last executing test programs:

5.809976317s ago: executing program 3 (id=507):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000200), 0x20)

5.570578189s ago: executing program 3 (id=510):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000440)={0x30, 0x29, 0x1, {0x6, [{{0x10, 0x1}, 0xffffffffffffffe8, 0x5, 0xd, './file0/file0'}]}}, 0x30)

5.32246276s ago: executing program 3 (id=515):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000000c0), 0x4)
setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0)

5.030757274s ago: executing program 3 (id=519):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f00000000c0)='\x00\x00y')

3.748631324s ago: executing program 0 (id=530):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pread64(r1, 0x0, 0x0, 0x100005ffffbff)

3.387611841s ago: executing program 1 (id=535):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$OCFS2_IOC_REFLINK(r0, 0x4008c001, 0x0)

2.975016131s ago: executing program 3 (id=536):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB='o'], 0x1, 0x1538, &(0x7f0000004240)="$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")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a10109e981008c0508950129309102c0"], 0x0}, 0x0)

2.047002774s ago: executing program 0 (id=539):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000440)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14)

1.826798225s ago: executing program 1 (id=540):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80242, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)

1.69903488s ago: executing program 2 (id=541):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

1.467082051s ago: executing program 0 (id=542):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x7f00000, 0x4)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendto$unix(r0, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

1.377762125s ago: executing program 1 (id=543):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10)
listen(r0, 0xa)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xf5, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0)

1.209631044s ago: executing program 0 (id=544):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc}]}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}}, 0x0)

1.07102224s ago: executing program 1 (id=545):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x95b99aa44ee7c139)

1.07058955s ago: executing program 3 (id=546):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
pwrite64(r0, &(0x7f0000000280)='+', 0x1, 0x0)

1.029768462s ago: executing program 2 (id=547):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2e0005a7a3000000000010000000000000000000", @ANYRES32=0x1], 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3})

965.526745ms ago: executing program 0 (id=548):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0x1008040, &(0x7f0000000a80)={[{@noblock_validity}, {@nojournal_checksum}, {@minixdf}, {@grpjquota}, {@journal_ioprio}, {@dioread_nolock}, {@nomblk_io_submit}, {@noinit_itable}, {@nogrpid}]}, 0x1, 0x5ca, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
fallocate(r0, 0x0, 0xfff, 0x9)
write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf70ff573330754d8f2a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7c1c2d2987f4155f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efae14617fb9073c79d7083c629bf11a56527fe85a41c3b347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c404697668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a426822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb44134003c58d96043d93a57a980ed6b9f35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b925c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e5bce797cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4aa9050000000000005c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d3851b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0011ecc8ced3d7dfa39250fc3c8cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797995d221ecd0515e4c89c431ff7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb19b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc0450cd6e418713c68b349b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622041e97d8f03f4727e865be656d9286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2bdd241e57deeb642ff28140ee91424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed49778e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c328f6e21312ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49ebefae6f43d3e0cd207439745dfd4c347058a4ec3c3bbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d5a4b9119eed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f0e8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfc913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b353382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d456fd6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38babf2ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6dffbb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987a8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d52561aeb5519e82d0d390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7acbe92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0xfffffffffffffe94}}, 0x1006)

770.963554ms ago: executing program 2 (id=549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc)

447.297569ms ago: executing program 1 (id=550):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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")
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a)
getdents64(r0, &(0x7f0000000180)=""/88, 0x58)

436.38575ms ago: executing program 2 (id=551):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa)

175.030422ms ago: executing program 0 (id=552):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2f1a05e5f7ef0af9, 0x12, r1, 0x98ccc000)
close(r1)

174.729212ms ago: executing program 2 (id=553):
r0 = socket(0x2, 0x3, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r0, &(0x7f00000002c0)="77afa4e2", 0x4, 0x8880, &(0x7f00000001c0)=@file={0x0, './proc/file0\x00'}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e)

72.675487ms ago: executing program 1 (id=554):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d04, &(0x7f0000000200)="4ba6")

0s ago: executing program 2 (id=555):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x61c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5f0, 0x2, [@TCA_BPF_ACT={0x5ec, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x74, 0x8, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0xb6, 0x6, 0xfffffffa}, {0x7ff, 0x7, 0x2, 0x3}, {0x2, 0x6, 0x0, 0xedc}, {0x10, 0xb, 0x6, 0x9}, {0x0, 0x1, 0x40, 0x4}]}]}, {0x1e, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb1"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x444, 0x9, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5bb5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0xa, 0x6, "94cedea66d85"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts.
[   78.982503][ T5761] cgroup: Unknown subsys name 'net'
[   79.120129][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.712317][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.297361][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.305509][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.323194][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.342649][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.362485][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.369752][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.377706][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.379131][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.385698][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.393279][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.407429][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.414575][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.415366][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.425087][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.433568][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.437145][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.448388][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.454338][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.460124][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.464772][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.472791][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.485057][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.505139][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.518916][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.912578][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   83.026236][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   83.084143][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   83.096284][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.105056][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.112814][ T5776] bridge_slave_0: entered allmulticast mode
[   83.119890][ T5776] bridge_slave_0: entered promiscuous mode
[   83.137763][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.145234][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.152692][ T5776] bridge_slave_1: entered allmulticast mode
[   83.159676][ T5776] bridge_slave_1: entered promiscuous mode
[   83.267777][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.289431][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   83.318925][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.381476][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.388755][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.396342][ T5775] bridge_slave_0: entered allmulticast mode
[   83.404401][ T5775] bridge_slave_0: entered promiscuous mode
[   83.427606][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.435933][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.443548][ T5773] bridge_slave_0: entered allmulticast mode
[   83.450889][ T5773] bridge_slave_0: entered promiscuous mode
[   83.458633][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.468736][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.475984][ T5775] bridge_slave_1: entered allmulticast mode
[   83.483801][ T5775] bridge_slave_1: entered promiscuous mode
[   83.507256][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.514594][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.521742][ T5773] bridge_slave_1: entered allmulticast mode
[   83.529897][ T5773] bridge_slave_1: entered promiscuous mode
[   83.549772][ T5776] team0: Port device team_slave_0 added
[   83.558857][ T5776] team0: Port device team_slave_1 added
[   83.623991][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.634041][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.641167][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.649180][ T5774] bridge_slave_0: entered allmulticast mode
[   83.656709][ T5774] bridge_slave_0: entered promiscuous mode
[   83.686638][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.706399][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.714030][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.721225][ T5774] bridge_slave_1: entered allmulticast mode
[   83.728536][ T5774] bridge_slave_1: entered promiscuous mode
[   83.737191][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.750459][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.757780][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.783975][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.798640][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.805809][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.832690][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.858517][ T5775] team0: Port device team_slave_0 added
[   83.879501][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.904137][ T5775] team0: Port device team_slave_1 added
[   83.922584][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.943565][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.021712][ T5773] team0: Port device team_slave_0 added
[   84.030679][ T5773] team0: Port device team_slave_1 added
[   84.054352][ T5776] hsr_slave_0: entered promiscuous mode
[   84.060625][ T5776] hsr_slave_1: entered promiscuous mode
[   84.071114][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.078250][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.107222][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.133574][ T5774] team0: Port device team_slave_0 added
[   84.152274][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.159257][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.185677][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.197512][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.204888][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.230991][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.250021][ T5774] team0: Port device team_slave_1 added
[   84.267828][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.274995][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.302108][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.380824][ T5773] hsr_slave_0: entered promiscuous mode
[   84.387691][ T5773] hsr_slave_1: entered promiscuous mode
[   84.394624][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.402989][ T5773] Cannot create hsr debugfs directory
[   84.418077][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.425109][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.451073][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.463788][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.470770][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.496986][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.554147][ T5783] Bluetooth: hci2: command tx timeout
[   84.562530][ T5786] Bluetooth: hci0: command tx timeout
[   84.568161][ T5786] Bluetooth: hci3: command tx timeout
[   84.574057][ T5783] Bluetooth: hci1: command tx timeout
[   84.582778][ T5775] hsr_slave_0: entered promiscuous mode
[   84.589457][ T5775] hsr_slave_1: entered promiscuous mode
[   84.595622][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.603252][ T5775] Cannot create hsr debugfs directory
[   84.653771][ T5774] hsr_slave_0: entered promiscuous mode
[   84.660071][ T5774] hsr_slave_1: entered promiscuous mode
[   84.666899][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.674547][ T5774] Cannot create hsr debugfs directory
[   85.051436][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.065808][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.090361][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.100524][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.177064][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.190580][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.214130][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.237170][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.308118][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.320529][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.331486][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.355669][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.437944][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.449829][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.460251][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.476663][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.499005][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.564946][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   85.609891][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.617212][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.640939][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.648150][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.691513][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.724285][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.750389][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   85.779322][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   85.803224][  T995] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.810347][  T995] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.823073][  T995] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.830220][  T995] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.848614][  T995] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.855803][  T995] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.906954][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.914085][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.936309][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.995502][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   86.068897][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.076129][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.124826][  T997] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.132044][  T997] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.289846][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.565866][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.593853][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.632303][ T5786] Bluetooth: hci0: command tx timeout
[   86.637967][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.643765][ T5786] Bluetooth: hci3: command tx timeout
[   86.649041][ T5784] Bluetooth: hci2: command tx timeout
[   86.656056][ T5783] Bluetooth: hci1: command tx timeout
[   86.763487][ T5775] veth0_vlan: entered promiscuous mode
[   86.780693][ T5773] veth0_vlan: entered promiscuous mode
[   86.803133][ T5775] veth1_vlan: entered promiscuous mode
[   86.832542][ T5773] veth1_vlan: entered promiscuous mode
[   86.857352][ T5776] veth0_vlan: entered promiscuous mode
[   86.905111][ T5776] veth1_vlan: entered promiscuous mode
[   86.974653][ T5775] veth0_macvtap: entered promiscuous mode
[   86.987186][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.014841][ T5775] veth1_macvtap: entered promiscuous mode
[   87.040283][ T5776] veth0_macvtap: entered promiscuous mode
[   87.060700][ T5773] veth0_macvtap: entered promiscuous mode
[   87.076591][ T5776] veth1_macvtap: entered promiscuous mode
[   87.101277][ T5773] veth1_macvtap: entered promiscuous mode
[   87.146539][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.170669][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.209489][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.220844][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.234969][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.243921][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.265806][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.288474][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.303898][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.313085][ T5774] veth0_vlan: entered promiscuous mode
[   87.364488][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.393081][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.413466][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.429127][ T5774] veth1_vlan: entered promiscuous mode
[   87.468471][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.492091][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.500883][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.514640][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.529019][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.552444][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.571953][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.591950][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.613677][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.685688][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.706688][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.717026][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.727971][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.739840][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.782581][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.791364][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.800526][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.812233][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.907896][ T5774] veth0_macvtap: entered promiscuous mode
[   87.933054][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.941067][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.968705][ T5774] veth1_macvtap: entered promiscuous mode
[   88.018212][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.027509][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.040455][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.049707][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.061040][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.072133][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.073807][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.093709][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.105617][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.117756][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.129643][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.183941][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.194836][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.205088][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.216631][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.226663][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.238369][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.249833][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.264002][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.272810][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.281556][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.290366][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.314574][ T4742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.332627][ T4742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.376347][  T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.401410][  T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.420554][  T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.431033][  T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.696548][  T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.706981][ T5840] syz.2.3[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   88.727701][ T5783] Bluetooth: hci1: command tx timeout
[   88.733468][  T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.741385][ T5784] Bluetooth: hci2: command tx timeout
[   88.741411][ T5786] Bluetooth: hci3: command tx timeout
[   88.747972][ T5784] Bluetooth: hci0: command tx timeout
[   88.807078][  T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.816617][  T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.098249][ T5840] loop2: detected capacity change from 0 to 8192
[   89.127023][ T5840] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   89.144528][   T28] audit: type=1326 audit(1789182802.485:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7724d9e159 code=0x7ffc0000
[   89.183669][ T5840] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   89.202442][ T5840] REISERFS (device loop2): using ordered data mode
[   89.230359][   T28] audit: type=1326 audit(1789182802.495:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7724d9e159 code=0x7ffc0000
[   89.238400][ T5855] ima: policy update failed
[   89.255434][ T5840] reiserfs: using flush barriers
[   89.314825][   T28] audit: type=1807 audit(1789182802.575:4): UNKNOWN=? res=0
[   89.322552][   T28] audit: type=1802 audit(1789182802.575:5): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.6" res=0 errno=0
[   89.366733][ T5840] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   89.372087][   T28] audit: type=1802 audit(1789182802.605:6): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.6" res=0 errno=0
[   89.427730][ T5840] REISERFS (device loop2): checking transaction log (loop2)
[   89.451758][   T28] audit: type=1326 audit(1789182802.615:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7724d9e159 code=0x7ffc0000
[   89.527513][   T28] audit: type=1326 audit(1789182802.615:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7724d9e159 code=0x7ffc0000
[   89.631845][ T5859] loop3: detected capacity change from 0 to 1024
[   89.644809][ T5862] loop0: detected capacity change from 0 to 128
[   89.652024][   T28] audit: type=1326 audit(1789182802.615:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7724d9e159 code=0x7ffc0000
[   89.765624][   T28] audit: type=1326 audit(1789182802.615:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7724d9e159 code=0x7ffc0000
[   89.814431][ T5862] syz.0.8: attempt to access beyond end of device
[   89.814431][ T5862] loop0: rw=2049, sector=138, nr_sectors = 6 limit=128
[   89.859445][   T28] audit: type=1326 audit(1789182802.615:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7724d9e159 code=0x7ffc0000
[   89.860917][ T5840] REISERFS (device loop2): Using tea hash to sort names
[   89.941409][ T5859] hfsplus: xattr searching failed
[   89.973886][ T5840] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   90.076424][   T12] hfsplus: b-tree write err: -5, ino 3
[   90.539618][ T5875] loop1: detected capacity change from 0 to 16
[   90.550776][ T5875] =======================================================
[   90.550776][ T5875] WARNING: The mand mount option has been deprecated and
[   90.550776][ T5875]          and is ignored by this kernel. Remove the mand
[   90.550776][ T5875]          option from the mount to silence this warning.
[   90.550776][ T5875] =======================================================
[   90.678155][ T5875] erofs: (device loop1): mounted with root inode @ nid 36.
[   90.808522][ T5784] Bluetooth: hci0: command tx timeout
[   90.808546][ T5786] Bluetooth: hci1: command tx timeout
[   90.814125][ T5784] Bluetooth: hci3: command tx timeout
[   90.814177][ T5784] Bluetooth: hci2: command tx timeout
[   90.998652][ T5891] loop3: detected capacity change from 0 to 16
[   91.018541][ T5891] erofs: (device loop3): mounted with root inode @ nid 36.
[   91.107314][ T5890] loop1: detected capacity change from 0 to 4096
[   91.146181][ T5890] EXT4-fs: inline encryption not supported
[   91.250043][ T5890] EXT4-fs (loop1): Test dummy encryption mode enabled
[   91.330544][ T5890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.505130][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.881010][ T5909] ip_tables: iptables: counters copy to user failed while replacing table
[   91.981425][ T5887] loop0: detected capacity change from 0 to 32768
[   91.998925][    T9] cfg80211: failed to load regulatory.db
[   92.088861][ T5887] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.435127][ T5887] XFS (loop0): Ending clean mount
[   92.636228][ T5932] loop3: detected capacity change from 0 to 1024
[   92.665357][ T5932] EXT4-fs: Ignoring removed orlov option
[   92.685585][ T5773] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.759375][ T5932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.904866][ T5932] EXT4-fs warning (device loop3): ext4_resize_fs:2025: can't read last block, resize aborted
[   92.916480][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.950169][ T5940] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.981795][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.112656][    T9] usb 2-1: Using ep0 maxpacket: 8
[   93.130644][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[   93.148984][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.167520][    T9] usb 2-1: Product: syz
[   93.171736][    T9] usb 2-1: Manufacturer: syz
[   93.187660][    T9] usb 2-1: SerialNumber: syz
[   93.204214][    T9] usb 2-1: config 0 descriptor??
[   93.439868][    T9] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[   94.039476][    T9] usb write operation failed. (-71)
[   94.067640][    T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   94.099063][    T9] dvbdev: DVB: registering new adapter (Terratec H7)
[   94.142502][    T9] usb 2-1: media controller created
[   94.152289][    T9] usb read operation failed. (-71)
[   94.166953][    T9] usb write operation failed. (-71)
[   94.204684][    T9] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5
[   94.241857][    T9] usb 2-1: USB disconnect, device number 2
[   94.747297][ T5995] loop1: detected capacity change from 0 to 256
[   94.774031][ T5987] loop3: detected capacity change from 0 to 8192
[   94.798383][ T5987] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   95.020406][ T6001] loop2: detected capacity change from 0 to 256
[   95.196015][ T6001] FAT-fs (loop2): Directory bread(block 64) failed
[   95.227894][ T6001] FAT-fs (loop2): Directory bread(block 65) failed
[   95.246490][ T6007] �
[   95.259720][ T6001] FAT-fs (loop2): Directory bread(block 66) failed
[   95.294988][ T6001] FAT-fs (loop2): Directory bread(block 67) failed
[   95.301771][ T6001] FAT-fs (loop2): Directory bread(block 68) failed
[   95.328673][ T6001] FAT-fs (loop2): Directory bread(block 69) failed
[   95.372288][ T6001] FAT-fs (loop2): Directory bread(block 70) failed
[   95.378899][ T6001] FAT-fs (loop2): Directory bread(block 71) failed
[   95.412294][ T6001] FAT-fs (loop2): Directory bread(block 72) failed
[   95.430571][ T6001] FAT-fs (loop2): Directory bread(block 73) failed
[   95.579647][ T6016] process 'syz.3.75' launched './file1' with NULL argv: empty string added
[   95.614533][ T6001] syz.2.67: attempt to access beyond end of device
[   95.614533][ T6001] loop2: rw=2049, sector=1224, nr_sectors = 4 limit=256
[   96.074534][ T6028] Zero length message leads to an empty skb
[   96.913736][ T6044] loop2: detected capacity change from 0 to 32768
[   96.927613][ T6058] loop1: detected capacity change from 0 to 512
[   96.939482][ T6044] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.88 (6044)
[   96.959314][ T6058] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.984341][ T6058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   97.016574][ T6044] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   97.029856][ T6044] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   97.042719][ T6058] EXT4-fs (loop1): 1 truncate cleaned up
[   97.049679][ T6058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.063019][ T6044] BTRFS info (device loop2): use zlib compression, level 3
[   97.101150][ T6044] BTRFS info (device loop2): using free space tree
[   97.363245][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.443234][ T6044] BTRFS info (device loop2): enabling ssd optimizations
[   97.476377][ T6044] BTRFS info (device loop2): auto enabling async discard
[   97.784367][   T28] kauditd_printk_skb: 9 callbacks suppressed
[   97.784381][   T28] audit: type=1326 audit(1789182811.135:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   97.886795][   T28] audit: type=1326 audit(1789182811.165:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   97.900370][ T6087] loop3: detected capacity change from 0 to 4096
[   97.940677][ T6064] loop0: detected capacity change from 0 to 32768
[   97.963509][   T28] audit: type=1326 audit(1789182811.165:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   97.983472][ T6087] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[   98.061806][ T6096] capability: warning: `syz.1.103' uses 32-bit capabilities (legacy support in use)
[   98.075022][   T28] audit: type=1326 audit(1789182811.175:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   98.102671][ T6064] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   98.120615][ T5775] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   98.143229][ T6096] program syz.1.103 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.166436][   T28] audit: type=1326 audit(1789182811.175:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   98.210819][   T28] audit: type=1326 audit(1789182811.175:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   98.236149][   T28] audit: type=1326 audit(1789182811.175:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   98.260479][   T28] audit: type=1326 audit(1789182811.175:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   98.284915][   T28] audit: type=1326 audit(1789182811.185:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   98.310001][   T28] audit: type=1326 audit(1789182811.185:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.1.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dc19e159 code=0x7ffc0000
[   98.508579][ T6064] XFS (loop0): Ending clean mount
[   98.547646][ T6064] XFS (loop0): Quotacheck needed: Please wait.
[   98.723654][ T6064] XFS (loop0): Quotacheck: Done.
[   98.794360][ T6064] XFS (loop0): User initiated shutdown received.
[   98.821784][ T6064] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[   98.890031][ T6064] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   99.012386][ T6111] warning: `syz.2.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.040022][ T5773] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.299749][ T6120] raw_sendmsg: syz.2.111 forgot to set AF_INET. Fix it!
[   99.659363][ T6128] loop0: detected capacity change from 0 to 1024
[   99.896297][ T6136] loop1: detected capacity change from 0 to 128
[   99.969883][ T6141] mmap: syz.3.122 (6141) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   99.997849][ T6136] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.012410][ T6144] binder: 6143:6144 ioctl c0306201 200000000040 returned -14
[  100.096806][ T6136] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.278918][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.373903][ T6152] trusted_key: syz.2.126 sent an empty control message without MSG_MORE.
[  100.659169][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[  101.230448][ T6180] netlink: 104 bytes leftover after parsing attributes in process `syz.2.139'.
[  101.254402][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.140'.
[  101.476413][ T6188] program syz.1.143 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  101.675232][ T6191] loop2: detected capacity change from 0 to 2048
[  101.698585][ T6191] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  101.745763][ T6197] loop1: detected capacity change from 0 to 512
[  101.800548][ T6197] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.148: invalid block
[  101.810995][ T5789] udevd[5789]: incorrect nilfs2 checksum on /dev/loop2
[  101.828756][ T6197] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.148: Invalid block bitmap block 0 in block_group 0
[  101.849194][ T6197] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  101.859503][ T6197] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.148: attempt to clear invalid blocks 983261 len 1
[  101.859550][ T6200] netlink: 284 bytes leftover after parsing attributes in process `syz.0.150'.
[  101.898028][ T6197] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.148: invalid indirect mapped block 2683928664 (level 0)
[  101.917199][ T6203] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.935490][ T6197] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.148: Invalid inode table block 0 in block_group 0
[  101.978720][ T6197] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  102.021937][ T6197] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  102.084778][ T6197] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.148: Invalid inode table block 0 in block_group 0
[  102.132196][ T6197] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  102.176370][ T6197] EXT4-fs error (device loop1): ext4_truncate:4302: inode #13: comm syz.1.148: mark_inode_dirty error
[  102.230619][ T6197] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  102.249110][ T6209] loop2: detected capacity change from 0 to 512
[  102.269211][ T6209] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.151: invalid block
[  102.286462][ T6197] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.148: Invalid inode table block 0 in block_group 0
[  102.323079][ T6209] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.151: invalid indirect mapped block 10 (level 1)
[  102.347794][ T6209] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.151: invalid indirect mapped block 8 (level 1)
[  102.384993][ T6197] EXT4-fs (loop1): 1 truncate cleaned up
[  102.393624][ T6197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.409455][ T6209] EXT4-fs (loop2): 1 truncate cleaned up
[  102.433591][ T6209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.484063][ T6209] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters
[  102.524705][ T6197] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.148: Invalid inode table block 0 in block_group 0
[  102.568850][ T6197] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  102.644212][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.664109][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.845007][ T6217] loop2: detected capacity change from 0 to 64
[  103.086362][ T6207] loop3: detected capacity change from 0 to 32768
[  103.135512][ T6207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.152 (6207)
[  103.202734][ T6207] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.259477][ T6207] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  103.295345][ T6207] BTRFS info (device loop3): setting nodatasum
[  103.329797][ T6207] BTRFS info (device loop3): force zlib compression, level 3
[  103.361830][ T6207] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  103.414190][ T6207] BTRFS info (device loop3): use lzo compression, level 0
[  103.446460][ T6207] BTRFS info (device loop3): turning on flush-on-commit
[  103.476476][ T6207] BTRFS info (device loop3): enabling auto defrag
[  103.500953][ T6207] BTRFS info (device loop3): max_inline at 4096
[  103.532251][ T6207] BTRFS info (device loop3): using free space tree
[  103.651081][ T6207] BTRFS info (device loop3): enabling ssd optimizations
[  104.198108][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.256957][ T6265] loop1: detected capacity change from 0 to 1024
[  104.292310][ T6265] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  106.111464][ T6312] Driver unsupported XDP return value 0 on prog  (id 14) dev N/A, expect packet loss!
[  106.124930][ T6315] loop2: detected capacity change from 0 to 8
[  106.792213][ T5837] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  106.992001][ T5837] usb 4-1: Using ep0 maxpacket: 8
[  107.006932][ T5837] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  107.032025][ T5837] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  107.055613][ T5837] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  107.066866][ T5837] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  107.080746][ T5837] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  107.125393][ T5837] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  107.158592][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.294438][ T6355] random: crng reseeded on system resumption
[  107.387403][ T5837] usb 4-1: GET_CAPABILITIES returned 0
[  107.393084][ T5837] usbtmc 4-1:16.0: can't read capabilities
[  107.525814][ T6360] Bluetooth: MGMT ver 1.22
[  107.601765][ T5779] usb 4-1: USB disconnect, device number 2
[  107.848992][ T6369] loop1: detected capacity change from 0 to 512
[  107.935363][ T6369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.987029][ T6369] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.217916][ T6381] i2c i2c-0: delete_device: Can't find device in list
[  108.231222][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.376131][ T6386] loop0: detected capacity change from 0 to 512
[  108.408348][ T6386] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  108.587662][ T6386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.602274][ T6386] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.786781][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.821126][ T6392] loop3: detected capacity change from 0 to 8192
[  108.892404][ T6392] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  108.937560][ T6392] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  108.982740][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'.
[  108.993610][ T6392] REISERFS (device loop3): using ordered data mode
[  109.000168][ T6392] reiserfs: using flush barriers
[  109.095044][ T6392] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  109.155548][ T6392] REISERFS (device loop3): checking transaction log (loop3)
[  109.194068][ T6392] REISERFS (device loop3): Using r5 hash to sort names
[  109.211110][ T6409] loop0: detected capacity change from 0 to 512
[  109.215817][ T6392] REISERFS (device loop3): using 3.5.x disk format
[  109.230528][ T6409] EXT4-fs: Ignoring removed orlov option
[  109.262790][ T6392] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  109.275786][ T6409] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.325676][ T6409] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.232: corrupted in-inode xattr: e_value size too large
[  109.364744][ T6409] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.232: couldn't read orphan inode 15 (err -117)
[  109.405350][ T6409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.520708][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.707098][ T6419] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  109.888190][ T6427] loop0: detected capacity change from 0 to 1024
[  109.901102][ T6427] EXT4-fs: Ignoring removed orlov option
[  109.964865][ T6427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.122609][ T6434] loop1: detected capacity change from 0 to 512
[  110.155510][ T6434] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.241: corrupted in-inode xattr: invalid ea_ino
[  110.182863][ T6434] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.241: couldn't read orphan inode 15 (err -117)
[  110.202455][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.235213][ T6434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.337139][ T6434] syz.1.241 (pid 6434) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  110.382117][ T6440] loop3: detected capacity change from 0 to 256
[  110.440184][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.822465][ T6454] vlan2: entered allmulticast mode
[  110.827760][ T6454] macsec0: entered allmulticast mode
[  110.852134][ T6454] veth1_macvtap: entered allmulticast mode
[  110.884036][ T6455] loop0: detected capacity change from 0 to 1024
[  111.187253][ T6463] loop3: detected capacity change from 0 to 512
[  111.208895][  T997] hfsplus: b-tree write err: -5, ino 25
[  111.215359][  T997] hfsplus: b-tree write err: -5, ino 4
[  111.219867][ T6463] EXT4-fs: Ignoring removed nobh option
[  111.225573][  T997] hfsplus: b-tree write err: -5, ino 2
[  111.270704][ T6463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  111.321117][ T6463] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  111.358779][ T6463] EXT4-fs (loop3): 1 truncate cleaned up
[  111.423525][ T6463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.685370][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.346466][ T6495] netlink: 'syz.0.269': attribute type 10 has an invalid length.
[  112.367837][ T6498] loop3: detected capacity change from 0 to 512
[  112.380526][ T6498] EXT4-fs: Ignoring removed nobh option
[  112.419929][ T6498] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  112.446617][ T6495] team0: Port device netdevsim0 added
[  112.475152][ T6498] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.270: iget: bad i_size value: 38620345925642
[  112.581601][ T6498] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.270: couldn't read orphan inode 15 (err -117)
[  112.638189][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.801774][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  112.801791][   T28] audit: type=1326 audit(1789182826.145:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  112.845846][   T28] audit: type=1326 audit(1789182826.145:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  112.872696][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.887431][   T28] audit: type=1326 audit(1789182826.145:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  112.911488][ T6510] loop0: detected capacity change from 0 to 2048
[  112.990736][   T28] audit: type=1326 audit(1789182826.145:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  113.042942][ T6513] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.091894][   T28] audit: type=1326 audit(1789182826.155:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  113.169265][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'.
[  113.216893][   T28] audit: type=1326 audit(1789182826.155:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  113.300781][   T28] audit: type=1326 audit(1789182826.155:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  113.331149][   T28] audit: type=1326 audit(1789182826.155:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  113.363333][   T28] audit: type=1326 audit(1789182826.155:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  113.389946][ T6520] loop1: detected capacity change from 0 to 128
[  113.452868][ T6520] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  113.482522][   T28] audit: type=1326 audit(1789182826.155:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f93a0f9e159 code=0x7ffc0000
[  114.169930][ T6539] loop2: detected capacity change from 0 to 1024
[  114.869820][ T6563] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.322146][   T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  115.449803][ T6581] loop1: detected capacity change from 0 to 512
[  115.512617][ T6581] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.309: invalid block
[  115.541257][   T27] usb 3-1: Using ep0 maxpacket: 32
[  115.558204][ T6581] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.309: Invalid block bitmap block 0 in block_group 0
[  115.572429][   T27] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  115.582426][ T6581] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  115.591672][ T6581] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.309: attempt to clear invalid blocks 983261 len 1
[  115.608834][ T6581] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.309: invalid indirect mapped block 2683928664 (level 0)
[  115.619089][   T27] usb 3-1: config 2 has no interface number 0
[  115.629411][ T6581] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.309: Invalid inode table block 0 in block_group 0
[  115.644305][ T6581] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  115.656442][ T6581] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  115.665483][ T6581] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.309: Invalid inode table block 0 in block_group 0
[  115.679911][ T6581] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  115.693903][   T27] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  115.705108][   T27] usb 3-1: config 2 interface 88 has no altsetting 0
[  115.714888][ T6581] EXT4-fs error (device loop1): ext4_truncate:4302: inode #13: comm syz.1.309: mark_inode_dirty error
[  115.718556][ T6587] loop3: detected capacity change from 0 to 1024
[  115.729653][   T27] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  115.742393][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  115.750445][   T27] usb 3-1: Product: syz
[  115.754768][   T27] usb 3-1: Manufacturer: syz
[  115.759409][   T27] usb 3-1: SerialNumber: syz
[  115.770319][ T6587] EXT4-fs: Ignoring removed bh option
[  115.788570][ T6581] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  115.793556][ T6567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  115.822768][ T6581] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.309: Invalid inode table block 0 in block_group 0
[  115.840998][ T6581] EXT4-fs (loop1): 1 truncate cleaned up
[  115.853281][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.872446][ T6587] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  115.931544][ T6587] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  115.953606][ T6587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.015149][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.029590][ T6587] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  116.031881][ T6567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  116.117017][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.207599][ T6595] loop3: detected capacity change from 0 to 8
[  116.346763][ T6597] loop3: detected capacity change from 0 to 512
[  116.359250][ T6597] EXT4-fs: Ignoring removed nobh option
[  116.384332][ T6597] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.315: corrupted inode contents
[  116.409745][ T6597] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #3: comm syz.3.315: mark_inode_dirty error
[  116.450653][ T6597] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.315: corrupted inode contents
[  116.465534][ T6597] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #3: comm syz.3.315: mark_inode_dirty error
[  116.476787][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  116.480754][ T6597] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.315: Failed to acquire dquot type 0
[  116.502191][ T6597] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.315: corrupted inode contents
[  116.515819][ T6597] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #16: comm syz.3.315: mark_inode_dirty error
[  116.532618][ T6597] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.315: corrupted inode contents
[  116.545107][ T6597] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #16: comm syz.3.315: mark_inode_dirty error
[  116.559024][ T6597] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.315: corrupted inode contents
[  116.571982][ T6597] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  116.580891][ T6597] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.315: corrupted inode contents
[  116.594452][ T6597] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.315: mark_inode_dirty error
[  116.605974][ T6597] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  116.619322][ T6597] EXT4-fs (loop3): 1 truncate cleaned up
[  116.627545][ T6597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.640525][ T6597] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.696387][ T5837] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  116.705733][   T27] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  116.721352][   T27] asix: probe of 3-1:2.88 failed with error -71
[  116.729562][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.767759][ T5837] usb 2-1: config 0 descriptor??
[  116.773179][   T27] usb 3-1: USB disconnect, device number 2
[  116.811484][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.003117][ T5837] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  117.021131][ T5837] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  117.272412][ T5837] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  117.287304][ T5837] [drm] Initialized udl on minor 2
[  117.608737][ T5837] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  117.643592][ T5837] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  117.678965][ T6603] loop3: detected capacity change from 0 to 40427
[  117.700483][   T23] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  117.722215][ T5837] usb 2-1: USB disconnect, device number 3
[  117.732206][ T6603] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  117.747975][   T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  117.776502][ T6603] F2FS-fs (loop3): invalid crc value
[  117.808444][ T6603] F2FS-fs (loop3): Found nat_bits in checkpoint
[  117.973761][ T6603] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  118.030272][ T6603] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0
[  118.083677][ T6622] f2fs_ckpt-7:3: attempt to access beyond end of device
[  118.083677][ T6622] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  118.120578][ T6624] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix.
[  118.135426][ T6622] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  118.605675][ T6637] loop2: detected capacity change from 0 to 16
[  118.627267][ T6639] loop0: detected capacity change from 0 to 256
[  118.630640][ T6637] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  118.674688][ T5767] udevd[5767]: incorrect cramfs checksum on /dev/loop2
[  118.772167][ T5767] udevd[5767]: incorrect cramfs checksum on /dev/loop2
[  118.801334][ T6639] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  119.412054][ T5779] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  119.459940][ T6656] loop3: detected capacity change from 0 to 256
[  119.500538][ T6656] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  119.552587][   T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  119.615457][ T5779] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  119.638455][ T5779] usb 1-1: config 0 interface 0 has no altsetting 0
[  119.661390][ T5779] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  119.680936][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  119.693269][ T5779] usb 1-1: Product: syz
[  119.698019][ T5779] usb 1-1: Manufacturer: syz
[  119.715338][ T5779] usb 1-1: SerialNumber: syz
[  119.739133][ T5779] usb 1-1: config 0 descriptor??
[  119.769509][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.780544][ T5779] usb 1-1: selecting invalid altsetting 0
[  119.808995][ T6660] loop3: detected capacity change from 0 to 256
[  119.812170][   T27] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  119.832139][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.860893][   T27] usb 2-1: config 0 descriptor??
[  120.000956][ T5779] usb 1-1: USB disconnect, device number 2
[  120.155886][ T6652] loop2: detected capacity change from 0 to 32768
[  120.227052][ T6652] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.315389][   T27] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  120.339349][ T6652] XFS (loop2): Ending clean mount
[  120.351229][   T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5
[  120.560355][   T27] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  120.634179][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.748400][ T5779] usb 2-1: USB disconnect, device number 4
[  121.722161][ T5837] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  121.760325][ T6685] loop2: detected capacity change from 0 to 32768
[  121.855620][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'.
[  121.892846][ T6685] JBD2: Ignoring recovery information on journal
[  121.938077][ T5837] usb 2-1: Using ep0 maxpacket: 8
[  121.970578][ T5837] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  122.004130][ T6685] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  122.011420][ T5837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  122.066337][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  122.114712][ T5837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  122.146428][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  122.172920][ T5837] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.211517][ T5837] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  122.237481][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.444758][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  122.502117][ T5837] usb 2-1: GET_CAPABILITIES returned 0
[  122.512469][ T5837] usbtmc 2-1:16.0: can't read capabilities
[  122.714696][    C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  122.730276][ T6695] usbtmc 2-1:16.0: Unable to send data, error -71
[  122.774128][ T5779] usb 2-1: USB disconnect, device number 5
[  123.295162][ T6745] loop3: detected capacity change from 0 to 1024
[  123.321153][ T6745] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.353683][ T6745] EXT4-fs: inline encryption not supported
[  123.386493][ T6745] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data
[  124.266366][ T6782] capability: warning: `syz.1.384' uses deprecated v2 capabilities in a way that may be insecure
[  124.507285][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.655427][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.778162][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.946393][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.371132][ T6811] loop2: detected capacity change from 0 to 16
[  125.408001][ T6811] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  125.553072][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  125.582498][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  125.590483][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  125.600704][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  125.616026][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  125.623613][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  125.813591][ T6817] rnbd_client L127: Can't parse path i: -93
[  126.015097][ T6819] netlink: 48 bytes leftover after parsing attributes in process `syz.2.395'.
[  126.981599][ T6828] loop2: detected capacity change from 0 to 32768
[  127.095063][ T6848] cifs: Bad value for 'source'
[  127.109405][ T6812] chnl_net:caif_netlink_parms(): no params data found
[  127.245830][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  127.245846][   T28] audit: type=1800 audit(1789182840.595:58): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.398" name="file1" dev="loop2" ino=4 res=0 errno=0
[  127.682274][ T5783] Bluetooth: hci3: command tx timeout
[  127.845205][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.875838][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.902303][ T6812] bridge_slave_0: entered allmulticast mode
[  127.909753][ T6812] bridge_slave_0: entered promiscuous mode
[  127.989645][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.012087][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.019348][ T6812] bridge_slave_1: entered allmulticast mode
[  128.063657][ T6812] bridge_slave_1: entered promiscuous mode
[  128.240151][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.260583][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.322558][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  128.535170][ T5837] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  128.551948][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.588079][ T5837] usb 1-1: config 0 descriptor??
[  128.589892][ T6812] team0: Port device team_slave_0 added
[  128.616885][ T6812] team0: Port device team_slave_1 added
[  128.624822][ T5837] cp210x 1-1:0.0: cp210x converter detected
[  128.859894][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.877471][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.915548][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.016576][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.031829][ T5837] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  129.041155][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.094780][ T5837] usb 1-1: cp210x converter now attached to ttyUSB0
[  129.112416][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.256953][   T49] hsr_slave_0: left promiscuous mode
[  129.271109][ T5837] usb 1-1: USB disconnect, device number 3
[  129.298961][   T49] hsr_slave_1: left promiscuous mode
[  129.304123][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  129.318000][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.339237][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.346088][ T5837] cp210x 1-1:0.0: device disconnected
[  129.363644][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.376145][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.386858][   T49] bridge_slave_1: left allmulticast mode
[  129.393448][   T49] bridge_slave_1: left promiscuous mode
[  129.400759][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.417839][   T49] bridge_slave_0: left allmulticast mode
[  129.423714][   T49] bridge_slave_0: left promiscuous mode
[  129.430326][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.461649][   T49] veth1_macvtap: left promiscuous mode
[  129.468844][   T49] veth0_macvtap: left promiscuous mode
[  129.475488][   T49] veth1_vlan: left promiscuous mode
[  129.481042][   T49] veth0_vlan: left promiscuous mode
[  129.623227][    T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  129.768087][ T5783] Bluetooth: hci3: command tx timeout
[  129.820914][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.836341][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  129.862203][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.870254][    T8] usb 3-1: Product: syz
[  129.874575][    T8] usb 3-1: Manufacturer: syz
[  129.879259][    T8] usb 3-1: SerialNumber: syz
[  129.911735][    T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  129.942800][    T8] cdc_wdm 3-1:1.0: Unknown control protocol
[  130.331074][    T8] usb 3-1: USB disconnect, device number 3
[  130.420596][   T49] team0 (unregistering): Port device team_slave_1 removed
[  130.494389][   T49] team0 (unregistering): Port device team_slave_0 removed
[  130.568406][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.627369][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.732594][ T6922] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd83
[  130.817682][ T6924] loop5: detected capacity change from 0 to 7
[  130.851669][ T6924] Dev loop5: unable to read RDB block 7
[  130.869928][ T6924]  loop5: unable to read partition table
[  130.871119][   T12] loop: Write error at byte offset 4, length 3584.
[  130.877411][ T6924] loop5: partition table beyond EOD, truncated
[  130.888907][ T6924] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  130.902545][    C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  130.912216][    C0] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  130.979672][ T5140] Dev loop5: unable to read RDB block 7
[  130.990225][ T5140]  loop5: unable to read partition table
[  131.007288][ T5140] loop5: partition table beyond EOD, truncated
[  131.340261][   T49] bond0 (unregistering): Released all slaves
[  131.463372][ T6935] loop2: detected capacity change from 0 to 512
[  131.499086][ T6935] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.432: inode has both inline data and extents flags
[  131.519330][ T6935] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.432: couldn't read orphan inode 15 (err -117)
[  131.542917][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.733132][ T6812] hsr_slave_0: entered promiscuous mode
[  131.758597][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.781305][ T6812] hsr_slave_1: entered promiscuous mode
[  131.832739][ T5783] Bluetooth: hci3: command tx timeout
[  131.858759][   T28] audit: type=1400 audit(1789182845.195:59): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6939 comm="syz.1.434" name="unknown" offset=16
[  131.987125][ T6947] kAFS: bad VL server IP address
[  132.253345][ T6956] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9)
[  132.957880][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  133.058552][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[  133.179067][ T6812] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  133.202946][ T6812] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  133.232606][ T6812] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  133.270483][ T6812] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  133.533689][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.573593][ T6812] 8021q: adding VLAN 0 to HW filter on device team0
[  133.624311][  T995] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.631612][  T995] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.659796][  T995] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.667051][  T995] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.912316][ T5783] Bluetooth: hci3: command tx timeout
[  134.479957][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.585117][ T6812] veth0_vlan: entered promiscuous mode
[  134.634927][ T6812] veth1_vlan: entered promiscuous mode
[  134.745156][ T6812] veth0_macvtap: entered promiscuous mode
[  134.793340][ T6812] veth1_macvtap: entered promiscuous mode
[  134.842986][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.869494][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.911995][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.942142][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.962963][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.992004][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.027402][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.036159][ T7052] loop0: detected capacity change from 0 to 256
[  135.056945][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.119969][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.152044][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.164565][ T7052] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  135.190683][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.219348][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.252919][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.281034][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.318926][ T6812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.340693][ T6812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.361845][ T6812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.386329][ T6812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.695243][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.722861][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.769320][ T4742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.794296][ T4742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.022281][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  136.236521][   T23] usb 3-1: Using ep0 maxpacket: 32
[  136.249317][   T23] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  136.281612][   T23] usb 3-1: config 0 has no interface number 0
[  136.305156][   T23] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  136.332220][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.363056][   T23] usb 3-1: Product: syz
[  136.367288][   T23] usb 3-1: Manufacturer: syz
[  136.388966][   T23] usb 3-1: SerialNumber: syz
[  136.413027][   T23] usb 3-1: config 0 descriptor??
[  136.424094][   T23] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  136.653500][   T23] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  136.690951][   T23] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  136.842752][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101
[  137.002820][   T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  137.075622][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  137.084941][   T27] usb 3-1: USB disconnect, device number 4
[  137.136266][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  137.206205][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.222784][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  137.254383][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.282537][   T27] quatech2 3-1:0.51: device disconnected
[  137.293048][   T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  137.326183][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.353207][   T23] usb 2-1: config 0 descriptor??
[  137.442120][ T7122] loop3: detected capacity change from 0 to 512
[  137.482904][ T7122] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.491: corrupted in-inode xattr: invalid ea_ino
[  137.547143][ T7122] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.491: couldn't read orphan inode 15 (err -117)
[  137.581437][ T7122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.711365][ T6812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.795374][   T23] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  137.809957][   T23] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  137.842175][   T23] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  137.869482][   T23] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  137.889758][   T23] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  137.916579][   T23] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  137.956976][   T23] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  137.984147][ T7136] program syz.0.495 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.007615][   T23] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  138.255821][   T23] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device
[  138.292153][   T23] pyra 0003:1E7D:2CF6.0002: couldn't install mouse
[  138.366653][   T23] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71
[  138.414436][   T23] usb 2-1: USB disconnect, device number 6
[  138.472712][ T7147] loop2: detected capacity change from 0 to 128
[  138.494040][ T7147] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  138.612791][   T28] audit: type=1800 audit(1789182851.965:60): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.499" name="file1" dev="loop2" ino=94 res=0 errno=0
[  138.658360][ T7147] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  139.250854][ T7163] kAFS: bad VL server IP address
[  139.300855][ T7143] loop3: detected capacity change from 0 to 32768
[  139.376864][ T7143] ERROR: (device loop3): diAllocAG: numfree > numinos
[  139.376864][ T7143] 
[  139.418071][ T7143] ERROR: (device loop3): remounting filesystem as read-only
[  139.452985][ T7143] ialloc: diAlloc returned -5!
[  140.472376][ T7212] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.520'.
[  140.646511][ T7219] loop1: detected capacity change from 0 to 512
[  140.712351][ T3063] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  140.722382][ T7219] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.521: iget: bad extended attribute block 134217728
[  140.795563][ T7219] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.521: couldn't read orphan inode 15 (err -117)
[  140.837211][ T7219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.922559][ T3063] usb 4-1: Using ep0 maxpacket: 16
[  140.924523][ T3063] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.924557][ T3063] usb 4-1: config 0 interface 0 has no altsetting 0
[  140.924594][ T3063] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  140.924620][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.927606][ T3063] usb 4-1: config 0 descriptor??
[  140.929409][   T28] audit: type=1800 audit(1789182854.275:61): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.521" name="file0" dev="loop1" ino=13 res=0 errno=0
[  140.954868][ T7219] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.521: invalid indirect mapped block 234881024 (level 0)
[  141.089816][ T7231] loop2: detected capacity change from 0 to 512
[  141.112976][ T7219] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.521: invalid indirect mapped block 768 (level 1)
[  141.114563][ T7231] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  141.117972][ T7231] EXT4-fs (loop2): 1 truncate cleaned up
[  141.119402][ T7231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.144865][   T28] audit: type=1800 audit(1789182854.485:62): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.525" name="file1" dev="loop2" ino=15 res=0 errno=0
[  141.162600][ T7231] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5960: inode #15: comm syz.2.525: bad extra_isize 62 (inode size 256)
[  141.165893][ T7231] EXT4-fs (loop2): Remounting filesystem read-only
[  141.282637][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.321628][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.384486][ T3063] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  141.517030][ T7239] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  141.750596][ T7244] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  141.796614][ T5815] usb 4-1: USB disconnect, device number 3
[  141.892901][ T7248] loop2: detected capacity change from 0 to 256
[  141.993174][ T3063] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  142.194950][ T3063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  142.206004][ T3063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  142.216166][ T3063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  142.229344][ T3063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  142.256762][ T3063] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  142.265902][ T3063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.275174][ T3063] usb 1-1: Product: syz
[  142.279410][ T3063] usb 1-1: Manufacturer: syz
[  142.284399][ T3063] usb 1-1: SerialNumber: syz
[  142.293821][ T3063] usb 1-1: config 0 descriptor??
[  142.352011][    T9] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  142.428202][ T7252] loop2: detected capacity change from 0 to 32768
[  142.441384][ T7256] loop3: detected capacity change from 0 to 256
[  142.464153][ T7256] exfat: Unknown parameter 'o'
[  142.512708][ T3063] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  142.528437][ T5767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  142.576983][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  142.595559][    T9] usb 2-1: config 0 has no interface number 0
[  142.601731][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  142.633034][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  142.653536][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  142.664348][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.682585][    T9] usb 2-1: config 0 descriptor??
[  142.690947][ T7254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  142.726611][ T1192] usb 1-1: USB disconnect, device number 4
[  142.732814][    T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  142.812098][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  142.919016][    T9] usb 2-1: USB disconnect, device number 7
[  143.005363][    T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.016782][    T8] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  143.030456][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  143.040814][    T8] usb 4-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00
[  143.054415][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.069433][    T8] usb 4-1: config 0 descriptor??
[  143.126070][ T7258] program syz.2.537 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  143.249803][ T7260] loop2: detected capacity change from 0 to 4096
[  143.368768][ T7260] ntfs3: loop2: ino=b, Correct links count -> 1.
[  143.394571][ T7260] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  143.490115][ T7260] ntfs3: loop2: failed to convert "0080" to koi8-r
[  143.526442][    T8] input: HID 044f:b320 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:044F:B320.0004/input/input6
[  143.721825][ T7265] tap0: tun_chr_ioctl cmd 1074025677
[  143.735346][ T7265] tap0: linktype set to 6
[  143.808665][    T8] thrustmaster 0003:044F:B320.0004: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b320] on usb-dummy_hcd.3-1/input0
[  143.833191][    T8] thrustmaster 0003:044F:B320.0004: ignoring unknown output usage 00080000
[  143.875499][    T8] thrustmaster 0003:044F:B320.0004: can't find FF field in output reports
[  143.928640][    T8] usb 4-1: USB disconnect, device number 4
[  144.078017][ T7268] fido_id[7268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  144.467458][ T7284] loop1: detected capacity change from 0 to 256
[  144.516618][ T7284] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.551978][ T7284] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  144.575610][ T7287] loop0: detected capacity change from 0 to 1024
[  144.592712][ T7287] EXT4-fs: Ignoring removed nomblk_io_submit option
[  144.619665][ T7284] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  144.639218][ T7287] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  144.671223][ T7284] exFAT-fs (loop1): failed to load alloc-bitmap
[  144.696256][ T7284] exFAT-fs (loop1): failed to recognize exfat type
[  144.709428][ T7287] EXT4-fs (loop0): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  144.735498][ T7287] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.888137][ T7287] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.548: bg 0: block 112: padding at end of block bitmap is not set
[  144.923079][ T7287] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  144.982049][ T7287] EXT4-fs (loop0): This should not happen!! Data will be lost
[  144.982049][ T7287] 
[  145.020792][ T7281] loop3: detected capacity change from 0 to 32768
[  145.028455][ T7287] EXT4-fs (loop0): Total free blocks count 0
[  145.046882][ T7294] loop1: detected capacity change from 0 to 256
[  145.056068][ T7287] EXT4-fs (loop0): Free/Dirty block details
[  145.081517][ T7294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  145.090586][ T7287] EXT4-fs (loop0): free_blocks=0
[  145.120766][ T7287] EXT4-fs (loop0): dirty_blocks=0
[  145.129466][ T7287] EXT4-fs (loop0): Block reservation details
[  145.136713][ T7287] EXT4-fs (loop0): i_reserved_data_blocks=0
[  145.170138][ T7281] JBD2: Ignoring recovery information on journal
[  145.170375][ T7287] syz.0.548 (7287) used greatest stack depth: 19696 bytes left
[  145.265947][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0100-0006-0000-000000000000.
[  145.268158][ T7281] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  145.415639][ T7281] 
[  145.418027][ T7281] ======================================================
[  145.425070][ T7281] WARNING: possible circular locking dependency detected
[  145.432129][ T7281] syzkaller #0 Not tainted
[  145.436574][ T7281] ------------------------------------------------------
[  145.443612][ T7281] syz.3.546/7281 is trying to acquire lock:
[  145.449536][ T7281] ffff88805911cda0 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x360
[  145.460208][ T7281] 
[  145.460208][ T7281] but task is already holding lock:
[  145.467588][ T7281] ffff88805911ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360
[  145.478214][ T7281] 
[  145.478214][ T7281] which lock already depends on the new lock.
[  145.478214][ T7281] 
[  145.488620][ T7281] 
[  145.488620][ T7281] the existing dependency chain (in reverse order) is:
[  145.497662][ T7281] 
[  145.497662][ T7281] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  145.505518][ T7281]        down_read+0x46/0x2e0
[  145.510229][ T7281]        ocfs2_init_acl+0x30a/0x770
[  145.515444][ T7281]        ocfs2_mknod+0x1427/0x2310
[  145.520586][ T7281]        ocfs2_create+0x196/0x430
[  145.525629][ T7281]        path_openat+0x1705/0x3270
[  145.530755][ T7281]        do_filp_open+0x1f2/0x430
[  145.535789][ T7281]        do_sys_openat2+0x134/0x1d0
[  145.541013][ T7281]        __x64_sys_openat+0x139/0x160
[  145.546424][ T7281]        do_syscall_64+0x55/0xb0
[  145.551376][ T7281]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.557808][ T7281] 
[  145.557808][ T7281] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  145.566348][ T7281]        down_read+0x46/0x2e0
[  145.571075][ T7281]        ocfs2_start_trans+0x3a8/0x6f0
[  145.576550][ T7281]        ocfs2_mknod+0xf33/0x2310
[  145.581587][ T7281]        ocfs2_create+0x196/0x430
[  145.586620][ T7281]        path_openat+0x1705/0x3270
[  145.591776][ T7281]        do_filp_open+0x1f2/0x430
[  145.596820][ T7281]        do_sys_openat2+0x134/0x1d0
[  145.602040][ T7281]        __x64_sys_openat+0x139/0x160
[  145.607435][ T7281]        do_syscall_64+0x55/0xb0
[  145.612389][ T7281]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.618821][ T7281] 
[  145.618821][ T7281] -> #1 (sb_internal#4){.+.+}-{0:0}:
[  145.626310][ T7281]        lock_release+0x332/0x8c0
[  145.632486][ T7281]        up_write+0x2d/0x410
[  145.637094][ T7281]        ocfs2_free_alloc_context+0x97/0x1a0
[  145.643116][ T7281]        ocfs2_write_begin_nolock+0x43f6/0x4480
[  145.649396][ T7281]        ocfs2_write_begin+0x1bb/0x310
[  145.654883][ T7281]        generic_perform_write+0x2fe/0x5c0
[  145.660706][ T7281]        ocfs2_file_write_iter+0x1724/0x1ef0
[  145.666712][ T7281]        vfs_write+0x474/0x9a0
[  145.671513][ T7281]        __x64_sys_pwrite64+0x198/0x220
[  145.677083][ T7281]        do_syscall_64+0x55/0xb0
[  145.682034][ T7281]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.688469][ T7281] 
[  145.688469][ T7281] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}:
[  145.696316][ T7281]        __lock_acquire+0x37ef/0x7d80
[  145.701722][ T7281]        lock_acquire+0x19e/0x420
[  145.706776][ T7281]        down_write+0x97/0x200
[  145.711574][ T7281]        ocfs2_try_remove_refcount_tree+0xb7/0x360
[  145.718089][ T7281]        ocfs2_truncate_file+0xe87/0x1530
[  145.723826][ T7281]        ocfs2_setattr+0x15b8/0x1bf0
[  145.729134][ T7281]        notify_change+0xb05/0xde0
[  145.734263][ T7281]        do_truncate+0x1b0/0x240
[  145.739227][ T7281]        path_openat+0x2a7e/0x3270
[  145.744356][ T7281]        do_filp_open+0x1f2/0x430
[  145.749401][ T7281]        do_sys_openat2+0x134/0x1d0
[  145.754627][ T7281]        __x64_sys_creat+0x90/0xb0
[  145.759774][ T7281]        do_syscall_64+0x55/0xb0
[  145.764739][ T7281]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.771197][ T7281] 
[  145.771197][ T7281] other info that might help us debug this:
[  145.771197][ T7281] 
[  145.781467][ T7281] Chain exists of:
[  145.781467][ T7281]   &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  145.781467][ T7281] 
[  145.795753][ T7281]  Possible unsafe locking scenario:
[  145.795753][ T7281] 
[  145.803213][ T7281]        CPU0                    CPU1
[  145.808601][ T7281]        ----                    ----
[  145.813986][ T7281]   lock(&oi->ip_xattr_sem);
[  145.818630][ T7281]                                lock(&journal->j_trans_barrier);
[  145.826462][ T7281]                                lock(&oi->ip_xattr_sem);
[  145.833630][ T7281]   lock(&oi->ip_alloc_sem);
[  145.838263][ T7281] 
[  145.838263][ T7281]  *** DEADLOCK ***
[  145.838263][ T7281] 
[  145.846422][ T7281] 3 locks held by syz.3.546/7281:
[  145.851454][ T7281]  #0: ffff888058798418 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  145.860738][ T7281]  #1: ffff88805911d118 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: do_truncate+0x19c/0x240
[  145.871122][ T7281]  #2: ffff88805911ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360
[  145.882204][ T7281] 
[  145.882204][ T7281] stack backtrace:
[  145.888121][ T7281] CPU: 0 PID: 7281 Comm: syz.3.546 Not tainted syzkaller #0
[  145.895418][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  145.905503][ T7281] Call Trace:
[  145.908797][ T7281]  <TASK>
[  145.911756][ T7281]  dump_stack_lvl+0x18c/0x250
[  145.916468][ T7281]  ? load_image+0x420/0x420
[  145.921009][ T7281]  ? show_regs_print_info+0x20/0x20
[  145.926263][ T7281]  ? print_circular_bug+0x12b/0x1a0
[  145.931515][ T7281]  check_noncircular+0x2fc/0x400
[  145.936485][ T7281]  ? print_deadlock_bug+0x5d0/0x5d0
[  145.941715][ T7281]  ? lockdep_lock+0xf5/0x230
[  145.946329][ T7281]  ? lockdep_unlock+0x146/0x2e0
[  145.951199][ T7281]  ? _find_first_zero_bit+0xd6/0x100
[  145.956510][ T7281]  __lock_acquire+0x37ef/0x7d80
[  145.961399][ T7281]  ? verify_lock_unused+0x140/0x140
[  145.966628][ T7281]  lock_acquire+0x19e/0x420
[  145.971148][ T7281]  ? ocfs2_try_remove_refcount_tree+0xb7/0x360
[  145.977319][ T7281]  ? __might_sleep+0xe0/0xe0
[  145.981933][ T7281]  ? read_lock_is_recursive+0x20/0x20
[  145.987342][ T7281]  ? mapping_evict_folio+0x530/0x530
[  145.992666][ T7281]  down_write+0x97/0x200
[  145.996956][ T7281]  ? ocfs2_try_remove_refcount_tree+0xb7/0x360
[  146.003140][ T7281]  ? down_read_killable+0x340/0x340
[  146.008385][ T7281]  ocfs2_try_remove_refcount_tree+0xb7/0x360
[  146.014392][ T7281]  ? ocfs2_remove_refcount_tree+0xe50/0xe50
[  146.020316][ T7281]  ? up_write+0x1be/0x410
[  146.024679][ T7281]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  146.030433][ T7281]  ocfs2_truncate_file+0xe87/0x1530
[  146.035673][ T7281]  ? ocfs2_simple_size_update+0x4a0/0x4a0
[  146.041411][ T7281]  ? do_raw_spin_unlock+0x121/0x230
[  146.046632][ T7281]  ? _raw_spin_unlock+0x28/0x40
[  146.051502][ T7281]  ? ocfs2_inode_lock_tracker+0x437/0x700
[  146.057250][ T7281]  ? ocfs2_inode_lock_atime+0x530/0x530
[  146.062856][ T7281]  ? ocfs2_rw_lock+0x138/0x250
[  146.067638][ T7281]  ? dquot_initialize+0x20/0x20
[  146.072512][ T7281]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  146.078596][ T7281]  ? setattr_prepare+0x1e5/0xac0
[  146.083558][ T7281]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  146.090207][ T7281]  ocfs2_setattr+0x15b8/0x1bf0
[  146.095038][ T7281]  ? ocfs2_extend_allocation+0x1830/0x1830
[  146.100865][ T7281]  ? ktime_get_coarse_real_ts64+0x2f/0x120
[  146.106698][ T7281]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  146.112975][ T7281]  ? ktime_get_coarse_real_ts64+0x10a/0x120
[  146.118925][ T7281]  ? current_time+0x196/0x290
[  146.123626][ T7281]  ? inode_set_ctime_current+0x2e0/0x2e0
[  146.129298][ T7281]  ? evm_inode_setattr+0x10a/0x6c0
[  146.134436][ T7281]  ? security_inode_setattr+0xdc/0x140
[  146.140044][ T7281]  ? try_break_deleg+0x79/0x120
[  146.144980][ T7281]  ? ocfs2_extend_allocation+0x1830/0x1830
[  146.150938][ T7281]  notify_change+0xb05/0xde0
[  146.155594][ T7281]  do_truncate+0x1b0/0x240
[  146.160035][ T7281]  ? put_page_bootmem+0x2b0/0x2b0
[  146.165170][ T7281]  ? apparmor_file_truncate+0x24a/0x2e0
[  146.170740][ T7281]  ? ima_bprm_check+0x200/0x200
[  146.175674][ T7281]  path_openat+0x2a7e/0x3270
[  146.180370][ T7281]  ? do_sys_openat2+0xda/0x1d0
[  146.185162][ T7281]  ? do_filp_open+0x430/0x430
[  146.189862][ T7281]  do_filp_open+0x1f2/0x430
[  146.194384][ T7281]  ? vfs_tmpfile+0x620/0x620
[  146.198994][ T7281]  ? _raw_spin_unlock+0x28/0x40
[  146.203867][ T7281]  ? alloc_fd+0x590/0x640
[  146.208219][ T7281]  do_sys_openat2+0x134/0x1d0
[  146.212926][ T7281]  ? do_sys_open+0xe0/0xe0
[  146.217362][ T7281]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  146.223366][ T7281]  ? lock_chain_count+0x20/0x20
[  146.228241][ T7281]  __x64_sys_creat+0x90/0xb0
[  146.232856][ T7281]  do_syscall_64+0x55/0xb0
[  146.237298][ T7281]  ? clear_bhb_loop+0x40/0x90
[  146.242000][ T7281]  ? clear_bhb_loop+0x40/0x90
[  146.246704][ T7281]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.252630][ T7281] RIP: 0033:0x7fc0d959e159
[  146.257067][ T7281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.276686][ T7281] RSP: 002b:00007fc0da509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  146.285115][ T7281] RAX: ffffffffffffffda RBX: 00007fc0d9825fa0 RCX: 00007fc0d959e159
[  146.293100][ T7281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  146.301102][ T7281] RBP: 00007fc0d963503b R08: 0000000000000000 R09: 0000000000000000
[  146.309089][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.317162][ T7281] R13: 00007fc0d9826038 R14: 00007fc0d9825fa0 R15: 00007ffe317de458
[  146.325162][ T7281]  </TASK>
[  146.384374][ T7305] size and base must be multiples of 4 kiB
[  146.401024][ T7305] CPU: 0 PID: 7305 Comm: syz.1.554 Not tainted syzkaller #0
[  146.408374][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  146.418456][ T7305] Call Trace:
[  146.421763][ T7305]  <TASK>
[  146.424758][ T7305]  dump_stack_lvl+0x18c/0x250
[  146.429475][ T7305]  ? read_lock_is_recursive+0x20/0x20
[  146.434885][ T7305]  ? show_regs_print_info+0x20/0x20
[  146.440133][ T7305]  ? load_image+0x420/0x420
[  146.444682][ T7305]  ? __might_fault+0xaa/0x120
[  146.449400][ T7305]  ? __might_fault+0xc6/0x120
[  146.454119][ T7305]  ? __might_fault+0xaa/0x120
[  146.458833][ T7305]  mtrr_del+0xc3/0xf0
[  146.462869][ T7305]  mtrr_ioctl+0xcb6/0x13a0
[  146.467327][ T7305]  ? mtrr_close+0x200/0x200
[  146.471880][ T7305]  ? __fget_files+0x28/0x460
[  146.476530][ T7305]  ? mtrr_close+0x200/0x200
[  146.481095][ T7305]  proc_reg_unlocked_ioctl+0x1d2/0x2c0
[  146.486594][ T7305]  ? proc_reg_poll+0x290/0x290
[  146.491398][ T7305]  __se_sys_ioctl+0xfd/0x170
[  146.496038][ T7305]  do_syscall_64+0x55/0xb0
[  146.500496][ T7305]  ? clear_bhb_loop+0x40/0x90
[  146.505204][ T7305]  ? clear_bhb_loop+0x40/0x90
[  146.509888][ T7305]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.515801][ T7305] RIP: 0033:0x7fe6dc19e159
[  146.520254][ T7305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.539898][ T7305] RSP: 002b:00007fe6dd112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  146.548401][ T7305] RAX: ffffffffffffffda RBX: 00007fe6dc425fa0 RCX: 00007fe6dc19e159
[  146.556422][ T7305] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[  146.564431][ T7305] RBP: 00007fe6dc23503b R08: 0000000000000000 R09: 0000000000000000
[  146.572432][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.580514][ T7305] R13: 00007fe6dc426038 R14: 00007fe6dc425fa0 R15: 00007fff06368aa8
[  146.588531][ T7305]  </TASK>
[  146.662322][ T6812] ocfs2: Unmounting device (7,3) on (node local)