last executing test programs:

4.654739562s ago: executing program 4 (id=968):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="2b000e006807"], 0x48}}, 0x0)

4.520071937s ago: executing program 4 (id=970):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000380)=0xff)

4.452947265s ago: executing program 4 (id=972):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}}, 0x0)

4.335818918s ago: executing program 1 (id=973):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0)

4.335399088s ago: executing program 4 (id=974):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x451, &(0x7f0000000480)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00')

4.284220244s ago: executing program 1 (id=975):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

4.125125803s ago: executing program 1 (id=976):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodatasum}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001c80)={0x0, 0x4, 0x7ff, 0x2000000})

3.907675408s ago: executing program 4 (id=977):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff009}]})

2.770788159s ago: executing program 3 (id=989):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0)

2.703642097s ago: executing program 4 (id=991):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00')
getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c)
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

2.501363351s ago: executing program 32 (id=991):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00')
getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c)
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

2.475268654s ago: executing program 1 (id=993):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000140)={0x0, 0x11, 0x1, "99"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2.474755754s ago: executing program 3 (id=995):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8b, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@bsdgroups}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@prjquota}, {@noload}, {@block_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

2.393915573s ago: executing program 2 (id=996):
r0 = socket$inet6(0xa, 0x80803, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1}}, 0xe8)
connect$inet6(r0, &(0x7f00000000c0), 0x1c)

2.136278713s ago: executing program 2 (id=997):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x12}, 0x18)

2.050640693s ago: executing program 0 (id=998):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)

2.025724056s ago: executing program 0 (id=999):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001940)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000001900)="27032707590200000000002f1eafbcf706e10500000086ddffff1104ee162bd4b8bf4a82f6184b8a0000000800000000190000dcccd30c000000000000000000", 0x40}, {&(0x7f0000000440)="2bf805d7119496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b58144028420f659013866da0766dd1b8997b8e6584f5cb1076afdde0595a87f7349612eb54ded1dafb6fc6718280b20d113329a4751195ae95492356b1770341bb5ad43bc2631", 0x51}, {&(0x7f0000000200)="0b20dfc5cf657be121b2513a1c13a44e7167aa48d7ad20d6e64d6f2cfe37dbbfba6effbf208610802a824eb98292e0e894d75de383c1d4a1b982c350676fc5093607fc170eee72c2d7631d", 0x4b}, {&(0x7f0000000700)="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", 0x42d}], 0x6}, 0x0)

1.99090852s ago: executing program 0 (id=1000):
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083598082e59a49e8aefc0b45ff810500000000070058000b480400945f640094272d7061d328b92d000000004c8537db9600f854c8a4487c752f7020847ff67dcae59ba172a685d0373f2cfc597650b0f6f46c3dff31a28a7d4c9846ca547d6196ae21463f928a6db09257485ce2b118c97338a50c1c5821d29fd3dfe75000000000000000b84a425792b472b240abfda8dec7fedf4a5b1b", 0xa1}], 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0])

1.767644146s ago: executing program 0 (id=1001):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000000000000020000000800020005000000ce0001"], 0x114}}, 0x0)

1.766142786s ago: executing program 3 (id=1002):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28)

1.675652556s ago: executing program 2 (id=1003):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, 0x0)

1.675017126s ago: executing program 0 (id=1012):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000004c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, 0xffffffffffffffff)

1.548987321s ago: executing program 0 (id=1004):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000a80), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, @struct={0x4}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {0x7fff, @struct={0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, @struct={0x0, 0xb31}, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, @struct={0x1, 0x8000}, 0x0, 0x0, [0x2, 0x0, 0x0, 0x8000]}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5000940a, 0x0)

1.535705383s ago: executing program 2 (id=1005):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0xaeb, &(0x7f00000012c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0)

1.379833581s ago: executing program 3 (id=1006):
syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="006d99bfb563f2e593485eac32c31bad659fdd3f7c72ce83897543d617da7d8ad7169638d94b29a0c17cd33e65e282c739f95ef456a2c5f981953e51b16b5f505fd6e2c41621b689914ef85c136390fc9077a3279a13836364e2fe8595b3731709698d1fcba9fbb25451b0bfcde918a90f5b3b65aee41b9c7b161bf92a8151c056b629d47d8e758cdcac9938c2ee0d4ba25dcf63ea44d64eca4357e5718a36f7ce13f0190ce5d7"], 0x1, 0x646, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6)

1.12170923s ago: executing program 3 (id=1007):
r0 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xb}, 0x20)
close(r0)

1.061869807s ago: executing program 2 (id=1008):
ioperm(0x0, 0x7, 0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000140)=""/84, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

863.64194ms ago: executing program 3 (id=1009):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0xfeff)

778.58052ms ago: executing program 2 (id=1010):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000020c0)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

111.796297ms ago: executing program 1 (id=1011):
r0 = syz_io_uring_setup(0xefd, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=1013):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000001440)={[{@nls={'nls', 0x3d, 'koi8-ru'}}, {@barrier}, {@uid}, {@gid}, {@barrier}, {@barrier}]}, 0x3, 0x6ab, &(0x7f0000005d00)="$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")
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000280)=""/4096, 0x9005)

kernel console output (not intermixed with test programs):

o keep mac addresses unique to avoid problems!
[   67.212043][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.224923][ T4171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.234941][ T4171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.244016][ T4171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.253014][ T4171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.286430][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.298120][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.311106][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.321612][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.333953][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.343841][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.352213][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.361250][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.371089][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.382920][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.393267][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.402393][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.411599][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.420334][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.429354][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.438358][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.472986][ T4172] device veth0_vlan entered promiscuous mode
[   67.482588][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.493244][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.504044][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.514572][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.525628][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.544544][ T4169] device veth0_vlan entered promiscuous mode
[   67.566780][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.579292][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.589245][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.598324][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.609257][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.619117][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.628568][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.637772][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.670624][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.680349][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.703290][ T4172] device veth1_vlan entered promiscuous mode
[   67.720641][ T4169] device veth1_vlan entered promiscuous mode
[   67.761099][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.771745][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.783789][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.796076][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.804578][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.840318][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.851008][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.859464][ T4217] Bluetooth: hci0: command 0x040f tx timeout
[   67.864176][ T4172] device veth0_macvtap entered promiscuous mode
[   67.897064][ T4172] device veth1_macvtap entered promiscuous mode
[   67.928421][ T4169] device veth0_macvtap entered promiscuous mode
[   67.940821][ T4210] Bluetooth: hci4: command 0x040f tx timeout
[   67.940913][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.962676][ T4210] Bluetooth: hci3: command 0x040f tx timeout
[   67.975326][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.985251][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.996129][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.999844][ T4210] Bluetooth: hci1: command 0x040f tx timeout
[   68.008147][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.010624][ T4210] Bluetooth: hci2: command 0x040f tx timeout
[   68.025946][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.034683][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.047504][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.050094][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.055464][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.071814][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.090136][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.101490][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.111448][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.121981][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.133734][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.144325][ T4169] device veth1_macvtap entered promiscuous mode
[   68.156949][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.164943][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.181387][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.189944][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.198384][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.206266][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.214620][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.223859][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.252937][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.265187][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.275724][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.286947][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.297105][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.307881][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.317996][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.328777][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.341968][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.350542][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.351895][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.370762][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.375722][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.380968][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.401002][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.412570][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.432128][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.443764][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.464520][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.472901][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.482155][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.491223][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.502324][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.513266][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.530366][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.540982][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.551988][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.563451][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.574951][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.607594][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.618257][ T4244] loop3: detected capacity change from 0 to 1024
[   68.629559][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.641482][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.658165][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.669139][ T4244] =======================================================
[   68.669139][ T4244] WARNING: The mand mount option has been deprecated and
[   68.669139][ T4244]          and is ignored by this kernel. Remove the mand
[   68.669139][ T4244]          option from the mount to silence this warning.
[   68.669139][ T4244] =======================================================
[   68.675194][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.717644][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.727047][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.742933][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.746880][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.759166][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.780569][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.791834][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.824039][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.834041][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.844175][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.853837][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.872612][  T144] hfsplus: b-tree write err: -5, ino 4
[   69.118051][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.129734][ T4251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6'.
[   69.140375][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.185360][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.217092][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.232094][  T731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.239141][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.273601][  T731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.302647][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.323979][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.355574][  T731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.390891][  T731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.453290][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.682506][ T4272] loop2: detected capacity change from 0 to 64
[   69.745110][ T4262] loop3: detected capacity change from 0 to 8192
[   69.832187][ T4262] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   69.858987][ T4262] REISERFS (device loop3): using ordered data mode
[   69.865532][ T4262] reiserfs: using flush barriers
[   69.884672][ T4262] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   69.902184][ T4262] REISERFS (device loop3): checking transaction log (loop3)
[   69.936875][ T4214] Bluetooth: hci0: command 0x0419 tx timeout
[   70.017943][ T4214] Bluetooth: hci1: command 0x0419 tx timeout
[   70.061001][ T4214] Bluetooth: hci3: command 0x0419 tx timeout
[   70.091830][ T4214] Bluetooth: hci4: command 0x0419 tx timeout
[   70.124375][ T2303] Bluetooth: hci2: command 0x0419 tx timeout
[   70.143858][ T4262] REISERFS (device loop3): Using tea hash to sort names
[   70.168695][ T4262] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   70.215375][ T4281] loop0: detected capacity change from 0 to 4096
[   70.277610][ T4283] loop2: detected capacity change from 0 to 4096
[   70.401677][ T4283] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   70.569885][ T4267] loop1: detected capacity change from 0 to 32768
[   70.579071][ T4281] ntfs3: loop0: failed to convert "0080" to maccroatian
[   70.591165][ T4277] loop4: detected capacity change from 0 to 32768
[   70.611495][ T4281] ntfs3: loop0: failed to convert name for inode 1e.
[   70.642210][ T4267] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.13 (4267)
[   70.715948][ T4277] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.16 (4277)
[   70.728708][ T4267] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   70.754111][ T4267] BTRFS info (device loop1): setting nodatasum
[   70.774829][ T4267] BTRFS info (device loop1): enabling auto defrag
[   70.806670][ T4267] BTRFS info (device loop1): disabling tree log
[   70.812958][ T4267] BTRFS info (device loop1): using free space tree
[   70.897410][ T4267] BTRFS info (device loop1): has skinny extents
[   71.000649][ T4300] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   71.022881][ T4300] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem
[   71.141969][ T4322] loop0: detected capacity change from 0 to 164
[   71.195668][ T4267] BTRFS info (device loop1): enabling ssd optimizations
[   71.219891][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.226633][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.263501][ T4322] rock: corrupted directory entry. extent=41, offset=65536, size=8
[   71.925884][ T4370] netlink: 'syz.3.48': attribute type 5 has an invalid length.
[   71.974862][ T4372] loop4: detected capacity change from 0 to 764
[   72.109425][ T4372] rock: directory entry would overflow storage
[   72.115625][ T4372] rock: sig=0x4654, size=5, remaining=4
[   72.344015][ T4398] UBIFS error (pid: 4398): cannot open "./file0", error -22
[   72.435329][ T4405] loop1: detected capacity change from 0 to 256
[   72.518348][ T4405] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   72.542575][ T4413] loop4: detected capacity change from 0 to 8
[   72.546628][   T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   72.698861][ T4415] loop3: detected capacity change from 0 to 2048
[   72.715848][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   72.775871][ T4415] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   72.799027][ T4415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.832328][   T26] audit: type=1800 audit(1730179822.926:2): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.68" name="file1" dev="loop4" ino=5 res=0 errno=0
[   72.916767][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.936947][ T4422] loop1: detected capacity change from 0 to 4096
[   72.946862][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.966936][   T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   72.986762][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.017981][   T21] usb 1-1: config 0 descriptor??
[   73.042640][ T4422] ntfs: volume version 3.1.
[   73.529453][   T21] lg-g15 0003:046D:C222.0001: unbalanced delimiter at end of report description
[   73.586200][   T21] lg-g15: probe of 0003:046D:C222.0001 failed with error -22
[   73.810834][   T21] usb 1-1: USB disconnect, device number 2
[   73.812819][ T4442] loop3: detected capacity change from 0 to 4096
[   73.899661][ T4442] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   74.083132][ T4442] ntfs3: loop3: ino=5, "/" directory corrupted
[   74.116883][ T4442] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   74.528436][ T4461] loop0: detected capacity change from 0 to 64
[   74.613358][ T4461] hfs: small file entry
[   74.692749][   T26] audit: type=1326 audit(1730179824.786:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.2.91" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65858c5719 code=0x0
[   74.759363][ T4450] loop4: detected capacity change from 0 to 32768
[   74.851360][ T4470] loop1: detected capacity change from 0 to 1024
[   74.852769][ T4468] loop0: detected capacity change from 0 to 4096
[   74.917307][ T4450] JBD2: Ignoring recovery information on journal
[   74.978537][ T4468] ntfs: volume version 3.1.
[   74.980205][ T4455] loop3: detected capacity change from 0 to 32768
[   74.995041][ T4470] EXT4-fs (loop1): INFO: recovery required on readonly filesystem
[   75.016736][ T4470] EXT4-fs (loop1): write access will be enabled during recovery
[   75.025589][ T4470] JBD2: no valid journal superblock found
[   75.032421][ T4470] EXT4-fs (loop1): error loading journal
[   75.096529][ T4455] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   75.154483][ T4450] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   75.166055][ T4455] JBD2: Ignoring recovery information on journal
[   75.300612][ T4450] (syz.4.84,4450,0):ocfs2_group_extend:306 ERROR: The disk is too old and small. Force to do offline resize.
[   75.327373][ T4455] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   75.380479][ T4172] ocfs2: Unmounting device (7,4) on (node local)
[   75.742788][ T4174] ocfs2: Unmounting device (7,3) on (node local)
[   75.895358][ T4497] rdma_op ffff88807d5519f0 conn xmit_rdma 0000000000000000
[   76.118082][ T4512] syz.1.111 (4512): /proc/4511/oom_adj is deprecated, please use /proc/4511/oom_score_adj instead.
[   76.522073][ T4547] loop2: detected capacity change from 0 to 256
[   76.626616][   T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.649253][ T4547] FAT-fs (loop2): Directory bread(block 64) failed
[   76.664453][ T4547] FAT-fs (loop2): Directory bread(block 65) failed
[   76.683958][ T4547] FAT-fs (loop2): Directory bread(block 66) failed
[   76.694518][ T4547] FAT-fs (loop2): Directory bread(block 67) failed
[   76.710812][ T4547] FAT-fs (loop2): Directory bread(block 68) failed
[   76.719270][ T4547] FAT-fs (loop2): Directory bread(block 69) failed
[   76.732711][ T4547] FAT-fs (loop2): Directory bread(block 70) failed
[   76.761807][ T4547] FAT-fs (loop2): Directory bread(block 71) failed
[   76.796665][ T4547] FAT-fs (loop2): Directory bread(block 72) failed
[   76.826610][ T2303] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   76.830639][ T4547] FAT-fs (loop2): Directory bread(block 73) failed
[   76.841876][ T4561] loop1: detected capacity change from 0 to 1024
[   76.877014][   T21] usb 5-1: Using ep0 maxpacket: 8
[   76.953239][ T4561] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nolazytime,dioread_lock,norecovery,errors=remount-ro,lazytime,stripe=0x0000000000000080,usrquota,noauto_da_alloc,. Quota mode: writeback.
[   76.996965][   T21] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   77.007970][   T21] usb 5-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   77.015108][ T4561] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz.1.134: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=65024, size=1024 fake=0
[   77.076086][ T4561] EXT4-fs (loop1): Remounting filesystem read-only
[   77.076942][ T2303] usb 4-1: Using ep0 maxpacket: 32
[   77.176792][   T21] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   77.187106][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.195132][   T21] usb 5-1: Product: syz
[   77.214255][   T21] usb 5-1: Manufacturer: syz
[   77.220607][ T2303] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[   77.247285][   T21] usb 5-1: SerialNumber: syz
[   77.328241][   T21] hso 5-1:6.0: Can't find BULK IN endpoint
[   77.406860][ T2303] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[   77.415945][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.449630][ T2303] usb 4-1: Product: syz
[   77.466820][ T2303] usb 4-1: Manufacturer: syz
[   77.471472][ T2303] usb 4-1: SerialNumber: syz
[   77.489808][ T2303] usb 4-1: config 0 descriptor??
[   77.506986][ T4545] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   77.605380][ T4589] loop0: detected capacity change from 0 to 1024
[   77.652211][ T2303] usb 5-1: USB disconnect, device number 2
[   77.699492][ T4585] loop1: detected capacity change from 0 to 8192
[   77.784546][ T4585] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   77.814598][ T4585] REISERFS (device loop1): using journaled data mode
[   77.888216][  T154] hfsplus: b-tree write err: -5, ino 4
[   77.894179][ T4585] reiserfs: using flush barriers
[   77.897912][ T4371] usb 4-1: USB disconnect, device number 2
[   77.920755][ T4596] loop2: detected capacity change from 0 to 512
[   77.927626][ T4585] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   77.957071][ T4585] REISERFS (device loop1): checking transaction log (loop1)
[   77.968707][ T4585] REISERFS (device loop1): Using r5 hash to sort names
[   77.979476][ T4585] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   77.996712][ T4585] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   78.198635][ T4596] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.214944][ T4596] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   78.411302][ T4613] device macsec1 entered promiscuous mode
[   78.794753][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'.
[   78.882437][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'.
[   79.049005][ T4641] loop2: detected capacity change from 0 to 1024
[   79.080127][ T4643] loop3: detected capacity change from 0 to 512
[   79.180592][ T4643] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   79.238345][ T4641] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   79.268206][   T26] audit: type=1800 audit(1730179829.366:4): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.170" name="file1" dev="loop3" ino=15 res=0 errno=0
[   79.445152][ T4607] loop0: detected capacity change from 0 to 32768
[   79.595952][ T4607] XFS (loop0): Mounting V5 Filesystem
[   79.683899][ T4654] loop2: detected capacity change from 0 to 4096
[   79.767830][ T4654] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   79.784133][ T4633] loop1: detected capacity change from 0 to 40427
[   79.813923][ T4607] XFS (loop0): Ending clean mount
[   79.869713][ T4633] F2FS-fs (loop1): invalid crc value
[   79.871604][ T4654] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch.  Run chkdsk.
[   79.901449][ T4607] XFS (loop0): Quotacheck needed: Please wait.
[   79.939835][ T4633] F2FS-fs (loop1): Found nat_bits in checkpoint
[   79.946990][ T4654] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   80.067835][ T4607] XFS (loop0): Quotacheck: Done.
[   80.068433][ T4654] ntfs: volume version 3.1.
[   80.186040][ T4633] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   80.291162][ T4171] XFS (loop0): Unmounting Filesystem
[   80.377706][ T4681] loop4: detected capacity change from 0 to 512
[   80.521823][ T4681] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   80.572062][ T4681] EXT4-fs (loop4): 1 truncate cleaned up
[   80.589747][ T4656] loop3: detected capacity change from 0 to 32768
[   80.596728][ T4681] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.668286][ T4656] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.175 (4656)
[   80.727300][ T4656] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   80.756631][ T4368] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.767084][ T4656] BTRFS info (device loop3): using free space tree
[   80.773625][ T4656] BTRFS info (device loop3): has skinny extents
[   80.850705][ T4688] loop1: detected capacity change from 0 to 2048
[   81.026696][ T4368] usb 3-1: Using ep0 maxpacket: 16
[   81.050206][ T4688] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   81.164012][ T4656] BTRFS info (device loop3): enabling ssd optimizations
[   81.176734][ T4368] usb 3-1: config 0 has an invalid interface number: 153 but max is 0
[   81.184970][ T4368] usb 3-1: config 0 has no interface number 0
[   81.246840][ T4214] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   81.373247][ T4715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'.
[   81.392603][ T4368] usb 3-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64
[   81.425854][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.444650][ T4368] usb 3-1: Product: syz
[   81.461000][ T4368] usb 3-1: Manufacturer: syz
[   81.462075][ T1766] cfg80211: failed to load regulatory.db
[   81.473357][ T4368] usb 3-1: SerialNumber: syz
[   81.496761][ T4214] usb 5-1: Using ep0 maxpacket: 16
[   81.511977][ T4698] loop0: detected capacity change from 0 to 32768
[   81.553665][ T4368] usb 3-1: config 0 descriptor??
[   81.616788][ T4214] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.628319][ T4368] sierra 3-1:0.153: Sierra USB modem converter detected
[   81.642232][ T4214] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.662442][ T4214] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   81.696192][ T4214] usb 5-1: config 0 interface 0 has no altsetting 0
[   81.713518][ T4214] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[   81.743542][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.795460][ T4214] usb 5-1: config 0 descriptor??
[   81.854257][ T4698] XFS (loop0): Mounting V5 Filesystem
[   81.868437][ T4368] usb 3-1: USB disconnect, device number 2
[   81.880595][ T4368] sierra 3-1:0.153: device disconnected
[   82.038416][ T4698] XFS (loop0): Ending clean mount
[   82.056107][ T4698] XFS (loop0): Quotacheck needed: Please wait.
[   82.174962][ T4698] XFS (loop0): Quotacheck: Done.
[   82.266815][   T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   82.303370][ T4171] XFS (loop0): Unmounting Filesystem
[   82.333627][ T4214] hid-generic 0003:045E:05DA.0002: ignoring exceeding usage max
[   82.347050][ T4214] hid-generic 0003:045E:05DA.0002: unbalanced collection at end of report description
[   82.366590][ T4214] hid-generic: probe of 0003:045E:05DA.0002 failed with error -22
[   82.394109][ T4719] loop1: detected capacity change from 0 to 32768
[   82.425771][ T4739] capability: warning: `syz.2.193' uses 32-bit capabilities (legacy support in use)
[   82.600226][ T4214] usb 5-1: USB disconnect, device number 3
[   82.634061][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.648033][ T4719] JFS: metapage_get_blocks failed
[   82.655527][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.674990][   T21] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[   82.684665][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.686171][ T4719] ERROR: (device loop1): release_metapage: write_one_page() failed
[   82.686171][ T4719] 
[   82.705600][   T21] usb 4-1: config 0 descriptor??
[   82.800295][ T4719] ERROR: (device loop1): remounting filesystem as read-only
[   82.826699][ T4719] JFS: metapage_get_blocks failed
[   82.832641][ T4719] ERROR: (device loop1): release_metapage: write_one_page() failed
[   82.832641][ T4719] 
[   82.943817][  T276] blkno = 5002c, nblocks = 2
[   82.963699][  T276] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   82.963699][  T276] 
[   83.093077][ T4741] loop2: detected capacity change from 0 to 32768
[   83.141784][ T4749] xt_CT: You must specify a L4 protocol and not use inversions on it
[   83.181162][ T4741] (syz.2.194,4741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.201300][   T21] cougar 0003:060B:700A.0003: unknown main item tag 0x0
[   83.228860][ T4741] (syz.2.194,4741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.240122][   T21] cougar 0003:060B:700A.0003: unknown main item tag 0x0
[   83.260695][   T21] cougar 0003:060B:700A.0003: unknown main item tag 0x0
[   83.275293][   T21] cougar 0003:060B:700A.0003: unknown main item tag 0x0
[   83.293129][   T21] cougar 0003:060B:700A.0003: unknown main item tag 0x0
[   83.305041][ T4741] JBD2: Ignoring recovery information on journal
[   83.367796][   T21] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0
[   83.402095][ T4741] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   83.482960][   T21] usb 4-1: USB disconnect, device number 3
[   83.564355][ T4169] ocfs2: Unmounting device (7,2) on (node local)
[   83.686551][ T4371] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   83.887658][ T4775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.206'.
[   83.938521][ T4777] loop2: detected capacity change from 0 to 512
[   84.087231][ T4777] EXT4-fs (loop2): 1 orphan inode deleted
[   84.087296][ T4777] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,noquota,minixdf,journal_ioprio=0x0000000000000002,resgid=0x0000000000000000,sysvgroups,mb_optimize_scan=0x0000000000000001,usrquota,,errors=continue. Quota mode: writeback.
[   84.087420][ T4777] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.107283][ T4371] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[   84.107333][ T4371] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   84.107368][ T4371] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   84.107392][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.151723][    C1] vkms_vblank_simulate: vblank timer overrun
[   84.163846][ T4764] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   84.236865][ T4788] netlink: 'syz.1.213': attribute type 1 has an invalid length.
[   84.236995][ T4788] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.213'.
[   84.350750][ T4793] netlink: 'syz.4.214': attribute type 1 has an invalid length.
[   84.355285][ T4793] netlink: 'syz.4.214': attribute type 9 has an invalid length.
[   84.415372][ T4214] usb 1-1: USB disconnect, device number 3
[   84.526336][ T4802] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   84.848119][ T4818] loop4: detected capacity change from 0 to 16
[   84.926739][ T4818] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported on this platform
[   85.082148][ T4826] loop1: detected capacity change from 0 to 512
[   85.126833][ T4831] loop0: detected capacity change from 0 to 2048
[   85.161392][ T4826] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   85.164632][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'.
[   85.221620][ T4826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   85.242391][ T4839] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.312929][ T4842] loop2: detected capacity change from 0 to 128
[   85.343089][ T4826] EXT4-fs (loop1): 1 truncate cleaned up
[   85.357283][ T4826] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback.
[   85.435748][ T4842] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   85.457711][ T4842] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   85.602036][ T4858] netlink: 'syz.1.243': attribute type 3 has an invalid length.
[   85.610773][ T4858] netlink: 'syz.1.243': attribute type 1 has an invalid length.
[   85.619376][ T4858] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.243'.
[   85.676681][ T4729] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   85.953922][ T4865] loop0: detected capacity change from 0 to 4096
[   86.011258][ T4214] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   86.066906][ T4729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.090543][ T4865] ntfs3: loop0: failed to convert "0000" to iso8859-4
[   86.092045][ T4729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.123890][ T4865] ntfs3: loop0: failed to convert name for inode 1e.
[   86.129014][ T4729] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   86.156544][ T4729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.165909][ T4871] loop1: detected capacity change from 0 to 4096
[   86.187124][ T4729] usb 4-1: config 0 descriptor??
[   86.271655][ T4214] usb 3-1: Using ep0 maxpacket: 32
[   86.298602][ T4873] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.365332][ T4859] loop4: detected capacity change from 0 to 32768
[   86.393798][ T4871] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[   86.413335][ T4214] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.432818][ T4214] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.459805][ T4859] JBD2: Ignoring recovery information on journal
[   86.461769][ T4871] Remounting filesystem read-only
[   86.574433][ T4859] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   86.636896][ T4214] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   86.646122][ T4214] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   86.687991][ T4172] ocfs2: Unmounting device (7,4) on (node local)
[   86.694730][ T4214] usb 3-1: Product: syz
[   86.705860][ T4214] usb 3-1: Manufacturer: syz
[   86.769261][ T4214] hub 3-1:4.0: USB hub found
[   86.868309][ T4729] hid-led: probe of 0003:27B8:01ED.0004 failed with error -71
[   86.887530][ T4729] usb 4-1: USB disconnect, device number 4
[   87.026780][ T4214] hub 3-1:4.0: config failed, hub has too many ports! (err -19)
[   87.176713][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'.
[   87.206968][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'.
[   87.216181][ T4904] loop0: detected capacity change from 0 to 4096
[   87.331088][ T4904] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   87.356823][ T4214] usb 3-1: USB disconnect, device number 3
[   87.377091][ T4904] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   87.440327][ T4904] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   87.460955][ T4904] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   87.498458][ T4904] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   87.528177][ T4904] ntfs: volume version 3.1.
[   87.551920][ T4904] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   87.579970][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   87.602132][ T4904] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   87.628316][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.642021][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.647290][ T4904] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   87.666179][ T4924] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   87.692114][ T4904] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   87.727268][ T4904] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[   88.066679][ T4729] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   88.075544][ T4939] hpfs: bad mount options.
[   88.380933][ T4927] loop1: detected capacity change from 0 to 32768
[   88.490997][ T4931] loop2: detected capacity change from 0 to 32768
[   88.499110][ T4368] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.525670][ T4927] XFS (loop1): Mounting V5 Filesystem
[   88.531575][ T4729] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   88.541745][ T4729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.569719][ T4729] usb 4-1: config 0 descriptor??
[   88.708227][ T4927] XFS (loop1): Ending clean mount
[   88.787325][ T4949] loop4: detected capacity change from 0 to 32768
[   88.796708][ T4368] usb 1-1: Using ep0 maxpacket: 32
[   88.819735][ T4166] XFS (loop1): Unmounting Filesystem
[   88.933735][ T4961] loop2: detected capacity change from 0 to 256
[   88.940357][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.951859][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.954709][ T4961] exfat: Deprecated parameter 'utf8'
[   88.962857][ T4368] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   88.977430][ T4961] exfat: Deprecated parameter 'utf8'
[   88.982770][ T4961] exfat: Deprecated parameter 'utf8'
[   88.984222][ T4949] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   88.997162][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.999157][ T4368] usb 1-1: config 0 descriptor??
[   89.062129][ T4368] hub 1-1:0.0: USB hub found
[   89.085401][ T4961] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[   89.116353][ T4949] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature 
[   89.126641][ T4729] [drm:udl_init] *ERROR* Selecting channel failed
[   89.141833][ T4949] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   89.153784][ T4949] OCFS2: File system is now read-only.
[   89.182013][ T4949] (syz.4.289,4949,1):ocfs2_group_extend:318 ERROR: status = -30
[   89.238549][ T4729] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[   89.246067][ T4729] [drm] Initialized udl on minor 2
[   89.276678][ T4368] hub 1-1:0.0: config failed, hub has too many ports! (err -19)
[   89.302372][ T4172] ocfs2: Unmounting device (7,4) on (node local)
[   89.336756][ T4729] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[   89.366581][ T4729] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[   89.383554][ T4729] usb 4-1: USB disconnect, device number 5
[   89.513639][ T4967] hsr0: VLAN not yet supported
[   89.604384][ T4368] usbhid 1-1:0.0: can't add hid device: -71
[   89.623140][ T4974] loop4: detected capacity change from 0 to 256
[   89.627523][ T4368] usbhid: probe of 1-1:0.0 failed with error -71
[   89.698291][ T4368] usb 1-1: USB disconnect, device number 4
[   89.726995][ T4975] loop2: detected capacity change from 0 to 2048
[   89.826987][ T4975] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.836122][ T4978] loop1: detected capacity change from 0 to 4096
[   89.909105][ T4978] ntfs: volume version 3.1.
[   90.072378][ T4992] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   90.360783][ T5004] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   90.386697][ T2303] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   90.645030][ T5016] program syz.1.315 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.746887][ T2303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.792441][ T4988] loop4: detected capacity change from 0 to 32768
[   90.811760][ T2303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.835087][ T5024] loop0: detected capacity change from 0 to 2048
[   90.836619][ T2303] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[   90.870998][ T2303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.893308][ T2303] usb 3-1: config 0 descriptor??
[   90.904752][ T4988] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.301 (4988)
[   90.938029][ T5028] netlink: 64 bytes leftover after parsing attributes in process `syz.1.321'.
[   90.959752][ T4988] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   91.002967][ T4988] BTRFS info (device loop4): using free space tree
[   91.028163][ T5024] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   91.028524][ T4988] BTRFS info (device loop4): has skinny extents
[   91.337052][ T4988] BTRFS info (device loop4): enabling ssd optimizations
[   91.391976][ T5057] loop0: detected capacity change from 0 to 512
[   91.398650][ T2303] dragonrise 0003:0079:0006.0005: item fetching failed at offset 2/5
[   91.413618][ T2303] dragonrise 0003:0079:0006.0005: parse failed
[   91.421070][ T2303] dragonrise: probe of 0003:0079:0006.0005 failed with error -22
[   91.493207][ T5057] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback.
[   91.523104][ T5057] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.643019][ T5057] process 'syz.0.325' launched './file1' with NULL argv: empty string added
[   91.651731][ T5020] loop3: detected capacity change from 0 to 32768
[   91.723630][ T5057] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.325: corrupted xattr block 32
[   91.780963][ T5057] EXT4-fs (loop0): Remounting filesystem read-only
[   91.815739][ T5020] XFS (loop3): Mounting V5 Filesystem
[   91.841387][ T5041] loop1: detected capacity change from 0 to 32768
[   91.850333][ T5069] usb 3-1: USB disconnect, device number 4
[   91.928260][ T5020] XFS (loop3): Ending clean mount
[   92.005734][ T4174] XFS (loop3): Unmounting Filesystem
[   92.148052][ T5041] ERROR: (device loop1): dbAllocAG: Corrupt dmapctl page
[   92.148052][ T5041] 
[   92.163778][ T5083] loop0: detected capacity change from 0 to 2048
[   92.175200][ T5041] ERROR: (device loop1): remounting filesystem as read-only
[   92.271038][ T5087] loop2: detected capacity change from 0 to 64
[   92.279785][ T5083] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   92.315479][ T5089] loop4: detected capacity change from 0 to 512
[   92.341658][ T5090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.382254][   T26] kauditd_printk_skb: 9 callbacks suppressed
[   92.382269][   T26] audit: type=1800 audit(1730179842.479:6): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.331" name="file1" dev="loop2" ino=5 res=0 errno=0
[   92.513030][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,minixdf,,errors=continue. Quota mode: writeback.
[   92.550351][ T5089] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.632994][ T5099] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64)
[   92.727480][ T5104] program syz.2.336 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.973810][ T5116] netlink: 120 bytes leftover after parsing attributes in process `syz.3.342'.
[   93.207605][ T5127] netlink: 'syz.0.346': attribute type 29 has an invalid length.
[   93.285560][ T5127] netlink: 'syz.0.346': attribute type 29 has an invalid length.
[   93.319645][ T5130] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   93.335453][ T5132] netlink: 'syz.0.346': attribute type 29 has an invalid length.
[   93.470117][ T5131] loop2: detected capacity change from 0 to 4096
[   93.561907][ T5131] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   93.603548][ T5138] loop1: detected capacity change from 0 to 764
[   93.653213][ T5138] rock: directory entry would overflow storage
[   93.672843][ T5138] rock: sig=0x4654, size=5, remaining=4
[   93.965631][ T5111] loop4: detected capacity change from 0 to 32768
[   94.081080][ T5153] loop1: detected capacity change from 0 to 128
[   94.106846][ T5111] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.338 (5111)
[   94.166702][ T5111] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   94.185632][ T5111] BTRFS info (device loop4): using free space tree
[   94.195734][ T5111] BTRFS info (device loop4): has skinny extents
[   94.250344][ T5158] libceph: resolve '0' (ret=-3): failed
[   94.386050][ T5136] loop0: detected capacity change from 0 to 32768
[   94.437104][ T5136] XFS: ikeep mount option is deprecated.
[   94.558715][ T5182] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[   94.565988][ T5136] XFS (loop0): Mounting V5 Filesystem
[   94.667989][ T5166] loop3: detected capacity change from 0 to 4096
[   94.695179][ T5111] BTRFS info (device loop4): enabling ssd optimizations
[   94.745778][ T5200] loop1: detected capacity change from 0 to 256
[   94.759988][ T5136] XFS (loop0): Ending clean mount
[   94.774102][ T5166] ntfs: volume version 3.1.
[   94.780529][ T5136] XFS (loop0): Quotacheck needed: Please wait.
[   94.832152][ T5136] XFS (loop0): Quotacheck: Done.
[   94.854284][ T5200] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.934022][ T5204] loop2: detected capacity change from 0 to 128
[   95.091190][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   95.092213][ T4171] XFS (loop0): Unmounting Filesystem
[   95.141787][ T5204] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.529662][ T5221] capability: warning: `syz.2.376' uses deprecated v2 capabilities in a way that may be insecure
[   95.722347][ T5229] loop2: detected capacity change from 0 to 256
[   95.728921][ T4359] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   95.801675][ T5231] loop4: detected capacity change from 0 to 512
[   95.828686][ T5229] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   96.069461][ T5242] loop4: detected capacity change from 0 to 64
[   96.080024][ T5244] vivid-000: disconnect
[   96.102342][ T5243] vivid-000: reconnect
[   96.146733][ T4359] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   96.155829][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.221316][ T4359] usb 4-1: config 0 descriptor??
[   96.271856][ T5253] loop1: detected capacity change from 0 to 128
[   96.318418][ T4359] cp210x 4-1:0.0: cp210x converter detected
[   96.335488][ T5253] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[   96.498986][ T5259] loop0: detected capacity change from 0 to 2048
[   96.584006][ T5261] loop4: detected capacity change from 0 to 8192
[   96.641266][ T5259] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nodelalloc,nouid32,errors=remount-ro,. Quota mode: writeback.
[   96.655681][ T5078] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.674220][ T5261] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   96.713946][ T5261] REISERFS (device loop4): using ordered data mode
[   96.726702][ T5261] reiserfs: using flush barriers
[   96.733160][ T5259] EXT4-fs error (device loop0): ext4_ext_precache:608: inode #2: comm syz.0.396: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[   96.771672][ T5261] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   96.797690][ T5261] REISERFS (device loop4): checking transaction log (loop4)
[   96.840376][ T5252] loop2: detected capacity change from 0 to 40427
[   96.843338][ T5259] EXT4-fs (loop0): Remounting filesystem read-only
[   96.906626][ T5078] usb 2-1: Using ep0 maxpacket: 32
[   96.925845][ T5252] F2FS-fs (loop2): Invalid log blocks per segment (5)
[   96.941051][ T5252] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   96.945632][ T4359] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[   96.973288][ T4359] cp210x 4-1:0.0: GPIO initialisation failed: -71
[   96.984611][ T4359] usb 4-1: cp210x converter now attached to ttyUSB0
[   97.013470][ T4359] usb 4-1: USB disconnect, device number 6
[   97.016361][ T5261] REISERFS (device loop4): Using tea hash to sort names
[   97.048055][ T4359] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   97.049748][ T5261] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   97.068424][ T4359] cp210x 4-1:0.0: device disconnected
[   97.077135][ T5078] usb 2-1: unable to get BOS descriptor or descriptor too short
[   97.127966][ T5252] F2FS-fs (loop2): Found nat_bits in checkpoint
[   97.176877][ T5078] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config
[   97.198192][ T5078] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   97.266169][ T5252] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   97.276126][ T5252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   97.306933][ T5078] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   97.332031][ T5078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   97.342928][ T5078] usb 2-1: SerialNumber: syz
[   97.397793][ T5078] cdc_ether 2-1:1.0: skipping garbage
[   97.399324][ T4169] attempt to access beyond end of device
[   97.399324][ T4169] loop2: rw=2049, want=45104, limit=40427
[   97.403222][ T5078] usb 2-1: bad CDC descriptors
[   97.618643][ T5079] usb 2-1: USB disconnect, device number 2
[   97.667434][ T5287] loop0: detected capacity change from 0 to 2048
[   97.721261][ T5287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.057725][ T5305] tipc: Started in network mode
[   98.062640][ T5305] tipc: Node identity , cluster identity 4711
[   98.089328][ T5305] tipc: Failed to set node id, please configure manually
[   98.089370][ T5305] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   98.358132][   T26] audit: type=1326 audit(1730179848.459:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.1.421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe0b871719 code=0x0
[   98.374819][ T5319] sp0: Synchronizing with TNC
[   98.493893][ T5315] loop4: detected capacity change from 0 to 4096
[   98.533791][ T5332] program syz.3.425 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.557185][ T5315] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   98.563678][ T5334] loop3: detected capacity change from 0 to 256
[   98.591995][ T5315] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   98.643879][ T5315] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   98.662058][ T5334] FAT-fs (loop3): Directory bread(block 64) failed
[   98.684564][ T5334] FAT-fs (loop3): Directory bread(block 65) failed
[   98.694588][ T5315] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   98.706635][ T5334] FAT-fs (loop3): Directory bread(block 66) failed
[   98.718101][ T5334] FAT-fs (loop3): Directory bread(block 67) failed
[   98.718755][ T5339] loop2: detected capacity change from 0 to 256
[   98.733937][ T5334] FAT-fs (loop3): Directory bread(block 68) failed
[   98.751163][ T5334] FAT-fs (loop3): Directory bread(block 69) failed
[   98.758510][ T5334] FAT-fs (loop3): Directory bread(block 70) failed
[   98.765242][ T5334] FAT-fs (loop3): Directory bread(block 71) failed
[   98.770817][ T5315] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   98.773417][ T5334] FAT-fs (loop3): Directory bread(block 72) failed
[   98.791069][ T5341] netlink: 'syz.0.429': attribute type 1 has an invalid length.
[   98.791314][ T5334] FAT-fs (loop3): Directory bread(block 73) failed
[   98.848195][ T5341] netlink: 232 bytes leftover after parsing attributes in process `syz.0.429'.
[   98.858223][ T5315] ntfs: volume version 3.1.
[   98.879483][ T5315] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   98.933729][ T5315] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   98.960822][ T5315] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   98.973563][ T5315] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   99.088577][ T5348] UHID_CREATE from different security context by process 202 (syz.2.432), this is not allowed.
[   99.221271][ T5354] loop2: detected capacity change from 0 to 512
[   99.289053][ T5354] EXT4-fs (loop2): orphan cleanup on readonly fs
[   99.297181][ T5359] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   99.306222][ T5354] EXT4-fs error (device loop2): ext4_quota_enable:6384: comm syz.2.435: Bad quota inum: 11, type: 1
[   99.345497][ T5363] loop0: detected capacity change from 0 to 1024
[   99.397666][ T5354] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix.
[   99.438386][ T5354] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   99.445400][ T5354] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   99.532355][ T5373] loop4: detected capacity change from 0 to 2048
[   99.552131][ T5363] EXT4-fs (loop0): Test dummy encryption mode enabled
[   99.565214][ T5078] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   99.568086][ T5379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.444'.
[   99.581989][ T5363] EXT4-fs (loop0): Ignoring removed orlov option
[   99.593579][ T5379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.444'.
[   99.620138][ T5373] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   99.662730][ T5363] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[   99.687796][ T5373] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.443: bad orphan inode 8
[   99.737349][ T5373] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,grpid,nomblk_io_submit,stripe=0x000000000004ffff,block_validity,mb_optimize_scan=0x0000000000000001,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: none.
[   99.853477][ T5373] EXT4-fs error (device loop4): ext4_check_all_de:664: inode #12: block 5: comm syz.4.443: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0
[   99.946746][ T5078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.993447][ T5078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.049839][ T5078] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  100.084076][ T5078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.123998][ T5078] usb 4-1: config 0 descriptor??
[  100.180795][ T5363] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  100.190940][ T5409] loop1: detected capacity change from 0 to 128
[  100.297237][ T5409] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  100.329894][ T5409] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  100.487133][ T5428] loop0: detected capacity change from 0 to 1024
[  100.560462][ T5428] hfsplus: walked past end of dir
[  100.600908][ T5078] pyra 0003:1E7D:2C24.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0
[  100.653181][ T5432] loop1: detected capacity change from 0 to 16
[  100.722930][ T5432] erofs: (device loop1): mounted with root inode @ nid 36.
[  100.767319][ T5432] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  100.820299][ T4725] usb 4-1: USB disconnect, device number 7
[  100.834694][ T5432] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851]
[  100.906508][ T5432] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  100.973224][ T5441] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  101.046664][ T5441] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851]
[  101.050315][ T5443] loop0: detected capacity change from 0 to 4096
[  101.129903][ T5441] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  101.155900][ T5446] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.409311][ T5426] loop2: detected capacity change from 0 to 32768
[  101.448418][ T5456] loop3: detected capacity change from 0 to 256
[  101.608470][ T5471] netlink: 'syz.1.482': attribute type 298 has an invalid length.
[  101.655115][ T5426] XFS (loop2): Mounting V5 Filesystem
[  101.727946][ T5475] loop3: detected capacity change from 0 to 4096
[  101.768232][ T5483] loop1: detected capacity change from 0 to 128
[  101.778072][ T5426] XFS (loop2): Ending clean mount
[  101.786720][ T5475] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  101.835872][ T5426] XFS (loop2): Quotacheck needed: Please wait.
[  101.909509][ T5490] loop4: detected capacity change from 0 to 2048
[  101.923196][ T5483] EXT4-fs (loop1): Ignoring removed nobh option
[  101.933053][ T5426] XFS (loop2): Quotacheck: Done.
[  101.963072][ T5483] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  101.987562][ T5483] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  102.008249][ T4169] XFS (loop2): Unmounting Filesystem
[  102.020167][ T5490] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  102.176783][ T5495] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.189342][ T5490] attempt to access beyond end of device
[  102.189342][ T5490] loop4: rw=524288, want=33554432, limit=2048
[  102.539576][ T5505] loop4: detected capacity change from 0 to 128
[  102.667566][ T5505] nfs: Bad value for 'source'
[  103.006095][ T5533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'.
[  103.033704][ T5519] loop1: detected capacity change from 0 to 4096
[  103.183542][ T5519] ntfs: volume version 3.1.
[  103.256570][ T4725] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  103.344526][ T5543] loop2: detected capacity change from 0 to 4096
[  103.426080][ T5553] netlink: 60 bytes leftover after parsing attributes in process `syz.3.511'.
[  103.537348][ T5543] ntfs3: loop2: failed to convert "0080" to cp865
[  103.554825][ T5543] ntfs3: loop2: failed to convert name for inode 1e.
[  103.580516][ T5561] loop0: detected capacity change from 0 to 128
[  103.634804][ T5561] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  103.680234][ T5561] EXT4-fs (loop0): mounted filesystem without journal. Opts: dax=always,dax=inode,,errors=continue. Quota mode: none.
[  103.699635][ T5561] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.807046][ T5561] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 49 (only 1 groups)
[  103.916962][ T4725] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  103.950955][ T4725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.983719][ T4725] usb 5-1: Product: syz
[  103.996127][ T4725] usb 5-1: Manufacturer: syz
[  104.001610][ T4725] usb 5-1: SerialNumber: syz
[  104.008855][ T4725] usb 5-1: config 0 descriptor??
[  104.027024][ T5590] netlink: 'syz.0.518': attribute type 21 has an invalid length.
[  104.035574][ T5590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.518'.
[  104.062143][ T5590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'.
[  104.095378][ T4725] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  104.199112][ T5597] loop1: detected capacity change from 0 to 256
[  104.271667][ T5597] FAT-fs (loop1): Directory bread(block 64) failed
[  104.279029][ T5597] FAT-fs (loop1): Directory bread(block 65) failed
[  104.285728][ T5597] FAT-fs (loop1): Directory bread(block 66) failed
[  104.292718][ T5597] FAT-fs (loop1): Directory bread(block 67) failed
[  104.300174][ T5597] FAT-fs (loop1): Directory bread(block 68) failed
[  104.307130][ T5597] FAT-fs (loop1): Directory bread(block 69) failed
[  104.313987][ T5597] FAT-fs (loop1): Directory bread(block 70) failed
[  104.321069][ T5597] FAT-fs (loop1): Directory bread(block 71) failed
[  104.327849][ T5597] FAT-fs (loop1): Directory bread(block 72) failed
[  104.335541][ T5597] FAT-fs (loop1): Directory bread(block 73) failed
[  104.377896][ T4726] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.549643][ T4725] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  104.616773][ T4726] usb 3-1: Using ep0 maxpacket: 16
[  104.624662][ T5595] loop0: detected capacity change from 0 to 32768
[  104.766795][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.792475][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.809318][ T4726] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  104.832433][ T4726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.850524][ T4726] usb 3-1: config 0 descriptor??
[  104.865616][ T4725] usb 5-1: USB disconnect, device number 4
[  104.872344][ T5595] XFS (loop0): Mounting V5 Filesystem
[  105.027870][ T5595] XFS (loop0): Ending clean mount
[  105.048834][ T5595] XFS (loop0): Quotacheck needed: Please wait.
[  105.138913][ T5595] XFS (loop0): Quotacheck: Done.
[  105.202698][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'.
[  105.312133][ T4171] XFS (loop0): Unmounting Filesystem
[  105.314288][ T5638] loop1: detected capacity change from 0 to 64
[  105.328298][ T4726] chicony 0003:04F2:1421.0007: unknown main item tag 0x0
[  105.391062][ T4726] chicony 0003:04F2:1421.0007: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0
[  105.552151][ T5069] usb 3-1: USB disconnect, device number 5
[  105.712693][ T5646] loop4: detected capacity change from 0 to 764
[  105.843786][ T5646] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  106.007113][ T5617] loop3: detected capacity change from 0 to 32768
[  106.163500][ T5617] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  106.236837][ T5617] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  106.313399][ T5617] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  106.350480][ T4363] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  106.368967][ T4363] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  106.384786][ T5660] loop2: detected capacity change from 0 to 8192
[  106.453745][ T5660] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  106.524346][ T5660] REISERFS (device loop2): using ordered data mode
[  106.566566][ T5660] reiserfs: using flush barriers
[  106.574001][ T5660] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  106.612745][ T5660] REISERFS (device loop2): checking transaction log (loop2)
[  106.621806][ T4363] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 252ms
[  106.671264][ T4363] gfs2: fsid=syz:syz.0: jid=0: Done
[  106.701155][ T5617] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  106.743299][ T5678] loop0: detected capacity change from 0 to 2048
[  106.837804][ T5678] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  106.861441][ T5660] REISERFS (device loop2): Using tea hash to sort names
[  106.880297][ T5660] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  106.888957][ T5678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.984835][ T5660] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=1728053266, len=18 - odd
[  107.207627][ T5694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'.
[  107.554748][ T5704] loop4: detected capacity change from 0 to 256
[  107.587262][ T5704] exfat: Deprecated parameter 'utf8'
[  107.596632][ T5704] exfat: Deprecated parameter 'namecase'
[  107.657048][ T5704] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x96e02a54, utbl_chksum : 0xe619d30d)
[  107.764768][ T5717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'.
[  107.775681][ T5717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'.
[  107.927550][ T5078] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.086145][ T5078] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.206811][ T5069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.261179][ T5069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.286708][ T4363] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  108.327512][ T5069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.386735][ T5069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.441198][ T5069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.506863][ T5069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.560992][ T5069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.582420][ T4363] usb 2-1: Using ep0 maxpacket: 16
[  108.587977][ T4726] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  108.606673][ T5069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.712730][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.730647][ T5762] loop2: detected capacity change from 0 to 1764
[  108.739601][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.756502][ T4363] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.786654][ T4363] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00
[  108.795750][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.818441][ T4363] usb 2-1: config 0 descriptor??
[  108.848982][ T4726] usb 1-1: Using ep0 maxpacket: 16
[  108.976935][ T4726] usb 1-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config
[  109.006948][ T4726] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  109.046168][ T4726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10
[  109.082253][ T4726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024
[  109.210943][ T5758] loop4: detected capacity change from 0 to 32768
[  109.218065][ T4726] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  109.236932][ T4726] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  109.244961][ T4726] usb 1-1: Manufacturer: syz
[  109.261111][ T4726] usb 1-1: config 0 descriptor??
[  109.282560][ T5750] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  109.304254][ T5758] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.595 (5758)
[  109.343858][ T4363] wacom 0003:056A:0022.0008: unbalanced collection at end of report description
[  109.354321][ T4363] wacom 0003:056A:0022.0008: parse failed
[  109.360157][ T4363] wacom: probe of 0003:056A:0022.0008 failed with error -22
[  109.407883][ T5758] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  109.426891][ T5758] BTRFS info (device loop4): enabling ssd optimizations
[  109.444233][ T5758] BTRFS info (device loop4): not using ssd optimizations
[  109.461798][ T5758] BTRFS info (device loop4): turning off barriers
[  109.476661][ T5758] BTRFS info (device loop4): use no compression
[  109.488418][ T5767] loop3: detected capacity change from 0 to 32768
[  109.493348][ T5758] BTRFS info (device loop4): using free space tree
[  109.506612][ T5758] BTRFS info (device loop4): has skinny extents
[  109.557800][ T5078] usb 2-1: USB disconnect, device number 3
[  109.591051][ T4726] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  109.635207][ T4726] usb 1-1: USB disconnect, device number 5
[  109.666049][ T4363] XFS (loop3): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[  110.572908][ T5826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.615'.
[  110.593858][ T5818] loop2: detected capacity change from 0 to 8192
[  110.624996][ T5827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.615'.
[  110.655862][ T5818] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  110.696576][ T5818] REISERFS (device loop2): using ordered data mode
[  110.703168][ T5818] reiserfs: using flush barriers
[  110.746920][ T5818] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  110.806833][ T5818] REISERFS (device loop2): checking transaction log (loop2)
[  110.847849][ T5818] REISERFS (device loop2): Using tea hash to sort names
[  110.918994][ T5830] tipc: Started in network mode
[  110.923910][ T5830] tipc: Node identity 4, cluster identity 4711
[  110.956738][ T5830] tipc: Node number set to 4
[  110.962908][ T5830] tipc: Cannot configure node identity twice
[  111.045201][ T5835] loop4: detected capacity change from 0 to 256
[  111.098191][ T5837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.619'.
[  111.126737][ T5837] nbd: must specify a size in bytes for the device
[  111.210436][ T5839] tmpfs: Bad value for 'mpol'
[  111.217004][ T5835] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  111.403476][ T5822] loop3: detected capacity change from 0 to 32768
[  111.505029][ T5850] loop4: detected capacity change from 0 to 1764
[  111.520271][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'.
[  111.532638][ T5854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.627'.
[  111.558351][ T5822] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.613 (5822)
[  111.641682][ T5822] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  111.690922][ T5822] BTRFS info (device loop3): enabling ssd optimizations
[  111.731262][ T5822] BTRFS info (device loop3): not using ssd optimizations
[  111.766843][ T5822] BTRFS info (device loop3): turning off barriers
[  111.823751][ T5822] BTRFS info (device loop3): use no compression
[  111.841556][ T5822] BTRFS info (device loop3): using free space tree
[  111.879883][ T5822] BTRFS info (device loop3): has skinny extents
[  111.932806][ T5858] loop2: detected capacity change from 0 to 4096
[  111.989488][ T5858] __ntfs_error: 11 callbacks suppressed
[  111.989506][ T5858] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  112.038270][ T5875] loop1: detected capacity change from 0 to 256
[  112.045033][ T5858] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  112.060726][ T5860] loop0: detected capacity change from 0 to 8192
[  112.074482][ T5858] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  112.106593][ T5858] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  112.123339][ T5875] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  112.130574][ T5858] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  112.157937][ T5858] ntfs: volume version 3.1.
[  112.187193][ T5860] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  112.203960][ T5858] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  112.236899][ T5860] REISERFS (device loop0): using ordered data mode
[  112.243442][ T5860] reiserfs: using flush barriers
[  112.268619][ T5858] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  112.374979][ T5860] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  112.392548][ T5858] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  112.393534][ T5860] REISERFS (device loop0): checking transaction log (loop0)
[  112.413857][ T5860] REISERFS (device loop0): Using tea hash to sort names
[  112.422697][ T5858] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  112.434641][ T5858] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  112.453753][ T5865] loop4: detected capacity change from 0 to 40427
[  112.541371][ T5865] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  112.588102][ T5865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  112.644852][ T5890] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  112.651947][ T5890] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  112.670208][ T5890] vhci_hcd vhci_hcd.0: Device attached
[  112.689167][ T5865] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  112.750245][ T5892] vhci_hcd: connection closed
[  112.753584][ T4225] vhci_hcd: stop threads
[  112.784881][ T4225] vhci_hcd: release socket
[  112.805192][ T4225] vhci_hcd: disconnect device
[  113.046013][ T5865] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  113.073628][ T5865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  113.398344][ T5917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'.
[  113.449851][ T5922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'.
[  113.536875][ T4368] ip6_tnl_xmit_ctl: 29 callbacks suppressed
[  113.536894][ T4368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.697310][ T4368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.750087][ T4368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.816960][ T4368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.870543][ T4368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.926909][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.021043][ T5907] loop2: detected capacity change from 0 to 32768
[  114.028101][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.080926][ T5907] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.641 (5907)
[  114.081361][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.114617][ T5079] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  114.160641][ T5907] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  114.176819][ T4368] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  114.185727][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.192042][ T5907] BTRFS info (device loop2): using free space tree
[  114.217761][ T5907] BTRFS info (device loop2): has skinny extents
[  114.236671][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.273073][ T5920] loop3: detected capacity change from 0 to 32768
[  114.366721][ T5079] usb 1-1: Using ep0 maxpacket: 16
[  114.374451][ T5920] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.646 (5920)
[  114.438255][ T5920] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  114.451028][ T5920] BTRFS info (device loop3): turning off barriers
[  114.457886][ T4368] usb 5-1: Using ep0 maxpacket: 16
[  114.463897][ T5920] BTRFS info (device loop3): max_inline at 0
[  114.464723][ T5907] BTRFS info (device loop2): enabling ssd optimizations
[  114.470051][ T5920] BTRFS info (device loop3): enabling all of the rescue options
[  114.485478][ T5920] BTRFS info (device loop3): ignoring data csums
[  114.493451][ T5920] BTRFS info (device loop3): ignoring bad roots
[  114.497031][ T5079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.500693][ T5920] BTRFS info (device loop3): disabling log replay at mount time
[  114.519260][ T5920] BTRFS info (device loop3): force zlib compression, level 3
[  114.527055][ T5920] BTRFS info (device loop3): allowing degraded mounts
[  114.532162][ T5079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.534000][ T5920] BTRFS info (device loop3): enabling ssd optimizations
[  114.551068][ T5920] BTRFS info (device loop3): using spread ssd allocation scheme
[  114.558797][ T5920] BTRFS info (device loop3): using free space tree
[  114.565475][ T5920] BTRFS info (device loop3): has skinny extents
[  114.570196][ T5079] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  114.573194][ T5920] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512
[  114.597653][ T5079] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  114.608616][ T5920] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512
[  114.612964][ T5079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.636878][ T5920] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  114.687784][ T5079] usb 1-1: config 0 descriptor??
[  114.713839][ T5920] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512
[  114.749659][ T5920] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  114.771877][ T5920] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512
[  114.792625][ T5907] BTRFS info (device loop2): balance: start 
[  114.800597][ T4368] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  114.810047][ T4368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.819033][ T5907] BTRFS info (device loop2): balance: ended with status: 0
[  114.826578][ T5920] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512
[  114.838330][ T4368] usb 5-1: Product: syz
[  114.842521][ T4368] usb 5-1: Manufacturer: syz
[  114.847995][ T4368] usb 5-1: SerialNumber: syz
[  114.854217][ T5920] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  114.867549][ T4368] r8152-cfgselector 5-1: config 0 descriptor??
[  114.876937][ T5920] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  114.915990][ T5920] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512
[  115.064761][ T5986] netlink: 'syz.1.668': attribute type 1 has an invalid length.
[  115.174699][ T5079] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input6
[  115.292671][ T5079] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  115.346756][ T4368] r8152-cfgselector 5-1: Unknown version 0x0000
[  115.353171][ T4368] r8152-cfgselector 5-1: bad CDC descriptors
[  115.427574][ T4368] r8152-cfgselector 5-1: Unknown version 0x0000
[  115.454075][ T4368] r8152-cfgselector 5-1: USB disconnect, device number 5
[  115.682421][ T5995] loop1: detected capacity change from 0 to 4096
[  115.737647][ T4209] usb 1-1: USB disconnect, device number 6
[  115.788425][ T5995] ntfs: volume version 3.1.
[  116.963270][ T6023] loop0: detected capacity change from 0 to 32768
[  116.992860][ T6055] loop4: detected capacity change from 0 to 128
[  117.024742][ T6017] loop1: detected capacity change from 0 to 32768
[  117.035214][ T6023] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.674 (6023)
[  117.063075][ T6055] FAT-fs (loop4): bogus sectors per cluster 0
[  117.064553][ T6023] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  117.075930][ T6055] FAT-fs (loop4): Can't find a valid FAT filesystem
[  117.101138][ T6023] BTRFS info (device loop0): using free space tree
[  117.131217][ T6023] BTRFS info (device loop0): has skinny extents
[  117.242328][ T6017] JBD2: Ignoring recovery information on journal
[  117.344093][ T5062] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  117.368776][ T6017] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  117.433746][ T6023] BTRFS info (device loop0): enabling ssd optimizations
[  117.481009][ T5062] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  117.614765][ T4166] ocfs2: Unmounting device (7,1) on (node local)
[  117.861593][ T6098] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "8976512 R10=fp0
[  117.861593][ T6098] parent didn't have regs=100 stack=0 marks
[  117.861593][ T6098] last_idx 3 first_idx 3
[  117.861593][ T6098] regs=100 stack=0 before 3: (18) r0 = 0x10000000ffffffff
[  117.861593][ T6098]  R0=inv(id=0) R8_r=invP72057594038976512 R10=fp0
[  117.861593][ T6098] parent didn't have regs=100 stack=0 marks
[  117.861593][ T6098] last_idx 18 first_idx 18
[  117.861593][ T6098] regs=100 stack=0 before 18: (95) exit
[  117.861593][ T6098] 6: R0=inv1152921508901814271 R8=inv72057594038976512 R10=fp0
[  117.861593][ T6098] 6: (18) r0 = 0x0
[  117.861593][ T6098] 8: R0_w=inv0 R8=inv72057594038976512 R10=fp0
[  117.861593][ T6098] 8: (95) exit
[  117.861593][ T6098] frame 1: propagating r2
[  117.861593][ T6098] last_idx 17 first_idx 16
[  117.861593][ T6098] regs=4 stack=0 before 16: (b5) if r10 <= 0x0 goto pc+0
[  118.208430][ T6091] loop2: detected capacity change from 0 to 32768
[  118.293355][    C0] vkms_vblank_simulate: vblank timer overrun
[  118.359507][ T6091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.697 (6091)
[  118.459537][ T6091] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  118.487651][ T6091] BTRFS info (device loop2): using free space tree
[  118.523608][ T6091] BTRFS info (device loop2): has skinny extents
[  118.597984][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'.
[  118.761449][ T6139] loop4: detected capacity change from 0 to 16
[  118.769803][ T6120] loop1: detected capacity change from 0 to 4096
[  118.825832][ T6120] __ntfs_error: 22 callbacks suppressed
[  118.825852][ T6120] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  118.851346][ T6139] erofs: (device loop4): mounted with root inode @ nid 36.
[  118.882011][ T6139] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95]
[  118.916542][ T6120] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  118.925522][ T6120] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  119.035248][ T6120] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  119.076441][ T6091] BTRFS info (device loop2): enabling ssd optimizations
[  119.159667][ T6126] loop3: detected capacity change from 0 to 32768
[  119.206077][ T6120] ntfs: volume version 3.1.
[  119.344621][ T6120] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp737.  You might want to try to use the mount option nls=utf8.
[  119.387038][ T6120] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  119.441754][ T6126] XFS (loop3): Mounting V5 Filesystem
[  119.700712][ T6126] XFS (loop3): Ending clean mount
[  119.721569][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'.
[  119.731932][ T6126] XFS (loop3): Quotacheck needed: Please wait.
[  119.800907][ T6185] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "8976512 R10=fp0
[  119.800907][ T6185] parent didn't have regs=100 stack=0 marks
[  119.800907][ T6185] last_idx 3 first_idx 3
[  119.800907][ T6185] regs=100 stack=0 before 3: (18) r0 = 0x10000000ffffffff
[  119.800907][ T6185]  R0=inv(id=0) R8_r=invP72057594038976512 R10=fp0
[  119.800907][ T6185] parent didn't have regs=100 stack=0 marks
[  119.800907][ T6185] last_idx 18 first_idx 18
[  119.800907][ T6185] regs=100 stack=0 before 18: (95) exit
[  119.800907][ T6185] 6: R0=inv1152921508901814271 R8=inv72057594038976512 R10=fp0
[  119.800907][ T6185] 6: (18) r0 = 0x0
[  119.800907][ T6185] 8: R0_w=inv0 R8=inv72057594038976512 R10=fp0
[  119.800907][ T6185] 8: (95) exit
[  119.800907][ T6185] frame 1: propagating r2
[  119.800907][ T6185] last_idx 17 first_idx 16
[  119.800907][ T6185] regs=4 stack=0 before 16: (b5) if r10 <= 0x0 goto pc+0
[  119.812530][ T6126] XFS (loop3): Quotacheck: Done.
[  120.036903][ T4174] XFS (loop3): Unmounting Filesystem
[  120.063768][ T6199] loop0: detected capacity change from 0 to 16
[  120.116340][ T6199] erofs: (device loop0): mounted with root inode @ nid 36.
[  120.152855][ T6199] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[  120.282699][ T6205] ALSA: mixer_oss: invalid index 100000
[  120.786563][ T5062] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  120.816653][ T6223] misc userio: Invalid payload size
[  121.150826][ T6216] loop1: detected capacity change from 0 to 32768
[  121.166776][ T5062] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  121.187995][ T5062] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  121.262547][ T6216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.741 (6216)
[  121.294457][ T6216] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  121.316133][ T6216] BTRFS info (device loop1): using free space tree
[  121.340124][ T6216] BTRFS info (device loop1): has skinny extents
[  121.365990][ T6219] loop0: detected capacity change from 0 to 32768
[  121.376699][ T5062] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  121.385776][ T5062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.414458][ T5062] usb 5-1: Product: syz
[  121.425737][ T6221] loop3: detected capacity change from 0 to 32768
[  121.430113][ T5062] usb 5-1: Manufacturer: syz
[  121.437723][ T5062] usb 5-1: SerialNumber: syz
[  121.444964][ T5062] usb 5-1: config 0 descriptor??
[  121.467206][ T6217] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  121.474386][ T6219] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.742 (6219)
[  121.489049][ T6217] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  121.505182][ T6219] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  121.581645][ T6219] BTRFS info (device loop0): turning off barriers
[  121.612927][ T6219] BTRFS info (device loop0): max_inline at 0
[  121.612969][ T6219] BTRFS info (device loop0): enabling all of the rescue options
[  121.612987][ T6219] BTRFS info (device loop0): ignoring data csums
[  121.613002][ T6219] BTRFS info (device loop0): ignoring bad roots
[  121.613018][ T6219] BTRFS info (device loop0): disabling log replay at mount time
[  121.613080][ T6219] BTRFS info (device loop0): force zlib compression, level 3
[  121.613102][ T6219] BTRFS info (device loop0): allowing degraded mounts
[  121.613123][ T6219] BTRFS info (device loop0): enabling ssd optimizations
[  121.613139][ T6219] BTRFS info (device loop0): using spread ssd allocation scheme
[  121.613156][ T6219] BTRFS info (device loop0): using free space tree
[  121.613172][ T6219] BTRFS info (device loop0): has skinny extents
[  121.613223][ T6219] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512
[  121.620920][ T6219] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512
[  121.651790][ T6221] XFS (loop3): Mounting V5 Filesystem
[  121.656375][ T6219] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  121.692735][ T6216] BTRFS info (device loop1): enabling ssd optimizations
[  121.726724][ T5062] dm9601: probe of 5-1:0.0 failed with error -71
[  121.727308][ T6219] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512
[  121.740890][ T6219] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  121.750256][ T5062] usb 5-1: USB disconnect, device number 6
[  121.779287][ T6221] XFS (loop3): Ending clean mount
[  121.796315][ T6216] BTRFS info (device loop1): balance: start 
[  121.844005][ T6219] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512
[  121.899875][ T6219] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512
[  121.911884][ T6216] BTRFS info (device loop1): balance: ended with status: 0
[  121.936591][ T4209] Bluetooth: hci4: command 0x0405 tx timeout
[  121.947001][ T6219] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  122.011431][ T4174] XFS (loop3): Unmounting Filesystem
[  122.018339][ T6219] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  122.116080][ T6219] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512
[  123.018001][ T6313] loop4: detected capacity change from 0 to 128
[  123.114574][ T6313] VFS: Found a Xenix FS (block size = 512) on device loop4
[  123.137020][ T6314] loop2: detected capacity change from 0 to 4096
[  123.184164][ T6314] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  123.295234][ T6317] loop3: detected capacity change from 0 to 4096
[  123.306956][ T6326] tipc: MTU too low for tipc bearer
[  123.315846][ T4172] sysv_free_block: trying to free block not in datazone
[  123.362585][ T6317] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  123.374239][ T4172] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  123.419152][ T6317] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  123.442054][ T6317] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  123.448860][ T6328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.772'.
[  123.493200][ T6317] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  123.630698][ T6317] ntfs: volume version 3.1.
[  123.693141][ T6342] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  123.788766][ T6344] misc userio: Invalid payload size
[  123.836125][ T6346] IPVS: Error joining to the multicast group
[  124.019174][ T6356] loop3: detected capacity change from 0 to 128
[  124.101129][ T6356] VFS: Found a Xenix FS (block size = 512) on device loop3
[  124.176006][ T4174] sysv_free_block: trying to free block not in datazone
[  124.206732][ T4174] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  124.407292][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.792'.
[  124.633832][ T6382] loop1: detected capacity change from 0 to 512
[  124.719818][ T6348] loop2: detected capacity change from 0 to 32768
[  124.756997][ T4211] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.785198][ T6382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.796660][ T6348] XFS: ikeep mount option is deprecated.
[  124.879850][ T6358] loop0: detected capacity change from 0 to 32768
[  124.922490][ T6358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.786 (6358)
[  124.970694][ T6348] XFS (loop2): Mounting V5 Filesystem
[  125.000189][ T6358] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  125.022586][ T6358] BTRFS info (device loop0): using free space tree
[  125.030782][ T6358] BTRFS info (device loop0): has skinny extents
[  125.047356][ T4211] usb 4-1: Using ep0 maxpacket: 16
[  125.100890][ T6348] XFS (loop2): Ending clean mount
[  125.133345][ T6348] XFS (loop2): Quotacheck needed: Please wait.
[  125.186866][ T4211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.198004][ T4211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.208431][ T4211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.233193][ T4211] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  125.243096][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.360394][ T4211] usb 4-1: config 0 descriptor??
[  125.369236][ T6348] XFS (loop2): Quotacheck: Done.
[  125.425027][ T6358] BTRFS info (device loop0): enabling ssd optimizations
[  125.439356][ T6414] loop1: detected capacity change from 0 to 2048
[  125.518437][ T4169] XFS (loop2): Unmounting Filesystem
[  125.528020][ T6392] loop4: detected capacity change from 0 to 32768
[  125.603314][ T6392] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.800 (6392)
[  125.673443][ T6422] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.673674][ T6392] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  125.695491][ T6392] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  125.762215][ T6392] BTRFS info (device loop4): trying to use backup root at mount time
[  125.771395][ T6392] BTRFS info (device loop4): force clearing of disk cache
[  125.789382][ T6414] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  125.789963][ T6392] BTRFS info (device loop4): enabling ssd optimizations
[  125.859192][ T6392] BTRFS info (device loop4): using spread ssd allocation scheme
[  125.870506][ T6414] Remounting filesystem read-only
[  125.891785][ T6392] BTRFS info (device loop4): enabling disk space caching
[  125.898475][ T6414] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  125.899143][ T6392] BTRFS info (device loop4): disk space caching is enabled
[  125.936286][ T4211] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input8
[  125.961754][ T6392] BTRFS info (device loop4): has skinny extents
[  126.041329][ T4211] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  126.165458][ T4214] usb 4-1: USB disconnect, device number 8
[  126.193639][ T6430] loop1: detected capacity change from 0 to 256
[  126.824106][ T6468] loop0: detected capacity change from 0 to 256
[  126.912745][ T6468] exfat: Deprecated parameter 'namecase'
[  127.014516][ T6468] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  127.157085][ T6468] autofs4:pid:6468:autofs_fill_super: called with bogus options
[  127.220674][ T6472] loop4: detected capacity change from 0 to 4096
[  127.274000][ T6476] overlayfs: unrecognized mount option "?�Z�ug�=��2����Dt�.�����ٵn���1������G����E-��"��fhǏ!%T��ɠ�ΰ����8�Y��P�9)-�N5\�\���ϰ��x��=mjY�p1�k�W�'�<�m���{��������ѥ���{����wг�Q���KS�m�@Y�Q��K�8?r����jj� 1�\�{>1Q�!@dRN����;+!s��ׂ��3~��&�R����~5�tfG��	M�Y!�K0��Xl��l�~���" or missing value
[  127.304620][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.327706][ T6472] __ntfs_warning: 2 callbacks suppressed
[  127.327723][ T6472] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  127.419497][ T6472] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  127.507815][ T6472] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  127.573884][ T6472] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  127.620309][ T6472] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  127.720002][ T6472] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  127.783186][ T6472] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  127.804784][ T6456] loop1: detected capacity change from 0 to 32768
[  127.827048][ T6472] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  127.866506][ T6472] ntfs: (device loop4): check_mft_mirror(): Failed to read $MFTMirr.
[  127.874872][ T6472] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  127.904139][ T6472] ntfs: volume version 3.1.
[  127.913323][ T6465] loop2: detected capacity change from 0 to 32768
[  127.971369][ T6465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.815 (6465)
[  127.976650][ T6493] loop3: detected capacity change from 0 to 1024
[  128.008705][ T6456] XFS (loop1): Mounting V5 Filesystem
[  128.043723][ T6465] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  128.066081][ T6465] BTRFS info (device loop2): using free space tree
[  128.086223][ T6493] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,grpquota,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  128.087948][ T6456] XFS (loop1): Ending clean mount
[  128.108542][    C0] vkms_vblank_simulate: vblank timer overrun
[  128.125024][ T6465] BTRFS info (device loop2): has skinny extents
[  128.297979][ T6529] loop0: detected capacity change from 0 to 256
[  128.313100][ T4166] XFS (loop1): Unmounting Filesystem
[  128.326770][ T6465] BTRFS info (device loop2): enabling ssd optimizations
[  128.456516][ T4211] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  128.465036][ T6529] FAT-fs (loop0): Directory bread(block 64) failed
[  128.472777][ T6529] FAT-fs (loop0): Directory bread(block 65) failed
[  128.480276][ T6529] FAT-fs (loop0): Directory bread(block 66) failed
[  128.506502][ T6529] FAT-fs (loop0): Directory bread(block 67) failed
[  128.513481][ T6529] FAT-fs (loop0): Directory bread(block 68) failed
[  128.520632][ T6529] FAT-fs (loop0): Directory bread(block 69) failed
[  128.529939][ T6529] FAT-fs (loop0): Directory bread(block 70) failed
[  128.536950][ T6529] FAT-fs (loop0): Directory bread(block 71) failed
[  128.547884][ T6529] FAT-fs (loop0): Directory bread(block 72) failed
[  128.554449][ T6529] FAT-fs (loop0): Directory bread(block 73) failed
[  128.591443][ T6536] loop3: detected capacity change from 0 to 1024
[  128.712226][ T6536] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  128.729867][ T6538] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  128.748911][ T4211] usb 5-1: Using ep0 maxpacket: 16
[  128.797901][ T6536] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback.
[  128.886960][ T4211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.906280][ T4211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.917618][ T4211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  128.931433][ T4211] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  128.940912][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.951308][ T4211] usb 5-1: config 0 descriptor??
[  129.463216][ T4211] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input9
[  129.516640][ T6559] loop3: detected capacity change from 0 to 2048
[  129.576274][ T6563] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.590613][ T4211] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  129.597583][ T6565] overlayfs: unrecognized mount option "?�Z�ug�=��2����Dt�.�����ٵn���1������G����E-��"��fhǏ!%T��ɠ�ΰ����8�Y��P�9)-�N5\�\���ϰ��x��=mjY�p1�k�W�'�<�m���{��������ѥ���{����wг�Q���KS�m�@Y�Q��K�8?r����jj� 1�\�{>1Q�!@dRN����;+!s��ׂ��3~��&�R����~5�tfG��	M�Y!�K0��Xl��l�~���" or missing value
[  129.705457][ T6559] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  129.706259][ T4211] usb 5-1: USB disconnect, device number 7
[  129.729744][ T6559] Remounting filesystem read-only
[  129.743071][ T6559] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  130.015366][ T6570] [U] �
[  130.190859][ T6549] loop0: detected capacity change from 0 to 40427
[  130.379007][ T6549] F2FS-fs (loop0): Found nat_bits in checkpoint
[  130.490230][ T6562] loop2: detected capacity change from 0 to 32768
[  130.517143][ T6549] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  130.594567][ T6567] loop1: detected capacity change from 0 to 32768
[  130.602878][ T4171] attempt to access beyond end of device
[  130.602878][ T4171] loop0: rw=2049, want=45104, limit=40427
[  130.666154][ T6567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.847 (6567)
[  130.684892][ T6562] XFS (loop2): Mounting V5 Filesystem
[  130.784669][ T6562] XFS (loop2): Ending clean mount
[  130.859637][ T6567] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  130.911043][ T6567] BTRFS info (device loop1): using free space tree
[  130.946594][ T6567] BTRFS info (device loop1): has skinny extents
[  130.962636][ T4169] XFS (loop2): Unmounting Filesystem
[  131.167381][ T6567] BTRFS info (device loop1): enabling ssd optimizations
[  131.523867][ T6623] loop3: detected capacity change from 0 to 4096
[  131.592515][ T6633] overlayfs: unrecognized mount option "?�Z�ug�=��2����Dt�.�����ٵn���1������G����E-��"��fhǏ!%T��ɠ�ΰ����8�Y��P�9)-�N5\�\���ϰ��x��=mjY�p1�k�W�'�<�m���{��������ѥ���{����wг�Q���KS�m�@Y�Q��K�8?r����jj� 1�\�{>1Q�!@dRN����;+!s��ׂ��3~��&�R����~5�tfG��	M�Y!�K0��Xl��l�~���" or missing value
[  131.737900][ T6623] ntfs: volume version 3.1.
[  131.853084][ T6601] loop4: detected capacity change from 0 to 32768
[  131.871727][ T6640] loop2: detected capacity change from 0 to 1024
[  131.912640][ T6601] XFS: ikeep mount option is deprecated.
[  131.941135][ T6640] hfsplus: bad catalog entry type
[  132.005069][ T6601] XFS (loop4): Mounting V5 Filesystem
[  132.029755][ T4225] hfsplus: b-tree write err: -5, ino 4
[  132.231852][ T6601] XFS (loop4): Ending clean mount
[  132.248804][ T6601] XFS (loop4): Quotacheck needed: Please wait.
[  132.335116][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'.
[  132.381223][ T6601] XFS (loop4): Quotacheck: Done.
[  132.441594][ T4172] XFS (loop4): Unmounting Filesystem
[  132.658693][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.665081][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.796591][ T4214] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  132.866835][ T6682] loop1: detected capacity change from 0 to 1024
[  132.936281][ T6657] loop3: detected capacity change from 0 to 32768
[  132.961962][ T6682] hfsplus: bad catalog entry type
[  133.024531][  T154] hfsplus: b-tree write err: -5, ino 4
[  133.130499][ T6686] loop4: detected capacity change from 0 to 256
[  133.186734][ T4214] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  133.197950][ T4214] usb 3-1: config 0 has no interface number 0
[  133.204089][ T4214] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.215649][ T6686] FAT-fs (loop4): Directory bread(block 64) failed
[  133.255948][ T6686] FAT-fs (loop4): Directory bread(block 65) failed
[  133.263435][ T4214] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  133.272830][ T6686] FAT-fs (loop4): Directory bread(block 66) failed
[  133.285869][ T6686] FAT-fs (loop4): Directory bread(block 67) failed
[  133.293157][ T6686] FAT-fs (loop4): Directory bread(block 68) failed
[  133.297261][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.308891][ T6686] FAT-fs (loop4): Directory bread(block 69) failed
[  133.321500][ T6686] FAT-fs (loop4): Directory bread(block 70) failed
[  133.330727][ T6686] FAT-fs (loop4): Directory bread(block 71) failed
[  133.332820][ T6672] loop0: detected capacity change from 0 to 32768
[  133.341339][ T6686] FAT-fs (loop4): Directory bread(block 72) failed
[  133.348996][ T6688] loop1: detected capacity change from 0 to 8192
[  133.353579][ T6686] FAT-fs (loop4): Directory bread(block 73) failed
[  133.357860][ T4214] usb 3-1: config 0 descriptor??
[  133.439277][ T6688] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  133.458408][ T6688] REISERFS (device loop1): using ordered data mode
[  133.464950][ T6688] reiserfs: using flush barriers
[  133.480995][ T6688] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  133.502971][ T6688] REISERFS (device loop1): checking transaction log (loop1)
[  133.508219][ T6672] XFS (loop0): Mounting V5 Filesystem
[  133.511833][ T6688] REISERFS (device loop1): Using r5 hash to sort names
[  133.529711][ T6688] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  133.548045][ T6688] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  133.592804][ T6672] XFS (loop0): Ending clean mount
[  133.701701][ T4171] XFS (loop0): Unmounting Filesystem
[  133.865160][ T4214] uclogic 0003:5543:0522.000D: unknown main item tag 0x0
[  133.907755][ T4214] uclogic 0003:5543:0522.000D: unknown main item tag 0x0
[  133.925165][ T4214] uclogic 0003:5543:0522.000D: unknown main item tag 0x0
[  133.962456][ T4214] uclogic 0003:5543:0522.000D: unknown main item tag 0x0
[  133.974874][ T4214] uclogic 0003:5543:0522.000D: unknown main item tag 0x0
[  133.993095][ T4214] uclogic 0003:5543:0522.000D: No inputs registered, leaving
[  134.025315][ T4214] uclogic 0003:5543:0522.000D: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input2
[  134.127837][ T4214] usb 3-1: USB disconnect, device number 6
[  134.273665][ T6724] loop1: detected capacity change from 0 to 16
[  134.373140][ T6724] erofs: (device loop1): mounted with root inode @ nid 36.
[  134.434229][ T6724] attempt to access beyond end of device
[  134.434229][ T6724] loop1: rw=524288, want=312, limit=16
[  134.486929][ T6724] attempt to access beyond end of device
[  134.486929][ T6724] loop1: rw=524288, want=320, limit=16
[  134.676606][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'.
[  134.970292][ T6755] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  135.319462][ T6734] loop0: detected capacity change from 0 to 32768
[  135.337317][ T6738] loop3: detected capacity change from 0 to 32768
[  135.387263][ T6734] XFS: ikeep mount option is deprecated.
[  135.401000][ T6769] loop2: detected capacity change from 0 to 64
[  135.416274][ T6764] loop4: detected capacity change from 0 to 4096
[  135.441905][ T6738] XFS (loop3): Mounting V5 Filesystem
[  135.469974][ T6764] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  135.499064][ T6738] XFS (loop3): Ending clean mount
[  135.511019][ T6738] XFS (loop3): Quotacheck needed: Please wait.
[  135.530323][ T6734] XFS (loop0): Mounting V5 Filesystem
[  135.628549][ T6764] ntfs3: loop4: failed to convert "c46c" to maciceland
[  135.639963][ T6738] XFS (loop3): Quotacheck: Done.
[  135.735999][ T6734] XFS (loop0): Ending clean mount
[  135.759256][ T6734] XFS (loop0): Quotacheck needed: Please wait.
[  135.823755][ T4174] XFS (loop3): Unmounting Filesystem
[  135.908476][ T6734] XFS (loop0): Quotacheck: Done.
[  136.126185][ T4171] XFS (loop0): Unmounting Filesystem
[  136.132100][ T6801] loop4: detected capacity change from 0 to 64
[  136.402816][ T6791] loop1: detected capacity change from 0 to 32768
[  136.531352][ T6791] JBD2: Ignoring recovery information on journal
[  136.640556][ T6791] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  136.683223][ T6791] (syz.1.924,6791,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  136.733508][ T6791] (syz.1.924,6791,0):ocfs2_group_add:495 ERROR: Can't read the group descriptor # 117440512 from the device.
[  136.762629][ T4166] ocfs2: Unmounting device (7,1) on (node local)
[  136.832813][ T6823] loop4: detected capacity change from 0 to 1024
[  136.979432][  T731] hfsplus: b-tree write err: -5, ino 4
[  136.996626][ T4728] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  137.098470][ T6837] loop4: detected capacity change from 0 to 64
[  137.308547][ T4728] usb 4-1: Using ep0 maxpacket: 16
[  137.409739][ T6854] mkiss: ax0: crc mode is auto.
[  137.456764][ T4728] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  137.478767][ T4728] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  137.516506][ T4728] usb 4-1: config 0 interface 0 has no altsetting 0
[  137.584465][ T6867] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  137.736649][ T4728] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  137.762166][ T4728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.793769][ T4728] usb 4-1: Product: syz
[  137.808543][ T4728] usb 4-1: Manufacturer: syz
[  137.818745][ T4728] usb 4-1: SerialNumber: syz
[  137.863907][ T4728] usb 4-1: config 0 descriptor??
[  138.162530][ T4728] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  138.362061][ T4211] usb 4-1: USB disconnect, device number 9
[  138.378269][ T6902] loop4: detected capacity change from 0 to 512
[  138.384919][ T3531] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  138.477354][ T6902] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  138.530911][ T6879] loop2: detected capacity change from 0 to 32768
[  138.558463][ T6902] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  138.578211][ T6902] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.974: invalid indirect mapped block 2683928664 (level 1)
[  138.605906][ T6902] EXT4-fs (loop4): Remounting filesystem read-only
[  138.614542][ T6902] EXT4-fs (loop4): 1 truncate cleaned up
[  138.625422][ T6902] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback.
[  138.684481][ T4172] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  138.727635][ T4172] EXT4-fs (loop4): Remounting filesystem read-only
[  138.740255][ T4172] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 3 in block_group 0
[  138.770908][ T6879] XFS (loop2): Mounting V5 Filesystem
[  138.830011][ T6916] loop0: detected capacity change from 0 to 2048
[  138.844573][ T4172] EXT4-fs (loop4): Remounting filesystem read-only
[  138.870974][ T4172] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  138.921020][ T4172] EXT4-fs (loop4): Remounting filesystem read-only
[  138.930328][ T6919] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.969792][ T6916] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16)
[  138.983883][ T6879] XFS (loop2): Ending clean mount
[  138.995301][ T4172] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr
[  139.054593][ T4172] EXT4-fs (loop4): Remounting filesystem read-only
[  139.063499][ T6916] Remounting filesystem read-only
[  139.074397][ T6916] NILFS (loop0): error -5 truncating bmap (ino=16)
[  139.081718][ T4172] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr
[  139.110219][ T4172] EXT4-fs (loop4): Remounting filesystem read-only
[  139.118548][ T4169] XFS (loop2): Unmounting Filesystem
[  139.206392][ T6907] loop1: detected capacity change from 0 to 32768
[  139.213831][ T4171] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  139.224340][ T4171] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  139.235797][ T4171] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  139.246330][ T4171] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  139.252420][ T6907] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.976 (6907)
[  139.277897][ T4171] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  139.296006][ T4171] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  139.324264][ T6907] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  139.374697][ T6907] BTRFS info (device loop1): setting nodatasum
[  139.446977][ T6907] BTRFS info (device loop1): using free space tree
[  139.453560][ T6907] BTRFS info (device loop1): has skinny extents
[  139.559232][ T6935] loop3: detected capacity change from 0 to 1024
[  139.693109][ T6944] netlink: 830 bytes leftover after parsing attributes in process `syz.0.986'.
[  139.925592][ T6907] BTRFS info (device loop1): enabling ssd optimizations
[  140.051471][   T26] kauditd_printk_skb: 33 callbacks suppressed
[  140.051487][   T26] audit: type=1800 audit(1730179890.149:9): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.976" name="file1" dev="loop1" ino=260 res=0 errno=0
[  140.149079][ T1235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.246971][ T6969] loop3: detected capacity change from 0 to 512
[  140.286072][ T6963] loop0: detected capacity change from 0 to 8192
[  140.418863][ T6969] EXT4-fs (loop3): orphan cleanup on readonly fs
[  140.426989][ T6969] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  140.489568][ T1235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.526866][ T6969] EXT4-fs (loop3): 1 truncate cleaned up
[  140.544349][ T6976] loop2: detected capacity change from 0 to 512
[  140.563088][ T6969] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,resuid=0x000000000000ee00,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[  140.657523][ T5062] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  140.674207][ T1235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.683433][ T6985] sg_write: data in/out 588840944/109 bytes for SCSI command 0x94-- guessing data in;
[  140.683433][ T6985]    program syz.0.1000 not setting count and/or reply_len properly
[  140.764687][ T6976] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  140.795434][ T6985] program syz.0.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.805109][ T6969] EXT4-fs (loop3): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback.
[  140.805576][ T6976] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.851488][ T1235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.892635][ T6989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1001'.
[  140.901945][ T5062] usb 2-1: Using ep0 maxpacket: 8
[  141.197742][ T5062] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  141.236506][ T5062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.276556][ T5062] usb 2-1: Product: syz
[  141.280768][ T5062] usb 2-1: Manufacturer: syz
[  141.285375][ T5062] usb 2-1: SerialNumber: syz
[  141.295491][ T7001] loop3: detected capacity change from 0 to 764
[  141.310933][ T6999] loop2: detected capacity change from 0 to 2048
[  141.327894][ T5062] usb 2-1: config 0 descriptor??
[  141.373071][ T5062] gspca_main: sq930x-2.14.0 probing 2770:930c
[  141.463354][ T7006] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.498176][ T6999] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  141.518455][ T6999] Remounting filesystem read-only
[  141.530840][ T6999] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  141.559431][ T6980] chnl_net:caif_netlink_parms(): no params data found
[  141.911192][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.936660][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.957743][ T6980] device bridge_slave_0 entered promiscuous mode
[  142.015953][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.058690][ T5062] gspca_sq930x: reg_w 0305 fd00 failed -71
[  142.072245][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.093440][ T6980] device bridge_slave_1 entered promiscuous mode
[  142.216492][ T5077] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  142.237693][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.248831][ T6998] loop0: detected capacity change from 0 to 32768
[  142.258253][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.280252][ T7019] loop3: detected capacity change from 0 to 32768
[  142.300151][ T6998] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1004 (6998)
[  142.300661][ T5062] gspca_sq930x: Sensor ov9630 not yet treated
[  142.341356][ T5062] sq930x: probe of 2-1:0.0 failed with error -22
[  142.363689][ T5062] usb 2-1: USB disconnect, device number 4
[  142.382357][ T6998] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  142.392018][ T6998] BTRFS info (device loop0): using free space tree
[  142.400771][ T6998] BTRFS info (device loop0): has skinny extents
[  142.410580][ T6980] team0: Port device team_slave_0 added
[  142.434220][ T7019] JBD2: Ignoring recovery information on journal
[  142.456559][ T5077] usb 3-1: Using ep0 maxpacket: 16
[  142.500813][ T7019] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  142.518544][ T6980] team0: Port device team_slave_1 added
[  142.584757][ T7019] 
[  142.587127][ T7019] ======================================================
[  142.594158][ T7019] WARNING: possible circular locking dependency detected
[  142.601186][ T7019] 5.15.169-syzkaller #0 Not tainted
[  142.606391][ T7019] ------------------------------------------------------
[  142.613415][ T7019] syz.3.1009/7019 is trying to acquire lock:
[  142.619398][ T7019] ffff888070bb5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x398/0x930
[  142.628729][ T7019] 
[  142.628729][ T7019] but task is already holding lock:
[  142.636113][ T7019] ffff888074428990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570
[  142.645371][ T7019] 
[  142.645371][ T7019] which lock already depends on the new lock.
[  142.645371][ T7019] 
[  142.655784][ T7019] 
[  142.655784][ T7019] the existing dependency chain (in reverse order) is:
[  142.664804][ T7019] 
[  142.664804][ T7019] -> #4 (jbd2_handle){++++}-{0:0}:
[  142.672120][ T7019]        lock_acquire+0x1db/0x4f0
[  142.675727][ T7047] loop1: detected capacity change from 0 to 1024
[  142.677165][ T7019]        start_this_handle+0x12e1/0x1570
[  142.677196][ T7019]        jbd2__journal_start+0x2d1/0x5c0
[  142.677219][ T7019]        jbd2_journal_start+0x25/0x30
[  142.677240][ T7019]        ocfs2_start_trans+0x3c2/0x6f0
[  142.677260][ T7019]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  142.677291][ T7019]        ocfs2_dismount_volume+0x1db/0x8b0
[  142.677314][ T7019]        generic_shutdown_super+0x130/0x310
[  142.677331][ T7019]        kill_block_super+0x7a/0xe0
[  142.677347][ T7019]        deactivate_locked_super+0xa0/0x110
[  142.677370][ T7019]        cleanup_mnt+0x44e/0x500
[  142.677387][ T7019]        task_work_run+0x129/0x1a0
[  142.744731][ T7019]        exit_to_user_mode_loop+0x106/0x130
[  142.750629][ T7019]        exit_to_user_mode_prepare+0xb1/0x140
[  142.756693][ T7019]        syscall_exit_to_user_mode+0x5d/0x240
[  142.762767][ T7019]        do_syscall_64+0x47/0xb0
[  142.767690][ T7019]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.774099][ T7019] 
[  142.774099][ T7019] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  142.782603][ T7019]        lock_acquire+0x1db/0x4f0
[  142.787617][ T7019]        down_read+0x45/0x2e0
[  142.792282][ T7019]        ocfs2_start_trans+0x3b7/0x6f0
[  142.797725][ T7019]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  142.803971][ T7019]        ocfs2_dismount_volume+0x1db/0x8b0
[  142.809769][ T7019]        generic_shutdown_super+0x130/0x310
[  142.815655][ T7019]        kill_block_super+0x7a/0xe0
[  142.820845][ T7019]        deactivate_locked_super+0xa0/0x110
[  142.826730][ T7019]        cleanup_mnt+0x44e/0x500
[  142.831657][ T7019]        task_work_run+0x129/0x1a0
[  142.836761][ T7019]        exit_to_user_mode_loop+0x106/0x130
[  142.842650][ T7019]        exit_to_user_mode_prepare+0xb1/0x140
[  142.848707][ T7019]        syscall_exit_to_user_mode+0x5d/0x240
[  142.854778][ T7019]        do_syscall_64+0x47/0xb0
[  142.859710][ T7019]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.866116][ T7019] 
[  142.866116][ T7019] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  142.873581][ T7019]        lock_acquire+0x1db/0x4f0
[  142.878598][ T7019]        ocfs2_start_trans+0x2b2/0x6f0
[  142.884045][ T7019]        ocfs2_mknod+0x15bb/0x2cd0
[  142.889149][ T7019]        ocfs2_create+0x194/0x430
[  142.894164][ T7019]        path_openat+0x130a/0x2f20
[  142.899260][ T7019]        do_filp_open+0x21c/0x460
[  142.904272][ T7019]        do_sys_openat2+0x13b/0x4f0
[  142.909590][ T7019]        __x64_sys_openat+0x243/0x290
[  142.914964][ T7019]        do_syscall_64+0x3b/0xb0
[  142.919896][ T7019]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.926318][ T7019] 
[  142.926318][ T7019] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  142.936920][ T7019]        lock_acquire+0x1db/0x4f0
[  142.941942][ T7019]        down_write+0x38/0x60
[  142.946608][ T7019]        ocfs2_reserve_local_alloc_bits+0x12e/0x27a0
[  142.953362][ T7019]        ocfs2_reserve_clusters_with_limit+0x1b4/0xb50
[  142.960224][ T7019]        ocfs2_init_xattr_set_ctxt+0x409/0x8c0
[  142.966373][ T7019]        ocfs2_xattr_set+0xf46/0x1930
[  142.971737][ T7019]        __vfs_setxattr+0x3e7/0x420
[  142.976926][ T7019]        __vfs_setxattr_noperm+0x12a/0x5e0
[  142.982744][ T7019]        vfs_setxattr+0x21d/0x420
[  142.987755][ T7019]        setxattr+0x27e/0x2e0
[  142.992426][ T7019]        path_setxattr+0x1bc/0x2a0
[  142.997523][ T7019]        __x64_sys_setxattr+0xb7/0xd0
[  143.002904][ T7019]        do_syscall_64+0x3b/0xb0
[  143.007847][ T7019]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.014269][ T7019] 
[  143.014269][ T7019] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  143.022070][ T7019]        validate_chain+0x1649/0x5930
[  143.027440][ T7019]        __lock_acquire+0x1295/0x1ff0
[  143.032801][ T7019]        lock_acquire+0x1db/0x4f0
[  143.037811][ T7019]        down_read+0x45/0x2e0
[  143.042475][ T7019]        ocfs2_init_acl+0x398/0x930
[  143.047669][ T7019]        ocfs2_mknod+0x1e8f/0x2cd0
[  143.052766][ T7019]        ocfs2_create+0x194/0x430
[  143.057777][ T7019]        path_openat+0x130a/0x2f20
[  143.062880][ T7019]        do_filp_open+0x21c/0x460
[  143.067891][ T7019]        do_sys_openat2+0x13b/0x4f0
[  143.073077][ T7019]        __x64_sys_openat+0x243/0x290
[  143.078438][ T7019]        do_syscall_64+0x3b/0xb0
[  143.083375][ T7019]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.089777][ T7019] 
[  143.089777][ T7019] other info that might help us debug this:
[  143.089777][ T7019] 
[  143.099994][ T7019] Chain exists of:
[  143.099994][ T7019]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  143.099994][ T7019] 
[  143.113709][ T7019]  Possible unsafe locking scenario:
[  143.113709][ T7019] 
[  143.121137][ T7019]        CPU0                    CPU1
[  143.126486][ T7019]        ----                    ----
[  143.131836][ T7019]   lock(jbd2_handle);
[  143.135891][ T7019]                                lock(&journal->j_trans_barrier);
[  143.143677][ T7019]                                lock(jbd2_handle);
[  143.150247][ T7019]   lock(&oi->ip_xattr_sem);
[  143.154829][ T7019] 
[  143.154829][ T7019]  *** DEADLOCK ***
[  143.154829][ T7019] 
[  143.162958][ T7019] 8 locks held by syz.3.1009/7019:
[  143.168050][ T7019]  #0: ffff88801b9d4460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  143.177296][ T7019]  #1: ffff888070bb5f48 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: path_openat+0x824/0x2f20
[  143.187554][ T7019]  #2: ffff888070af89c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70
[  143.201201][ T7019]  #3: ffff888070bb09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70
[  143.214847][ T7019]  #4: ffff888070afdf48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x12e/0x27a0
[  143.228760][ T7019]  #5: ffff88801b9d4650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0x15bb/0x2cd0
[  143.238079][ T7019]  #6: ffff8880635ef4e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3b7/0x6f0
[  143.248777][ T7019]  #7: ffff888074428990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570
[  143.258443][ T7019] 
[  143.258443][ T7019] stack backtrace:
[  143.264312][ T7019] CPU: 0 PID: 7019 Comm: syz.3.1009 Not tainted 5.15.169-syzkaller #0
[  143.272452][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  143.282492][ T7019] Call Trace:
[  143.285780][ T7019]  <TASK>
[  143.288704][ T7019]  dump_stack_lvl+0x1e3/0x2d0
[  143.293379][ T7019]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  143.299002][ T7019]  ? print_circular_bug+0x12b/0x1a0
[  143.304190][ T7019]  check_noncircular+0x2f8/0x3b0
[  143.309119][ T7019]  ? add_chain_block+0x850/0x850
[  143.314048][ T7019]  ? lockdep_lock+0x11f/0x2a0
[  143.318717][ T7019]  ? reacquire_held_locks+0x660/0x660
[  143.324082][ T7019]  validate_chain+0x1649/0x5930
[  143.328931][ T7019]  ? lockdep_init_map_type+0x9d/0x8d0
[  143.334304][ T7019]  ? mark_lock+0x98/0x340
[  143.338620][ T7019]  ? reacquire_held_locks+0x660/0x660
[  143.343985][ T7019]  ? __lock_acquire+0x1295/0x1ff0
[  143.349009][ T7019]  ? mark_lock+0x98/0x340
[  143.353330][ T7019]  __lock_acquire+0x1295/0x1ff0
[  143.358178][ T7019]  lock_acquire+0x1db/0x4f0
[  143.362671][ T7019]  ? ocfs2_init_acl+0x398/0x930
[  143.367518][ T7019]  ? read_lock_is_recursive+0x10/0x10
[  143.372881][ T7019]  ? __might_sleep+0xc0/0xc0
[  143.377466][ T7019]  ? trace_ocfs2_claim_new_inode_at_loc+0x1e0/0x1e0
[  143.384052][ T7019]  ? set_current_blocked+0x40/0x40
[  143.389161][ T7019]  down_read+0x45/0x2e0
[  143.393306][ T7019]  ? ocfs2_init_acl+0x398/0x930
[  143.398161][ T7019]  ocfs2_init_acl+0x398/0x930
[  143.402825][ T7019]  ? ocfs2_mknod_locked+0x21e/0x3a0
[  143.408021][ T7019]  ? ocfs2_acl_chmod+0x360/0x360
[  143.412952][ T7019]  ? ocfs2_start_trans+0x4dc/0x6f0
[  143.418052][ T7019]  ? __ocfs2_abort+0x230/0x230
[  143.422811][ T7019]  ? ocfs2_init_security_get+0x130/0x190
[  143.428435][ T7019]  ocfs2_mknod+0x1e8f/0x2cd0
[  143.433024][ T7019]  ? ocfs2_mkdir+0x430/0x430
[  143.437602][ T7019]  ? mark_lock+0x98/0x340
[  143.441930][ T7019]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  143.447929][ T7019]  ? print_irqtrace_events+0x210/0x210
[  143.453409][ T7019]  ? read_lock_is_recursive+0x10/0x10
[  143.458773][ T7019]  ? ocfs2_inode_unlock+0xa3/0x150
[  143.463878][ T7019]  ? __lock_acquire+0x1ff0/0x1ff0
[  143.468891][ T7019]  ? do_raw_spin_lock+0x14a/0x370
[  143.473910][ T7019]  ? do_raw_spin_unlock+0x137/0x8b0
[  143.479103][ T7019]  ? do_raw_spin_unlock+0x137/0x8b0
[  143.484293][ T7019]  ? __d_add+0x4d7/0x7f0
[  143.488530][ T7019]  ? _raw_spin_unlock+0x24/0x40
[  143.493375][ T7019]  ? rcu_is_watching+0x11/0xa0
[  143.498127][ T7019]  ? ocfs2_lookup+0x4ed/0x9f0
[  143.502818][ T7019]  ocfs2_create+0x194/0x430
[  143.507311][ T7019]  ? ocfs2_lookup+0x9f0/0x9f0
[  143.511976][ T7019]  ? inode_permission+0xf7/0x450
[  143.516905][ T7019]  ? ocfs2_getattr+0x380/0x380
[  143.521664][ T7019]  ? bpf_lsm_inode_create+0x5/0x10
[  143.526793][ T7019]  ? security_inode_create+0xb4/0x100
[  143.532177][ T7019]  ? ocfs2_lookup+0x9f0/0x9f0
[  143.536848][ T7019]  path_openat+0x130a/0x2f20
[  143.541442][ T7019]  ? do_filp_open+0x460/0x460
[  143.546125][ T7019]  do_filp_open+0x21c/0x460
[  143.550623][ T7019]  ? vfs_tmpfile+0x2e0/0x2e0
[  143.555212][ T7019]  ? _raw_spin_unlock+0x24/0x40
[  143.560076][ T7019]  ? alloc_fd+0x598/0x630
[  143.564403][ T7019]  do_sys_openat2+0x13b/0x4f0
[  143.569076][ T7019]  ? do_sys_open+0x220/0x220
[  143.573671][ T7019]  __x64_sys_openat+0x243/0x290
[  143.578514][ T7019]  ? __ia32_sys_open+0x270/0x270
[  143.583462][ T7019]  ? syscall_enter_from_user_mode+0x2e/0x240
[  143.589470][ T7019]  ? lockdep_hardirqs_on+0x94/0x130
[  143.594693][ T7019]  ? syscall_enter_from_user_mode+0x2e/0x240
[  143.600667][ T7019]  do_syscall_64+0x3b/0xb0
[  143.605073][ T7019]  ? clear_bhb_loop+0x15/0x70
[  143.609738][ T7019]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.615628][ T7019] RIP: 0033:0x7fea57768719
[  143.620046][ T7019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.639639][ T7019] RSP: 002b:00007fea55be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  143.648046][ T7019] RAX: ffffffffffffffda RBX: 00007fea5791ff80 RCX: 00007fea57768719
[  143.656010][ T7019] RDX: 000000000000275a RSI: 00000000200001c0 RDI: ffffffffffffff9c
[  143.663999][ T7019] RBP: 00007fea577db32e R08: 0000000000000000 R09: 0000000000000000
[  143.671986][ T7019] R10: 000000000000feff R11: 0000000000000246 R12: 0000000000000000
[  143.679955][ T7019] R13: 0000000000000000 R14: 00007fea5791ff80 R15: 00007ffdfbee62a8
[  143.687951][ T7019]  </TASK>
[  143.714699][ T7047] hfsplus: bad catalog entry type
[  143.721489][ T6002] Bluetooth: hci3: command 0x0409 tx timeout
[  143.770821][ T6998] BTRFS info (device loop0): enabling ssd optimizations
[  143.782330][ T4174] ocfs2: Unmounting device (7,3) on (node local)
[  143.793072][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.800189][ T5077] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  143.812409][    T9] hfsplus: b-tree write err: -5, ino 4
[  143.818499][ T5077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.826881][ T5077] usb 3-1: Product: syz
[  143.831138][ T5077] usb 3-1: Manufacturer: syz
[  143.835807][ T5077] usb 3-1: SerialNumber: syz
[  143.840815][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.841872][ T5077] r8152-cfgselector 3-1: config 0 descriptor??
[  143.918186][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.934425][ T6998] BTRFS info (device loop0): balance: start 
[  143.961441][ T6998] BTRFS info (device loop0): balance: ended with status: 0
[  144.022180][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.036501][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.064959][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.126550][ T5077] r8152-cfgselector 3-1: Unknown version 0x0000
[  144.144985][ T6980] device hsr_slave_0 entered promiscuous mode
[  144.155826][ T6980] device hsr_slave_1 entered promiscuous mode
[  144.166899][ T5077] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[  144.192284][ T6980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.204742][ T6980] Cannot create hsr debugfs directory
[  144.328923][ T6636] usb 3-1: config 0 descriptor??
[  144.329570][ T6980] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  144.352648][ T6980] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  144.362110][ T6980] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  144.394364][ T5062] usb 3-1: USB disconnect, device number 7
[  144.400563][ T6980] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  144.409082][ T6636] usb 3-1: can't set config #0, error -71
[  144.478881][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.506602][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  144.514713][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  144.528813][ T6980] 8021q: adding VLAN 0 to HW filter on device team0
[  144.542707][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  144.554762][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  144.563748][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.570872][ T6636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.582979][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  144.615322][ T1235] device hsr_slave_0 left promiscuous mode
[  144.622902][ T1235] device hsr_slave_1 left promiscuous mode
[  144.633077][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.641266][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.652033][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.660115][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.670921][ T1235] device bridge_slave_1 left promiscuous mode
[  144.677521][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.687514][ T1235] device bridge_slave_0 left promiscuous mode
[  144.693786][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.708535][ T1235] device veth1_macvtap left promiscuous mode
[  144.714711][ T1235] device veth0_macvtap left promiscuous mode
[  144.724038][ T1235] device veth1_vlan left promiscuous mode
[  144.730617][ T1235] device veth0_vlan left promiscuous mode
[  144.853811][ T1235] team0 (unregistering): Port device team_slave_1 removed
[  144.864792][ T1235] team0 (unregistering): Port device team_slave_0 removed
[  144.876945][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.891385][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.952279][ T1235] bond0 (unregistering): Released all slaves
[  144.999683][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  145.008515][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.017153][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.024265][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.032178][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  145.041032][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  145.049739][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  145.058684][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  145.067959][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  145.077346][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.085755][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.098726][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  145.107073][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.115375][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.139337][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  145.259666][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.267681][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.279763][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.382418][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.396054][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  145.423473][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  145.432286][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  145.445608][ T6980] device veth0_vlan entered promiscuous mode
[  145.454244][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  145.464770][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  145.481267][ T6980] device veth1_vlan entered promiscuous mode
[  145.517797][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  145.526376][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  145.539177][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.548178][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.559219][ T6980] device veth0_macvtap entered promiscuous mode
[  145.571881][ T6980] device veth1_macvtap entered promiscuous mode
[  145.589519][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.601007][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.614207][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.625137][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.637345][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.649469][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.660790][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.672180][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.684477][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.696796][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  145.707256][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  145.716975][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  145.725969][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  145.739212][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.751971][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.763052][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.775789][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.776705][ T6002] Bluetooth: hci3: command 0x041b tx timeout
[  145.789039][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.804644][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.815804][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.829010][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.840150][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.851452][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  145.877769][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.892913][ T6980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.902181][ T6980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.912264][ T6980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.921538][ T6980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.965176][ T6980] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  146.020716][ T6636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.032631][ T6980] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht'
[  146.042608][ T6636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.065237][  T731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  146.103640][ T6636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.114778][ T6636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.135001][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.859676][ T5060] Bluetooth: hci3: command 0x040f tx timeout
[  149.937059][ T5060] Bluetooth: hci3: command 0x0419 tx timeout