last executing test programs:

3.171974622s ago: executing program 1 (id=1334):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffff0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000021001f002cbd7000fddbdf2502"], 0x34}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)

3.013673548s ago: executing program 1 (id=1336):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0x61f0, 0x10100, 0x2, 0x2ea}, &(0x7f0000000100), &(0x7f00000001c0))
pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0)

2.823941877s ago: executing program 1 (id=1338):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x3810082, &(0x7f0000000280)=ANY=[@ANYBLOB='undelete,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,rootdir=00000000000000001055,iocharset=cp864,unhide,gid=ignore,mode=00000000000000000000001,anchor=00000000000000000000,\x00'], 0x1, 0xc3c, &(0x7f0000002680)="$eJzs3U9sHNd9B/DfGy7Fld1WTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpVlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNIXRI9O6QHLxocipJ6KFjaDogS0C5BSwmNm34pKibEUkJUr6fGzquzvz3ux789YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN979dzxE+lBtwIAuJ8ujH/1+En3fwB4rFzy//8AAAAAAAAAAAAAALDfpSjiqUgxd2EtTVbvu+rnO4M3bk6Mjm1f7WCqag5U5cuf+omTp05/6cWRM70835n5iPq77bPx+vilc41XZq/PzbcXFtpTjYmZzpXZqfZdH2Gn9bc6Wp2AxvU3bkxdvbrQOPnCqU27bw5/OPTk4eGzI88de7ZXdmJ0bGx8o0i9v3ztnhvSdacZHgeiiGOR4vnv/SS1IqKInZ+L+v0d+60OVp04WnViYnSs6sh0pzWzWO682DsRRUSjr1Kzd462H4uoDd7XPtxZM2KpbH7Z4KNl98bnWvOty9PtxsXW/GJnsTM7czF1W1v2pxFFnEkRyxGxOnT74QajiFqk+M6htXQ5IgZ65+GL1cTgO7ej2MM+3oWynY3BiOXiIRizfWwoingtUvz0vSNxJV9nqmvNFyJeK/PdiLfLfDkilV+M0xEfbPM94uFUiyL+ohz/s2tpqroe9K4r57/W+MrM1dm+sr3ryi94f7jtSvGA7g8Ht+T9sc+vTfUoolVd8dfSvf9mBwAAAAAAAAAAAAAAAIDddjCK+EykePXf/7iaVxzVvPRDZ0d+f/iX++eMP/MxxynLvhARS8Xdzck9kCcGXkwXU3rAc4kfZ/Uo4k/i3Wr+37cedGMAAAAAAAAAAAAAAAAAAAAea0X8OFK89P6RtBz9a4p3Zq41LrUuT3dXhe2t/dtbM319fX29kbrZzDmZcynncs6VnKs5o8j1czZzTuZcyrmccyXnas4YyPVzNnNO5lzKuZxzJedqzqjl+jmbOSdzLuVczrmSczVn7JO1ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiVFFPHzSPHtb6ylSBHRjJiMbq4MPejWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACloVTE9yNF4w+at7bVIiJV/3YdKX85Hc0DZX4ymiNlvhzNczlbVdaa33oA7WdnBlMRP4oUQ/V3bg14Hv/B7rtbX4N4+5sb7z5b6+ZAb+fwh0NPHj50dmTs15650+u0XQOOnu/M3LjZmBgdGxvv21zLn/7Jvm3D+XOL3ek6EbHw5ltvtKan2/P3/qL8Cuyg+kP0ItX2pqdD+6WDXmx+EbV90YwH03ceA+X9/4NI8dvv/0fvht+9/9fjl7rvbt3h42d/unH/f2nrge7y/l/bWi/f/8t7+nb3/6f6tr2UfzcyWIuoL16fGzwcUV94861jneuta+1r7ZnTx49/eWTky6eODx6IqF/tTLf7Xu3K6QIAAAAAAAAAAAAAAAC4f1IRvxspWj9aS42IuFnN1xo+O/LcsWcHYqCab7Vp3vbr45fONV6ZvT43315YaE81JmY6V2an2nf7cfVqutfE6NiedOZjHdzj9h+svzI79+Z859ofLW67/4n6ucsLi/OtK9vvjoNRRDT7txytGjwxOlY1errTmqmqXtx2Mv0vbjAV8Z+R4srpRvp83pbn/2+d4b9p/v/S1gPt0fz/T/RtKz8zpSJ+Fil+6y+fic9X7XwibjtnudzfRoqjZz6Xy8WBslyvDd3nCnRnBpZl/zdS/OPPN5ftzYd8aqPsibs+sQ+JcvwPRYrv//l349fzts3Pf9h+/J/YeqA9Gv+n+7Y9sel5BTvuOnn8j0WKl596J34jb/uo53/0nr1xJBe+9XyOPRr/T/VtG86f+5u703UAAAAAAAAAAICH2mAq4u8ixQ/GaunFvO1u/v7f1NYD7dHf//p037ap3Vmv6GNf7PikAgAAAMA+MZiK+HGkuLb4zq051Jvnf/fN//ydjfmfo2nL3urP+X6lem7Abv75X7/h/LmTO+82AAAAAAAAAAAAAAAAAAAA7CspFfFiXk99sprPn7ZZ3L1bbiVSvPrfz/fKHY5io+hw9Wv9wuzMsXPT07NXWouty9Ptxvhc60q7rPt0pFj7m8/lukW1vnpvvfnuGu8ba7HPR4qxv++V7a7F3lub/Ole2aX2ibLsJyLFf/3D5rK9daw/tXHck2XZv44UX//n7cse3ih7qiz73Ujxw683emWfKMv2no/66Y2yL1yZLXZ7SAAAAAAAAAAAAAAAAAAAAHgMDaYi/ixS/M/15Vtz+fP6/4N9bytvf7Nvvf8tblbr/A9X6//f6fW9rP9fPVdg6U6fCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj6YURbwVKeYurKWVofJ9V/18Z+bGzYnRse2rHUxVzYGqfPlTP3Hy1OkvvThyppcfXX+3fSZeH790rvHK7PW5+fbCQnuqMTHTuTI71b7rI+y0/lZHqxPQuP7GjamrVxcaJ184tWn3zeEPh548PHx25Lljz/bKToyOjY33lakN3vOn3ybdYfuBKOKvIsXz3/tJ+sFQRBE7Pxcf893ZawerThytOjExOlZ1ZLrTmlksd17snYgiotFXqdk7R/dhLHakGbFUNr9s8NGye+NzrfnW5el242JrfrGz2JmduZi6rS3704gizqSI5YhYHbr9cINRxBuR4juH1tK/DEUM9M7DFy+krx4/eed2FHvYx7tQtrMxGLFcfNSYbdNhNhmKIv4pUvz0vSPxr0MRtej+xBciXivz3Yi3ozveqfxinI74wGl9ZNSiiP8rx//sWnpvqLwe9K4r57/W+MrM1dm+sr3ryub7w0A8dPeH+2mf30/qUcQPqyv+Wvo3/10DAAAAAAAAAAAAAAAA7CNF/GqkeOn9I6maH3xrTnFn5lrjUuvydHdaX2/uX2/O9Pr6+nojdbOZczLnUs7lnCs5V3NGkevnbJZZX1+fzO+Xci7nXMm5mjMGcv2czT/Mjcrvl3Iu51zJuZozarl+zmbOyZxLOZdzruRczRn7ZO4eAAAAAAAAAAAAAAAAAADwaCmqf1J8+xtraX2oWl96oLdvxXqgj7z/DwAA//9cO/Ma")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x5)
renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x0)

2.59225159s ago: executing program 1 (id=1341):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41)

2.415997488s ago: executing program 1 (id=1342):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740), 0x5d, 0x0, 0x0, 0x41}}], 0x1, 0x40008c0)

2.383447031s ago: executing program 1 (id=1343):
syz_usb_connect$cdc_ncm(0x4, 0x73, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8)
close(r0)

1.701271579s ago: executing program 2 (id=1348):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x6, 0x0, [{0x1, 0x4, 0x1, 0x0, @irqchip={0x8, 0x10}}, {0x1, 0x1, 0x1, 0x0, @sint={0x200, 0x2cb7}}, {0x0, 0x0, 0x0, 0x0, @msi={0xc, 0x9, 0x1, 0x7fffffff}}, {0x72fe, 0x5, 0x0, 0x0, @sint={0x9, 0x1e619440}}, {0x3, 0x5, 0x1, 0x0, @msi={0x5, 0xffffffff, 0x71, 0x1}}, {0xf, 0x1, 0x1, 0x0, @adapter={0xd02, 0x5, 0x1000, 0x2, 0x2}}]})

1.441841615s ago: executing program 2 (id=1350):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.441184835s ago: executing program 0 (id=1358):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001701000002000000000000000000000018"], 0x30}, 0x0)

1.258520253s ago: executing program 0 (id=1351):
syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f6e6572726f723d72657061697200af0e9f288a3738834acbcbb9c70d4a3a11a0dd9d52f9114ebf52be0fc4538d24258a7fd01b8c1370f6254bfe78ca8d89fce21b8aa9711e77ff67dcb1d6fb4203eeecce170400"/106], 0x1, 0x9e18, &(0x7f000001dac0)="$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")
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)

990.97237ms ago: executing program 0 (id=1353):
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x121, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a00"], 0x1c}], 0x1}, 0x0)

990.32387ms ago: executing program 2 (id=1354):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r0}, 0x18)
r1 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0xfffc, 0x11, 0x0, 0x0}, {0x100, 0x2001, 0x0, 0x0}], 0x2})

872.048152ms ago: executing program 0 (id=1356):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
setuid(0xee01)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000300, 0x0, 0x0)

834.697506ms ago: executing program 2 (id=1357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x34}}, 0xea5bc50b619dd77e)

668.024573ms ago: executing program 0 (id=1360):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x0)

667.768723ms ago: executing program 2 (id=1361):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_io_uring_setup(0x3874, &(0x7f0000002380)={0x0, 0x1f09, 0x1, 0x2, 0x1f2, 0x0, r0}, &(0x7f0000002400), &(0x7f0000002440))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000008e80)=r0, 0x1)

580.884741ms ago: executing program 2 (id=1363):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400d5d0000001a4657a75b9139ee170f4bb785474545af501e0c1356f824761a6b5d20e8a1f2b98e8c05382c35cdb32591169601d84eb1c1c3a6c1a84aee0594d949000000b36f683ab651373d92c3a2877bfeddf90ae6afa56dbadeb786c800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

496.10028ms ago: executing program 3 (id=1364):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

481.059361ms ago: executing program 0 (id=1365):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000200)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x4460, &(0x7f0000008900)="$eJzs3c9rG1ceAPA3spPY2SRrZxPIwsIKNrDL7mLsnHbXC3UcJ46duCluE0ovimwriVvZCrZcesjBvQV6KvRQeggptCefQg69pn9CLz30kJ56CG0PhVIohLpIGtmasVQrwbJx+vkcPJr35v2wvvPjjWDeZGLlW/PL2fnlbH4xW5q9sXwm+3apuLJQCJld0rT9A7vXPu3pxH6y1/ve79mVcxdevXYmhM/nvnyyvr6+Hiq6Q1NDDZ9/+uHObOOyLpMqU6m3eW075Y0Qwokt/aroCiG8/lkIUQjhbJw2Gi97QwhHQy3v2p33rmd3qDcPHhf+n3s6dffh8OnJtXsPW//vUQgfFf/875sL3/2ta/jrf+5Q8wAAAAAAAAAAAAAAAAAA7HPj01euvjI4FB5FoXst2vq87ni8bPV87PqO+WtjtYknkL9NP1QMAAAAAAAAAAAAAAAAAAAAL5jN5/+z0fEmz/+PxcuRFuXXX+p8H+mciZevjJ0fHIrf/x5tyf9PnPT92a7Q3+S97+n3v59NlW/+/vet7Tyvev/q7faFKDOQWM9kBgZC+Dh+8fup6HCmWFou/+tGaWVxbse6sW8l41+baCMRnXjujXbjP5qqv/Pv///Tlr2psn5953axF1oy/l0tt/vk3ait+J9LlduN+D8r08lsSsa/Nu1Ob+MGI7VvqxL/97u3j/9Yqv5Oxf9YCCEbVfqaTZwBKmOYSnqr8QpJyfgfqKYlTp3xF9nq+P85Ff/zqfr36vy/mr4Q0VQy/geraT2JLTaP//4f46m6fuP4v5Cqfy/iX+n/ajVx+tPOtr3/JeN/qJaYmH2t9vW2e/4fTxQ92LH4X83E/TwWJfaAtaiW3mq+OpKS8e/Zkr95/5dpa/x3MVV+t+7/6u32hVC9/6uf/v8R1e7/aC4Z/9509lcn4xupdo//iVQFnT7/j1THfzyvZPwPV9OSY+e+6t924z+Zqj8d/2/+sDP9ro5Keurx3zyf/HKoln7f+K8tyfjHwck0/g6wWv1bHf9F24//L6Xq34vxX2XnWE3d5B/sbCf2rWT8j6SzTw7HHyrx/6KN6//lVAWdj38Ig37re27J+B9tuV31+O/ZPv5TqXKdjv/ft8lPX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjSj8bIvRJmBxHomMzAQwrl4/VQ4HM3k53IzxdLsW8shjMXp2XA8ulkszeSLufnF0lwhly8WS7MhnI/zT4SeaLlYKucW8rcvbNTVG90q5JfKM4V8OYQwHqf/JRyt1zUzX17I3w4hXNzI+2OmtHT7Vn4xNze/9L/BwcHBMLHRh/6o8E65sFiutV7LDWFyo2xf1NC5avaljb4cid4srSwt5ovV9MsNZYql2XyxocxUnPdB6I/KSyuLs/lyIVcs3ay3t5dG4uXYxPRr05eHtuRfj2rL0d3tFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP6NHwfz8MIXTX1jIhhJH6h6jZ9g8eF7pyT6fuPhw+Pbl27/6TVtsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbpGCViIAoD8JuxiZ3HsApJZxtRRAsjgifQY3gYPYqX8A4WFrZWgjsDS3YC2+xW39c8yE94D+YHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA/N4/z08MwRqTockR8vHx+bed3Zb5dtv8/OcKNHM7t/Xx1PYzl3dNOflE+fU/5P/39eX2OxqzeFz1Z9mmj7jldvavVt65Rtnpf3XsWKfcRMZX8POXc96trAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3zqJrAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFYAAAD//4ABJ8M=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000100)=@v2={0x2000000, [{0xc73, 0xfffffffe}, {0xfffffff9, 0xbea}]}, 0x14, 0x1)
truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9)

327.326856ms ago: executing program 3 (id=1366):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

216.084848ms ago: executing program 3 (id=1367):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
setresuid(0x0, 0xee00, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

183.269431ms ago: executing program 3 (id=1368):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x58, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ec38b7d152b1f891ec57b30f8cf9a4a1"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7b23b2f5bd0c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "4c555eaac261684d1b5db98ba3882e2a"}]}, 0x58}}, 0x40010)

116.383458ms ago: executing program 3 (id=1369):
r0 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1})
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000))

0s ago: executing program 3 (id=1370):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10c4}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

T5839] usb 3-1: config 0 interface 0 has no altsetting 0
[  152.822112][ T5839] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  152.822274][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.831434][ T5839] usb 3-1: config 0 descriptor??
[  153.034050][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.046170][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.057605][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.080104][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.102919][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.119653][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.123731][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.168611][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.191640][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.209251][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.220023][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  153.237232][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.257091][ T7221] loop3: detected capacity change from 0 to 512
[  153.258792][ T7215] batman_adv: batadv0: Adding interface: ipvlan2
[  153.272849][ T7215] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.331531][ T7215] batman_adv: batadv0: Interface activated: ipvlan2
[  153.340985][ T7221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.357394][ T7221] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.596634][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.639637][ T5853] usb 3-1: USB disconnect, device number 8
[  154.093836][ T7233] loop3: detected capacity change from 0 to 2048
[  154.140731][ T7233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.153486][ T7233] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.188300][ T7239] loop1: detected capacity change from 0 to 64
[  154.347910][ T7246] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ
[  154.438371][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.429579][ T5853] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  155.624700][ T5853] usb 1-1: Using ep0 maxpacket: 16
[  155.655682][ T5853] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.678312][ T5853] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.709361][ T5853] usb 1-1: config 0 interface 0 has no altsetting 0
[  155.724629][ T5853] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  155.744082][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.772540][ T5853] usb 1-1: config 0 descriptor??
[  156.010765][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.022990][ T7250] loop3: detected capacity change from 0 to 65536
[  156.034204][ T7275] loop1: detected capacity change from 0 to 2048
[  156.052074][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.096519][ T7250] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  156.188034][ T7275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.192455][ T7250] XFS (loop3): Ending clean mount
[  156.228985][ T7275] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.289968][ T7250] XFS (loop3): syz.3.535 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  156.351353][ T7275] fs-verity: sha512 using implementation "sha512-avx2"
[  156.421665][ T7275] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.547: bg 0: block 345: padding at end of block bitmap is not set
[  156.437440][ T5791] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  156.470694][ T7275] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0
[  156.511030][ T7275] fs-verity (loop1, inode 13): Error -117 building Merkle tree
[  156.649781][ T5826] usb 1-1: USB disconnect, device number 9
[  156.727798][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.868834][ T7277] loop2: detected capacity change from 0 to 32768
[  156.922020][ T7277] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  156.938366][ T7277] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.135405][ T7300] loop1: detected capacity change from 0 to 16
[  157.145460][ T7277] XFS (loop2): Ending clean mount
[  157.169096][ T7300] erofs: (device loop1): mounted with root inode @ nid 36.
[  157.240902][ T7300] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  157.285292][ T7300] syz.1.551: attempt to access beyond end of device
[  157.285292][ T7300] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  157.327342][ T7302] loop3: detected capacity change from 0 to 2048
[  157.347953][ T7302] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576
[  157.397289][ T7302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.410350][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.756886][ T7308] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ
[  158.113971][ T7320] macvtap0: entered promiscuous mode
[  158.136395][ T7320] macvtap0: left promiscuous mode
[  158.579822][ T5853] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  158.791226][ T5853] usb 4-1: Using ep0 maxpacket: 32
[  158.802395][ T5853] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  158.802620][ T7326] loop1: detected capacity change from 0 to 32768
[  158.826462][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.857622][ T5853] usb 4-1: config 0 descriptor??
[  158.875511][ T7326] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  158.904921][ T7326] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.949625][   T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  159.015364][ T7330] loop0: detected capacity change from 0 to 32768
[  159.022981][ T7326] XFS (loop1): Ending clean mount
[  159.124184][ T5853] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  159.131869][   T27] usb 3-1: Using ep0 maxpacket: 16
[  159.163131][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.172588][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.187037][   T27] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  159.197703][ T5853] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  159.221925][ T5853] usb 4-1: media controller created
[  159.228169][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.258341][ T5790] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.275426][   T27] usb 3-1: config 0 descriptor??
[  159.322086][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.469928][ T5853] az6027: usb out operation failed. (-71)
[  159.501599][ T5853] az6027: usb out operation failed. (-71)
[  159.507441][ T5853] stb0899_attach: Driver disabled by Kconfig
[  159.523767][ T5853] az6027: no front-end attached
[  159.523767][ T5853] 
[  159.555293][ T5853] az6027: usb out operation failed. (-71)
[  159.579732][ T5853] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  159.631799][ T5853] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  159.693247][ T5853] dvb-usb: schedule remote query interval to 400 msecs.
[  159.710615][ T5853] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  159.729857][ T5853] usb 4-1: USB disconnect, device number 7
[  159.806255][   T27] wacom 0003:056A:003F.0008: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0
[  159.905625][ T5853] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  160.010154][ T5839] usb 3-1: USB disconnect, device number 9
[  160.042521][ T7348] fido_id[7348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  160.205571][ T7352] loop3: detected capacity change from 0 to 64
[  160.407767][ T7345] loop0: detected capacity change from 0 to 40427
[  160.434300][ T7345] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff
[  160.445701][ T7345] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  160.455212][ T7345] F2FS-fs (loop0): Image doesn't support compression
[  160.474402][ T7345] F2FS-fs (loop0): invalid crc value
[  160.490772][ T7345] F2FS-fs (loop0): Found nat_bits in checkpoint
[  160.679868][ T7345] F2FS-fs (loop0): Start checkpoint disabled!
[  160.751980][ T7345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  160.783141][ T7362] macvtap0: entered promiscuous mode
[  160.816820][ T7362] macvtap0: left promiscuous mode
[  160.872465][ T7345] syz.0.568: attempt to access beyond end of device
[  160.872465][ T7345] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  161.131124][ T7371] loop2: detected capacity change from 0 to 2048
[  161.222453][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.249957][ T7371] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.382052][ T7371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.577: bg 0: block 345: padding at end of block bitmap is not set
[  161.432944][ T7371] fs-verity (loop2, inode 13): Error -117 writing Merkle tree block 0
[  161.445904][ T7378] loop3: detected capacity change from 0 to 4096
[  161.452675][ T7371] fs-verity (loop2, inode 13): Error -117 building Merkle tree
[  161.475940][ T7378] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  161.521152][ T7378] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  161.533709][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.580092][ T7379] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.806591][ T7381] loop2: detected capacity change from 0 to 164
[  161.881066][ T7385] loop1: detected capacity change from 0 to 2048
[  161.889288][ T7385] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576
[  161.889356][ T5791] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  161.934307][ T7385] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.960160][ T5791] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12)
[  161.991751][ T5791] Remounting filesystem read-only
[  161.996859][ T5791] NILFS (loop3): error -5 truncating bmap (ino=12)
[  162.049687][ T5791] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  162.058633][ T5791] NILFS (loop3): discard dirty page: offset=0, ino=2
[  162.079547][ T5839] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  162.132843][ T5791] NILFS (loop3): discard dirty block: blocknr=14, size=4096
[  162.151561][ T5791] NILFS (loop3): discard dirty page: offset=0, ino=6
[  162.158331][ T5791] NILFS (loop3): discard dirty block: blocknr=23, size=4096
[  162.209621][ T5791] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  162.218487][ T5791] NILFS (loop3): discard dirty block: blocknr=24, size=4096
[  162.255144][ T5791] NILFS (loop3): discard dirty page: offset=8192, ino=6
[  162.286218][ T5791] NILFS (loop3): discard dirty block: blocknr=25, size=4096
[  162.296592][ T7389] loop1: detected capacity change from 0 to 64
[  162.317100][ T5839] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  162.349051][ T5839] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  162.401781][ T5839] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  162.419138][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.445439][ T7383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  162.476722][ T5839] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  162.943194][ T5853] usb 1-1: USB disconnect, device number 10
[  163.125326][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.591'.
[  163.161738][ T7404] 8021q: adding VLAN 0 to HW filter on device batadv1
[  163.179380][ T7404] team0: Port device batadv1 added
[  163.219241][ T7393] loop3: detected capacity change from 0 to 32768
[  163.772773][ T7414] loop3: detected capacity change from 0 to 164
[  163.817015][ T7416] hsr0: entered promiscuous mode
[  163.823969][ T7418] loop1: detected capacity change from 0 to 64
[  163.832563][ T7416] macvlan2: entered allmulticast mode
[  163.843513][ T7416] hsr0: entered allmulticast mode
[  163.848807][ T7416] hsr_slave_0: entered allmulticast mode
[  163.858019][ T7416] hsr_slave_1: entered allmulticast mode
[  163.896181][ T7416] hsr0: left allmulticast mode
[  163.908163][ T7416] hsr_slave_0: left allmulticast mode
[  163.924328][ T7416] hsr_slave_1: left allmulticast mode
[  164.049593][ T5826] kernel read not supported for file /dsp1 (pid: 5826 comm: kworker/1:3)
[  164.358631][ T7428] loop2: detected capacity change from 0 to 256
[  164.378104][ T7428] exfat: Deprecated parameter 'utf8'
[  164.436477][ T7428] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  164.484967][ T7430] mkiss: ax0: crc mode is auto.
[  164.609574][ T5839] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  164.801701][ T5839] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  164.827126][ T5839] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  164.848862][ T5839] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  164.859993][ T7440] program syz.0.608 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  164.877076][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.898479][ T7426] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  164.921343][ T5839] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  164.924506][ T7442] loop2: detected capacity change from 0 to 16
[  164.991144][ T7442] erofs: (device loop2): mounted with root inode @ nid 36.
[  165.048511][ T7442] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  165.085397][ T7442] syz.2.610: attempt to access beyond end of device
[  165.085397][ T7442] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  165.335786][ T7446] hsr0: entered promiscuous mode
[  165.341154][ T7446] macvlan2: entered allmulticast mode
[  165.347755][ T7446] hsr0: entered allmulticast mode
[  165.359119][ T7446] hsr_slave_0: entered allmulticast mode
[  165.365542][ T7446] hsr_slave_1: entered allmulticast mode
[  165.383902][  T786] usb 4-1: USB disconnect, device number 8
[  165.405919][ T7446] hsr0: left allmulticast mode
[  165.424138][ T7446] hsr_slave_0: left allmulticast mode
[  165.454901][ T7446] hsr_slave_1: left allmulticast mode
[  165.626462][ T7438] loop1: detected capacity change from 0 to 32768
[  166.123850][ T7457] mkiss: ax0: crc mode is auto.
[  166.366379][ T7462] loop2: detected capacity change from 0 to 4096
[  166.489905][ T5839] kernel read not supported for file /dsp1 (pid: 5839 comm: kworker/0:4)
[  166.601841][ T7466] mkiss: ax0: crc mode is auto.
[  167.273284][ T7484] loop0: detected capacity change from 0 to 4096
[  167.672398][ T7495] loop3: detected capacity change from 0 to 16
[  167.719710][ T7496] ax25_connect(): syz.1.637 uses autobind, please contact jreuter@yaina.de
[  167.733678][ T7495] erofs: (device loop3): mounted with root inode @ nid 36.
[  167.760756][ T7493] loop0: detected capacity change from 0 to 2048
[  167.768723][ T7493] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[  167.862755][ T7493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.022901][ T7500] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  168.180134][ T7502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.588511][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'.
[  168.883013][ T7518] loop1: detected capacity change from 0 to 4096
[  168.908531][ T7518] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  169.000450][ T7523] loop3: detected capacity change from 0 to 2048
[  169.031529][ T7523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.375700][ T7504] loop0: detected capacity change from 0 to 40427
[  169.398496][ T7504] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  169.415133][ T7504] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  169.426234][ T7504] F2FS-fs (loop0): invalid crc value
[  169.440276][ T7504] F2FS-fs (loop0): Found nat_bits in checkpoint
[  169.483605][ T7526] loop3: detected capacity change from 0 to 2048
[  169.515652][ T7526] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576
[  169.617524][ T7526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.657789][ T7504] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  169.692162][ T7504] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  169.797144][ T5786] syz-executor: attempt to access beyond end of device
[  169.797144][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  169.829852][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  170.049935][ T7535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.335143][  T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  170.554695][  T786] usb 3-1: Using ep0 maxpacket: 16
[  170.573400][  T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.585617][  T786] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  170.595230][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.606579][  T786] usb 3-1: config 0 descriptor??
[  170.623251][  T786] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21
[  170.764876][ T7552] loop0: detected capacity change from 0 to 2048
[  170.791803][ T7552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.890204][ T5144] bcm5974 3-1:0.0: could not read from device
[  170.918202][ T7537] bcm5974 3-1:0.0: could not read from device
[  170.942403][ T5144] bcm5974 3-1:0.0: could not read from device
[  170.953237][  T786] usb 3-1: USB disconnect, device number 10
[  170.975373][ T5144] bcm5974 3-1:0.0: could not read from device
[  170.995872][ T5144] bcm5974 3-1:0.0: could not read from device
[  171.199568][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  171.382590][    T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  171.391821][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.403787][    T9] usb 4-1: config 0 descriptor??
[  171.413032][    T9] gspca_main: spca508-2.14.0 probing 8086:0110
[  171.659913][    T9] gspca_spca508: reg_read err -32
[  171.674496][    T9] gspca_spca508: reg_read err -32
[  171.888143][ T7566] loop1: detected capacity change from 0 to 2048
[  171.895234][    T9] gspca_spca508: reg_read err -71
[  171.909836][    T9] gspca_spca508: reg_read err -71
[  171.911740][ T7566] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576
[  171.919959][    T9] gspca_spca508: reg write: error -71
[  171.950213][    T9] spca508: probe of 4-1:0.0 failed with error -71
[  171.973217][    T9] usb 4-1: USB disconnect, device number 9
[  171.979008][ T7566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.486137][ T7562] loop2: detected capacity change from 0 to 40427
[  172.499003][ T7562] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  172.499031][ T7562] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  172.508357][ T7562] F2FS-fs (loop2): invalid crc value
[  172.512726][ T7562] F2FS-fs (loop2): Found nat_bits in checkpoint
[  172.705343][ T7562] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  172.731381][ T7562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  172.839682][ T5793] syz-executor: attempt to access beyond end of device
[  172.839682][ T5793] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  172.860965][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  173.394399][ T7601] input: syz1 as /devices/virtual/input/input22
[  174.157527][ T7620] loop2: detected capacity change from 0 to 4096
[  174.167714][ T7620] ntfs3: Unknown parameter 'measure'
[  174.502769][ T7612] loop3: detected capacity change from 0 to 40427
[  174.529783][ T7612] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  174.539265][ T7612] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  174.566380][ T7612] F2FS-fs (loop3): invalid crc value
[  174.599877][ T7622] loop1: detected capacity change from 0 to 4096
[  174.603201][ T7612] F2FS-fs (loop3): Found nat_bits in checkpoint
[  174.618378][ T7622] ntfs3: Unknown parameter 'measure'
[  174.767776][ T7612] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  174.791343][ T7612] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  175.009837][ T5791] syz-executor: attempt to access beyond end of device
[  175.009837][ T5791] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.039603][ T5791] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  175.220003][  T786] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  175.439779][  T786] usb 1-1: Using ep0 maxpacket: 16
[  175.450002][  T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.468496][ T7633] loop1: detected capacity change from 0 to 32768
[  175.470704][  T786] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  175.497021][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.514598][  T786] usb 1-1: config 0 descriptor??
[  175.548359][  T786] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23
[  175.695750][ T7637] netlink: 'syz.2.698': attribute type 1 has an invalid length.
[  175.732391][ T7639] loop3: detected capacity change from 0 to 128
[  175.816731][ T5144] bcm5974 1-1:0.0: could not read from device
[  175.839920][ T7635] bcm5974 1-1:0.0: could not read from device
[  175.843367][  T786] usb 1-1: USB disconnect, device number 11
[  175.890695][ T5144] bcm5974 1-1:0.0: could not read from device
[  175.914688][ T5144] bcm5974 1-1:0.0: could not read from device
[  176.176604][ T7646] loop2: detected capacity change from 0 to 4096
[  176.199857][ T7646] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  176.278427][ T7648] loop1: detected capacity change from 0 to 1024
[  176.319653][ T5839] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  176.346429][ T7648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  176.370435][ T7648] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.509786][ T5839] usb 4-1: Using ep0 maxpacket: 32
[  176.520822][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11
[  176.536419][ T7648] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.697: lblock 3 mapped to illegal pblock 3 (length 3)
[  176.549518][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024
[  176.582300][ T5839] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  176.599494][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.615700][ T5839] usb 4-1: Product: syz
[  176.629991][ T7648] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  176.648951][ T5839] usb 4-1: Manufacturer: syz
[  176.658371][ T5839] usb 4-1: SerialNumber: syz
[  176.665992][ T7648] EXT4-fs (loop1): This should not happen!! Data will be lost
[  176.665992][ T7648] 
[  176.686917][ T5839] usb 4-1: config 0 descriptor??
[  176.705295][ T7644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  176.719834][ T7652] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 8: comm syz.1.697: lblock 8 mapped to illegal pblock 8 (length 8)
[  176.749919][ T7652] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  176.764521][ T7652] EXT4-fs (loop1): This should not happen!! Data will be lost
[  176.764521][ T7652] 
[  176.765676][ T5839] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  176.858026][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  176.971266][ T5839] usb 4-1: USB disconnect, device number 10
[  176.977901][   T42] usb 4-1: Failed to submit usb control message: -71
[  176.990447][   T42] usb 4-1: unable to send the bmi data to the device: -71
[  176.997686][   T42] usb 4-1: unable to get target info from device
[  177.009561][   T42] usb 4-1: could not get target info (-71)
[  177.015492][   T42] usb 4-1: could not probe fw (-71)
[  177.842936][ T7681] loop0: detected capacity change from 0 to 4096
[  177.858727][ T7681] ntfs3: Unknown parameter 'measure'
[  177.959825][ T5826] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  178.165934][ T7693] loop2: detected capacity change from 0 to 128
[  178.170156][ T5826] usb 2-1: Using ep0 maxpacket: 32
[  178.182452][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11
[  178.216752][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024
[  178.233812][ T7691] loop0: detected capacity change from 0 to 256
[  178.241978][ T7690] loop3: detected capacity change from 0 to 1024
[  178.260901][ T5826] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  178.277044][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.294124][ T7691] exfat: Deprecated parameter 'utf8'
[  178.305932][ T5826] usb 2-1: Product: syz
[  178.311079][ T5826] usb 2-1: Manufacturer: syz
[  178.315770][ T5826] usb 2-1: SerialNumber: syz
[  178.325533][ T5826] usb 2-1: config 0 descriptor??
[  178.337571][ T7679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  178.346825][ T7690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  178.363116][ T7690] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.378258][ T5826] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  178.422105][ T7691] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  178.448962][ T7690] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 3)
[  178.473832][ T7690] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  178.516618][ T7690] EXT4-fs (loop3): This should not happen!! Data will be lost
[  178.516618][ T7690] 
[  178.531609][ T7700] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 8: comm syz.3.717: lblock 8 mapped to illegal pblock 8 (length 8)
[  178.553575][ T7700] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  178.575801][ T7700] EXT4-fs (loop3): This should not happen!! Data will be lost
[  178.575801][ T7700] 
[  178.648629][ T5839] usb 2-1: USB disconnect, device number 9
[  178.654945][   T12] usb 2-1: Failed to submit usb control message: -71
[  178.673527][   T12] usb 2-1: unable to send the bmi data to the device: -71
[  178.683976][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  178.693107][   T12] usb 2-1: unable to get target info from device
[  178.713852][   T12] usb 2-1: could not get target info (-71)
[  178.749732][   T12] usb 2-1: could not probe fw (-71)
[  178.925439][ T7706] xt_CT: You must specify a L4 protocol and not use inversions on it
[  178.957687][ T7708] loop0: detected capacity change from 0 to 512
[  179.002756][ T7708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.017598][ T7708] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.074886][ T7712] netlink: 64 bytes leftover after parsing attributes in process `syz.2.726'.
[  179.142492][ T7714] macvlan0: entered promiscuous mode
[  179.223640][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.410245][ T7718] loop3: detected capacity change from 0 to 2048
[  179.505469][ T7723] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.693477][ T7727] loop0: detected capacity change from 0 to 1024
[  179.759314][ T7727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  179.796746][ T7727] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.954256][ T7727] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm syz.0.732: lblock 3 mapped to illegal pblock 3 (length 3)
[  180.002527][ T7727] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  180.033359][ T7727] EXT4-fs (loop0): This should not happen!! Data will be lost
[  180.033359][ T7727] 
[  180.075954][ T7734] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 8: comm syz.0.732: lblock 8 mapped to illegal pblock 8 (length 8)
[  180.120159][ T7734] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  180.149610][ T7734] EXT4-fs (loop0): This should not happen!! Data will be lost
[  180.149610][ T7734] 
[  180.249193][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  180.255367][ T7717] loop2: detected capacity change from 0 to 32768
[  180.631271][ T7750] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0
[  180.890206][ T7757] tipc: Started in network mode
[  180.909572][ T7757] tipc: Node identity ac14140f, cluster identity 4711
[  180.916716][ T7757] tipc: New replicast peer: 255.255.255.255
[  180.959277][ T7757] tipc: Enabled bearer <udp:syz2>, priority 10
[  181.412279][ T7773] loop0: detected capacity change from 0 to 128
[  181.679252][ T7758] loop2: detected capacity change from 0 to 32768
[  181.726839][ T7758] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.012461][ T7758] XFS (loop2): Ending clean mount
[  182.075244][ T5853] tipc: Node number set to 2886997007
[  182.314403][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.370154][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'.
[  182.489580][ T5853] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  182.699586][ T5853] usb 4-1: Using ep0 maxpacket: 16
[  182.707726][ T5853] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.718675][ T5853] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  182.734096][ T7807] [U] 
[  182.736955][ T7807] [U] K{‘
[  182.740623][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.758690][ T7807] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[  182.769363][ T5853] usb 4-1: config 0 descriptor??
[  182.777737][ T7807] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[  182.810587][ T5853] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24
[  182.827533][ T7807] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[  182.851371][ T7807] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<Ã	¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[  182.887882][    C1] vkms_vblank_simulate: vblank timer overrun
[  182.918654][ T7807] [U] 	+�W‰G?]£Ó'A:	»Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[  183.052626][ T7807] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$	µ.Î7YÓ±œ2³
[  183.065114][ T7807] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[  183.112536][ T7813] tipc: Started in network mode
[  183.117587][ T7813] tipc: Node identity ac14140f, cluster identity 4711
[  183.131209][ T7807] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[  183.167700][ T7813] tipc: New replicast peer: 255.255.255.255
[  183.179299][ T5144] bcm5974 4-1:0.0: could not read from device
[  183.179398][  T786] usb 4-1: USB disconnect, device number 11
[  183.199240][ T7799] bcm5974 4-1:0.0: could not read from device
[  183.211853][ T7807] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿Ë;FЕ�I+ÖÐVUHÅÐÂMÑJ³´Æ·ÙÛZÄCØÃZ‹¼Â)_ÇŸ¡	Ô‘¡&ßÖ¡ßÁAÇXTOÈÝÊ_½ Ú¼¦:¨Â×%À²PÒ×ÈCÖ²‚YÖ+_ÞÜ›ÝÛ}UÏM˜ƒÆ«CÅ!KJÒ7пG¯Ë=BÈ
[  183.216437][ T7813] tipc: Enabled bearer <udp:syz2>, priority 10
[  183.233988][ T7807] [U] Ù½¥Fœ%ŽXAÙÂLŸ2R*GŒÒVW¬Ñ$ƒÜJ	ÃA˜›F¶¿�·+ؾ9Í„VIºÖ—¼KÙ¾Å1}_©Â
Á¥%ÃR6„•(]“¦/Ÿ¶Ø�Å™YܺÇÞHä¾ÜÑR GªÄRN/Ü«Î#!ÊDÙÛÚ«%ÞÛËDªÏ-{Ð$ÞVU‘ÝT²¼ª$:MTRÔEŽC1V‰D~ÎÈ];[˜ËÚÐ÷SQ¾¯œÙ(ÌËE,X¦8Â"Ù
ÆÐG¥DŸÚµ2@T8ž¾´ÒƒÀÐßÀT8.RC+Ä@Ëʦ‡P‡UÁ
P”‰¼¶C±‡Ë'Å„YLÓ-SS1E?Å7ÓO‡§Ì^]¦†ÂÓC”½H]§JKR]RKQ܆�ØÝ£Þ´OTCÔÆX¶¨¾4™NË	³Ï&�Á­ÐÚ‹ŠÓ@¶:M7¿~�+”W*ÛÁ–XMÜÓ>>—¡{Q¢Ú×
_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q	ÌDWŸÒظ=ؽ|Q¬	ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`ƦM¢XÎÂ"Ä\
[  183.284490][    C1] vkms_vblank_simulate: vblank timer overrun
[  183.287362][ T7807] [U] {;ŽÕ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_  HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆȽ
[  183.300873][ T7807] [U] I,Ç>ÇÓ¤	ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ
[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í	Ø¿
[  183.315726][ T7807] [U] 22½“Æ©ÐÛ©X?0;3U±
[  183.323059][ T7807] [U] ÞœÕ
Æ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_
•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË,	‘Ä	ÞD~×D©£¡+ÃW;A\˜F
PÉÞȘ|$ºØ)�
KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ	ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[  183.348549][ T6651] bcm5974 4-1:0.0: could not read from device
[  183.360271][ T7807] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[  183.370310][ T7807] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[  183.394699][ T7807] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[  183.421142][ T7807] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[  183.444633][ T7807] [U] ¹EC�
[  183.448523][ T7807] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[  183.539173][ T7806] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[  183.557925][ T7820] loop2: detected capacity change from 0 to 64
[  184.174306][ T7832] loop1: detected capacity change from 0 to 2048
[  184.230251][ T7833] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.303988][ T5826] tipc: Node number set to 2886997007
[  184.512256][ T7835] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0
[  184.889299][ T7830] loop2: detected capacity change from 0 to 40427
[  184.952667][ T7830] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  184.969007][ T7828] loop3: detected capacity change from 0 to 32768
[  184.993569][ T7830] F2FS-fs (loop2): invalid crc value
[  185.026920][ T7830] F2FS-fs (loop2): Found nat_bits in checkpoint
[  185.039364][ T7828] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.112973][ T7830] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  185.215227][ T7828] XFS (loop3): Ending clean mount
[  185.254222][ T7830] F2FS-fs (loop2): access invalid blkaddr:3
[  185.280205][ T7830] CPU: 1 PID: 7830 Comm: syz.2.770 Not tainted syzkaller #0
[  185.287616][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  185.297784][ T7830] Call Trace:
[  185.301100][ T7830]  <TASK>
[  185.304155][ T7830]  dump_stack_lvl+0x16c/0x230
[  185.308936][ T7830]  ? show_regs_print_info+0x20/0x20
[  185.314203][ T7830]  ? f2fs_get_next_page_offset+0x690/0x690
[  185.320098][ T7830]  f2fs_is_valid_blkaddr+0xef8/0x1580
[  185.325546][ T7830]  f2fs_map_blocks+0xda2/0x3da0
[  185.330497][ T7830]  ? __might_sleep+0xe0/0xe0
[  185.335136][ T7830]  ? f2fs_get_block_locked+0xe0/0xe0
[  185.340500][ T7830]  ? f2fs_precache_extents+0x189/0x240
[  185.346269][ T7830]  ? __lock_acquire+0x7c80/0x7c80
[  185.351329][ T7830]  ? __lock_acquire+0x1334/0x7c80
[  185.356401][ T7830]  ? down_read_killable+0x340/0x340
[  185.361660][ T7830]  ? max_file_blocks+0xb0/0x1b0
[  185.366630][ T7830]  f2fs_precache_extents+0x17e/0x240
[  185.372160][ T7830]  ? arch_stack_walk+0x160/0x190
[  185.377122][ T7830]  ? f2fs_pin_file_control+0x1a0/0x1a0
[  185.382725][ T7830]  ? stack_trace_save+0x9c/0xe0
[  185.387604][ T7830]  ? stack_trace_snprint+0xf0/0xf0
[  185.392735][ T7830]  ? __stack_depot_save+0x1f/0x630
[  185.397951][ T7830]  f2fs_fiemap+0x113/0x1650
[  185.402516][ T7830]  ? f2fs_overwrite_io+0x1e0/0x1e0
[  185.407652][ T7830]  ? __might_fault+0xaa/0x120
[  185.412366][ T7830]  ? __lock_acquire+0x7c80/0x7c80
[  185.417411][ T7830]  ? __might_fault+0xaa/0x120
[  185.422104][ T7830]  ? __might_fault+0xc6/0x120
[  185.426880][ T7830]  ? __might_fault+0xaa/0x120
[  185.431603][ T7830]  do_vfs_ioctl+0x140c/0x1bb0
[  185.436306][ T7830]  ? __ia32_compat_sys_ioctl+0x7f0/0x7f0
[  185.441968][ T7830]  ? tomoyo_path_number_perm+0x1ba/0x590
[  185.447624][ T7830]  ? __lock_acquire+0x7c80/0x7c80
[  185.452665][ T7830]  ? slab_free_freelist_hook+0x130/0x1b0
[  185.458332][ T7830]  ? tomoyo_path_number_perm+0x477/0x590
[  185.464001][ T7830]  ? __kmem_cache_free+0xba/0x1f0
[  185.469055][ T7830]  ? tomoyo_path_number_perm+0x4dc/0x590
[  185.474712][ T7830]  ? tomoyo_path_number_perm+0x1ba/0x590
[  185.480376][ T7830]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  185.485972][ T7830]  ? __fget_files+0x28/0x4d0
[  185.490692][ T7830]  ? bpf_lsm_file_ioctl+0x9/0x10
[  185.495652][ T7830]  ? security_file_ioctl+0x80/0xa0
[  185.500786][ T7830]  __se_sys_ioctl+0x83/0x170
[  185.505406][ T7830]  do_syscall_64+0x55/0xb0
[  185.509845][ T7830]  ? clear_bhb_loop+0x40/0x90
[  185.514627][ T7830]  ? clear_bhb_loop+0x40/0x90
[  185.519418][ T7830]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.525331][ T7830] RIP: 0033:0x7f6ee598f6c9
[  185.529780][ T7830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.549416][ T7830] RSP: 002b:00007f6ee67ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  185.557864][ T7830] RAX: ffffffffffffffda RBX: 00007f6ee5be5fa0 RCX: 00007f6ee598f6c9
[  185.565978][ T7830] RDX: 00002000000001c0 RSI: 00000000c020660b RDI: 0000000000000004
[  185.573971][ T7830] RBP: 00007f6ee5a11f91 R08: 0000000000000000 R09: 0000000000000000
[  185.582053][ T7830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.590047][ T7830] R13: 00007f6ee5be6038 R14: 00007f6ee5be5fa0 R15: 00007ffdf7ce9a28
[  185.598056][ T7830]  </TASK>
[  185.601202][    C1] vkms_vblank_simulate: vblank timer overrun
[  185.701281][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.725165][ T5793] syz-executor: attempt to access beyond end of device
[  185.725165][ T5793] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  185.749567][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  186.209516][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  186.419801][    T9] usb 1-1: Using ep0 maxpacket: 16
[  186.445897][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.470456][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  186.520929][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  186.536462][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  186.547782][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  186.563809][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  186.589675][    T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  186.597744][    T9] usb 1-1: Manufacturer: syz
[  186.611812][    T9] usb 1-1: config 0 descriptor??
[  186.899856][    T9] rc_core: IR keymap rc-hauppauge not found
[  186.905844][    T9] Registered IR keymap rc-empty
[  186.911436][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  186.942794][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  186.987717][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  187.004144][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25
[  187.020335][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.049646][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.083749][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.119612][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.149642][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.189604][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.229834][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.259661][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.289729][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.320055][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  187.351778][    T9] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  187.363161][    T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  187.376444][    T9] usb 1-1: USB disconnect, device number 12
[  187.983659][ T7886] program syz.2.795 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  188.843028][ T7885] loop0: detected capacity change from 0 to 32768
[  188.949673][ T7885] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.954215][ T7909] loop3: detected capacity change from 0 to 128
[  189.104948][ T7885] XFS (loop0): Ending clean mount
[  189.157486][ T7917] loop2: detected capacity change from 0 to 256
[  189.266023][ T7917] FAT-fs (loop2): Directory bread(block 64) failed
[  189.289885][ T7917] FAT-fs (loop2): Directory bread(block 65) failed
[  189.291907][ T7921] loop3: detected capacity change from 0 to 64
[  189.296606][ T7917] FAT-fs (loop2): Directory bread(block 66) failed
[  189.353272][ T7917] FAT-fs (loop2): Directory bread(block 67) failed
[  189.364340][ T7917] FAT-fs (loop2): Directory bread(block 68) failed
[  189.371406][ T7917] FAT-fs (loop2): Directory bread(block 69) failed
[  189.378206][ T7917] FAT-fs (loop2): Directory bread(block 70) failed
[  189.386966][ T7917] FAT-fs (loop2): Directory bread(block 71) failed
[  189.399173][ T7917] FAT-fs (loop2): Directory bread(block 72) failed
[  189.411807][ T7917] FAT-fs (loop2): Directory bread(block 73) failed
[  189.464206][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.648020][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'.
[  189.676190][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'.
[  190.014729][ T7931] loop3: detected capacity change from 0 to 4096
[  190.079175][ T7931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.225051][ T7929] loop1: detected capacity change from 0 to 8192
[  190.242319][ T7931] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  190.274778][ T7929] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  190.354266][ T7929] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  190.368856][ T7929] REISERFS (device loop1): using ordered data mode
[  190.377379][ T7929] reiserfs: using flush barriers
[  190.396977][ T7929] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  190.444785][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.455367][ T7929] REISERFS (device loop1): checking transaction log (loop1)
[  190.489757][ T7929] REISERFS (device loop1): Using r5 hash to sort names
[  190.518326][ T7929] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  191.295926][ T7964] QAT: Device 64 not found
[  191.803678][ T7978] netlink: 96 bytes leftover after parsing attributes in process `syz.3.824'.
[  192.640003][ T7991] Bluetooth: hci4: Frame reassembly failed (-84)
[  192.648009][   T42] Bluetooth: hci4: Frame reassembly failed (-84)
[  192.759769][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  192.926418][ T7989] loop0: detected capacity change from 0 to 40427
[  192.956385][ T7989] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff
[  192.970632][    T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  192.986353][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.009847][    T9] usb 3-1: Product: syz
[  193.019549][ T7989] F2FS-fs (loop0): invalid crc value
[  193.025473][    T9] usb 3-1: Manufacturer: syz
[  193.035064][    T9] usb 3-1: SerialNumber: syz
[  193.044447][ T7989] F2FS-fs (loop0): Found nat_bits in checkpoint
[  193.052188][    T9] usb 3-1: config 0 descriptor??
[  193.066573][    T9] ch341 3-1:0.0: ch341-uart converter detected
[  193.134676][ T7989] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  193.202317][ T7989] F2FS-fs (loop0): access invalid blkaddr:3
[  193.209666][ T7989] CPU: 1 PID: 7989 Comm: syz.0.837 Not tainted syzkaller #0
[  193.217035][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  193.227164][ T7989] Call Trace:
[  193.230491][ T7989]  <TASK>
[  193.233459][ T7989]  dump_stack_lvl+0x16c/0x230
[  193.238200][ T7989]  ? show_regs_print_info+0x20/0x20
[  193.243471][ T7989]  ? f2fs_get_next_page_offset+0x690/0x690
[  193.249344][ T7989]  f2fs_is_valid_blkaddr+0xef8/0x1580
[  193.254785][ T7989]  f2fs_map_blocks+0xda2/0x3da0
[  193.259745][ T7989]  ? __might_sleep+0xe0/0xe0
[  193.264403][ T7989]  ? f2fs_get_block_locked+0xe0/0xe0
[  193.269756][ T7989]  ? f2fs_precache_extents+0x189/0x240
[  193.275291][ T7989]  ? __lock_acquire+0x7c80/0x7c80
[  193.280382][ T7989]  ? __lock_acquire+0x1334/0x7c80
[  193.285490][ T7989]  ? down_read_killable+0x340/0x340
[  193.290763][ T7989]  ? max_file_blocks+0xb0/0x1b0
[  193.295693][ T7989]  f2fs_precache_extents+0x17e/0x240
[  193.301043][ T7989]  ? arch_stack_walk+0x160/0x190
[  193.306035][ T7989]  ? f2fs_pin_file_control+0x1a0/0x1a0
[  193.311571][ T7989]  ? stack_trace_save+0x9c/0xe0
[  193.316737][ T7989]  ? stack_trace_snprint+0xf0/0xf0
[  193.322037][ T7989]  ? __stack_depot_save+0x1f/0x630
[  193.327231][ T7989]  f2fs_fiemap+0x113/0x1650
[  193.331827][ T7989]  ? f2fs_overwrite_io+0x1e0/0x1e0
[  193.337011][ T7989]  ? __might_fault+0xaa/0x120
[  193.341729][ T7989]  ? __lock_acquire+0x7c80/0x7c80
[  193.346806][ T7989]  ? __might_fault+0xaa/0x120
[  193.351519][ T7989]  ? __might_fault+0xc6/0x120
[  193.356278][ T7989]  ? __might_fault+0xaa/0x120
[  193.361002][ T7989]  do_vfs_ioctl+0x140c/0x1bb0
[  193.365734][ T7989]  ? __ia32_compat_sys_ioctl+0x7f0/0x7f0
[  193.371424][ T7989]  ? tomoyo_path_number_perm+0x1ba/0x590
[  193.377112][ T7989]  ? __lock_acquire+0x7c80/0x7c80
[  193.382190][ T7989]  ? slab_free_freelist_hook+0x130/0x1b0
[  193.387967][ T7989]  ? tomoyo_path_number_perm+0x477/0x590
[  193.393658][ T7989]  ? __kmem_cache_free+0xba/0x1f0
[  193.398737][ T7989]  ? tomoyo_path_number_perm+0x4dc/0x590
[  193.404432][ T7989]  ? tomoyo_path_number_perm+0x1ba/0x590
[  193.410126][ T7989]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  193.415689][ T7989]  ? __fget_files+0x28/0x4d0
[  193.420353][ T7989]  ? bpf_lsm_file_ioctl+0x9/0x10
[  193.425467][ T7989]  ? security_file_ioctl+0x80/0xa0
[  193.430638][ T7989]  __se_sys_ioctl+0x83/0x170
[  193.435280][ T7989]  do_syscall_64+0x55/0xb0
[  193.439758][ T7989]  ? clear_bhb_loop+0x40/0x90
[  193.444482][ T7989]  ? clear_bhb_loop+0x40/0x90
[  193.449218][ T7989]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.455158][ T7989] RIP: 0033:0x7f1e97f8f6c9
[  193.459625][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.479369][ T7989] RSP: 002b:00007f1e98d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  193.487829][ T7989] RAX: ffffffffffffffda RBX: 00007f1e981e5fa0 RCX: 00007f1e97f8f6c9
[  193.495821][ T7989] RDX: 00002000000001c0 RSI: 00000000c020660b RDI: 0000000000000004
[  193.503843][ T7989] RBP: 00007f1e98011f91 R08: 0000000000000000 R09: 0000000000000000
[  193.511854][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.519882][ T7989] R13: 00007f1e981e6038 R14: 00007f1e981e5fa0 R15: 00007fff51826688
[  193.527916][ T7989]  </TASK>
[  193.596023][ T5786] syz-executor: attempt to access beyond end of device
[  193.596023][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.613545][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  193.877188][    T9] usb 3-1: failed to send control message: -71
[  193.884302][    T9] ch341-uart: probe of ttyUSB0 failed with error -71
[  193.903277][    T9] usb 3-1: USB disconnect, device number 11
[  193.913849][    T9] ch341 3-1:0.0: device disconnected
[  194.526394][ T8010] vlan2: entered promiscuous mode
[  194.531696][ T8010] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  194.540165][ T8010] vlan2: entered allmulticast mode
[  194.557940][ T8010] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  194.664858][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  194.668067][ T5789] Bluetooth: hci4: command 0x1003 tx timeout
[  194.681339][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  194.684846][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  194.888798][ T8020] loop3: detected capacity change from 0 to 512
[  195.012186][ T8020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.069860][ T8020] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  195.178241][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.472227][ T8040] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  195.939876][ T5853] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  196.160016][ T5853] usb 1-1: Using ep0 maxpacket: 8
[  196.180274][ T5853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  196.211451][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  196.222231][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  196.242789][ T5853] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.283072][ T5853] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  196.305995][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.326772][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  196.553176][ T5853] usb 1-1: GET_CAPABILITIES returned 0
[  196.568184][ T5853] usbtmc 1-1:16.0: can't read capabilities
[  196.615849][ T8077] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  196.627422][ T8077] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  196.644364][ T8077] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  196.759729][ T5826] usb 1-1: USB disconnect, device number 13
[  196.787891][ T8084] loop3: detected capacity change from 0 to 64
[  196.806147][ T8084] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  196.980378][ T8088] loop3: detected capacity change from 0 to 256
[  197.003304][ T8088] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.036062][   T28] audit: type=1800 audit(1763275515.494:5): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.874" name="file1" dev="loop3" ino=1048624 res=0 errno=0
[  197.038128][ T8088] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  197.076260][ T8088] FAT-fs (loop3): Filesystem has been set read-only
[  197.228125][  T786] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  197.430846][  T786] usb 3-1: device descriptor read/all, error -71
[  198.261980][   T49] wlan1: Trigger new scan to find an IBSS to join
[  198.279787][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  198.379678][ T5839] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  198.521583][    T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  198.549521][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.600150][    T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  198.609322][    T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  198.648125][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.669568][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.689576][    T9] usb 2-1: Manufacturer: syz
[  198.705837][    T9] usb 2-1: config 0 descriptor??
[  198.711031][ T5839] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  198.739704][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.789173][ T5839] usb 1-1: config 0 descriptor??
[  198.920932][    T9] rc_core: IR keymap rc-hauppauge not found
[  198.942217][    T9] Registered IR keymap rc-empty
[  198.966520][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  198.990998][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26
[  199.015386][ T8124] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  199.032427][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  199.048651][ T5826] usb 2-1: USB disconnect, device number 10
[  199.245139][   T28] audit: type=1326 audit(1763275517.704:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6397b8f6c9 code=0x7ffc0000
[  199.263964][ T5839] aquacomputer_d5next 0003:0C70:F00D.0009: item fetching failed at offset 3/5
[  199.281539][   T28] audit: type=1326 audit(1763275517.724:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6397b8f6c9 code=0x7ffc0000
[  199.304144][ T5839] aquacomputer_d5next: probe of 0003:0C70:F00D.0009 failed with error -22
[  199.323095][   T28] audit: type=1326 audit(1763275517.724:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6397b8f6c9 code=0x7ffc0000
[  199.345874][   T28] audit: type=1326 audit(1763275517.724:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.3.894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6397b8f6c9 code=0x0
[  199.489053][ T5826] usb 1-1: USB disconnect, device number 14
[  199.727912][ T8138] loop2: detected capacity change from 0 to 64
[  199.766166][   T28] audit: type=1800 audit(1763275518.224:10): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.898" name="file1" dev="loop2" ino=21 res=0 errno=0
[  199.938064][ T8144] netlink: 256 bytes leftover after parsing attributes in process `syz.2.899'.
[  200.151104][ T8151] loop0: detected capacity change from 0 to 8
[  200.250420][ T8151] SQUASHFS error: zlib decompression failed, data probably corrupt
[  200.300359][ T8151] SQUASHFS error: Failed to read block 0x13e: -5
[  200.326451][ T8151] SQUASHFS error: Unable to read metadata cache entry [13c]
[  200.345375][ T8157] loop2: detected capacity change from 0 to 512
[  200.353411][ T8151] SQUASHFS error: Unable to read directory block [13c:26]
[  200.431781][ T8157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.466703][ T8157] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.586889][ T8160] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  200.634432][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.293712][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'.
[  201.440662][ T8189] misc userio: Can't change port type on an already running userio instance
[  201.520755][ T8171] loop3: detected capacity change from 0 to 32768
[  201.571546][ T8171] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  201.752090][ T8171] XFS (loop3): Ending clean mount
[  201.869281][   T28] audit: type=1800 audit(1763275520.324:11): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.913" name="file2" dev="loop3" ino=9287 res=0 errno=0
[  201.980628][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  201.997892][ T8210] loop2: detected capacity change from 0 to 164
[  202.100438][ T8210] syz.2.924: attempt to access beyond end of device
[  202.100438][ T8210] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  202.156041][ T8210] syz.2.924: attempt to access beyond end of device
[  202.156041][ T8210] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  202.315974][ T8213] loop0: detected capacity change from 0 to 1024
[  202.340131][ T5799] Bluetooth: hci2: command tx timeout
[  202.500340][ T8213] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  202.506767][ T8213] hfsplus: xattr search failed
[  202.634455][   T49] hfsplus: b-tree write err: -5, ino 4
[  202.866777][ T5826] kernel write not supported for file /vbi1 (pid: 5826 comm: kworker/1:3)
[  202.955865][ T8227] loop3: detected capacity change from 0 to 128
[  202.966923][ T8227] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  203.032679][ T8227] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  203.302182][   T42] wlan1: Trigger new scan to find an IBSS to join
[  203.466595][ T8238] loop1: detected capacity change from 0 to 512
[  203.484028][ T8238] EXT4-fs (loop1): filesystem is read-only
[  203.494778][ T8238] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  203.517863][ T8238] EXT4-fs (loop1): filesystem is read-only
[  203.524595][ T8238] EXT4-fs (loop1): orphan cleanup on readonly fs
[  203.536637][ T8238] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #16: comm syz.1.939: iget: bad i_size value: -504403158265486552
[  203.551411][ T8238] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.939: couldn't read orphan inode 16 (err -117)
[  203.575003][ T8238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  203.699895][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.281892][ T1132] wlan1: Creating new IBSS network, BSSID ea:74:2e:02:53:a1
[  204.544182][ T8265] loop0: detected capacity change from 0 to 4096
[  204.567268][ T8265] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  204.987894][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.955'.
[  204.997245][ T8275] netlink: 'syz.3.955': attribute type 6 has an invalid length.
[  205.005815][ T8275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.955'.
[  205.282624][ T8283] vlan2: entered promiscuous mode
[  205.289158][ T8283] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  205.297555][ T8283] vlan2: entered allmulticast mode
[  205.303319][ T8283] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  205.479548][ T5882] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  205.621404][ T8298] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  205.632510][ T8298] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  205.641555][ T8298] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  205.702689][ T5882] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  205.713322][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0
[  205.723283][ T5882] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  205.734077][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  205.742697][ T5882] usb 3-1: Product: syz
[  205.746895][ T5882] usb 3-1: Manufacturer: syz
[  205.751631][ T5882] usb 3-1: SerialNumber: syz
[  205.758266][ T5882] usb 3-1: config 0 descriptor??
[  205.766092][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  205.770294][ T5882] usb 3-1: selecting invalid altsetting 0
[  205.961444][    T9] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.972804][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  205.985195][    T9] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  205.994693][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.007762][    T9] usb 2-1: config 0 descriptor??
[  206.084484][ T5853] usb 3-1: USB disconnect, device number 14
[  206.435805][    T9] playstation 0003:054C:05C4.000A: unknown main item tag 0x0
[  206.443486][    T9] playstation 0003:054C:05C4.000A: unknown main item tag 0x0
[  206.452222][    T9] playstation 0003:054C:05C4.000A: unknown main item tag 0x0
[  206.465512][    T9] playstation 0003:054C:05C4.000A: unknown main item tag 0x0
[  206.473443][    T9] playstation 0003:054C:05C4.000A: unknown main item tag 0x0
[  206.486888][    T9] playstation 0003:054C:05C4.000A: unknown main item tag 0x0
[  206.495153][    T9] playstation 0003:054C:05C4.000A: unknown main item tag 0x0
[  206.524598][    T9] playstation 0003:054C:05C4.000A: hidraw0: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0
[  206.636536][    T9] playstation 0003:054C:05C4.000A: Invalid byte count transferred, expected 16 got 0
[  206.667686][    T9] playstation 0003:054C:05C4.000A: Failed to retrieve DualShock4 pairing info: -22
[  206.689091][    T9] playstation 0003:054C:05C4.000A: Failed to get MAC address from DualShock4
[  206.706706][    T9] playstation 0003:054C:05C4.000A: Failed to create dualshock4.
[  206.729133][    T9] playstation: probe of 0003:054C:05C4.000A failed with error -22
[  206.942824][    T9] usb 2-1: USB disconnect, device number 11
[  206.983977][ T5794] Bluetooth: hci2: command 0x0406 tx timeout
[  206.984770][ T5797] Bluetooth: hci0: command 0x0406 tx timeout
[  206.992664][ T5794] Bluetooth: hci1: command 0x0406 tx timeout
[  207.466070][ T8308] loop0: detected capacity change from 0 to 40427
[  207.484050][ T8308] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  207.501827][ T8308] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  207.521989][ T8308] F2FS-fs (loop0): invalid crc value
[  207.546686][ T8308] F2FS-fs (loop0): Found nat_bits in checkpoint
[  207.688565][ T8308] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  207.708158][ T8308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  207.870490][ T8322] netlink: 'syz.2.970': attribute type 1 has an invalid length.
[  208.122755][ T8326] usb usb8: usbfs: process 8326 (syz.2.973) did not claim interface 6 before use
[  209.089811][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  209.106035][ T8339] netlink: 'syz.0.972': attribute type 8 has an invalid length.
[  209.302476][    T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  209.324296][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  209.339323][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  209.361783][    T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  209.373873][    T9] usb 2-1: Product: syz
[  209.378232][    T9] usb 2-1: Manufacturer: syz
[  209.417318][    T9] usb 2-1: SerialNumber: syz
[  209.444117][    T9] usb 2-1: config 0 descriptor??
[  209.472369][    T9] usb 2-1: selecting invalid altsetting 0
[  209.835780][ T5882] usb 2-1: USB disconnect, device number 12
[  209.869737][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  210.069887][    T9] usb 4-1: Using ep0 maxpacket: 8
[  210.078315][    T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  210.090093][    T9] usb 4-1: config 179 has no interface number 0
[  210.096543][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  210.119873][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  210.149566][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  210.169537][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  210.189775][    T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  210.219521][    T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  210.239229][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.272764][ T8351] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  210.388596][ T8347] loop2: detected capacity change from 0 to 40427
[  210.409074][ T8347] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  210.432865][ T8347] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  210.480469][ T8347] F2FS-fs (loop2): invalid crc value
[  210.499725][ T5826] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  210.548791][ T8347] F2FS-fs (loop2): Found nat_bits in checkpoint
[  210.689557][ T5826] usb 1-1: Using ep0 maxpacket: 8
[  210.703084][ T5826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.714029][  T786] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input28
[  210.757342][ T5826] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  210.790337][ T8347] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  210.797483][ T8347] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  210.849628][ T5826] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.867721][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.911203][ T5826] usb 1-1: Product: syz
[  210.915450][ T5826] usb 1-1: Manufacturer: syz
[  210.926220][ T5826] usb 1-1: SerialNumber: syz
[  211.128891][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  211.128899][ T5853] usb 4-1: USB disconnect, device number 12
[  211.143329][ T5853] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  211.143614][    C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  211.205592][ T8364] loop1: detected capacity change from 0 to 64
[  211.209910][ T5826] cdc_ncm 1-1:1.0: bind() failure
[  211.257640][ T5826] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  211.289507][ T5826] cdc_ncm 1-1:1.1: bind() failure
[  211.310506][   T28] audit: type=1800 audit(1763275529.774:12): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.995" name="file1" dev="loop1" ino=21 res=0 errno=0
[  211.335135][ T5826] usb 1-1: USB disconnect, device number 15
[  212.057578][ T8376] loop3: detected capacity change from 0 to 128
[  212.095664][ T8376] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  212.269632][ T5826] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  212.490191][ T5826] usb 3-1: Using ep0 maxpacket: 8
[  212.501521][ T5826] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  212.526081][ T5826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  212.556293][ T5826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  212.599339][ T5826] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  212.613233][ T5826] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  212.636705][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.892501][ T5826] usb 3-1: GET_CAPABILITIES returned 0
[  212.898178][ T5826] usbtmc 3-1:16.0: can't read capabilities
[  213.145593][ T5826] usb 3-1: USB disconnect, device number 15
[  214.566017][ T8442] loop3: detected capacity change from 0 to 4096
[  214.609622][ T8442] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  214.854374][ T8442] ntfs3: loop3: failed to convert "c46c" to macceltic
[  214.956478][ T8442] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  215.559656][ T5826] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  215.616934][ T8444] loop1: detected capacity change from 0 to 40427
[  215.645259][ T8444] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  215.659525][ T8444] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  215.731039][ T8444] F2FS-fs (loop1): invalid crc value
[  215.758314][ T8444] F2FS-fs (loop1): Found nat_bits in checkpoint
[  215.769775][ T5826] usb 4-1: Using ep0 maxpacket: 8
[  215.777175][ T5826] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  215.792688][ T5826] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  215.829377][ T5826] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  215.865470][ T5826] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.901585][ T5826] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  215.927100][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.957045][ T8444] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  215.975654][ T8444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  216.189312][ T5826] usb 4-1: GET_CAPABILITIES returned 0
[  216.202235][ T8455] loop2: detected capacity change from 0 to 40427
[  216.208932][ T5826] usbtmc 4-1:16.0: can't read capabilities
[  216.220914][ T8455] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  216.228717][ T8455] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  216.288824][ T8455] F2FS-fs (loop2): Found nat_bits in checkpoint
[  216.349240][ T8455] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  216.356727][ T8455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  216.419682][  T786] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  216.452644][ T5853] usb 4-1: USB disconnect, device number 13
[  216.610414][  T786] usb 1-1: Using ep0 maxpacket: 8
[  216.617541][  T786] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  216.626086][  T786] usb 1-1: config 179 has no interface number 0
[  216.641903][  T786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  216.672414][  T786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  216.704656][  T786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  216.727132][  T786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  216.739213][  T786] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  216.758482][  T786] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  216.768516][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.803103][ T8469] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  217.301357][  T786] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29
[  217.494173][ T8483] loop3: detected capacity change from 0 to 128
[  217.524839][ T8485] loop2: detected capacity change from 0 to 8
[  217.551533][ T8483] EXT4-fs: Ignoring removed nobh option
[  217.616861][ T5853] usb 1-1: USB disconnect, device number 16
[  217.616976][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  217.632060][ T5853] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  217.632608][    C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  217.667937][ T8483] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.706199][ T8483] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  217.893623][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.129732][ T5882] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  218.319224][ T5882] usb 3-1: Using ep0 maxpacket: 8
[  218.349743][ T5882] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  218.369175][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.406884][ T5882] pvrusb2: Hardware description: Terratec Grabster AV400
[  218.433350][ T5882] pvrusb2: **********
[  218.442386][ T5882] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  218.474066][ T5882] pvrusb2: Important functionality might not be entirely working.
[  218.486826][ T8507] loop0: detected capacity change from 0 to 4096
[  218.494487][ T5882] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  218.519671][ T5882] pvrusb2: **********
[  218.524296][ T8507] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  218.618351][ T2321] pvrusb2: Invalid write control endpoint
[  218.765675][ T8507] ntfs3: loop0: failed to convert "c46c" to macceltic
[  218.816295][ T8507] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  218.816403][ T2321] pvrusb2: Invalid write control endpoint
[  218.859557][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  218.889715][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  218.897984][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  218.919856][ T2321] pvrusb2: Device being rendered inoperable
[  218.932310][ T8493] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61)
[  218.970907][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  218.978168][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  219.002766][  T786] usb 3-1: USB disconnect, device number 16
[  219.058531][ T2321] pvrusb2: Attached sub-driver cx25840
[  219.087957][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  219.107990][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  219.149278][ T8519] loop0: detected capacity change from 0 to 1024
[  219.238730][ T8519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.365359][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.860084][  T786] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  220.059526][  T786] usb 1-1: Using ep0 maxpacket: 32
[  220.086632][  T786] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  220.097123][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.110656][  T786] usb 1-1: config 0 descriptor??
[  220.119294][  T786] gspca_main: sq930x-2.14.0 probing 041e:403c
[  220.551246][ T8557] raw_sendmsg: syz.2.1065 forgot to set AF_INET. Fix it!
[  220.980519][  T786] gspca_sq930x: reg_w 0105 bf00 failed -71
[  221.033539][ T8550] loop3: detected capacity change from 0 to 40427
[  221.050666][ T8550] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  221.051408][  T786] sq930x: probe of 1-1:0.0 failed with error -71
[  221.058446][ T8550] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  221.087169][ T8550] F2FS-fs (loop3): invalid crc value
[  221.120018][  T786] usb 1-1: USB disconnect, device number 17
[  221.158731][ T8550] F2FS-fs (loop3): Found nat_bits in checkpoint
[  221.184278][ T8573] loop1: detected capacity change from 0 to 8
[  221.403426][ T8550] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  221.419509][ T8550] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  221.639683][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'.
[  221.679878][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'.
[  221.736736][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'.
[  221.759607][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'.
[  221.787900][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'.
[  221.797468][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'.
[  222.053474][ T8592] loop1: detected capacity change from 0 to 1024
[  222.171180][ T8592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.213503][   T28] audit: type=1400 audit(1763275540.674:13): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F268498 pid=8600 comm="syz.2.1084"
[  222.351004][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.417003][ T8603] netlink: 'syz.2.1085': attribute type 3 has an invalid length.
[  223.903072][ T8656] loop0: detected capacity change from 0 to 2048
[  223.918580][ T8656] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  223.937353][ T8656] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  223.945649][ T8656] UDF-fs: Scanning with blocksize 512 failed
[  223.969533][ T5826] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  223.976320][ T8656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.147479][   T28] audit: type=1400 audit(1763275542.604:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F268498 pid=8660 comm="syz.0.1107"
[  224.182833][ T5826] usb 2-1: Using ep0 maxpacket: 8
[  224.216580][ T5826] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  224.236428][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.284542][ T5826] pvrusb2: Hardware description: Terratec Grabster AV400
[  224.320887][ T5826] pvrusb2: **********
[  224.324957][ T5826] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  224.361788][ T5826] pvrusb2: Important functionality might not be entirely working.
[  224.394598][ T5826] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  224.429617][ T5826] pvrusb2: **********
[  224.504683][ T2321] pvrusb2: Invalid write control endpoint
[  224.629631][ T2321] pvrusb2: Invalid write control endpoint
[  224.656906][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  224.681825][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'.
[  224.691187][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  224.698780][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  224.710449][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'.
[  224.719716][ T2321] pvrusb2: Device being rendered inoperable
[  224.730878][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  224.738441][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'.
[  224.748191][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  224.762400][ T8653] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61)
[  224.771735][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'.
[  224.784159][  T786] usb 2-1: USB disconnect, device number 13
[  224.798008][ T2321] pvrusb2: Attached sub-driver cx25840
[  224.818532][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  224.840309][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  226.332751][ T8716] loop3: detected capacity change from 0 to 4096
[  226.450549][ T8716] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  226.515522][ T8716] ntfs3: loop3: ino=1b, "file0" directory corrupted
[  226.590366][ T5791] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22.
[  226.721488][ T8733] __nla_validate_parse: 2 callbacks suppressed
[  226.721509][ T8733] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1143'.
[  226.985339][ T8746] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  227.069598][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  227.114798][ T8750] loop2: detected capacity change from 0 to 128
[  227.130858][ T8750] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.147539][ T8750] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  227.169139][ T8750] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize
[  227.216153][ T5793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.266263][ T5826] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  227.269603][    T9] usb 1-1: Using ep0 maxpacket: 8
[  227.291997][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.310758][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  227.329917][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.361154][    T9] usb 1-1: config 0 descriptor??
[  227.370329][    T9] gspca_main: vc032x-2.14.0 probing 046d:0892
[  227.434886][ T8757] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  227.442205][ T8757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  227.456750][ T8757] vhci_hcd vhci_hcd.0: Device attached
[  227.462982][ T5826] usb 4-1: Using ep0 maxpacket: 16
[  227.472281][ T5826] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.489453][ T5826] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.499937][ T5826] usb 4-1: config 0 interface 0 has no altsetting 0
[  227.507097][ T5826] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  227.516830][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.527961][ T5826] usb 4-1: config 0 descriptor??
[  227.729632][ T5882] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  227.760171][ T5789] Bluetooth: hci1: unexpected cc 0x204b length: 9 > 3
[  227.767114][ T5789] Bluetooth: hci1: unexpected event for opcode 0x204b
[  227.844792][  T786] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[  227.972254][ T5826] cougar 0003:060B:500A.000B: unexpected long global item
[  227.980340][ T5826] cougar 0003:060B:500A.000B: parse failed
[  227.986452][ T5826] cougar: probe of 0003:060B:500A.000B failed with error -22
[  228.042602][  T786] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  228.051860][  T786] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  228.061551][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.071743][  T786] usb 3-1: config 0 descriptor??
[  228.162140][ T5826] usb 4-1: USB disconnect, device number 14
[  228.182078][    T9] gspca_vc032x: reg_w err -71
[  228.187115][    T9] vc032x: probe of 1-1:0.0 failed with error -71
[  228.196468][    T9] usb 1-1: USB disconnect, device number 18
[  228.279106][ T8758] usb 37-1: recv xbuf, 0
[  228.289572][  T786] usb 3-1: string descriptor 0 read error: -71
[  228.304217][   T42] vhci_hcd: stop threads
[  228.316169][  T786] usb 3-1: USB disconnect, device number 17
[  228.322286][   T42] vhci_hcd: release socket
[  228.338520][   T42] vhci_hcd: disconnect device
[  228.369850][ T5882] vhci_hcd: vhci_device speed not set
[  228.692933][ T8771] loop1: detected capacity change from 0 to 40427
[  228.735560][ T8771] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  228.745120][ T8771] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  228.761800][ T8771] F2FS-fs (loop1): invalid crc value
[  228.769974][ T8771] F2FS-fs (loop1): Found nat_bits in checkpoint
[  228.826703][ T8776] loop0: detected capacity change from 0 to 16
[  228.864342][ T8776] erofs: (device loop0): mounted with root inode @ nid 36.
[  228.893692][ T8771] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  228.909576][ T8771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  229.019942][ T5790] syz-executor: attempt to access beyond end of device
[  229.019942][ T5790] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  229.057765][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  229.075977][ T5790] syz-executor: attempt to access beyond end of device
[  229.075977][ T5790] loop1: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  229.091596][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'.
[  229.091779][ T8785] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1165'.
[  229.172082][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  230.147448][ T8805] loop3: detected capacity change from 0 to 512
[  230.199993][ T8805] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.1172: corrupted in-inode xattr: invalid ea_ino
[  230.244310][ T8805] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1172: couldn't read orphan inode 15 (err -117)
[  230.264562][ T8805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.340954][ T8805] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 3: comm syz.3.1172: lblock 0 mapped to illegal pblock 3 (length 1)
[  230.386942][ T8805] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1172: error -117 reading directory block
[  230.414047][ T8815] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 3: comm syz.3.1172: lblock 0 mapped to illegal pblock 3 (length 1)
[  230.460602][ T8815] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1172: error -117 reading directory block
[  230.574127][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.094718][ T8809] loop0: detected capacity change from 0 to 40427
[  231.122425][ T8809] F2FS-fs (loop0): invalid crc value
[  231.152802][ T8809] F2FS-fs (loop0): Found nat_bits in checkpoint
[  231.293149][ T1124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.341628][ T8809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  231.496035][ T1124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.683104][ T1124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.818538][ T8827] loop1: detected capacity change from 0 to 32768
[  231.871778][ T1124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.900852][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  231.913090][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  231.923533][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  231.931824][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  231.939844][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  231.947811][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.996308][ T8827] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.138293][ T8827] XFS (loop1): Ending clean mount
[  232.285202][ T8852] loop0: detected capacity change from 0 to 128
[  232.316257][ T5790] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.489952][   T28] audit: type=1800 audit(1763275550.934:15): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1187" name="bus" dev="loop0" ino=1048626 res=0 errno=0
[  232.593308][ T1124] tipc: Disabling bearer <udp:syz2>
[  232.619673][ T1124] tipc: Left network mode
[  232.676542][   T12] kworker/u4:1: attempt to access beyond end of device
[  232.676542][   T12] loop0: rw=1, sector=138, nr_sectors = 76 limit=128
[  232.746267][ T8833] chnl_net:caif_netlink_parms(): no params data found
[  233.124397][ T8862] loop1: detected capacity change from 0 to 8192
[  233.150403][ T8862] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  233.169595][ T8862] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  233.181113][ T8862] REISERFS (device loop1): using ordered data mode
[  233.187688][ T8862] reiserfs: using flush barriers
[  233.196562][ T8862] REISERFS (device loop1): journal params: device ram0, size 1, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
[  233.212769][ T8862] REISERFS (device loop1): checking transaction log (ram0)
[  233.218901][ T8866] 8021q: adding VLAN 0 to HW filter on device batadv1
[  233.234212][ T8866] team0: Port device batadv1 added
[  233.238102][ T8862] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one 127
[  233.258781][ T8862] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  233.295792][ T8862] REISERFS (device loop1): Remounting filesystem read-only
[  233.320396][ T8862] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  233.591484][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.598837][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.615401][ T8833] bridge_slave_0: entered allmulticast mode
[  233.627159][ T8833] bridge_slave_0: entered promiscuous mode
[  233.713305][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.739774][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.747165][ T8833] bridge_slave_1: entered allmulticast mode
[  233.778107][ T8833] bridge_slave_1: entered promiscuous mode
[  233.984624][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.015525][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.029808][ T5798] Bluetooth: hci3: command tx timeout
[  234.266170][ T8833] team0: Port device team_slave_0 added
[  234.305865][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  234.328846][ T8833] team0: Port device team_slave_1 added
[  234.390876][ T8881] loop1: detected capacity change from 0 to 32768
[  234.440246][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.447793][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.495886][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.515806][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.526364][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.590468][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.629318][ T5798] block nbd0: Receive control failed (result -32)
[  234.673809][ T8901] loop3: detected capacity change from 0 to 512
[  234.760147][ T8901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.789662][ T8901] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.998009][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.151780][ T8833] hsr_slave_0: entered promiscuous mode
[  235.162702][ T8833] hsr_slave_1: entered promiscuous mode
[  235.177591][ T8833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.189608][ T8833] Cannot create hsr debugfs directory
[  235.220775][ T8917] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1210'.
[  235.413734][ T8921] loop0: detected capacity change from 0 to 4096
[  235.446966][ T1124] hsr_slave_0: left promiscuous mode
[  235.456018][ T1124] hsr_slave_1: left promiscuous mode
[  235.468420][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.487457][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.519698][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.521207][ T8923] loop3: detected capacity change from 0 to 2048
[  235.537459][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.553539][ T1124] batman_adv: batadv0: Interface deactivated: ipvlan2
[  235.569575][ T1124] batman_adv: batadv0: Removing interface: ipvlan2
[  235.576212][ T8923] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  235.589057][ T8923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.593093][ T1124] bridge_slave_1: left allmulticast mode
[  235.611296][ T1124] bridge_slave_1: left promiscuous mode
[  235.620001][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.645450][ T1124] bridge_slave_0: left allmulticast mode
[  235.663903][ T1124] bridge_slave_0: left promiscuous mode
[  235.685452][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.773832][ T1124] veth1_macvtap: left promiscuous mode
[  235.783002][ T1124] veth0_macvtap: left promiscuous mode
[  235.788833][ T1124] veth1_vlan: left promiscuous mode
[  235.794933][ T1124] veth0_vlan: left promiscuous mode
[  236.099875][ T5798] Bluetooth: hci3: command tx timeout
[  236.240374][ T8939] loop0: detected capacity change from 0 to 4096
[  236.738613][ T8941] loop0: detected capacity change from 0 to 8192
[  236.758416][ T8941] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  236.773611][ T8941] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  236.790457][ T8941] REISERFS (device loop0): using ordered data mode
[  236.797118][ T8941] reiserfs: using flush barriers
[  236.804865][ T8941] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  236.823697][ T8941] REISERFS (device loop0): checking transaction log (loop0)
[  236.967611][ T8941] REISERFS (device loop0): Using tea hash to sort names
[  236.975606][ T8941] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  237.023956][ T1124] team0 (unregistering): Port device team_slave_1 removed
[  237.099342][ T1124] team0 (unregistering): Port device team_slave_0 removed
[  237.173347][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.301402][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.780884][ T8948] loop0: detected capacity change from 0 to 32768
[  237.794990][ T8948] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.1225 (8948)
[  237.835841][ T8948] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  237.846311][ T8948] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  237.855911][ T8948] BTRFS info (device loop0): using free space tree
[  238.085946][ T8948] BTRFS info (device loop0): enabling ssd optimizations
[  238.095159][ T8948] BTRFS info (device loop0): auto enabling async discard
[  238.186979][ T5798] Bluetooth: hci3: command tx timeout
[  238.198238][ T5786] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  238.334067][ T1124] bond0 (unregistering): Released all slaves
[  238.824835][ T8967] loop3: detected capacity change from 0 to 1764
[  238.972997][ T8967] iso9660: Corrupted directory entry in block 14 of inode 1920
[  239.042703][   T28] audit: type=1326 audit(1763275557.504:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.0.1230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e97f8f6c9 code=0x0
[  239.177438][ T8978] loop3: detected capacity change from 0 to 512
[  239.205056][ T8978] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.1231: corrupted in-inode xattr: invalid ea_ino
[  239.228193][ T8978] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1231: couldn't read orphan inode 15 (err -117)
[  239.242972][ T8978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.296339][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'.
[  239.325884][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.494211][ T8833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  239.505123][ T8833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  239.516147][ T8833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  239.528115][ T8833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  239.618964][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.645012][ T8833] 8021q: adding VLAN 0 to HW filter on device team0
[  239.657744][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.664969][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.682869][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.690186][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.054001][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.117564][ T9005] program syz.1.1237 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.138576][ T9000] loop3: detected capacity change from 0 to 4096
[  240.186629][ T8833] veth0_vlan: entered promiscuous mode
[  240.196792][ T9000] ntfs: volume version 3.1.
[  240.207847][ T8833] veth1_vlan: entered promiscuous mode
[  240.260022][ T5798] Bluetooth: hci3: command tx timeout
[  240.273297][ T8833] veth0_macvtap: entered promiscuous mode
[  240.294424][ T8833] veth1_macvtap: entered promiscuous mode
[  240.320106][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.339626][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.359553][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.365586][ T9004] loop0: detected capacity change from 0 to 8192
[  240.396099][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.411848][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.439512][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.459644][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  240.470827][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.483516][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.495335][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.514025][ T9007] loop1: detected capacity change from 0 to 256
[  240.521462][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.547971][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.570182][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.589742][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.600425][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.612374][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.654326][ T8833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.689380][ T8833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.698262][ T8833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.707328][ T8833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.850271][ T9013] block nbd1: server does not support multiple connections per device.
[  240.878827][ T9013] block nbd1: shutting down sockets
[  240.901420][ T9016] loop0: detected capacity change from 0 to 128
[  240.908850][ T9016] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  240.932805][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.942178][ T9016] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  240.951808][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.033316][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.045483][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.160227][  T786] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  241.247263][ T9027] loop3: detected capacity change from 0 to 512
[  241.261177][ T9027] EXT4-fs: Ignoring removed orlov option
[  241.277039][ T9027] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  241.303009][ T9027] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  241.362407][ T9032] team0: entered promiscuous mode
[  241.380711][ T9032] team_slave_0: entered promiscuous mode
[  241.388592][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.413289][ T9032] team_slave_1: entered promiscuous mode
[  241.419194][ T9032] batadv1: entered promiscuous mode
[  241.432090][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.446924][ T9027] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[  241.462662][ T9031] team0: left promiscuous mode
[  241.472752][  T786] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  241.481421][ T9031] team_slave_0: left promiscuous mode
[  241.489065][  T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.493440][ T9031] team_slave_1: left promiscuous mode
[  241.500688][  T786] usb 2-1: config 0 descriptor??
[  241.503693][ T9031] batadv1: left promiscuous mode
[  241.889974][ T9046] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  241.897980][ T9046] netlink: 'syz.0.1256': attribute type 2 has an invalid length.
[  241.927674][  T786] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0
[  241.951098][  T786] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  242.059731][  T786] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected
[  242.078566][  T786] hid-steam 0003:28DE:1142.000C: No HID_FEATURE_REPORT submitted -  nothing to read
[  242.109102][  T786] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0
[  242.170378][  T786] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  242.202841][  T786] usb 2-1: USB disconnect, device number 14
[  242.224397][  T786] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected
[  242.267580][ T9053] loop3: detected capacity change from 0 to 128
[  242.283593][ T9053] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  242.316551][ T9053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.559832][ T5839] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  242.740134][ T5839] usb 1-1: Using ep0 maxpacket: 16
[  242.758954][ T9067] loop1: detected capacity change from 0 to 2048
[  242.776661][ T5839] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.792490][ T5839] usb 1-1: config 0 interface 0 has no altsetting 0
[  242.800340][ T5839] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  242.821272][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.839867][ T5839] usb 1-1: config 0 descriptor??
[  242.846304][ T9067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.992864][ T9073] loop3: detected capacity change from 0 to 512
[  243.003650][ T9073] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  243.035222][ T9073] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  243.067881][ T9073] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1270: bg 0: block 248: padding at end of block bitmap is not set
[  243.087109][ T9073] Quota error (device loop3): write_blk: dquota write failed
[  243.096147][ T9073] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  243.107440][ T9073] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1270: Failed to acquire dquot type 1
[  243.143799][ T9073] EXT4-fs (loop3): 1 truncate cleaned up
[  243.167193][ T9073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  243.217624][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  243.275496][ T5839] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[  243.305899][ T5839] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[  243.318902][ T5839] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[  243.329180][ T5839] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[  243.344940][ T5839] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[  243.358483][ T5839] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  243.471019][    C0] usb 1-1: input irq status -75 received
[  243.564531][ T9093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1276'.
[  243.691716][ T5778] usb 1-1: USB disconnect, device number 19
[  244.289506][ T5882] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  244.503022][ T5882] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  244.513274][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.548749][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  244.588335][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.611464][ T5882] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  244.639637][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  244.659210][ T5882] usb 3-1: Product: syz
[  244.669340][ T5882] usb 3-1: Manufacturer: syz
[  244.702028][ T5882] cdc_wdm 3-1:1.0: skipping garbage
[  244.707308][ T5882] cdc_wdm 3-1:1.0: skipping garbage
[  244.729891][ T5882] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  244.759538][ T5882] cdc_wdm 3-1:1.0: Unknown control protocol
[  244.932892][ T5882] usb 3-1: USB disconnect, device number 18
[  244.988640][ T9109] loop1: detected capacity change from 0 to 40427
[  244.996912][ T9109] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  245.005020][ T9109] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  245.014084][ T9109] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff
[  245.050673][ T9109] F2FS-fs (loop1): invalid crc value
[  245.079022][ T9109] F2FS-fs (loop1): Found nat_bits in checkpoint
[  245.178663][ T9109] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  245.197488][ T9109] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  245.206185][ T9115] loop3: detected capacity change from 0 to 40427
[  245.226734][ T9109] syz.1.1282: attempt to access beyond end of device
[  245.226734][ T9109] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  245.247126][ T9109] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  245.255593][ T9115] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[  245.264723][ T9109] syz.1.1282: attempt to access beyond end of device
[  245.264723][ T9109] loop1: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[  245.285638][ T9115] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  245.309232][ T9109] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  245.316983][ T9115] F2FS-fs (loop3): invalid crc value
[  245.338949][ T9115] F2FS-fs (loop3): Found nat_bits in checkpoint
[  245.471185][   T28] audit: type=1326 audit(1763275563.934:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.0.1287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f1e97f86567 code=0x0
[  245.526731][ T9115] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  245.538474][ T9115] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  245.634262][ T5791] syz-executor: attempt to access beyond end of device
[  245.634262][ T5791] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  245.649271][ T5791] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  245.657679][ T5791] syz-executor: attempt to access beyond end of device
[  245.657679][ T5791] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  245.674225][ T5791] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  245.800143][ T2132] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  245.982522][ T2132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.002934][ T2132] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  246.032186][ T2132] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  246.043568][ T2132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  246.061945][ T2132] usb 3-1: SerialNumber: syz
[  246.291546][ T2132] usb 3-1: 0:2 : does not exist
[  246.330620][ T2132] usb 3-1: 0:0: failed to get current value for ch 0 (-22)
[  246.376007][ T2132] usb 3-1: USB disconnect, device number 19
[  246.657214][ T9152] loop3: detected capacity change from 0 to 4096
[  247.223113][ T9147] loop0: detected capacity change from 0 to 40427
[  247.238411][ T9147] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  247.256725][ T9147] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  247.280011][ T9147] F2FS-fs (loop0): invalid crc value
[  247.302601][ T9147] F2FS-fs (loop0): Found nat_bits in checkpoint
[  247.364043][ T9150] loop1: detected capacity change from 0 to 32768
[  247.382090][ T9150] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1297 (9150)
[  247.400734][ T9150] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.415324][ T9150] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  247.425049][ T9150] BTRFS info (device loop1): force clearing of disk cache
[  247.458363][ T9150] BTRFS info (device loop1): enabling auto defrag
[  247.475545][ T9150] BTRFS info (device loop1): max_inline at 0
[  247.496007][ T9147] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  247.499698][ T9150] BTRFS info (device loop1): enabling disk space caching
[  247.511293][ T9147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  247.539331][ T9150] BTRFS info (device loop1): disk space caching is enabled
[  247.661746][ T9150] BTRFS info (device loop1): enabling ssd optimizations
[  247.697223][ T9150] BTRFS info (device loop1): rebuilding free space tree
[  247.811286][ T9150] BTRFS info (device loop1): disabling free space tree
[  247.829751][ T9150] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  247.849925][ T9150] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  248.002232][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.255258][ T9186] loop3: detected capacity change from 0 to 32768
[  248.285820][ T9186] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1304 (9186)
[  248.338986][ T9186] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  248.360036][ T9186] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  248.387884][ T9186] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  248.420578][ T9194] IPv6: NLM_F_CREATE should be specified when creating new route
[  248.435356][ T9186] BTRFS info (device loop3): use zstd compression, level 3
[  248.459554][ T9186] BTRFS info (device loop3): using free space tree
[  248.688709][ T9186] BTRFS info (device loop3): enabling ssd optimizations
[  248.708793][ T9186] BTRFS info (device loop3): auto enabling async discard
[  248.725755][ T9216] ptrace attach of "./syz-executor exec"[8833] was attempted by ""[9216]
[  248.940000][ T9223] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  249.486707][ T5791] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  249.605290][ T9234] loop2: detected capacity change from 0 to 8192
[  249.625035][ T9234] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  249.645709][ T9234] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  249.657931][ T9234] REISERFS (device loop2): using ordered data mode
[  249.674759][ T9234] reiserfs: using flush barriers
[  249.686198][ T9234] REISERFS (device loop2): journal params: device ram0, size 1, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
[  249.716270][ T9234] REISERFS (device loop2): checking transaction log (ram0)
[  249.725009][ T9234] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one 127
[  249.743054][ T9234] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  249.756310][ T9234] REISERFS (device loop2): Remounting filesystem read-only
[  249.769600][ T9234] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  250.466297][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1330'.
[  250.599333][ T9242] loop2: detected capacity change from 0 to 128
[  250.645140][ T9242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  250.666058][ T9237] loop1: detected capacity change from 0 to 8192
[  250.686292][ T9242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.724139][ T9237] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  250.741045][ T9237] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  250.751658][ T9237] REISERFS (device loop1): using ordered data mode
[  250.758227][ T9237] reiserfs: using flush barriers
[  250.777070][ T9237] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  250.785895][ T9246] loop0: detected capacity change from 0 to 2048
[  250.813881][ T9237] REISERFS (device loop1): checking transaction log (loop1)
[  250.815635][ T9242] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  250.840248][ T9246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.935521][ T9237] REISERFS (device loop1): Using tea hash to sort names
[  250.951361][ T9237] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  251.130094][ T9252] block nbd1: server does not support multiple connections per device.
[  251.142686][ T9252] block nbd1: shutting down sockets
[  251.466254][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1334'.
[  251.476385][ T9268] loop2: detected capacity change from 0 to 128
[  251.510156][ T9268] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  251.527237][ T9268] hpfs: filesystem error: improperly stopped
[  251.559488][ T9268] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  251.567350][ T9268] hpfs: You really don't want any checks? You are crazy...
[  251.581865][ T9268] hpfs: hpfs_map_sector(): read error
[  251.587597][ T9268] hpfs: code page support is disabled
[  251.596999][ T9268] hpfs: hpfs_map_4sectors(): unaligned read
[  251.603988][ T9268] hpfs: hpfs_map_4sectors(): unaligned read
[  251.617118][ T9268] hpfs: filesystem error: unable to find root dir
[  251.904930][ T9274] loop1: detected capacity change from 0 to 2048
[  251.934574][ T9274] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  251.946368][ T9274] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  252.018425][ T9272] loop3: detected capacity change from 0 to 8192
[  252.068647][ T9272] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  252.090993][ T9272] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  252.112182][ T9272] REISERFS (device loop3): using ordered data mode
[  252.129189][ T9272] reiserfs: using flush barriers
[  252.154875][ T9272] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  252.181160][ T9272] REISERFS (device loop3): checking transaction log (loop3)
[  252.204411][ T9264] loop0: detected capacity change from 0 to 32768
[  252.248088][ T9264] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.354695][ T9272] REISERFS (device loop3): Using tea hash to sort names
[  252.356825][ T9264] XFS (loop0): Ending clean mount
[  252.364343][ T9272] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  252.387005][ T9264] XFS (loop0): Quotacheck needed: Please wait.
[  252.462990][ T9264] XFS (loop0): Quotacheck: Done.
[  252.628656][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'.
[  252.629146][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.808404][ T9299] geneve2: entered promiscuous mode
[  252.814033][ T9299] geneve2: entered allmulticast mode
[  253.004843][ T9301] loop0: detected capacity change from 0 to 512
[  253.042597][ T9301] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1345: inode has both inline data and extents flags
[  253.076935][ T9301] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1345: couldn't read orphan inode 15 (err -117)
[  253.099028][ T9301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.136248][ T9301] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  253.186782][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.434998][ T9315] loop0: detected capacity change from 0 to 128
[  253.452762][ T9315] ufs: Unable to do repair on error, will lock lock instead
[  253.483270][ T9315] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  253.789150][ T9326] loop0: detected capacity change from 0 to 1024
[  253.818592][ T9326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  253.848285][ T9326] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.930702][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  254.071162][ T9337] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  254.422376][ T5882] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  254.619568][ T5882] usb 3-1: Using ep0 maxpacket: 16
[  254.631743][ T5882] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.645584][ T5882] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.674382][ T9356] loop3: detected capacity change from 0 to 2048
[  254.682085][ T9345] loop0: detected capacity change from 0 to 32768
[  254.688886][ T5882] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  254.703726][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0
[  254.711986][ T5882] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  254.722451][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.726271][ T9358] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.743810][ T9345] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  254.776553][ T5882] usb 3-1: config 0 descriptor??
[  254.787539][ T9345] 
[  254.790054][ T9345] ======================================================
[  254.797084][ T9345] WARNING: possible circular locking dependency detected
[  254.804127][ T9345] syzkaller #0 Not tainted
[  254.808545][ T9345] ------------------------------------------------------
[  254.815568][ T9345] syz.0.1365/9345 is trying to acquire lock:
[  254.821570][ T9345] ffff8880782e3498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360
[  254.834858][ T9345] 
[  254.834858][ T9345] but task is already holding lock:
[  254.842244][ T9345] ffff88805ed09538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  254.851777][ T9345] 
[  254.851777][ T9345] which lock already depends on the new lock.
[  254.851777][ T9345] 
[  254.862218][ T9345] 
[  254.862218][ T9345] the existing dependency chain (in reverse order) is:
[  254.871344][ T9345] 
[  254.871344][ T9345] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}:
[  254.879193][ T9345]        down_read+0x46/0x2e0
[  254.883899][ T9345]        ocfs2_init_acl+0x2fa/0x720
[  254.889121][ T9345]        ocfs2_mknod+0x12e5/0x20f0
[  254.894249][ T9345]        ocfs2_mkdir+0x196/0x410
[  254.899196][ T9345]        vfs_mkdir+0x296/0x440
[  254.903976][ T9345]        do_mkdirat+0x1d4/0x440
[  254.908842][ T9345]        __x64_sys_mkdir+0x6e/0x80
[  254.913975][ T9345]        do_syscall_64+0x55/0xb0
[  254.918952][ T9345]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.925381][ T9345] 
[  254.925381][ T9345] -> #4 (jbd2_handle){++++}-{0:0}:
[  254.932698][ T9345]        start_this_handle+0x1e9d/0x20c0
[  254.938366][ T9345]        jbd2__journal_start+0x2bb/0x5b0
[  254.944007][ T9345]        jbd2_journal_start+0x2a/0x40
[  254.949420][ T9345]        ocfs2_start_trans+0x376/0x6c0
[  254.954899][ T9345]        ocfs2_modify_bh+0xe9/0x470
[  254.960113][ T9345]        ocfs2_local_read_info+0x13fd/0x1770
[  254.966106][ T9345]        dquot_load_quota_sb+0x757/0xb80
[  254.971767][ T9345]        dquot_load_quota_inode+0x2dc/0x5d0
[  254.977671][ T9345]        ocfs2_enable_quotas+0x1c7/0x440
[  254.983322][ T9345]        ocfs2_fill_super+0x3f6d/0x4d90
[  254.988904][ T9345]        mount_bdev+0x22b/0x2d0
[  254.993768][ T9345]        legacy_get_tree+0xea/0x180
[  254.998977][ T9345]        vfs_get_tree+0x8c/0x280
[  255.003923][ T9345]        do_new_mount+0x24b/0xa40
[  255.008953][ T9345]        __se_sys_mount+0x2da/0x3c0
[  255.014178][ T9345]        do_syscall_64+0x55/0xb0
[  255.019156][ T9345]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.025594][ T9345] 
[  255.025594][ T9345] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  255.034126][ T9345]        down_read+0x46/0x2e0
[  255.038824][ T9345]        ocfs2_start_trans+0x36a/0x6c0
[  255.044312][ T9345]        ocfs2_modify_bh+0xe9/0x470
[  255.049526][ T9345]        ocfs2_local_read_info+0x13fd/0x1770
[  255.055531][ T9345]        dquot_load_quota_sb+0x757/0xb80
[  255.061180][ T9345]        dquot_load_quota_inode+0x2dc/0x5d0
[  255.067095][ T9345]        ocfs2_enable_quotas+0x1c7/0x440
[  255.072752][ T9345]        ocfs2_fill_super+0x3f6d/0x4d90
[  255.078303][ T9345]        mount_bdev+0x22b/0x2d0
[  255.083167][ T9345]        legacy_get_tree+0xea/0x180
[  255.088383][ T9345]        vfs_get_tree+0x8c/0x280
[  255.093341][ T9345]        do_new_mount+0x24b/0xa40
[  255.098377][ T9345]        __se_sys_mount+0x2da/0x3c0
[  255.103581][ T9345]        do_syscall_64+0x55/0xb0
[  255.108533][ T9345]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.114961][ T9345] 
[  255.114961][ T9345] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  255.122455][ T9345]        ocfs2_start_trans+0x26b/0x6c0
[  255.127932][ T9345]        ocfs2_mknod+0xe47/0x20f0
[  255.132962][ T9345]        ocfs2_mkdir+0x196/0x410
[  255.137904][ T9345]        vfs_mkdir+0x296/0x440
[  255.142683][ T9345]        do_mkdirat+0x1d4/0x440
[  255.147559][ T9345]        __x64_sys_mkdir+0x6e/0x80
[  255.152690][ T9345]        do_syscall_64+0x55/0xb0
[  255.157663][ T9345]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.164097][ T9345] 
[  255.164097][ T9345] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  255.174648][ T9345]        down_write+0x97/0x1f0
[  255.179459][ T9345]        ocfs2_reserve_local_alloc_bits+0x126/0x24b0
[  255.186154][ T9345]        ocfs2_reserve_clusters_with_limit+0x1bf/0xba0
[  255.193042][ T9345]        ocfs2_mknod+0xdee/0x20f0
[  255.198094][ T9345]        ocfs2_mkdir+0x196/0x410
[  255.203073][ T9345]        vfs_mkdir+0x296/0x440
[  255.207857][ T9345]        do_mkdirat+0x1d4/0x440
[  255.212724][ T9345]        __x64_sys_mkdir+0x6e/0x80
[  255.217891][ T9345]        do_syscall_64+0x55/0xb0
[  255.222851][ T9345]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.229276][ T9345] 
[  255.229276][ T9345] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  255.239813][ T9345]        __lock_acquire+0x2ddb/0x7c80
[  255.245222][ T9345]        lock_acquire+0x197/0x410
[  255.250275][ T9345]        down_write+0x97/0x1f0
[  255.255077][ T9345]        ocfs2_reserve_suballoc_bits+0x165/0x4360
[  255.261530][ T9345]        ocfs2_reserve_new_metadata_blocks+0x404/0x940
[  255.268416][ T9345]        ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0
[  255.274606][ T9345]        ocfs2_xattr_set+0xb6d/0x11f0
[  255.279993][ T9345]        __vfs_setxattr+0x431/0x470
[  255.285206][ T9345]        __vfs_setxattr_noperm+0x12d/0x5e0
[  255.291062][ T9345]        vfs_setxattr+0x16c/0x2f0
[  255.296107][ T9345]        __se_sys_fsetxattr+0x426/0x4b0
[  255.301684][ T9345]        do_syscall_64+0x55/0xb0
[  255.306636][ T9345]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.313088][ T9345] 
[  255.313088][ T9345] other info that might help us debug this:
[  255.313088][ T9345] 
[  255.323319][ T9345] Chain exists of:
[  255.323319][ T9345]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem
[  255.323319][ T9345] 
[  255.339261][ T9345]  Possible unsafe locking scenario:
[  255.339261][ T9345] 
[  255.346734][ T9345]        CPU0                    CPU1
[  255.352111][ T9345]        ----                    ----
[  255.357585][ T9345]   lock(&oi->ip_xattr_sem);
[  255.362198][ T9345]                                lock(jbd2_handle);
[  255.368801][ T9345]                                lock(&oi->ip_xattr_sem);
[  255.375921][ T9345]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  255.383229][ T9345] 
[  255.383229][ T9345]  *** DEADLOCK ***
[  255.383229][ T9345] 
[  255.391380][ T9345] 3 locks held by syz.0.1365/9345:
[  255.396500][ T9345]  #0: ffff88807e0f6418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200
[  255.406371][ T9345]  #1: ffff88805ed09818 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0
[  255.416854][ T9345]  #2: ffff88805ed09538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  255.426791][ T9345] 
[  255.426791][ T9345] stack backtrace:
[  255.432683][ T9345] CPU: 1 PID: 9345 Comm: syz.0.1365 Not tainted syzkaller #0
[  255.440066][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  255.450135][ T9345] Call Trace:
[  255.453448][ T9345]  <TASK>
[  255.456496][ T9345]  dump_stack_lvl+0x16c/0x230
[  255.461199][ T9345]  ? load_image+0x3b0/0x3b0
[  255.465758][ T9345]  ? show_regs_print_info+0x20/0x20
[  255.471064][ T9345]  ? print_circular_bug+0x12b/0x1a0
[  255.476281][ T9345]  check_noncircular+0x2bd/0x3c0
[  255.481239][ T9345]  ? print_deadlock_bug+0x5d0/0x5d0
[  255.486626][ T9345]  ? lockdep_lock+0xe0/0x220
[  255.491242][ T9345]  ? _find_first_zero_bit+0xd3/0x100
[  255.496551][ T9345]  __lock_acquire+0x2ddb/0x7c80
[  255.501428][ T9345]  ? ocfs2_get_system_file_inode+0x1e3/0x7b0
[  255.507424][ T9345]  ? __lock_acquire+0x7c80/0x7c80
[  255.512552][ T9345]  ? verify_lock_unused+0x140/0x140
[  255.517778][ T9345]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  255.523429][ T9345]  ? do_raw_spin_lock+0x121/0x2c0
[  255.528474][ T9345]  ? mutex_unlock+0x10/0x10
[  255.533085][ T9345]  lock_acquire+0x197/0x410
[  255.538038][ T9345]  ? ocfs2_reserve_suballoc_bits+0x165/0x4360
[  255.544132][ T9345]  ? ocfs2_get_system_file_inode+0x1f1/0x7b0
[  255.550143][ T9345]  ? __might_sleep+0xe0/0xe0
[  255.554747][ T9345]  ? read_lock_is_recursive+0x20/0x20
[  255.560139][ T9345]  ? ocfs2_fast_symlink_read_folio+0x530/0x530
[  255.566317][ T9345]  ? verify_lock_unused+0x140/0x140
[  255.571594][ T9345]  ? check_noncircular+0x175/0x3c0
[  255.576726][ T9345]  down_write+0x97/0x1f0
[  255.580995][ T9345]  ? ocfs2_reserve_suballoc_bits+0x165/0x4360
[  255.587082][ T9345]  ? down_read_killable+0x340/0x340
[  255.592394][ T9345]  ocfs2_reserve_suballoc_bits+0x165/0x4360
[  255.598316][ T9345]  ? mark_lock+0x94/0x320
[  255.602663][ T9345]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  255.608658][ T9345]  ? lock_chain_count+0x20/0x20
[  255.613710][ T9345]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  255.619618][ T9345]  ? ocfs2_block_group_search+0x470/0x470
[  255.625357][ T9345]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  255.631267][ T9345]  ? _raw_spin_unlock+0x40/0x40
[  255.636129][ T9345]  ? stack_trace_save+0x9c/0xe0
[  255.640995][ T9345]  ? stack_trace_snprint+0xf0/0xf0
[  255.646120][ T9345]  ? __stack_depot_save+0x560/0x630
[  255.651333][ T9345]  ? kasan_set_track+0x5f/0x70
[  255.656203][ T9345]  ? kasan_set_track+0x4e/0x70
[  255.660975][ T9345]  ? __kasan_kmalloc+0x8f/0xa0
[  255.665752][ T9345]  ? ocfs2_reserve_new_metadata_blocks+0x114/0x940
[  255.672273][ T9345]  ? ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0
[  255.678092][ T9345]  ? ocfs2_xattr_set+0xb6d/0x11f0
[  255.683130][ T9345]  ? __vfs_setxattr+0x431/0x470
[  255.687999][ T9345]  ? __vfs_setxattr_noperm+0x12d/0x5e0
[  255.693467][ T9345]  ? vfs_setxattr+0x16c/0x2f0
[  255.698158][ T9345]  ? __se_sys_fsetxattr+0x426/0x4b0
[  255.703400][ T9345]  ? do_syscall_64+0x55/0xb0
[  255.708007][ T9345]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.714115][ T9345]  ocfs2_reserve_new_metadata_blocks+0x404/0x940
[  255.720748][ T9345]  ? ocfs2_init_steal_slots+0x160/0x160
[  255.726332][ T9345]  ? ocfs2_xattr_block_set+0x2b40/0x2b40
[  255.732081][ T9345]  ? lock_acquire+0x1f2/0x410
[  255.736777][ T9345]  ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0
[  255.742432][ T9345]  ? ocfs2_xattr_set+0xb33/0x11f0
[  255.747506][ T9345]  ? ocfs2_prepare_refcount_xattr+0xf20/0xf20
[  255.753605][ T9345]  ? ocfs2_truncate_log_needs_flush+0x135/0x2e0
[  255.759867][ T9345]  ? ocfs2_remove_btree_range+0x1480/0x1480
[  255.765790][ T9345]  ? down_write+0x162/0x1f0
[  255.770346][ T9345]  ? down_read_killable+0x340/0x340
[  255.775563][ T9345]  ? up_write+0x1c3/0x410
[  255.779920][ T9345]  ocfs2_xattr_set+0xb6d/0x11f0
[  255.784800][ T9345]  ? __ocfs2_xattr_set_handle+0xf10/0xf10
[  255.790537][ T9345]  ? verify_lock_unused+0x140/0x140
[  255.795866][ T9345]  ? verify_lock_unused+0x140/0x140
[  255.801097][ T9345]  ? evm_protected_xattr_common+0x170/0x190
[  255.807022][ T9345]  ? evm_protect_xattr+0x534/0x7a0
[  255.812157][ T9345]  ? ocfs2_xattr_security_get+0x40/0x40
[  255.817722][ T9345]  __vfs_setxattr+0x431/0x470
[  255.822425][ T9345]  __vfs_setxattr_noperm+0x12d/0x5e0
[  255.827728][ T9345]  vfs_setxattr+0x16c/0x2f0
[  255.832246][ T9345]  ? xattr_permission+0x470/0x470
[  255.837284][ T9345]  ? sb_start_write+0x110/0x1c0
[  255.842161][ T9345]  ? __se_sys_fsetxattr+0x3d4/0x4b0
[  255.847379][ T9345]  __se_sys_fsetxattr+0x426/0x4b0
[  255.852420][ T9345]  ? __x64_sys_fsetxattr+0xc0/0xc0
[  255.857561][ T9345]  ? lockdep_hardirqs_on+0x98/0x150
[  255.862771][ T9345]  ? __x64_sys_fsetxattr+0x20/0xc0
[  255.868335][ T9345]  do_syscall_64+0x55/0xb0
[  255.872771][ T9345]  ? clear_bhb_loop+0x40/0x90
[  255.877458][ T9345]  ? clear_bhb_loop+0x40/0x90
[  255.882149][ T9345]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.888062][ T9345] RIP: 0033:0x7f1e97f8f6c9
[  255.892494][ T9345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.912134][ T9345] RSP: 002b:00007f1e98d51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  255.920577][ T9345] RAX: ffffffffffffffda RBX: 00007f1e981e5fa0 RCX: 00007f1e97f8f6c9
[  255.928562][ T9345] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000004
[  255.936543][ T9345] RBP: 00007f1e98011f91 R08: 0000000000000001 R09: 0000000000000000
[  255.944528][ T9345] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000
[  255.952538][ T9345] R13: 00007f1e981e6038 R14: 00007f1e981e5fa0 R15: 00007fff51826688
[  255.960558][ T9345]  </TASK>
[  255.963747][    C1] vkms_vblank_simulate: vblank timer overrun
[  256.027527][ T9358] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  256.033155][ T5786] (syz-executor,5786,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  256.039098][ T9358] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  256.053245][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[  256.061495][ T9358] Remounting filesystem read-only
[  256.069960][ T1123] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  256.076973][ T1123] NILFS (loop3): discard dirty block: blocknr=39, size=1024
[  256.088701][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.098215][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.116739][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  256.123253][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  256.134348][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.143545][ T1123] NILFS (loop3): discard dirty page: offset=0, ino=2
[  256.153131][ T1123] NILFS (loop3): discard dirty block: blocknr=18, size=1024
[  256.160613][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.172222][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.181288][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.195084][ T1123] NILFS (loop3): discard dirty page: offset=0, ino=5
[  256.202066][ T1123] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[  256.212752][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.222202][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.231362][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.240437][ T1123] NILFS (loop3): discard dirty page: offset=0, ino=3
[  256.247192][ T1123] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  256.254571][ T1123] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  256.261972][ T1123] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  256.269297][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.278241][ T1123] NILFS (loop3): discard dirty page: offset=196608, ino=3
[  256.285421][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.294349][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.303457][ T1123] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[  256.310862][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.320249][ T1123] NILFS (loop3): discard dirty page: offset=0, ino=4
[  256.326972][ T1123] NILFS (loop3): discard dirty block: blocknr=40, size=1024
[  256.334341][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.343291][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.352238][ T1123] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  256.361399][ T5791] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  256.370783][ T5791] NILFS (loop3): discard dirty page: offset=0, ino=6
[  256.377534][ T5791] NILFS (loop3): discard dirty block: blocknr=35, size=1024
[  256.384955][ T5791] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[  256.392719][ T5791] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  256.400178][ T5791] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  256.416695][ T5882] hid (null): invalid report_size 27418
[  256.628413][ T5839] usb 3-1: USB disconnect, device number 20