.278701][T12587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.289179][T12587] usb 2-1: config 0 descriptor??
[  361.296904][T12587] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  361.303857][T12587] dvb-usb: bulk message failed: -22 (3/0)
[  361.311728][T12587] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  361.320818][T12587] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  361.327995][T12587] usb 2-1: media controller created
[  361.337466][T12587] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  361.349223][T12587] dvb-usb: bulk message failed: -22 (6/0)
[  361.355844][T12587] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  361.365294][T12587] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36
[  361.380561][T12587] dvb-usb: schedule remote query interval to 150 msecs.
[  361.401750][T12587] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  361.433765][ T5202] hkems 0003:2006:0118.0038: ignoring exceeding usage max
[  361.461980][ T5202] hkems 0003:2006:0118.0038: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0
[  361.478403][ T5202] hkems 0003:2006:0118.0038: no inputs found
[  361.487552][ T5202] hkems 0003:2006:0118.0038: force feedback init failed
[  361.527231][T13102] dvb-usb: bulk message failed: -22 (2/0)
[  361.537422][ T5202] usb 2-1: USB disconnect, device number 23
[  361.576352][ T5202] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  361.675557][T12587] usb 1-1: USB disconnect, device number 36
[  361.810410][T13114] device dummy0 entered promiscuous mode
[  362.842674][T13124] loop7: detected capacity change from 0 to 32768
[  362.919190][T13156] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3351'.
[  362.938818][T13156] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3351'.
[  363.193291][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  363.242914][T13160] loop1: detected capacity change from 0 to 8192
[  363.286678][T13160] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  363.313401][T13160] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  363.322701][T13160] REISERFS (device loop1): using ordered data mode
[  363.380659][T13172] netlink: 'syz.5.3360': attribute type 3 has an invalid length.
[  363.415454][T13160] reiserfs: using flush barriers
[  363.424702][T13160] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  363.464838][T13160] REISERFS (device loop1): checking transaction log (loop1)
[  363.479734][T13174] support for the xor transformation has been removed.
[  363.494310][T13160] REISERFS (device loop1): Using rupasov hash to sort names
[  363.523255][T13160] REISERFS (device loop1): using 3.5.x disk format
[  363.533994][T13160] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  363.588290][T13160] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  363.630428][T13160] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  363.666248][T13160] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  363.743314][T12587] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  363.933481][T12587] usb 6-1: Using ep0 maxpacket: 16
[  363.940840][T12587] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  363.998235][T12587] usb 6-1: config 0 has no interface number 0
[  364.033200][T12587] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  364.075428][T12587] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  364.121574][T12587] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  364.151440][T12587] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  364.192321][T12587] usb 6-1: Product: syz
[  364.234156][T12587] usb 6-1: SerialNumber: syz
[  364.264386][T12587] usb 6-1: config 0 descriptor??
[  364.298022][T12587] cm109 6-1:0.8: invalid payload size 0, expected 4
[  364.332836][T12587] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input37
[  364.536711][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  364.537006][ T5202] usb 6-1: USB disconnect, device number 26
[  364.543705][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  364.621964][ T5202] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  364.720210][T13202] loop6: detected capacity change from 0 to 4096
[  364.772834][T13202] EXT4-fs (loop6): Test dummy encryption mode enabled
[  364.809155][T13202] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  364.817774][T13202] System zones: 0-5
[  364.835095][T13202] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  365.020847][ T7535] EXT4-fs (loop6): unmounting filesystem.
[  365.471818][T13232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3387'.
[  365.578524][T13234] loop6: detected capacity change from 0 to 512
[  365.617584][T13234] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  365.694859][T13234] EXT4-fs (loop6): 1 truncate cleaned up
[  365.711124][T13239] loop1: detected capacity change from 0 to 1024
[  365.718568][T13239] EXT4-fs: Ignoring removed bh option
[  365.724110][T13239] EXT4-fs: inline encryption not supported
[  365.730160][T13234] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  365.760045][T13239] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  365.783560][T13239] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.3390: lblock 2 mapped to illegal pblock 2 (length 1)
[  365.788296][   T26] audit: type=1800 audit(1769513701.180:273): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3388" name="file1" dev="loop6" ino=15 res=0 errno=0
[  365.818211][    C1] vkms_vblank_simulate: vblank timer overrun
[  365.836179][T13239] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  365.903419][T13239] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.3390: lblock 0 mapped to illegal pblock 48 (length 1)
[  365.949174][T13239] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  365.975055][ T7535] EXT4-fs (loop6): unmounting filesystem.
[  365.985922][T13239] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.3390: Failed to acquire dquot type 0
[  366.040066][T13239] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  366.098146][T13239] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.3390: mark_inode_dirty error
[  366.128487][T13239] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  366.154868][T13239] EXT4-fs (loop1): 1 orphan inode deleted
[  366.173357][   T75] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  366.198380][T13239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  366.223433][   T75] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  366.243229][   T75] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0
[  366.432811][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  366.460239][ T4279] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0
[  366.475642][ T4279] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  366.477699][T12587] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  366.497474][ T4279] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error
[  366.662707][T13262] loop5: detected capacity change from 0 to 2048
[  366.670443][T13262] EXT4-fs: inline encryption not supported
[  366.695900][T13262] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  366.706230][T12587] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  366.723411][ T5202] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  366.725062][T12587] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  366.778865][T12587] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.787683][T12587] usb 7-1: Product: syz
[  366.791873][T12587] usb 7-1: Manufacturer: syz
[  366.792947][ T4562] EXT4-fs (loop5): unmounting filesystem.
[  366.797603][T12587] usb 7-1: SerialNumber: syz
[  366.854796][T12587] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  366.916404][ T5202] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  366.924718][ T5202] usb 1-1: config 0 has no interface number 0
[  366.931016][ T5202] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  366.940513][ T5202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.956989][ T5202] usb 1-1: config 0 descriptor??
[  366.966809][ T5202] usb 1-1: selecting invalid altsetting 1
[  366.972826][ T5202] dvb_ttusb_budget: ttusb_init_controller: error
[  366.979584][ T5202] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  367.065896][ T5202] DVB: Unable to find symbol cx22700_attach()
[  367.122020][ T5202] DVB: Unable to find symbol tda10046_attach()
[  367.129029][ T5202] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  367.153282][ T4327] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  367.173550][ T5202] usb 1-1: USB disconnect, device number 37
[  367.333243][ T4327] usb 6-1: Using ep0 maxpacket: 8
[  367.339954][ T4327] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[  367.358553][ T4327] usb 6-1: config 2 has no interface number 0
[  367.365355][ T4327] usb 6-1: config 2 interface 31 has no altsetting 0
[  367.374882][ T4327] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  367.384258][ T4327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.392373][ T4327] usb 6-1: Product: syz
[  367.397240][ T4327] usb 6-1: Manufacturer: syz
[  367.401936][ T4327] usb 6-1: SerialNumber: syz
[  367.466071][T12587] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  367.534615][T12587] usb 7-1: USB disconnect, device number 21
[  367.541841][T13275] loop1: detected capacity change from 0 to 512
[  367.592505][T13275] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3404: inode has both inline data and extents flags
[  367.698787][T13275] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3404: couldn't read orphan inode 15 (err -117)
[  367.772183][T13275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  367.961683][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  368.047520][ T4327] ch9200: probe of 6-1:2.31 failed with error -22
[  368.094594][ T4327] usb 6-1: USB disconnect, device number 27
[  368.171675][T13287] loop6: detected capacity change from 0 to 256
[  368.261944][T13287] FAT-fs (loop6): Directory bread(block 64) failed
[  368.288781][T13289] loop1: detected capacity change from 0 to 128
[  368.303490][T13287] FAT-fs (loop6): Directory bread(block 65) failed
[  368.310142][T13287] FAT-fs (loop6): Directory bread(block 66) failed
[  368.373577][T13287] FAT-fs (loop6): Directory bread(block 67) failed
[  368.380246][T13287] FAT-fs (loop6): Directory bread(block 68) failed
[  368.391722][T13287] FAT-fs (loop6): Directory bread(block 69) failed
[  368.407875][T13287] FAT-fs (loop6): Directory bread(block 70) failed
[  368.415912][T13287] FAT-fs (loop6): Directory bread(block 71) failed
[  368.422938][T13287] FAT-fs (loop6): Directory bread(block 72) failed
[  368.448531][T13287] FAT-fs (loop6): Directory bread(block 73) failed
[  368.903017][T13310] loop7: detected capacity change from 0 to 1024
[  368.933640][T13310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  368.943496][T12587] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  369.009569][T13310] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  369.138089][T13304] loop1: detected capacity change from 0 to 32768
[  369.153374][T12587] usb 7-1: Using ep0 maxpacket: 16
[  369.171738][ T8531] EXT4-fs (loop7): unmounting filesystem.
[  369.182194][T12587] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[  369.183643][T13304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.3417 (13304)
[  369.225967][T12587] usb 7-1: config 1 has no interface number 0
[  369.232168][T12587] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  369.259958][T13315] ieee802154 phy0 wpan0: encryption failed: -22
[  369.313229][T12587] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  369.341905][T12587] usb 7-1: config 1 interface 105 has no altsetting 0
[  369.372441][T12587] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  369.413508][T12587] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.421592][T12587] usb 7-1: Product: syz
[  369.459950][T12587] usb 7-1: Manufacturer: syz
[  369.473291][T12587] usb 7-1: SerialNumber: syz
[  369.488904][T13299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  369.502174][T13304] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  369.538454][T13299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  369.553367][T13304] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  369.577223][T13304] BTRFS info (device loop1): using free space tree
[  369.617303][T13308] loop5: detected capacity change from 0 to 32768
[  369.927030][T13343] loop7: detected capacity change from 0 to 64
[  369.972191][T13299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  370.002953][T13299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  370.075785][T13304] BTRFS info (device loop1): enabling ssd optimizations
[  370.257951][T12587] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  370.286077][T12587] aqc111: probe of 7-1:1.105 failed with error -71
[  370.341357][T12587] usb 7-1: USB disconnect, device number 22
[  370.400008][ T4279] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  371.111630][T13371] loop5: detected capacity change from 0 to 4096
[  371.160960][T13371] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  371.168367][T13375] loop1: detected capacity change from 0 to 64
[  371.471353][ T4562] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22.
[  371.509389][ T4562] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22.
[  371.528303][ T4562] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  371.942674][ T5566] kernel write not supported for file /snd/midiC2D0 (pid: 5566 comm: kworker/1:10)
[  372.054809][T13397] loop6: detected capacity change from 0 to 512
[  372.137297][T13402] 8021q: VLANs not supported on bridge0
[  372.138020][T13397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[  372.176969][T13397] System zones: 1-12
[  372.226192][T13397] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.3451: Directory hole found for htree index block 0
[  372.323448][T13397] EXT4-fs (loop6): Remounting filesystem read-only
[  372.330543][T13397] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[  372.358052][T13397] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.3451: Directory hole found for htree index block 0
[  372.403856][T13397] EXT4-fs (loop6): Remounting filesystem read-only
[  372.410461][T13397] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  372.443914][T13397] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  372.530328][T13397] EXT4-fs: group quota file already specified
[  372.611861][T13389] loop1: detected capacity change from 0 to 32768
[  372.678379][ T7535] EXT4-fs (loop6): unmounting filesystem.
[  372.776283][T13389] XFS (loop1): Mounting V5 Filesystem
[  372.894097][T13389] XFS (loop1): Ending clean mount
[  372.938499][T13389] XFS (loop1): Quotacheck needed: Please wait.
[  373.071006][T13430] trusted_key: encrypted_key: keylen parameter is missing
[  373.097046][T13389] XFS (loop1): Quotacheck: Done.
[  373.287706][T13437] loop6: detected capacity change from 0 to 1024
[  373.288512][ T4279] XFS (loop1): Unmounting Filesystem
[  373.489961][ T4375] hfsplus: b-tree write err: -5, ino 4
[  374.256977][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3484'.
[  375.177710][T13502] loop6: detected capacity change from 0 to 512
[  375.206698][T13502] EXT4-fs: Ignoring removed oldalloc option
[  375.228643][T13502] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  375.282862][T13502] EXT4-fs (loop6): 1 truncate cleaned up
[  375.344208][T13502] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  375.480509][ T7535] EXT4-fs (loop6): unmounting filesystem.
[  375.496641][T13500] loop5: detected capacity change from 0 to 32768
[  375.531205][T13500] XFS: attr2 mount option is deprecated.
[  375.571584][T13510] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  375.578791][T13510] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  375.585966][T13510] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  375.592570][T13510] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  375.617663][T13510] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  375.633000][T13510] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  375.652518][T13500] XFS (loop5): Mounting V5 Filesystem
[  375.661671][T13510] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  375.703347][T13510] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  375.715293][T13510] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  375.722058][T13510] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  375.724303][T13500] XFS (loop5): Ending clean mount
[  375.728779][T13510] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  375.740961][T13510] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  375.749511][T13510] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  375.766256][T13510] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  375.776669][T13510] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  375.789088][T13500] XFS (loop5): Quotacheck needed: Please wait.
[  375.793374][T13510] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  375.822160][T13510] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  375.873647][T13510] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  375.881116][T13517] loop1: detected capacity change from 0 to 256
[  375.893637][T13510] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  375.907456][T13510] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  375.919195][T13500] XFS (loop5): Quotacheck: Done.
[  375.927027][T13517] FAT-fs (loop1): Directory bread(block 64) failed
[  375.948633][T13517] FAT-fs (loop1): Directory bread(block 65) failed
[  375.955979][T13510] comedi comedi3: 8255: I/O port conflict (0x8000000,4)
[  375.956158][T13517] FAT-fs (loop1): Directory bread(block 66) failed
[  375.962968][T13510] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  376.019601][T13517] FAT-fs (loop1): Directory bread(block 67) failed
[  376.050932][T13517] FAT-fs (loop1): Directory bread(block 68) failed
[  376.075177][T13517] FAT-fs (loop1): Directory bread(block 69) failed
[  376.108636][T13517] FAT-fs (loop1): Directory bread(block 70) failed
[  376.126135][T13517] FAT-fs (loop1): Directory bread(block 71) failed
[  376.132807][T13517] FAT-fs (loop1): Directory bread(block 72) failed
[  376.180448][T13517] FAT-fs (loop1): Directory bread(block 73) failed
[  376.232972][ T4562] XFS (loop5): Unmounting Filesystem
[  377.140731][T13532] device syz_tun entered promiscuous mode
[  377.150543][T13532] device macvtap1 entered promiscuous mode
[  377.165047][T13532] device syz_tun left promiscuous mode
[  377.622970][T13542] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3511'.
[  377.703227][ T5577] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  377.893345][ T5577] usb 1-1: Using ep0 maxpacket: 8
[  377.900853][ T5577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.950169][ T5577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.950215][T13556] loop6: detected capacity change from 0 to 8
[  377.971025][ T5577] usb 1-1: New USB device found, idVendor=056a, idProduct=001f, bcdDevice= 0.00
[  377.993702][ T5577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.013810][ T5577] usb 1-1: config 0 descriptor??
[  378.276922][T13564] loop6: detected capacity change from 0 to 128
[  378.332942][T13546] loop1: detected capacity change from 0 to 32768
[  378.366438][T13546] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong
[  378.366438][T13546] 
[  378.379545][T13564] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  378.436393][ T5577] wacom 0003:056A:001F.0039: ignoring exceeding usage max
[  378.469248][T13564] ext4 filesystem being mounted at /450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  378.501046][    C1] vkms_vblank_simulate: vblank timer overrun
[  378.521292][T13546] ERROR: (device loop1): remounting filesystem as read-only
[  378.539246][T13546] ialloc: diAlloc returned -5!
[  378.555722][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  378.562185][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  378.582350][ T5577] wacom 0003:056A:001F.0039: Unknown device_type for 'HID 056a:001f'. Ignoring.
[  378.637308][ T5577] usb 1-1: USB disconnect, device number 38
[  378.732645][ T7535] EXT4-fs (loop6): unmounting filesystem.
[  378.976146][T13578] loop1: detected capacity change from 0 to 4096
[  379.008740][T13578] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  379.180441][T13587] Bluetooth: MGMT ver 1.22
[  379.274248][ T4279] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22.
[  379.303986][ T4279] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22.
[  379.310567][ T4279] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  379.713319][ T4970] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  379.889274][T13585] loop5: detected capacity change from 0 to 32768
[  379.925142][ T4970] usb 7-1: Using ep0 maxpacket: 16
[  379.936216][ T4970] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  379.965960][ T4970] usb 7-1: config 0 has no interface number 0
[  379.980427][ T4970] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16
[  380.020457][ T4970] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  380.074136][ T4970] usb 7-1: New USB device found, idVendor=7dd7, idProduct=902f, bcdDevice=a3.2c
[  380.110629][ T4970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.131788][ T4970] usb 7-1: Product: syz
[  380.141733][ T4970] usb 7-1: Manufacturer: syz
[  380.157311][ T4970] usb 7-1: SerialNumber: syz
[  380.189905][ T4970] usb 7-1: config 0 descriptor??
[  380.203875][T13594] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  380.218906][T13594] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  380.490917][ T4970] usb 7-1: MIDIStreaming interface descriptor not found
[  380.628757][ T4970] usb 7-1: USB disconnect, device number 23
[  380.887972][T13638] netlink: 277 bytes leftover after parsing attributes in process `syz.7.3556'.
[  381.055642][T12385] udevd[12385]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  381.348850][T13648] loop6: detected capacity change from 0 to 2048
[  381.408001][T13648] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  381.494418][T13653] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  381.810183][T13636] loop1: detected capacity change from 0 to 40427
[  381.823271][ T4970] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  381.858647][T13636] F2FS-fs (loop1): invalid crc value
[  381.870348][T13636] F2FS-fs (loop1): Found nat_bits in checkpoint
[  382.019684][T13636] F2FS-fs (loop1): Start checkpoint disabled!
[  382.039364][T13636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  382.057916][ T4970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.091003][ T4970] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99
[  382.118705][   T26] audit: type=1800 audit(1769513717.510:274): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3555" name="file1" dev="loop1" ino=10 res=0 errno=0
[  382.130951][ T4970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.208296][ T4970] usb 6-1: Product: syz
[  382.221458][ T4970] usb 6-1: Manufacturer: syz
[  382.246745][ T4970] usb 6-1: SerialNumber: syz
[  382.264661][ T4970] usb 6-1: config 0 descriptor??
[  382.474745][T13669] ptrace attach of "./syz-executor exec"[4268] was attempted by ""[13669]
[  382.753838][ T4970] usb 6-1: USB disconnect, device number 28
[  382.766284][ T4970] f81534a_ctrl 6-1:0.0: failed to set register 0x116: -19
[  382.778861][   T75] kworker/u4:4: attempt to access beyond end of device
[  382.778861][   T75] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  382.783439][ T4970] f81534a_ctrl 6-1:0.0: failed to enable ports: -19
[  382.951026][T13667] loop7: detected capacity change from 0 to 40427
[  382.970200][T13667] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  382.983397][ T4327] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  382.991420][T13667] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  383.002471][T13667] F2FS-fs (loop7): invalid crc value
[  383.102178][T13667] F2FS-fs (loop7): Found nat_bits in checkpoint
[  383.143846][T13667] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  383.151026][T13667] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  383.175018][ T4327] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[  383.203217][ T4327] usb 1-1: config 0 has no interface number 0
[  383.213676][ T4327] usb 1-1: config 0 interface 29 has no altsetting 0
[  383.235203][ T4327] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  383.244635][ T5202] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  383.262462][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.291816][ T4327] usb 1-1: Product: syz
[  383.296555][ T4327] usb 1-1: Manufacturer: syz
[  383.301190][ T4327] usb 1-1: SerialNumber: syz
[  383.334473][ T4327] usb 1-1: config 0 descriptor??
[  383.433280][ T5202] usb 7-1: Using ep0 maxpacket: 32
[  383.440833][ T5202] usb 7-1: unable to get BOS descriptor or descriptor too short
[  383.471530][ T5202] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  383.493345][ T5202] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  383.527247][ T5202] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  383.573143][ T5202] usb 7-1: config 128 has no interface number 0
[  383.579858][ T4327] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  383.590080][ T5202] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  383.627719][ T5202] usb 7-1: config 128 interface 127 has no altsetting 0
[  383.646445][ T5202] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  383.666604][ T5202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.686106][ T5202] usb 7-1: Product: syz
[  383.699345][ T5202] usb 7-1: Manufacturer: syz
[  383.709629][ T5202] usb 7-1: SerialNumber: syz
[  383.735209][T13675] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  383.780854][ T4327] peak_usb 1-1:0.29 can0: sending command failure: -8
[  383.813368][ T4327] peak_usb 1-1:0.29 can0: sending command failure: -8
[  383.821763][ T4327] peak_usb 1-1:0.29 can0: sending command failure: -8
[  383.848547][T13691] loop1: detected capacity change from 0 to 512
[  383.921537][T13691] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  384.079054][ T5202] usb 7-1: USB disconnect, device number 24
[  384.096925][T13691] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  384.103549][ T4327] peak_usb: probe of 1-1:0.29 failed with error -8
[  384.105764][T13691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  384.159730][ T4327] usb 1-1: USB disconnect, device number 39
[  384.245067][T13691] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.3579: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=9, size=1024 fake=1
[  384.264923][    C1] vkms_vblank_simulate: vblank timer overrun
[  384.392453][T13697] device netdevsim0 entered promiscuous mode
[  384.436511][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  384.495279][T13697] device netdevsim0 left promiscuous mode
[  384.864040][T13708] UBIFS error (pid: 13708): cannot open "upperdir=./file1,", error -22
[  384.998327][T13711] loop5: detected capacity change from 0 to 512
[  385.070130][T13714] nbd: must specify at least one socket
[  385.590145][T13736] device netdevsim0 entered promiscuous mode
[  385.661140][T13736] device netdevsim0 left promiscuous mode
[  385.789080][T13741] device sit0 entered promiscuous mode
[  385.830383][T13741] netlink: 'syz.5.3604': attribute type 1 has an invalid length.
[  385.882155][T13741] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3604'.
[  385.933836][T13749] overlayfs: failed to set xattr on upper
[  385.973238][T13749] overlayfs: ...falling back to index=off,metacopy=off.
[  386.587868][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'.
[  386.629062][T13774] netlink: 'syz.0.3618': attribute type 2 has an invalid length.
[  386.674293][T13774] netlink: 'syz.0.3618': attribute type 1 has an invalid length.
[  386.838074][T13778] loop7: detected capacity change from 0 to 2048
[  386.953945][T13785] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  386.995566][T13785] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  387.061050][T13785] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  387.109759][T13791] loop1: detected capacity change from 0 to 128
[  387.126804][T13785] Remounting filesystem read-only
[  387.132238][T13778] NILFS (loop7): mounting fs with errors
[  387.288743][T13785] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  387.346568][T13785] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  387.395690][T13785] Remounting filesystem read-only
[  387.437445][ T8531] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  388.117953][T13793] loop6: detected capacity change from 0 to 32768
[  388.173993][T13793] XFS (loop6): Invalid device [./file1], error=-15
[  388.493845][T13827] loop5: detected capacity change from 0 to 512
[  388.509309][T13829] device vlan4 entered promiscuous mode
[  388.546321][T13829] device syz_tun entered promiscuous mode
[  388.547940][T13827] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  388.620447][T13827] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3644: bad orphan inode 131083
[  388.670885][T13827] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  388.910452][ T4562] EXT4-fs (loop5): unmounting filesystem.
[  389.395707][T13849] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  389.450037][T13853] loop7: detected capacity change from 0 to 4096
[  389.458990][T13853] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  389.742811][T13853] ntfs: (device loop7): parse_options(): NLS character set cp9251 not found. Using previous one macturkish.
[  389.826924][T13853] ntfs: volume version 3.1.
[  389.854651][T13853] ntfs: (device loop7): ntfs_index_lookup(): Corrupt index.  Aborting lookup.
[  389.904807][T13853] ntfs: (device loop7): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed.
[  389.959537][T13853] ntfs: (device loop7): load_system_files(): Failed to mark quotas out of date.  Mounting read-only.  Run chkdsk.
[  390.713270][ T4276] Bluetooth: hci0: command 0x0405 tx timeout
[  390.921263][T13906] loop6: detected capacity change from 0 to 2048
[  391.040498][T13908] loop5: detected capacity change from 0 to 1024
[  391.053360][T13909] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  391.118910][T13908] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  391.645464][T13926] netlink: 'syz.5.3688': attribute type 3 has an invalid length.
[  391.747470][T13895] loop1: detected capacity change from 0 to 32768
[  391.913695][T13932] loop5: detected capacity change from 0 to 128
[  391.931776][T13913] loop7: detected capacity change from 0 to 32768
[  391.952388][T13895] XFS (loop1): Mounting V5 Filesystem
[  391.952776][T13932] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985
[  392.002311][T13895] XFS (loop1): Ending clean mount
[  392.005994][T13932] ; already mounted read-only
[  392.038816][T13895] XFS (loop1): Quotacheck needed: Please wait.
[  392.135724][T13932] hpfs: filesystem error: improperly stopped
[  392.141786][T13932] hpfs: You really don't want any checks? You are crazy...
[  392.184818][T13932] hpfs: hpfs_map_sector(): read error
[  392.205278][T13895] XFS (loop1): Quotacheck: Done.
[  392.221248][T13932] hpfs: code page support is disabled
[  392.238367][T13932] hpfs: hpfs_map_4sectors(): unaligned read
[  392.257578][T13932] hpfs: hpfs_map_4sectors(): unaligned read
[  392.276285][T13932] hpfs: filesystem error: unable to find root dir
[  392.376896][ T4279] XFS (loop1): Unmounting Filesystem
[  392.404623][T13945] loop6: detected capacity change from 0 to 4096
[  392.469040][T13948] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  392.494656][T13950] loop7: detected capacity change from 0 to 512
[  392.542665][T13950] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  392.617142][T13950] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3695: inode has both inline data and extents flags
[  392.669605][T13950] EXT4-fs (loop7): Remounting filesystem read-only
[  392.676441][T13950] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3695: couldn't read orphan inode 15 (err -117)
[  392.689347][T13950] EXT4-fs (loop7): Remounting filesystem read-only
[  392.696123][T13950] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  392.851176][T13950] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only
[  393.069771][ T8531] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /341/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  393.140563][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.153564][ T8531] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /341/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  393.239198][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.265891][ T8531] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  393.340577][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.350912][ T8531] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /341/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  393.380007][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.398022][ T8531] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /341/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  393.453224][ T5566] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  393.474849][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.481672][ T8531] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  393.501246][ T4318] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  393.525196][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.532368][ T8531] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /341/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  393.564065][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.570774][ T8531] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /341/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  393.632776][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.646167][ T5566] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.647864][ T8531] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  393.663261][ T5566] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  393.688208][ T8531] EXT4-fs (loop7): Remounting filesystem read-only
[  393.697435][ T8531] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /341/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  393.716022][ T5566] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  393.725193][ T4318] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.738493][ T5566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  393.738521][ T5566] usb 6-1: SerialNumber: syz
[  393.766135][ T4318] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.789988][ T4318] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  393.807152][ T4318] usb 7-1: config 0 interface 0 has no altsetting 0
[  393.814506][ T4318] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  393.823961][ T4318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.848761][ T4318] usb 7-1: config 0 descriptor??
[  393.913383][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  393.958017][ T5566] usb 6-1: 0:2 : does not exist
[  393.980339][ T5566] usb 6-1: 0:0: failed to get current value for ch 0 (-22)
[  393.998770][ T4970] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  394.034984][ T5566] usb 6-1: USB disconnect, device number 29
[  394.223398][ T4970] usb 2-1: Using ep0 maxpacket: 16
[  394.231971][ T4970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.244065][ T4970] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00
[  394.253422][ T4970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.255767][ T4459] udevd[4459]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  394.290402][ T4970] usb 2-1: config 0 descriptor??
[  394.295723][ T4318] magicmouse 0003:05AC:0265.003A: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0
[  394.309979][ T4318] magicmouse 0003:05AC:0265.003A: magicmouse input not registered
[  394.322311][ T4318] magicmouse: probe of 0003:05AC:0265.003A failed with error -12
[  394.515747][ T4318] usb 7-1: USB disconnect, device number 25
[  394.555452][ T4296] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  394.574083][ T4296] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.703927][ T4296] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  394.722213][ T4296] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.747096][T13980] loop5: detected capacity change from 0 to 256
[  394.755070][ T4970] cmedia_hs100b 0003:0D8C:0014.003B: unknown main item tag 0x0
[  394.762706][ T4970] cmedia_hs100b 0003:0D8C:0014.003B: unknown main item tag 0x0
[  394.777499][ T4970] cmedia_hs100b 0003:0D8C:0014.003B: unknown main item tag 0x0
[  394.790699][ T4970] cmedia_hs100b 0003:0D8C:0014.003B: unknown main item tag 0x0
[  394.799876][ T4970] cmedia_hs100b 0003:0D8C:0014.003B: unknown main item tag 0x0
[  394.813572][ T4970] cmedia_hs100b 0003:0D8C:0014.003B: unknown main item tag 0x0
[  394.874983][ T4970] cmedia_hs100b 0003:0D8C:0014.003B: hidraw0: USB HID v0.05 Device [HID 0d8c:0014] on usb-dummy_hcd.1-1/input0
[  394.910417][ T4296] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  394.952831][ T5577] usb 2-1: USB disconnect, device number 24
[  394.980658][ T4296] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.198209][T13981] fido_id[13981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  395.198423][ T4296] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.281397][ T4296] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.660015][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  395.719357][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  395.733795][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  395.743549][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  395.752624][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  395.760059][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  395.860652][T14003] loop5: detected capacity change from 0 to 256
[  395.982282][T14003] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  396.011950][ T4296] tipc: Left network mode
[  396.089524][T14003] exFAT-fs (loop5): hint_cluster is invalid (17)
[  396.614743][T13997] chnl_net:caif_netlink_parms(): no params data found
[  396.664350][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'.
[  396.853282][ T5202] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  397.063284][ T5202] usb 6-1: Using ep0 maxpacket: 8
[  397.094469][ T5202] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  397.133215][ T5202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.151473][ T5202] usb 6-1: Product: syz
[  397.176763][ T5202] usb 6-1: Manufacturer: syz
[  397.181517][ T5202] usb 6-1: SerialNumber: syz
[  397.218419][T13997] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.223585][ T5202] usb 6-1: config 0 descriptor??
[  397.233576][T13997] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.248133][T13997] device bridge_slave_0 entered promiscuous mode
[  397.253525][ T5202] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[  397.387272][T13997] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.399847][T13997] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.428899][T13997] device bridge_slave_1 entered promiscuous mode
[  397.522148][T13997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.630865][T13997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.643458][ T4327] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  397.843560][ T4327] usb 1-1: Using ep0 maxpacket: 8
[  397.848821][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[  397.871459][ T4327] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  397.881838][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.892494][ T5202] radio-usb-si4713: probe of 6-1:0.0 failed with error -71
[  397.901069][ T4327] usb 1-1: config 0 descriptor??
[  397.906505][ T5202] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  397.931218][ T5202] usb 6-1: USB disconnect, device number 30
[  398.003378][T13997] team0: Port device team_slave_0 added
[  398.016059][T13997] team0: Port device team_slave_1 added
[  398.338036][ T4327] magicmouse 0003:05AC:0269.003C: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0
[  398.448129][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3744'.
[  398.558657][ T4327] usb 1-1: USB disconnect, device number 40
[  398.679418][T14084] fido_id[14084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  399.033469][ T5577] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  399.043084][T13997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.050566][T13997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.110122][T13997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.175099][T13997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.182086][T13997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.243337][ T5577] usb 6-1: Using ep0 maxpacket: 32
[  399.252622][ T5577] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.298422][T13997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.305069][ T5577] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  399.405639][ T5577] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  399.442759][ T5577] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  399.468344][ T5577] usb 6-1: Product: syz
[  399.480470][ T5577] usb 6-1: Manufacturer: syz
[  399.517751][ T5577] hub 6-1:4.0: USB hub found
[  399.525850][ T4296] device hsr_slave_0 left promiscuous mode
[  399.542767][ T4296] device hsr_slave_1 left promiscuous mode
[  399.582511][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.611473][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.660950][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.691851][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.716839][ T4296] device hsr0 left promiscuous mode
[  399.722241][ T4296] bridge0: port 3(hsr0) entered disabled state
[  399.744137][ T5577] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  399.781722][ T4296] device bridge_slave_1 left promiscuous mode
[  399.809014][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.828922][ T4296] device bridge_slave_0 left promiscuous mode
[  399.836691][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.858665][ T5577] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0
[  399.896727][ T4296] device veth1_macvtap left promiscuous mode
[  399.900405][ T5577] hid-generic 0000:0000:0000.003D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  399.909199][ T4296] device veth0_macvtap left promiscuous mode
[  399.923391][ T4285] Bluetooth: hci0: command 0x041b tx timeout
[  399.938811][ T4296] device veth1_vlan left promiscuous mode
[  399.944945][ T4296] device veth0_vlan left promiscuous mode
[  400.148496][ T5577] usb 6-1: USB disconnect, device number 31
[  400.186421][T14124] fido_id[14124]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  400.200781][ T4296] bond1 (unregistering): Released all slaves
[  400.826771][T14136] loop1: detected capacity change from 0 to 32768
[  400.921705][T14136] XFS (loop1): Mounting V5 Filesystem
[  400.984176][T14136] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  401.018883][T14136] XFS (loop1): Starting recovery (logdev: internal)
[  401.055344][T14136] XFS (loop1): Ending recovery (logdev: internal)
[  401.072024][T14136] XFS (loop1): Quotacheck needed: Please wait.
[  401.152908][T14136] XFS (loop1): Quotacheck: Done.
[  401.275678][ T4279] XFS (loop1): Unmounting Filesystem
[  401.721127][ T4970] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  401.825422][ T4296] team0 (unregistering): Port device team_slave_1 removed
[  401.884754][ T4296] team0 (unregistering): Port device team_slave_0 removed
[  401.916730][ T4970] usb 6-1: Using ep0 maxpacket: 16
[  401.924259][ T4970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  401.947993][ T4970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  401.959836][ T4970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  401.969597][ T4970] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  401.979347][ T4970] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  402.005412][ T4285] Bluetooth: hci0: command 0x040f tx timeout
[  402.013714][ T4970] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  402.022959][ T4970] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  402.031621][ T4970] usb 6-1: Manufacturer: syz
[  402.037263][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.046706][ T4970] usb 6-1: config 0 descriptor??
[  402.106645][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.403275][ T4970] rc_core: IR keymap rc-hauppauge not found
[  402.409227][ T4970] Registered IR keymap rc-empty
[  402.414920][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.453389][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.501988][ T4970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  402.528158][ T4970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41
[  402.550936][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.597469][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.604148][T14168] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3773'.
[  402.657931][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.705434][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.728055][ T4296] bond0 (unregistering): Released all slaves
[  402.753496][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.793290][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.837149][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.886387][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  402.943845][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  403.003375][ T4970] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  403.044671][ T4970] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  403.055854][T13997] device hsr_slave_0 entered promiscuous mode
[  403.084031][ T4970] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[  403.110760][ T4970] usb 6-1: USB disconnect, device number 32
[  403.151307][T13997] device hsr_slave_1 entered promiscuous mode
[  403.167437][T13997] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  403.224031][T13997] Cannot create hsr debugfs directory
[  404.064901][T13997] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  404.073324][ T4285] Bluetooth: hci0: command 0x0419 tx timeout
[  404.105706][T13997] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  404.149951][T13997] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  404.156870][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  404.269820][T13997] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  404.346017][T14211] loop6: detected capacity change from 0 to 128
[  404.512696][T14211] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  404.597571][T14188] loop5: detected capacity change from 0 to 40427
[  404.626406][T14211] ext4 filesystem being mounted at /503/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  404.671362][T14188] F2FS-fs (loop5): Found nat_bits in checkpoint
[  404.679841][T13997] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.773565][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  404.788103][T14230] autofs4:pid:14230:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e)
[  404.792630][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  404.834715][T14188] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  404.844321][ T7535] EXT4-fs (loop6): unmounting filesystem.
[  404.868737][T13997] 8021q: adding VLAN 0 to HW filter on device team0
[  404.950665][T14188] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  404.958590][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  404.990040][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  405.039806][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.047022][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.121883][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  405.153943][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  405.174208][ T4562] syz-executor: attempt to access beyond end of device
[  405.174208][ T4562] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  405.202918][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  405.265663][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.272791][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.343514][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  405.394093][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  405.470632][T13997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  405.510096][T13997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  405.568589][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  405.598734][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  405.662310][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  405.704217][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  405.734491][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  405.761642][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  405.783776][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  405.802632][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  405.845406][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  405.864094][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  405.873325][ T5566] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  406.063298][ T5566] usb 1-1: Using ep0 maxpacket: 32
[  406.072727][ T5566] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5
[  406.123439][ T5566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.131520][ T5566] usb 1-1: Product: syz
[  406.186959][ T5566] usb 1-1: Manufacturer: syz
[  406.191704][ T5566] usb 1-1: SerialNumber: syz
[  406.219745][ T5566] usb 1-1: config 0 descriptor??
[  406.250443][ T5566] hub 1-1:0.0: bad descriptor, ignoring hub
[  406.273441][ T5566] hub: probe of 1-1:0.0 failed with error -5
[  406.280882][ T5566] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  406.459337][ T5566] gspca_vc032x: reg_w err -71
[  406.464479][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.469794][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.503188][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.508540][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.529314][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.542107][T14280] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3810'.
[  406.558306][T14280] netlink: 'syz.6.3810': attribute type 3 has an invalid length.
[  406.561265][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.603221][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.608592][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.623573][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.643436][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.648830][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.663582][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.673074][T14282] loop1: detected capacity change from 0 to 1024
[  406.678223][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  406.703736][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.709215][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.722959][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  406.732172][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.758226][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.763910][T13997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.781196][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.810553][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.828378][T14290] xt_hashlimit: max too large, truncated to 1048576
[  406.833194][ T5566] gspca_vc032x: I2c Bus Busy Wait 00
[  406.848170][ T5566] gspca_vc032x: Unknown sensor...
[  406.874925][ T5566] vc032x: probe of 1-1:0.0 failed with error -22
[  406.937570][ T5566] usb 1-1: USB disconnect, device number 41
[  407.027864][ T4375] hfsplus: b-tree write err: -5, ino 4
[  407.237756][T14299] loop1: detected capacity change from 0 to 2048
[  407.304863][T14299] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  407.377202][T14307] loop6: detected capacity change from 0 to 128
[  407.383016][T14299] NILFS (loop1): mounting unchecked fs
[  407.433706][ T4458] udevd[4458]: incorrect nilfs2 checksum on /dev/loop1
[  407.467807][T14299] NILFS (loop1): recovery complete
[  407.523639][T14312] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  407.721576][T14310] loop5: detected capacity change from 0 to 8192
[  407.781811][T14310] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  407.907377][T14310] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  407.924897][T14310] REISERFS (device loop5): using ordered data mode
[  407.933412][T14310] reiserfs: using flush barriers
[  407.979595][T14310] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  408.041658][T14310] REISERFS (device loop5): checking transaction log (loop5)
[  408.063040][T14310] REISERFS (device loop5): Using tea hash to sort names
[  408.063428][T14310] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  408.182312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  408.183070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  408.270684][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  408.271345][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  408.272113][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  408.272576][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  408.282870][T13997] device veth0_vlan entered promiscuous mode
[  408.304127][T13997] device veth1_vlan entered promiscuous mode
[  408.359404][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  408.360076][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  408.360572][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  408.361061][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  408.372661][T13997] device veth0_macvtap entered promiscuous mode
[  408.384795][T13997] device veth1_macvtap entered promiscuous mode
[  408.395550][T14330] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3824'.
[  408.395876][T14330] unsupported nlmsg_type 40
[  408.458684][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.559258][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.574780][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.599169][T14336] loop1: detected capacity change from 0 to 256
[  408.607722][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.634374][T14336] exfat: Deprecated parameter 'namecase'
[  408.640532][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.674347][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.728033][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.739737][T14336] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  408.761749][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.834869][T13997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.874419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  408.930150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  408.969450][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  409.008796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  409.045460][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.070798][T14350] loop1: detected capacity change from 0 to 128
[  409.080279][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.092783][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.107148][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.127649][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.160433][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.183208][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.203558][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.216297][T13997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.233736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  409.274272][ T5577] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  409.292831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  409.337598][T13997] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.367631][T13997] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.384453][T13997] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.397585][T13997] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.473273][ T5577] usb 1-1: Using ep0 maxpacket: 8
[  409.502721][ T5577] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  409.544335][ T5577] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.561904][ T4654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.567437][ T5577] usb 1-1: Product: syz
[  409.599866][ T4654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.624728][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  409.633699][ T5577] usb 1-1: Manufacturer: syz
[  409.650604][ T5577] usb 1-1: SerialNumber: syz
[  409.702155][ T5577] usb 1-1: config 0 descriptor??
[  409.709972][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.753324][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.869666][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  409.935795][ T5577] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  410.234786][T12587] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  410.348093][ T5577] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  410.363698][ T5577] usb 1-1: USB disconnect, device number 42
[  410.433314][T12587] usb 7-1: Using ep0 maxpacket: 16
[  410.442379][T12587] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  410.487619][T12587] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.527767][T12587] usb 7-1: Product: syz
[  410.531764][T14394] loop1: detected capacity change from 0 to 1024
[  410.531994][T12587] usb 7-1: Manufacturer: syz
[  410.553776][T12587] usb 7-1: SerialNumber: syz
[  410.571027][T12587] usb 7-1: config 0 descriptor??
[  410.581801][T14392] loop8: detected capacity change from 0 to 4096
[  410.583388][T12587] visor 7-1:0.0: Sony Clie 3.5 converter detected
[  410.644410][T14394] hfsplus: walked past end of dir
[  411.016655][T12587] usb 7-1: clie_3_5_startup: get interface number bad return length: 0
[  411.016764][T12587] visor: probe of 7-1:0.0 failed with error -5
[  411.291412][ T4327] usb 7-1: USB disconnect, device number 26
[  411.471339][T14418] loop5: detected capacity change from 0 to 512
[  411.579708][T14418] EXT4-fs (loop5): orphan cleanup on readonly fs
[  411.579774][T14425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3860'.
[  411.647261][T14418] EXT4-fs error (device loop5): ext4_quota_enable:7039: comm syz.5.3857: Bad quota inum: 11, type: 1
[  411.778849][T14418] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix.
[  411.814890][T14418] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  411.821671][T14418] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  412.034778][ T4562] EXT4-fs (loop5): unmounting filesystem.
[  412.283632][T12587] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  412.347709][   T26] audit: type=1326 audit(1769513747.740:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.8.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0bd9aeb9 code=0x7ffc0000
[  412.463911][   T26] audit: type=1326 audit(1769513747.750:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.8.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1c0bd9aeb9 code=0x7ffc0000
[  412.475013][T12587] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  412.563234][   T26] audit: type=1326 audit(1769513747.750:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.8.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0bd9aeb9 code=0x7ffc0000
[  412.578421][T12587] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  412.692786][T12587] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  412.695343][   T26] audit: type=1326 audit(1769513747.750:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.8.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0bd9aeb9 code=0x7ffc0000
[  412.724662][T12587] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.800223][T12587] usb 7-1: config 0 descriptor??
[  412.820433][T14443] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  412.883346][   T26] audit: type=1326 audit(1769513747.760:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.8.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f1c0bd9aeb9 code=0x7ffc0000
[  412.986108][   T26] audit: type=1326 audit(1769513747.760:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.8.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0bd9aeb9 code=0x7ffc0000
[  413.090842][   T26] audit: type=1326 audit(1769513747.760:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.8.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0bd9aeb9 code=0x7ffc0000
[  413.269352][T12587] nzxt-kraken2 0003:1E71:170E.003E: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.6-1/input0
[  413.346903][T14483] trusted_key: encrypted_key: insufficient parameters specified
[  413.614218][T12589] usb 7-1: USB disconnect, device number 27
[  413.630540][T14489] device macsec2 entered promiscuous mode
[  413.692308][T14486] fido_id[14486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  413.734082][T14489] device virt_wifi0 entered promiscuous mode
[  414.087129][T14476] loop8: detected capacity change from 0 to 32768
[  414.500511][T14515] loop8: detected capacity change from 0 to 2048
[  414.551615][T14515] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  414.589490][T14515] NILFS (loop8): mounting unchecked fs
[  414.668898][T14515] NILFS (loop8): recovery complete
[  414.702378][T14519] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  414.723411][ T5202] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  414.925044][ T5202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  414.950086][ T5202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  415.019942][ T5202] usb 1-1: New USB device found, idVendor=056a, idProduct=0219, bcdDevice= 0.f7
[  415.065223][ T5202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.099607][ T5202] usb 1-1: config 0 descriptor??
[  415.264865][T14508] loop1: detected capacity change from 0 to 32768
[  415.471160][T14508] XFS (loop1): Mounting V5 Filesystem
[  415.541171][ T5202] wacom 0003:056A:0219.003F: Unknown device_type for 'HID 056a:0219'. Ignoring.
[  415.585416][T14508] XFS (loop1): Ending clean mount
[  415.598653][T14508] XFS (loop1): Quotacheck needed: Please wait.
[  415.744093][ T4327] usb 1-1: USB disconnect, device number 43
[  415.748733][T14508] XFS (loop1): Quotacheck: Done.
[  415.771951][   T26] audit: type=1800 audit(1769513751.160:282): pid=14508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3889" name="bus" dev="loop1" ino=6155 res=0 errno=0
[  415.889211][ T4279] XFS (loop1): Unmounting Filesystem
[  416.022155][T14561] tmpfs: Bad value for 'mpol'
[  416.412455][T14575] loop8: detected capacity change from 0 to 1024
[  416.497279][T14551] loop5: detected capacity change from 0 to 32768
[  416.658901][   T46] hfsplus: b-tree write err: -5, ino 4
[  416.679767][ T4562] non-latin1 character 0x2e66 found in JFS file name
[  416.723470][ T4562] mount with iocharset=utf8 to access
[  417.244430][  T107] ------------[ cut here ]------------
[  417.250769][  T107] WARNING: CPU: 1 PID: 107 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0
[  417.259662][  T107] Modules linked in:
[  417.263647][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0
[  417.270860][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.281208][  T107] RIP: 0010:dbAdjTree+0x448/0x4d0
[  417.286303][  T107] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c
[  417.306810][  T107] RSP: 0018:ffffc9000254f668 EFLAGS: 00010293
[  417.313039][  T107] RAX: ffffffff82f04438 RBX: ffff8880287e4010 RCX: ffff88801af30000
[  417.321097][  T107] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  417.329275][  T107] RBP: 0000000000020056 R08: ffffea0000a1f907 R09: 1ffffd4000143f20
[  417.337341][  T107] R10: dffffc0000000000 R11: fffff94000143f21 R12: ffff8880287e4018
[  417.345399][  T107] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  417.353535][  T107] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  417.362515][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  417.369187][  T107] CR2: 00007fa705000eb8 CR3: 0000000057665000 CR4: 00000000003506e0
[  417.377226][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  417.385312][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  417.393360][  T107] Call Trace:
[  417.396717][  T107]  <TASK>
[  417.399673][  T107]  ? lock_page+0x2b0/0x2b0
[  417.404271][  T107]  dbJoin+0x238/0x300
[  417.408298][  T107]  ? PageHeadHuge+0x8f/0x1c0
[  417.412973][  T107]  dbFreeBits+0x4e1/0xda0
[  417.417501][  T107]  dbFree+0x32e/0x640
[  417.421516][  T107]  txFreeMap+0x9e2/0xde0
[  417.425143][T14601] loop6: detected capacity change from 0 to 2048
[  417.425893][  T107]  ? do_raw_spin_unlock+0x11d/0x230
[  417.437844][  T107]  xtTruncate+0xcc0/0x2d10
[  417.442311][  T107]  ? xtInitRoot+0x160/0x160
[  417.446924][  T107]  ? mapping_evict_folio+0x520/0x520
[  417.452253][  T107]  ? __lock_acquire+0x7d10/0x7d10
[  417.457486][  T107]  ? do_raw_spin_lock+0x128/0x2f0
[  417.462711][  T107]  ? memset+0x1e/0x40
[  417.466804][  T107]  ? __dquot_initialize+0x213/0xcd0
[  417.472047][  T107]  jfs_free_zero_link+0x358/0x4b0
[  417.477156][  T107]  ? inode_wait_for_writeback+0x1df/0x220
[  417.482955][  T107]  ? jfs_write_failed+0x190/0x190
[  417.488110][  T107]  ? sb_clear_inode_writeback+0x3c0/0x3c0
[  417.493908][  T107]  ? do_raw_spin_lock+0x128/0x2f0
[  417.498998][  T107]  ? bit_waitqueue+0x30/0x30
[  417.503673][  T107]  jfs_evict_inode+0x359/0x430
[  417.508476][  T107]  ? evict+0x4c3/0x8d0
[  417.512600][  T107]  ? jfs_write_inode+0x220/0x220
[  417.517619][  T107]  evict+0x4c9/0x8d0
[  417.521552][  T107]  ? proc_nr_inodes+0x2f0/0x2f0
[  417.526514][  T107]  ? do_raw_spin_unlock+0x11d/0x230
[  417.531833][  T107]  ? _raw_spin_unlock+0x24/0x40
[  417.536756][  T107]  ? iput+0x768/0x980
[  417.540781][  T107]  jfs_lazycommit+0x425/0xa70
[  417.545713][  T107]  ? txFreelock+0x5a0/0x5a0
[  417.550245][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  417.556219][  T107]  ? do_task_dead+0xd0/0xd0
[  417.560763][  T107]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  417.566763][  T107]  ? __kthread_parkme+0x162/0x1c0
[  417.571858][  T107]  kthread+0x29d/0x330
[  417.576008][  T107]  ? txFreelock+0x5a0/0x5a0
[  417.580579][  T107]  ? kthread_blkcg+0xd0/0xd0
[  417.585243][  T107]  ret_from_fork+0x1f/0x30
[  417.589817][  T107]  </TASK>
[  417.592947][  T107] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  417.600403][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0
[  417.607596][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.617752][  T107] Call Trace:
[  417.621027][  T107]  <TASK>
[  417.623952][  T107]  dump_stack_lvl+0x188/0x24e
[  417.628638][  T107]  ? memcpy+0x3c/0x60
[  417.632615][  T107]  ? show_regs_print_info+0x12/0x12
[  417.637809][  T107]  ? load_image+0x400/0x400
[  417.642330][  T107]  panic+0x2e5/0x730
[  417.646249][  T107]  ? bpf_jit_dump+0xd0/0xd0
[  417.651047][  T107]  ? ret_from_fork+0x1f/0x30
[  417.655725][  T107]  __warn+0x2f8/0x4f0
[  417.659705][  T107]  ? dbAdjTree+0x448/0x4d0
[  417.664141][  T107]  ? dbAdjTree+0x448/0x4d0
[  417.668564][  T107]  report_bug+0x2ba/0x4f0
[  417.673153][  T107]  ? dbAdjTree+0x448/0x4d0
[  417.677583][  T107]  handle_bug+0x3a/0x70
[  417.681737][  T107]  exc_invalid_op+0x16/0x40
[  417.686242][  T107]  asm_exc_invalid_op+0x16/0x20
[  417.691101][  T107] RIP: 0010:dbAdjTree+0x448/0x4d0
[  417.696134][  T107] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c
[  417.716012][  T107] RSP: 0018:ffffc9000254f668 EFLAGS: 00010293
[  417.722073][  T107] RAX: ffffffff82f04438 RBX: ffff8880287e4010 RCX: ffff88801af30000
[  417.730062][  T107] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  417.738213][  T107] RBP: 0000000000020056 R08: ffffea0000a1f907 R09: 1ffffd4000143f20
[  417.746196][  T107] R10: dffffc0000000000 R11: fffff94000143f21 R12: ffff8880287e4018
[  417.754166][  T107] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  417.762137][  T107]  ? dbAdjTree+0x448/0x4d0
[  417.766556][  T107]  ? dbAdjTree+0x448/0x4d0
[  417.770966][  T107]  ? lock_page+0x2b0/0x2b0
[  417.775387][  T107]  dbJoin+0x238/0x300
[  417.779458][  T107]  ? PageHeadHuge+0x8f/0x1c0
[  417.784041][  T107]  dbFreeBits+0x4e1/0xda0
[  417.788372][  T107]  dbFree+0x32e/0x640
[  417.792371][  T107]  txFreeMap+0x9e2/0xde0
[  417.796631][  T107]  ? do_raw_spin_unlock+0x11d/0x230
[  417.801834][  T107]  xtTruncate+0xcc0/0x2d10
[  417.806286][  T107]  ? xtInitRoot+0x160/0x160
[  417.810817][  T107]  ? mapping_evict_folio+0x520/0x520
[  417.816181][  T107]  ? __lock_acquire+0x7d10/0x7d10
[  417.821237][  T107]  ? do_raw_spin_lock+0x128/0x2f0
[  417.826736][  T107]  ? memset+0x1e/0x40
[  417.830985][  T107]  ? __dquot_initialize+0x213/0xcd0
[  417.836253][  T107]  jfs_free_zero_link+0x358/0x4b0
[  417.841311][  T107]  ? inode_wait_for_writeback+0x1df/0x220
[  417.847171][  T107]  ? jfs_write_failed+0x190/0x190
[  417.852202][  T107]  ? sb_clear_inode_writeback+0x3c0/0x3c0
[  417.857944][  T107]  ? do_raw_spin_lock+0x128/0x2f0
[  417.862997][  T107]  ? bit_waitqueue+0x30/0x30
[  417.867634][  T107]  jfs_evict_inode+0x359/0x430
[  417.872425][  T107]  ? evict+0x4c3/0x8d0
[  417.876754][  T107]  ? jfs_write_inode+0x220/0x220
[  417.881914][  T107]  evict+0x4c9/0x8d0
[  417.885863][  T107]  ? proc_nr_inodes+0x2f0/0x2f0
[  417.890736][  T107]  ? do_raw_spin_unlock+0x11d/0x230
[  417.895941][  T107]  ? _raw_spin_unlock+0x24/0x40
[  417.900817][  T107]  ? iput+0x768/0x980
[  417.904824][  T107]  jfs_lazycommit+0x425/0xa70
[  417.909527][  T107]  ? txFreelock+0x5a0/0x5a0
[  417.914032][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  417.919926][  T107]  ? do_task_dead+0xd0/0xd0
[  417.924473][  T107]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  417.930401][  T107]  ? __kthread_parkme+0x162/0x1c0
[  417.935470][  T107]  kthread+0x29d/0x330
[  417.939550][  T107]  ? txFreelock+0x5a0/0x5a0
[  417.944139][  T107]  ? kthread_blkcg+0xd0/0xd0
[  417.948734][  T107]  ret_from_fork+0x1f/0x30
[  417.953154][  T107]  </TASK>
[  417.956815][  T107] Kernel Offset: disabled
[  417.961232][  T107] Rebooting in 86400 seconds..