last executing test programs:

37.32974499s ago: executing program 0 (id=7916):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x56595559, 0x5}})

37.226480442s ago: executing program 0 (id=7918):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000280))

37.040250535s ago: executing program 0 (id=7920):
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'ip6tnl0\x00'}, 0x9})

36.893056007s ago: executing program 0 (id=7921):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL9zzu/0O86neb6fz/5Yz+z9rP287/Ne1t6YbzoOqtageuV6RAT/FrzwRxIAxAJAPwC4BgACACgdVzru/P7sEpP+vZOwP9fDqVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtnFq/mt5y7ob3///66vzh3v4+/8vJLPE6C9Wl7i+E0DMP5vC/c/auP9/WcE/cxD3P2vj/mdVsVe6APZfgN//f0lNfh1m+8MDuf9ZG/efsazsSt9/vtIbRLL2c3ClX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKGU/6i0+AVAFwKr3RdjDHGGGOMMcYY+/P4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/Yv7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFc1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiTDOl/If5b/9O/oCfz75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/Sr4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufPLvkAEIlCBCmKCmCA2iA1yBDmCnEHOIFeQK4gEkSAuiAtyB9cHeYK8Qb4gfxAfFAgKBjowgQ3ExaZHgxuCIsGNQdHgpqBYUDxwQYkgIbg5KBncEpQKbg1KB7cFZYLbg7JBuaB8UCG4I6gY3BlUCu4KKgd3B1WCqkG1oHpwT1AjuDeoGdwX1AruD2oHDwR1ggeDusFDQb3g4aB+8EjQIHg0aBg8FjQKGgdNgqZBsz91fu9P5H3CddPddZLuoXvql3Uv3Vv30X11P/2K7q9f1QP0azpZD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYnaLH6fH6bT1Bv6Mn6kl6sp6iU/VUPU2/q6frGXqmfk/P0u/r2XqOnqvn6TT9gZ6vF+h0/aFeqD/SGXqRXqyX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepverj/WO/QneqfepXfrT/Ue/Zneqz/X+/QXer/+Umfqr/QB/bU+qL/Rh/S3+rD+Th/RR/Ux/b0+rn/QJ/RJfUqf1mf0j/qs/kmf0/784v7817tRRpkYE2NiTazJYXKYnCanyWVymYiJmDgTZ3Kb3CaPyWPymXwm3sSbgqagOY8MmUKmkImaqCliipiipqgpZooZZ5xJMAmmpClpSplSprQpbcqYMqasKWvKm/LmDnOHudPcae4yd5m7zd2mqqlqqpvqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkmpgmpplpZpqb5qaFaWFamVamtWlt2pg2JtEkmramrWln2pn2pr3pYDqYjqaj6WQ6mS6mi+lquppupptJMkmmp+lpeplepo/pY/qZfqa/6W8GmAEm2SSbQWaQGWwGmyFmiBlqhpnh5xeqZqQZZUZ/O8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz36SbdLPQLDQZJsMsNovNUrPULDfLzUqz0qw2q81aWGvWm/Vmo9loNpvNZqvZarab7WaH2WF2mp1mt9lt9pg9Zq/Za/aZfWa/2W8yTaY5YA6Yg+agOWQOmcPmsDlijphj5pg5bo6bE+aEOWVOmTMm78XvS29ibXabw15lc9qrbS57jf37OJ/Nb+NtAVvQapvH5v1VbKy1Re1Ntpgtbp0tYRPszb+Jy9pytrytYO+wFe2dttJv4hr2XlvT3mdr2fttdXvPr+La9gFbxz5q6yIC2Ma2vm1qG9hHbUP7mG1kG9smtqltbZ+ybezTNtE+Y9vaZ38Tz7cL7Eq7yq62a+xOu8uesqftQfuNPWN/tN1sd9vPvmL721ftAPuaTbYDfxMPt2/ZEXakHWVH2zF27G/iyXaKTbVT7TT7rp1uZ/wmTrMf2Fk23c62c+xcO+/n+HxN6fZDu9B+ZDNsAIvtErvULrPL7Yr/X+sSu86utxvsDvuJ3Wy32K12m91+aSFsd9nd9lO7x35mD9iv7T77hd1vD9lM+9XP8fnHd8h+aw/b7+wRe9Qes9/b4/YH9XPuyF4A9kf7vf3JnrPeAiEBSVIUUAxlo1jKTjnoKspJV1MuuoYidC3F0XWUm66nPJSX8lF+iqcCVJA0GbJEFFIhKkxRuoEulVeMipOjEpRAN1NJuoVK0a1Umm6jMnQ7laVyVJ4q0B1Uke6kSnQXVaa7qQpVpWpUne6hGnQv1aT7qBbdT7XpAapDD1Jdeojq0cNUnx6hBvQoNaTHqBE1pibUlJrR49ScnqAW1JJa0ZPUmp6iNvQ0JdIz1JaepXb0N2pPz1EHep460gvUiTpTF3qRutJL1I26UxL1oJ70MvWi3tSH+lI/eoX606s0gF6jZBpIg+h1Gkxv0BB6k4bSMBpOb9EIGkmjaDSNobGUQuNoPL1NE+gdmkiTaDJNoVSaStPoXZpOM2gmvUez6H2aTXNoLs2jNPqA5tMCSqcPaSF9RBm0iBbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDt9TDvoE9pJu2g3fUp76DPaS5/TPvqC9tOXlElf0QH6mg7SN3SIvvXd6Ts6QkfpGH1Px+kHOkEn6RSdpjP0I52ln+gceYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCu8JoyE14Zx4XVh7vD6ME+YN8wX5g/jwwJhwVCHJrQhhWFYKCwcRsMbwiLhjWHREMNiYfHQhSXChPDmsGR4S1gqvDUsHd4WlglvD8uG5cJH768Q3hFWDO8MK4V3hZXDu8MqYdWwWlg9vCesEd4b1gzvC2uF94elwgfCOuGDYd3wobBe+HBYP3wkbBA+GjYMHwsbhY3DJmHTsFn4eNg8fCJsEbYMW4VPhq3Dp8I24dNhYvhM2DZ89uf9Dyz44/1JYY+wZ/hy+HLo/X1ybnReNC36QXR+dEE0PfphdGH0o2hGdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1Pvq2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1N3kirnizrkSLsE1dc1cM9fcPeFauJaulXvSPemeck+5p93T7hnX1j3r2rm/ufbuOdfBPe+edy+4Tq6z6+JedF3duFwX3pNJrqfr6Xq5Xq6P6+P6uX6uv+vvBrgBLtklu0FukBvsBrshbogb6oa64W64G+FGuFFulBvjxrgUl+LGu/FugpvgJrqJbrKb7FJdqpvmprnpbrqrOOPCWWa72W6um+vSXJqb786vGdPdQrfQZbgMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt9Nfc2FSt8ftdXvdPrfP7Xdfukz3lTvgvnYH3TfukPvWHXbfuSPuqDvmvnfH3Q/uhDvpTrnT7oz70Z11P7lzzruUyLjI+MjbkQmRdyITI5MikyNTIqmRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF9gc+gL+cI+6m/wRfyNvqi/yRfzxb3zJXyCv9mX9Lf4Uv5WX9rf5sv4231ZX86X94/5Rr6xb+Kb+mb+cd/cP+Fb+Ja+lX/St/ZP+Tb+aZ/on/Ft/bO+nf+bb++f8x38876jf8F38p19F/+i7+pf8t18d5/ke/ie/mXfy/f2fXxf38+/4vv7V/0A/5pP9gP9IP+6H+zf8EP8m36oH+aHx7zlR1y6RIaxPsWP8+P9236Cf8dP9JP8ZD/Fp/qpfpp/10/3M/xM/56f5d/3s/0cP9fP82n+Az/fL/Dp/kO/0H/kM/yiSzeV/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2/7Hf4T/xO/0uv9t/6vf4z/xe/7nf57/w+/2XPtN/5Q/4r/1B/40/5L/1h/13/og/6o/57/1x/4M/4U/6U/60P+N/9Gf9T/4c/581xhhjjLF/yrjLQ/HrPRdu5/f4nRzxi4N7AsDVW/Jn/nL/+RXl2jwXxr1FfOsIADzTvePDl7YqVZKSki4emyEhKDwH4NLfBJ0XA5fjRdAKnoJEaAklf7f+3qLzGfoH80dvA8jxi5xYuBxfnv9zAEz6nfkff3L4/DLhqbj/Yf45AEULX87JDpfjRdDq5/srLaHUH9Sft/kv64/97fzZv0gBaPGLnJxwOb5cfwI8Ac9C4q+OZIwxxhhjjDHGLugtyre/dP156V98/t71eby6nJMNLsf/6PqcMcYYY4wxxhhjV95znbs8/XhiYsv2//qg0v8q658eNIT/q5l58LsD7wEu/UQBwL85IcD5gfxPPopN/5FzJV986/z9rqWnfQD/Ha38MwZX+IOJMcYYY4wx9qe7vOj/9c/VlSqIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgv4Tv07sSj9GxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Er7fwEAAP//nXwDKg==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

36.484186533s ago: executing program 0 (id=7926):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

36.085210478s ago: executing program 0 (id=7929):
r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x3, 0x3f, 0x10, 0x9, &(0x7f0000001600)=[{}]})

35.636756255s ago: executing program 32 (id=7929):
r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x3, 0x3f, 0x10, 0x9, &(0x7f0000001600)=[{}]})

4.451404536s ago: executing program 3 (id=8267):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

3.599474919s ago: executing program 3 (id=8276):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "65cb0629f5a3e37d035000ed1ea2"}}]}, 0x30}}, 0x0)

3.419759871s ago: executing program 1 (id=8279):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x900801d)

3.256843903s ago: executing program 3 (id=8280):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x9}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x0)

3.150774605s ago: executing program 1 (id=8282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

3.046537397s ago: executing program 3 (id=8283):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x480, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000700)={"100d9a283fcf4768ec6a7582b5337051ee8b97f9f1cbe95c1be9b117762c", 0x4, 0x2, 0x1, 0x3ff, 0x5, 0xa, 0xe5, 0x4, [0x0, 0x4, 0x2, 0x80000001, 0x7fffffff, 0xa6a3, 0x0, 0xc7, 0x4, 0x0, 0x1, 0x6, 0x4, 0x65, 0x0, 0x6, 0x75, 0x3ff, 0xcd]})

2.849919789s ago: executing program 1 (id=8284):
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040))
lseek(r0, 0xffffffffffffffff, 0x2)

2.767024241s ago: executing program 3 (id=8286):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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")
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0)

2.614395903s ago: executing program 1 (id=8288):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff07090502"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

2.012235841s ago: executing program 2 (id=8293):
unshare(0x20400)
pidfd_send_signal(0xffffffffffffffff, 0x35, 0x0, 0x0)

2.012075561s ago: executing program 4 (id=8294):
r0 = fsopen(&(0x7f0000000440)='gfs2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1.861295084s ago: executing program 2 (id=8295):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418)

1.728180525s ago: executing program 4 (id=8296):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x40102, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

1.635832747s ago: executing program 2 (id=8297):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0xae2, 0x1, 0x0, 0x1}, 0x1c)

1.493525509s ago: executing program 4 (id=8298):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x1, 0x48080)

1.392253791s ago: executing program 2 (id=8299):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xc000000000, 0x800)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x4, 0x3, 0x3, 0xc, '\x00', 0x10000})

1.253641342s ago: executing program 4 (id=8300):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x7, 0x5, 0x4})

1.070467255s ago: executing program 2 (id=8301):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/81, 0x51}], 0x1, 0xa3, 0x0)

668.192471ms ago: executing program 4 (id=8302):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50)

667.947721ms ago: executing program 1 (id=8303):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

449.222824ms ago: executing program 2 (id=8304):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)

202.002757ms ago: executing program 3 (id=8305):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000000c0)={0x2, 0x1, 0x15, 0x0, 0xb8, &(0x7f0000000780)="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"})

52.15076ms ago: executing program 4 (id=8306):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x550c, &(0x7f00000079c0)="$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")
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')

0s ago: executing program 1 (id=8307):
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x5, 0x5, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x65a2dae5, 0x4, 0x0)

kernel console output (not intermixed with test programs):

oop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  953.645618][T22873] ext4 filesystem being mounted at /1920/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  953.823356][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.535198][T22868] loop2: detected capacity change from 0 to 32768
[  954.569510][T22868] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  954.589656][T22868] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  954.679842][T22868] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  954.697917][ T5890] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  954.705162][ T5890] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  954.888641][ T5890] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 196ms
[  954.909393][ T5890] gfs2: fsid=syz:syz.0: jid=0: Done
[  954.914784][T22868] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  954.968186][T22877] loop1: detected capacity change from 0 to 40427
[  955.004195][T22877] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  955.043735][T22877] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  955.071893][T22877] F2FS-fs (loop1): build fault injection attr: rate: 6, type: 0x7ffff
[  955.102356][T22877] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6
[  955.155749][T22877] F2FS-fs (loop1): invalid crc value
[  955.180765][T22877] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4552/0x6c20
[  955.216657][T22877] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  955.487872][T22890] loop1: detected capacity change from 0 to 512
[  955.542838][T22890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  955.706808][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.784262][T22899] loop2: detected capacity change from 0 to 4096
[  957.881639][T22899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  958.023391][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.483363][T22907] loop1: detected capacity change from 0 to 1024
[  959.692800][T22907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  959.775431][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.720984][T22915] loop2: detected capacity change from 0 to 1024
[  962.641129][T22917] loop2: detected capacity change from 0 to 32768
[  962.678412][T22917] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.7390 (22917)
[  962.739707][T22917] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  962.765116][T22917] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  962.792915][T22917] BTRFS info (device loop2): using free space tree
[  962.967041][T22917] BTRFS info (device loop2): enabling ssd optimizations
[  962.989682][T22917] BTRFS info (device loop2): auto enabling async discard
[  963.174159][ T5785] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  963.494290][T22937] loop2: detected capacity change from 0 to 2364
[  963.849422][T22939] loop2: detected capacity change from 0 to 1756
[  963.928220][T22941] loop1: detected capacity change from 0 to 736
[  964.202897][T22943] loop2: detected capacity change from 0 to 1764
[  964.347063][T22945] loop1: detected capacity change from 0 to 2364
[  964.604549][T22949] loop1: detected capacity change from 0 to 64
[  964.921128][T22951] loop1: detected capacity change from 0 to 64
[  965.230535][T22955] loop1: detected capacity change from 0 to 64
[  965.851980][T22953] loop3: detected capacity change from 0 to 32768
[  965.888747][T22953] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop3 scanned by syz.3.7400 (22953)
[  965.932580][T22953] BTRFS info (device loop3): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268
[  965.940352][T22959] loop0: detected capacity change from 0 to 512
[  965.954052][T22953] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  965.954991][T22947] loop2: detected capacity change from 0 to 32768
[  965.972721][T22953] BTRFS info (device loop3): using free space tree
[  966.009937][T22947] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  966.018266][T22947] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  966.201636][T22947] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  966.236347][   T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  966.248077][   T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  966.255114][T22953] BTRFS info (device loop3): enabling ssd optimizations
[  966.302930][T22953] BTRFS info (device loop3): auto enabling async discard
[  966.374609][   T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 135ms
[  966.395562][   T23] gfs2: fsid=syz:syz.0: jid=0: Done
[  966.410496][T22947] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  966.423423][T22978] loop0: detected capacity change from 0 to 2048
[  966.644082][ T5795] BTRFS info (device loop3): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268
[  966.650912][T22957] loop1: detected capacity change from 0 to 32768
[  966.742552][T22982] loop0: detected capacity change from 0 to 256
[  966.767935][T22957] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop1 scanned by syz.1.7402 (22957)
[  966.833586][T22957] BTRFS info (device loop1): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[  966.845804][T22957] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  966.917953][T22957] BTRFS info (device loop1): using free space tree
[  967.061712][T22988] loop3: detected capacity change from 0 to 128
[  967.174848][T22957] BTRFS info (device loop1): enabling ssd optimizations
[  967.183020][T22957] BTRFS info (device loop1): auto enabling async discard
[  967.206414][T23001] loop0: detected capacity change from 0 to 128
[  967.551334][ T5786] BTRFS info (device loop1): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[  967.616622][T23006] loop3: detected capacity change from 0 to 2048
[  967.621024][T23005] loop0: detected capacity change from 0 to 2048
[  967.952150][T23010] loop3: detected capacity change from 0 to 128
[  967.980326][T23008] loop1: detected capacity change from 0 to 256
[  967.989223][T23012] loop0: detected capacity change from 0 to 512
[  968.378362][T23015] loop1: detected capacity change from 0 to 512
[  968.399001][T23016] loop0: detected capacity change from 0 to 256
[  968.527378][T23018] loop3: detected capacity change from 0 to 256
[  969.079636][T23024] loop3: detected capacity change from 0 to 4096
[  969.147832][T23025] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  969.976908][T23020] loop0: detected capacity change from 0 to 32768
[  970.004486][T23020] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  970.027352][T23020] CPU: 0 PID: 23020 Comm: syz.0.7417 Not tainted 6.6.95-syzkaller #0
[  970.035505][T23020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  970.045600][T23020] Call Trace:
[  970.048913][T23020]  <TASK>
[  970.051865][T23020]  dump_stack_lvl+0x16c/0x230
[  970.056586][T23020]  ? show_regs_print_info+0x20/0x20
[  970.061825][T23020]  ? load_image+0x3b0/0x3b0
[  970.066396][T23020]  sysfs_create_dir_ns+0x256/0x280
[  970.071557][T23020]  ? sysfs_warn_dup+0xa0/0xa0
[  970.076262][T23020]  ? do_raw_spin_unlock+0x121/0x230
[  970.081493][T23020]  kobject_add_internal+0x6b8/0xc70
[  970.086720][T23020]  kobject_init_and_add+0x126/0x190
[  970.091940][T23020]  ? lockdep_softirqs_off+0x430/0x430
[  970.097341][T23020]  ? kobject_add+0x220/0x220
[  970.101957][T23020]  ? __init_swait_queue_head+0xa9/0x150
[  970.107530][T23020]  gfs2_sys_fs_add+0x238/0x470
[  970.112339][T23020]  ? gfs2_recover_set+0x250/0x250
[  970.117418][T23020]  ? apply_workqueue_attrs+0x180/0x180
[  970.122932][T23020]  gfs2_fill_super+0x1323/0x1f80
[  970.127918][T23020]  ? gfs2_reconfigure+0xb10/0xb10
[  970.133076][T23020]  ? setup_bdev_super+0x56b/0x660
[  970.138135][T23020]  get_tree_bdev+0x3e4/0x510
[  970.142765][T23020]  ? end_current_label_crit_section+0x170/0x170
[  970.149035][T23020]  ? gfs2_reconfigure+0xb10/0xb10
[  970.154094][T23020]  ? setup_bdev_super+0x660/0x660
[  970.159144][T23020]  gfs2_get_tree+0x51/0x1e0
[  970.163707][T23020]  vfs_get_tree+0x8c/0x280
[  970.168147][T23020]  do_new_mount+0x24b/0xa40
[  970.172682][T23020]  __se_sys_mount+0x2da/0x3c0
[  970.177402][T23020]  ? __x64_sys_mount+0xc0/0xc0
[  970.182196][T23020]  ? lockdep_hardirqs_on+0x98/0x150
[  970.187410][T23020]  ? __x64_sys_mount+0x20/0xc0
[  970.192195][T23020]  do_syscall_64+0x55/0xb0
[  970.196634][T23020]  ? clear_bhb_loop+0x40/0x90
[  970.201330][T23020]  ? clear_bhb_loop+0x40/0x90
[  970.206029][T23020]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  970.211944][T23020] RIP: 0033:0x7fa4b23900ca
[  970.216376][T23020] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  970.236011][T23020] RSP: 002b:00007fa4b314ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  970.244453][T23020] RAX: ffffffffffffffda RBX: 00007fa4b314cef0 RCX: 00007fa4b23900ca
[  970.252448][T23020] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa4b314ceb0
[  970.260452][T23020] RBP: 000020000001f680 R08: 00007fa4b314cef0 R09: 0000000000000000
[  970.268459][T23020] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000001f6c0
[  970.276470][T23020] R13: 00007fa4b314ceb0 R14: 000000000001f675 R15: 000020000001f700
[  970.284478][T23020]  </TASK>
[  970.357804][T23020] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  970.372132][T23020] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  970.405283][T23029] loop3: detected capacity change from 0 to 32768
[  970.935440][T23035] loop0: detected capacity change from 0 to 128
[  971.106528][T23033] loop3: detected capacity change from 0 to 4096
[  971.149482][T23033] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  971.381177][T23039] loop0: detected capacity change from 0 to 1768
[  971.693305][T23041] loop3: detected capacity change from 0 to 4096
[  971.738933][T23041] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  971.854264][T23043] loop0: detected capacity change from 0 to 4096
[  971.881771][T23043] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  972.433633][T23045] loop3: detected capacity change from 0 to 4096
[  972.515857][T23045] ntfs: volume version 3.1.
[  972.897120][T23049] loop1: detected capacity change from 0 to 8192
[  972.936225][T23049] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  972.962921][T23049] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  972.992672][T23049] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume.
[  973.166998][T23047] loop0: detected capacity change from 0 to 32768
[  973.187681][T23047] (syz.0.7428,23047,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  973.216985][T23047] (syz.0.7428,23047,1):ocfs2_fill_super:1178 ERROR: status = -22
[  973.438481][T23055] loop1: detected capacity change from 0 to 4096
[  974.690625][T23053] loop3: detected capacity change from 0 to 65536
[  974.704681][T23053] (syz.3.7431,23053,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  974.734826][T23053] (syz.3.7431,23053,1):ocfs2_fill_super:1178 ERROR: status = -22
[  975.226216][T23057] loop0: detected capacity change from 0 to 65536
[  975.284281][T23057] (syz.0.7433,23057,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  975.306151][T23057] (syz.0.7433,23057,0):ocfs2_fill_super:1178 ERROR: status = -22
[  975.775351][T23059] loop1: detected capacity change from 0 to 65536
[  975.807300][T23059] (syz.1.7434,23059,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  975.842934][T23059] (syz.1.7434,23059,0):ocfs2_fill_super:1178 ERROR: status = -22
[  975.951430][T23063] loop3: detected capacity change from 0 to 32768
[  975.993107][T23063] (syz.3.7436,23063,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  976.020177][T23061] loop2: detected capacity change from 0 to 32768
[  976.027863][T23061] (syz.2.7435,23061,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  976.040412][T23063] (syz.3.7436,23063,0):ocfs2_fill_super:1178 ERROR: status = -22
[  976.081651][T23061] (syz.2.7435,23061,0):ocfs2_fill_super:1178 ERROR: status = -22
[  976.345248][T23067] loop1: detected capacity change from 0 to 4096
[  976.435886][T23067] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  976.947489][T23065] loop0: detected capacity change from 0 to 32768
[  977.034179][T23065] (syz.0.7437,23065,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  977.060753][T23071] loop2: detected capacity change from 0 to 16384
[  977.069625][T23065] (syz.0.7437,23065,0):ocfs2_fill_super:1178 ERROR: status = -22
[  977.099524][T23071] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096)
[  977.145549][T23071] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2
[  977.342560][T23073] loop1: detected capacity change from 0 to 8192
[  977.427221][T23079] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  977.742312][T23070] loop3: detected capacity change from 0 to 32768
[  977.784941][T23070] (syz.3.7439,23070,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  977.835315][T23070] (syz.3.7439,23070,0):ocfs2_fill_super:1178 ERROR: status = -22
[  978.282647][T23083] loop3: detected capacity change from 0 to 8192
[  978.331883][T23083] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  978.369982][T23081] loop1: detected capacity change from 0 to 16384
[  978.396545][T23083] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  978.406323][T23083] REISERFS (device loop3): using ordered data mode
[  978.412867][T23083] reiserfs: using flush barriers
[  978.446127][T23081] REISERFS warning (device loop1): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop1, block 16, size 4096)
[  978.498363][T23081] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1
[  978.547602][T23083] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  978.592907][T23083] REISERFS (device loop3): checking transaction log (loop3)
[  978.924091][T23087] loop1: detected capacity change from 0 to 4096
[  978.936292][T23083] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
[  978.973845][T23083] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  979.009204][T23083] REISERFS (device loop3): Remounting filesystem read-only
[  979.032253][T23083] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  979.075775][T23083] REISERFS warning (device loop3):  reiserfs_fill_super: corrupt root inode, run fsck
[  979.094361][T23087] ntfs: volume version 3.1.
[  979.756414][T23091] loop1: detected capacity change from 0 to 4096
[  979.847774][T23091] ntfs: volume version 3.1.
[  980.858855][T23095] loop2: detected capacity change from 0 to 1
[  980.886455][T23095] syz.2.7450: attempt to access beyond end of device
[  980.886455][T23095] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1
[  980.921635][T23095] SQUASHFS error: Failed to read block 0x0: -5
[  980.940290][T23095] unable to read squashfs_super_block
[  981.132441][T23099] loop2: detected capacity change from 0 to 3
[  981.170571][T23099] syz.2.7452: attempt to access beyond end of device
[  981.170571][T23099] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3
[  981.251610][T23099] SQUASHFS error: Failed to read block 0x0: -5
[  981.277156][T23099] unable to read squashfs_super_block
[  983.584749][T23103] loop3: detected capacity change from 0 to 4096
[  983.732609][T23103] ntfs: volume version 3.1.
[  984.822159][T23109] loop0: detected capacity change from 0 to 8192
[  984.859256][T23109] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  985.484295][T23113] loop2: detected capacity change from 0 to 8
[  987.656877][T23117] loop3: detected capacity change from 0 to 128
[  987.697176][T23117] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  987.761222][T23117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  987.944553][T23119] loop1: detected capacity change from 0 to 128
[  987.990582][T23119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  988.023487][T23119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  988.071686][T23119] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  988.100663][T23119] UDF-fs: Scanning with blocksize 512 failed
[  988.115483][T23119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  988.143906][T23119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  988.165130][T23119] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  988.172845][T23119] UDF-fs: Scanning with blocksize 1024 failed
[  988.202714][T23119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  988.232175][T23119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  988.248300][T23119] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  988.272419][T23119] UDF-fs: Scanning with blocksize 2048 failed
[  988.287778][T23119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  988.325558][T23119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  988.355179][T23119] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  988.383220][T23119] UDF-fs: Scanning with blocksize 4096 failed
[  988.402056][T23119] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  988.693839][T23123] loop1: detected capacity change from 0 to 512
[  988.744527][T23123] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  988.779835][T23123] UDF-fs: Scanning with blocksize 512 failed
[  988.794201][T23123] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  988.817490][T23123] UDF-fs: Scanning with blocksize 1024 failed
[  988.865583][T23123] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  988.882401][T23123] UDF-fs: Scanning with blocksize 2048 failed
[  988.905142][T23123] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  988.956540][T23125] loop0: detected capacity change from 0 to 2048
[  988.966015][T23123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  989.027012][T23125] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  989.059227][T23125] UDF-fs: Scanning with blocksize 512 failed
[  989.118103][T23125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  989.377016][T23129] loop0: detected capacity change from 0 to 512
[  989.435778][T23129] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  989.459001][T23129] UDF-fs: Scanning with blocksize 512 failed
[  989.489261][T23129] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  989.516124][T23129] UDF-fs: Scanning with blocksize 1024 failed
[  989.531766][T23129] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  989.553033][T23129] UDF-fs: Scanning with blocksize 2048 failed
[  989.587524][T23129] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  989.620170][T23129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  989.711799][T23131] loop2: detected capacity change from 0 to 8192
[  989.751535][T23131] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  989.779455][T23131] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  989.789135][T23131] REISERFS (device loop2): using ordered data mode
[  989.796837][T23131] reiserfs: using flush barriers
[  989.861422][T23131] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  989.926919][T23131] REISERFS (device loop2): checking transaction log (loop2)
[  989.948931][T23134] loop0: detected capacity change from 0 to 8192
[  989.981467][T23134] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  990.029520][T23134] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  990.059356][T23134] REISERFS (device loop0): using ordered data mode
[  990.089594][T23134] reiserfs: using flush barriers
[  990.121869][T23134] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  990.190169][T23134] REISERFS (device loop0): checking transaction log (loop0)
[  990.200513][T23131] REISERFS (device loop2): Using tea hash to sort names
[  990.226583][T23131] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  990.419746][T23127] loop1: detected capacity change from 0 to 32768
[  990.449379][T23127] (syz.1.7466,23127,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  990.476285][T23127] (syz.1.7466,23127,1):ocfs2_fill_super:1178 ERROR: status = -22
[  990.528854][T23134] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
[  990.565254][T23134] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  990.582127][T23134] REISERFS (device loop0): Remounting filesystem read-only
[  990.593829][T23134] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  990.633034][T23134] REISERFS warning (device loop0):  reiserfs_fill_super: corrupt root inode, run fsck
[  990.974692][T23137] loop1: detected capacity change from 0 to 8192
[  991.207558][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  991.224917][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  991.429679][T23145] loop3: detected capacity change from 0 to 512
[  991.458946][T23143] loop0: detected capacity change from 0 to 2048
[  991.484916][T23145] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  991.501874][T23145] UDF-fs: Scanning with blocksize 512 failed
[  991.509208][T23139] loop2: detected capacity change from 0 to 16384
[  991.520962][T23145] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  991.528436][T23145] UDF-fs: Scanning with blocksize 1024 failed
[  991.558232][T23145] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  991.565734][T23139] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  991.582278][T23147] loop1: detected capacity change from 0 to 512
[  991.591016][T23145] UDF-fs: Scanning with blocksize 2048 failed
[  991.597594][T23139] UDF-fs: Scanning with blocksize 512 failed
[  991.608286][T23145] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  991.631521][T23139] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  991.662113][T23147] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  991.670253][T23139] UDF-fs: Scanning with blocksize 1024 failed
[  991.682860][T23145] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  991.696801][T23147] UDF-fs: Scanning with blocksize 512 failed
[  991.706807][T23139] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  991.729530][T23147] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  991.738077][T23139] UDF-fs: Scanning with blocksize 2048 failed
[  991.746764][T23147] UDF-fs: Scanning with blocksize 1024 failed
[  991.795790][T23147] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  991.840944][T23147] UDF-fs: Scanning with blocksize 2048 failed
[  991.849017][T23139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  991.903551][T23147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  991.926066][T23149] loop0: detected capacity change from 0 to 8
[  991.982959][T23147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  992.163406][T23151] loop3: detected capacity change from 0 to 2048
[  993.343819][T23159] loop3: detected capacity change from 0 to 32768
[  993.427943][T23159] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  993.642288][T23159] XFS (loop3): Ending clean mount
[  993.776069][ T5795] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  994.294932][T23157] loop0: detected capacity change from 0 to 65536
[  994.365320][T23157] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel.
[  995.344908][T23169] loop3: detected capacity change from 0 to 32768
[  995.514254][T23169] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  995.695847][T23169] XFS (loop3): Ending clean mount
[  995.836123][ T5795] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  996.702041][T23176] loop0: detected capacity change from 0 to 65536
[  996.765981][T23176] XFS (loop0): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  996.927368][T23176] XFS (loop0): Ending clean mount
[  997.050897][ T5787] XFS (loop0): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  997.860623][T23186] loop2: detected capacity change from 0 to 65536
[  997.927311][T23186] XFS (loop2): Mounting V5 Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f
[  998.160348][T23186] XFS (loop2): Ending clean mount
[  998.308060][ T5785] XFS (loop2): Unmounting Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f
[  999.164189][T23200] loop3: detected capacity change from 0 to 65536
[  999.212989][T23200] XFS (loop3): Mounting V5 Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591
[  999.445388][T23200] XFS (loop3): Ending clean mount
[  999.572649][ T5795] XFS (loop3): Unmounting Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591
[ 1002.684766][T23228] loop2: detected capacity change from 0 to 8192
[ 1004.416583][T23232] loop3: detected capacity change from 0 to 32768
[ 1005.195335][T23250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7504'.
[ 1006.263837][T23240] loop1: detected capacity change from 0 to 65536
[ 1006.395401][T23240] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel.
[ 1006.612970][T23244] loop3: detected capacity change from 0 to 65536
[ 1006.727953][T23244] XFS (loop3): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd
[ 1006.758848][T23275] loop2: detected capacity change from 0 to 1024
[ 1006.979397][T23244] XFS (loop3): Ending clean mount
[ 1007.228697][ T5795] XFS (loop3): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd
[ 1007.352916][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7517'.
[ 1007.594871][T23293] loop1: detected capacity change from 0 to 1024
[ 1007.692575][T23293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1007.756005][T23293] ext4 filesystem being mounted at /1846/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1007.855673][T23293] EXT4-fs error (device loop1): ext4_free_blocks:6681: comm syz.1.7520: Freeing blocks not in datazone - block = 0, count = 16
[ 1007.922280][T23293] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[ 1008.047205][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1008.425168][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7530'.
[ 1008.616545][T23324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7533'.
[ 1009.049348][T23344] loop2: detected capacity change from 0 to 512
[ 1009.123587][T23344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1009.210964][T23344] ext4 filesystem being mounted at /1839/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1009.396748][   T42] IPVS: starting estimator thread 0...
[ 1009.465703][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.481558][T23354] IPVS: using max 16 ests per chain, 38400 per kthread
[ 1010.259013][T23375] loop2: detected capacity change from 0 to 4096
[ 1010.301121][T23375] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[ 1010.555878][T23387] loop3: detected capacity change from 0 to 1024
[ 1011.046708][T23400] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1011.173411][T23403] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1012.454171][ T5890] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1012.594883][T23451] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1012.673722][ T5890] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1012.707008][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.749614][ T5890] usb 3-1: Product: syz
[ 1012.763853][ T5890] usb 3-1: Manufacturer: syz
[ 1012.768522][ T5890] usb 3-1: SerialNumber: syz
[ 1012.816775][ T5890] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1012.860294][   T23] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1012.974943][T23460] xt_hashlimit: size too large, truncated to 1048576
[ 1012.983733][T23460] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[ 1013.359799][ T5890] usb 3-1: USB disconnect, device number 125
[ 1013.459617][T23456] loop1: detected capacity change from 0 to 32768
[ 1013.496492][T23456] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1013.613061][ T5786] ocfs2: Unmounting device (7,1) on (node local)
[ 1013.896149][   T23] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1013.914376][   T23] ath9k_htc: Failed to initialize the device
[ 1013.927664][ T5890] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1014.029317][   T42] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1014.226506][   T42] usb 2-1: config 1 has an invalid interface number: 27 but max is 0
[ 1014.237028][   T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.265508][   T42] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 1014.297630][   T42] usb 2-1: config 1 has no interface number 1
[ 1014.314319][   T42] usb 2-1: config 1 interface 27 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1014.355027][   T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1014.383319][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1014.411247][   T42] usb 2-1: SerialNumber: syz
[ 1014.428119][   T42] usb 2-1: bad CDC descriptors
[ 1014.705739][ T5890] usb 2-1: USB disconnect, device number 120
[ 1014.958036][T23510] loop2: detected capacity change from 0 to 256
[ 1015.053947][T23514] loop0: detected capacity change from 0 to 256
[ 1015.144847][T23514] FAT-fs (loop0): Directory bread(block 64) failed
[ 1015.161819][T23514] FAT-fs (loop0): Directory bread(block 65) failed
[ 1015.184545][T23514] FAT-fs (loop0): Directory bread(block 66) failed
[ 1015.196544][T23514] FAT-fs (loop0): Directory bread(block 67) failed
[ 1015.235235][T23514] FAT-fs (loop0): Directory bread(block 68) failed
[ 1015.242631][T23514] FAT-fs (loop0): Directory bread(block 69) failed
[ 1015.249818][T23514] FAT-fs (loop0): Directory bread(block 70) failed
[ 1015.256577][T23514] FAT-fs (loop0): Directory bread(block 71) failed
[ 1015.263890][T23514] FAT-fs (loop0): Directory bread(block 72) failed
[ 1015.271012][T23514] FAT-fs (loop0): Directory bread(block 73) failed
[ 1016.119219][T23541] loop0: detected capacity change from 0 to 64
[ 1016.156051][T23541] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 1016.507154][T23547] loop2: detected capacity change from 0 to 4096
[ 1016.548382][T23547] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1016.597057][T23547] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1016.637014][T23547] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1016.658177][T23547] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1016.678343][T23554] loop1: detected capacity change from 0 to 512
[ 1016.727390][T23547] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1016.742734][T23554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1016.757825][T23547] ntfs: volume version 3.1.
[ 1016.769969][T23554] ext4 filesystem being mounted at /1868/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1016.871623][T23547] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 1016.922565][T23547] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1016.964700][T23547] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[ 1017.036175][T23547] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[ 1017.054425][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1017.086586][T23547] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[ 1017.303744][T23570] loop1: detected capacity change from 0 to 256
[ 1017.348244][T23570] exfat: Deprecated parameter 'utf8'
[ 1017.353711][T23570] exfat: Deprecated parameter 'namecase'
[ 1017.512856][T23570] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[ 1017.886832][T23582] loop2: detected capacity change from 0 to 256
[ 1017.928370][T23582] exfat: Deprecated parameter 'utf8'
[ 1017.964199][T23582] exfat: Deprecated parameter 'utf8'
[ 1018.020859][T23582] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[ 1018.115856][T23586] loop0: detected capacity change from 0 to 4096
[ 1018.145745][T23586] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[ 1018.315768][T23590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7657'.
[ 1018.755856][T23602] warning: `syz.1.7663' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1018.781965][T23605] loop3: detected capacity change from 0 to 8
[ 1018.820500][T23605] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1018.856656][T23605] cramfs: Error -3 while decompressing!
[ 1018.878622][ T5922] udevd[5922]: incorrect cramfs checksum on /dev/loop3
[ 1018.878754][T23605] cramfs: ffffffff96fda6a8(18)->ffff888056a53000(4096)
[ 1018.917263][T23605] cramfs: Error -3 while decompressing!
[ 1018.923290][T23605] cramfs: ffffffff96fda6a8(18)->ffff888056a53000(4096)
[ 1018.977917][ T5922] udevd[5922]: incorrect cramfs checksum on /dev/loop3
[ 1019.393158][T23620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7672'.
[ 1019.434578][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7672'.
[ 1019.493228][T23618] loop3: detected capacity change from 0 to 4096
[ 1019.603889][ T5922] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1019.807969][T23608] loop0: detected capacity change from 0 to 32768
[ 1019.934871][T23626] netlink: 'syz.1.7675': attribute type 1 has an invalid length.
[ 1019.997549][T23612] loop2: detected capacity change from 0 to 32768
[ 1020.264606][T23630] loop1: detected capacity change from 0 to 4096
[ 1021.162642][T23661] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1021.558933][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7697'.
[ 1021.577276][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7697'.
[ 1021.766068][T23679] syz.2.7701 uses obsolete (PF_INET,SOCK_PACKET)
[ 1021.782407][T23678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7700'.
[ 1022.170588][T23683] veth3: entered promiscuous mode
[ 1022.179694][T23683] veth3: entered allmulticast mode
[ 1022.315740][T23687] netlink: 'syz.0.7704': attribute type 6 has an invalid length.
[ 1022.429511][T23690] netlink: 'syz.1.7705': attribute type 10 has an invalid length.
[ 1022.484324][T23690] team0: Device ipvlan1 failed to register rx_handler
[ 1022.678703][T23695] netlink: 'syz.0.7708': attribute type 15 has an invalid length.
[ 1022.886730][T23703] loop1: detected capacity change from 0 to 256
[ 1022.912863][T23703] exfat: Deprecated parameter 'utf8'
[ 1022.930247][T23703] exfat: Deprecated parameter 'utf8'
[ 1022.988706][T23703] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[ 1023.152236][T23709] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7714'.
[ 1023.606287][T23691] loop2: detected capacity change from 0 to 40427
[ 1023.658509][T23691] F2FS-fs (loop2): build fault injection attr: rate: 691, type: 0x7ffff
[ 1023.675959][T23691] F2FS-fs (loop2): Image doesn't support compression
[ 1023.688556][T23724] loop3: detected capacity change from 0 to 164
[ 1023.728391][T23691] F2FS-fs (loop2): invalid crc value
[ 1023.768748][T23691] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1023.982824][T23691] F2FS-fs (loop2): Start checkpoint disabled!
[ 1024.015728][T23691] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[ 1024.058388][T23732] loop3: detected capacity change from 0 to 256
[ 1024.112843][T23732] exfat: Deprecated parameter 'utf8'
[ 1024.145182][T23732] exfat: Deprecated parameter 'utf8'
[ 1024.203554][T23732] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[ 1024.269607][T23738] tmpfs: Bad value for 'usrquota_block_hardlimit'
[ 1025.512642][   T27] kauditd_printk_skb: 12 callbacks suppressed
[ 1025.512660][   T27] audit: type=1326 audit(1752226809.033:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.1.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1025.554378][T23780] ecryptfs_parse_options: eCryptfs: unrecognized option [Š]]
[ 1025.562737][T23780] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1025.581985][   T27] audit: type=1326 audit(1752226809.033:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.1.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1025.608186][T23780] Error parsing options; rc = [-22]
[ 1025.679029][   T27] audit: type=1326 audit(1752226809.066:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.1.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1025.751482][T23786] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[ 1025.763833][   T27] audit: type=1326 audit(1752226809.066:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.1.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1025.927347][   T27] audit: type=1326 audit(1752226809.473:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23791 comm="syz.1.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1025.962757][T23794] loop2: detected capacity change from 0 to 64
[ 1026.028550][   T27] audit: type=1326 audit(1752226809.473:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23791 comm="syz.1.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1026.135938][   T27] audit: type=1326 audit(1752226809.527:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23791 comm="syz.1.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1026.219150][   T27] audit: type=1326 audit(1752226809.527:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23791 comm="syz.1.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1026.280408][   T27] audit: type=1326 audit(1752226809.527:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23791 comm="syz.1.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1026.384456][T23807] netlink: 'syz.2.7761': attribute type 6 has an invalid length.
[ 1026.499986][   T42] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1026.686388][   T42] usb 1-1: Using ep0 maxpacket: 32
[ 1026.702918][   T42] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1026.721868][   T42] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1026.756620][   T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1026.775932][   T42] usb 1-1: config 1 has no interface number 0
[ 1026.787700][   T42] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1026.816875][   T42] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1026.817133][    T8] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1026.850708][   T42] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1026.868584][   T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1026.889113][   T42] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[ 1026.933724][T23820] loop2: detected capacity change from 0 to 64
[ 1027.032814][T23810] loop3: detected capacity change from 0 to 32768
[ 1027.062742][    T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1027.078257][T23810] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7763 (23810)
[ 1027.083869][   T42] snd_usb_pod 1-1:1.1: invalid control EP
[ 1027.104779][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.123905][    T8] usb 2-1: Product: syz
[ 1027.128169][   T42] snd_usb_pod 1-1:1.1: cannot start listening: -22
[ 1027.128414][   T42] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[ 1027.129030][   T42] snd_usb_pod: probe of 1-1:1.1 failed with error -22
[ 1027.146117][T23810] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1027.173329][    T8] usb 2-1: Manufacturer: syz
[ 1027.178000][    T8] usb 2-1: SerialNumber: syz
[ 1027.221629][T23810] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1027.237266][    T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1027.254748][T23810] BTRFS info (device loop3): using free space tree
[ 1027.283274][    T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1027.360471][   T42] usb 1-1: USB disconnect, device number 108
[ 1027.386906][T23835] loop2: detected capacity change from 0 to 16
[ 1027.404383][T23835] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1027.466594][T23810] BTRFS info (device loop3): enabling ssd optimizations
[ 1027.503462][T23810] BTRFS info (device loop3): auto enabling async discard
[ 1027.753701][ T5795] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1027.807087][   T42] usb 2-1: USB disconnect, device number 121
[ 1028.277261][    T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1028.327273][    T9] ath9k_htc: Failed to initialize the device
[ 1028.341063][   T42] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1028.623916][T23865] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1029.316316][T23853] loop3: detected capacity change from 0 to 32768
[ 1029.367507][T23853] ialloc: diAlloc returned -5!
[ 1029.666140][T23897] netlink: 'syz.1.7797': attribute type 1 has an invalid length.
[ 1029.703941][T23897] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7797'.
[ 1030.480669][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7810'.
[ 1030.494324][T23922] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7810'.
[ 1031.093451][T23943] xt_l2tp: invalid flags combination: c
[ 1031.204632][T23945] netlink: 'syz.2.7820': attribute type 64 has an invalid length.
[ 1031.294354][   T27] audit: type=1326 audit(1752226815.235:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23950 comm="syz.1.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1031.383888][   T27] audit: type=1326 audit(1752226815.235:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23950 comm="syz.1.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1031.465631][   T27] audit: type=1326 audit(1752226815.256:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23950 comm="syz.1.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1031.511639][T23957] loop2: detected capacity change from 0 to 8
[ 1031.517928][   T27] audit: type=1326 audit(1752226815.256:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23950 comm="syz.1.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1031.542291][T23957] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1031.628758][   T27] audit: type=1326 audit(1752226815.256:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23950 comm="syz.1.7822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cebf8e929 code=0x7ffc0000
[ 1031.675653][T23957] cramfs: Error -3 while decompressing!
[ 1031.681276][T23957] cramfs: ffffffff96fde6c8(26)->ffff888057db9000(4096)
[ 1031.714650][T23957] cramfs: Error -5 while decompressing!
[ 1031.738113][T23957] cramfs: ffffffff96fde6e2(26)->ffff888053174000(4096)
[ 1031.745109][T23957] cramfs: Error -3 while decompressing!
[ 1031.763829][T23957] cramfs: ffffffff96fde6c8(26)->ffff888057db9000(4096)
[ 1031.772275][   T27] audit: type=1800 audit(1752226815.739:52): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7824" name="file2" dev="loop2" ino=348 res=0 errno=0
[ 1031.914265][T23967] loop0: detected capacity change from 0 to 1024
[ 1032.684020][T23965] loop1: detected capacity change from 0 to 32768
[ 1032.898593][T23971] loop2: detected capacity change from 0 to 32768
[ 1032.940384][T23971] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.7831 (23971)
[ 1032.990906][T23971] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1033.001550][T23971] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 1033.010390][T23971] BTRFS info (device loop2): using free space tree
[ 1033.139670][T23999] loop3: detected capacity change from 0 to 1024
[ 1033.181388][T24005] loop0: detected capacity change from 0 to 512
[ 1033.191894][T23971] BTRFS info (device loop2): enabling ssd optimizations
[ 1033.210600][T23971] BTRFS info (device loop2): auto enabling async discard
[ 1033.251205][T24005] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.7840: bad orphan inode 15
[ 1033.282244][T24005] ext4_test_bit(bit=14, block=5) = 0
[ 1033.296453][T24005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1033.360634][T24005] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.7840: reserved inode found cleared - inode=1
[ 1033.412977][ T5785] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1033.451869][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1034.092643][T24023] loop1: detected capacity change from 0 to 256
[ 1034.195945][T24028] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1034.266791][T24023] FAT-fs (loop1): Directory bread(block 64) failed
[ 1034.281361][T24023] FAT-fs (loop1): Directory bread(block 65) failed
[ 1034.312157][T24023] FAT-fs (loop1): Directory bread(block 66) failed
[ 1034.329265][T24023] FAT-fs (loop1): Directory bread(block 67) failed
[ 1034.335950][T24023] FAT-fs (loop1): Directory bread(block 68) failed
[ 1034.380107][T24023] FAT-fs (loop1): Directory bread(block 69) failed
[ 1034.392389][T24023] FAT-fs (loop1): Directory bread(block 70) failed
[ 1034.403662][T24023] FAT-fs (loop1): Directory bread(block 71) failed
[ 1034.413260][T24023] FAT-fs (loop1): Directory bread(block 72) failed
[ 1034.436458][T24023] FAT-fs (loop1): Directory bread(block 73) failed
[ 1034.964304][T24049] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1035.014160][T24051] netlink: 'syz.3.7861': attribute type 10 has an invalid length.
[ 1035.021417][T24053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7862'.
[ 1035.056538][T24051] team0: Device ipvlan1 failed to register rx_handler
[ 1035.457434][T24061] loop0: detected capacity change from 0 to 256
[ 1035.496802][T24065] loop3: detected capacity change from 0 to 256
[ 1035.531952][T24065] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1035.534511][T24061] FAT-fs (loop0): Directory bread(block 64) failed
[ 1035.559629][T24061] FAT-fs (loop0): Directory bread(block 65) failed
[ 1035.577753][T24065] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[ 1035.581468][T24061] FAT-fs (loop0): Directory bread(block 66) failed
[ 1035.607309][T24061] FAT-fs (loop0): Directory bread(block 67) failed
[ 1035.636957][T24065] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1035.639320][T24061] FAT-fs (loop0): Directory bread(block 68) failed
[ 1035.705230][T24061] FAT-fs (loop0): Directory bread(block 69) failed
[ 1035.723062][T24061] FAT-fs (loop0): Directory bread(block 70) failed
[ 1035.736171][T24061] FAT-fs (loop0): Directory bread(block 71) failed
[ 1035.757380][T24061] FAT-fs (loop0): Directory bread(block 72) failed
[ 1035.804429][T24061] FAT-fs (loop0): Directory bread(block 73) failed
[ 1035.809231][T24047] loop1: detected capacity change from 0 to 32768
[ 1035.847449][T24047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7857 (24047)
[ 1035.896029][T24069] netlink: 'syz.2.7870': attribute type 3 has an invalid length.
[ 1035.926548][T24047] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1035.972267][T24047] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1035.994068][T24047] BTRFS info (device loop1): using free space tree
[ 1036.221904][T24047] BTRFS info (device loop1): enabling ssd optimizations
[ 1036.228937][T24047] BTRFS info (device loop1): auto enabling async discard
[ 1036.454646][T24097] netlink: 'syz.2.7876': attribute type 1 has an invalid length.
[ 1036.462890][T24097] netlink: 'syz.2.7876': attribute type 2 has an invalid length.
[ 1036.491886][ T5786] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1036.763239][T24101] loop2: detected capacity change from 0 to 2048
[ 1036.767612][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7880'.
[ 1036.826777][T24101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1037.163974][T24107] loop2: detected capacity change from 0 to 256
[ 1037.331252][T24095] loop0: detected capacity change from 0 to 32768
[ 1037.459512][T24113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7884'.
[ 1037.490260][T24113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7884'.
[ 1037.519563][T24113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7884'.
[ 1037.981049][T24123] bond1: entered promiscuous mode
[ 1037.998772][T24123] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1038.106598][T24115] loop2: detected capacity change from 0 to 32768
[ 1038.339025][  T111] blkno = 5002c, nblocks = 1
[ 1038.343683][  T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[ 1038.343683][  T111] 
[ 1038.406357][T24130] loop3: detected capacity change from 0 to 1024
[ 1038.423242][  T111] ERROR: (device loop2): remounting filesystem as read-only
[ 1038.474963][T24130] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[ 1038.505845][T24130] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1038.552438][T24130] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1038.580392][T24130] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1038.597944][ T5785] JFS: metapage_get_blocks failed
[ 1038.598120][T24130] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.7893: Inode bitmap for bg 0 marked uninitialized
[ 1038.629689][T24130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1038.731320][T24130] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945)
[ 1038.889853][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1039.434687][T24159] loop0: detected capacity change from 0 to 1024
[ 1039.527196][T24164] loop2: detected capacity change from 0 to 1024
[ 1039.618864][T24164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1039.680231][T24164] ext4 filesystem being mounted at /1924/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1039.935264][T24179] loop3: detected capacity change from 0 to 512
[ 1039.990332][T24179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1040.012981][T24179] ext4 filesystem being mounted at /2053/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1040.033736][   T42] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1040.202122][T24187] loop1: detected capacity change from 0 to 2048
[ 1040.219636][   T42] usb 3-1: Using ep0 maxpacket: 8
[ 1040.230905][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1040.231478][   T42] usb 3-1: config 4 has an invalid interface number: 244 but max is 0
[ 1040.258329][   T42] usb 3-1: config 4 has no interface number 0
[ 1040.263406][T24187] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1040.273805][   T42] usb 3-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7
[ 1040.335240][   T42] usb 3-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 65267, setting to 1024
[ 1040.374835][   T42] usb 3-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024
[ 1040.408586][   T42] usb 3-1: config 4 interface 244 has no altsetting 0
[ 1040.433207][   T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa
[ 1040.448572][T24193] netlink: 763 bytes leftover after parsing attributes in process `syz.3.7919'.
[ 1040.467845][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.490432][   T42] usb 3-1: Product: syz
[ 1040.494665][   T42] usb 3-1: Manufacturer: syz
[ 1040.508832][   T42] usb 3-1: SerialNumber: syz
[ 1040.539138][T24164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1040.624614][T24195] loop0: detected capacity change from 0 to 256
[ 1040.650312][T24195] exfat: Deprecated parameter 'namecase'
[ 1040.706909][T24195] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[ 1040.758257][   T42] ipheth 3-1:4.244: Unable to find endpoints
[ 1040.816314][   T42] usb 3-1: USB disconnect, device number 126
[ 1040.863204][T24201] netlink: 'syz.3.7924': attribute type 10 has an invalid length.
[ 1040.909987][T24201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7924'.
[ 1040.926504][T24201] bridge0: port 3(batadv0) entered blocking state
[ 1040.934888][T24201] bridge0: port 3(batadv0) entered disabled state
[ 1040.946112][T24201] batadv0: entered allmulticast mode
[ 1040.962858][T24201] batadv0: entered promiscuous mode
[ 1040.971835][T24201] bridge0: port 3(batadv0) entered blocking state
[ 1040.978910][T24201] bridge0: port 3(batadv0) entered forwarding state
[ 1041.146756][   T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1041.156838][   T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1041.359357][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1041.380267][   T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.586741][   T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.719779][   T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.801866][T24205] loop1: detected capacity change from 0 to 32768
[ 1041.958875][   T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.029559][T24216] loop2: detected capacity change from 0 to 16
[ 1042.066866][T24216] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1042.128371][T24216] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1042.199567][T24216] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1042.761572][T20553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1042.773978][T20553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1042.816056][T20553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1042.848355][T20553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1042.868187][T20553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1042.880191][T20553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1043.184051][T24245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7944'.
[ 1043.969916][T24233] loop1: detected capacity change from 0 to 32768
[ 1043.969986][T24268] loop2: detected capacity change from 0 to 2048
[ 1044.027710][T24233] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.7941 (24233)
[ 1044.078766][T24268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1044.084623][T24233] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1044.144030][T24233] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1044.182578][T24233] BTRFS info (device loop1): force zlib compression, level 3
[ 1044.190038][T24233] BTRFS info (device loop1): force clearing of disk cache
[ 1044.218369][T24233] BTRFS info (device loop1): setting nodatasum
[ 1044.224710][T24233] BTRFS info (device loop1): doing ref verification
[ 1044.266904][T24233] BTRFS info (device loop1): allowing degraded mounts
[ 1044.320633][T24233] BTRFS info (device loop1): enabling disk space caching
[ 1044.328184][T24233] BTRFS info (device loop1): disk space caching is enabled
[ 1044.626111][T24233] BTRFS info (device loop1): enabling ssd optimizations
[ 1044.654182][T24233] BTRFS info (device loop1): auto enabling async discard
[ 1044.701016][T24233] BTRFS info (device loop1): rebuilding free space tree
[ 1044.732985][T24233] BTRFS info (device loop1): disabling free space tree
[ 1044.740001][T24233] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1044.773526][T24233] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1044.815119][T20553] Bluetooth: hci0: command tx timeout
[ 1045.184542][ T5786] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1045.630734][T24320] loop2: detected capacity change from 0 to 256
[ 1045.657341][T24230] chnl_net:caif_netlink_parms(): no params data found
[ 1046.167065][   T37] hsr_slave_0: left promiscuous mode
[ 1046.176386][   T37] hsr_slave_1: left promiscuous mode
[ 1046.189128][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1046.217224][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1046.262814][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1046.288893][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1046.299732][   T37] bridge_slave_1: left allmulticast mode
[ 1046.306085][   T37] bridge_slave_1: left promiscuous mode
[ 1046.314380][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.344926][   T37] bridge_slave_0: left allmulticast mode
[ 1046.350647][   T37] bridge_slave_0: left promiscuous mode
[ 1046.361713][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.406885][   T37] veth1_macvtap: left promiscuous mode
[ 1046.414469][   T37] veth0_macvtap: left promiscuous mode
[ 1046.423788][   T37] veth1_vlan: left promiscuous mode
[ 1046.435323][   T37] veth0_vlan: left promiscuous mode
[ 1046.696057][   T37] bond1 (unregistering): Released all slaves
[ 1046.762418][T20553] Bluetooth: hci0: command tx timeout
[ 1047.235945][   T37] team0 (unregistering): Port device team_slave_1 removed
[ 1047.291965][   T37] team0 (unregistering): Port device team_slave_0 removed
[ 1047.343964][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1047.402348][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1047.989773][   T37] bond0 (unregistering): Released all slaves
[ 1048.087986][T24332] netlink: 'syz.2.7969': attribute type 1 has an invalid length.
[ 1048.285877][T24352] loop1: detected capacity change from 0 to 512
[ 1048.294119][T24230] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.326423][T24230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.336250][T24230] bridge_slave_0: entered allmulticast mode
[ 1048.347986][T24230] bridge_slave_0: entered promiscuous mode
[ 1048.359928][T24353] netlink: 'syz.2.7972': attribute type 10 has an invalid length.
[ 1048.383967][T24352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1048.404008][T24352] ext4 filesystem being mounted at /1950/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1048.405838][T24353] team0: Device ipvlan1 failed to register rx_handler
[ 1048.474326][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1048.480983][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1048.489579][T24230] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.520183][T24230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.558144][T24352] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[ 1048.562242][T24230] bridge_slave_1: entered allmulticast mode
[ 1048.572548][T24352] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1048.585789][T24352] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.7974: Failed to acquire dquot type 0
[ 1048.611696][T24230] bridge_slave_1: entered promiscuous mode
[ 1048.701485][T20553] Bluetooth: hci0: command tx timeout
[ 1048.844158][T24230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1048.890752][T24230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1048.928463][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1049.115115][T24230] team0: Port device team_slave_0 added
[ 1049.234828][T24230] team0: Port device team_slave_1 added
[ 1049.421134][T24230] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1049.461367][T24230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1049.487303][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1049.521162][T24230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1049.550918][T24230] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1049.565888][T24230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1049.591877][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1049.677019][T24230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1049.770706][   T37] IPVS: stop unused estimator thread 0...
[ 1050.004002][T24230] hsr_slave_0: entered promiscuous mode
[ 1050.041268][T24400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7991'.
[ 1050.069835][T24230] hsr_slave_1: entered promiscuous mode
[ 1050.079255][T24230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1050.117725][T24230] Cannot create hsr debugfs directory
[ 1050.266958][T24410] program syz.2.7994 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1050.519427][T24416] loop1: detected capacity change from 0 to 256
[ 1050.546248][T24416] exfat: Deprecated parameter 'utf8'
[ 1050.552972][T24416] exfat: Deprecated parameter 'namecase'
[ 1050.562416][T24416] exfat: Deprecated parameter 'namecase'
[ 1050.568433][T24416] exfat: Deprecated parameter 'utf8'
[ 1050.603803][T24416] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[ 1050.645927][T20553] Bluetooth: hci0: command tx timeout
[ 1050.766617][T24420] autofs4:pid:24420:autofs_fill_super: called with bogus options
[ 1051.045368][T24230] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1051.125610][T24230] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1051.161705][T24230] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1051.202466][T24230] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1051.607420][T24230] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1051.696870][T24230] 8021q: adding VLAN 0 to HW filter on device team0
[ 1051.732965][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.740190][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1051.828325][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1051.835573][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1052.045782][T24463] loop2: detected capacity change from 0 to 4096
[ 1052.117811][T24463] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[ 1052.271321][T24463] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[ 1052.407914][T24478] loop3: detected capacity change from 0 to 64
[ 1052.499528][T24478] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 1052.693750][T24478] minix_free_inode: bit 5 already cleared
[ 1052.807434][T24230] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1053.137590][ T5175] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1053.333544][ T5175] usb 2-1: Using ep0 maxpacket: 32
[ 1053.346900][ T5175] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1053.366383][T24506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8024'.
[ 1053.371903][ T5175] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1053.445289][ T5175] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1053.475528][ T5175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.522982][ T5175] hub 2-1:4.0: USB hub found
[ 1053.730861][T24230] veth0_vlan: entered promiscuous mode
[ 1053.743963][ T5175] hub 2-1:4.0: 2 ports detected
[ 1053.787436][T24230] veth1_vlan: entered promiscuous mode
[ 1053.872404][T24230] veth0_macvtap: entered promiscuous mode
[ 1053.922684][T24495] loop3: detected capacity change from 0 to 32768
[ 1053.937997][T24230] veth1_macvtap: entered promiscuous mode
[ 1053.945256][T24495] XFS: noikeep mount option is deprecated.
[ 1053.958387][ T5175] hub 2-1:4.0: hub_hub_status failed (err = -71)
[ 1053.965981][ T5175] hub 2-1:4.0: config failed, can't get hub status (err -71)
[ 1054.006324][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1054.056758][T24495] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1054.071272][ T5175] usb 2-1: USB disconnect, device number 122
[ 1054.080866][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.093859][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1054.112597][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.131098][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1054.166577][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.222436][T24230] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1054.286110][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1054.308670][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.319496][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1054.330724][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.342136][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1054.353375][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1054.378744][T24230] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1054.442474][T24230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1054.473465][T24495] XFS (loop3): Ending clean mount
[ 1054.483766][T24495] XFS (loop3): Quotacheck needed: Please wait.
[ 1054.493310][T24230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1054.504996][T24230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1054.539613][T24230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1054.618325][T24495] XFS (loop3): Quotacheck: Done.
[ 1054.806098][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1054.852990][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1054.922527][ T5795] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1054.931193][T24539] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8032'.
[ 1054.958737][T24536] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8031'.
[ 1054.989748][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1055.015796][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1055.448608][T24551] xt_CT: No such helper "snmp"
[ 1056.369658][T24586] loop4: detected capacity change from 0 to 2048
[ 1056.438253][T24586] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[ 1056.505494][T24586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1057.140638][T24613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8058'.
[ 1057.317359][T24618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8062'.
[ 1057.333260][T24618] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8062'.
[ 1057.350982][T24622] PKCS8: Unsupported PKCS#8 version
[ 1058.342490][T24659] trusted_key: encrypted_key: keylen parameter is missing
[ 1058.733681][T24671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8082'.
[ 1058.770068][T24638] loop3: detected capacity change from 0 to 32768
[ 1059.576816][T24698] sp0: Synchronizing with TNC
[ 1059.588151][T18954] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1059.783601][T18954] usb 4-1: Using ep0 maxpacket: 16
[ 1059.804029][T18954] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1059.830073][T18954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1059.848750][T18954] usb 4-1: Product: syz
[ 1059.853829][T18954] usb 4-1: Manufacturer: syz
[ 1059.888225][T18954] usb 4-1: SerialNumber: syz
[ 1059.905987][T24702] loop2: detected capacity change from 0 to 4096
[ 1059.913800][T18954] r8152-cfgselector 4-1: config 0 descriptor??
[ 1060.026027][T24702] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[ 1060.053017][T24702] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22.
[ 1060.119855][T24702] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1060.380871][T18954] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1060.404930][T18954] r8152-cfgselector 4-1: USB disconnect, device number 115
[ 1060.560815][T24722] loop4: detected capacity change from 0 to 256
[ 1060.645369][T24724] Option '                                                                                                       ' to dns_resolver key: bad/missing value
[ 1060.689747][T24722] FAT-fs (loop4): Directory bread(block 64) failed
[ 1060.689785][T24722] FAT-fs (loop4): Directory bread(block 65) failed
[ 1060.689882][T24722] FAT-fs (loop4): Directory bread(block 66) failed
[ 1060.689910][T24722] FAT-fs (loop4): Directory bread(block 67) failed
[ 1060.690000][T24722] FAT-fs (loop4): Directory bread(block 68) failed
[ 1060.690027][T24722] FAT-fs (loop4): Directory bread(block 69) failed
[ 1060.690167][T24722] FAT-fs (loop4): Directory bread(block 70) failed
[ 1060.690195][T24722] FAT-fs (loop4): Directory bread(block 71) failed
[ 1060.690283][T24722] FAT-fs (loop4): Directory bread(block 72) failed
[ 1060.690309][T24722] FAT-fs (loop4): Directory bread(block 73) failed
[ 1061.246526][T24733] loop1: detected capacity change from 0 to 4096
[ 1061.290455][T24733] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[ 1061.491318][T24733] ntfs3: loop1: ino=0, attr_set_size
[ 1061.512552][T24733] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[ 1062.023321][T24764] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1062.289078][T24774] netlink: 'syz.2.8121': attribute type 10 has an invalid length.
[ 1062.316669][T24772] loop3: detected capacity change from 0 to 1024
[ 1062.327832][T24774] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8121'.
[ 1062.353526][T24774] ipvlan1: entered promiscuous mode
[ 1062.397013][T24774] bridge0: port 3(ipvlan1) entered blocking state
[ 1062.405938][T24774] bridge0: port 3(ipvlan1) entered disabled state
[ 1062.416776][T24774] ipvlan1: entered allmulticast mode
[ 1062.422926][T24774] veth0_vlan: entered allmulticast mode
[ 1062.431550][T24774] ipvlan1: left allmulticast mode
[ 1062.436728][T24774] veth0_vlan: left allmulticast mode
[ 1062.438332][T24772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1062.597523][T24782] loop2: detected capacity change from 0 to 512
[ 1062.624548][T24782] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1062.661049][T24772] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 1062.686500][T24782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1062.724174][T24772] EXT4-fs (loop3): Remounting filesystem read-only
[ 1062.748971][T24782] ext4 filesystem being mounted at /1994/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1062.764866][T24754] loop4: detected capacity change from 0 to 32768
[ 1062.774713][T24772] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.3.8120: cleanup dec ref error -28
[ 1062.848274][T24754] 
[ 1062.848274][T24754]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1062.848274][T24754] 
[ 1062.941481][T24754] ERROR: (device loop4): dtSearch: stack overrun!
[ 1062.941481][T24754] 
[ 1062.984361][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1063.003741][T24754] ERROR: (device loop4): remounting filesystem as read-only
[ 1063.022893][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1063.030910][T24754] btstack dump:
[ 1063.041018][T24754] bn = 0, index = 0
[ 1063.044894][T24754] bn = 0, index = 0
[ 1063.079551][T24754] bn = 0, index = 0
[ 1063.099951][T24754] bn = 0, index = 0
[ 1063.109997][T24754] bn = 0, index = 0
[ 1063.135865][T24754] bn = 0, index = 0
[ 1063.144756][T24754] bn = 0, index = 0
[ 1063.162037][T24754] bn = 0, index = 0
[ 1063.165966][T24754] jfs_lookup: dtSearch returned -5
[ 1063.362990][T24796] netlink: 'syz.2.8126': attribute type 10 has an invalid length.
[ 1063.533753][T24796] team0: Port device syz_tun added
[ 1063.708122][T24803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8132'.
[ 1063.765161][T24803] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8132'.
[ 1063.768885][T24805] syz.3.8131 uses old SIOCAX25GETINFO
[ 1064.269713][T24820] xt_hashlimit: max too large, truncated to 1048576
[ 1064.855462][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8150'.
[ 1065.015771][T24849] loop2: detected capacity change from 0 to 128
[ 1065.072099][T24849] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1065.156097][T24849] ext4 filesystem being mounted at /2002/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1065.240152][T24849] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.8154: No space for directory leaf checksum. Please run e2fsck -D.
[ 1065.289220][T24849] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.8154: checksumming directory block 0
[ 1065.394942][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1065.460080][T24864] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8160'.
[ 1066.258774][T24898] loop3: detected capacity change from 0 to 164
[ 1066.284954][T24898] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1066.323329][T24898] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1066.358275][T24898] rock: directory entry would overflow storage
[ 1066.400687][T24898] rock: sig=0x4f50, size=4, remaining=3
[ 1066.410201][T18954] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1066.418120][ T5890] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1066.438333][T24898] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 1066.621977][T18954] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1066.642202][ T5890] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1066.652794][ T5890] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1066.672088][T18954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.694559][ T5890] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config
[ 1066.717211][T18954] usb 3-1: config 0 descriptor??
[ 1066.724904][ T5890] usb 2-1: config 220 has no interface number 2
[ 1066.732036][ T5890] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1066.748649][ T5890] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1066.756680][ T5890] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1066.763817][ T5890] usb 2-1: config 220 interface 1 has no altsetting 0
[ 1066.782791][ T5890] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1066.796432][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.808975][ T5890] usb 2-1: Product: syz
[ 1066.822448][ T5890] usb 2-1: Manufacturer: syz
[ 1066.827307][ T5890] usb 2-1: SerialNumber: syz
[ 1066.872655][T24914] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1066.885744][T24914] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1066.943415][T18954] [drm] vendor descriptor length:6 data:06 5f 01 ff 00 00 00 00 00 00 00
[ 1066.959774][T18954] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1066.980347][T24916] QAT: Device 127 not found
[ 1067.050133][ T5890] usb 2-1: selecting invalid altsetting 0
[ 1067.079380][ T5890] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[ 1067.091275][ T5890] usb 2-1: No valid video chain found.
[ 1067.127645][ T5890] usb 2-1: selecting invalid altsetting 0
[ 1067.141272][T18954] [drm:udl_init] *ERROR* Selecting channel failed
[ 1067.154524][ T5890] usbtest: probe of 2-1:220.1 failed with error -22
[ 1067.180370][ T5890] usb 2-1: USB disconnect, device number 123
[ 1067.188912][T18954] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1067.206726][T18954] [drm] Initialized udl on minor 2
[ 1067.221472][T18954] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1067.236858][T18954] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1067.309880][   T23] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1067.325645][T18954] usb 3-1: USB disconnect, device number 127
[ 1067.342131][   T23] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1067.361863][T24925] loop4: detected capacity change from 0 to 1024
[ 1067.574171][T24930] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8188'.
[ 1067.626131][T24932] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8189'.
[ 1068.005640][T24944] cgroup: Name too long
[ 1068.463245][T24957] loop1: detected capacity change from 0 to 4096
[ 1069.144507][T24986] AppArmor: change_hat: Invalid input '0'
[ 1069.150787][T22209] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1069.365218][T22209] usb 4-1: Using ep0 maxpacket: 16
[ 1069.384787][T22209] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1069.428885][T22209] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[ 1069.447673][T22209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.470148][T22209] usb 4-1: Product: syz
[ 1069.475866][T22209] usb 4-1: Manufacturer: syz
[ 1069.486762][T22209] usb 4-1: SerialNumber: syz
[ 1069.515004][T22209] usb 4-1: config 0 descriptor??
[ 1069.525705][T22209] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 1069.538884][T22209] usb 4-1: Detected FT232B
[ 1069.606915][T12035] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1069.733001][T22209] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1069.750137][T22209] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1069.775889][T22209] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1069.808646][T12035] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1069.822570][T12035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.840751][T22209] usb 4-1: USB disconnect, device number 116
[ 1069.860780][T12035] usb 2-1: Product: syz
[ 1069.865023][T12035] usb 2-1: Manufacturer: syz
[ 1069.878947][T22209] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1069.903544][T12035] usb 2-1: SerialNumber: syz
[ 1069.923755][T22209] ftdi_sio 4-1:0.0: device disconnected
[ 1069.937990][T12035] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1069.964285][    T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1070.493226][T22209] usb 2-1: USB disconnect, device number 124
[ 1070.791938][T25039] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1070.996812][    T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1071.037461][    T9] ath9k_htc: Failed to initialize the device
[ 1071.058655][T22209] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1071.095267][T25049] loop3: detected capacity change from 0 to 8
[ 1071.157739][T25054] loop2: detected capacity change from 0 to 64
[ 1071.687423][T25071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8251'.
[ 1071.956251][T20553] Bluetooth: hci0: command 0x0405 tx timeout
[ 1072.780931][T25078] loop2: detected capacity change from 0 to 32768
[ 1072.814728][T25078] XFS: ikeep mount option is deprecated.
[ 1072.941799][T25078] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1072.951889][T25120] loop3: detected capacity change from 0 to 256
[ 1073.056452][T25120] FAT-fs (loop3): Directory bread(block 64) failed
[ 1073.120158][T25120] FAT-fs (loop3): Directory bread(block 65) failed
[ 1073.161901][T25078] XFS (loop2): Ending clean mount
[ 1073.172033][T25120] FAT-fs (loop3): Directory bread(block 66) failed
[ 1073.202185][T25120] FAT-fs (loop3): Directory bread(block 67) failed
[ 1073.217195][T25078] XFS (loop2): Quotacheck needed: Please wait.
[ 1073.223914][T25120] FAT-fs (loop3): Directory bread(block 68) failed
[ 1073.239950][T25120] FAT-fs (loop3): Directory bread(block 69) failed
[ 1073.261069][T25120] FAT-fs (loop3): Directory bread(block 70) failed
[ 1073.287828][T25120] FAT-fs (loop3): Directory bread(block 71) failed
[ 1073.326338][T25120] FAT-fs (loop3): Directory bread(block 72) failed
[ 1073.345771][T25120] FAT-fs (loop3): Directory bread(block 73) failed
[ 1073.452855][T25078] XFS (loop2): Quotacheck: Done.
[ 1073.705835][ T5785] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1073.737233][T25140] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8273'.
[ 1074.382871][T25160] bond0: option fail_over_mac: unable to set because the bond device has slaves
[ 1074.457017][T25164] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8275'.
[ 1074.718175][T25173] loop3: detected capacity change from 0 to 8
[ 1074.806920][T25173] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1074.869066][T25173] SQUASHFS error: Failed to read block 0x108: -5
[ 1074.914400][T25173] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1074.965670][T25173] SQUASHFS error: Unable to read inode 0x11f
[ 1075.162247][    T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1075.343109][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1075.354300][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1075.379068][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1075.409174][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1075.426075][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1075.428440][T18954] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1075.436302][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.451615][    T9] usb 2-1: Product: syz
[ 1075.455837][    T9] usb 2-1: Manufacturer: syz
[ 1075.460536][    T9] usb 2-1: SerialNumber: syz
[ 1075.485851][    T9] usb 2-1: config 0 descriptor??
[ 1075.528065][    T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[ 1075.642062][T18954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1075.662117][T18954] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1075.693241][T18954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024
[ 1075.727329][    T9] snd_usb_toneport 2-1:0.0: cannot get proper max packet size
[ 1075.738154][    T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1075.745796][T18954] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1075.780541][    T9] snd_usb_toneport: probe of 2-1:0.0 failed with error -22
[ 1075.795592][T18954] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1075.820190][T18954] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1075.833886][T18954] usb 4-1: Manufacturer: syz
[ 1075.863726][T18954] usb 4-1: config 0 descriptor??
[ 1075.879830][T25173] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1075.912338][   T42] usb 2-1: USB disconnect, device number 125
[ 1075.940492][T18954] smsusb:smsusb_probe: board id=9, interface number 0
[ 1075.976843][T18954] smsusb:siano_media_device_register: media controller created
[ 1076.017665][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.025072][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.032382][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.039682][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.047028][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.061392][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.068986][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.076330][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.083672][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.091013][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.098331][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.109502][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.116838][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.124549][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.131889][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.139191][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.146586][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.153931][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.160483][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.167812][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.175125][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.182392][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.189653][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.203072][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.210533][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.217878][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.225207][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.232574][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.239269][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.246667][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.254067][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.261426][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.268807][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.276192][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.283403][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.290793][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.298102][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.305381][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.312654][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.319964][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.326666][T18954] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[ 1076.335415][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.335539][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.335638][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.335743][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.335840][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.335931][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.336026][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.336122][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.336221][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.336316][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.411278][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.418623][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.425955][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.433279][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.440593][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.447913][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.455244][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.462567][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.469885][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.477184][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.484505][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.491909][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.499229][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.506529][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.513839][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.521138][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.528435][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.535730][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.543019][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.550273][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.557541][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.564811][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.573306][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.580643][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.587938][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.595246][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.602559][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.609877][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.617193][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.624525][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.631837][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.639149][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.646483][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.671758][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.679116][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.686441][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.693747][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.701054][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.708361][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.715676][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.722981][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.729532][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.736851][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.744153][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.752619][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.759946][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.767264][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.774574][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.781872][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.789133][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.796388][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.803674][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.810302][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.817612][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.824908][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.832730][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.840049][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.847358][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.854675][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.861990][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.869301][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.876613][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.884046][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.891904][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.899227][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.906542][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.913878][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.921201][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.928623][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.935963][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.943319][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.950725][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.957551][T18954] smsmdtv:smscore_set_device_mode: mode detect failed -22
[ 1076.966588][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.966717][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.966827][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.966953][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.967059][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.967163][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.967269][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.967375][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.967482][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.967589][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.043312][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.050643][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.057953][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.065283][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.072614][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.079947][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.087274][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.094617][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.102024][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.109375][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.116289][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.123715][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.131079][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.138384][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.145698][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.153008][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.160296][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.167564][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.174830][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.182167][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.189746][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.197088][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.204424][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.211739][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.219061][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.226385][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.233730][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.241050][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.248440][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.255169][T18954] smsmdtv:smscore_start_device: set device mode failed , rc -22
[ 1077.264598][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.264708][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.264810][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.264903][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.264994][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.265085][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.265175][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.265266][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.265356][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.332645][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.339988][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.347321][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.354659][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.361992][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.369300][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.376591][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.383960][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.390611][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.398237][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.405546][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.412847][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.420155][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.427456][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.434751][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.442135][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.449266][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.456602][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.463924][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.471807][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.479151][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.486492][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.493821][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.501114][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.508117][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.515443][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.522708][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.529973][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.537227][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.544486][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.551784][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.559055][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.566320][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.573604][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.580431][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.587771][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.595089][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.602416][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.609842][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.617252][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.624582][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.632106][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.632177][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.632237][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.633575][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.633644][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.633697][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.633767][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.683666][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.690992][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.698303][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.705598][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.713012][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.720363][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1077.730879][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.730964][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.731032][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.731099][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.731162][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.731225][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.731286][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.731348][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.731631][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732247][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732318][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732383][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732442][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732500][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732558][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732615][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732672][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732728][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.732968][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733031][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733090][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733148][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733206][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733263][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733321][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733543][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733605][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733663][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733720][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733782][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733839][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733896][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.733953][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734009][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734332][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734424][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734497][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734577][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734656][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734731][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734821][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734894][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.734970][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735243][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735305][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735362][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735419][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735476][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735531][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735583][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735639][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735689][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735924][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.735986][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736047][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736105][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736164][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736222][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736280][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736498][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736562][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736620][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736676][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736731][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736793][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736848][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736905][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.736962][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737245][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737317][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737379][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737438][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737498][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737557][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737617][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737677][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737735][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.737970][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738030][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738088][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738145][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738202][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738259][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738317][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738375][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738432][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738660][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738730][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738804][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738871][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.738938][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739004][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739070][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739291][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739353][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739414][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739474][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739534][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739593][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739653][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739713][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.739778][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740012][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740081][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740148][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740215][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740282][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740349][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740415][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740633][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740693][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740760][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740818][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740876][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740934][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.740991][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741048][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741106][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741336][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741404][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741471][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741538][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741604][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741671][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741737][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.741976][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742053][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742116][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742178][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742246][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742310][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742369][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742433][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742499][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742873][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.742942][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743014][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743087][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743159][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743229][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743455][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743524][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743586][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743646][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743707][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.743772][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744072][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744139][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744200][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744260][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744342][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744403][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744463][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744694][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744775][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744848][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744916][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.744980][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745044][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745106][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745172][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745401][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745480][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745556][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745646][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745729][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745838][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.745921][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746161][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746231][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746303][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746368][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746434][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746499][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746562][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746628][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746886][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.746962][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747022][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747081][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747316][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747377][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747436][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747495][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747616][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747675][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747915][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.747990][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748050][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748110][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748168][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748227][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748287][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748346][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748406][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748636][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748707][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748773][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748841][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748908][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.748973][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749200][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749271][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749331][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749390][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749450][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749509][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749575][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749635][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.749693][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.751463][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.751555][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.751627][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.751697][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.751766][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.751835][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752085][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752147][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752208][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752267][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752326][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752385][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752444][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752502][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752572][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752790][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752862][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752928][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.752995][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753060][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753124][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753414][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753482][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753555][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753626][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753693][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753756][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.753827][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754093][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754201][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754300][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754397][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754496][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754605][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754700][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754848][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.754965][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.755042][T18954] smsusb:smsusb_init_device: smscore_start_device(...) failed
[ 1077.755557][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1077.758175][T18954] ------------[ cut here ]------------
[ 1077.758188][T18954] ODEBUG: free active (active state 0) object: ffff888023b2eb08 object type: work_struct hint: do_submit_urb+0x0/0x360
[ 1077.758783][T18954] WARNING: CPU: 1 PID: 18954 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540
[ 1077.758835][T18954] Modules linked in:
[ 1077.758857][T18954] CPU: 1 PID: 18954 Comm: kworker/1:5 Not tainted 6.6.95-syzkaller #0
[ 1077.758881][T18954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1077.758898][T18954] Workqueue: usb_hub_wq hub_event
[ 1077.758928][T18954] RIP: 0010:debug_check_no_obj_freed+0x446/0x540
[ 1077.758964][T18954] Code: 4c 8b 4d 00 48 c7 c7 00 77 fc 8a 48 c7 c6 60 73 fc 8a 48 c7 c2 80 78 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 8e 77 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a3 2f 24
[ 1077.758986][T18954] RSP: 0018:ffffc9000c21eb38 EFLAGS: 00010282
[ 1077.759008][T18954] RAX: 4bc903a666f25b00 RBX: ffffffff970ebb10 RCX: 0000000000100000
[ 1077.759026][T18954] RDX: ffffc9001805a000 RSI: 000000000009dae8 RDI: 000000000009dae9
[ 1077.759044][T18954] RBP: ffffffff8aa9dfe0 R08: ffffffff90da5597 R09: 1ffffffff21b4ab2
[ 1077.759062][T18954] R10: dffffc0000000000 R11: fffffbfff21b4ab3 R12: ffff888023b2f000
[ 1077.759080][T18954] R13: ffffffff870bd5e0 R14: ffff888023b2e000 R15: ffff888023b2eb08
[ 1077.759098][T18954] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1077.759118][T18954] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1077.759134][T18954] CR2: 00007f1cec180678 CR3: 000000000cb30000 CR4: 00000000003506e0
[ 1077.759154][T18954] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1077.759169][T18954] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1077.759185][T18954] Call Trace:
[ 1077.759195][T18954]  <TASK>
[ 1077.759223][T18954]  slab_free_freelist_hook+0xd2/0x1b0
[ 1077.759256][T18954]  ? smsusb_term_device+0x1ac/0x220
[ 1077.759292][T18954]  __kmem_cache_free+0xba/0x1f0
[ 1077.759322][T18954]  smsusb_term_device+0x1ac/0x220
[ 1077.759366][T18954]  smsusb_probe+0x1708/0x1da0
[ 1077.759419][T18954]  ? s2255_print_cfg+0x1b0/0x1b0
[ 1077.759461][T18954]  ? smsusb1_detectmode+0x260/0x260
[ 1077.759497][T18954]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1077.759528][T18954]  ? pm_runtime_enable+0x192/0x2a0
[ 1077.759562][T18954]  ? __pm_runtime_set_status+0x8ab/0xb80
[ 1077.759605][T18954]  usb_probe_interface+0x5a4/0xb00
[ 1077.759642][T18954]  ? usb_register_driver+0x3d0/0x3d0
[ 1077.759663][T18954]  really_probe+0x25b/0xb40
[ 1077.759698][T18954]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1077.759737][T18954]  __driver_probe_device+0x18c/0x330
[ 1077.759772][T18954]  driver_probe_device+0x4f/0x420
[ 1077.759808][T18954]  __device_attach_driver+0x2ca/0x520
[ 1077.759845][T18954]  bus_for_each_drv+0x24b/0x2d0
[ 1077.759874][T18954]  ? coredump_store+0x90/0x90
[ 1077.759904][T18954]  ? bus_find_device+0x320/0x320
[ 1077.759944][T18954]  __device_attach+0x2b5/0x400
[ 1077.759978][T18954]  ? device_attach+0x20/0x20
[ 1077.760004][T18954]  ? __kmem_cache_free+0xba/0x1f0
[ 1077.760033][T18954]  ? do_raw_spin_unlock+0x121/0x230
[ 1077.760069][T18954]  bus_probe_device+0x180/0x260
[ 1077.760101][T18954]  device_add+0x85b/0xc20
[ 1077.760130][T18954]  usb_set_configuration+0x1a79/0x20c0
[ 1077.760199][T18954]  usb_generic_driver_probe+0x8d/0x150
[ 1077.760237][T18954]  usb_probe_device+0x13d/0x280
[ 1077.760264][T18954]  ? usb_register_device_driver+0x230/0x230
[ 1077.760286][T18954]  really_probe+0x25b/0xb40
[ 1077.760320][T18954]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1077.760352][T18954]  __driver_probe_device+0x18c/0x330
[ 1077.760387][T18954]  driver_probe_device+0x4f/0x420
[ 1077.760421][T18954]  __device_attach_driver+0x2ca/0x520
[ 1077.760458][T18954]  bus_for_each_drv+0x24b/0x2d0
[ 1077.760486][T18954]  ? coredump_store+0x90/0x90
[ 1077.760516][T18954]  ? bus_find_device+0x320/0x320
[ 1077.760555][T18954]  __device_attach+0x2b5/0x400
[ 1077.760590][T18954]  ? device_attach+0x20/0x20
[ 1077.760616][T18954]  ? __kmem_cache_free+0xba/0x1f0
[ 1077.760645][T18954]  ? do_raw_spin_unlock+0x121/0x230
[ 1077.760681][T18954]  bus_probe_device+0x180/0x260
[ 1077.760723][T18954]  device_add+0x85b/0xc20
[ 1077.760752][T18954]  usb_new_device+0xa31/0x1630
[ 1077.760794][T18954]  ? usb_disconnect+0x8a0/0x8a0
[ 1077.760823][T18954]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1077.760849][T18954]  ? lockdep_hardirqs_on+0x98/0x150
[ 1077.760877][T18954]  hub_event+0x2957/0x49c0
[ 1077.760967][T18954]  ? led_work+0x720/0x720
[ 1077.760995][T18954]  ? read_lock_is_recursive+0x20/0x20
[ 1077.761029][T18954]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1077.761055][T18954]  ? process_scheduled_works+0x957/0x15b0
[ 1077.761084][T18954]  ? process_scheduled_works+0x957/0x15b0
[ 1077.761112][T18954]  process_scheduled_works+0xa45/0x15b0
[ 1077.761174][T18954]  ? assign_work+0x400/0x400
[ 1077.761211][T18954]  ? assign_work+0x39e/0x400
[ 1077.761244][T18954]  worker_thread+0xa55/0xfc0
[ 1077.761273][T18954]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1077.761300][T18954]  ? _raw_spin_unlock+0x40/0x40
[ 1077.761322][T18954]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1077.761374][T18954]  kthread+0x2fa/0x390
[ 1077.761394][T18954]  ? pr_cont_work+0x560/0x560
[ 1077.761422][T18954]  ? kthread_blkcg+0xd0/0xd0
[ 1077.761444][T18954]  ret_from_fork+0x48/0x80
[ 1077.761469][T18954]  ? kthread_blkcg+0xd0/0xd0
[ 1077.761493][T18954]  ret_from_fork_asm+0x11/0x20
[ 1077.761541][T18954]  </TASK>
[ 1077.761553][T18954] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1077.761564][T18954] CPU: 1 PID: 18954 Comm: kworker/1:5 Not tainted 6.6.95-syzkaller #0
[ 1077.761583][T18954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1077.761596][T18954] Workqueue: usb_hub_wq hub_event
[ 1077.761620][T18954] Call Trace:
[ 1077.761628][T18954]  <TASK>
[ 1077.761637][T18954]  dump_stack_lvl+0x16c/0x230
[ 1077.761669][T18954]  ? show_regs_print_info+0x20/0x20
[ 1077.761698][T18954]  ? load_image+0x3b0/0x3b0
[ 1077.761744][T18954]  panic+0x2c0/0x710
[ 1077.761773][T18954]  ? bpf_jit_dump+0xd0/0xd0
[ 1077.761805][T18954]  ? ret_from_fork_asm+0x11/0x20
[ 1077.761839][T18954]  __warn+0x2e0/0x470
[ 1077.761857][T18954]  ? debug_check_no_obj_freed+0x446/0x540
[ 1077.761891][T18954]  ? debug_check_no_obj_freed+0x446/0x540
[ 1077.761923][T18954]  report_bug+0x2be/0x4f0
[ 1077.761953][T18954]  ? debug_check_no_obj_freed+0x446/0x540
[ 1077.761988][T18954]  ? debug_check_no_obj_freed+0x446/0x540
[ 1077.762021][T18954]  ? debug_check_no_obj_freed+0x448/0x540
[ 1077.762053][T18954]  handle_bug+0xcf/0x120
[ 1077.762084][T18954]  exc_invalid_op+0x1a/0x50
[ 1077.762115][T18954]  asm_exc_invalid_op+0x1a/0x20
[ 1077.762138][T18954] RIP: 0010:debug_check_no_obj_freed+0x446/0x540
[ 1077.762172][T18954] Code: 4c 8b 4d 00 48 c7 c7 00 77 fc 8a 48 c7 c6 60 73 fc 8a 48 c7 c2 80 78 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 8e 77 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a3 2f 24
[ 1077.762190][T18954] RSP: 0018:ffffc9000c21eb38 EFLAGS: 00010282
[ 1077.762224][T18954] RAX: 4bc903a666f25b00 RBX: ffffffff970ebb10 RCX: 0000000000100000
[ 1077.762241][T18954] RDX: ffffc9001805a000 RSI: 000000000009dae8 RDI: 000000000009dae9
[ 1077.762256][T18954] RBP: ffffffff8aa9dfe0 R08: ffffffff90da5597 R09: 1ffffffff21b4ab2
[ 1077.762272][T18954] R10: dffffc0000000000 R11: fffffbfff21b4ab3 R12: ffff888023b2f000
[ 1077.762289][T18954] R13: ffffffff870bd5e0 R14: ffff888023b2e000 R15: ffff888023b2eb08
[ 1077.762307][T18954]  ? smsusb_onresponse+0x890/0x890
[ 1077.762357][T18954]  ? smsusb_onresponse+0x890/0x890
[ 1077.762403][T18954]  slab_free_freelist_hook+0xd2/0x1b0
[ 1077.762435][T18954]  ? smsusb_term_device+0x1ac/0x220
[ 1077.762466][T18954]  __kmem_cache_free+0xba/0x1f0
[ 1077.762495][T18954]  smsusb_term_device+0x1ac/0x220
[ 1077.762556][T18954]  smsusb_probe+0x1708/0x1da0
[ 1077.762603][T18954]  ? s2255_print_cfg+0x1b0/0x1b0
[ 1077.762645][T18954]  ? smsusb1_detectmode+0x260/0x260
[ 1077.762680][T18954]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1077.762708][T18954]  ? pm_runtime_enable+0x192/0x2a0
[ 1077.762747][T18954]  ? __pm_runtime_set_status+0x8ab/0xb80
[ 1077.762790][T18954]  usb_probe_interface+0x5a4/0xb00
[ 1077.762825][T18954]  ? usb_register_driver+0x3d0/0x3d0
[ 1077.762845][T18954]  really_probe+0x25b/0xb40
[ 1077.762879][T18954]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1077.762909][T18954]  __driver_probe_device+0x18c/0x330
[ 1077.762944][T18954]  driver_probe_device+0x4f/0x420
[ 1077.762979][T18954]  __device_attach_driver+0x2ca/0x520
[ 1077.763014][T18954]  bus_for_each_drv+0x24b/0x2d0
[ 1077.763041][T18954]  ? coredump_store+0x90/0x90
[ 1077.763070][T18954]  ? bus_find_device+0x320/0x320
[ 1077.763105][T18954]  __device_attach+0x2b5/0x400
[ 1077.763136][T18954]  ? device_attach+0x20/0x20
[ 1077.763160][T18954]  ? __kmem_cache_free+0xba/0x1f0
[ 1077.763186][T18954]  ? do_raw_spin_unlock+0x121/0x230
[ 1077.763220][T18954]  bus_probe_device+0x180/0x260
[ 1077.763247][T18954]  device_add+0x85b/0xc20
[ 1077.763274][T18954]  usb_set_configuration+0x1a79/0x20c0
[ 1077.763348][T18954]  usb_generic_driver_probe+0x8d/0x150
[ 1077.763389][T18954]  usb_probe_device+0x13d/0x280
[ 1077.763417][T18954]  ? usb_register_device_driver+0x230/0x230
[ 1077.763441][T18954]  really_probe+0x25b/0xb40
[ 1077.763474][T18954]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1077.763510][T18954]  __driver_probe_device+0x18c/0x330
[ 1077.763547][T18954]  driver_probe_device+0x4f/0x420
[ 1077.763584][T18954]  __device_attach_driver+0x2ca/0x520
[ 1077.763623][T18954]  bus_for_each_drv+0x24b/0x2d0
[ 1077.763652][T18954]  ? coredump_store+0x90/0x90
[ 1077.763685][T18954]  ? bus_find_device+0x320/0x320
[ 1077.763734][T18954]  __device_attach+0x2b5/0x400
[ 1077.763771][T18954]  ? device_attach+0x20/0x20
[ 1077.763800][T18954]  ? __kmem_cache_free+0xba/0x1f0
[ 1077.763830][T18954]  ? do_raw_spin_unlock+0x121/0x230
[ 1077.763869][T18954]  bus_probe_device+0x180/0x260
[ 1077.763903][T18954]  device_add+0x85b/0xc20
[ 1077.763934][T18954]  usb_new_device+0xa31/0x1630
[ 1077.763977][T18954]  ? usb_disconnect+0x8a0/0x8a0
[ 1077.764009][T18954]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1077.764036][T18954]  ? lockdep_hardirqs_on+0x98/0x150
[ 1077.764064][T18954]  hub_event+0x2957/0x49c0
[ 1077.764157][T18954]  ? led_work+0x720/0x720
[ 1077.764186][T18954]  ? read_lock_is_recursive+0x20/0x20
[ 1077.764222][T18954]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1077.764249][T18954]  ? process_scheduled_works+0x957/0x15b0
[ 1077.764279][T18954]  ? process_scheduled_works+0x957/0x15b0
[ 1077.764309][T18954]  process_scheduled_works+0xa45/0x15b0
[ 1077.764392][T18954]  ? assign_work+0x400/0x400
[ 1077.764431][T18954]  ? assign_work+0x39e/0x400
[ 1077.764468][T18954]  worker_thread+0xa55/0xfc0
[ 1077.764498][T18954]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1077.764526][T18954]  ? _raw_spin_unlock+0x40/0x40
[ 1077.764549][T18954]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1077.764604][T18954]  kthread+0x2fa/0x390
[ 1077.764624][T18954]  ? pr_cont_work+0x560/0x560
[ 1077.764655][T18954]  ? kthread_blkcg+0xd0/0xd0
[ 1077.764677][T18954]  ret_from_fork+0x48/0x80
[ 1077.764705][T18954]  ? kthread_blkcg+0xd0/0xd0
[ 1077.764737][T18954]  ret_from_fork_asm+0x11/0x20
[ 1077.764793][T18954]  </TASK>
[ 1077.769477][T18954] Kernel Offset: disabled