last executing test programs:

58.172436908s ago: executing program 4 (id=142):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1/file0\x00', 0x234709e28bcc1306, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@quota}]}, 0x1, 0x4cf, &(0x7f0000000a00)="$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")
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'})

57.792766268s ago: executing program 4 (id=143):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x2)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000180)={0x0, &(0x7f0000000100)="7d5b25a13e294385e0f4973b6b762a8b6487e68a67d953edbd2cd9d8559ce25d427da9ff6f3e848fe2e5bd6aae2ee924a3d8c223e727535b7a00b1cd", 0x3c})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x34, 0x1, 0x2, "1c13ebdaf2f20d55802b21b14fd75a206da058e85b2197edb143991cc200", 0x32314d48})
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
epoll_create1(0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r7=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x4}, 0x80)

54.289059038s ago: executing program 4 (id=153):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x36, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

54.038288645s ago: executing program 4 (id=154):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000001c0)='./file0\x00', 0x204987, &(0x7f0000000400)=ANY=[@ANYBLOB="756e695f786c6174653d302c64656275672c756e695f786c6174653d312c757365667265652c756e695f786c6174653d302c636865636b3d6e6f726d616c2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030343332342c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c7379735f696d6d757461626c652c00c4614c8b4cf2c20a70d08876eb459fcd2cb4e55eb9d372787be7066b35c0e2a7743a60886c9dadcd7857ee54c9be597e8f14f73b4fdd56356660bc81be70a9e8def4d6"], 0x0, 0x2a3, &(0x7f0000002b40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

53.762365162s ago: executing program 4 (id=157):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

53.162912237s ago: executing program 4 (id=163):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x2)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000180)={0x0, &(0x7f0000000100)="7d5b25a13e294385e0f4973b6b762a8b6487e68a67d953edbd2cd9d8559ce25d427da9ff6f3e848fe2e5bd6aae2ee924a3d8c223e727535b7a00b1cd", 0x3c})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x34, 0x1, 0x2, "1c13ebdaf2f20d55802b21b14fd75a206da058e85b2197edb143991cc200", 0x32314d48})
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
epoll_create1(0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r7=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x4}, 0x80)

51.720028744s ago: executing program 32 (id=163):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x2)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000180)={0x0, &(0x7f0000000100)="7d5b25a13e294385e0f4973b6b762a8b6487e68a67d953edbd2cd9d8559ce25d427da9ff6f3e848fe2e5bd6aae2ee924a3d8c223e727535b7a00b1cd", 0x3c})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x34, 0x1, 0x2, "1c13ebdaf2f20d55802b21b14fd75a206da058e85b2197edb143991cc200", 0x32314d48})
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
epoll_create1(0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r7=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x4}, 0x80)

8.813774564s ago: executing program 0 (id=336):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000240)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}, {@ssd}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)={0x10}, 0x10)
write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006)

6.789416116s ago: executing program 0 (id=346):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000280)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@dots}, {@fat=@uid}, {@fat=@discard}, {@dots}, {@fat=@check_strict}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)='\v', 0x1)
ftruncate(r0, 0x4a8e)

5.668305895s ago: executing program 5 (id=349):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
sendto$inet(r1, &(0x7f0000000600)="1234567890", 0xfffd, 0x0, 0x0, 0x0)

5.432783471s ago: executing program 0 (id=351):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000)=nil})
ioctl(r2, 0x4048aec9, &(0x7f0000000080)="01")

5.325056263s ago: executing program 5 (id=353):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r2)
r3 = socket$unix(0x1, 0x1, 0x0)
listen(r3, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

5.129388788s ago: executing program 3 (id=354):
mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='0\x00', 0x2)

4.229174792s ago: executing program 5 (id=356):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00')
fchdir(r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
exit(0x5c7b)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)

4.163854613s ago: executing program 3 (id=357):
r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x86)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r2, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

4.037301996s ago: executing program 1 (id=358):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x1, 0x703, &(0x7f00000011c0)="$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")
mkdir(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x61)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0)
fsync(r0)

3.967076318s ago: executing program 0 (id=359):
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100000000000000", @ANYRES32=r6], 0x20}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x714f, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
socket(0x10, 0x803, 0x0)

3.870969811s ago: executing program 3 (id=360):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4f, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e6baa86bc100007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000020000008000", [0x6, 0xffffffff9673e35d]}})

3.598542018s ago: executing program 1 (id=361):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0)

3.352936074s ago: executing program 3 (id=362):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r2=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, r2, 0x1, 0x1, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906e96754059e65c39c5759b069d6e6d9589e5f2348878c00", 0x24}, 0x60)
close(r1)

3.185451948s ago: executing program 5 (id=363):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffe", 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

3.085903031s ago: executing program 1 (id=364):
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x8, 0x21, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x7, "740e23", 0xd, '1\x00'}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

2.885232826s ago: executing program 0 (id=365):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]})
syz_clone(0x8003011, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.884945336s ago: executing program 3 (id=366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r2)
r3 = socket$unix(0x1, 0x1, 0x0)
listen(r3, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

2.197421574s ago: executing program 5 (id=367):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00')
exit(0x3)
fstat(r1, 0x0)

1.867749302s ago: executing program 3 (id=368):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_connect$midi(0x0, 0x31, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4095, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x8, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x7, [], [{{0x9, 0x5, 0x4, 0x2, 0x200, 0x6, 0x9, 0x9, {0x4}}}]}}}}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x40, 0xb, 0x7c, {0x7c, 0xd, "d87563cc5776f922b5080fab9bbd223ca730ef7c6dddb7a6a7b4a590900413b8cd824dcf1a0594906d3f6b0c4c90b9ac663325009904552b32ec8eb0fcc2607cff519f53baf62e2b3a2a4d80f7ae81be08cad403024462118b5a60204d5f2777e953ae8d0261665ae658718505a2e7e39c1fa8026663c51fe05e"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x40, 0x1, 0x27, "8be78801b3c12036551271aefd07d4fb6ce7501f94785c334b4d24f76c85e5f95ceb434f479b25"}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x81, 0x3, "f0c80b"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "aabf26"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "4bd408"}, &(0x7f0000000600)={0x20, 0x84, 0x4, "ed4c23e0"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "7017a3"}})

1.819888583s ago: executing program 1 (id=369):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x261, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

1.518771551s ago: executing program 1 (id=370):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000)=nil})
ioctl(r2, 0x4048aec9, &(0x7f0000000080)="01")

1.416107743s ago: executing program 2 (id=371):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}}, 0xe8)
sendto$inet(r1, &(0x7f0000000600)="12", 0x1, 0x0, 0x0, 0x0)

1.347734036s ago: executing program 0 (id=372):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = syz_open_dev$loop(0x0, 0x0, 0x22400)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x32957, 0x0, 0x0, 0x68245b64, 0x8005, 0x0, 0x0, 0x18, 0xd, "ef359f413bb93852f7d6a4ae6dddfad1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9b4afaaf255a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='blkio.bfq.empty_time\x00', &(0x7f0000000140)='workdir'})

1.16133457s ago: executing program 2 (id=373):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x2800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)

993.755194ms ago: executing program 1 (id=374):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
close(r0)

828.779978ms ago: executing program 5 (id=375):
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/18, @ANYRES32=r6], 0x20}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x714f, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
socket(0x10, 0x803, 0x0)

765.55928ms ago: executing program 2 (id=376):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x2065, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0xf, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x6, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000009, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x200d3, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x6, 0x40fff, 0x1fb, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x18, 0x0, 0x8, 0x0, 0x9, 0x6, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7038, 0x8000, 0x2, 0xffffffff}, {0x3, 0x1, 0xf, 0x2, 0x0, 0x8000}, 0x200, 0xf, 0x538}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

517.489777ms ago: executing program 2 (id=377):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

169.438145ms ago: executing program 2 (id=378):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0xc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='100', 0x3)

0s ago: executing program 2 (id=379):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r2)
r3 = socket$unix(0x1, 0x1, 0x0)
listen(r3, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   52.944998][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.954752][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts.
syzkaller login: [   76.799497][ T4260] cgroup: Unknown subsys name 'net'
[   76.899663][ T4260] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.411214][ T4260] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   79.947265][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.947252][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.950043][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.969446][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.970698][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.984106][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.984651][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.992427][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.999793][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.010402][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.013568][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.022471][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.027483][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.035657][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.041252][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.054025][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.055299][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   80.067232][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   80.075675][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.077933][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.084537][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.094344][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.104631][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   80.106090][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   80.112931][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   80.119957][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   80.129086][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.133493][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.163308][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.177749][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.710167][ T4279] chnl_net:caif_netlink_parms(): no params data found
[   80.746357][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   80.817987][ T4275] chnl_net:caif_netlink_parms(): no params data found
[   80.829068][ T4273] chnl_net:caif_netlink_parms(): no params data found
[   80.846822][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   80.977168][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.984504][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.997853][ T4279] device bridge_slave_0 entered promiscuous mode
[   81.015904][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.023348][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.031464][ T4272] device bridge_slave_0 entered promiscuous mode
[   81.045691][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.052846][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.061347][ T4279] device bridge_slave_1 entered promiscuous mode
[   81.081582][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.088973][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.097858][ T4272] device bridge_slave_1 entered promiscuous mode
[   81.159241][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.192313][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.199755][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.208329][ T4275] device bridge_slave_0 entered promiscuous mode
[   81.218078][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.229481][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.247996][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.260683][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.268154][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.276502][ T4273] device bridge_slave_0 entered promiscuous mode
[   81.284559][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.291693][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.300332][ T4275] device bridge_slave_1 entered promiscuous mode
[   81.321767][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.330428][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.340542][ T4274] device bridge_slave_0 entered promiscuous mode
[   81.349444][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.356759][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.365387][ T4273] device bridge_slave_1 entered promiscuous mode
[   81.401482][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.409431][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.417760][ T4274] device bridge_slave_1 entered promiscuous mode
[   81.441992][ T4272] team0: Port device team_slave_0 added
[   81.451530][ T4279] team0: Port device team_slave_0 added
[   81.466479][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.481012][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.491693][ T4272] team0: Port device team_slave_1 added
[   81.515301][ T4279] team0: Port device team_slave_1 added
[   81.522812][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.535316][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.560574][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.592556][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.599875][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.625930][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.640048][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.647527][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.673943][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.693751][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.724929][ T4273] team0: Port device team_slave_0 added
[   81.743672][ T4275] team0: Port device team_slave_0 added
[   81.757679][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.765858][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.791942][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.807094][ T4273] team0: Port device team_slave_1 added
[   81.815544][ T4275] team0: Port device team_slave_1 added
[   81.831326][ T4274] team0: Port device team_slave_0 added
[   81.845149][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.852154][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.879634][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.909664][ T4274] team0: Port device team_slave_1 added
[   81.919474][ T4272] device hsr_slave_0 entered promiscuous mode
[   81.926768][ T4272] device hsr_slave_1 entered promiscuous mode
[   81.970201][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.977296][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.003866][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.016002][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.024050][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.050420][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.062253][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.072152][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.098448][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.129887][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.137022][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.163166][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.175258][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.182237][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.208253][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.220081][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.227333][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.253656][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.273919][ T4290] Bluetooth: hci2: command 0x0409 tx timeout
[   82.273934][ T4288] Bluetooth: hci4: command 0x0409 tx timeout
[   82.280260][ T4290] Bluetooth: hci0: command 0x0409 tx timeout
[   82.286939][ T4284] Bluetooth: hci3: command 0x0409 tx timeout
[   82.292849][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[   82.352765][ T4279] device hsr_slave_0 entered promiscuous mode
[   82.359928][ T4279] device hsr_slave_1 entered promiscuous mode
[   82.366886][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.374977][ T4279] Cannot create hsr debugfs directory
[   82.410070][ T4273] device hsr_slave_0 entered promiscuous mode
[   82.417520][ T4273] device hsr_slave_1 entered promiscuous mode
[   82.425077][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.432684][ T4273] Cannot create hsr debugfs directory
[   82.476936][ T4274] device hsr_slave_0 entered promiscuous mode
[   82.484820][ T4274] device hsr_slave_1 entered promiscuous mode
[   82.491481][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.499207][ T4274] Cannot create hsr debugfs directory
[   82.514933][ T4275] device hsr_slave_0 entered promiscuous mode
[   82.522971][ T4275] device hsr_slave_1 entered promiscuous mode
[   82.532112][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.539874][ T4275] Cannot create hsr debugfs directory
[   82.901122][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.926526][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.936688][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.950808][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.010470][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.045380][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.057781][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.069739][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.080602][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.091452][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.118404][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.128166][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.210901][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.245791][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.258170][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.269348][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.299113][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.320106][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.337263][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.348274][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.364960][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.392055][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.403489][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.412956][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   83.455899][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.476436][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.488349][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.498765][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.506100][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.515325][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.547132][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.556233][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.567534][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.574728][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.590918][ T4279] 8021q: adding VLAN 0 to HW filter on device team0
[   83.618762][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.626745][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.663448][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.672939][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.682183][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.691698][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.698905][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.708043][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.717950][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.727127][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.735985][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.744384][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.766508][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.777845][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.788775][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.798423][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.805597][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.819147][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.828352][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.859572][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.875885][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.889519][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.898729][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.914050][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   83.933859][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.941987][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.960019][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.969605][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.980719][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.991180][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.006469][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.015542][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.039273][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.048473][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.058905][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.066090][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.080187][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.089816][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.099458][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.108855][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.119457][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.142865][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.154672][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.170023][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.179062][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.188585][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.201595][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.218143][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.225373][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.240924][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.250038][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.275052][ T4273] 8021q: adding VLAN 0 to HW filter on device team0
[   84.292934][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   84.306615][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.324904][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.344870][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.353501][ T4289] Bluetooth: hci1: command 0x041b tx timeout
[   84.353544][ T4289] Bluetooth: hci0: command 0x041b tx timeout
[   84.353570][ T4289] Bluetooth: hci2: command 0x041b tx timeout
[   84.353613][ T4289] Bluetooth: hci4: command 0x041b tx timeout
[   84.353640][ T4289] Bluetooth: hci3: command 0x041b tx timeout
[   84.395370][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.409584][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.417883][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.428556][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.464730][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.474396][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.490362][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.500570][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.507769][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.522508][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.531770][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.543757][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.551021][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.560119][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.569276][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.578629][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.588015][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.597852][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.607341][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.616829][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.624013][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.632528][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.647734][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.708381][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.724800][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.743497][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.752391][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.768295][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.781956][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.795532][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.802691][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.817240][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.829756][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.842291][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.854890][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.868326][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.878287][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.893791][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.902745][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.921945][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.949843][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.977170][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.991420][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   85.004698][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.024896][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.078094][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   85.108721][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.162235][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   85.213253][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.258765][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.272003][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.294373][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.320150][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.345825][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.363462][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.381701][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.390756][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.400105][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.409335][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   85.430706][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.474348][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.481894][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.527794][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.586427][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.614345][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.669933][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.688116][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.717318][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.737667][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.760540][ T4272] device veth0_vlan entered promiscuous mode
[   85.833502][ T4272] device veth1_vlan entered promiscuous mode
[   85.889203][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.905263][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.944064][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.951661][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.980280][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.039881][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.049494][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.073675][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.093915][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.128755][ T4272] device veth0_macvtap entered promiscuous mode
[   86.156792][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.174118][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.188191][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.204194][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.216305][ T4272] device veth1_macvtap entered promiscuous mode
[   86.259079][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.274250][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.281719][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.310019][ T4275] device veth0_vlan entered promiscuous mode
[   86.327785][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.362772][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.374474][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.382343][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.395913][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.411275][ T4275] device veth1_vlan entered promiscuous mode
[   86.423946][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.432297][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.440976][ T4290] Bluetooth: hci3: command 0x040f tx timeout
[   86.447392][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[   86.454174][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[   86.454194][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[   86.460224][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[   86.470677][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.485088][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.494067][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.506127][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.527592][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.561733][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.571515][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.585565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.608419][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.633105][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.641868][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.673602][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.715322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.725561][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.735055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.744315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.770916][ T4273] device veth0_vlan entered promiscuous mode
[   86.787457][ T4275] device veth0_macvtap entered promiscuous mode
[   86.805200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.825053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.846612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.949907][ T4275] device veth1_macvtap entered promiscuous mode
[   86.960597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.970401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.980471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.989820][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   87.018198][ T4273] device veth1_vlan entered promiscuous mode
[   87.037941][ T4279] device veth0_vlan entered promiscuous mode
[   87.058066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.068066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.086520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.095844][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.107009][ T4274] device veth0_vlan entered promiscuous mode
[   87.158862][ T4279] device veth1_vlan entered promiscuous mode
[   87.177257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.186541][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.195039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.203781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.211891][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.224263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.234081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.248550][ T4274] device veth1_vlan entered promiscuous mode
[   87.267160][ T4273] device veth0_macvtap entered promiscuous mode
[   87.298009][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.336717][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.351472][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.366046][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.377240][ T4273] device veth1_macvtap entered promiscuous mode
[   87.391204][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.400089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.412042][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.421325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.430549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.440120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.449235][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.458927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.491767][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.506194][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.520946][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.542843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.552035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.561731][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.570789][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.579669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.591441][ T4279] device veth0_macvtap entered promiscuous mode
[   87.602057][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.613686][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.622419][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.635528][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.657522][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.666324][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.670658][ T4279] device veth1_macvtap entered promiscuous mode
[   87.692289][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.704215][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.715599][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.727213][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.740401][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.750778][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.760403][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.771347][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.779759][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.789487][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.819837][ T4274] device veth0_macvtap entered promiscuous mode
[   87.835096][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.854906][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.868231][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.880593][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.896713][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.909325][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.924276][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.940338][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.950126][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.974349][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.986103][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.994942][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.007198][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.018935][ T4274] device veth1_macvtap entered promiscuous mode
[   88.071019][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.084508][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.095161][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.110953][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.127256][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.139870][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.155481][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.163513][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.171800][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.181078][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.200677][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.242822][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.271095][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.285761][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.301492][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.312788][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.323119][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.334041][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.344521][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.355996][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.371415][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.381734][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.405283][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.416564][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.428064][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.438978][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.450274][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.462588][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.480561][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.490091][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.500145][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.513313][ T4289] Bluetooth: hci3: command 0x0419 tx timeout
[   88.515388][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[   88.519887][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[   88.525385][ T4286] Bluetooth: hci0: command 0x0419 tx timeout
[   88.531614][ T4290] Bluetooth: hci2: command 0x0419 tx timeout
[   88.567739][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.586372][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.610223][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.627332][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.640173][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.645100][ T4366] loop1: detected capacity change from 0 to 128
[   88.665467][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.678528][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.688722][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.706143][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.718156][ T4366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   88.718739][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.739112][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.756019][ T4366] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   88.775583][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.807762][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.823127][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.854183][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.873688][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.905802][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.924772][ T4272] EXT4-fs (loop1): unmounting filesystem.
[   88.933170][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.942060][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.963110][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.024029][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.032153][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.094077][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.180384][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.189928][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.223381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.268142][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.299304][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.317394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.349733][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.385881][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.403810][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.473237][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.481132][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.517466][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.527331][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.551182][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.596782][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[   89.618897][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.678263][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.689492][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.728442][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.733425][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.760128][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.781310][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.982724][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   90.002056][ T4387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   90.018229][ T4387] netlink: 'syz.2.3': attribute type 6 has an invalid length.
[   90.066753][ T4387] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.076293][ T4387] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.085131][ T4387] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.093965][ T4387] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.135063][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   90.147363][ T4387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   90.163477][ T4387] netlink: 'syz.2.3': attribute type 6 has an invalid length.
[   90.183597][ T4387] Zero length message leads to an empty skb
[   90.633336][ T3599] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   90.713195][   T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   90.826129][ T3599] usb 5-1: unable to get BOS descriptor or descriptor too short
[   90.840012][ T3599] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   90.865742][ T3599] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   90.882936][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.908565][ T3599] usb 5-1: Product: syz
[   90.912818][ T3599] usb 5-1: Manufacturer: syz
[   90.917950][ T3599] usb 5-1: SerialNumber: syz
[   90.933115][   T26] usb 3-1: Using ep0 maxpacket: 8
[   90.946551][   T26] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   90.964873][   T26] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   90.975636][   T26] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   90.986042][   T26] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   91.000141][   T26] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   91.010221][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.029909][ T4415] file system registered
[   91.075271][ T4321] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.180978][ T3599] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   91.248062][   T26] usb 3-1: GET_CAPABILITIES returned 0
[   91.261543][   T26] usbtmc 3-1:16.0: can't read capabilities
[   91.269705][ T4321] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[   91.283930][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.304086][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.348516][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   91.362222][ T4321] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   91.372092][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.400834][ T4321] usb 1-1: config 0 descriptor??
[   91.476038][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   91.490186][   T26] usb 3-1: USB disconnect, device number 2
[   91.633449][ T4290] Bluetooth: hci5: command 0x1003 tx timeout
[   91.640807][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   91.715832][ T3042] cfg80211: failed to load regulatory.db
[   91.825231][ T4321] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[   91.845732][ T4422] loop1: detected capacity change from 0 to 128
[   91.851676][ T4321] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   91.872563][ T4422] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   91.882342][ T4422] System zones: 1-3, 19-19, 35-36
[   91.898796][ T4422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   91.911531][ T4422] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   91.945544][ T4321] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   92.000998][ T3599] usb 5-1: failed to enable PITCH for EP 0x82
[   92.030605][ T3599] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   92.046130][ T4272] EXT4-fs (loop1): unmounting filesystem.
[   92.119630][ T3599] usb 5-1: clock source 0 is not valid, cannot use
[   92.136668][ T3599] usb 5-1: 2:1: cannot get freq (v2/v3): err -71
[   92.160391][   T26] usb 1-1: USB disconnect, device number 2
[   92.167106][ T3599] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   92.285904][ T3599] usb 5-1: USB disconnect, device number 2
[   92.380593][ T4427] loop1: detected capacity change from 0 to 4096
[   92.448990][ T4427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   92.569165][ T4439] loop2: detected capacity change from 0 to 2048
[   92.618496][ T4439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   92.635761][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.729980][ T4430] fido_id[4430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   92.766785][ T4444] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   92.864226][ T4272] EXT4-fs (loop1): unmounting filesystem.
[   93.045905][ T4273] EXT4-fs (loop2): unmounting filesystem.
[   93.162431][ T4450] loop3: detected capacity change from 0 to 4096
[   93.309221][ T4460] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.445656][   T27] audit: type=1800 audit(1785775575.969:2): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.28" name="file1" dev="loop3" ino=15 res=0 errno=0
[   94.185022][ T4451] loop4: detected capacity change from 0 to 32768
[   94.378693][ T3599] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   94.397845][ T4451] JBD2: Ignoring recovery information on journal
[   94.414121][ T3599] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   94.611387][ T4451] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   94.723243][ T3599] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.925624][ T3599] usb 2-1: Using ep0 maxpacket: 16
[   94.933614][ T3599] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.967429][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   94.995051][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   95.014401][ T4451] syz.4.29 (4451) used greatest stack depth: 18688 bytes left
[   95.028837][ T3599] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   95.050407][ T3599] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   95.091657][ T3599] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   95.139864][ T3599] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   95.160400][ T4279] ocfs2: Unmounting device (7,4) on (node local)
[   95.162619][ T3599] usb 2-1: Manufacturer: syz
[   95.191289][ T3599] usb 2-1: config 0 descriptor??
[   95.692670][ T3599] rc_core: IR keymap rc-hauppauge not found
[   95.699002][ T4419] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   95.713299][ T3599] Registered IR keymap rc-empty
[   95.742972][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   95.783440][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   95.829891][ T3599] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   95.870005][ T4486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.883732][ T4486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.891397][ T3599] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6
[   95.905378][ T4419] usb 1-1: Using ep0 maxpacket: 8
[   95.915802][ T4419] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[   95.935330][ T4419] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[   95.947145][ T4419] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[   95.966230][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   95.976734][ T4419] usb 1-1: config 250 has no interface number 0
[   95.987017][ T4419] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   96.003988][ T4513] o2cb: This node has not been configured.
[   96.010157][ T4513] o2cb: Cluster check failed. Fix errors before retrying.
[   96.018633][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.026330][ T4419] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   96.037841][ T4513] (syz.2.51,4513,1):user_dlm_register:674 ERROR: status = -22
[   96.045732][ T4419] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   96.056739][ T4513] (syz.2.51,4513,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[   96.066874][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.074253][ T4419] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   96.085360][ T4419] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   96.103075][ T4419] usb 1-1: config 250 interface 228 has no altsetting 0
[   96.120726][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.124762][ T4515] netlink: 48 bytes leftover after parsing attributes in process `syz.4.52'.
[   96.130656][ T4419] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   96.152180][ T4419] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   96.162528][ T4419] usb 1-1: Product: syz
[   96.172185][ T4419] usb 1-1: SerialNumber: syz
[   96.177232][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.209760][ T4419] hub 1-1:250.228: bad descriptor, ignoring hub
[   96.216286][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.234193][ T4419] hub: probe of 1-1:250.228 failed with error -5
[   96.263212][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.313215][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.343405][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.383199][ T3599] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   96.409045][ T4419] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   96.454521][ T3599] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   96.491547][ T3599] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   96.526230][ T3599] usb 2-1: USB disconnect, device number 2
[   96.803211][   T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.004944][ T4542] input: syz0 as /devices/virtual/input/input7
[   97.017469][   T26] usb 4-1: Using ep0 maxpacket: 16
[   97.028922][   T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.066102][   T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   97.076536][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.086754][   T26] usb 4-1: Product: syz
[   97.091061][   T26] usb 4-1: Manufacturer: syz
[   97.105155][ T4502] usb 1-1: reset high-speed USB device number 3 using dummy_hcd
[   97.106263][   T26] usb 4-1: SerialNumber: syz
[   97.269190][ T4547] loop2: detected capacity change from 0 to 256
[   97.319025][ T4547] FAT-fs (loop2): Directory bread(block 1285) failed
[   97.343407][ T4547] FAT-fs (loop2): Directory bread(block 1286) failed
[   97.358991][ T4547] FAT-fs (loop2): Directory bread(block 1287) failed
[   97.366707][ T4547] FAT-fs (loop2): Directory bread(block 1288) failed
[   97.543949][ T4502] usb 1-1: failed to restore interface 228 altsetting 255 (error=-71)
[   97.568976][ T4322] usb 1-1: USB disconnect, device number 3
[   97.585808][ T4322] usblp0: removed
[   98.180102][   T26] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[   98.189129][   T26] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   98.205495][   T26] cdc_ncm 4-1:1.0: setting rx_max = 2048
[   98.380828][   T26] cdc_ncm 4-1:1.0: setting tx_max = 184
[   98.417231][   T26] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   98.488309][   T26] usb 4-1: USB disconnect, device number 2
[   98.517698][   T26] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[   98.828227][ T4586] loop5: detected capacity change from 0 to 7
[   98.852001][ T4586] Dev loop5: unable to read RDB block 7
[   98.890585][ T4588] loop2: detected capacity change from 0 to 128
[   98.897333][ T4586]  loop5: unable to read partition table
[   98.925162][ T4586] loop5: partition table beyond EOD, truncated
[   99.019393][ T4586] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[   99.040497][ T4588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   99.066714][ T4588] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   99.346888][ T4273] EXT4-fs (loop2): unmounting filesystem.
[   99.535196][ T4578] loop0: detected capacity change from 0 to 32768
[   99.571185][ T4578] =======================================================
[   99.571185][ T4578] WARNING: The mand mount option has been deprecated and
[   99.571185][ T4578]          and is ignored by this kernel. Remove the mand
[   99.571185][ T4578]          option from the mount to silence this warning.
[   99.571185][ T4578] =======================================================
[   99.683544][ T4320] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   99.801809][ T4578] JBD2: Ignoring recovery information on journal
[   99.873702][ T4320] usb 2-1: Using ep0 maxpacket: 32
[   99.882884][ T4320] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[   99.901781][ T4320] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   99.920737][ T4320] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[   99.928053][ T4578] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   99.956133][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   99.971535][ T4618] device syzkaller1 entered promiscuous mode
[   99.984435][ T4320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  100.002966][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  100.075917][ T4320] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  100.101312][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.145795][ T4320] usb 2-1: config 0 descriptor??
[  100.375842][ T4320] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  100.466655][ T4632] loop2: detected capacity change from 0 to 128
[  100.571746][ T4632] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  100.602989][ T4320] usb 2-1: USB disconnect, device number 3
[  100.623609][ T4320] usblp0: removed
[  100.685300][ T4632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.779334][ T4275] ocfs2: Unmounting device (7,0) on (node local)
[  100.853155][ T4419] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  101.043230][ T4419] usb 5-1: Using ep0 maxpacket: 32
[  101.055990][ T4419] usb 5-1: config index 0 descriptor too short (expected 19, got 18)
[  101.078855][ T4419] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.140276][ T4419] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  101.162283][ T4419] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  101.191880][ T4419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.232486][ T4419] usb 5-1: Product: syz
[  101.246659][ T4419] usb 5-1: Manufacturer: syz
[  101.251423][ T4419] usb 5-1: SerialNumber: syz
[  101.283981][ T4419] usb 5-1: config 0 descriptor??
[  101.592408][ T4657] input: syz0 as /devices/virtual/input/input8
[  101.824811][ T4419] usb 5-1: USB disconnect, device number 3
[  101.906729][ T4664] netlink: 7 bytes leftover after parsing attributes in process `syz.3.92'.
[  102.022841][ T4641] loop2: detected capacity change from 0 to 32768
[  102.139176][ T4641] XFS (loop2): Mounting V5 Filesystem
[  102.150596][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'.
[  102.206192][ T4673] Dropped outbound packet type=1c
[  102.382303][ T4641] XFS (loop2): Ending clean mount
[  102.405156][ T4641] XFS (loop2): Quotacheck needed: Please wait.
[  102.527355][ T4641] XFS (loop2): Quotacheck: Done.
[  102.918935][ T4273] XFS (loop2): Unmounting Filesystem
[  104.156743][ T4730] kvm: MWAIT instruction emulated as NOP!
[  104.293740][ T4715] loop1: detected capacity change from 0 to 32768
[  104.339515][ T4735] loop2: detected capacity change from 0 to 4096
[  104.352829][ T4715] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  104.396782][ T4718] loop4: detected capacity change from 0 to 32768
[  104.480984][ T4742] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.502565][ T4322] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  104.526060][ T4718] XFS (loop4): Mounting V5 Filesystem
[  104.537191][   T27] audit: type=1800 audit(1785775587.059:3): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.115" name="file1" dev="loop2" ino=15 res=0 errno=0
[  104.561256][ T4746] netlink: 48 bytes leftover after parsing attributes in process `syz.3.116'.
[  104.664667][ T4718] XFS (loop4): Ending clean mount
[  104.713121][ T4322] usb 1-1: Using ep0 maxpacket: 16
[  104.720328][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.738364][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  104.750075][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  104.760112][ T4322] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  104.770103][ T4322] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  104.798302][ T4322] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  104.834641][ T4322] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  104.853256][ T4322] usb 1-1: Manufacturer: syz
[  104.873891][ T4322] usb 1-1: config 0 descriptor??
[  104.924193][ T4272] ocfs2: Unmounting device (7,1) on (node local)
[  105.037830][ T4279] XFS (loop4): Unmounting Filesystem
[  105.403301][ T4322] rc_core: IR keymap rc-hauppauge not found
[  105.409337][ T4322] Registered IR keymap rc-empty
[  105.425761][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.473337][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.518472][ T4763] loop4: detected capacity change from 0 to 4096
[  105.525024][ T4322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  105.558322][ T4322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9
[  105.601106][ T4763] NILFS (loop4): invalid segment: Checksum error in segment payload
[  105.613365][ T4318] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  105.631117][ T4763] NILFS (loop4): trying rollback from an earlier position
[  105.633506][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.683316][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.713610][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.723169][ T4763] NILFS (loop4): recovery complete
[  105.752017][ T4769] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.788728][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.823271][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.833274][ T4318] usb 3-1: Using ep0 maxpacket: 32
[  105.841441][ T4318] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  105.872544][ T4318] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  105.893190][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.900476][ T4318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  105.909928][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  105.933222][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.943307][ T4318] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  105.965746][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  105.973688][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  105.990878][ T4318] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  106.001376][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.023234][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.053159][ T4322] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.060770][ T4318] usb 3-1: config 0 descriptor??
[  106.104513][ T4322] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  106.135602][ T4322] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  106.199795][ T4322] usb 1-1: USB disconnect, device number 4
[  106.223435][ T3599] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  106.292382][ T4318] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  106.413273][ T3599] usb 4-1: Using ep0 maxpacket: 16
[  106.428322][ T3599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.447786][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  106.500208][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  106.539255][ T3599] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  106.569654][ T3599] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  106.605476][ T4419] usb 3-1: USB disconnect, device number 3
[  106.612707][ T3599] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  106.627988][ T4419] usblp0: removed
[  106.641701][ T3599] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  106.665263][ T3599] usb 4-1: Manufacturer: syz
[  106.686678][ T3599] usb 4-1: config 0 descriptor??
[  107.023399][ T3599] rc_core: IR keymap rc-hauppauge not found
[  107.030813][ T3599] Registered IR keymap rc-empty
[  107.039601][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.114305][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.148318][ T3599] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  107.174232][ T3599] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10
[  107.237855][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.284895][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.305232][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.318053][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.326710][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.367551][ T4799] loop2: detected capacity change from 0 to 4096
[  107.378134][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.424208][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.453629][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.487142][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.511521][ T4799] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  107.543159][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.577910][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.624313][ T3599] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  107.664741][ T3599] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  107.683203][ T4318] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  107.687034][ T3599] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  107.754249][ T3599] usb 4-1: USB disconnect, device number 3
[  107.885103][ T4318] usb 2-1: config index 0 descriptor too short (expected 8251, got 59)
[  107.908526][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.956447][ T4318] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  108.063127][ T4318] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.125095][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  108.163320][ T4318] usb 2-1: SerialNumber: syz
[  108.194816][ T4318] cdc_ether: probe of 2-1:1.0 failed with error -22
[  108.466768][ T4806] Disabled LAPIC found during irq injection
[  108.578224][ T4322] usb 2-1: USB disconnect, device number 4
[  108.942903][ T4817] loop3: detected capacity change from 0 to 32768
[  108.992471][ T4817] JBD2: Ignoring recovery information on journal
[  109.143428][ T4817] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.444313][ T4836] loop4: detected capacity change from 0 to 512
[  109.496947][ T4442] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  109.613210][ T4822] loop2: detected capacity change from 0 to 40427
[  109.934658][ T4274] ocfs2: Unmounting device (7,3) on (node local)
[  111.873067][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  111.893065][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  111.903065][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  111.913063][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  111.923064][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  111.933061][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  111.943064][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  111.953063][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  111.963049][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  111.981445][ T4318] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  111.983171][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  112.980311][ T4318] usb 1-1: Dual-Role OTG device on HNP port
[  112.989804][ T4318] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  112.999075][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.055683][ T4859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.074227][ T4318] gspca_main: spca501-2.14.0 probing 0000:0000
[  113.096115][ T4318] gspca_spca501: reg write: error -32
[  113.101570][ T4318] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  113.104313][ T4859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.120377][ T4318] spca501: probe of 1-1:1.0 failed with error -22
[  113.169711][ T4859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.212038][ T4859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.460731][ T4871] loop4: detected capacity change from 0 to 128
[  113.594417][ T4877] loop2: detected capacity change from 0 to 16
[  113.674510][ T4877] erofs: (device loop2): mounted with root inode @ nid 36.
[  113.819493][ T4879] loop1: detected capacity change from 0 to 128
[  113.908616][ T4879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  114.002495][ T4879] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  114.269997][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  114.386743][ T4707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.415718][ T4891] loop1: detected capacity change from 0 to 128
[  114.559391][ T4891] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  115.547205][ T4707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.737180][ T4707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.792035][ T4903] loop3: detected capacity change from 0 to 64
[  115.917899][ T4707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.012676][ T4300] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.082534][ T4300] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.108333][ T4904] hfs: request for non-existent node 237 in B*Tree
[  116.151523][ T4904] hfs: request for non-existent node 237 in B*Tree
[  116.167415][    T9] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.203299][    T9] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.222459][ T4904] hfs: request for non-existent node 237 in B*Tree
[  116.230158][    T9] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.245128][ T4904] hfs: request for non-existent node 237 in B*Tree
[  116.269487][ T4903] hfs: request for non-existent node 237 in B*Tree
[  116.297259][    T9] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  116.303523][ T4903] hfs: request for non-existent node 237 in B*Tree
[  116.787551][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  116.805505][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  116.822897][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  116.846560][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  116.864759][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  116.872266][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  118.778497][ T4928] kvm [4927]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  118.813550][ T4319] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  118.823629][ T4928] kvm [4927]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  118.913219][ T4290] Bluetooth: hci4: command 0x0409 tx timeout
[  119.033411][ T4319] usb 3-1: Using ep0 maxpacket: 16
[  119.040470][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.074255][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  119.095459][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  119.115701][ T4319] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  119.139879][ T4319] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.190793][ T4319] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  119.208483][ T4319] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  119.218467][ T4319] usb 3-1: Manufacturer: syz
[  119.236415][ T4319] usb 3-1: config 0 descriptor??
[  120.102838][ T4915] chnl_net:caif_netlink_parms(): no params data found
[  120.329783][ T4319] rc_core: IR keymap rc-hauppauge not found
[  120.339208][ T4319] Registered IR keymap rc-empty
[  120.346375][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.362624][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.372195][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.403266][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.433981][ T4319] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  120.843528][ T4915] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.857478][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.896396][ T4915] device bridge_slave_0 entered promiscuous mode
[  120.942081][ T4915] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.958592][ T4319] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11
[  120.993202][ T4290] Bluetooth: hci4: command 0x041b tx timeout
[  121.002060][ T4915] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.010505][ T4915] device bridge_slave_1 entered promiscuous mode
[  121.019220][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.053143][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.083215][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.128999][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.193164][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.231232][ T4915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.243421][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.273256][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.292716][ T4915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.322498][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.383167][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.443155][ T4319] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  121.494372][ T4319] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  121.528664][ T4319] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  121.582574][ T4319] usb 3-1: USB disconnect, device number 4
[  121.667089][ T4948] loop1: detected capacity change from 0 to 32768
[  121.935500][ T4948] XFS (loop1): Mounting V5 Filesystem
[  122.122332][ T4948] XFS (loop1): Ending clean mount
[  122.145651][ T4948] XFS (loop1): Quotacheck needed: Please wait.
[  122.214289][ T4319] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96
[  122.262363][ T4915] team0: Port device team_slave_0 added
[  122.321549][ T4915] team0: Port device team_slave_1 added
[  122.328054][ T4948] XFS (loop1): Quotacheck: Done.
[  122.650831][ T5003] loop0: detected capacity change from 0 to 512
[  122.729392][ T5003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  122.850402][ T4915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.866356][ T4915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.894619][ T4272] XFS (loop1): Unmounting Filesystem
[  122.901662][ T4915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.007960][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  123.047185][ T4707] device hsr_slave_0 left promiscuous mode
[  123.083230][ T4290] Bluetooth: hci4: command 0x040f tx timeout
[  123.151114][ T4707] device hsr_slave_1 left promiscuous mode
[  123.178078][ T4707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.199158][ T4707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.258376][ T4707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.328024][ T4707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.349418][ T4707] device bridge_slave_1 left promiscuous mode
[  123.365944][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.406426][ T4707] device bridge_slave_0 left promiscuous mode
[  123.412792][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.598567][ T5001] loop2: detected capacity change from 0 to 32768
[  123.631980][ T5018] loop1: detected capacity change from 0 to 256
[  123.672448][ T5018] FAT-fs (loop1): Directory bread(block 64) failed
[  123.680961][ T4707] device veth1_macvtap left promiscuous mode
[  123.697480][ T4707] device veth0_macvtap left promiscuous mode
[  123.714013][ T5018] FAT-fs (loop1): Directory bread(block 65) failed
[  123.720682][ T5018] FAT-fs (loop1): Directory bread(block 66) failed
[  123.734596][ T4707] device veth1_vlan left promiscuous mode
[  123.735823][ T5018] FAT-fs (loop1): Directory bread(block 67) failed
[  123.752149][ T5001] XFS (loop2): Mounting V5 Filesystem
[  123.759079][ T5018] FAT-fs (loop1): Directory bread(block 68) failed
[  123.765858][ T5018] FAT-fs (loop1): Directory bread(block 69) failed
[  123.772500][ T5018] FAT-fs (loop1): Directory bread(block 70) failed
[  123.779644][ T5018] FAT-fs (loop1): Directory bread(block 71) failed
[  123.787252][ T5018] FAT-fs (loop1): Directory bread(block 72) failed
[  123.796144][ T5018] FAT-fs (loop1): Directory bread(block 73) failed
[  123.812453][ T5018] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  123.812665][ T4707] device veth0_vlan left promiscuous mode
[  123.887399][ T5026] loop0: detected capacity change from 0 to 2048
[  123.952277][ T5001] XFS (loop2): Ending clean mount
[  124.007522][ T5026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  124.027438][ T5001] XFS (loop2): Quotacheck needed: Please wait.
[  124.201657][ T5001] XFS (loop2): Quotacheck: Done.
[  124.263601][   T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  124.363388][   T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 9 with error 28
[  124.415016][   T11] EXT4-fs (loop0): This should not happen!! Data will be lost
[  124.415016][   T11] 
[  124.446750][   T11] EXT4-fs (loop0): Total free blocks count 0
[  124.459303][   T11] EXT4-fs (loop0): Free/Dirty block details
[  124.473117][   T11] EXT4-fs (loop0): free_blocks=2415919504
[  124.489303][   T11] EXT4-fs (loop0): dirty_blocks=16
[  124.592733][   T11] EXT4-fs (loop0): Block reservation details
[  124.621999][   T11] EXT4-fs (loop0): i_reserved_data_blocks=1
[  124.649618][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  124.875784][ T4273] XFS (loop2): Unmounting Filesystem
[  125.153114][ T4290] Bluetooth: hci4: command 0x0419 tx timeout
[  126.192402][ T4707] team0 (unregistering): Port device team_slave_1 removed
[  126.260486][ T4707] team0 (unregistering): Port device team_slave_0 removed
[  126.316020][ T4707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.414329][ T4707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.542531][ T5058] loop2: detected capacity change from 0 to 128
[  126.642447][ T5058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  126.653622][ T5058] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  126.911637][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  127.086473][ T4707] bond0 (unregistering): Released all slaves
[  127.253967][ T4915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.261029][ T4915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.300763][ T4915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.383003][ T4915] device hsr_slave_0 entered promiscuous mode
[  127.420648][ T4915] device hsr_slave_1 entered promiscuous mode
[  127.481726][ T4915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.504694][ T4915] Cannot create hsr debugfs directory
[  127.571787][ T5069] loop1: detected capacity change from 0 to 512
[  127.615405][ T5069] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  128.293302][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  128.324432][ T4915] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  128.358895][ T4915] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.394289][ T4915] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.419960][ T4915] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  128.488054][ T4320] usb 4-1: Using ep0 maxpacket: 8
[  128.519482][ T4320] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  128.540554][ T4320] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  128.571424][ T4320] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  128.606203][ T4320] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  128.630872][ T4320] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  128.659653][ T4915] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.667029][ T4320] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  128.684875][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.687698][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.709935][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.726506][ T4915] 8021q: adding VLAN 0 to HW filter on device team0
[  128.746864][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.785278][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.799959][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.807218][ T4990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.827088][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.844086][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.851653][ T5071] loop0: detected capacity change from 0 to 32768
[  128.862351][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.894746][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.901961][ T4990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.969217][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.990466][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  129.022738][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  129.041965][ T5071] XFS (loop0): Mounting V5 Filesystem
[  129.070898][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  129.116212][ T5103] loop1: detected capacity change from 0 to 4096
[  129.140544][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  129.190723][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  129.208535][ T5103] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  129.235469][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  129.248723][ T5071] XFS (loop0): Ending clean mount
[  129.278200][ T5071] XFS (loop0): Quotacheck needed: Please wait.
[  129.299921][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  129.341530][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  129.367165][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  129.429652][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  129.446302][ T5071] XFS (loop0): Quotacheck: Done.
[  129.479425][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  129.514269][ T5115] usbtmc 4-1:16.0: simple usb_control_msg failed -32
[  129.545478][ T4318] usb 4-1: USB disconnect, device number 4
[  129.721950][ T4275] XFS (loop0): Unmounting Filesystem
[  130.093167][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  130.270378][ T5131] Illegal XDP return value 4294967282 on prog  (id 13) dev syz_tun, expect packet loss!
[  130.290180][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  130.295794][    T7] usb 3-1: Using ep0 maxpacket: 16
[  130.312395][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  130.321943][    T7] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  130.331422][    T7] usb 3-1: config 0 has no interface number 0
[  130.337717][    T7] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  130.348595][    T7] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  130.377873][ T4915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.387317][    T7] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  130.404868][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.421001][    T7] usb 3-1: Product: syz
[  130.431044][    T7] usb 3-1: Manufacturer: syz
[  130.447222][    T7] usb 3-1: SerialNumber: syz
[  130.467396][    T7] usb 3-1: config 0 descriptor??
[  130.492628][ T5120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.506473][ T5120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.555923][ T5135] loop0: detected capacity change from 0 to 8
[  130.688864][ T5135] SQUASHFS error: zlib decompression failed, data probably corrupt
[  130.729867][ T5135] SQUASHFS error: Failed to read block 0x9b: -5
[  130.731658][ T5120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.744672][ T5135] SQUASHFS error: Unable to read metadata cache entry [99]
[  130.762270][ T5120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.793861][ T5135] SQUASHFS error: Unable to read inode 0x104
[  130.970327][ T5142] loop1: detected capacity change from 0 to 4096
[  130.985727][    T7] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  131.042556][ T5142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  131.191007][ T5135] loop0: detected capacity change from 0 to 8192
[  131.321731][   T27] audit: type=1800 audit(1785775613.839:4): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.214" name="file1" dev="loop0" ino=1048619 res=0 errno=0
[  131.442308][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  131.451078][ T5140] loop3: detected capacity change from 0 to 32768
[  131.605811][ T5140] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.215 (5140)
[  131.788853][    T7] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  131.803630][ T5140] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.821627][    T7] asix: probe of 3-1:0.34 failed with error -71
[  131.871181][ T5140] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  131.891384][    T7] usb 3-1: USB disconnect, device number 5
[  131.943344][ T5140] BTRFS info (device loop3): turning on sync discard
[  131.950180][ T5140] BTRFS info (device loop3): use zlib compression, level 3
[  132.041427][ T5140] BTRFS info (device loop3): turning off barriers
[  132.083856][ T5140] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  132.137944][ T5140] BTRFS info (device loop3): trying to use backup root at mount time
[  132.158436][ T5140] BTRFS info (device loop3): enabling auto defrag
[  132.193209][ T5140] BTRFS info (device loop3): max_inline at 0
[  132.216379][ T5140] BTRFS info (device loop3): using free space tree
[  132.453936][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  132.462590][ T5176] loop2: detected capacity change from 0 to 512
[  132.465405][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  132.491782][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  132.548397][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  132.567891][   T76] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  132.599184][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  132.616067][ T4915] device veth0_vlan entered promiscuous mode
[  132.624284][ T5140] BTRFS error (device loop3): failed to load root extent
[  132.631423][ T5140] BTRFS warning (device loop3): try to load backup roots slot 1
[  132.640375][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  132.678080][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  132.685130][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  132.695173][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.701312][ T5176] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.722997][   T47] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  132.785536][ T5140] BTRFS warning (device loop3): couldn't read tree root
[  132.792569][ T5140] BTRFS warning (device loop3): try to load backup roots slot 2
[  132.811410][ T4915] device veth1_vlan entered promiscuous mode
[  132.828844][ T5140] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  132.842765][ T5176] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  132.870250][ T5140] BTRFS warning (device loop3): couldn't read tree root
[  132.883720][ T5176] EXT4-fs error (device loop2): ext4_ext_tree_init:879: inode #18: comm syz.2.221: mark_inode_dirty error
[  132.905620][ T5140] BTRFS warning (device loop3): try to load backup roots slot 3
[  132.928856][ T5176] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  132.960476][ T5191] loop1: detected capacity change from 0 to 1024
[  132.975515][ T5176] EXT4-fs error (device loop2): __ext4_new_inode:1355: inode #18: comm syz.2.221: mark_inode_dirty error
[  133.005984][ T5176] EXT4-fs error (device loop2) in __ext4_new_inode:1357: Corrupt filesystem
[  133.015146][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  133.023109][ T5140] BTRFS info (device loop3): enabling ssd optimizations
[  133.035900][ T5140] BTRFS info (device loop3): rebuilding free space tree
[  133.045381][ T5191] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  133.045836][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  133.102084][ T5176] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  133.134099][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  133.142887][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  133.158650][ T5176] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #18: comm syz.2.221: mark_inode_dirty error
[  133.186535][ T5176] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  133.205196][ T4915] device veth0_macvtap entered promiscuous mode
[  133.223421][ T5140] BTRFS info (device loop3): checking UUID tree
[  133.255296][ T5191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  133.265751][ T4915] device veth1_macvtap entered promiscuous mode
[  133.284003][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  133.289834][ T5191] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #18: comm syz.1.222: mark_inode_dirty error
[  133.305391][ T5191] EXT4-fs error (device loop1): ext4_get_max_inline_size:116: inode #18: comm syz.1.222: can't get inode location 18
[  133.383326][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.413084][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.436639][ T5191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  133.480223][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.516798][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.550624][ T5191] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #18: comm syz.1.222: mark_inode_dirty error
[  133.562368][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.588628][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.604654][ T5191] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7278273066370725442
[  133.643948][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.683118][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.704800][ T5191] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7278273066370725442
[  133.729437][ T4915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.768004][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  133.784332][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  133.813782][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  133.822619][ T5191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  133.847313][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  133.858133][ T5191] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #18: comm syz.1.222: mark_inode_dirty error
[  133.871704][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.902490][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.915148][ T5191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  133.938131][ T4274] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.961194][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.962680][ T5191] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #18: comm syz.1.222: mark_inode_dirty error
[  134.013058][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.024754][ T5191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  134.045286][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.076889][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.109916][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.130942][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.163498][ T4915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.191962][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  134.242355][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  134.316512][ T4915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.331005][ T4915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.353919][ T4289] Bluetooth: hci5: command 0x1003 tx timeout
[  134.362216][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  134.440543][ T4915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.513808][ T4915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.575117][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  134.915064][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.950066][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.975758][ T5200] loop2: detected capacity change from 0 to 40427
[  135.011313][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  135.063202][ T5200] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  135.083096][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.105804][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.126106][ T5200] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  135.149606][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  135.295530][ T5200] F2FS-fs (loop2): Found nat_bits in checkpoint
[  136.922983][ T5200] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.974505][ T5200] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  137.971395][ T5231] loop3: detected capacity change from 0 to 40427
[  142.020224][ T5334] loop5: detected capacity change from 0 to 7
[  142.327443][ T5334] Dev loop5: unable to read RDB block 7
[  142.530558][ T5334]  loop5: unable to read partition table
[  142.573380][ T5334] loop5: partition table beyond EOD, truncated
[  142.630843][ T5334] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  142.784466][    C1] Unknown status report in ack skb
[  142.902434][ T5333] loop0: detected capacity change from 0 to 131072
[  142.939288][ T5333] F2FS-fs (loop0): invalid crc value
[  143.008710][ T5333] F2FS-fs (loop0): Found nat_bits in checkpoint
[  143.052859][ T5333] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  143.076665][ T5333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  143.124071][ T5333] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  143.130434][ T5348] loop5: detected capacity change from 0 to 256
[  143.813264][ T4322] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  143.933282][ T3042] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  144.008425][ T4322] usb 3-1: Using ep0 maxpacket: 8
[  144.017695][ T4322] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[  144.067352][ T4322] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  144.113211][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.135691][ T3042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.143288][ T4322] usb 3-1: Product: syz
[  144.170017][ T3042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.179715][ T4322] usb 3-1: Manufacturer: syz
[  144.209611][ T4322] usb 3-1: SerialNumber: syz
[  144.211558][ T3042] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  144.228584][ T4322] usb 3-1: config 0 descriptor??
[  144.265625][ T3042] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  144.272053][ T4322] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  144.303205][ T3042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.327602][ T3042] usb 2-1: config 0 descriptor??
[  144.788563][ T3042] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  144.869689][ T3042] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  145.459601][    C1] plantronics 0003:047F:FFFF.0003: Event data for report 0 was too short (4043 vs 186)
[  145.500985][ T4322] gspca_zc3xx: reg_w_i err -71
[  145.515186][ T5396] loop5: detected capacity change from 0 to 4096
[  145.556507][ T5402] loop3: detected capacity change from 0 to 128
[  145.616000][ T5396] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  145.672566][ T3042] usb 2-1: USB disconnect, device number 5
[  145.709117][ T5402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  145.748405][ T5402] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.853448][ T5402] syz.3.269 (pid 5402) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  145.901763][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  146.173406][ T4322] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  146.180014][ T4322] gspca_zc3xx: probe of 3-1:0.0 failed with error -71
[  146.200692][ T4322] usb 3-1: USB disconnect, device number 6
[  146.319148][ T5402] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  146.461472][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[  146.530031][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  147.529425][ T5438] loop3: detected capacity change from 0 to 512
[  147.595503][ T5438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  147.637788][ T5442] netlink: 14 bytes leftover after parsing attributes in process `syz.2.275'.
[  147.910734][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  148.191442][ T5461] loop1: detected capacity change from 0 to 128
[  148.247618][ T5461] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  148.360273][ T5461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  148.401644][ T5461] ext2 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.795657][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  150.480370][ T4321] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  150.690046][ T4321] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  150.709258][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.748325][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.802028][ T4321] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  150.862445][ T4321] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  150.885216][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.944252][ T4321] usb 4-1: config 0 descriptor??
[  151.248292][ T4322] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  151.383608][ T4321] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[  151.415106][ T4321] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  151.436374][ T4321] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  151.455746][ T4322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.494751][ T4322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  151.540712][ T4322] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  151.581359][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  151.621071][ T4322] usb 3-1: SerialNumber: syz
[  151.715263][ T4321] usb 4-1: USB disconnect, device number 5
[  151.775571][ T5527] fido_id[5527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  151.860114][ T5509] loop2: detected capacity change from 0 to 256
[  151.895968][ T5509] exfat: Deprecated parameter 'utf8'
[  151.989851][ T5509] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  152.122483][ T4322] usb 3-1: 0:2 : does not exist
[  152.131126][ T4322] usb 3-1: unit 3 not found!
[  152.175950][ T4322] usb 3-1: USB disconnect, device number 7
[  152.430022][ T4442] udevd[4442]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  152.765649][ T5525] loop0: detected capacity change from 0 to 40427
[  152.789745][ T5525] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  152.836920][ T5543] loop5: detected capacity change from 0 to 128
[  152.873109][ T5525] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  152.893401][ T5543] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  152.954993][ T5525] F2FS-fs (loop0): Found nat_bits in checkpoint
[  152.966242][ T5543] hpfs: filesystem error: improperly stopped
[  152.972313][ T5543] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  153.037420][ T5543] hpfs: You really don't want any checks? You are crazy...
[  153.057555][ T5543] hpfs: Code page index out of array
[  153.062920][ T5543] hpfs: code page support is disabled
[  153.132312][ T5543] hpfs: hpfs_map_4sectors(): unaligned read
[  153.150558][ T5525] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  153.160792][ T5543] hpfs: hpfs_map_4sectors(): unaligned read
[  153.170309][ T5525] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  153.180409][ T5543] hpfs: filesystem error: unable to find root dir
[  153.330067][ T5538] loop3: detected capacity change from 0 to 32768
[  153.368653][ T5525] syz.0.297: attempt to access beyond end of device
[  153.368653][ T5525] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.459590][ T5538] XFS (loop3): Mounting V5 Filesystem
[  153.558419][ T5569] loop5: detected capacity change from 0 to 128
[  153.565222][ T5538] XFS (loop3): Ending clean mount
[  153.621582][ T5569] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  153.720795][ T4274] XFS (loop3): Unmounting Filesystem
[  153.733333][ T5569] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  153.935023][ T5576] fuse: Bad value for 'fd'
[  153.943739][ T4275] syz-executor: attempt to access beyond end of device
[  153.943739][ T4275] loop0: rw=2051, sector=45096, nr_sectors = 8 limit=40427
[  153.992582][ T5576] loop2: detected capacity change from 0 to 256
[  154.022493][ T4275] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5
[  154.037325][ T5576] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  154.094052][ T5576] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.228764][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  154.683370][ T5589] tipc: Started in network mode
[  154.703203][ T5589] tipc: Node identity d6dd6c282df2, cluster identity 4711
[  154.731123][ T5589] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  154.749973][ T5588] tipc: Resetting bearer <eth:syzkaller0>
[  154.837308][ T5588] tipc: Disabling bearer <eth:syzkaller0>
[  155.023357][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  155.093243][ T3042] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  155.295338][ T3042] usb 2-1: not running at top speed; connect to a high speed hub
[  155.373848][ T3042] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  155.500212][ T3042] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  155.545544][ T3042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.631223][ T3042] usb 2-1: Product: syz
[  155.670939][ T3042] usb 2-1: Manufacturer: syz
[  155.702704][ T3042] usb 2-1: SerialNumber: syz
[  155.923260][ T3042] oti6858 2-1:1.0: oti6858 converter detected
[  155.940690][ T3042] usb 2-1: oti6858 converter now attached to ttyUSB0
[  155.963208][    T7] usb 3-1: Using ep0 maxpacket: 8
[  155.971475][    T7] usb 3-1: too many configurations: 15, using maximum allowed: 8
[  155.989953][    T7] usb 3-1: config 0 has no interfaces?
[  156.022174][    T7] usb 3-1: config 0 has no interfaces?
[  156.032587][    T7] usb 3-1: config 0 has no interfaces?
[  156.052945][    T7] usb 3-1: config 0 has no interfaces?
[  156.061338][    T7] usb 3-1: config 0 has no interfaces?
[  156.085003][    T7] usb 3-1: config 0 has no interfaces?
[  156.132383][    T7] usb 3-1: config 0 has no interfaces?
[  156.148822][    T7] usb 3-1: config 0 has no interfaces?
[  156.156979][    T7] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  156.166971][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.213446][    T7] usb 3-1: config 0 descriptor??
[  156.292098][ T4321] usb 2-1: USB disconnect, device number 6
[  156.331264][ T4321] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  156.347335][ T4321] oti6858 2-1:1.0: device disconnected
[  156.447140][    T7] usb 3-1: USB disconnect, device number 8
[  157.627116][ T5613] loop3: detected capacity change from 0 to 40427
[  157.674895][ T5613] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  157.695594][ T5613] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  157.760359][ T5613] F2FS-fs (loop3): Found nat_bits in checkpoint
[  157.789272][ T5644] input: syz1 as /devices/virtual/input/input13
[  157.908003][ T5613] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  157.924438][ T5613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  158.095140][ T5613] syz.3.318: attempt to access beyond end of device
[  158.095140][ T5613] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  158.258681][ T4274] syz-executor: attempt to access beyond end of device
[  158.258681][ T4274] loop3: rw=2051, sector=45096, nr_sectors = 8 limit=40427
[  158.275488][ T4274] F2FS-fs (loop3): Issue discard(5637, 5637, 1) failed, ret: -5
[  158.987181][ T5665] loop0: detected capacity change from 0 to 32768
[  159.014239][ T5665] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.336 (5665)
[  159.031967][ T5665] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.042259][ T5665] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  159.051075][ T5665] BTRFS info (device loop0): turning on sync discard
[  159.057840][ T5665] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  159.068723][ T5665] BTRFS info (device loop0): use zstd compression, level 3
[  159.076117][ T5665] BTRFS info (device loop0): turning on async discard
[  159.082955][ T5665] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  159.093675][ T5665] BTRFS info (device loop0): trying to use backup root at mount time
[  159.101800][ T5665] BTRFS info (device loop0): enabling auto defrag
[  159.108637][ T5665] BTRFS info (device loop0): enabling ssd optimizations
[  159.115798][ T5665] BTRFS info (device loop0): using free space tree
[  159.143283][ T4707] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  159.159992][ T5665] BTRFS error (device loop0): failed to load root extent
[  159.167179][ T5665] BTRFS warning (device loop0): try to load backup roots slot 1
[  159.176602][ T5311] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  159.207492][ T5665] BTRFS warning (device loop0): couldn't read tree root
[  159.214587][ T5665] BTRFS warning (device loop0): try to load backup roots slot 2
[  159.243395][ T5665] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  159.254782][ T5665] BTRFS warning (device loop0): couldn't read tree root
[  159.261763][ T5665] BTRFS warning (device loop0): try to load backup roots slot 3
[  159.315666][ T5665] BTRFS info (device loop0): rebuilding free space tree
[  159.366354][ T5665] BTRFS info (device loop0): checking UUID tree
[  160.812497][ T5719] loop1: detected capacity change from 0 to 512
[  160.829687][ T4275] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  160.896595][ T5719] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  161.002181][ T5719] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  161.487328][ T5719] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.344: bg 0: block 104: invalid block bitmap
[  161.575075][ T5745] loop0: detected capacity change from 0 to 256
[  161.591532][ T5719] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  161.621608][ T5719] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.344: invalid indirect mapped block 1 (level 1)
[  161.667621][ T5719] EXT4-fs (loop1): 1 truncate cleaned up
[  161.705260][ T5719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  162.100492][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  162.133884][   T27] audit: type=1804 audit(1785775644.649:5): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.350" name="/newroot/65/file0/file1" dev="overlay" ino=361 res=1 errno=0
[  163.484653][ T5777] loop1: detected capacity change from 0 to 1024
[  163.613154][ T5738] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  163.681017][ T5783] loop2: detected capacity change from 0 to 7
[  163.719860][ T4443] Dev loop2: unable to read RDB block 7
[  163.746876][ T4443]  loop2: unable to read partition table
[  163.763443][ T4443] loop2: partition table beyond EOD, truncated
[  163.790881][ T5783] Dev loop2: unable to read RDB block 7
[  163.812061][ T5783]  loop2: unable to read partition table
[  163.820756][ T5783] loop2: partition table beyond EOD, truncated
[  163.829507][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.850014][ T5783] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  163.857332][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.908397][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.936544][ T5738] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.959906][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.989561][ T5738] usb 3-1: config 0 descriptor??
[  164.429550][ T5738] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  164.453799][ T5738] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  164.455434][ T5802] loop2: detected capacity change from 0 to 7
[  164.506148][ T5802]  loop2:
[  164.510439][ T5804] syz.1.364 uses obsolete (PF_INET,SOCK_PACKET)
[  164.543266][ T5802] loop2: partition table partially beyond EOD, truncated
[  165.092210][    C1] plantronics 0003:047F:FFFF.0005: Event data for report 0 was too short (4043 vs 186)
[  165.325694][ T5207] usb 3-1: USB disconnect, device number 9
[  165.590389][ T5805] fido_id[5805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  165.730893][ T5826] loop1: detected capacity change from 0 to 128
[  165.953350][ T5738] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  166.157317][ T5738] usb 4-1: Using ep0 maxpacket: 32
[  166.174071][ T5738] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  166.182351][ T5738] usb 4-1: config 0 has no interface number 0
[  166.209324][ T5738] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  166.232585][ T5738] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  166.270698][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.302368][ T5738] usb 4-1: Product: syz
[  166.312572][ T5738] usb 4-1: Manufacturer: syz
[  166.322625][ T5738] usb 4-1: SerialNumber: syz
[  166.336454][ T5738] usb 4-1: config 0 descriptor??
[  166.364306][ T5738] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  166.391571][ T5738] em28xx 4-1:0.132: Video interface 132 found:
[  166.575502][ T5824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.623512][ T5824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.793555][ T5209] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  166.874411][ T5738] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  166.939819][ T5837] loop0: detected capacity change from 0 to 32768
[  167.000850][ T5209] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  167.030432][ T5837] JBD2: Ignoring recovery information on journal
[  167.074063][ T5209] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  167.161853][ T5837] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  167.226796][ T5209] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  167.254860][ T5209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.312737][ T5843] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  167.487936][ T5837] 
[  167.490338][ T5837] ======================================================
[  167.494653][ T5738] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  167.497362][ T5837] WARNING: possible circular locking dependency detected
[  167.497394][ T5837] syzkaller #0 Not tainted
[  167.517447][ T5837] ------------------------------------------------------
[  167.524521][ T5837] syz.0.372/5837 is trying to acquire lock:
[  167.530443][ T5837] ffff88807056bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_reflink+0x4cb/0x920
[  167.533106][ T5738] em28xx 4-1:0.132: failed to read eeprom (err=-5)
[  167.540683][ T5837] 
[  167.540683][ T5837] but task is already holding lock:
[  167.540692][ T5837] ffff88807056bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x4bc/0x920
[  167.563867][ T5837] 
[  167.563867][ T5837] which lock already depends on the new lock.
[  167.563867][ T5837] 
[  167.574321][ T5837] 
[  167.574321][ T5837] the existing dependency chain (in reverse order) is:
[  167.583399][ T5837] 
[  167.583399][ T5837] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  167.591266][ T5837]        down_read+0x42/0x2d0
[  167.595995][ T5837]        ocfs2_init_acl+0x307/0x770
[  167.601261][ T5837]        ocfs2_mknod+0x18e0/0x2580
[  167.601736][ T5738] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  167.606409][ T5837]        ocfs2_mkdir+0x1b6/0x4b0
[  167.606431][ T5837]        vfs_mkdir+0x386/0x570
[  167.606451][ T5837]        do_mkdirat+0x1d8/0x440
[  167.629923][ T5837]        __x64_sys_mkdirat+0x85/0x90
[  167.635252][ T5837]        do_syscall_64+0x4c/0xa0
[  167.640236][ T5837]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.646721][ T5837] 
[  167.646721][ T5837] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  167.655284][ T5837]        down_read+0x42/0x2d0
[  167.660001][ T5837]        ocfs2_start_trans+0x3a4/0x6f0
[  167.665511][ T5837]        ocfs2_reserve_suballoc_bits+0x7dd/0x4810
[  167.671977][ T5837]        ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  167.678885][ T5837]        ocfs2_extend_dir+0xd70/0x4c40
[  167.684404][ T5837]        ocfs2_prepare_dir_for_insert+0x3217/0x5600
[  167.691049][ T5837]        ocfs2_mknod+0xb46/0x2580
[  167.693481][ T5738] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  167.696097][ T5837]        ocfs2_mkdir+0x1b6/0x4b0
[  167.696122][ T5837]        vfs_mkdir+0x386/0x570
[  167.713166][ T5738] em28xx 4-1:0.132: analog set to bulk mode.
[  167.713662][ T5837]        do_mkdirat+0x1d8/0x440
[  167.724568][ T5837]        __x64_sys_mkdirat+0x85/0x90
[  167.729897][ T5837]        do_syscall_64+0x4c/0xa0
[  167.730981][ T5739] em28xx 4-1:0.132: Registering V4L2 extension
[  167.734867][ T5837]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.734899][ T5837] 
[  167.734899][ T5837] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  167.755043][ T5837]        lock_release+0x347/0x920
[  167.760129][ T5837]        up_write+0x29/0x410
[  167.764802][ T5837]        ocfs2_free_alloc_context+0x93/0x1a0
[  167.770852][ T5837]        ocfs2_write_begin_nolock+0x4504/0x4590
[  167.777146][ T5837]        ocfs2_write_begin+0x1b7/0x310
[  167.782653][ T5837]        generic_perform_write+0x2fa/0x5c0
[  167.788506][ T5837]        __generic_file_write_iter+0x148/0x2a0
[  167.794802][ T5837]        ocfs2_file_write_iter+0x1731/0x1fc0
[  167.800831][ T5837]        vfs_write+0x482/0x9a0
[  167.805650][ T5837]        ksys_write+0x14d/0x260
[  167.810543][ T5837]        do_syscall_64+0x4c/0xa0
[  167.815531][ T5837]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.821992][ T5837] 
[  167.821992][ T5837] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  167.830807][ T5837]        __lock_acquire+0x2d18/0x7c40
[  167.836231][ T5837]        lock_acquire+0x1bb/0x4a0
[  167.836529][ T5738] usb 4-1: USB disconnect, device number 6
[  167.841287][ T5837]        down_write+0x36/0x60
[  167.841308][ T5837]        ocfs2_reflink+0x4cb/0x920
[  167.841332][ T5837]        ocfs2_vfs_reflink+0x333/0x450
[  167.862446][ T5837]        ocfs2_reflink_ioctl+0x39c/0x440
[  167.868124][ T5837]        ocfs2_ioctl+0x584/0x7c0
[  167.873104][ T5837]        __se_sys_ioctl+0xfa/0x170
[  167.878264][ T5837]        do_syscall_64+0x4c/0xa0
[  167.883252][ T5837]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.889716][ T5837] 
[  167.889716][ T5837] other info that might help us debug this:
[  167.889716][ T5837] 
[  167.899958][ T5738] em28xx 4-1:0.132: Disconnecting em28xx
[  167.899975][ T5837] Chain exists of:
[  167.899975][ T5837]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  167.899975][ T5837] 
[  167.920918][ T5837]  Possible unsafe locking scenario:
[  167.920918][ T5837] 
[  167.928399][ T5837]        CPU0                    CPU1
[  167.933813][ T5837]        ----                    ----
[  167.939211][ T5837]   lock(&oi->ip_xattr_sem);
[  167.943857][ T5837]                                lock(&journal->j_trans_barrier);
[  167.951823][ T5837]                                lock(&oi->ip_xattr_sem);
[  167.958980][ T5837]   lock(&ocfs2_file_ip_alloc_sem_key);
[  167.964583][ T5837] 
[  167.964583][ T5837]  *** DEADLOCK ***
[  167.964583][ T5837] 
[  167.972761][ T5837] 4 locks held by syz.0.372/5837:
[  167.977812][ T5837]  #0: ffff88807eecc460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  167.987127][ T5837]  #1: ffff888054b93488 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  167.997822][ T5837]  #2: ffff88807056c2c8 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: ocfs2_vfs_reflink+0x2f3/0x450
[  168.008783][ T5837]  #3: ffff88807056bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x4bc/0x920
[  168.018593][ T5837] 
[  168.018593][ T5837] stack backtrace:
[  168.024623][ T5837] CPU: 1 PID: 5837 Comm: syz.0.372 Not tainted syzkaller #0
[  168.031955][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.042070][ T5837] Call Trace:
[  168.045388][ T5837]  <TASK>
[  168.048378][ T5837]  dump_stack_lvl+0x188/0x24e
[  168.053117][ T5837]  ? load_image+0x410/0x410
[  168.057661][ T5837]  ? show_regs_print_info+0x12/0x12
[  168.062920][ T5837]  ? print_circular_bug+0x12b/0x1a0
[  168.068188][ T5837]  check_noncircular+0x296/0x330
[  168.073195][ T5837]  ? add_chain_block+0x9b0/0x9b0
[  168.078190][ T5837]  ? lockdep_lock+0xf1/0x1f0
[  168.082838][ T5837]  ? lockdep_unlock+0x142/0x2e0
[  168.087739][ T5837]  ? _find_first_zero_bit+0xd2/0x100
[  168.093082][ T5837]  __lock_acquire+0x2d18/0x7c40
[  168.098003][ T5837]  ? ocfs2_file_lock+0x740/0xca0
[  168.102994][ T5837]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  168.109020][ T5837]  ? check_noncircular+0x189/0x330
[  168.114197][ T5837]  ? verify_lock_unused+0x140/0x140
[  168.119552][ T5837]  ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10
[  168.125762][ T5837]  lock_acquire+0x1bb/0x4a0
[  168.130315][ T5837]  ? ocfs2_reflink+0x4cb/0x920
[  168.135138][ T5837]  ? __might_sleep+0xd0/0xd0
[  168.139773][ T5837]  ? read_lock_is_recursive+0x10/0x10
[  168.145242][ T5837]  ? rwsem_write_trylock+0x135/0x1c0
[  168.150574][ T5837]  ? clear_nonspinnable+0x60/0x60
[  168.155830][ T5837]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  168.161967][ T5837]  down_write+0x36/0x60
[  168.166253][ T5837]  ? ocfs2_reflink+0x4cb/0x920
[  168.171072][ T5837]  ocfs2_reflink+0x4cb/0x920
[  168.175831][ T5837]  ? ocfs2_clear_ext_refcount+0x7a0/0x7a0
[  168.181651][ T5837]  ? memset+0x1e/0x40
[  168.185672][ T5837]  ? __dquot_initialize+0x21b/0xd00
[  168.190919][ T5837]  ? kasan_quarantine_put+0xd4/0x210
[  168.196283][ T5837]  ? rwsem_write_trylock+0x135/0x1c0
[  168.201618][ T5837]  ? dquot_initialize+0x20/0x20
[  168.206549][ T5837]  ? slab_free_freelist_hook+0x133/0x1b0
[  168.212231][ T5837]  ? HAS_UNMAPPED_ID+0x1c5/0x220
[  168.217217][ T5837]  ocfs2_vfs_reflink+0x333/0x450
[  168.222202][ T5837]  ocfs2_reflink_ioctl+0x39c/0x440
[  168.227360][ T5837]  ? ocfs2_add_refcount_flag+0xf10/0xf10
[  168.233039][ T5837]  ? __lock_acquire+0x7c40/0x7c40
[  168.238201][ T5837]  ? tomoyo_path_number_perm+0x5a4/0x650
[  168.243883][ T5837]  ? tomoyo_path_number_perm+0x205/0x650
[  168.249557][ T5837]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  168.255065][ T5837]  ? __might_fault+0xa6/0x120
[  168.259782][ T5837]  ? __might_fault+0xc2/0x120
[  168.264518][ T5837]  ? __might_fault+0xa6/0x120
[  168.269245][ T5837]  ocfs2_ioctl+0x584/0x7c0
[  168.273714][ T5837]  ? ocfs2_fileattr_set+0x800/0x800
[  168.278978][ T5837]  ? __fget_files+0x28/0x460
[  168.283617][ T5837]  ? bpf_lsm_file_ioctl+0x5/0x10
[  168.288700][ T5837]  ? security_file_ioctl+0x7c/0xa0
[  168.293855][ T5837]  ? ocfs2_fileattr_set+0x800/0x800
[  168.299127][ T5837]  __se_sys_ioctl+0xfa/0x170
[  168.303780][ T5837]  do_syscall_64+0x4c/0xa0
[  168.308244][ T5837]  ? clear_bhb_loop+0x60/0xb0
[  168.312969][ T5837]  ? clear_bhb_loop+0x60/0xb0
[  168.317715][ T5837]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.323684][ T5837] RIP: 0033:0x7f9609b9e019
[  168.328299][ T5837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.347955][ T5837] RSP: 002b:00007f960aac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.356418][ T5837] RAX: ffffffffffffffda RBX: 00007f9609e25fa0 RCX: 00007f9609b9e019
[  168.364437][ T5837] RDX: 00002000000001c0 RSI: 0000000040186f04 RDI: 0000000000000004
[  168.372458][ T5837] RBP: 00007f9609c3500c R08: 0000000000000000 R09: 0000000000000000
[  168.380476][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.388488][ T5837] R13: 00007f9609e26038 R14: 00007f9609e25fa0 R15: 00007ffcce7a6708
[  168.396513][ T5837]  </TASK>
[  168.615904][ T4275] ocfs2: Unmounting device (7,0) on (node local)
[  168.679052][ T5739] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  168.688081][ T5739] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  168.713050][ T5739] em28xx 4-1:0.132: No AC97 audio processor
[  168.725489][ T5739] usb 4-1: Decoder not found
[  168.730191][ T5739] em28xx 4-1:0.132: failed to create media graph
[  168.753538][ T5739] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  168.778418][ T5739] em28xx 4-1:0.132: Remote control support is not available for this card.
[  168.834936][ T5738] em28xx 4-1:0.132: Closing input extension
[  168.847176][ T5738] em28xx 4-1:0.132: Freeing device
[  168.970110][ T5214] usb 2-1: USB disconnect, device number 7