last executing test programs:

26.227278009s ago: executing program 3 (id=452):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022a100000083640000000b11330000b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)

22.538659887s ago: executing program 3 (id=470):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)

20.166401599s ago: executing program 3 (id=480):
r0 = socket(0x1, 0x1, 0x0)
close(r0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000004})

19.382653617s ago: executing program 3 (id=482):
r0 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x91, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==")
chown(&(0x7f0000000000)='./file0\x00', 0x0, r2)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})

18.98314934s ago: executing program 3 (id=485):
r0 = io_uring_setup(0x5062, &(0x7f0000000200)={0x0, 0xe55e, 0x40, 0x3, 0x1072})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

18.534332786s ago: executing program 3 (id=487):
r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x4874, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x1, 0xb, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

18.062588362s ago: executing program 32 (id=487):
r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x4874, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x1, 0xb, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

9.696912473s ago: executing program 0 (id=511):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000073, 0x0, 0xb}]})

9.003453347s ago: executing program 0 (id=515):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x4}]}}, &(0x7f0000000200)=""/196, 0x3e, 0xc4, 0x1}, 0x64)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000302000000020311e9ab60c3e4f165cf9e7137db38db85559b6506fbc1a730ee8bde29d262bf1a7e1b2e1a95373bf527332fdb48dfce8e710eca80d7723038b8d0bbf985bd92e4a4a01c10bcad032b079c430f8f56e6a04e94c24875f55b792d66b20d99ad09679aa563678db2ca8f76660546d0a07096304cad34a726ff8c"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312000000"], 0x0, 0x0}, 0x0)

6.489755745s ago: executing program 0 (id=526):
syz_mount_image$udf(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x800401, &(0x7f0000000d80)=ANY=[], 0x47, 0xc15, &(0x7f0000001940)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))
mknod$loop(&(0x7f00000033c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x201008, 0x0)

6.435470077s ago: executing program 2 (id=527):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x799f4f8729a3733e)
fcntl$setlease(r0, 0x400, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000002c0))
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00')
preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1, 0x0, 0x0)

5.536297178s ago: executing program 2 (id=528):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010})

5.452779941s ago: executing program 0 (id=529):
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

4.282974401s ago: executing program 2 (id=533):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001cc0)={0x44, &(0x7f0000001940)={0x40, 0xc, 0x4, "bee3b712"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b00)={0x44, &(0x7f0000001840)={0x0, 0x5, 0x4, "49c192b9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.198594555s ago: executing program 4 (id=534):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff})
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=r0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0xff, 0x1f4, &(0x7f0000000880)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000001)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0))

3.835913757s ago: executing program 4 (id=536):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3ff, 0x4)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1700", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

3.482486019s ago: executing program 4 (id=538):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f00000000c0)={0xffffffff, 0x8, 0x1, 0x7, 0x7, 0x7f})

3.293744116s ago: executing program 4 (id=539):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

3.274042487s ago: executing program 1 (id=540):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x41, 0x75e, &(0x7f0000001100)="$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")
chdir(&(0x7f0000000440)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x19)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x7f, 0x6, 0x401, 0x74, 0xf000000})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

2.87765612s ago: executing program 0 (id=541):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000090000000000", @ANYBLOB="3126e0dd9db049f4f81b9b14996e83b8f5665c5ecd61ee1064bc1a5917b3fcba93e20280dac03fd5d71515a12d02fbe9aad92cc1a4de96c10c038f1205b15b5d8599e1e5266b98682642ccf67db4b69a2713c9f4a6528b94a7621bc18099293d75ae7f98e6a2e2eca50a5bf2031e847d4f294918ff928b2ab955290722749558b988c7ca010ab6ba701fa29ffd5d408191376a2643385046fe22da8f2b4316a6995724d88bb46fab8413fa76be0726672b7aca7ff764c1fe13542a467fa9bdf817ecefaf", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0)
preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setresuid(0xffffffffffffffff, 0x0, 0xee01)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r3 = semget(0x0, 0x4, 0x39c)
semctl$SETALL(r3, 0x0, 0x11, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="24f101c5bf369a17a809b951fec464d9b7cfc7bccbd7f767a872a50bde9c1d2aa825e830fde502ec460d38555339c7e62142e26f7aba304888ec9dbb4e5720ecc16f6304d26eaece48e2d28ce66b4d7cb0d43cfa091de8b9da", @ANYRES16, @ANYBLOB, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000ffff02110840000802110000001000000002000000"], 0x1e)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x0, 0x2, 0xe0, 0x4}]}, 0x10)

2.757678574s ago: executing program 1 (id=542):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x80, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040030}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.905757274s ago: executing program 1 (id=543):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)

1.812200667s ago: executing program 5 (id=488):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$eJzs3T9sVPcdAPDfe3aLTYHalIFKlXpSUVu1lWUz0RqpxhiMDS4VLQxdjrN9gJuzD9nnKAODoyxImSJliDKgRMrmCXnLRJZIGbNkJDNSMmSJFAnlort7Z99758MX4sMBfT4S/t37/be/9373e8PxixOVO0truaW1XGElV164tXY693q5tL5cDHHWp205+6Lr8TlQvYiT2B+cq+cv/ufG6RA+WfziSbVarYaa/rCrsZbX335zb6E1bYpbL95q9Lt7b/vlfyGEE23zqukLIQwkr88l6WSSDoYQjoUQohDCjXtv38zt02wePi6ezT+du781fmp288FW5989CuH90m//dnv5qz/0jX/5l30aHgAAAAAAAAAAAAAAAACAl9z0tavX/z06Fh5FoX8zav++7nSSdvp+bHXf/L73vywAAAAAAAAAAAAAAAAAAAD8TO18/z8XHd/l+/9TSTrRoX31n92N88efOE96Y+ZfV6cujI4l579HbeVnkqyvz/WF4eb56p91Pv/9XKb97ue/t4/zvJrza447FKJ4JHUdxyMjIXyYHPx+Mjocl8prlb/eKq+vLO7bNF5a6fg3Tu9PRSc50D8V/2ec/z+Z6b/35///pu3dVLu+uX9vsVdaOv59Het99Gb0jPj/crve+Uy7FxF/nl86/v31vMHWChONBaAW/3f6977/pzL99yr+x0IIuag211xqBajtYWr5nfYrpKXj/4t6XmrpTP6Qne7/7zLxv5Dp/6DW/43sBxG7Sse/sY4PpGrs3P/D8d73/8VM/wcR/9r8N3z+dyUd/0ONzP5Ulfpfstv1fzrTf6/ifz1O5nksSr0DNqNGfqf/r460dPwH2sp3nv/irvb/lzLtX9TzX3Pc5vNfc/n/c9R4/mN32/HfCk+q1cGO9bq9/2cy7Xq9/k/U939tzpzo5aCvkPT9f7iel947D9V/dop/NRP/2Uz/zxH/jzs/he6o70oGmvHfWU++P9TI/8D+ryvp+P+qkRm31tio/6zv/6K99/+XM/0fxP6vNv+NuLejvirS8T/SsV4t/p938fl/JdOu9/EPYbT5BmjfvrCHdPyPdqxXv/8H9o7/XKZdr+P/p152DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPASmEzSoRDFI6nrOB4ZCeF8cn0yHI7mC4v5+VJ54bW1EKaS/Fw4Ht0ulecLpfzSSnmxmC+USuWFEC4k5SfCQLRWKlfyy4W7F7f7GozuFAurlflioRJCmE7yfxeONvuaX6osF+6GEC5tl/06Lq/evVNYyS8urf5jdHR0NMxsz2E4Kr5RKa5UGqM3SkOY3W47FLVMrl58eXsuR6L/l9dXVwqlev6Vljal8kKh1NJmLil7NwxHldX1lYVCpZgvlW83xztIE0k6NXPtv9eujLWV34wa6eSLnRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9Kj8b+/F0Lob1zFIYRclLyIkn8pDx8Xz+afzt3fGj81u/lg68ludQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4gR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs0j9KA0EUB+A3Y6Glx7BadjvbFUW0cEXwBHoMD6NH8RLewSJF2hQhkMxC2D+wTVJ9X/Ngfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3jqJvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//9HQIRk=")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

1.383498462s ago: executing program 0 (id=544):
syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000002, &(0x7f0000000100)=ANY=[@ANYBLOB="f7"], 0x1, 0x1200, &(0x7f0000003640)="$eJzs3U1rY1UYB/CnbzbN2E59G53ZeNCNbi7OLFy5KdKCTFCZmQgdQbhDUw2JSejNIhHRgjtXfhCX7gTxC/RbuCuC6GZWRqZJOplOZwQbGjv8fps85H/OPeeGcOGGc3IP3/vhy8Zuke3m3Zifm4vFTkS6nyLFfCzE0H68/d3WX9/f3r57c6NS2byV0tbGnevvppTWXv/l069/fOPX7qVPflr7eTkO1j87/OPGbwdXDq4e/n3ni3qR6kVqtbspT/fa7W5+r1lLO/WikaX0cbOWF7VUbxW1vUfy3Wa70+mnvLWzWu7s1Yoi5a1+atT6qdtO30ZE/nleb6Usy9JqOSidoW91IeLDUf1cDAaDwUqU41I8H6uxFpdjPV6IF+OleDleiSvxarwWV49aHR9g/8zTBwAAAAAAAAAAAAAAAAAAAOL+0W7+wWDpv+3/BwAAAAAAAAAAAAAAAAAAAKbgsf3/K+PE/n8AAAAAAAAAAAAAAAAAAAA4L57/DwAAAAAAAAAAAAAAAAAAALN3e/vuzY1KZfNWSqWI3/d71V51+DrMtz6obL6Tjiw+7PVnr1ddOM6vD/P0aL4c5VF+49S8FG+9OcwfZO9/VDmRX4udU+b7zfb0PwMAAAB41mXp2HrE+J/9Ht7fZ9lkPvYgH1YTvw+cuH9fjGuLj493ylvMUNH/qpE3m7W9pxUxP9F4edTzX3tNr7g8GvIJbUpPji5GsRQR0zrg0uxP52Qx/q79X+ZzwYu58xlrBhcjzt3ERR4AAAAAAAAAAIAL5KnLAAejhbdnXE4YsTLr0wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mEHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABLBQAA//+e8H3L")
truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8)

1.084063343s ago: executing program 1 (id=545):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x2b34988d}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.062102183s ago: executing program 2 (id=546):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xfffffffffffffffd, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x0, 0x8, 0x5, 0x29, 0x9, "26db3fb8"}, 0x5})
close_range(r0, 0xffffffffffffffff, 0x0)

876.3466ms ago: executing program 4 (id=547):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfc}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

507.684173ms ago: executing program 1 (id=548):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x2244843, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x42, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2)

507.429733ms ago: executing program 2 (id=549):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}], 0x3)

147.680515ms ago: executing program 4 (id=550):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000100)={[{@nodiscard}, {@noalign}]}, 0x1, 0x9808, &(0x7f000001c700)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2029c1b, 0x0, 0x4, 0x0, &(0x7f00000000c0))
chdir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

100.876547ms ago: executing program 1 (id=551):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000080)={[{@test_dummy_encryption}, {@nouid32}, {@abort}, {@journal_dev={'journal_dev', 0x3d, 0xa}}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x459, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x180)
rename(&(0x7f00000062c0)='./file0/file0\x00', &(0x7f0000006280)='./file1\x00')

0s ago: executing program 2 (id=552):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, 0x0)

kernel console output (not intermixed with test programs):

 IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.413745][ T4287] Bluetooth: hci1: command 0x0419 tx timeout
[   77.450249][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.475579][ T4288] Bluetooth: hci4: command 0x0419 tx timeout
[   77.490869][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.536073][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.545260][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.554549][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.585109][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.592986][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.638274][ T4372] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET)
[   77.652746][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.671463][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.682345][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.698139][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.917892][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.931198][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.952941][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.028475][ T4381] loop3: detected capacity change from 0 to 128
[   78.042160][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.068503][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.082615][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.468697][ T4393] capability: warning: `syz.2.14' uses 32-bit capabilities (legacy support in use)
[   78.561772][ T4396] loop3: detected capacity change from 0 to 64
[   78.819800][ T4404] loop2: detected capacity change from 0 to 1024
[   78.877363][ T4404] =======================================================
[   78.877363][ T4404] WARNING: The mand mount option has been deprecated and
[   78.877363][ T4404]          and is ignored by this kernel. Remove the mand
[   78.877363][ T4404]          option from the mount to silence this warning.
[   78.877363][ T4404] =======================================================
[   79.055620][ T4404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   79.270620][ T4269] EXT4-fs (loop2): unmounting filesystem.
[   79.568105][ T4427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.629608][ T4425] loop0: detected capacity change from 0 to 4096
[   79.735098][ T4427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.772933][ T4425] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   79.820850][ T4435] loop1: detected capacity change from 0 to 512
[   79.870434][ T4425] ntfs3: loop0: Failed to load $Extend.
[   79.885569][ T4435] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.915244][ T4435] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   79.928735][ T4427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.967905][ T4437] loop3: detected capacity change from 0 to 128
[   79.986982][ T4435] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   80.020059][ T4435] EXT4-fs (loop1): 1 truncate cleaned up
[   80.058152][ T4437] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   80.082803][ T4435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   80.106647][ T4437] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   80.162446][ T4427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.362350][ T4271] EXT4-fs (loop1): unmounting filesystem.
[   80.479544][ T4448] loop0: detected capacity change from 0 to 64
[   80.499433][ T4277] EXT4-fs (loop3): unmounting filesystem.
[   80.532681][ T4427] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.584086][ T4448] hfs: unable to locate alternate MDB
[   80.590249][ T4448] hfs: continuing without an alternate MDB
[   80.590541][ T4451] loop1: detected capacity change from 0 to 256
[   80.620110][ T4427] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.735911][ T4448] hfs: walked past end of dir
[   80.748378][ T4427] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.792395][   T56] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 4
[   80.818563][ T4427] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.048016][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'.
[   81.072934][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'.
[   81.090735][ T4465] Zero length message leads to an empty skb
[   81.169020][ T4471] Illegal XDP return value 3825029270 on prog  (id 2) dev syz_tun, expect packet loss!
[   81.478786][ T4483] netlink: 72 bytes leftover after parsing attributes in process `syz.4.43'.
[   81.754290][ T4490] loop2: detected capacity change from 0 to 4096
[   81.792592][ T4490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   82.000103][ T4498] ALSA: mixer_oss: invalid OSS volume 'dev/vbi#'
[   82.141287][ T4269] EXT4-fs (loop2): unmounting filesystem.
[   82.384821][ T4283] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   82.575946][ T4283] usb 5-1: too many configurations: 9, using maximum allowed: 8
[   82.592064][ T4509] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   82.602790][ T4283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.628020][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.659225][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0
[   82.690088][ T4283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.719445][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.750897][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0
[   82.781782][ T4283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.811659][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.841701][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0
[   82.870384][ T4283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.904898][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   82.931934][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0
[   82.966273][ T4283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   82.983244][ T4516] loop2: detected capacity change from 0 to 1024
[   82.996880][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.015546][ T4516] EXT4-fs: inline encryption not supported
[   83.021552][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0
[   83.044800][ T4283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.075216][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.104285][ T4516] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   83.113716][ T4516] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.137770][ T4516] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.56: lblock 0 mapped to illegal pblock 0 (length 1)
[   83.174065][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0
[   83.238813][ T4516] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   83.251331][ T4283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.256506][ T4516] EXT4-fs (loop2): This should not happen!! Data will be lost
[   83.256506][ T4516] 
[   83.271177][   T26] audit: type=1800 audit(1775097884.652:2): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.56" name="file1" dev="loop2" ino=15 res=0 errno=0
[   83.278519][ T4520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'.
[   83.315394][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.349847][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0
[   83.371063][ T4283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   83.391875][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   83.403222][ T4526] loop0: detected capacity change from 0 to 64
[   83.414678][ T4524] device team_slave_0 entered promiscuous mode
[   83.421180][ T4524] device team_slave_1 entered promiscuous mode
[   83.429618][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0
[   83.460980][ T4283] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   83.481638][ T4524] device macvtap1 entered promiscuous mode
[   83.486925][ T4283] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   83.503838][ T4269] EXT4-fs (loop2): unmounting filesystem.
[   83.509802][ T4524] device team0 entered promiscuous mode
[   83.515117][ T4283] usb 5-1: Product: syz
[   83.527190][ T4283] usb 5-1: Manufacturer: syz
[   83.541040][ T4524] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   83.554674][ T4283] usb 5-1: SerialNumber: syz
[   83.580378][ T4283] usb 5-1: config 0 descriptor??
[   83.612803][ T4283] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[   83.644986][ T4524] device team0 left promiscuous mode
[   83.670388][ T4524] device team_slave_0 left promiscuous mode
[   83.676440][ T4524] device team_slave_1 left promiscuous mode
[   83.921411][ T4326] usb 5-1: USB disconnect, device number 2
[   83.938534][ T4326] yurex 5-1:0.0: USB YUREX #0 now disconnected
[   84.212909][ T4544] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   84.695489][ T4558] device wg2 entered promiscuous mode
[   85.513782][ T4585] loop4: detected capacity change from 0 to 2048
[   85.595841][ T4587] loop3: detected capacity change from 0 to 64
[   85.660515][ T4587] capability: warning: `syz.3.82' uses deprecated v2 capabilities in a way that may be insecure
[   86.229900][ T4602] loop2: detected capacity change from 0 to 512
[   86.297317][ T4602] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.88: invalid indirect mapped block 256 (level 2)
[   86.347481][ T4602] EXT4-fs (loop2): 2 truncates cleaned up
[   86.364764][ T4602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   86.474049][ T4602] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.88: bg 0: block 5: invalid block bitmap
[   86.484862][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   86.520645][   T14] cfg80211: failed to load regulatory.db
[   86.530448][ T4602] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   86.574839][ T4602] EXT4-fs (loop2): This should not happen!! Data will be lost
[   86.574839][ T4602] 
[   86.614872][ T4602] EXT4-fs (loop2): Total free blocks count 0
[   86.621184][ T4602] EXT4-fs (loop2): Free/Dirty block details
[   86.641855][ T4602] EXT4-fs (loop2): free_blocks=0
[   86.651990][ T4602] EXT4-fs (loop2): dirty_blocks=2
[   86.660675][ T4602] EXT4-fs (loop2): Block reservation details
[   86.674861][ T4602] EXT4-fs (loop2): i_reserved_data_blocks=2
[   86.735518][   T46] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[   86.748840][ T4317] usb 5-1: Using ep0 maxpacket: 16
[   86.761437][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.814234][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.879969][ T4317] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[   86.903354][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.945028][ T4317] usb 5-1: config 0 descriptor??
[   86.961511][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.999139][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.025658][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.120792][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   87.147488][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.159264][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.405967][ T4317] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0
[   87.590178][ T4317] corsair 0003:1B1C:1B02.0001: Read invalid backlight brightness: bf.
[   87.850695][ T4272] usb 5-1: USB disconnect, device number 3
[   87.929283][ T4619] fido_id[4619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   88.044689][   T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   88.234702][   T14] usb 2-1: Using ep0 maxpacket: 32
[   88.242986][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.284653][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.294493][   T14] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   88.334557][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.373250][   T14] usb 2-1: config 0 descriptor??
[   88.825248][   T14] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   89.063804][ T4637] loop4: detected capacity change from 0 to 512
[   89.078659][ T4637] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   89.095646][ T4637] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.100: invalid indirect mapped block 256 (level 2)
[   89.121277][ T4637] EXT4-fs (loop4): 2 truncates cleaned up
[   89.121460][ T4637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   89.158914][   T14] usb 2-1: USB disconnect, device number 2
[   89.182925][ T4637] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.100: bg 0: block 5: invalid block bitmap
[   89.192247][ T4634] fido_id[4634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[   89.209831][ T4637] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28
[   89.209904][ T4637] EXT4-fs (loop4): This should not happen!! Data will be lost
[   89.209904][ T4637] 
[   89.209921][ T4637] EXT4-fs (loop4): Total free blocks count 0
[   89.209935][ T4637] EXT4-fs (loop4): Free/Dirty block details
[   89.209961][ T4637] EXT4-fs (loop4): free_blocks=0
[   89.209989][ T4637] EXT4-fs (loop4): dirty_blocks=5
[   89.210003][ T4637] EXT4-fs (loop4): Block reservation details
[   89.210016][ T4637] EXT4-fs (loop4): i_reserved_data_blocks=5
[   89.390917][ T4278] EXT4-fs (loop4): unmounting filesystem.
[   90.038913][ T4648] loop0: detected capacity change from 0 to 32768
[   90.049897][ T4272] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   90.099298][ T4648] XFS (loop0): Mounting V5 Filesystem
[   90.127338][ T4653] loop2: detected capacity change from 0 to 4096
[   90.180047][ T4648] XFS (loop0): Ending clean mount
[   90.199635][ T4648] XFS (loop0): Quotacheck needed: Please wait.
[   90.238475][ T4272] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   90.249887][ T4648] XFS (loop0): Quotacheck: Done.
[   90.261285][ T4648] XFS (loop0): Unmounting Filesystem
[   90.278680][ T4272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.291204][ T4272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.303920][ T4272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   90.322467][ T4272] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   90.332297][ T4272] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   90.340910][ T4272] usb 5-1: Manufacturer: syz
[   90.358169][ T4272] usb 5-1: config 0 descriptor??
[   90.551426][ T4269] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[   90.568654][ T4269] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   90.780333][ T4272] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[   90.805331][ T4272] appleir 0003:05AC:8243.0003: No inputs registered, leaving
[   90.836973][ T4272] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[   91.091654][ T4283] usb 5-1: USB disconnect, device number 4
[   91.984803][ T4684] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   92.102933][ T4686] loop1: detected capacity change from 0 to 2048
[   92.141335][ T4686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.214811][ T4326] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.405393][ T4326] usb 1-1: too many configurations: 9, using maximum allowed: 8
[   92.416915][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   92.435940][ T4326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   92.464640][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.476008][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   92.494686][ T4326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   92.514767][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.532958][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   92.552337][ T4326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   92.573518][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.588778][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   92.608152][ T4326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   92.629300][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.646470][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   92.664511][ T4326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   92.684632][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.702918][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   92.721601][ T4326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   92.742940][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.758783][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   92.778353][ T4326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   92.789575][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.798502][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   92.811756][ T4326] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   92.823133][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.832662][ T4326] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   92.842278][ T4326] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   92.858612][ T4326] usb 1-1: Product: syz
[   92.862982][ T4326] usb 1-1: Manufacturer: syz
[   92.868862][ T4326] usb 1-1: SerialNumber: syz
[   92.889267][ T4326] usb 1-1: config 0 descriptor??
[   92.921565][ T4326] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[   92.973201][ T4688] loop1: detected capacity change from 0 to 32768
[   93.038029][ T4688] XFS (loop1): Mounting V5 Filesystem
[   93.126236][ T4688] XFS (loop1): Ending clean mount
[   93.175131][ T4688] XFS (loop1): Quotacheck needed: Please wait.
[   93.210546][ T4326] usb 1-1: USB disconnect, device number 2
[   93.230816][ T4326] yurex 1-1:0.0: USB YUREX #0 now disconnected
[   93.281011][ T4688] XFS (loop1): Quotacheck: Done.
[   93.430454][ T4271] XFS (loop1): Unmounting Filesystem
[   93.734880][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[   93.754184][ T4698] netlink: 'syz.1.117': attribute type 30 has an invalid length.
[   93.773225][ T4698] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.782522][ T4698] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.791321][ T4698] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.800372][ T4698] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.841115][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[   93.889895][ T4700] loop3: detected capacity change from 0 to 128
[   93.922289][ T4698] netlink: 'syz.1.117': attribute type 30 has an invalid length.
[   93.966848][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.182319][ T4708] netlink: 32 bytes leftover after parsing attributes in process `syz.0.121'.
[   94.211941][ T4708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'.
[   94.358633][ T4715] loop2: detected capacity change from 0 to 128
[   94.403181][ T4717] netlink: 52 bytes leftover after parsing attributes in process `syz.1.126'.
[   94.444493][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.453041][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.521684][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.588355][ T4719] loop4: detected capacity change from 0 to 4096
[   94.658799][ T4719] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   95.017376][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.064028][ T4733] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.091928][ T4733] bond0: (slave rose0): Enslaving as an active interface with an up link
[   95.118588][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   95.286441][ T4746] loop2: detected capacity change from 0 to 512
[   95.323384][ T4746] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   95.427947][ T4752] loop0: detected capacity change from 0 to 512
[   95.616682][ T4752] EXT4-fs (loop0): 1 truncate cleaned up
[   95.622357][ T4752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   95.729585][   T46] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   95.816018][ T4270] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   95.854664][ T4272] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.939164][ T4270] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set
[   95.990570][ T4270] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   96.010961][ T4270] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0)
[   96.034970][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.067542][ T4272] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   96.088792][ T4272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.121719][ T4272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.174562][ T4272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   96.207225][ T4270] EXT4-fs (loop0): unmounting filesystem.
[   96.214036][ T4272] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   96.248495][ T4272] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   96.302080][ T4272] usb 2-1: Manufacturer: syz
[   96.323494][ T4272] usb 2-1: config 0 descriptor??
[   96.497117][ T4779] netlink: 32 bytes leftover after parsing attributes in process `syz.2.145'.
[   96.600057][ T4754] loop3: detected capacity change from 0 to 32768
[   96.643644][ T4754] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.140 (4754)
[   96.654165][ T4782] input: syz0 as /devices/virtual/input/input5
[   96.773039][ T4272] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[   96.806074][ T4754] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.816466][ T4272] appleir 0003:05AC:8243.0004: No inputs registered, leaving
[   96.841976][ T4754] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   96.863822][ T4272] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[   96.905279][ T4754] BTRFS info (device loop3): turning on sync discard
[   96.953418][ T4754] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   97.029625][ T4754] BTRFS info (device loop3): use zstd compression, level 3
[   97.067657][   T14] usb 2-1: USB disconnect, device number 3
[   97.080492][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.099207][ T4754] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   97.145355][ T4754] BTRFS info (device loop3): trying to use backup root at mount time
[   97.155036][ T4754] BTRFS info (device loop3): enabling auto defrag
[   97.161539][ T4754] BTRFS info (device loop3): using free space tree
[   97.234079][ T4787] fido_id[4787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   97.387803][   T11] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   97.409807][ T4754] BTRFS error (device loop3): failed to load root extent
[   97.417983][ T4754] BTRFS warning (device loop3): try to load backup roots slot 1
[   97.426182][ T4325] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   97.439481][ T4754] BTRFS warning (device loop3): couldn't read tree root
[   97.447021][ T4754] BTRFS warning (device loop3): try to load backup roots slot 2
[   97.455396][ T4754] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[   97.467076][ T4754] BTRFS warning (device loop3): couldn't read tree root
[   97.479068][ T4754] BTRFS warning (device loop3): try to load backup roots slot 3
[   97.497828][ T4816] loop4: detected capacity change from 0 to 1024
[   97.535481][ T4754] BTRFS info (device loop3): enabling ssd optimizations
[   97.547732][ T4754] BTRFS info (device loop3): rebuilding free space tree
[   97.565826][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.710866][ T4754] BTRFS info (device loop3): checking UUID tree
[   97.942882][ T4824] loop1: detected capacity change from 0 to 8192
[   97.974251][ T4277] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.029332][ T4824] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.114921][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.365592][ T4844] xt_hashlimit: max too large, truncated to 1048576
[   98.378074][ T4840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.387202][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.451237][   T33] hfsplus: b-tree write err: -5, ino 25
[   98.471721][   T33] hfsplus: b-tree write err: -5, ino 4
[   98.508334][   T33] hfsplus: b-tree write err: -5, ino 2
[   98.514541][   T33] hfsplus: b-tree write err: -5, ino 20
[   98.679430][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.007310][ T4858] device veth0 entered promiscuous mode
[   99.045087][ T4868] loop2: detected capacity change from 0 to 512
[   99.063860][ T4857] device veth0 left promiscuous mode
[   99.110543][ T4870] loop0: detected capacity change from 0 to 128
[   99.173445][ T3597] net_ratelimit: 1 callbacks suppressed
[   99.173461][ T3597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.214641][ T4833] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.242023][ T4870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   99.270839][ T4870] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.331498][ T4876] loop4: detected capacity change from 0 to 512
[   99.369094][ T4870] EXT4-fs (loop0): shut down requested (2)
[   99.400689][ T4870] EXT4-fs (loop0): resizing filesystem from 64 to 1 blocks
[   99.410088][ T4876] EXT4-fs: Ignoring removed oldalloc option
[   99.430157][ T4833] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   99.450764][ T4870] EXT4-fs warning (device loop0): ext4_resize_fs:2051: can't shrink FS - resize aborted
[   99.478747][ T4833] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   99.497553][ T4879] device macvtap1 entered promiscuous mode
[   99.515096][ T4876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   99.524819][ T4833] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   99.564499][ T4833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.566252][ T4876] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.162: iget: bad i_size value: 38620345925642
[   99.593232][ T4881] device macvtap2 entered promiscuous mode
[   99.616176][ T4863] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   99.641165][ T4876] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.162: couldn't read orphan inode 15 (err -117)
[   99.684389][ T4876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   99.761404][ T4270] EXT4-fs (loop0): unmounting filesystem.
[   99.906764][ T4868] EXT4-fs (loop2): Test dummy encryption mode enabled
[   99.913820][ T4868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   99.970119][ T4868] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  100.194758][ T3597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.214380][ T4314] usb 4-1: USB disconnect, device number 2
[  100.375420][ T4325] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap
[  100.418846][ T4325] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 640 with error 28
[  100.451963][ T4325] EXT4-fs (loop4): This should not happen!! Data will be lost
[  100.451963][ T4325] 
[  100.496082][ T4325] EXT4-fs (loop4): Total free blocks count 0
[  100.502125][ T4325] EXT4-fs (loop4): Free/Dirty block details
[  100.531306][ T4325] EXT4-fs (loop4): free_blocks=0
[  100.539100][ T4325] EXT4-fs (loop4): dirty_blocks=640
[  100.544432][ T4325] EXT4-fs (loop4): Block reservation details
[  100.560593][ T4325] EXT4-fs (loop4): i_reserved_data_blocks=640
[  100.625895][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  100.667776][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.790624][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.823447][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'.
[  100.887210][ T4919] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.895741][ T4919] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.904434][ T4919] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.912879][ T4919] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.015011][ T4919] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.023480][ T4919] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.032134][ T4919] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.040582][ T4919] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.083884][ T4924] loop1: detected capacity change from 0 to 256
[  101.097794][ T4924] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.120588][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.144471][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.163215][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.265196][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.422810][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.714895][ T4835] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.715203][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.914645][ T3597] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.943825][ T4835] usb 1-1: Using ep0 maxpacket: 16
[  101.958419][ T4835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.981594][ T4835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.006913][ T4835] usb 1-1: config 0 interface 0 has no altsetting 0
[  102.013580][ T4835] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  102.028872][ T4835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.057529][ T4835] usb 1-1: config 0 descriptor??
[  102.088937][ T4931] loop3: detected capacity change from 0 to 32768
[  102.163310][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.181038][ T3597] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  102.190779][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.217032][ T3597] usb 2-1: config 0 descriptor??
[  102.344630][ T4833] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  102.469689][ T4929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.487431][ T4929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.504215][ T4835] hid (null): unknown global tag 0xc
[  102.545106][ T4833] usb 5-1: Using ep0 maxpacket: 8
[  102.562846][ T4833] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  102.574692][ T4833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.582998][ T4833] usb 5-1: Product: syz
[  102.591100][ T4833] usb 5-1: Manufacturer: syz
[  102.596147][ T4833] usb 5-1: SerialNumber: syz
[  102.603188][ T4833] usb 5-1: config 0 descriptor??
[  102.644424][ T3597] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  102.661080][ T3597] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input6
[  102.716982][ T4837] usb 1-1: USB disconnect, device number 3
[  102.786202][ T3597] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  102.817353][ T4833] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  103.079980][ T4958] loop2: detected capacity change from 0 to 64
[  103.329951][ T4314] usb 2-1: USB disconnect, device number 4
[  103.420737][ T4833] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  103.445510][ T4833] usb 5-1: USB disconnect, device number 5
[  104.062521][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'.
[  104.122610][ T4988] loop4: detected capacity change from 0 to 256
[  104.358505][ T4835] net_ratelimit: 2 callbacks suppressed
[  104.358520][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.485593][ T4997] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  104.754844][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.772111][ T5009] Bluetooth: MGMT ver 1.22
[  105.076103][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.099800][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.155449][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.164326][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.179687][ T5024] loop4: detected capacity change from 0 to 512
[  105.253975][ T5024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  105.273083][ T5024] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.350960][ T5030] device veth0 entered promiscuous mode
[  105.358842][ T5029] device veth0 left promiscuous mode
[  105.377870][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  105.408691][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.359896][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.445413][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.862694][ T5050] loop4: detected capacity change from 0 to 1024
[  106.872784][ T5052] loop1: detected capacity change from 0 to 512
[  106.880379][ T5052] EXT4-fs: Ignoring removed oldalloc option
[  106.891974][ T5052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  106.944845][ T5052] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.222: iget: bad i_size value: 38620345925642
[  106.973567][ T5052] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.222: couldn't read orphan inode 15 (err -117)
[  106.990615][ T5052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  107.000512][ T4287] Bluetooth: hci4: command 0x2016 tx timeout
[  107.009928][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.339201][ T5061] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  107.447702][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'.
[  107.463021][ T5063] device gtp0 entered promiscuous mode
[  107.998688][ T5015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  108.235029][ T5065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.437243][ T5070] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:11: bg 0: block 5: invalid block bitmap
[  108.678319][ T5081] loop0: detected capacity change from 0 to 512
[  108.693951][ T5070] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  108.712791][ T5081] EXT4-fs (loop0): 1 truncate cleaned up
[  108.719343][ T5081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  108.733027][ T5070] EXT4-fs (loop1): This should not happen!! Data will be lost
[  108.733027][ T5070] 
[  108.757330][ T5070] EXT4-fs (loop1): Total free blocks count 0
[  108.763370][ T5070] EXT4-fs (loop1): Free/Dirty block details
[  108.861540][ T5085] netlink: 'syz.3.235': attribute type 2 has an invalid length.
[  109.104813][ T5070] EXT4-fs (loop1): free_blocks=0
[  109.114937][ T5070] EXT4-fs (loop1): dirty_blocks=9232
[  109.120281][ T5070] EXT4-fs (loop1): Block reservation details
[  109.152777][ T5088] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.234: bg 0: block 465: padding at end of block bitmap is not set
[  109.178299][ T5070] EXT4-fs (loop1): i_reserved_data_blocks=9232
[  109.186806][ T5072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.228222][ T5070] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  109.247462][ T5088] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  109.390624][ T4270] EXT4-fs (loop0): unmounting filesystem.
[  109.557149][ T3597] net_ratelimit: 3 callbacks suppressed
[  109.557163][ T3597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.061893][ T5102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.546779][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[  110.564753][ T5119] netlink: 'syz.2.244': attribute type 30 has an invalid length.
[  110.599767][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.630775][ T5119] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.639588][ T5119] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.648406][ T5119] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.657260][ T5119] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.805017][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[  110.829664][ T5119] netlink: 'syz.2.244': attribute type 30 has an invalid length.
[  111.235119][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.365085][ T5123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.635349][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.008472][ T5131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.280790][ T5126] loop0: detected capacity change from 0 to 40427
[  112.298703][ T5126] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  112.308411][ T5126] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  112.323013][ T5126] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  112.333284][ T5126] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  112.351378][ T5126] F2FS-fs (loop0): invalid crc value
[  112.410170][ T5126] F2FS-fs (loop0): Found nat_bits in checkpoint
[  112.611337][ T5126] F2FS-fs (loop0): Start checkpoint disabled!
[  112.679583][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.707538][ T5156] loop3: detected capacity change from 0 to 512
[  112.714055][ T5126] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  112.736348][ T5157] netlink: 200 bytes leftover after parsing attributes in process `syz.2.257'.
[  112.745677][ T5126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  112.796581][ T5156] EXT4-fs (loop3): Test dummy encryption mode enabled
[  112.803435][ T5156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  112.906077][ T5156] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  113.379265][ T5158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.600070][ T5090] kworker/u4:12: attempt to access beyond end of device
[  113.600070][ T5090] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  113.629137][ T5171] netlink: 'syz.3.262': attribute type 25 has an invalid length.
[  113.676981][ T5171] netlink: 'syz.3.262': attribute type 7 has an invalid length.
[  113.716199][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.748085][ T4317] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  113.765382][ T5171] netlink: 'syz.3.262': attribute type 3 has an invalid length.
[  114.241725][ T5173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.302498][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.376452][ T4317] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  114.400996][ T4317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.429921][ T4317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  114.449193][ T4317] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.481285][ T4317] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  114.515557][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  114.538800][ T4317] usb 3-1: Product: syz
[  114.542995][ T4317] usb 3-1: Manufacturer: syz
[  114.583700][ T4317] cdc_wdm 3-1:1.0: skipping garbage
[  114.589457][ T4317] cdc_wdm 3-1:1.0: skipping garbage
[  114.610566][ T4317] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  114.622535][ T4317] cdc_wdm 3-1:1.0: Unknown control protocol
[  114.634241][ T5191] loop0: detected capacity change from 0 to 1024
[  114.749584][ T5191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  114.758320][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.996864][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  115.003668][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  115.010337][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  115.016976][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  115.034610][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  115.054606][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  115.074603][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  115.094601][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  115.107079][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  115.113730][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  115.121725][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  115.127226][ T5201] loop3: detected capacity change from 0 to 8192
[  115.128340][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  115.144573][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  115.147512][ T5201] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.151197][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  115.168019][ T4317] usb 3-1: USB disconnect, device number 2
[  115.184618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  115.277441][ T4270] EXT4-fs (loop0): unmounting filesystem.
[  115.344989][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.795082][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.227739][ T4314] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  116.644981][ T4314] usb 5-1: Using ep0 maxpacket: 8
[  116.658292][ T4314] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  116.764797][ T4314] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  116.804793][ T4314] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  116.835241][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.846138][ T4314] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64
[  116.868162][ T5234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.885819][ T4314] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  116.902964][ T4314] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  116.912759][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.938982][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.962113][ T4314] usbtmc 5-1:16.0: bulk endpoints not found
[  117.281894][ T5247] loop0: detected capacity change from 0 to 4096
[  117.304737][ T5247] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  117.402404][ T5247] ntfs3: loop0: Failed to load $Extend.
[  117.484769][ T5247] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  117.765846][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'.
[  117.862184][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.878602][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.892578][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.901695][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.910445][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.260938][ T5284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'.
[  118.436780][ T4839] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  118.537462][ T4314] hid-generic 0005:9C3F:0006.0007: item fetching failed at offset 0/2
[  118.571076][ T4314] hid-generic: probe of 0005:9C3F:0006.0007 failed with error -22
[  118.644697][ T4839] usb 1-1: Using ep0 maxpacket: 32
[  118.651527][ T4839] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  118.666511][ T5280] loop1: detected capacity change from 0 to 32768
[  118.676405][ T4839] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  118.692129][ T5280] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.296 (5280)
[  118.707758][ T4839] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  118.727742][ T4839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  118.748388][ T5280] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  118.765882][ T4839] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  118.779508][ T5280] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  118.801301][ T4839] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  118.819257][ T5280] BTRFS info (device loop1): force zlib compression, level 3
[  118.835759][ T5280] BTRFS info (device loop1): force clearing of disk cache
[  118.845257][ T4839] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  118.878508][ T5280] BTRFS info (device loop1): setting nodatasum
[  118.892150][ T5280] BTRFS info (device loop1): allowing degraded mounts
[  118.893144][ T4839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.907186][ T5280] BTRFS info (device loop1): enabling disk space caching
[  118.907322][ T5280] BTRFS info (device loop1): disk space caching is enabled
[  118.968333][ T4839] usb 1-1: config 0 descriptor??
[  118.998711][ T4283] usb 5-1: USB disconnect, device number 6
[  119.160447][ T5280] BTRFS info (device loop1): rebuilding free space tree
[  119.183299][ T4839] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  119.236652][ T5280] BTRFS info (device loop1): disabling free space tree
[  119.255015][ T5280] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  119.289338][ T5280] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  119.390482][ T4839] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  119.414394][ T4314] usb 1-1: USB disconnect, device number 4
[  119.441286][ T4314] usblp0: removed
[  119.530785][ T4271] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  119.594711][ T4839] usb 4-1: Using ep0 maxpacket: 8
[  119.614232][ T4839] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  119.722988][ T4839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.808994][ T4839] usb 4-1: Product: syz
[  119.836658][ T4839] usb 4-1: Manufacturer: syz
[  119.883597][ T4839] usb 4-1: SerialNumber: syz
[  119.991455][ T4839] usb 4-1: config 0 descriptor??
[  120.132011][ T4839] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  120.761811][ T5330] net_ratelimit: 1022 callbacks suppressed
[  120.761838][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.026898][ T5321] loop4: detected capacity change from 0 to 32768
[  121.107525][ T5321] XFS (loop4): Mounting V5 Filesystem
[  121.206752][ T4314] usb 4-1: USB disconnect, device number 3
[  121.226639][ T5321] XFS (loop4): Ending clean mount
[  121.267959][   T14] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[  121.309194][   T14] XFS (loop4): Unmount and run xfs_repair
[  121.344483][   T14] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  121.352608][   T14] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  121.363149][   T14] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  121.411388][   T14] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  121.450120][   T14] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  121.469774][   T14] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  121.504360][   T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  121.518612][   T14] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  121.539977][   T14] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  121.580180][ T5321] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[  121.593733][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.616736][ T5321] XFS (loop4): Failed to initialize disk quotas.
[  121.676693][ T5321] syz.4.307 (5321) used greatest stack depth: 19888 bytes left
[  121.734745][   T14] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[  121.795778][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.817077][ T4278] XFS (loop4): Unmounting Filesystem
[  121.937102][   T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  121.954672][   T14] usb 3-1: config 0 has no interface number 0
[  121.961011][   T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  122.012719][   T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  122.064452][   T14] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  122.080560][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.105360][   T14] usb 3-1: config 0 descriptor??
[  122.121043][ T5345] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  122.142630][   T14] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  122.198570][ T5357] loop0: detected capacity change from 0 to 32768
[  122.254069][ T5357] (syz.0.316,5357,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  122.292747][ T5357] (syz.0.316,5357,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  122.413006][ T5330] usb 3-1: USB disconnect, device number 3
[  122.450940][ T5357] JBD2: Ignoring recovery information on journal
[  122.554898][ T5359] loop1: detected capacity change from 0 to 32768
[  122.598574][ T5359] XFS (loop1): Mounting V5 Filesystem
[  122.621428][ T5376] loop3: detected capacity change from 0 to 512
[  122.666253][ T5357] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  122.700176][ T5376] EXT4-fs (loop3): 1 truncate cleaned up
[  122.751818][ T5359] XFS (loop1): Ending clean mount
[  122.768261][ T5359] XFS (loop1): Quotacheck needed: Please wait.
[  122.777518][ T5376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  122.834791][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.873780][ T5376] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.321: bg 0: block 465: padding at end of block bitmap is not set
[  122.897106][ T5359] XFS (loop1): Quotacheck: Done.
[  122.975665][ T5376] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28
[  123.002842][ T5376] EXT4-fs (loop3): This should not happen!! Data will be lost
[  123.002842][ T5376] 
[  123.030662][ T5376] EXT4-fs (loop3): Total free blocks count 0
[  123.059086][ T5376] EXT4-fs (loop3): Free/Dirty block details
[  123.089729][ T5376] EXT4-fs (loop3): free_blocks=0
[  123.132141][ T5376] EXT4-fs (loop3): dirty_blocks=9
[  123.161767][ T5376] EXT4-fs (loop3): Block reservation details
[  123.179780][ T5376] EXT4-fs (loop3): i_reserved_data_blocks=9
[  123.885042][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.247813][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  124.319395][ T4271] XFS (loop1): Unmounting Filesystem
[  124.386919][ T4270] ocfs2: Unmounting device (7,0) on (node local)
[  124.594989][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.780713][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.789376][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.000172][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.381668][ T5406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.464521][ T5414] loop1: detected capacity change from 0 to 256
[  125.530781][ T5417] loop0: detected capacity change from 0 to 512
[  125.546690][ T5414] process 'syz.1.325' launched './file1' with NULL argv: empty string added
[  126.035055][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.170924][ T5437] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  126.195247][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.075242][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.322260][ T5451] loop2: detected capacity change from 0 to 1024
[  127.411388][ T5451] hfsplus: b-tree write err: -5, ino 2
[  127.618388][   T33] hfsplus: b-tree write err: -5, ino 25
[  127.634334][   T33] hfsplus: b-tree write err: -5, ino 4
[  127.648122][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.666040][   T33] hfsplus: b-tree write err: -5, ino 2
[  127.675548][   T33] hfsplus: b-tree write err: -5, ino 27
[  127.817262][ T4314] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  127.848893][ T4314] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  127.931306][ T5465] loop2: detected capacity change from 0 to 4096
[  127.956094][ T5465] EXT4-fs: Ignoring removed mblk_io_submit option
[  127.988434][ T5465] EXT4-fs: inline encryption not supported
[  128.014392][ T5465] EXT4-fs: Ignoring removed orlov option
[  128.035756][   T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  128.055017][ T5465] ext4: Unknown parameter 'rootcontext'
[  128.173319][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.181024][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.188916][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.225328][   T14] usb 2-1: Using ep0 maxpacket: 32
[  128.233819][   T14] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  128.260665][   T14] usb 2-1: config 0 has no interface number 0
[  128.289605][   T14] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  128.301225][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.314194][   T14] usb 2-1: Product: syz
[  128.320009][   T14] usb 2-1: Manufacturer: syz
[  128.330487][   T14] usb 2-1: SerialNumber: syz
[  128.358157][   T14] usb 2-1: config 0 descriptor??
[  128.411358][   T14] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  128.594328][   T14] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  128.623045][   T14] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  128.812368][ T5484] loop2: detected capacity change from 0 to 512
[  128.822041][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7
[  128.831756][ T5484] EXT4-fs: Ignoring removed oldalloc option
[  128.838531][ T5484] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  128.858418][ T5484] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.350: iget: bad i_size value: 38620345925642
[  128.874523][ T5484] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.350: couldn't read orphan inode 15 (err -117)
[  128.894368][ T5484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  129.031844][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  129.045635][   T14] usb 2-1: USB disconnect, device number 5
[  129.062134][   T14] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  129.103819][   T14] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  129.119924][   T14] quatech2 2-1:0.51: device disconnected
[  129.253751][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.371595][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.447597][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.813591][   T33] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[  129.837753][   T33] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  129.853293][   T33] EXT4-fs (loop2): This should not happen!! Data will be lost
[  129.853293][   T33] 
[  129.866655][   T33] EXT4-fs (loop2): Total free blocks count 0
[  129.872953][   T33] EXT4-fs (loop2): Free/Dirty block details
[  129.879702][   T33] EXT4-fs (loop2): free_blocks=0
[  129.886470][   T33] EXT4-fs (loop2): dirty_blocks=10540
[  129.900970][   T33] EXT4-fs (loop2): Block reservation details
[  129.914683][   T33] EXT4-fs (loop2): i_reserved_data_blocks=10540
[  130.007249][   T33] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  130.034195][ T5493] loop1: detected capacity change from 0 to 512
[  130.121482][ T5493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  130.135083][ T5493] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.284026][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.284091][ T5447] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.301570][ T5447] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.311114][ T5447] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.320062][ T5447] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.329780][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  130.727969][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.325472][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.246635][ T5505] loop2: detected capacity change from 0 to 4096
[  132.262078][ T5505] EXT4-fs: Ignoring removed bh option
[  132.313923][ T5505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  132.364776][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.578201][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  132.599207][ T5515] loop3: detected capacity change from 0 to 2048
[  132.608428][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  132.608470][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  132.712596][ T5515] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  132.779068][ T4641] udevd[4641]: incorrect nilfs2 checksum on /dev/loop3
[  132.828347][ T5524] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  132.908448][   T26] audit: type=1800 audit(1775097934.282:3): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.360" name="file1" dev="loop3" ino=15 res=0 errno=0
[  133.059167][ T5528] netlink: 'syz.0.365': attribute type 12 has an invalid length.
[  133.319858][ T5537] loop3: detected capacity change from 0 to 128
[  133.374229][ T5537] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  133.404772][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.407917][ T5537] hpfs: filesystem error: improperly stopped
[  133.448277][ T5537] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  133.504610][ T5537] hpfs: You really don't want any checks? You are crazy...
[  133.512416][ T5537] hpfs: Code page index out of array
[  133.518304][ T5537] hpfs: code page support is disabled
[  133.534670][ T5537] hpfs: hpfs_map_4sectors(): unaligned read
[  133.541229][ T5537] hpfs: hpfs_map_4sectors(): unaligned read
[  133.562918][ T5543] loop2: detected capacity change from 0 to 1024
[  133.580030][ T5537] hpfs: filesystem error: unable to find root dir
[  133.794902][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.995815][ T5543] hfsplus: b-tree write err: -5, ino 3
[  134.149789][ T5047] hfsplus: bad catalog file entry
[  134.153973][ T5553] loop0: detected capacity change from 0 to 4096
[  134.268331][ T5560] loop4: detected capacity change from 0 to 512
[  134.355938][ T5560] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.379: inode has both inline data and extents flags
[  134.384894][ T5560] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.379: couldn't read orphan inode 15 (err -117)
[  134.435117][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.471245][ T5560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  134.851242][ T5576] input: syz0 as /devices/virtual/input/input7
[  134.912415][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  135.494228][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.796088][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.007248][ T5604] loop3: detected capacity change from 0 to 1024
[  136.203090][ T5604] hfsplus: b-tree write err: -5, ino 3
[  136.210817][ T5611] device syzkaller1 entered promiscuous mode
[  136.314779][   T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  136.363262][ T5090] hfsplus: bad catalog file entry
[  136.505259][   T14] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  136.515016][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.524462][   T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  136.564795][   T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  136.597328][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  136.621612][   T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  136.673374][   T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  136.795376][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.020460][   T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  137.199075][   T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  137.243156][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.243252][ T5628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.300149][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.310516][   T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  137.369782][   T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  137.414783][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.450288][   T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  137.488150][   T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  137.539519][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.554988][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.574450][   T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  137.610154][   T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  137.634874][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.643918][   T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  137.673946][   T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  137.696375][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.717333][   T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  137.726268][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.764666][   T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  137.837126][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.858036][   T14] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  137.899042][   T14] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  137.932277][   T14] usb 2-1: Product: syz
[  137.957734][   T14] usb 2-1: Manufacturer: syz
[  137.962543][   T14] usb 2-1: SerialNumber: syz
[  138.007731][   T14] usb 2-1: config 0 descriptor??
[  138.061393][   T14] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  138.154137][ T5621] loop0: detected capacity change from 0 to 40427
[  138.183131][ T5621] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  138.210756][ T5621] F2FS-fs (loop0): invalid crc value
[  138.264545][ T5621] F2FS-fs (loop0): Found nat_bits in checkpoint
[  138.374936][   T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  138.407372][ T5621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  138.417334][    C0] usb 2-1: yurex_control_callback - control failed: -71
[  138.431562][ T4337] usb 2-1: USB disconnect, device number 6
[  138.468075][ T4337] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  138.474658][ T5664] usb 2-1:0.0: yurex_write - failed to send bulk msg, error -19
[  138.569643][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.593323][   T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  138.626603][   T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  138.635970][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.645739][   T14] usb 3-1: config 0 descriptor??
[  138.651239][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.789447][ T4270] syz-executor: attempt to access beyond end of device
[  138.789447][ T4270] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.062077][   T14] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd
[  139.079556][   T14] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  139.100661][ T5682] loop3: detected capacity change from 0 to 512
[  139.155766][   T14] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  139.173268][ T5682] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  139.186305][ T5684] loop4: detected capacity change from 0 to 256
[  139.199942][ T5682] UDF-fs: Scanning with blocksize 512 failed
[  139.251180][ T5682] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  139.300818][ T5682] UDF-fs: Scanning with blocksize 1024 failed
[  139.339693][   T14] usb 3-1: USB disconnect, device number 4
[  139.351792][ T5682] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  139.373107][ T5682] UDF-fs: Scanning with blocksize 2048 failed
[  139.400016][ T5682] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  139.492276][ T5682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.654921][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.729346][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.072624][ T5687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.108678][ T5686] fido_id[5686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  140.295633][ T5696] loop0: detected capacity change from 0 to 1024
[  140.364124][ T5696] hfsplus: b-tree write err: -5, ino 2
[  140.485942][   T11] hfsplus: b-tree write err: -5, ino 25
[  140.491706][   T11] hfsplus: b-tree write err: -5, ino 4
[  140.542544][   T11] hfsplus: b-tree write err: -5, ino 2
[  140.562788][   T11] hfsplus: b-tree write err: -5, ino 27
[  140.764915][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.841490][ T5716] vcan0: tx drop: invalid da for name 0x0000000000000003
[  141.488670][ T5736] loop1: detected capacity change from 0 to 256
[  141.656426][ T5704] loop4: detected capacity change from 0 to 32768
[  141.725070][ T5704] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  141.826736][ T5704] JBD2: Ignoring recovery information on journal
[  142.122848][ T5704] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  142.241774][ T5743] loop3: detected capacity change from 0 to 2048
[  142.347129][ T5711] loop0: detected capacity change from 0 to 32768
[  142.654573][    C1] sched: RT throttling activated
[  142.654940][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.668640][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.689219][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.721364][ T5711] XFS (loop0): Mounting V5 Filesystem
[  142.884082][ T5711] XFS (loop0): Ending clean mount
[  142.912434][ T4337] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[  142.953900][ T4337] XFS (loop0): Unmount and run xfs_repair
[  142.984709][ T4337] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  143.028145][ T4337] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  143.068945][ T4337] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  143.108026][ T4337] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  143.143387][ T4337] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  143.177024][ T4337] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  143.202101][ T4337] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  143.215310][ T5731] loop2: detected capacity change from 0 to 262144
[  143.250647][ T5731] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.424 (5731)
[  143.305265][ T4337] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  143.331285][ T4337] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  143.371311][ T5711] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[  143.390791][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.402632][ T5731] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  143.412849][ T5731] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  143.422150][ T5731] BTRFS info (device loop2): using free space tree
[  143.445299][ T4278] ocfs2: Unmounting device (7,4) on (node local)
[  143.463265][ T5711] XFS (loop0): Failed to initialize disk quotas.
[  144.014629][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.098414][ T5761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.124751][ T5731] BTRFS info (device loop2): enabling ssd optimizations
[  144.160492][ T4270] XFS (loop0): Unmounting Filesystem
[  144.211035][   T26] audit: type=1800 audit(1775097945.582:4): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.424" name="bus" dev="loop2" ino=263 res=0 errno=0
[  144.426188][ T5786] vcan0: tx drop: invalid da for name 0x0000000000000003
[  144.539667][ T4269] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  145.075338][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.278244][ T5815] input: syz1 as /devices/virtual/input/input9
[  145.544518][ T5819] kvm [5818]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xef4000000000
[  145.587845][ T5819] kvm [5818]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xef4000000000
[  145.636264][ T5819] kvm [5818]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xef4000000000
[  145.706656][ T5791] loop4: detected capacity change from 0 to 32768
[  145.720164][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.763603][ T5791] 
[  145.763603][ T5791]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.763603][ T5791] 
[  145.775522][ T5330] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  145.881270][ T5791] read_mapping_page failed!
[  145.901296][ T5791] ERROR: (device loop4): txCommit: 
[  145.901296][ T5791] 
[  145.954324][ T5829] read_mapping_page failed!
[  145.986171][ T5330] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  146.006668][ T5829] ERROR: (device loop4): txCommit: 
[  146.006668][ T5829] 
[  146.025040][ T5330] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  146.075621][ T5330] usb 1-1: config 1 interface 0 has no altsetting 0
[  146.114841][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.125975][ T5330] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  146.153719][ T5808] loop3: detected capacity change from 0 to 32768
[  146.168780][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.196248][ T5808] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.435 (5808)
[  146.198952][ T5330] usb 1-1: Product: syz
[  146.254639][ T5330] usb 1-1: Manufacturer: syz
[  146.269469][ T5330] usb 1-1: SerialNumber: syz
[  146.297548][ T5822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  146.313804][ T5822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  146.332778][ T5808] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  146.349538][ T5047] read_mapping_page failed!
[  146.388906][ T5047] ERROR: (device loop4): txCommit: 
[  146.388906][ T5047] 
[  146.396894][ T5808] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  146.436349][ T5047] jfs_write_inode: jfs_commit_inode failed!
[  146.449677][ T5808] BTRFS info (device loop3): force zlib compression, level 3
[  146.485091][ T4278] 
[  146.485091][ T4278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.485091][ T4278] 
[  146.501588][ T5808] BTRFS info (device loop3): force clearing of disk cache
[  146.530843][ T4278] 
[  146.530843][ T4278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.530843][ T4278] 
[  146.561828][ T5808] BTRFS info (device loop3): setting nodatasum
[  146.584458][ T5808] BTRFS info (device loop3): allowing degraded mounts
[  146.622590][ T5808] BTRFS info (device loop3): enabling disk space caching
[  146.663042][ T5808] BTRFS info (device loop3): disk space caching is enabled
[  146.812543][ T5843] loop4: detected capacity change from 0 to 1024
[  146.846419][ T5843] EXT4-fs: Ignoring removed orlov option
[  146.895486][ T5843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  147.023721][ T5843] EXT4-fs (loop4): Online resizing not supported with bigalloc
[  147.134853][ T5808] BTRFS info (device loop3): rebuilding free space tree
[  147.165969][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.202715][ T5833] loop2: detected capacity change from 0 to 32768
[  147.218383][ T5833] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.441 (5833)
[  147.232318][ T5808] BTRFS info (device loop3): disabling free space tree
[  147.240068][ T5808] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  147.252210][ T5808] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  147.301058][ T5833] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  147.314924][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  147.372640][ T5833] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  147.408849][ T5833] BTRFS info (device loop2): enabling auto defrag
[  147.446064][ T5330] rtl8150 1-1:1.0: eth1: rtl8150 is detected
[  147.464728][ T5833] BTRFS info (device loop2): use no compression
[  147.471069][ T5833] BTRFS info (device loop2): max_inline at 4096
[  147.909959][ T5833] BTRFS info (device loop2): using free space tree
[  148.045161][ T5330] usb 1-1: USB disconnect, device number 5
[  148.086663][ T4277] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  148.106958][ T5869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.158309][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'.
[  148.174664][ T5882] netlink: 'syz.1.447': attribute type 15 has an invalid length.
[  148.200045][ T5882] netlink: 'syz.1.447': attribute type 18 has an invalid length.
[  148.279391][ T4843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.329444][ T5882] device vxlan1 entered promiscuous mode
[  148.405045][ T5833] BTRFS info (device loop2): enabling ssd optimizations
[  148.756875][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.818623][ T4269] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.211827][ T5910] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[  149.238868][ T5910] netlink: 'syz.0.454': attribute type 2 has an invalid length.
[  149.257589][ T4374] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4374)
[  149.324888][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.343363][ T5910] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[  149.352231][ T5910] netlink: 'syz.0.454': attribute type 2 has an invalid length.
[  149.434672][ T3597] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  149.454855][ T4847] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  149.644899][ T4847] usb 5-1: Using ep0 maxpacket: 32
[  149.656504][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.668024][ T4847] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  149.681447][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.691419][ T4847] usb 5-1: config 0 has no interface number 0
[  149.709512][ T3597] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  149.725281][ T4847] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  149.757849][ T4847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.766921][ T3597] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  149.776262][ T4847] usb 5-1: Product: syz
[  149.780461][ T4847] usb 5-1: Manufacturer: syz
[  149.785254][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.793489][ T4847] usb 5-1: SerialNumber: syz
[  149.806147][ T3597] usb 4-1: config 0 descriptor??
[  149.816974][ T4847] usb 5-1: config 0 descriptor??
[  149.830670][ T4847] smsc95xx v2.0.0
[  149.875005][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.236153][ T4847] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  150.253518][ T3597] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  150.269379][ T4847] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  150.287206][ T3597] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  150.356059][ T3597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.908522][ T4847] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  150.956513][ T4847] smsc95xx: probe of 5-1:0.67 failed with error -71
[  150.966805][ T4847] usb 5-1: USB disconnect, device number 7
[  151.016667][ T5941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.024665][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  151.395063][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.674399][ T5946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.699386][ T5950] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[  151.770281][ T5950] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.837826][    C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1
[  151.851335][ T5328] usb 4-1: USB disconnect, device number 4
[  151.888254][ T5952] bond1: (slave geneve2): making interface the new active one
[  151.901245][ T5952] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  151.915127][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  151.924765][ T5956] user requested TSC rate below hardware speed
[  151.939698][ T5956] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  152.270221][ T4847] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  152.436663][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.487873][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.616556][ T4847] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.643309][ T4847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  152.685417][ T4847] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  152.701690][ T4847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  152.720090][ T5962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.340286][ T5966] loop2: detected capacity change from 0 to 131072
[  153.347537][ T5966] XFS: ikeep mount option is deprecated.
[  153.353452][ T4847] usb 5-1: SerialNumber: syz
[  153.369791][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.458186][ T5966] XFS (loop2): Mounting V5 Filesystem
[  153.557931][ T5978] loop0: detected capacity change from 0 to 2048
[  153.567136][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.578322][ T5966] XFS (loop2): Starting recovery (logdev: internal)
[  153.587792][ T4847] usb 5-1: 0:2 : does not exist
[  153.634500][ T5966] XFS (loop2): Ending recovery (logdev: internal)
[  153.651873][ T4847] usb 5-1: USB disconnect, device number 8
[  153.660802][ T5978] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  153.690035][ T5978] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.718860][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.742157][ T4269] XFS (loop2): Unmounting Filesystem
[  153.764788][ T5797] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  153.795910][ T5978] fs-verity: sha256 using implementation "sha256-avx2"
[  153.896282][ T4641] udevd[4641]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.959784][ T5797] usb 4-1: Using ep0 maxpacket: 16
[  153.967346][ T5797] usb 4-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config
[  154.029668][ T5797] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  154.063428][ T4270] EXT4-fs (loop0): unmounting filesystem.
[  154.078338][ T5797] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  154.091519][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.099945][ T5797] usb 4-1: Product: syz
[  154.104146][ T5797] usb 4-1: Manufacturer: syz
[  154.109083][ T5797] usb 4-1: SerialNumber: syz
[  154.370513][ T5797] usb 4-1: 0:2 : does not exist
[  154.595520][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.645385][ T5797] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  154.887951][ T5994] loop1: detected capacity change from 0 to 256
[  154.899499][ T5797] usb 4-1: USB disconnect, device number 5
[  154.925452][ T5990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.962220][ T4641] udevd[4641]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.284928][ T5330] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  155.523882][ T5330] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.613218][ T5330] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.624780][ T5330] usb 1-1: config 0 interface 0 has no altsetting 0
[  155.631623][ T5330] usb 1-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00
[  155.642234][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.659320][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.676406][ T5330] usb 1-1: config 0 descriptor??
[  155.993600][ T6011] loop3: detected capacity change from 0 to 256
[  156.058719][ T6002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.099635][ T5330] hid-generic 0003:0463:1215.000B: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.0-1/input0
[  156.117667][ T6011] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  156.337579][ T5797] usb 1-1: USB disconnect, device number 6
[  156.364667][ T5328] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  156.408457][ T4347] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  156.438224][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.604686][ T4347] usb 3-1: Using ep0 maxpacket: 16
[  156.611823][ T4347] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  156.632068][ T4347] usb 3-1: config 1 has no interface number 0
[  156.644770][ T4347] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  156.655364][ T4347] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  156.665736][ T4347] usb 3-1: config 1 interface 105 has no altsetting 0
[  156.687969][ T4848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.705612][ T4347] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  156.741135][ T4347] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  156.759783][ T4347] usb 3-1: Product: syz
[  156.763998][ T4347] usb 3-1: Manufacturer: syz
[  156.775764][ T4347] usb 3-1: SerialNumber: syz
[  156.794351][ T6015] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  156.813492][ T6015] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  157.029194][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.134218][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.234440][ T6015] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  157.250861][ T6015] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  157.270379][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.401959][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.684774][ T5328] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  157.694755][ T4347] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  157.725257][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.904857][ T3597] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  157.913876][ T5328] usb 5-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  157.950189][ T5328] usb 5-1: config 1 interface 0 has no altsetting 0
[  157.957352][ T4347] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  157.999815][ T4347] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b6:2d:15:bd:92:e9
[  158.013273][ T5328] usb 5-1: string descriptor 0 read error: -22
[  158.040494][ T5328] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40
[  158.055415][ T4347] usb 3-1: USB disconnect, device number 5
[  158.082326][ T5328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.095973][ T4347] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  158.114853][ T3597] usb 1-1: Using ep0 maxpacket: 8
[  158.133575][ T3597] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 67, changing to 10
[  158.143235][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  158.155441][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  158.164143][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  158.172217][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  158.179818][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  158.187601][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.221241][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  158.231552][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  158.239996][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  158.257940][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  158.292238][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  158.300737][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.324693][ T3597] usb 1-1: config 1 interface 0 has no altsetting 0
[  158.369793][ T3597] usb 1-1: string descriptor 0 read error: -22
[  158.392904][ T3597] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.40
[  158.411583][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.525365][ T4347] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  158.554693][ T4347] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  158.576942][ T4347] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  158.617909][ T5328] kone 0003:1E7D:2CED.000C: global environment stack underflow
[  158.674198][ T5328] kone 0003:1E7D:2CED.000C: item 0 0 1 11 parsing failed
[  158.708677][ T5328] kone 0003:1E7D:2CED.000C: parse failed
[  158.714701][ T5328] kone: probe of 0003:1E7D:2CED.000C failed with error -22
[  158.766180][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.822674][ T5328] usb 5-1: USB disconnect, device number 10
[  159.068700][ T3597] uclogic 0003:5543:0081.000D: failed retrieving string descriptor #200: -71
[  159.091019][ T3597] uclogic 0003:5543:0081.000D: failed retrieving pen parameters: -71
[  159.118073][ T3597] uclogic 0003:5543:0081.000D: failed probing pen v2 parameters: -71
[  159.137862][ T3597] uclogic 0003:5543:0081.000D: failed probing parameters: -71
[  159.161063][ T3597] uclogic: probe of 0003:5543:0081.000D failed with error -71
[  159.198661][ T3597] usb 1-1: USB disconnect, device number 7
[  159.502092][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.734997][ T6031] chnl_net:caif_netlink_parms(): no params data found
[  159.768748][ T5161] Bluetooth: hci5: Frame reassembly failed (-84)
[  159.805255][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.224266][ T4848] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  160.355625][ T4285] Bluetooth: hci3: command 0x0409 tx timeout
[  160.467627][ T4848] usb 3-1: Using ep0 maxpacket: 16
[  160.478207][ T6058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.490919][ T4848] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.518397][ T4848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.555508][ T4848] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.594719][ T4848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.603269][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.610840][ T4848] usb 3-1: Product: syz
[  160.615354][ T4848] usb 3-1: Manufacturer: syz
[  160.620104][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.627559][ T4848] usb 3-1: SerialNumber: syz
[  160.643894][ T6031] device bridge_slave_0 entered promiscuous mode
[  160.719949][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.727510][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.736321][ T6031] device bridge_slave_1 entered promiscuous mode
[  160.767361][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.779451][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.843329][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.858988][   T11] device hsr_slave_0 left promiscuous mode
[  160.875037][ T4848] usb 3-1: 0:2 : does not exist
[  160.887931][ T4848] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  160.912192][   T11] device hsr_slave_1 left promiscuous mode
[  160.922352][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.934471][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.965090][ T4848] usb 3-1: USB disconnect, device number 6
[  160.987469][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.000991][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.022005][   T11] device bridge_slave_1 left promiscuous mode
[  161.040955][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.097135][   T11] device bridge_slave_0 left promiscuous mode
[  161.103403][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.211552][   T11] device veth1_macvtap left promiscuous mode
[  161.225097][   T11] device veth0_macvtap left promiscuous mode
[  161.240197][   T11] device veth1_vlan left promiscuous mode
[  161.257519][ T4374] udevd[4374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.289894][   T11] device veth0_vlan left promiscuous mode
[  161.564785][ T4848] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  161.729529][ T6082] loop0: detected capacity change from 0 to 32768
[  161.737893][ T4285] Bluetooth: hci5: command 0x1003 tx timeout
[  161.744699][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  161.753962][ T6082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.501 (6082)
[  161.775304][ T4848] usb 5-1: Using ep0 maxpacket: 32
[  161.782657][ T4848] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  161.822206][ T4848] usb 5-1: config 0 has no interface number 0
[  161.852772][ T4848] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  161.895495][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.899545][ T6082] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.914782][ T6082] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  161.923447][ T6082] BTRFS info (device loop0): using free space tree
[  161.933867][ T4848] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  161.963675][ T4848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.991926][ T4848] usb 5-1: Product: syz
[  161.996552][ T4848] usb 5-1: Manufacturer: syz
[  162.002353][ T4848] usb 5-1: SerialNumber: syz
[  162.011758][ T4848] usb 5-1: config 0 descriptor??
[  162.032420][ T4848] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  162.050520][ T4848] em28xx 5-1:0.132: Video interface 132 found:
[  162.137950][ T6082] BTRFS info (device loop0): enabling ssd optimizations
[  162.434892][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[  162.447958][ T4848] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  162.508851][ T4270] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  162.519281][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.914943][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.134536][   T11] team0 (unregistering): Port device team_slave_1 removed
[  163.209651][   T11] team0 (unregistering): Port device team_slave_0 removed
[  163.290320][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.382688][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.914075][ T6126] loop0: detected capacity change from 0 to 131072
[  163.924942][ T4848] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  163.930602][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.940468][ T6083] em28xx 5-1:0.132: failed to trigger write to i2c address 0x0 (error=-5)
[  163.951748][   T11] bond0 (unregistering): Released all slaves
[  163.958806][ T4848] em28xx 5-1:0.132: board has no eeprom
[  163.975883][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.013463][ T6126] F2FS-fs (loop0): invalid crc value
[  164.031118][ T6126] F2FS-fs (loop0): Found nat_bits in checkpoint
[  164.069530][ T4848] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  164.080475][ T4848] em28xx 5-1:0.132: analog set to bulk mode.
[  164.086613][ T6126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  164.096100][ T4847] em28xx 5-1:0.132: Registering V4L2 extension
[  164.132872][   T26] audit: type=1800 audit(1775097965.502:5): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.506" name="file1" dev="loop0" ino=7 res=0 errno=0
[  164.172533][ T4848] usb 5-1: USB disconnect, device number 11
[  164.196535][ T4848] em28xx 5-1:0.132: Disconnecting em28xx
[  164.219326][ T6031] team0: Port device team_slave_0 added
[  164.277688][ T6031] team0: Port device team_slave_1 added
[  164.378208][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.405004][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.514636][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.514973][ T4288] Bluetooth: hci3: command 0x040f tx timeout
[  164.585683][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.681257][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.719122][ T6135] loop2: detected capacity change from 0 to 2048
[  164.776654][ T4847] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  164.790856][ T4847] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  164.824673][ T6135] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  164.837393][ T4847] em28xx 5-1:0.132: No AC97 audio processor
[  164.860119][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.894125][ T6135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.906183][ T4847] usb 5-1: Decoder not found
[  164.930722][ T4847] em28xx 5-1:0.132: failed to create media graph
[  164.968776][ T4847] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  165.018617][ T4847] em28xx 5-1:0.132: Remote control support is not available for this card.
[  165.083898][ T4848] em28xx 5-1:0.132: Closing input extension
[  165.160557][ T4848] em28xx 5-1:0.132: Freeing device
[  165.187967][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.229752][ T6031] device hsr_slave_0 entered promiscuous mode
[  165.290758][ T6031] device hsr_slave_1 entered promiscuous mode
[  165.342036][ T6031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.389012][ T6031] Cannot create hsr debugfs directory
[  165.562721][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.848893][ T6141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.113845][ T6031] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  166.168247][ T6031] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  166.175186][ T4847] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  166.194870][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.224372][ T6031] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  166.278018][ T6031] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  166.384706][ T4847] usb 3-1: Using ep0 maxpacket: 32
[  166.391897][ T4847] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  166.431249][ T4847] usb 3-1: config 0 has no interface number 0
[  166.468555][ T4847] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  166.540795][ T4847] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  166.589751][ T4847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.595417][ T4288] Bluetooth: hci3: command 0x0419 tx timeout
[  166.640398][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.665971][ T4847] usb 3-1: Product: syz
[  166.670386][ T4847] usb 3-1: Manufacturer: syz
[  166.675133][  T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  166.687793][ T4847] usb 3-1: SerialNumber: syz
[  166.703643][ T4847] usb 3-1: config 0 descriptor??
[  166.776527][ T4847] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  166.790163][ T6031] 8021q: adding VLAN 0 to HW filter on device team0
[  166.807112][ T4847] em28xx 3-1:0.132: Video interface 132 found:
[  166.819636][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.835795][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.869193][  T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.903260][  T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.939583][  T126] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  166.965628][  T126] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  167.008520][  T126] usb 1-1: Manufacturer: syz
[  167.025631][  T126] usb 1-1: config 0 descriptor??
[  167.054356][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  167.083166][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  167.122677][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.129899][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.167251][ T4847] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  167.184248][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  167.219669][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.234894][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.245687][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.252897][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.301597][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.354471][ T6183] loop1: detected capacity change from 0 to 512
[  167.366505][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  167.413221][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.441525][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  167.457981][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  167.488947][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.505766][ T6183] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  167.533164][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.564267][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.578819][ T4847] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0)
[  167.591513][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.601120][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.617200][ T6031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.624314][ T4847] em28xx 3-1:0.132: board has no eeprom
[  167.632262][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.642862][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.664749][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.791923][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  167.861234][ T4847] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  167.884255][  T126] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input10
[  167.884692][ T4847] em28xx 3-1:0.132: analog set to bulk mode.
[  167.946049][ T5328] em28xx 3-1:0.132: Registering V4L2 extension
[  167.991324][ T4847] usb 3-1: USB disconnect, device number 7
[  168.010324][  T126] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input11
[  168.035538][ T4847] em28xx 3-1:0.132: Disconnecting em28xx
[  168.069341][  T126] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input12
[  168.085587][ T6199] input: syz0 as /devices/virtual/input/input14
[  168.146972][  T126] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000E/input/input13
[  168.217981][  T126] uclogic 0003:256C:006D.000E: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0
[  168.264918][  T126] usb 1-1: USB disconnect, device number 8
[  168.308927][ T4848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.317241][ T4833] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  168.450453][ T6208] IPv6: sit2: Disabled Multicast RS
[  168.534698][ T4833] usb 2-1: Using ep0 maxpacket: 32
[  168.546007][ T4833] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  168.561973][ T6205] fido_id[6205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  168.590112][ T4833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.608689][ T4833] usb 2-1: Product: syz
[  168.612914][ T4833] usb 2-1: Manufacturer: syz
[  168.649060][ T4833] usb 2-1: SerialNumber: syz
[  168.665527][ T4833] usb 2-1: config 0 descriptor??
[  168.684930][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.706685][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  168.719520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  168.774653][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.190145][ T4833] airspy 2-1:0.0: Board ID: 00
[  169.195151][ T4833] airspy 2-1:0.0: Firmware version: 
[  169.327357][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.430394][ T6221] loop0: detected capacity change from 0 to 2048
[  169.442962][ T6221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.472497][ T6215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.510634][ T5328] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  169.533894][ T5328] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  169.552727][ T5328] em28xx 3-1:0.132: No AC97 audio processor
[  169.604887][ T5328] usb 3-1: Decoder not found
[  169.635237][ T5328] em28xx 3-1:0.132: failed to create media graph
[  169.665358][ T5328] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  169.711042][ T5328] em28xx 3-1:0.132: Remote control support is not available for this card.
[  169.750430][ T4847] em28xx 3-1:0.132: Closing input extension
[  169.787582][ T4847] em28xx 3-1:0.132: Freeing device
[  169.995702][ T4833] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f
[  170.036247][ T4833] airspy 2-1:0.0: Registered as swradio24
[  170.042043][ T4833] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  170.110952][ T4833] usb 2-1: USB disconnect, device number 7
[  170.302694][ T6232] loop2: detected capacity change from 0 to 32768
[  170.354807][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.374039][ T6232] JFS: block map error in dbBackSplit
[  170.379946][ T6232] ERROR: (device loop2): dbDiscardAG: -EIO
[  170.379946][ T6232] 
[  170.388322][ T6232] ERROR: (device loop2): remounting filesystem as read-only
[  170.395904][ T6232] syz.2.528: attempt to access beyond end of device
[  170.395904][ T6232] loop2: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768
[  170.410813][ T6232] JFS: sb_issue_discard(ffff88807676e000, 328704, 1024, GFP_NOFS, 0) = -5 => failed!
[  170.420419][ T6232] blkno = 50400, nblocks = 400
[  170.425341][ T6232] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  170.425341][ T6232] 
[  170.474813][ T5796] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  170.686855][ T5796] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.714640][ T5796] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  170.723574][ T5796] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  170.816879][ T5796] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  170.871851][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.925842][ T6238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  170.947106][ T5796] hub 1-1:1.0: bad descriptor, ignoring hub
[  170.968467][ T5796] hub: probe of 1-1:1.0 failed with error -5
[  170.979019][ T5796] cdc_wdm 1-1:1.0: skipping garbage
[  171.004155][ T5796] cdc_wdm 1-1:1.0: skipping garbage
[  171.027018][ T5796] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  171.059661][ T5796] cdc_wdm 1-1:1.0: Unknown control protocol
[  171.191456][ T6256] loop4: detected capacity change from 0 to 256
[  171.296332][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  171.303002][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  171.356731][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  171.379379][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  171.405053][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.454954][ T5797] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  171.465484][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  171.472141][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  171.478520][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  171.485151][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  171.492377][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  171.494467][ T6031] device veth0_vlan entered promiscuous mode
[  171.498997][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  171.499570][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  171.517731][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  171.526216][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  171.534727][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  171.540667][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  171.541341][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  171.633558][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  171.658657][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  171.714895][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.723386][ T6031] device veth1_vlan entered promiscuous mode
[  171.733272][ T4835] usb 1-1: USB disconnect, device number 9
[  171.734665][ T5797] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  171.771810][ T5797] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  171.819991][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  171.833989][ T5797] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  171.843888][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  171.854015][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  171.860642][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.865728][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  171.881138][ T6031] device veth0_macvtap entered promiscuous mode
[  171.911583][ T6031] device veth1_macvtap entered promiscuous mode
[  171.972118][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.014946][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.054617][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.073347][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.094630][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.111505][ T6273] loop1: detected capacity change from 0 to 2048
[  172.118896][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.138872][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.156449][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  172.171953][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  172.180897][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  172.192014][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  172.201984][ T6273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  172.225004][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.235008][ T6273] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  172.236482][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.256076][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.266940][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.277544][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.288178][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.299430][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.307583][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  172.341026][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.395602][ T6031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.404356][ T6031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.433749][ T6031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.443407][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.471395][ T6031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.493145][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  173.179547][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.196183][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.218203][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  173.231707][ T6279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.242956][ T6287] netlink: 27 bytes leftover after parsing attributes in process `syz.1.542'.
[  173.261762][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.279562][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.310246][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.475079][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.494093][ T6289] loop1: detected capacity change from 0 to 1024
[  173.520393][ T5797] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  173.536535][ T5797] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input15
[  173.581878][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.610749][ T5797] input: failed to attach handler kbd to device input15, error: -5
[  173.674742][ T5797] usb 3-1: USB disconnect, device number 8
[  173.714959][ T6289] hfsplus: xattr search failed
[  173.739366][ T6274] loop4: detected capacity change from 0 to 32768
[  173.761295][ T6294] hfsplus: xattr searching failed
[  173.826072][ T6274] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  173.858340][ T6274] JBD2: Ignoring recovery information on journal
[  173.867652][   T26] audit: type=1800 audit(1775097975.242:6): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.543" name="bus" dev="loop1" ino=5 res=0 errno=0
[  173.947028][ T6300] loop0: detected capacity change from 0 to 4096
[  174.016655][ T6301] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.039696][   T26] audit: type=1800 audit(1775097975.412:7): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.544" name="file1" dev="loop0" ino=15 res=0 errno=0
[  174.114214][ T6274] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  174.179567][ T4271] hfsplus: node 4:3 still has 2 user(s)!
[  174.422512][ T4278] ocfs2: Unmounting device (7,4) on (node local)
[  174.521409][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.758677][ T6293] loop5: detected capacity change from 0 to 32768
[  174.764886][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.875316][ T6293] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  174.911909][ T6293] JBD2: Ignoring recovery information on journal
[  175.070065][ T6293] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  175.273517][ T6293] 
[  175.275914][ T6293] ======================================================
[  175.282960][ T6293] WARNING: possible circular locking dependency detected
[  175.290042][ T6293] syzkaller #0 Not tainted
[  175.294485][ T6293] ------------------------------------------------------
[  175.301533][ T6293] syz.5.488/6293 is trying to acquire lock:
[  175.307475][ T6293] ffff888071b3cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_read_virt_blocks+0x25d/0x970
[  175.318603][ T6293] 
[  175.318603][ T6293] but task is already holding lock:
[  175.326003][ T6293] ffff8880560d84e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  175.336320][ T6293] 
[  175.336320][ T6293] which lock already depends on the new lock.
[  175.336320][ T6293] 
[  175.346743][ T6293] 
[  175.346743][ T6293] the existing dependency chain (in reverse order) is:
[  175.355780][ T6293] 
[  175.355780][ T6293] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  175.364356][ T6293]        down_read+0x42/0x2d0
[  175.369086][ T6293]        ocfs2_start_trans+0x3a4/0x6f0
[  175.374574][ T6293]        ocfs2_modify_bh+0xe0/0x4c0
[  175.378503][ T6329] loop1: detected capacity change from 0 to 512
[  175.379790][ T6293]        ocfs2_local_read_info+0x13c8/0x1750
[  175.392048][ T6293]        dquot_load_quota_sb+0x756/0xac0
[  175.397715][ T6293]        dquot_load_quota_inode+0x2d8/0x5d0
[  175.403642][ T6293]        ocfs2_enable_quotas+0x1c5/0x490
[  175.409303][ T6293]        ocfs2_fill_super+0x43b5/0x5090
[  175.414876][ T6293]        mount_bdev+0x287/0x3c0
[  175.419754][ T6293]        legacy_get_tree+0xe6/0x180
[  175.424990][ T6293]        vfs_get_tree+0x88/0x270
[  175.429980][ T6293]        do_new_mount+0x24a/0xa40
[  175.435052][ T6293]        __se_sys_mount+0x2e3/0x3d0
[  175.440287][ T6293]        do_syscall_64+0x4c/0xa0
[  175.444719][ T6329] EXT4-fs: Ignoring removed oldalloc option
[  175.445282][ T6293]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.457641][ T6293] 
[  175.457641][ T6293] -> #1 (sb_internal#4){.+.+}-{0:0}:
[  175.465160][ T6293]        ocfs2_start_trans+0x2a5/0x6f0
[  175.470646][ T6293]        ocfs2_acquire_dquot+0x681/0xb20
[  175.476320][ T6293]        dqget+0x778/0xeb0
[  175.480761][ T6293]        __dquot_initialize+0x3c3/0xcd0
[  175.486331][ T6293]        ocfs2_get_init_inode+0x144/0x1b0
[  175.492109][ T6293]        ocfs2_mknod+0x8c8/0x25b0
[  175.497192][ T6293]        ocfs2_create+0x1b6/0x4b0
[  175.502246][ T6293]        path_openat+0x1181/0x2ee0
[  175.507392][ T6293]        do_filp_open+0x1f1/0x430
[  175.512448][ T6293]        do_sys_openat2+0x150/0x4b0
[  175.517688][ T6293]        __x64_sys_openat+0x135/0x160
[  175.523187][ T6293]        do_syscall_64+0x4c/0xa0
[  175.528173][ T6293]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.534623][ T6293] 
[  175.534623][ T6293] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  175.543538][ T6293]        __lock_acquire+0x2d07/0x7d10
[  175.548948][ T6293]        lock_acquire+0x1bb/0x4a0
[  175.554020][ T6293]        down_read+0x42/0x2d0
[  175.558752][ T6293]        ocfs2_read_virt_blocks+0x25d/0x970
[  175.564694][ T6293]        ocfs2_find_entry+0x3c1/0x2180
[  175.570184][ T6293]        ocfs2_rename+0x1e72/0x3950
[  175.575415][ T6293]        vfs_rename+0xbe1/0x1100
[  175.580388][ T6293]        do_renameat2+0x8e5/0xce0
[  175.585444][ T6293]        __x64_sys_rename+0x82/0x90
[  175.590858][ T6293]        do_syscall_64+0x4c/0xa0
[  175.595842][ T6293]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.602294][ T6293] 
[  175.602294][ T6293] other info that might help us debug this:
[  175.602294][ T6293] 
[  175.612538][ T6293] Chain exists of:
[  175.612538][ T6293]   &ocfs2_quota_ip_alloc_sem_key --> sb_internal#4 --> &journal->j_trans_barrier
[  175.612538][ T6293] 
[  175.627526][ T6293]  Possible unsafe locking scenario:
[  175.627526][ T6293] 
[  175.635001][ T6293]        CPU0                    CPU1
[  175.640386][ T6293]        ----                    ----
[  175.645770][ T6293]   lock(&journal->j_trans_barrier);
[  175.651087][ T6293]                                lock(sb_internal#4);
[  175.657885][ T6293]                                lock(&journal->j_trans_barrier);
[  175.665716][ T6293]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  175.671383][ T6293] 
[  175.671383][ T6293]  *** DEADLOCK ***
[  175.671383][ T6293] 
[  175.679546][ T6293] 8 locks held by syz.5.488/6293:
[  175.684596][ T6293]  #0: ffff888077414460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  175.693910][ T6293]  #1: ffff888077414748 (&type->s_vfs_rename_key#4){+.+.}-{3:3}, at: do_renameat2+0x363/0xce0
[  175.704258][ T6293]  #2: ffff888071b3d108 (&sb->s_type->i_mutex_key#34/1){+.+.}-{3:3}, at: do_renameat2+0x3fa/0xce0
[  175.714948][ T6293]  #3: ffff888071b3b488 (&sb->s_type->i_mutex_key#34/5){+.+.}-{3:3}, at: do_renameat2+0x435/0xce0
[  175.725644][ T6293]  #4: ffff888071b3c2c8 (&sb->s_type->i_mutex_key#34/2){+.+.}-{3:3}, at: vfs_rename+0x792/0x1100
[  175.736251][ T6293]  #5: ffff888077414650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_rename+0x1a48/0x3950
[  175.745709][ T6293]  #6: ffff8880560d84e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  175.756483][ T6293]  #7: ffff88802d162990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x200f/0x2230
[  175.766194][ T6293] 
[  175.766194][ T6293] stack backtrace:
[  175.772129][ T6293] CPU: 1 PID: 6293 Comm: syz.5.488 Not tainted syzkaller #0
[  175.779441][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  175.789544][ T6293] Call Trace:
[  175.792849][ T6293]  <TASK>
[  175.795821][ T6293]  dump_stack_lvl+0x188/0x24e
[  175.800540][ T6293]  ? load_image+0x400/0x400
[  175.805067][ T6293]  ? show_regs_print_info+0x12/0x12
[  175.810305][ T6293]  ? print_circular_bug+0x12b/0x1a0
[  175.815555][ T6293]  check_noncircular+0x296/0x330
[  175.820546][ T6293]  ? add_chain_block+0x940/0x940
[  175.825533][ T6293]  ? _find_first_zero_bit+0xcf/0x100
[  175.830859][ T6293]  ? add_lock_to_list+0x191/0x280
[  175.835930][ T6293]  __lock_acquire+0x2d07/0x7d10
[  175.840842][ T6293]  ? verify_lock_unused+0x140/0x140
[  175.846089][ T6293]  ? __lock_acquire+0x13cf/0x7d10
[  175.851177][ T6293]  lock_acquire+0x1bb/0x4a0
[  175.855723][ T6293]  ? ocfs2_read_virt_blocks+0x25d/0x970
[  175.861319][ T6293]  ? __might_sleep+0xd0/0xd0
[  175.865937][ T6293]  ? read_lock_is_recursive+0x10/0x10
[  175.871348][ T6293]  ? mark_lock+0x94/0x320
[  175.875721][ T6293]  down_read+0x42/0x2d0
[  175.879933][ T6293]  ? ocfs2_read_virt_blocks+0x25d/0x970
[  175.885534][ T6293]  ocfs2_read_virt_blocks+0x25d/0x970
[  175.890965][ T6293]  ? ocfs2_validate_dx_leaf+0x210/0x210
[  175.896544][ T6293]  ? ocfs2_seek_data_hole_offset+0x9a0/0x9a0
[  175.902567][ T6293]  ? verify_lock_unused+0x140/0x140
[  175.907807][ T6293]  ocfs2_find_entry+0x3c1/0x2180
[  175.912822][ T6293]  ? __lock_acquire+0x7d10/0x7d10
[  175.917881][ T6293]  ? ocfs2_free_dir_lookup_result+0x100/0x100
[  175.923975][ T6293]  ? jbd2_write_access_granted+0x69/0x300
[  175.929721][ T6293]  ? mutex_unlock+0x10/0x10
[  175.934258][ T6293]  ? do_raw_spin_lock+0x128/0x2f0
[  175.939312][ T6293]  ? jbd2_write_access_granted+0x2ec/0x300
[  175.945164][ T6293]  ? jbd2_write_access_granted+0x69/0x300
[  175.950920][ T6293]  ? jbd2_journal_dirty_metadata+0x352/0xc20
[  175.956940][ T6293]  ? ocfs2_journal_dirty+0x41e/0x680
[  175.962362][ T6293]  ? ocfs2_journal_access_di+0x40/0x40
[  175.967877][ T6293]  ? ocfs2_journal_access+0x40/0x40
[  175.973120][ T6293]  ? rcu_is_watching+0x11/0xa0
[  175.977932][ T6293]  ? __mark_inode_dirty+0x7f4/0xe90
[  175.983176][ T6293]  ocfs2_rename+0x1e72/0x3950
[  175.987918][ T6293]  ? ocfs2_mknod+0x25b0/0x25b0
[  175.992728][ T6293]  ? __lock_acquire+0x13cf/0x7d10
[  175.997796][ T6293]  ? mark_lock+0x94/0x320
[  176.002164][ T6293]  ? __lock_acquire+0x13cf/0x7d10
[  176.007231][ T6293]  ? look_up_lock_class+0x75/0x140
[  176.012386][ T6293]  ? mark_lock+0x94/0x320
[  176.016768][ T6293]  ? __lock_acquire+0x13cf/0x7d10
[  176.021841][ T6293]  ? __lock_acquire+0x7d10/0x7d10
[  176.026911][ T6293]  ? verify_lock_unused+0x140/0x140
[  176.032146][ T6293]  ? verify_lock_unused+0x140/0x140
[  176.037405][ T6293]  ? ocfs2_inode_unlock_tracker+0x26c/0x2e0
[  176.043341][ T6293]  ? __lock_acquire+0x7d10/0x7d10
[  176.048406][ T6293]  ? __rwlock_init+0x140/0x140
[  176.053218][ T6293]  ? rwsem_write_trylock+0x135/0x1c0
[  176.058546][ T6293]  ? clear_nonspinnable+0x60/0x60
[  176.063605][ T6293]  ? take_dentry_name_snapshot+0x90/0xf0
[  176.069277][ T6293]  ? ocfs2_mknod+0x25b0/0x25b0
[  176.074078][ T6293]  vfs_rename+0xbe1/0x1100
[  176.078525][ T6293]  ? __ia32_sys_link+0x90/0x90
[  176.083324][ T6293]  ? d_alloc+0x1e7/0x250
[  176.087590][ T6293]  ? bpf_lsm_path_rename+0x5/0x10
[  176.092646][ T6293]  ? security_path_rename+0x178/0x200
[  176.098050][ T6293]  do_renameat2+0x8e5/0xce0
[  176.102590][ T6293]  ? __lock_acquire+0x7d10/0x7d10
[  176.107663][ T6293]  ? fsnotify_move+0x4e0/0x4e0
[  176.112453][ T6293]  ? __check_object_size+0x500/0xa40
[  176.117778][ T6293]  ? strncpy_from_user+0x1e3/0x350
[  176.122934][ T6293]  ? getname_flags+0x206/0x500
[  176.127733][ T6293]  __x64_sys_rename+0x82/0x90
[  176.132466][ T6293]  do_syscall_64+0x4c/0xa0
[  176.136915][ T6293]  ? clear_bhb_loop+0x60/0xb0
[  176.141641][ T6293]  ? clear_bhb_loop+0x60/0xb0
[  176.146355][ T6293]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.152335][ T6293] RIP: 0033:0x7f3b8399c819
[  176.156789][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.176449][ T6293] RSP: 002b:00007f3b848e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  176.184900][ T6293] RAX: ffffffffffffffda RBX: 00007f3b83c15fa0 RCX: 00007f3b8399c819
[  176.192887][ T6293] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000200000000180
[  176.200866][ T6293] RBP: 00007f3b83a32c91 R08: 0000000000000000 R09: 0000000000000000
[  176.208942][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.216941][ T6293] R13: 00007f3b83c16038 R14: 00007f3b83c15fa0 R15: 00007ffc70aa80c8
[  176.224932][ T6293]  </TASK>
[  176.230210][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.281050][ T6329] EXT4-fs (loop1): Test dummy encryption mode enabled
[  176.309026][ T6327] loop4: detected capacity change from 0 to 32768
[  176.356345][ T6329] EXT4-fs error (device loop1): ext4_xattr_inode_iget:397: comm syz.1.551: Parent and EA inode have the same ino 15
[  176.378409][ T6327] XFS (loop4): Mounting V5 Filesystem
[  176.407153][ T6327] XFS (loop4): Ending clean mount
[  176.415810][ T6329] EXT4-fs (loop1): 1 orphan inode deleted
[  176.444660][ T6329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  176.485476][ T6329] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.551: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=13, rec_len=7, size=56 fake=0
[  176.497890][ T6031] ocfs2: Unmounting device (7,5) on (node local)
[  176.578834][ T6327] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  176.607197][  T126] XFS (loop4): Corruption warning: Metadata has LSN (1:1536) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  176.666316][  T126] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[  176.696213][  T126] XFS (loop4): Unmount and run xfs_repair
[  176.708684][  T126] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  176.717222][  T126] 00000000: 41 42 33 43 00 00 00 03 ff ff ff ff ff ff ff ff  AB3C............
[  176.729775][  T126] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 06 00  ................
[  176.745081][  T126] 00000020: 00 00 00 00 00 00 42 cb 9f 91 9c b7 20 0a 10 1d  ......B..... ...
[  176.754042][  T126] 00000030: 00 00 00 00 83 85 41 d8 00 00 00 07 00 00 00 01  ......A.........
[  176.763232][  T126] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  176.772393][  T126] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.781689][  T126] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.790911][  T126] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.800319][ T6327] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 4 error 74
[  176.815116][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  176.822638][ T6327] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54f/0x9c0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  176.871267][ T6327] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  176.924977][ T4278] XFS (loop4): Unmounting Filesystem
[  177.245117][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.794761][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.274836][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.315047][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.364793][ T5328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.834776][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.394768][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.434834][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.156835][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.474771][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.874690][  T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.514805][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog