last executing test programs:

8.905126556s ago: executing program 0 (id=2001):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0})

5.657857309s ago: executing program 0 (id=2026):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c0b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0)

5.109116833s ago: executing program 2 (id=2032):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)

4.870311947s ago: executing program 2 (id=2035):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$eJzs3MtrY1UcB/CTPqbzciziwt1cGIQWJqHpY9Bd1Rl8YIfiY+FK0yQNmUlyS5OmtSsFl+LC/0QUXLn0b3Dh2p24UNwJSu45lamOoDRt7PTzgdvvvSc3v/s7obScm5AAXFjz2a8/l8KNcCWEMB1CuB5CsV9KW2E9xnMhhJshhKlHtlIa/3PgUgjhagjhxqh4rFlKD31+e3hr7ac3fvnmu7mZa198/f3kZg1M2vMhhO5O3N/vxsxbMR+k8dqwXWR3dZgyPtB9mI7zmPvNraLCfu3ovFqRK614fr6z1x/ldqdWH2WrvV2M7/TiBfvD1lGd4gkParvFcaO5VWS7nxfZOox9HRzGv22H/UGs00j1PizKh8HgKON486AZ57PzsMh6b5DGY9280TwY5TBlulyo551G0cfWSV7p/7c32729g2zY3O238162Vqm+UKneKVd380Zz0Fwt17qNO6vZQqszOq08aNa66608b3WalXreXcwWWvV6uVrNFu42t9q1XlatVlYqS+W1xbR3O3v1/rtZp5EtjPLldm9v0O70s+18N4vPWMyWKysvLma3qtnbG5vZ5lv37m1svvP+3ffuv7Tx+ivppL+1lS0sLy0vl6tL5eXq4vmd/+h//X+a/yep6THOH06kNOkGAM4f639gEs77+j9Y/4+F9f/Fnj+ciPU/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCF9cPsl68VO/Px+FoafyoNPZOOSyGEqRDC748xHS4dqzmd6sz+w/mzf+nh21IoKoyuMZe2qyGE9bT99vRpvwoAAADw5Prqo5ufxdV6/DE/6YY4S/GmzdT1D8ZUrxRCmJ3/cQxVQrrZFJ49eVfR6Pd7JhyMqVpxA+vymIrFW24z46r2r0wfi8uPRCnG1OOf9/GZdAcAAJyO4yuBs12FAAAAcJY+nXQDTEbxTmv6LH76AP9cjPSG4JVjRwAAAMA5VJp0AwAAAMCpK9b/vv8PAAAAnmzx+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3buJyd1KIoD8Gmh7/H+GIlx7lacwTJcgkOHhgW4CZaAW3ADrAFnLsGAoS3RGkxMettG8n1Je7kN+XFKmJx7SQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC49F6v54/3VQ9uc7a6dNHcDAAAAHLMpVvPyxbSa/6uvn9WXLup5FhF5RBzr3Ufxq5E5qnOKL95ffKrhKaJM2H/G7/r4GxHX9fF63vW3AAAAAKdrvVjOqm69Ok2HLog+VYs2+f+bRHlZRBTTl0Rp+f50mSis/H2P4y5RWrmANUkUVi25jVOlfcuoMUw+DFk15L2WAwAA9KLZCfTbhQAAANCn26ELYBhZHLYyD3vB5T/v3zcE/zRmAAAAwA+UDV0AAAAA0Lmy//f8PwAAADht1fP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NKmWM3Xi+Wsbc52106auwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf25xwFQyCMAWj+xa2TOYb3P6AExNLW5j0YCAlTfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDkc73jbn5t9iT/JN+GqfVIMndqWDo1rJ0btn4Yb14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzV7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X2kBcQR0QxACiQEWer2Wlq4MoIiBPwEpSq8lcOVHm4FWFVIWNpS5C4IRISRQ2Po/dG6lLmXrcEORmBhA9tnJ6xGJgyj2Jfl8pOf3tWX5fZ8TRfn6+Q4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqE3e2Y2zYtObxml17N7jW2tFf3+mL9zZerBctCJOmkz6cHg53kn67SUCAADA8ZHV9X0I4WG+vVL0aa+s//P6nKLm/+7ZaVzX87N1f93XtX/Rfv3l0Ys7A/Wm4xQXvbw+Hp35Zyqdg5vlYnvuX8/olHe+fPaSlT+Q9P3NFyZ5eT+Tb+7efbdbhieayBYA+D9O130V1P8PFf2wzcQAODY6UeFd1/9Zr92cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrQ3QxP13ESQlju7MaF+49vrZX9zP6drQfLdbtw+/ZWfM3iEnkI4fL6eHSmqYkcAtdv3PxkdTweXWs+eCWE0N7oVfDhHOeE0GaGgv0GafW7vij5HI6g5T9MAAAcOXnVirr+Yb69UhxLlkL46/sn6//XozjE9f9MH9f/jz66cC8eK67/h43NcPENNq5+Prh+4+ab61dXr4yujD596+zw7eG5i+fPXxyUz0oGnpgAAACwP92qxfV/uhTCZGb9/1QUhznr/y++HX4Vj5Wp//e0u+jXdiYAAADH2/Ov/vF7ssfxpNsNX65ubFwbTrc7+2en2xZS/c9OVC2u/7OltrMCAAAAmjDZTJ5Y/78UxWHO9f9nfnjpp/iaWQjhZLX+f3rts/Gl5qbTkj/nOquJjxMf+FQBAABYaCerFq//5+X7/+nOKw9pCOGN16Zx9TWAc9X/2Xtf/xiPFb//f665KS6ktD+9H2XfD6HTbzsjAAAAjrKnqlYU+7/l2ysf/3zqg673/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9ncAAAD//99iPvs=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x47)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc4}})

3.570548876s ago: executing program 2 (id=2046):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

3.431114929s ago: executing program 1 (id=2047):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000380)={[{@barrier}, {@gid}, {@nobarrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@force}, {@nls={'nls', 0x3d, 'macinuit'}}, {@force}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04)

3.184611254s ago: executing program 2 (id=2048):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0)
poll(&(0x7f0000000240)=[{r0}], 0x1, 0x423ff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0)

2.929214229s ago: executing program 1 (id=2050):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

2.484511034s ago: executing program 0 (id=2053):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000240), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x300, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00TL'], 0x38}, 0x300, 0x0, 0x0, 0x6108be0612f59833}, 0x0)

2.334449359s ago: executing program 4 (id=2054):
rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00')
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0)

2.22559707s ago: executing program 0 (id=2055):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="c01014a58680241f", 0x10c0}], 0x1)

2.158990726s ago: executing program 2 (id=2056):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x898b, 0x0, 0x9, 0x0, 0x0})

2.050256507s ago: executing program 4 (id=2057):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ppoll(&(0x7f0000000240)=[{r0, 0x2280}], 0x1, 0x0, 0x0, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x4, {}, 0x3810000, 0x0, 0x0, 0x0, 0x1b, '\x04nod\xff\x01{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e)

2.008539941s ago: executing program 0 (id=2059):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4436, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x4030582b, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="8000"}})

1.775882434s ago: executing program 3 (id=2060):
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80800, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x141)

1.71835276s ago: executing program 2 (id=2061):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x3e)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0})

1.477720834s ago: executing program 3 (id=2062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40)

1.300011511s ago: executing program 3 (id=2063):
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000240))
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

1.056839426s ago: executing program 1 (id=2064):
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_emit_ethernet(0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb28f6ee412b8f86dd60ffff00002d2f00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0)

1.056535686s ago: executing program 4 (id=2065):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xf37})

1.056262536s ago: executing program 3 (id=2066):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x6ed211e7}}]}})

762.419475ms ago: executing program 4 (id=2067):
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@empty, 0x4e21, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="02"])

588.551652ms ago: executing program 3 (id=2068):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="c014ef4404236f9d646fae87879085133ad8975219d7c5b0e17dd86d11bede6adfc32eed7f19fa34880cce7ec7990f63e5d7996e33044ee8a4b2e6b43a7c6d25d508062bd3333b86453bc2f02b2617adecd3d5a0ea7561f9f63dea03c7f7d0fdec633a94741d77d3104ba57f74dce4b01be342dcc7b2df0a450ac40e4fbe4bebd4f60df318fb469f802375dc7a08f4649f9ed5b384d30b0fd964d74d91db023b617888d7b56cb0", @ANYRESOCT], 0x1, 0x578, &(0x7f0000000640)="$eJzs3d9u08gewPGfSwolR0LocIRQVWAo50hFKsFJISjiyseZpAOOHdkOaq9QRVNUkcKKstK2N7vcsLvS7kNwuw+xT7DvsVdo32C7sp30D20aoG2CyvcT7Y5jj2d+40T+aUpsCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMut2nbREs/4rQXVn1sNg8bO2+7e+1bIrT3FIf2KWMl/MjEhV7JVV/4jMtbdfDn537RMZe+mZCIpJmTzX5cvPriUG+vtf0jAQ7G+sfl8qdNpvxp1ICfo6rn+2+raN1FgGk5dKxMFqlIu23fma5GqGU9Hi1GsG8oNtRMHoZpxb6lipTKndGExaPn1quPp3sr7t0u2XVYPC03thFHg33lYiNx543nGr6d1ks1JnfvJF/GRiVWsnYZSK6ud9tygASSVih9TqTSoUskulYrFUqlYvle5d9+2c/tW2B+QfTV6X9o//tzaGtQfTqPjPYEDRzDWzf/iiRFfWrIg6sCXK1UJJZBGn+1dvfz/vzv60H535/9elr+ys3lS0vx/LXt3rV/+7xPLsb+sflvWZUM25bksSUc60pZXw4roC3nVRYsvRiIJxEhDnHSN6q5RUpGylMWWJzIvNYlESU2MeKIlkkWJJBadfqNcCUWLI7EEEoqSGXHlligpSkUqMidKtBRkUQJpiS91qYqTtrIiq+lxnzvkM9quVOw7jHzve9eW0iGjPc78j6/VsZ6/gaPY6uX/hdyoQwEAAAAAACfESv/6bonIuFxNl2rG0/aowwIAAAAAAMcomfnLVFKMJ0tXxWL+DwAAAADAaWOl19hZIpKX69nSiljp5VL8EQAAAAAAgFMi/ff/a0mR3gPluljbt0th/g8AAAAAwCnx08B77EfNc9bvf0kYjltvmgv/tdacpJ6zdibbLyve7LQY1yatC91G0qKcFbmcq6esiazS9k0w33eLlUFxWAcF8MN2ADI4gEs5+UVuZHVuLGflcm9L1ku+ZjxdcAPvQVEc58JYrBfib1+sfifp8H/2GxcsWVnttAtPX3aW01jSgb9Zs7LmrE+I5XV6v4X0mos9I/b+zlaPpxdidPvNZ/3au8fffVbC2Cf0+VamszrT3Tve5veOf6J2vtvIzuiTbdtRTMhqp1084sjfys2szs2Zm1nxYRTG06VCv8+geyxKu6P4rGOxPwpr37EYFMVcvyjOflwUADAqK32y0E7+35d3P+Nc+3nZXT4xu7+VmazOzGR6Ys1NHpBX7EFndPuI2e23fc9AOiCKYhJF0u+v2/1mWfVdssO7vv1GXslKDuGZ12vfyOX1jc3bq2tLz9rP2i9Kpbmyfde275VkPB1Gt9gV6dY5cg8AIDP4GTsDa1h3s1n1RZGDZ9X/3v5JQUGeykvpyLLMplcbpL84OLDV/K6fIcwOmLXm0zSZPeFl9pC55dn0Kodeu6VD6+6NYW4YHwUAAEMzPSAPf0z+nx0w796by/fOjs9Kv7rFoR8LAAC+Fjp8b+XjH60wNM0nxUql6MTzWoWB+0iFplrXyvixDt15x69r1QyDOHADL1l4bKo6UlGr2QzCWNWCUDWDyCykT35X3Ue/R7rh+LFxo6annUgrN/Bjx41V1UTnVbP1f89E8zpMd46a2jU14zqxCXwVBa3Q1QWlIq13VTRV7cemZpJFXzVD03DCRfU48FoNrSyxJDTNOMga7PVl/FoQNtJmC6M+2AAAfCHWNzafL3U67VcnuDDqMQIAgL3I0gAAAAAAAAAAAAAAAAAAAAAAfPmGcf0fC6NY6N2Afgh99W4FPeohn/CCNdQB5kRklEMeeOr4/kRPTABO3D8BAAD//9u0Si4=")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

530.760058ms ago: executing program 1 (id=2069):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x81}, {0x6}]}, 0x10)

418.422139ms ago: executing program 4 (id=2070):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a32"], 0x48}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz2\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002)

390.503732ms ago: executing program 0 (id=2071):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

332.363958ms ago: executing program 1 (id=2072):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
utimes(0x0, &(0x7f00000025c0)={{0x77359400}, {0x6, 0xfffffffffffffffa}})

43.210407ms ago: executing program 3 (id=2073):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x0, 0x0, 0x0}, {0x36de, 0x4801, 0x0, 0x0}], 0x2})

42.515927ms ago: executing program 4 (id=2074):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)

0s ago: executing program 1 (id=2075):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

35] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  232.732402][ T7835] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  232.771312][ T7835] BTRFS info (device loop4): enabling auto defrag
[  232.791103][ T7835] BTRFS info (device loop4): force clearing of disk cache
[  232.820869][ T7835] BTRFS info (device loop4): max_inline at 0
[  232.855970][ T7835] BTRFS info (device loop4): turning on sync discard
[  232.873497][ T7835] BTRFS info (device loop4): using free space tree
[  232.961963][ T7870] loop3: detected capacity change from 0 to 128
[  232.997682][ T7870] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  233.144602][ T7882] loop2: detected capacity change from 0 to 2048
[  233.152394][ T7882] EXT4-fs: Ignoring removed bh option
[  233.172844][ T7884] loop1: detected capacity change from 0 to 512
[  233.180402][ T7884] EXT4-fs: Ignoring removed bh option
[  233.196807][ T7884] EXT4-fs: Ignoring removed mblk_io_submit option
[  233.221207][ T4276] sysv_free_block: flc_count > flc_size
[  233.222353][ T7882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  233.248567][ T4276] sysv_free_block: flc_count > flc_size
[  233.252192][ T7884] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  233.264373][ T4276] sysv_free_block: flc_count > flc_size
[  233.278576][ T4276] sysv_free_block: flc_count > flc_size
[  233.317014][ T7835] BTRFS info (device loop4): enabling ssd optimizations
[  233.324540][ T4276] sysv_free_block: flc_count > flc_size
[  233.336075][ T7835] BTRFS info (device loop4): rebuilding free space tree
[  233.366599][ T4276] sysv_free_block: flc_count > flc_size
[  233.414476][ T7884] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  233.422789][ T4276] sysv_free_block: flc_count > flc_size
[  233.468390][   T26] audit: type=1800 audit(1760356860.085:49): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1313" name="file2" dev="loop4" ino=261 res=0 errno=0
[  233.474853][ T7884] EXT4-fs (loop1): orphan cleanup on readonly fs
[  233.496849][ T4276] sysv_free_block: flc_count > flc_size
[  233.502516][ T4276] sysv_free_block: flc_count > flc_size
[  233.512549][ T4276] sysv_free_block: flc_count > flc_size
[  233.532575][ T7884] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4
[  233.561307][ T4276] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  233.568626][ T7884] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  233.636828][ T7884] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.1331: Failed to acquire dquot type 1
[  233.673058][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  233.744392][ T7884] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1331: Invalid block bitmap block 0 in block_group 0
[  233.763125][ T7898] loop3: detected capacity change from 0 to 64
[  233.839715][ T7884] Quota error (device loop1): write_blk: dquota write failed
[  233.862491][ T4274] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  233.894591][ T7884] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  233.953121][ T7884] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.1331: Failed to acquire dquot type 1
[  234.009726][ T4381] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (4381)
[  234.034315][ T7884] Quota error (device loop1): write_blk: dquota write failed
[  234.105655][ T7884] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  234.136656][ T7884] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.1331: Failed to acquire dquot type 1
[  234.189087][ T7884] EXT4-fs (loop1): 1 orphan inode deleted
[  234.358635][ T7884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  234.572539][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  234.965756][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'.
[  234.983223][ T7931] loop1: detected capacity change from 0 to 64
[  235.196115][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1348'.
[  235.510959][ T7943] loop0: detected capacity change from 0 to 1024
[  235.520377][ T7943] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60542!=56696)
[  235.530846][ T7943] EXT4-fs (loop0): group descriptors corrupted!
[  235.616717][ T4592] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  235.826779][ T4592] usb 2-1: Using ep0 maxpacket: 16
[  235.833943][ T4592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.866201][ T4592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.906686][ T4592] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  235.926350][ T4592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.958321][ T4592] usb 2-1: config 0 descriptor??
[  236.005516][ T7935] loop4: detected capacity change from 0 to 32768
[  236.063754][ T7935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1349 (7935)
[  236.127794][ T7935] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.170540][ T7935] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  236.204497][ T7935] BTRFS info (device loop4): using free space tree
[  236.228882][ T7964] netlink: 'syz.0.1362': attribute type 8 has an invalid length.
[  236.372816][ T4592] hid (null): unknown global tag 0xd
[  236.459993][ T7980] tipc: Started in network mode
[  236.466860][ T7980] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  236.479823][ T7980] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  236.500693][ T7980] tipc: Enabled bearer <udp:syz0>, priority 10
[  236.539889][ T7935] BTRFS info (device loop4): enabling ssd optimizations
[  236.588670][ T4592] usb 2-1: string descriptor 0 read error: -71
[  236.626293][ T4592] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  236.639016][ T4592] letsketch: probe of 0003:6161:4D15.0013 failed with error -32
[  236.649355][ T4592] usb 2-1: USB disconnect, device number 5
[  236.745554][ T4274] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  237.386204][ T8008] bridge0: port 3(hsr0) entered blocking state
[  237.413244][ T8008] bridge0: port 3(hsr0) entered disabled state
[  237.434601][ T8008] device hsr0 entered promiscuous mode
[  237.456001][ T8008] bridge0: port 3(hsr0) entered blocking state
[  237.462447][ T8008] bridge0: port 3(hsr0) entered forwarding state
[  237.533644][ T8012] loop0: detected capacity change from 0 to 512
[  237.609802][ T4588] tipc: Node number set to 1
[  237.635344][ T8012] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  237.654764][ T8012] EXT4-fs (loop0): orphan cleanup on readonly fs
[  237.667165][ T8012] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  237.719774][ T8012] EXT4-fs warning (device loop0): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  237.803275][ T8012] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  237.842322][ T8012] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1377: bg 0: block 40: padding at end of block bitmap is not set
[  237.878406][ T8005] loop2: detected capacity change from 0 to 32768
[  237.934422][ T8012] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  237.953544][ T8012] EXT4-fs (loop0): 1 truncate cleaned up
[  238.005796][ T8012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  238.218471][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  238.509477][ T8026] usb usb8: usbfs: process 8026 (syz.1.1384) did not claim interface 5 before use
[  238.670708][ T8010] loop3: detected capacity change from 0 to 32768
[  238.775599][ T8035] loop4: detected capacity change from 0 to 256
[  238.842230][ T8035] exfat: Deprecated parameter 'namecase'
[  238.858100][ T8035] exfat: Deprecated parameter 'namecase'
[  238.874623][ T8010] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  238.897035][ T8010] XFS (loop3): Mounting V5 Filesystem
[  238.897758][ T8035] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  239.008118][ T8010] XFS (loop3): Ending clean mount
[  239.045218][ T8010] XFS (loop3): Quotacheck needed: Please wait.
[  239.167228][ T8010] XFS (loop3): Quotacheck: Done.
[  239.279378][ T4276] XFS (loop3): Unmounting Filesystem
[  239.525740][ T8030] loop0: detected capacity change from 0 to 32768
[  239.555485][ T8030] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1383 (8030)
[  239.621002][ T8030] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  239.698763][ T8030] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  239.712793][ T8030] BTRFS info (device loop0): enabling auto defrag
[  239.730892][ T8030] BTRFS info (device loop0): force clearing of disk cache
[  239.784910][ T8030] BTRFS info (device loop0): max_inline at 0
[  239.796090][ T8030] BTRFS info (device loop0): turning on sync discard
[  239.825481][ T8030] BTRFS info (device loop0): using free space tree
[  239.976681][ T6003] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  240.085773][ T8030] BTRFS info (device loop0): enabling ssd optimizations
[  240.132500][ T8030] BTRFS info (device loop0): rebuilding free space tree
[  240.166750][ T6003] usb 2-1: Using ep0 maxpacket: 16
[  240.174097][ T6003] usb 2-1: config 28 has an invalid interface number: 169 but max is 0
[  240.206911][ T6003] usb 2-1: config 28 has no interface number 0
[  240.236822][ T6003] usb 2-1: config 28 interface 169 has no altsetting 0
[  240.282531][ T6003] usb 2-1: string descriptor 0 read error: -71
[  240.309549][ T6003] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48
[  240.328405][   T26] audit: type=1800 audit(1760356866.945:50): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1383" name="file2" dev="loop0" ino=261 res=0 errno=0
[  240.339589][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.410430][ T8061] loop2: detected capacity change from 0 to 32768
[  240.441447][ T6003] r8152-cfgselector 2-1: rejected 1 configuration due to insufficient available bus power
[  240.471575][ T6003] r8152-cfgselector 2-1: no configuration chosen from 1 choice
[  240.502334][ T6003] r8152-cfgselector 2-1: Unknown version 0x0000
[  240.537904][ T6003] r8152-cfgselector 2-1: USB disconnect, device number 6
[  240.639391][ T4279] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  241.010639][ T8103] loop4: detected capacity change from 0 to 256
[  241.052722][ T8103] exfat: Deprecated parameter 'utf8'
[  241.083340][ T8103] exfat: Deprecated parameter 'utf8'
[  241.157070][ T8103] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  241.361293][ T8107] loop3: detected capacity change from 0 to 1764
[  241.736363][ T8113] sp0: Synchronizing with TNC
[  241.818079][ T8123] sp1: Synchronizing with TNC
[  242.214254][ T8133] loop0: detected capacity change from 0 to 16
[  242.248296][ T8133] erofs: (device loop0): mounted with root inode @ nid 36.
[  242.732477][ T8147] loop0: detected capacity change from 0 to 512
[  242.742032][ T8120] loop3: detected capacity change from 0 to 32768
[  242.754848][ T8120] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1413 (8120)
[  242.773907][ T8147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  242.803209][ T8120] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.825320][ T8147] EXT4-fs (loop0): 1 truncate cleaned up
[  242.831371][ T8120] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  242.847381][ T8147] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  242.862363][ T8120] BTRFS info (device loop3): enabling auto defrag
[  242.913504][ T8120] BTRFS info (device loop3): force clearing of disk cache
[  242.960697][   T26] audit: type=1800 audit(1760356869.575:51): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1424" name="file2" dev="loop0" ino=16 res=0 errno=0
[  242.981073][    C0] vkms_vblank_simulate: vblank timer overrun
[  242.996794][ T8120] BTRFS info (device loop3): max_inline at 0
[  243.010373][ T8120] BTRFS info (device loop3): turning on sync discard
[  243.056775][ T8120] BTRFS info (device loop3): using free space tree
[  243.261527][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  243.427009][ T8135] loop1: detected capacity change from 0 to 32768
[  243.502659][ T8120] BTRFS info (device loop3): enabling ssd optimizations
[  243.528029][ T8120] BTRFS info (device loop3): rebuilding free space tree
[  243.664408][   T26] audit: type=1800 audit(1760356870.275:52): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1413" name="file2" dev="loop3" ino=261 res=0 errno=0
[  243.968349][ T4276] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  244.470363][ T8202] loop4: detected capacity change from 0 to 22
[  244.511449][ T8202] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  244.577624][ T8202] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  244.926817][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'.
[  245.004348][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1445'.
[  245.190019][ T8197] loop2: detected capacity change from 0 to 32768
[  245.252528][ T8187] loop0: detected capacity change from 0 to 32768
[  245.262204][ T8220] loop1: detected capacity change from 0 to 16
[  245.290492][ T8187] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  245.315903][ T8197] XFS (loop2): Mounting V5 Filesystem
[  245.334090][ T8187] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  245.345752][ T8220] erofs: (device loop1): mounted with root inode @ nid 36.
[  245.503580][ T8197] XFS (loop2): Ending clean mount
[  245.565314][ T8197] XFS (loop2): Quotacheck needed: Please wait.
[  245.737878][ T8187] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  245.755468][ T8197] XFS (loop2): Quotacheck: Done.
[  245.809835][ T4399] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  245.828490][ T4399] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  246.009579][ T8240] loop4: detected capacity change from 0 to 4096
[  246.019625][ T8243] tipc: Started in network mode
[  246.024835][ T8243] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  246.049312][ T4399] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 220ms
[  246.067087][ T8243] tipc: Enabled bearer <eth:batadv0>, priority 10
[  246.099347][ T8240] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  246.109830][ T8244] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.120809][ T4399] gfs2: fsid=syz:syz.0: jid=0: Done
[  246.128673][ T8187] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  246.174335][ T4270] XFS (loop2): Unmounting Filesystem
[  246.204212][ T8240] NILFS (loop4): mounting fs with errors
[  246.815903][ T8256] loop3: detected capacity change from 0 to 128
[  246.937527][ T8256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  247.001980][ T8256] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  247.144100][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  247.230770][ T4399] tipc: Node number set to 8432298
[  247.334645][ T8270] loop4: detected capacity change from 0 to 4096
[  247.711210][ T8259] loop1: detected capacity change from 0 to 32768
[  247.772909][ T8278] netlink: 'syz.3.1473': attribute type 7 has an invalid length.
[  247.782316][ T8259] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1465 (8259)
[  247.821102][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'.
[  247.864654][ T8259] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  247.924355][ T8259] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  247.975092][ T8259] BTRFS info (device loop1): using free space tree
[  248.006273][ T8280] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  248.051506][ T8280] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  248.086691][ T8280] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  248.116762][ T8280] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  248.155947][ T8299] loop2: detected capacity change from 0 to 512
[  248.157461][ T8280] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  248.174342][ T8299] EXT4-fs: Ignoring removed nobh option
[  248.192694][ T8299] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1477: iget: bad i_size value: 38620345925642
[  248.213871][ T8280] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  248.245051][ T8259] BTRFS info (device loop1): enabling ssd optimizations
[  248.254172][ T8280] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  248.257273][ T8299] EXT4-fs (loop2): Remounting filesystem read-only
[  248.289641][ T8299] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1477: couldn't read orphan inode 15 (err -117)
[  248.316839][ T8280] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  248.340599][ T8299] EXT4-fs (loop2): Remounting filesystem read-only
[  248.347617][ T8280] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  248.362707][ T8299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  248.383153][ T8280] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  248.393434][ T8280] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  248.402917][ T4265] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  248.429924][ T8280] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  248.534882][ T8280] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  248.597174][ T8280] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  248.883068][ T8319] xt_NFQUEUE: number of queues (1024) out of range (got 66558)
[  248.965593][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  249.026850][ T8323] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  249.033356][ T8323] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  249.106924][ T8323] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  249.113637][ T8323] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  249.139191][ T8323] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  249.173454][ T8323] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  249.195855][ T8323] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  249.283809][ T8323] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  249.340426][ T8323] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  249.373958][ T8323] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  249.390907][ T8323] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  249.398125][ T8323] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  249.404761][ T8323] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  249.448849][ T8323] comedi comedi3: 8255: I/O port conflict (0x400009,4)
[  249.491783][ T8323] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  249.518700][ T8323] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  249.532560][ T8323] comedi comedi3: 8255: I/O port conflict (0x80,4)
[  249.585103][ T8336] device vlan0 entered promiscuous mode
[  249.723226][ T8336] team0: Port device vlan0 added
[  249.773012][ T8340] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  249.796952][ T8340] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  249.818833][ T8340] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  249.840882][ T8340] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  250.119059][ T8346] loop0: detected capacity change from 0 to 4096
[  250.487743][ T8360] loop3: detected capacity change from 0 to 1024
[  250.586725][ T8360] hfsplus: bad catalog entry type
[  250.798032][   T46] hfsplus: b-tree write err: -5, ino 4
[  251.148801][ T8372] loop2: detected capacity change from 0 to 512
[  251.254542][ T8372] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  251.264053][ T8372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  251.343694][ T8352] loop4: detected capacity change from 0 to 32768
[  251.454712][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  251.503968][ T8352] XFS (loop4): Mounting V5 Filesystem
[  251.642981][ T8352] XFS (loop4): Ending clean mount
[  251.657803][ T8352] XFS (loop4): Quotacheck needed: Please wait.
[  251.773257][ T8352] XFS (loop4): Quotacheck: Done.
[  251.911051][ T4274] XFS (loop4): Unmounting Filesystem
[  251.936758][ T6013] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  251.986768][ T4399] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  252.126697][ T6013] usb 3-1: Using ep0 maxpacket: 32
[  252.134563][ T6013] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.176156][ T6013] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  252.198569][ T4399] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  252.216603][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.226977][ T4399] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  252.262672][ T6013] usb 3-1: Product: syz
[  252.267430][ T4399] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  252.286853][ T6013] usb 3-1: Manufacturer: syz
[  252.296966][ T6013] usb 3-1: SerialNumber: syz
[  252.311994][ T4399] usb 4-1: config 220 has no interface number 2
[  252.323520][ T6013] usb 3-1: config 0 descriptor??
[  252.332336][ T4399] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64
[  252.357481][ T6013] cdc_ether 3-1:0.0: skipping garbage
[  252.363140][ T6013] usb 3-1: bad CDC descriptors
[  252.388966][ T4399] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  252.418454][ T6013] usb 3-1: unsupported MDLM descriptors
[  252.454656][ T4399] usb 4-1: config 220 interface 0 has no altsetting 0
[  252.492453][ T4399] usb 4-1: config 220 interface 76 has no altsetting 0
[  252.506963][ T4399] usb 4-1: config 220 interface 1 has no altsetting 0
[  252.536838][ T4399] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  252.576701][ T4399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.584783][ T4399] usb 4-1: Product: syz
[  252.609582][ T4399] usb 4-1: Manufacturer: syz
[  252.619702][ T4399] usb 4-1: SerialNumber: syz
[  252.641555][ T6013] usb 3-1: USB disconnect, device number 10
[  252.897146][ T4399] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  252.925840][ T4399] usb 4-1: No valid video chain found.
[  252.954511][ T4399] usb 4-1: selecting invalid altsetting 0
[  253.016367][ T4399] usb 4-1: selecting invalid altsetting 0
[  253.032519][ T4399] usbtest: probe of 4-1:220.1 failed with error -22
[  253.063815][ T4399] usb 4-1: USB disconnect, device number 4
[  253.274707][ T8419] loop2: detected capacity change from 0 to 1024
[  253.343695][ T8419] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  253.415996][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  253.640771][ T8429] loop1: detected capacity change from 0 to 256
[  253.694645][ T8429] FAT-fs (loop1): Directory bread(block 64) failed
[  253.726221][ T8429] FAT-fs (loop1): Directory bread(block 65) failed
[  253.776844][ T8429] FAT-fs (loop1): Directory bread(block 66) failed
[  253.783496][ T8429] FAT-fs (loop1): Directory bread(block 67) failed
[  253.807521][ T8429] FAT-fs (loop1): Directory bread(block 68) failed
[  253.814194][ T8429] FAT-fs (loop1): Directory bread(block 69) failed
[  253.830867][ T8429] FAT-fs (loop1): Directory bread(block 70) failed
[  253.849369][ T8429] FAT-fs (loop1): Directory bread(block 71) failed
[  253.856398][ T8429] FAT-fs (loop1): Directory bread(block 72) failed
[  253.879310][ T8429] FAT-fs (loop1): Directory bread(block 73) failed
[  254.090746][ T8443] loop0: detected capacity change from 0 to 1024
[  254.125752][ T8443] hfsplus: bad catalog entry type
[  254.237094][ T8447] mmap: syz.3.1537 (8447): VmData 54239232 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[  254.265487][   T11] hfsplus: b-tree write err: -5, ino 4
[  254.503256][ T8454] loop3: detected capacity change from 0 to 128
[  254.593520][ T8454] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  254.642192][ T8454] hpfs: filesystem error: improperly stopped
[  254.691384][ T8454] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  254.715445][ T8454] hpfs: You really don't want any checks? You are crazy...
[  254.746282][ T8454] hpfs: hpfs_map_sector(): read error
[  254.795306][ T8454] hpfs: code page support is disabled
[  254.805345][ T8454] hpfs: hpfs_map_4sectors(): unaligned read
[  254.845033][ T8454] hpfs: hpfs_map_4sectors(): unaligned read
[  254.886624][ T8454] hpfs: filesystem error: unable to find root dir
[  255.024187][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'.
[  255.052269][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'.
[  255.108865][ T4589] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  255.329771][ T4589] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  255.360142][ T4589] usb 5-1: config 1 has no interface number 0
[  255.366349][ T4589] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  255.400681][ T4589] usb 5-1: config 1 interface 105 has no altsetting 0
[  255.433207][ T4589] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  255.443837][ T8482] loop3: detected capacity change from 0 to 256
[  255.467462][ T4589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.487359][ T4589] usb 5-1: Product: syz
[  255.491979][ T4589] usb 5-1: Manufacturer: syz
[  255.511698][ T8482] exfat: Deprecated parameter 'namecase'
[  255.524845][ T4589] usb 5-1: SerialNumber: syz
[  255.580842][ T8482] exfat: Deprecated parameter 'utf8'
[  255.619443][ T8482] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  255.755878][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.762457][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.772881][ T8468] loop2: detected capacity change from 0 to 32768
[  255.775252][ T4589] aqc111: probe of 5-1:1.105 failed with error -22
[  255.852265][ T8468] jfs_lookup: dtSearch returned -5
[  255.946871][ T4399] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  256.019670][ T6013] usb 5-1: USB disconnect, device number 8
[  256.136858][ T4399] usb 1-1: Using ep0 maxpacket: 8
[  256.144199][ T4399] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  256.177240][ T4399] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  256.185782][ T4399] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  256.246041][ T4399] usb 1-1: config 250 has no interface number 0
[  256.287128][ T4399] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  256.324803][ T4399] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  256.362256][ T4399] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  256.403505][ T4399] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  256.424481][ T4399] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  256.469542][ T4399] usb 1-1: config 250 interface 228 has no altsetting 0
[  256.518991][ T4399] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  256.559767][ T4399] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  256.586704][ T4399] usb 1-1: Product: syz
[  256.595423][ T4399] usb 1-1: SerialNumber: syz
[  256.626744][ T4399] hub 1-1:250.228: bad descriptor, ignoring hub
[  256.633919][ T4399] hub: probe of 1-1:250.228 failed with error -5
[  256.861318][ T4399] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  257.219589][ T6008] usb 1-1: USB disconnect, device number 7
[  257.221220][ T8524] loop4: detected capacity change from 0 to 512
[  257.238480][ T6008] usblp0: removed
[  257.257622][ T4399] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  257.294912][ T8524] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1575: dx entry: limit 0 != root limit 125
[  257.316645][ T8524] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1575: Corrupt directory, running e2fsck is recommended
[  257.338860][ T8524] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  257.383053][ T8524] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1575: corrupted in-inode xattr
[  257.413265][ T8506] loop3: detected capacity change from 0 to 40427
[  257.436617][ T8524] EXT4-fs (loop4): Remounting filesystem read-only
[  257.443393][ T8506] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  257.453279][ T8524] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1575: couldn't read orphan inode 15 (err -117)
[  257.456946][ T8506] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  257.471754][ T8524] EXT4-fs (loop4): Remounting filesystem read-only
[  257.476984][ T4399] usb 3-1: Using ep0 maxpacket: 16
[  257.486762][ T8524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  257.511517][ T4399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.556067][ T4399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.572729][ T8506] F2FS-fs (loop3): invalid crc value
[  257.587621][ T4399] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  257.596976][ T8506] F2FS-fs (loop3): Found nat_bits in checkpoint
[  257.616856][ T4399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.646713][ T4399] usb 3-1: config 0 descriptor??
[  257.652285][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  257.726973][ T8506] F2FS-fs (loop3): Start checkpoint disabled!
[  257.767796][ T8506] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  258.030957][ T8537] netlink: 'syz.4.1579': attribute type 29 has an invalid length.
[  258.067257][ T8537] netlink: 'syz.4.1579': attribute type 29 has an invalid length.
[  258.079963][ T4399] hid (null): unknown global tag 0xd
[  258.117146][ T8539] netlink: 'syz.4.1579': attribute type 29 has an invalid length.
[  258.162641][ T8540] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1580'.
[  258.176420][ T8318] bio_check_eod: 560 callbacks suppressed
[  258.176440][ T8318] kworker/u4:8: attempt to access beyond end of device
[  258.176440][ T8318] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  258.289329][ T4399] usb 3-1: string descriptor 0 read error: -71
[  258.310626][ T8544] loop4: detected capacity change from 0 to 16
[  258.331655][ T4399] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  258.357687][ T8544] erofs: (device loop4): mounted with root inode @ nid 36.
[  258.372870][ T4399] letsketch: probe of 0003:6161:4D15.0014 failed with error -32
[  258.411515][ T4399] usb 3-1: USB disconnect, device number 11
[  258.849117][ T8557] loop4: detected capacity change from 0 to 512
[  258.864587][ T8557] EXT4-fs: Ignoring removed nobh option
[  258.938648][ T8557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  259.022024][ T8559] loop3: detected capacity change from 0 to 64
[  259.051387][ T8557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  259.087471][ T8559] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  259.109782][ T8555] loop0: detected capacity change from 0 to 40427
[  259.112551][ T8557] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.127279][ T8555] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(15) root(3)
[  259.135309][ T8555] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  259.161390][ T8555] F2FS-fs (loop0): invalid crc value
[  259.176448][ T8555] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391)
[  259.232566][ T8555] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1000000, run fsck to fix.
[  259.250560][ T8555] F2FS-fs (loop0): sanity_check_inode: inode (ino=3) has corrupted i_xattr_nid: 16777216, run fsck to fix.
[  259.263188][ T8555] F2FS-fs (loop0): Failed to read root inode
[  259.488953][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  259.940768][ T8582] loop4: detected capacity change from 0 to 2048
[  260.027669][ T8582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.077188][ T8582] netlink: 'syz.4.1596': attribute type 1 has an invalid length.
[  260.118908][ T8582] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1596'.
[  260.837001][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'.
[  261.225087][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1617'.
[  261.472188][ T8632] loop1: detected capacity change from 0 to 64
[  261.695429][ T4265] hfs: node 4:3 still has 1 user(s)!
[  261.734771][ T8638] loop4: detected capacity change from 0 to 4096
[  261.905243][ T8640] overlayfs: failed to set xattr on upper
[  261.942949][ T8640] overlayfs: ...falling back to index=off,metacopy=off.
[  261.969969][ T8640] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  262.166803][ T4589] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  262.372295][ T8630] loop2: detected capacity change from 0 to 32768
[  262.398534][ T4589] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  262.408115][ T8630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1620 (8630)
[  262.437484][ T4589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.456265][ T4589] usb 4-1: Product: syz
[  262.484603][ T4589] usb 4-1: Manufacturer: syz
[  262.495737][ T4589] usb 4-1: SerialNumber: syz
[  262.514223][ T4589] usb 4-1: config 0 descriptor??
[  262.532713][ T8630] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  262.564239][ T8630] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  262.584365][ T8630] BTRFS info (device loop2): using free space tree
[  262.678727][ T8663] netlink: 'syz.1.1632': attribute type 8 has an invalid length.
[  262.698582][ T4318] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  262.854274][ T8630] BTRFS info (device loop2): enabling ssd optimizations
[  262.918343][ T4270] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  262.932565][ T4318] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  262.961298][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.025942][ T4318] usb 1-1: config 0 descriptor??
[  263.043341][ T4318] cp210x 1-1:0.0: cp210x converter detected
[  263.159125][ T4589] usb 4-1: Firmware version (0.0) predates our first public release.
[  263.185628][ T4589] usb 4-1: Please update to version 0.2 or newer
[  263.290468][ T4589] usb 4-1: USB disconnect, device number 5
[  263.376141][ T8686] loop4: detected capacity change from 0 to 1024
[  263.452795][ T4318] usb 1-1: cp210x converter now attached to ttyUSB0
[  263.649246][ T4318] usb 1-1: USB disconnect, device number 8
[  263.677782][ T4318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  263.713987][ T4318] cp210x 1-1:0.0: device disconnected
[  263.906167][ T8692] loop3: detected capacity change from 0 to 64
[  264.000551][   T46] hfsplus: b-tree write err: -5, ino 4
[  264.243992][ T8688] loop2: detected capacity change from 0 to 32768
[  264.267057][ T8688] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1633 (8688)
[  264.341406][ T8688] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  264.378206][ T8700] loop0: detected capacity change from 0 to 256
[  264.385423][ T8688] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  264.395974][ T8688] BTRFS info (device loop2): enabling auto defrag
[  264.451030][ T8688] BTRFS info (device loop2): force clearing of disk cache
[  264.476610][ T6008] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  264.491752][ T8688] BTRFS info (device loop2): max_inline at 0
[  264.498784][ T8700] FAT-fs (loop0): Directory bread(block 64) failed
[  264.505394][ T8700] FAT-fs (loop0): Directory bread(block 65) failed
[  264.508583][ T8688] BTRFS info (device loop2): turning on sync discard
[  264.540221][ T8688] BTRFS info (device loop2): using free space tree
[  264.549634][ T8700] FAT-fs (loop0): Directory bread(block 66) failed
[  264.563653][ T8700] FAT-fs (loop0): Directory bread(block 67) failed
[  264.573825][ T8700] FAT-fs (loop0): Directory bread(block 68) failed
[  264.604829][ T8700] FAT-fs (loop0): Directory bread(block 69) failed
[  264.639652][ T8700] FAT-fs (loop0): Directory bread(block 70) failed
[  264.670849][ T8700] FAT-fs (loop0): Directory bread(block 71) failed
[  264.688596][ T6008] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  264.699756][ T8700] FAT-fs (loop0): Directory bread(block 72) failed
[  264.707747][ T6008] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  264.726692][ T4589] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  264.726717][ T8700] FAT-fs (loop0): Directory bread(block 73) failed
[  264.742789][ T6008] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  264.777757][ T8688] BTRFS info (device loop2): enabling ssd optimizations
[  264.818185][ T8688] BTRFS info (device loop2): rebuilding free space tree
[  264.866652][ T6008] usb 5-1: config 220 has no interface number 2
[  264.886812][ T6008] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  264.926835][ T6008] usb 5-1: config 220 interface 0 has no altsetting 0
[  264.935311][ T6008] usb 5-1: config 220 interface 76 has no altsetting 0
[  264.946785][ T4589] usb 4-1: Using ep0 maxpacket: 16
[  264.952757][ T6008] usb 5-1: config 220 interface 1 has no altsetting 0
[  264.959265][ T4589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.970105][ T6008] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  265.006686][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.011537][ T4589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.037473][   T26] audit: type=1800 audit(1760356891.655:53): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1633" name="file2" dev="loop2" ino=261 res=0 errno=0
[  265.039547][ T6008] usb 5-1: Product: syz
[  265.074261][ T4589] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  265.105352][ T4589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.124584][ T6008] usb 5-1: Manufacturer: syz
[  265.136970][ T6008] usb 5-1: SerialNumber: syz
[  265.155276][ T4589] usb 4-1: config 0 descriptor??
[  265.257615][ T4270] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  265.371405][ T6008] usb 5-1: selecting invalid altsetting 0
[  265.401167][ T6008] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  265.423290][ T6008] usb 5-1: No valid video chain found.
[  265.476189][ T6008] usb 5-1: selecting invalid altsetting 0
[  265.483836][ T6008] usbtest: probe of 5-1:220.1 failed with error -22
[  265.503969][ T6008] usb 5-1: USB disconnect, device number 9
[  265.686828][ T4594] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  265.705670][ T4589] hid (null): unknown global tag 0xd
[  265.896158][ T4589] usb 4-1: string descriptor 0 read error: -71
[  265.903045][ T4594] usb 1-1: Using ep0 maxpacket: 32
[  265.910394][ T4594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10
[  265.956470][ T4594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.970966][ T4589] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[  265.989978][ T4589] letsketch: probe of 0003:6161:4D15.0015 failed with error -32
[  266.010032][ T4594] usb 1-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00
[  266.038155][ T4589] usb 4-1: USB disconnect, device number 6
[  266.067185][ T4594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.090418][ T4594] usb 1-1: config 0 descriptor??
[  266.148870][ T8742] process 'syz.4.1653' launched '/dev/fd/3' with NULL argv: empty string added
[  266.249459][ T8747] loop2: detected capacity change from 0 to 1024
[  266.294067][ T8747] hfsplus: bad catalog entry type
[  266.463819][ T8318] hfsplus: b-tree write err: -5, ino 4
[  266.560812][ T4594] wacom 0003:056A:00ED.0016: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.0-1/input0
[  266.754078][ T4594] usb 1-1: USB disconnect, device number 9
[  266.883617][ T8756] fido_id[8756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  266.992559][ T8764] loop4: detected capacity change from 0 to 512
[  267.017607][ T8764] EXT4-fs: Ignoring removed bh option
[  267.037096][ T8764] EXT4-fs: Ignoring removed mblk_io_submit option
[  267.062857][ T8764] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  267.103229][ T8767] device macsec0 entered promiscuous mode
[  267.117309][ T8764] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  267.131927][ T8764] EXT4-fs (loop4): orphan cleanup on readonly fs
[  267.139313][ T8767] bridge0: port 4(macsec0) entered blocking state
[  267.153206][ T8767] bridge0: port 4(macsec0) entered disabled state
[  267.160912][ T8764] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4
[  267.213321][ T8764] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  267.244711][ T8767] bridge0: port 4(macsec0) entered blocking state
[  267.251363][ T8767] bridge0: port 4(macsec0) entered forwarding state
[  267.263361][ T8770] loop2: detected capacity change from 0 to 512
[  267.293746][ T8764] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.1662: Failed to acquire dquot type 1
[  267.359437][ T8764] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1662: Invalid block bitmap block 0 in block_group 0
[  267.379972][ T8764] Quota error (device loop4): write_blk: dquota write failed
[  267.398753][ T8764] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  267.405767][ T8770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  267.416705][ T8764] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.1662: Failed to acquire dquot type 1
[  267.441686][ T8764] Quota error (device loop4): write_blk: dquota write failed
[  267.449787][ T8764] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  267.461171][ T8764] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.1662: Failed to acquire dquot type 1
[  267.472918][ T8770] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.474141][   T26] audit: type=1326 audit(1760356894.085:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954438eec9 code=0x7ffc0000
[  267.489650][ T8758] loop3: detected capacity change from 0 to 32768
[  267.506902][   T26] audit: type=1326 audit(1760356894.085:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954438eec9 code=0x7ffc0000
[  267.545468][ T8764] EXT4-fs (loop4): 1 orphan inode deleted
[  267.551478][ T8758] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1660 (8758)
[  267.563935][   T26] audit: type=1326 audit(1760356894.145:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f954438eec9 code=0x7ffc0000
[  267.587046][ T8764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  267.709936][ T8758] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  267.726770][ T8758] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  267.756856][ T8758] BTRFS info (device loop3): enabling auto defrag
[  267.763452][ T8758] BTRFS info (device loop3): force clearing of disk cache
[  267.801988][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  267.805400][ T8758] BTRFS info (device loop3): max_inline at 0
[  267.815240][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  267.876975][ T8758] BTRFS info (device loop3): turning on sync discard
[  267.883794][ T8758] BTRFS info (device loop3): using free space tree
[  268.097261][ T8803] netlink: 'syz.2.1673': attribute type 2 has an invalid length.
[  268.173244][ T8758] BTRFS info (device loop3): enabling ssd optimizations
[  268.213676][ T8758] BTRFS info (device loop3): rebuilding free space tree
[  268.280560][ T8811] loop2: detected capacity change from 0 to 512
[  268.306828][ T4594] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  268.360185][ T8811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  268.416827][ T8811] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  268.506842][ T8811] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.1675: corrupted inode contents
[  268.526894][ T4594] usb 1-1: Using ep0 maxpacket: 16
[  268.534474][ T4594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.580823][ T8811] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.1675: mark_inode_dirty error
[  268.585875][ T4594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.614163][ T8811] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.1675: corrupted inode contents
[  268.632810][ T4594] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  268.652828][ T4594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.664074][ T8819] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.1675: corrupted inode contents
[  268.681495][ T4594] usb 1-1: config 0 descriptor??
[  268.735653][ T4276] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  268.756428][ T8819] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.1675: mark_inode_dirty error
[  268.794652][ T8819] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.1675: corrupted inode contents
[  268.810942][ T8823] program syz.1.1680 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  269.001489][ T4381] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4381)
[  269.145853][ T4594] hid (null): unknown global tag 0xd
[  269.247840][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  269.363187][ T4594] usb 1-1: string descriptor 0 read error: -71
[  269.410494][ T4594] usb 1-1: Max retries (5) exceeded reading string descriptor 200
[  269.412280][ T8832] loop2: detected capacity change from 0 to 256
[  269.421463][ T4594] letsketch: probe of 0003:6161:4D15.0017 failed with error -32
[  269.486286][ T4594] usb 1-1: USB disconnect, device number 10
[  270.044898][ T8844] loop3: detected capacity change from 0 to 1024
[  270.192262][ T8844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  270.403826][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  270.982052][ T8828] loop1: detected capacity change from 0 to 32768
[  271.031961][ T8828] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  271.065834][ T8828] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  271.157315][ T8828] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms
[  271.242785][ T4318] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  271.251911][ T4318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  271.458643][ T4318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 206ms
[  271.507689][ T4318] gfs2: fsid=syz:syz.0: jid=0: Done
[  271.526705][ T8828] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  271.685626][ T8890] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1709'.
[  271.712512][ T8891] loop3: detected capacity change from 0 to 512
[  271.736051][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1709'.
[  271.780361][ T8890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1709'.
[  271.847982][ T8891] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1708: dx entry: limit 0 != root limit 125
[  271.886633][ T8891] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1708: Corrupt directory, running e2fsck is recommended
[  271.919480][ T8891] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  271.959710][ T8891] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1708: corrupted in-inode xattr
[  272.047598][ T8891] EXT4-fs (loop3): Remounting filesystem read-only
[  272.054310][ T8891] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1708: couldn't read orphan inode 15 (err -117)
[  272.103693][ T8891] EXT4-fs (loop3): Remounting filesystem read-only
[  272.130752][ T8891] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  272.358520][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  272.802489][ T8887] loop2: detected capacity change from 0 to 32768
[  272.822341][ T8887] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1707 (8887)
[  272.867551][ T8887] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  272.886733][ T8887] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  272.909631][ T8887] BTRFS info (device loop2): using free space tree
[  272.943355][ T8887] BTRFS info (device loop2): enabling ssd optimizations
[  272.986612][ T4318] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  273.023334][ T4270] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  273.187016][ T4318] usb 2-1: Using ep0 maxpacket: 32
[  273.199837][ T4318] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  273.246641][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.304667][ T4318] usb 2-1: config 0 descriptor??
[  273.347035][ T4318] gspca_main: nw80x-2.14.0 probing 055f:d001
[  273.585996][ T8947] loop0: detected capacity change from 0 to 764
[  273.962169][ T4589] usb 2-1: USB disconnect, device number 7
[  274.735395][ T8982] loop4: detected capacity change from 0 to 128
[  274.756252][ T8982] EXT4-fs: Ignoring removed nobh option
[  274.822683][ T8982] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  274.839060][ T8982] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  274.999694][ T8967] loop3: detected capacity change from 0 to 32768
[  275.011789][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  275.076826][ T4399] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  275.103750][ T8967] XFS (loop3): Mounting V5 Filesystem
[  275.253821][ T8967] XFS (loop3): Ending clean mount
[  275.266862][ T4399] usb 2-1: Using ep0 maxpacket: 32
[  275.276334][ T4399] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  275.277768][ T8967] XFS (loop3): Quotacheck needed: Please wait.
[  275.301821][ T4399] usb 2-1: config 0 has no interface number 0
[  275.351547][ T4399] usb 2-1: config 0 interface 12 has no altsetting 0
[  275.389166][ T4399] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  275.423195][ T4399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.434857][ T4399] usb 2-1: Product: syz
[  275.444882][ T4399] usb 2-1: Manufacturer: syz
[  275.450843][ T4399] usb 2-1: SerialNumber: syz
[  275.462754][ T8967] XFS (loop3): Quotacheck: Done.
[  275.463489][ T8981] overlayfs: statfs failed on './file0'
[  275.476366][ T4399] usb 2-1: config 0 descriptor??
[  275.705848][ T4276] XFS (loop3): Unmounting Filesystem
[  276.103094][ T4399] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[  276.127444][ T4399] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  276.134826][ T4399] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  276.157100][ T4399] f81534: probe of 2-1:0.12 failed with error -71
[  276.196759][ T4399] usb 2-1: USB disconnect, device number 8
[  276.310355][ T9003] loop4: detected capacity change from 0 to 32768
[  276.333191][ T9003] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  276.342952][ T9003] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  276.355306][ T9003] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  276.365169][ T4318] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  276.372202][ T4318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  276.418669][ T4318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms
[  276.433151][ T4318] gfs2: fsid=syz:syz.0: jid=0: Done
[  276.440114][ T9003] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  276.546643][ T4589] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  276.756687][ T4589] usb 4-1: Using ep0 maxpacket: 8
[  276.763582][ T4589] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  276.791817][ T4589] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  276.822066][ T4589] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  276.877473][ T4589] usb 4-1: config 250 has no interface number 0
[  276.883838][ T4589] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  276.926865][ T4589] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  276.949142][ T4589] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  276.960233][ T4589] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  276.982872][ T9024] loop0: detected capacity change from 0 to 128
[  277.004801][ T4589] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  277.046434][ T9024] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  277.060705][ T4589] usb 4-1: config 250 interface 228 has no altsetting 0
[  277.079200][ T9024] hpfs: filesystem error: improperly stopped
[  277.102581][ T4589] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  277.127265][ T4589] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  277.143923][ T9024] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  277.157296][ T4589] usb 4-1: Product: syz
[  277.161532][ T4589] usb 4-1: SerialNumber: syz
[  277.176330][ T9024] hpfs: You really don't want any checks? You are crazy...
[  277.197095][ T4589] hub 4-1:250.228: bad descriptor, ignoring hub
[  277.203439][ T4589] hub: probe of 4-1:250.228 failed with error -5
[  277.214379][ T9024] hpfs: hpfs_map_sector(): read error
[  277.220633][ T9024] hpfs: code page support is disabled
[  277.227010][ T9024] hpfs: hpfs_map_4sectors(): unaligned read
[  277.234099][ T9024] hpfs: hpfs_map_4sectors(): unaligned read
[  277.240675][ T9024] hpfs: filesystem error: unable to find root dir
[  277.279626][ T9024] hpfs: hpfs_map_4sectors(): unaligned read
[  277.405549][ T4589] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  277.700282][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'.
[  277.798163][ T4589] usb 4-1: USB disconnect, device number 7
[  277.809346][ T4589] usblp0: removed
[  278.631165][ T6005] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  278.830398][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  278.859754][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.903831][ T6005] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  278.931848][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.967489][ T6005] usb 2-1: config 0 descriptor??
[  279.112036][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'.
[  279.155920][ T9077] tipc: Started in network mode
[  279.182478][ T9077] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711
[  279.213822][ T9077] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  279.379418][ T9081] syz.3.1782 uses obsolete (PF_INET,SOCK_PACKET)
[  279.391926][ T6005] glorious 0003:258A:0036.0018: item fetching failed at offset 0/2
[  279.407451][ T9049] mmap: syz.0.1767 (9049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  279.420209][ T6005] glorious: probe of 0003:258A:0036.0018 failed with error -22
[  279.592335][ T6005] usb 2-1: USB disconnect, device number 9
[  279.684234][ T4318] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  279.820034][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'.
[  279.836613][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1788'.
[  279.856628][ T9095] netlink: 'syz.0.1788': attribute type 29 has an invalid length.
[  279.890723][ T4318] usb 5-1: Using ep0 maxpacket: 8
[  279.902302][ T4318] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  279.931143][ T4318] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  279.962394][ T4318] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  280.012269][ T4318] usb 5-1: config 250 has no interface number 0
[  280.042698][ T4318] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  280.091856][ T4318] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  280.102726][ T4318] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  280.137488][ T4318] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  280.166405][ T4318] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  280.210833][ T4318] usb 5-1: config 250 interface 228 has no altsetting 0
[  280.240111][ T4318] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  280.269794][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  280.314837][ T4318] usb 5-1: Product: syz
[  280.327878][ T4318] usb 5-1: SerialNumber: syz
[  280.364768][ T4318] hub 5-1:250.228: bad descriptor, ignoring hub
[  280.390985][ T4318] hub: probe of 5-1:250.228 failed with error -5
[  280.426351][ T9110] loop3: detected capacity change from 0 to 256
[  280.479094][ T9110] exfat: Deprecated parameter 'utf8'
[  280.522065][ T9110] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  280.570146][ T4318] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  280.765857][ T9118] loop0: detected capacity change from 0 to 512
[  280.833827][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'.
[  280.865929][ T9118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  280.886824][ T9118] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  280.922581][ T9118] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1798: corrupted inode contents
[  280.959110][ T9118] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.1798: mark_inode_dirty error
[  280.975751][ T9118] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1798: corrupted inode contents
[  280.989030][ T6005] usb 5-1: USB disconnect, device number 10
[  280.997236][ T9124] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1798: corrupted inode contents
[  281.014320][ T6005] usblp0: removed
[  281.068156][ T9124] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.1798: mark_inode_dirty error
[  281.089372][ T9124] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1798: corrupted inode contents
[  281.164800][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  281.737830][ T9139] loop3: detected capacity change from 0 to 2048
[  281.756084][ T9139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.118610][ T9151] loop0: detected capacity change from 0 to 16
[  282.218320][ T9151] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature a50000, please upgrade kernel version
[  282.302545][ T9155] loop2: detected capacity change from 0 to 164
[  282.390658][ T9155] Unable to read rock-ridge attributes
[  282.399246][ T9149] loop3: detected capacity change from 0 to 32768
[  282.423078][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í"
[  282.442311][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1801)...
[  282.457941][ T9153] loop4: detected capacity change from 0 to 4096
[  282.487466][ T9153] __ntfs_error: 6 callbacks suppressed
[  282.487485][ T9153] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  282.535154][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 5 extents in 0ms
[  282.551603][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use
[  282.573124][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal...
[  282.617669][ T9153] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  282.707836][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Journal head lookup took 134ms
[  282.741455][ T9153] ntfs: volume version 3.1.
[  282.762567][ T9153] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  282.801267][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Done
[  282.824751][ T9153] ntfs: (device loop4): map_mft_record(): Failed with error code 5.
[  282.861218][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: first mount done, others may mount
[  282.867088][ T9153] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  282.880822][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: ri_addr = 18
[  282.880822][ T9149] ri_length = 1
[  282.880822][ T9149] ri_data0 = 19
[  282.880822][ T9149] ri_data = 524288
[  282.880822][ T9149] ri_bitbytes = 515
[  282.880822][ T9149] start=0 len=515 offset=128
[  282.915929][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0:  R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0
[  282.929164][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: fatal: filesystem consistency error
[  282.929164][ T9149]   RG = 18
[  282.929164][ T9149]   function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829
[  282.953209][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: G:  s:UN n:3/12 f:n t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0
[  282.967002][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: about to withdraw this file system
[  282.987485][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Journal recovery skipped for jid 0 until next mount.
[  283.001249][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Glock dequeues delayed: 0
[  283.013127][ T9149] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: File system withdrawn
[  283.024215][ T9149] CPU: 0 PID: 9149 Comm: syz.3.1811 Not tainted syzkaller #0
[  283.031636][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  283.041934][ T9149] Call Trace:
[  283.045346][ T9149]  <TASK>
[  283.048316][ T9149]  dump_stack_lvl+0x168/0x22e
[  283.053146][ T9149]  ? kobject_uevent_env+0x35f/0x8a0
[  283.058413][ T9149]  ? show_regs_print_info+0x12/0x12
[  283.063844][ T9149]  ? load_image+0x3b0/0x3b0
[  283.068412][ T9149]  ? kobject_uevent_env+0x35f/0x8a0
[  283.073727][ T9149]  gfs2_withdraw+0x143f/0x1780
[  283.078592][ T9149]  ? gfs2_lm+0x220/0x220
[  283.082906][ T9149]  ? gfs2_rgrp_dump+0x2f9/0x520
[  283.087916][ T9149]  ? do_raw_spin_unlock+0x11d/0x230
[  283.093265][ T9149]  gfs2_consist_rgrpd_i+0x148/0x1a0
[  283.098514][ T9149]  ? gfs2_consist_inode_i+0x110/0x110
[  283.103932][ T9149]  ? __kmem_cache_alloc_node+0x140/0x260
[  283.109605][ T9149]  ? gfs2_ri_update+0x466/0x17c0
[  283.114571][ T9149]  ? rcu_is_watching+0x11/0xa0
[  283.119368][ T9149]  gfs2_ri_update+0xbcb/0x17c0
[  283.124209][ T9149]  ? gfs2_glock_nq_init+0x60/0x60
[  283.129537][ T9149]  ? inode_go_held+0xf4/0x200
[  283.134249][ T9149]  ? gfs2_glock_wait+0x20b/0x2a0
[  283.139227][ T9149]  gfs2_rindex_update+0x331/0x400
[  283.144299][ T9149]  ? lockdep_init_map_type+0x9d/0x880
[  283.149801][ T9149]  ? gfs2_ri_total+0x1f0/0x1f0
[  283.154729][ T9149]  ? init_inodes+0x249/0x320
[  283.159393][ T9149]  ? complete_all+0x29/0x1d0
[  283.164045][ T9149]  init_inodes+0x249/0x320
[  283.168609][ T9149]  gfs2_fill_super+0x1718/0x1f80
[  283.173602][ T9149]  ? gfs2_reconfigure+0xcd0/0xcd0
[  283.178747][ T9149]  ? init_locking+0xb8/0x200
[  283.183387][ T9149]  ? sb_set_blocksize+0xa5/0xe0
[  283.188521][ T9149]  get_tree_bdev+0x3f1/0x610
[  283.193135][ T9149]  ? gfs2_reconfigure+0xcd0/0xcd0
[  283.198184][ T9149]  gfs2_get_tree+0x4d/0x1e0
[  283.202734][ T9149]  vfs_get_tree+0x88/0x270
[  283.207203][ T9149]  do_new_mount+0x24a/0xa40
[  283.211739][ T9149]  __se_sys_mount+0x2d6/0x3c0
[  283.216441][ T9149]  ? __x64_sys_mount+0xc0/0xc0
[  283.221247][ T9149]  ? lockdep_hardirqs_on+0x94/0x140
[  283.226471][ T9149]  ? __x64_sys_mount+0x1c/0xc0
[  283.231779][ T9149]  do_syscall_64+0x4c/0xa0
[  283.236216][ T9149]  ? clear_bhb_loop+0x60/0xb0
[  283.240907][ T9149]  ? clear_bhb_loop+0x60/0xb0
[  283.245705][ T9149]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  283.251678][ T9149] RIP: 0033:0x7fbe5f99066a
[  283.256146][ T9149] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.275791][ T9149] RSP: 002b:00007fbe60756e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  283.284348][ T9149] RAX: ffffffffffffffda RBX: 00007fbe60756ef0 RCX: 00007fbe5f99066a
[  283.292373][ T9149] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007fbe60756eb0
[  283.300370][ T9149] RBP: 0000200000000000 R08: 00007fbe60756ef0 R09: 0000000000a00408
[  283.308386][ T9149] R10: 0000000000a00408 R11: 0000000000000246 R12: 0000200000012500
[  283.316465][ T9149] R13: 00007fbe60756eb0 R14: 0000000000012627 R15: 00002000000000c0
[  283.324481][ T9149]  </TASK>
[  283.348040][ T9153] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  283.551837][ T9141] loop1: detected capacity change from 0 to 32768
[  283.568037][ T9162] MPTCP: kernel_bind error, err=-22
[  283.586835][ T9153] ntfs: (device loop4): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported.  Sorry.
[  283.642349][ T9153] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -95.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  284.203071][ T9176] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1824'.
[  284.254162][ T4399] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  284.456625][ T4399] usb 2-1: Using ep0 maxpacket: 16
[  284.469738][ T4399] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  284.509820][ T4399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.543825][ T4399] usb 2-1: Product: syz
[  284.554051][ T4399] usb 2-1: Manufacturer: syz
[  284.564430][ T4399] usb 2-1: SerialNumber: syz
[  284.595814][ T4399] usb 2-1: config 0 descriptor??
[  284.621901][ T4399] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  284.647905][ T9191] loop2: detected capacity change from 0 to 1024
[  284.759014][ T8318] hfsplus: b-tree write err: -5, ino 4
[  285.173177][ T9201] loop2: detected capacity change from 0 to 4096
[  285.227766][ T4399] ssu100: probe of 2-1:0.0 failed with error -71
[  285.248904][ T9204] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.256889][ T4399] usb 2-1: USB disconnect, device number 10
[  285.525617][ T9189] loop0: detected capacity change from 0 to 32768
[  285.625211][ T9189] XFS (loop0): Mounting V5 Filesystem
[  285.726752][ T4594] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  285.809366][ T9189] XFS (loop0): Ending clean mount
[  285.929706][ T4594] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.950398][ T4594] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.006008][ T4594] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.050645][ T4594] usb 5-1: config 0 interface 0 has no altsetting 0
[  286.081814][ T4279] XFS (loop0): Unmounting Filesystem
[  286.096706][ T4594] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  286.106140][ T4594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.125859][ T4594] usb 5-1: config 0 descriptor??
[  286.126427][ T9206] loop3: detected capacity change from 0 to 32768
[  286.200347][ T9206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1838 (9206)
[  286.273913][ T9206] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  286.306873][ T9206] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  286.315810][ T9206] BTRFS info (device loop3): force clearing of disk cache
[  286.323567][ T9206] BTRFS info (device loop3): metadata ratio 0
[  286.339072][ T9206] BTRFS info (device loop3): enabling ssd optimizations
[  286.410673][ T9206] BTRFS info (device loop3): using spread ssd allocation scheme
[  286.426706][ T9206] BTRFS info (device loop3): using free space tree
[  286.502710][ T9233] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  286.557038][ T9233] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  286.586495][ T4594] kye 0003:0458:5015.0019: unknown main item tag 0x1
[  286.596705][ T9233] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  286.626940][ T4594] kye 0003:0458:5015.0019: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0
[  286.646723][ T9233] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  286.692720][ T9233] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  286.700128][ T4594] kye 0003:0458:5015.0019: tablet-enabling feature report not found
[  286.709852][ T4594] kye 0003:0458:5015.0019: tablet enabling failed
[  286.725266][ T9233] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  286.732323][ T9233] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  286.750421][ T9206] BTRFS info (device loop3): rebuilding free space tree
[  286.787386][ T4594] usb 5-1: USB disconnect, device number 11
[  286.991805][ T4276] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.011991][ T9256] fido_id[9256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  287.050967][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'.
[  287.505646][ T9265] loop1: detected capacity change from 0 to 4096
[  287.604253][ T9270] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.672907][ T9271] loop3: detected capacity change from 0 to 512
[  287.680808][   T26] audit: type=1800 audit(1760356914.295:63): pid=9265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1855" name="file1" dev="loop1" ino=15 res=0 errno=0
[  287.801904][ T9271] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  287.817078][ T9271] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.077672][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  288.299814][ T9287] loop3: detected capacity change from 0 to 64
[  288.555264][ T9293] netlink: 'syz.1.1865': attribute type 6 has an invalid length.
[  288.836973][ T9295] loop4: detected capacity change from 0 to 4096
[  288.867467][ T9266] loop0: detected capacity change from 0 to 40427
[  288.939819][ T9266] F2FS-fs (loop0): Found nat_bits in checkpoint
[  288.954887][ T9301] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.976676][ T9299] loop1: detected capacity change from 0 to 4096
[  289.032971][ T9306] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.103133][ T9266] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  289.135579][ T9281] loop2: detected capacity change from 0 to 32768
[  289.249824][ T9266] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  289.342677][ T9266] F2FS-fs (loop0): Found FS corruption, run fsck to fix.
[  289.696350][ T9311] loop1: detected capacity change from 0 to 8192
[  289.782928][ T9311] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  289.856747][ T9311] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  289.866273][ T9311] REISERFS (device loop1): using ordered data mode
[  289.873753][ T9311] reiserfs: using flush barriers
[  289.920437][ T9311] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  290.138355][ T9311] REISERFS (device loop1): checking transaction log (loop1)
[  290.189238][ T9311] REISERFS (device loop1): Using r5 hash to sort names
[  290.203243][ T9311] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  290.864526][ T9316] loop2: detected capacity change from 0 to 32768
[  290.940981][ T9316] (syz.2.1872,9316,1):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=10, slot=0
[  290.962178][ T9316] (syz.2.1872,9316,1):ocfs2_init_local_system_inodes:501 ERROR: status = -22
[  290.971971][ T9316] (syz.2.1872,9316,1):ocfs2_mount_volume:1815 ERROR: status = -22
[  291.025685][ T9316] (syz.2.1872,9316,1):ocfs2_fill_super:1176 ERROR: status = -22
[  291.052983][ T9316] VFS: could not find a valid V7 on loop2.
[  291.105021][ T9337] loop1: detected capacity change from 0 to 128
[  291.165703][ T9337] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  291.204945][ T9337] hpfs: filesystem error: improperly stopped
[  291.238523][ T9337] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  291.263470][ T9337] hpfs: You really don't want any checks? You are crazy...
[  291.297179][ T9337] hpfs: hpfs_map_sector(): read error
[  291.302641][ T9337] hpfs: code page support is disabled
[  291.345801][ T9337] hpfs: hpfs_map_4sectors(): unaligned read
[  291.364886][ T9337] hpfs: hpfs_map_4sectors(): unaligned read
[  291.376742][ T6010] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  291.387076][ T9337] hpfs: filesystem error: unable to find root dir
[  291.459352][ T9337] hpfs: hpfs_map_4sectors(): unaligned read
[  291.597053][ T6010] usb 5-1: Using ep0 maxpacket: 16
[  291.604048][ T6010] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  291.637400][ T6010] usb 5-1: config 0 has no interface number 0
[  291.672130][ T6010] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  291.699445][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.723401][ T6010] usb 5-1: Product: syz
[  291.750248][ T6010] usb 5-1: Manufacturer: syz
[  291.755604][ T6010] usb 5-1: SerialNumber: syz
[  291.801301][ T6010] usb 5-1: config 0 descriptor??
[  291.833197][ T6010] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  292.447553][ T6010] gspca_spca1528: reg_w err -71
[  292.476713][ T6010] spca1528: probe of 5-1:0.1 failed with error -71
[  292.497923][ T6010] usb 5-1: USB disconnect, device number 12
[  292.534720][ T9368] loop1: detected capacity change from 0 to 22
[  292.571362][ T9368] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  292.632664][ T9368] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  292.696473][ T9341] loop2: detected capacity change from 0 to 40427
[  292.763364][ T9341] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384)
[  292.792572][ T9341] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  292.871432][ T9341] F2FS-fs (loop2): Found nat_bits in checkpoint
[  292.981162][ T9380] loop0: detected capacity change from 0 to 256
[  293.118025][ T9380] FAT-fs (loop0): Directory bread(block 64) failed
[  293.124713][ T9380] FAT-fs (loop0): Directory bread(block 65) failed
[  293.160587][ T9341] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  293.186718][ T9341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  293.208923][ T9380] FAT-fs (loop0): Directory bread(block 66) failed
[  293.270367][ T9380] FAT-fs (loop0): Directory bread(block 67) failed
[  293.308659][ T9380] FAT-fs (loop0): Directory bread(block 68) failed
[  293.315490][ T9380] FAT-fs (loop0): Directory bread(block 69) failed
[  293.359852][ T9341] binfmt_misc: register: failed to install interpreter file ./file2
[  293.376909][ T9380] FAT-fs (loop0): Directory bread(block 70) failed
[  293.406651][ T9380] FAT-fs (loop0): Directory bread(block 71) failed
[  293.413350][ T9380] FAT-fs (loop0): Directory bread(block 72) failed
[  293.456676][ T9380] FAT-fs (loop0): Directory bread(block 73) failed
[  293.520043][ T4318] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  293.736892][ T4318] usb 5-1: Using ep0 maxpacket: 16
[  293.744118][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.765341][   T26] audit: type=1326 audit(1760356920.375:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5f98eec9 code=0x7ffc0000
[  293.823378][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.866772][   T26] audit: type=1326 audit(1760356920.405:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fbe5f98eec9 code=0x7ffc0000
[  293.883995][ T4318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  293.989243][ T4318] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  293.999040][   T26] audit: type=1326 audit(1760356920.405:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5f98eec9 code=0x7ffc0000
[  294.028971][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.093331][ T4318] usb 5-1: config 0 descriptor??
[  294.128315][   T26] audit: type=1326 audit(1760356920.405:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5f98eec9 code=0x7ffc0000
[  294.531530][ T4318] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max
[  294.559143][ T4318] microsoft 0003:045E:07DA.001A: unsupported Resolution Multiplier 0
[  294.592976][ T4318] microsoft 0003:045E:07DA.001A: implement() called with n (152) > 32! (kworker/0:4)
[  294.731160][ T4318] microsoft 0003:045E:07DA.001A: No inputs registered, leaving
[  294.753411][ T4318] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  294.783212][ T4318] microsoft 0003:045E:07DA.001A: no inputs found
[  294.801093][ T4318] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway
[  294.844642][ T4318] usb 5-1: USB disconnect, device number 13
[  295.028623][ T9428] loop3: detected capacity change from 0 to 4096
[  295.048269][ T9427] fido_id[9427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  295.175504][ T9431] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.359417][ T9412] loop0: detected capacity change from 0 to 32768
[  295.487145][ T9412] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1909 (9412)
[  295.555330][ T9412] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  295.626775][ T9412] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  295.656454][ T9412] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  295.696747][ T9412] BTRFS info (device loop0): use zstd compression, level 3
[  295.706955][ T9412] BTRFS info (device loop0): using free space tree
[  295.971778][ T9470] MPTCP: kernel_bind error, err=-22
[  295.973837][ T9412] BTRFS info (device loop0): enabling ssd optimizations
[  296.125139][ T9477] loop2: detected capacity change from 0 to 1024
[  296.150563][ T4279] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  296.213286][ T9477] hfsplus: bad catalog entry type
[  296.825325][ T4354] hfsplus: b-tree write err: -5, ino 4
[  297.098496][ T9489] loop0: detected capacity change from 0 to 4096
[  297.189448][ T9492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  297.258554][ T9494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1932'.
[  297.307753][ T9494] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1932'.
[  297.342111][ T9494] netlink: 'syz.2.1932': attribute type 6 has an invalid length.
[  297.376748][ T9494] netlink: 'syz.2.1932': attribute type 5 has an invalid length.
[  297.403120][ T9494] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1932'.
[  297.586938][ T4269] Bluetooth: hci0: command 0x0401 tx timeout
[  297.616804][ T4273] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  297.775478][ T9496] loop0: detected capacity change from 0 to 32768
[  297.787853][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í"
[  297.805941][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1801)...
[  297.850931][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 5 extents in 0ms
[  297.864696][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use
[  297.873902][ T9484] loop3: detected capacity change from 0 to 32768
[  297.876458][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal...
[  297.889973][ T9482] loop4: detected capacity change from 0 to 32768
[  297.959802][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Journal head lookup took 83ms
[  297.989125][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Done
[  298.001787][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: first mount done, others may mount
[  298.035581][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: ri_addr = 18
[  298.035581][ T9496] ri_length = 1
[  298.035581][ T9496] ri_data0 = 19
[  298.035581][ T9496] ri_data = 524288
[  298.035581][ T9496] ri_bitbytes = 515
[  298.035581][ T9496] start=0 len=515 offset=128
[  298.064592][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0:  R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0
[  298.077234][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: fatal: filesystem consistency error
[  298.077234][ T9496]   RG = 18
[  298.077234][ T9496]   function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829
[  298.100554][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: G:  s:UN n:3/12 f:n t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0
[  298.115099][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: about to withdraw this file system
[  298.133901][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Journal recovery skipped for jid 0 until next mount.
[  298.147842][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Glock dequeues delayed: 0
[  298.159654][ T9496] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: File system withdrawn
[  298.165334][ T9482] ialloc: diAlloc returned -5!
[  298.170650][ T9496] CPU: 0 PID: 9496 Comm: syz.0.1933 Not tainted syzkaller #0
[  298.170678][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  298.170692][ T9496] Call Trace:
[  298.170700][ T9496]  <TASK>
[  298.170709][ T9496]  dump_stack_lvl+0x168/0x22e
[  298.170741][ T9496]  ? kobject_uevent_env+0x35f/0x8a0
[  298.170775][ T9496]  ? show_regs_print_info+0x12/0x12
[  298.170801][ T9496]  ? load_image+0x3b0/0x3b0
[  298.170833][ T9496]  ? kobject_uevent_env+0x35f/0x8a0
[  298.170868][ T9496]  gfs2_withdraw+0x143f/0x1780
[  298.230076][ T9496]  ? gfs2_lm+0x220/0x220
[  298.234362][ T9496]  ? gfs2_rgrp_dump+0x2f9/0x520
[  298.239232][ T9496]  ? do_raw_spin_unlock+0x11d/0x230
[  298.244458][ T9496]  gfs2_consist_rgrpd_i+0x148/0x1a0
[  298.249694][ T9496]  ? gfs2_consist_inode_i+0x110/0x110
[  298.255141][ T9496]  ? __kmem_cache_alloc_node+0x140/0x260
[  298.260901][ T9496]  ? gfs2_ri_update+0x466/0x17c0
[  298.265887][ T9496]  ? rcu_is_watching+0x11/0xa0
[  298.270703][ T9496]  gfs2_ri_update+0xbcb/0x17c0
[  298.275518][ T9496]  ? gfs2_glock_nq_init+0x60/0x60
[  298.280572][ T9496]  ? inode_go_held+0xf4/0x200
[  298.285272][ T9496]  ? gfs2_glock_wait+0x20b/0x2a0
[  298.290258][ T9496]  gfs2_rindex_update+0x331/0x400
[  298.295304][ T9496]  ? lockdep_init_map_type+0x9d/0x880
[  298.300698][ T9496]  ? gfs2_ri_total+0x1f0/0x1f0
[  298.305489][ T9496]  ? init_inodes+0x249/0x320
[  298.310287][ T9496]  ? complete_all+0x29/0x1d0
[  298.314899][ T9496]  init_inodes+0x249/0x320
[  298.319341][ T9496]  gfs2_fill_super+0x1718/0x1f80
[  298.324317][ T9496]  ? gfs2_reconfigure+0xcd0/0xcd0
[  298.329377][ T9496]  ? init_locking+0xb8/0x200
[  298.333995][ T9496]  ? sb_set_blocksize+0xa5/0xe0
[  298.338867][ T9496]  get_tree_bdev+0x3f1/0x610
[  298.343475][ T9496]  ? gfs2_reconfigure+0xcd0/0xcd0
[  298.348538][ T9496]  gfs2_get_tree+0x4d/0x1e0
[  298.353072][ T9496]  vfs_get_tree+0x88/0x270
[  298.357517][ T9496]  do_new_mount+0x24a/0xa40
[  298.362045][ T9496]  __se_sys_mount+0x2d6/0x3c0
[  298.366750][ T9496]  ? __x64_sys_mount+0xc0/0xc0
[  298.371536][ T9496]  ? lockdep_hardirqs_on+0x94/0x140
[  298.376760][ T9496]  ? __x64_sys_mount+0x1c/0xc0
[  298.381544][ T9496]  do_syscall_64+0x4c/0xa0
[  298.385978][ T9496]  ? clear_bhb_loop+0x60/0xb0
[  298.390676][ T9496]  ? clear_bhb_loop+0x60/0xb0
[  298.395376][ T9496]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.401286][ T9496] RIP: 0033:0x7f954439066a
[  298.405805][ T9496] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.425526][ T9496] RSP: 002b:00007f95452d7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  298.433957][ T9496] RAX: ffffffffffffffda RBX: 00007f95452d7ef0 RCX: 00007f954439066a
[  298.441943][ T9496] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007f95452d7eb0
[  298.449930][ T9496] RBP: 0000200000000000 R08: 00007f95452d7ef0 R09: 0000000000a00408
[  298.457914][ T9496] R10: 0000000000a00408 R11: 0000000000000246 R12: 0000200000012500
[  298.466098][ T9496] R13: 00007f95452d7eb0 R14: 0000000000012627 R15: 00002000000000c0
[  298.474096][ T9496]  </TASK>
[  298.511179][ T9502] ialloc: diAlloc returned -5!
[  298.518907][ T9484] XFS (loop3): Mounting V5 Filesystem
[  298.622325][ T9486] loop1: detected capacity change from 0 to 32768
[  298.654101][ T9486] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  298.667830][ T9486] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  298.695427][ T9486] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  298.724081][ T9484] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  298.728777][ T4318] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  298.794150][ T4318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  298.860512][ T9484] XFS (loop3): Starting recovery (logdev: internal)
[  298.926470][ T9513] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1937'.
[  299.055650][ T4318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 261ms
[  299.106063][ T4318] gfs2: fsid=syz:syz.0: jid=0: Done
[  299.116138][ T9486] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  299.140806][ T9484] XFS (loop3): Ending recovery (logdev: internal)
[  299.220244][ T9486] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[  299.277170][   T26] audit: type=1800 audit(1760356925.895:68): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1929" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  299.296580][ T9486] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  299.296580][ T9486]   inode = 12 2341
[  299.296580][ T9486]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[  299.433054][ T9486] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  299.483823][ T9523] loop2: detected capacity change from 0 to 1024
[  299.511264][ T4276] XFS (loop3): Unmounting Filesystem
[  299.555284][ T9486] gfs2: fsid=syz:syz.0:  H: s:SH f:H e:0 p:9486 [syz.1.1931] __gfs2_lookup+0x8c/0x260
[  299.567915][ T9486] gfs2: fsid=syz:syz.0:  I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[  299.614904][ T9486] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  299.667454][ T9486] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  299.678287][ T9486] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  299.686316][ T9486] gfs2: fsid=syz:syz.0: File system withdrawn
[  299.702781][ T9526] loop0: detected capacity change from 0 to 512
[  299.762899][ T9486] CPU: 1 PID: 9486 Comm: syz.1.1931 Not tainted syzkaller #0
[  299.770362][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  299.780486][ T9486] Call Trace:
[  299.783816][ T9486]  <TASK>
[  299.786806][ T9486]  dump_stack_lvl+0x168/0x22e
[  299.791543][ T9486]  ? kobject_uevent_env+0x35f/0x8a0
[  299.796814][ T9486]  ? show_regs_print_info+0x12/0x12
[  299.802155][ T9486]  ? load_image+0x3b0/0x3b0
[  299.806732][ T9486]  ? kobject_uevent_env+0x35f/0x8a0
[  299.812083][ T9486]  gfs2_withdraw+0x143f/0x1780
[  299.817012][ T9486]  ? gfs2_lm+0x220/0x220
[  299.821331][ T9486]  ? load_image+0x3b0/0x3b0
[  299.825887][ T9486]  ? gfs2_consist_inode_i+0xf1/0x110
[  299.831207][ T9486]  gfs2_dirent_scan+0x525/0x650
[  299.836083][ T9486]  ? gfs2_dirent_search+0x7e0/0x7e0
[  299.841391][ T9486]  ? gfs2_dirent_search+0x7e0/0x7e0
[  299.846633][ T9486]  gfs2_dirent_search+0x2dd/0x7e0
[  299.851730][ T9486]  ? gfs2_permission+0x3f1/0x4c0
[  299.856690][ T9486]  ? gfs2_dir_search+0x220/0x220
[  299.861674][ T9486]  ? gfs2_lookupi+0x640/0x640
[  299.866448][ T9486]  gfs2_dir_search+0x49/0x220
[  299.871170][ T9486]  gfs2_lookupi+0x45f/0x640
[  299.875733][ T9486]  ? gfs2_lookup_simple+0xf0/0xf0
[  299.880804][ T9486]  ? __gfs2_lookup+0x8c/0x260
[  299.885520][ T9486]  __gfs2_lookup+0x8c/0x260
[  299.890075][ T9486]  ? __lock_acquire+0x7c50/0x7c50
[  299.895213][ T9486]  ? gfs2_atomic_open+0x210/0x210
[  299.900357][ T9486]  ? d_set_d_op+0x25b/0x370
[  299.904983][ T9486]  ? do_raw_spin_unlock+0x11d/0x230
[  299.910219][ T9486]  ? _raw_spin_unlock+0x24/0x40
[  299.915114][ T9486]  ? d_alloc+0x16f/0x1a0
[  299.919396][ T9486]  lookup_one_qstr_excl+0x10e/0x240
[  299.924626][ T9486]  filename_create+0x21e/0x450
[  299.929436][ T9486]  ? kern_path_create+0x50/0x50
[  299.934300][ T9486]  ? __virt_addr_valid+0x188/0x540
[  299.939464][ T9486]  ? __virt_addr_valid+0x465/0x540
[  299.944773][ T9486]  ? __phys_addr_symbol+0x2b/0x70
[  299.949823][ T9486]  do_mkdirat+0x9d/0x430
[  299.954117][ T9486]  ? vfs_mkdir+0x570/0x570
[  299.958560][ T9486]  __x64_sys_mkdirat+0x85/0x90
[  299.963428][ T9486]  do_syscall_64+0x4c/0xa0
[  299.967893][ T9486]  ? clear_bhb_loop+0x60/0xb0
[  299.972620][ T9486]  ? clear_bhb_loop+0x60/0xb0
[  299.977408][ T9486]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  299.983409][ T9486] RIP: 0033:0x7fa44378eec9
[  299.987845][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.007558][ T9486] RSP: 002b:00007fa4446a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  300.015990][ T9486] RAX: ffffffffffffffda RBX: 00007fa4439e5fa0 RCX: 00007fa44378eec9
[  300.023979][ T9486] RDX: 000000000000017d RSI: 0000200000000000 RDI: ffffffffffffff9c
[  300.031987][ T9486] RBP: 00007fa443811f91 R08: 0000000000000000 R09: 0000000000000000
[  300.039974][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.047962][ T9486] R13: 00007fa4439e6038 R14: 00007fa4439e5fa0 R15: 00007fff16280d58
[  300.055962][ T9486]  </TASK>
[  300.073279][ T9526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  300.090538][ T5971] hfsplus: b-tree write err: -5, ino 4
[  300.144399][ T9526] EXT4-fs (loop0): orphan cleanup on readonly fs
[  300.294775][ T9526] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1944: bg 0: block 248: padding at end of block bitmap is not set
[  300.324544][ T9526] Quota error (device loop0): write_blk: dquota write failed
[  300.369593][ T9526] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  300.380179][ T9526] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.1944: Failed to acquire dquot type 1
[  300.406308][ T9526] EXT4-fs (loop0): 1 truncate cleaned up
[  300.425073][ T9526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  300.545747][ T9526] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  300.698121][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  301.064160][ T9552] syz.0.1954 (9552): /proc/9551/oom_adj is deprecated, please use /proc/9551/oom_score_adj instead.
[  301.450243][ T9555] loop3: detected capacity change from 0 to 4096
[  301.485505][ T9555] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  301.536734][ T9555] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  301.613009][ T9555] ntfs: volume version 3.1.
[  301.626691][ T9555] ntfs: (device loop3): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  301.656703][ T9555] ntfs: (device loop3): map_mft_record(): Failed with error code 5.
[  301.664791][ T9555] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  301.752623][ T9555] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  301.895842][ T9555] ntfs: (device loop3): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported.  Sorry.
[  302.112093][ T9576] loop0: detected capacity change from 0 to 4096
[  302.176622][ T6005] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  302.210672][ T9576] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  302.229116][ T9581] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  302.267740][ T9576] NILFS (loop0): mounting fs with errors
[  302.675213][ T9584] loop2: detected capacity change from 0 to 32768
[  302.708714][ T6005] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  302.719667][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í"
[  302.737944][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1801)...
[  302.757745][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 5 extents in 0ms
[  302.776801][ T6005] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  302.785698][ T6005] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  302.802838][ T6005] usb 2-1: config 1 has no interface number 0
[  302.813035][ T6005] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  302.825266][ T6005] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  302.840560][ T6005] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  302.849980][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.859150][ T8736] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use
[  302.872564][ T8736] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal...
[  302.888088][ T6005] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  302.975154][ T8736] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Journal head lookup took 102ms
[  303.009835][ T8736] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Done
[  303.041331][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: first mount done, others may mount
[  303.056259][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: ri_addr = 18
[  303.056259][ T9584] ri_length = 1
[  303.056259][ T9584] ri_data0 = 19
[  303.056259][ T9584] ri_data = 524288
[  303.056259][ T9584] ri_bitbytes = 515
[  303.056259][ T9584] start=0 len=515 offset=128
[  303.084822][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0:  R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0
[  303.097114][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: fatal: filesystem consistency error
[  303.097114][ T9584]   RG = 18
[  303.097114][ T9584]   function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829
[  303.120226][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: G:  s:UN n:3/12 f:n t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0
[  303.134166][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: about to withdraw this file system
[  303.153173][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Journal recovery skipped for jid 0 until next mount.
[  303.166925][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Glock dequeues delayed: 0
[  303.178642][ T9584] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: File system withdrawn
[  303.189686][ T9584] CPU: 1 PID: 9584 Comm: syz.2.1969 Not tainted syzkaller #0
[  303.197114][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  303.207224][ T9584] Call Trace:
[  303.210547][ T9584]  <TASK>
[  303.213502][ T9584]  dump_stack_lvl+0x168/0x22e
[  303.218206][ T9584]  ? kobject_uevent_env+0x35f/0x8a0
[  303.223519][ T9584]  ? show_regs_print_info+0x12/0x12
[  303.228910][ T9584]  ? load_image+0x3b0/0x3b0
[  303.233549][ T9584]  ? kobject_uevent_env+0x35f/0x8a0
[  303.238780][ T9584]  gfs2_withdraw+0x143f/0x1780
[  303.243584][ T9584]  ? gfs2_lm+0x220/0x220
[  303.247882][ T9584]  ? gfs2_rgrp_dump+0x2f9/0x520
[  303.252754][ T9584]  ? do_raw_spin_unlock+0x11d/0x230
[  303.257980][ T9584]  gfs2_consist_rgrpd_i+0x148/0x1a0
[  303.263208][ T9584]  ? gfs2_consist_inode_i+0x110/0x110
[  303.268633][ T9584]  ? __kmem_cache_alloc_node+0x140/0x260
[  303.274291][ T9584]  ? gfs2_ri_update+0x466/0x17c0
[  303.279267][ T9584]  ? rcu_is_watching+0x11/0xa0
[  303.284061][ T9584]  gfs2_ri_update+0xbcb/0x17c0
[  303.288877][ T9584]  ? gfs2_glock_nq_init+0x60/0x60
[  303.293929][ T9584]  ? inode_go_held+0xf4/0x200
[  303.298626][ T9584]  ? gfs2_glock_wait+0x20b/0x2a0
[  303.303599][ T9584]  gfs2_rindex_update+0x331/0x400
[  303.308657][ T9584]  ? lockdep_init_map_type+0x9d/0x880
[  303.314049][ T9584]  ? gfs2_ri_total+0x1f0/0x1f0
[  303.318919][ T9584]  ? init_inodes+0x249/0x320
[  303.323534][ T9584]  ? complete_all+0x29/0x1d0
[  303.328232][ T9584]  init_inodes+0x249/0x320
[  303.332679][ T9584]  gfs2_fill_super+0x1718/0x1f80
[  303.337698][ T9584]  ? gfs2_reconfigure+0xcd0/0xcd0
[  303.342754][ T9584]  ? init_locking+0xb8/0x200
[  303.347381][ T9584]  ? sb_set_blocksize+0xa5/0xe0
[  303.352260][ T9584]  get_tree_bdev+0x3f1/0x610
[  303.356867][ T9584]  ? gfs2_reconfigure+0xcd0/0xcd0
[  303.361923][ T9584]  gfs2_get_tree+0x4d/0x1e0
[  303.366559][ T9584]  vfs_get_tree+0x88/0x270
[  303.371097][ T9584]  do_new_mount+0x24a/0xa40
[  303.375639][ T9584]  __se_sys_mount+0x2d6/0x3c0
[  303.380342][ T9584]  ? __x64_sys_mount+0xc0/0xc0
[  303.385133][ T9584]  ? lockdep_hardirqs_on+0x94/0x140
[  303.390384][ T9584]  ? __x64_sys_mount+0x1c/0xc0
[  303.395171][ T9584]  do_syscall_64+0x4c/0xa0
[  303.399693][ T9584]  ? clear_bhb_loop+0x60/0xb0
[  303.404471][ T9584]  ? clear_bhb_loop+0x60/0xb0
[  303.409362][ T9584]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  303.415279][ T9584] RIP: 0033:0x7fd333f9066a
[  303.419731][ T9584] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.439410][ T9584] RSP: 002b:00007fd334eb0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  303.447845][ T9584] RAX: ffffffffffffffda RBX: 00007fd334eb0ef0 RCX: 00007fd333f9066a
[  303.455829][ T9584] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007fd334eb0eb0
[  303.463907][ T9584] RBP: 0000200000000000 R08: 00007fd334eb0ef0 R09: 0000000000a00408
[  303.471979][ T9584] R10: 0000000000a00408 R11: 0000000000000246 R12: 0000200000012500
[  303.479961][ T9584] R13: 00007fd334eb0eb0 R14: 0000000000012627 R15: 00002000000000c0
[  303.488110][ T9584]  </TASK>
[  303.519185][ T6005] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  303.756112][ T4318] usb 2-1: USB disconnect, device number 11
[  303.760455][ T9602] loop2: detected capacity change from 0 to 1024
[  303.774478][ T4318] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  303.778509][ T9602] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  303.806758][ T4399] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  303.835779][ T9602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  303.935203][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  304.017502][ T9607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1978'.
[  304.038915][ T4399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.058915][ T4399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.093982][ T4399] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  304.131945][ T4399] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  304.155543][ T4399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.187621][ T4399] usb 5-1: config 0 descriptor??
[  304.470591][ T9596] loop0: detected capacity change from 0 to 32768
[  304.621571][ T4399] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving
[  304.726315][ T4399] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  304.768291][ T9620] loop2: detected capacity change from 0 to 1024
[  304.854491][ T4399] usb 5-1: USB disconnect, device number 14
[  304.879406][ T9620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  304.905213][ T9620] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.036906][ T4318] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  305.176276][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  305.226607][ T4318] usb 2-1: Using ep0 maxpacket: 32
[  305.233910][ T4318] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.270102][ T9628] fido_id[9628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  305.285801][ T4318] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.306540][ T4318] usb 2-1: config 0 interface 0 has no altsetting 0
[  305.313282][ T4318] usb 2-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  305.335854][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.353363][ T4318] usb 2-1: config 0 descriptor??
[  305.469499][ T9633] loop0: detected capacity change from 0 to 256
[  305.972134][ T9637] loop4: detected capacity change from 0 to 32768
[  305.981002][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í"
[  305.999385][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1801)...
[  306.024081][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 5 extents in 0ms
[  306.041140][ T4318] wacom 0003:056A:0057.001C: hidraw0: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.1-1/input0
[  306.054823][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use
[  306.066848][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal...
[  306.097788][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Journal head lookup took 30ms
[  306.115534][ T4318] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Done
[  306.126466][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: first mount done, others may mount
[  306.143861][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: ri_addr = 18
[  306.143861][ T9637] ri_length = 1
[  306.143861][ T9637] ri_data0 = 19
[  306.143861][ T9637] ri_data = 524288
[  306.143861][ T9637] ri_bitbytes = 515
[  306.143861][ T9637] start=0 len=515 offset=128
[  306.172474][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0:  R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0
[  306.184756][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: fatal: filesystem consistency error
[  306.184756][ T9637]   RG = 18
[  306.184756][ T9637]   function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829
[  306.207969][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: G:  s:UN n:3/12 f:n t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0
[  306.218708][ T4399] usb 2-1: USB disconnect, device number 12
[  306.222132][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: about to withdraw this file system
[  306.253442][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Journal recovery skipped for jid 0 until next mount.
[  306.267311][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Glock dequeues delayed: 0
[  306.278919][ T9637] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: File system withdrawn
[  306.289973][ T9637] CPU: 0 PID: 9637 Comm: syz.4.1987 Not tainted syzkaller #0
[  306.297402][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  306.308798][ T9637] Call Trace:
[  306.308813][ T9637]  <TASK>
[  306.308824][ T9637]  dump_stack_lvl+0x168/0x22e
[  306.308854][ T9637]  ? kobject_uevent_env+0x35f/0x8a0
[  306.308886][ T9637]  ? show_regs_print_info+0x12/0x12
[  306.308913][ T9637]  ? load_image+0x3b0/0x3b0
[  306.308946][ T9637]  ? kobject_uevent_env+0x35f/0x8a0
[  306.308988][ T9637]  gfs2_withdraw+0x143f/0x1780
[  306.309040][ T9637]  ? gfs2_lm+0x220/0x220
[  306.309094][ T9637]  ? gfs2_rgrp_dump+0x2f9/0x520
[  306.309123][ T9637]  ? do_raw_spin_unlock+0x11d/0x230
[  306.309164][ T9637]  gfs2_consist_rgrpd_i+0x148/0x1a0
[  306.309202][ T9637]  ? gfs2_consist_inode_i+0x110/0x110
[  306.309289][ T9637]  ? __kmem_cache_alloc_node+0x140/0x260
[  306.309315][ T9637]  ? gfs2_ri_update+0x466/0x17c0
[  306.309342][ T9637]  ? rcu_is_watching+0x11/0xa0
[  306.309381][ T9637]  gfs2_ri_update+0xbcb/0x17c0
[  306.309433][ T9637]  ? gfs2_glock_nq_init+0x60/0x60
[  306.309471][ T9637]  ? inode_go_held+0xf4/0x200
[  306.309499][ T9637]  ? gfs2_glock_wait+0x20b/0x2a0
[  306.309537][ T9637]  gfs2_rindex_update+0x331/0x400
[  306.309568][ T9637]  ? lockdep_init_map_type+0x9d/0x880
[  306.309598][ T9637]  ? gfs2_ri_total+0x1f0/0x1f0
[  306.309628][ T9637]  ? init_inodes+0x249/0x320
[  306.309666][ T9637]  ? complete_all+0x29/0x1d0
[  306.309699][ T9637]  init_inodes+0x249/0x320
[  306.309737][ T9637]  gfs2_fill_super+0x1718/0x1f80
[  306.309786][ T9637]  ? gfs2_reconfigure+0xcd0/0xcd0
[  306.309821][ T9637]  ? init_locking+0xb8/0x200
[  306.309855][ T9637]  ? sb_set_blocksize+0xa5/0xe0
[  306.309884][ T9637]  get_tree_bdev+0x3f1/0x610
[  306.309908][ T9637]  ? gfs2_reconfigure+0xcd0/0xcd0
[  306.309944][ T9637]  gfs2_get_tree+0x4d/0x1e0
[  306.309980][ T9637]  vfs_get_tree+0x88/0x270
[  306.310003][ T9637]  do_new_mount+0x24a/0xa40
[  306.310029][ T9637]  __se_sys_mount+0x2d6/0x3c0
[  306.310055][ T9637]  ? __x64_sys_mount+0xc0/0xc0
[  306.310081][ T9637]  ? lockdep_hardirqs_on+0x94/0x140
[  306.310110][ T9637]  ? __x64_sys_mount+0x1c/0xc0
[  306.310134][ T9637]  do_syscall_64+0x4c/0xa0
[  306.310157][ T9637]  ? clear_bhb_loop+0x60/0xb0
[  306.310180][ T9637]  ? clear_bhb_loop+0x60/0xb0
[  306.310205][ T9637]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  306.310227][ T9637] RIP: 0033:0x7f953319066a
[  306.522391][ T9637] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.542093][ T9637] RSP: 002b:00007f9533face68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  306.550774][ T9637] RAX: ffffffffffffffda RBX: 00007f9533facef0 RCX: 00007f953319066a
[  306.558835][ T9637] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007f9533faceb0
[  306.567373][ T9637] RBP: 0000200000000000 R08: 00007f9533facef0 R09: 0000000000a00408
[  306.575388][ T9637] R10: 0000000000a00408 R11: 0000000000000246 R12: 0000200000012500
[  306.583422][ T9637] R13: 00007f9533faceb0 R14: 0000000000012627 R15: 00002000000000c0
[  306.591473][ T9637]  </TASK>
[  306.836605][ T9648] fido_id[9648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  306.866727][ T4269] Bluetooth: hci0: command 0x0401 tx timeout
[  306.872903][ T4273] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  307.239388][ T9652] loop3: detected capacity change from 0 to 32768
[  307.343439][ T9652] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  307.574669][ T4276] (syz-executor,4276,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  307.609505][ T4276] ocfs2: Unmounting device (7,3) on (node local)
[  307.687739][ T9657] loop2: detected capacity change from 0 to 32768
[  307.755117][ T9657] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  307.766755][ T4318] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  307.855379][ T4270] ocfs2: Unmounting device (7,2) on (node local)
[  307.966585][ T4318] usb 2-1: Using ep0 maxpacket: 16
[  307.978698][ T4318] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  308.014633][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  308.053100][ T4318] usb 2-1: Product: syz
[  308.073441][ T4318] usb 2-1: Manufacturer: syz
[  308.093715][ T4318] usb 2-1: SerialNumber: syz
[  308.120438][ T4318] usb 2-1: config 0 descriptor??
[  308.359844][ T9688] loop2: detected capacity change from 0 to 128
[  308.392884][ T4318] usb 2-1: USB disconnect, device number 13
[  308.408900][ T9688] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  308.436452][ T9688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.834611][ T9670] loop4: detected capacity change from 0 to 32768
[  308.863269][ T9670] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  308.896700][ T9670] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  308.943517][ T9670] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  308.971945][ T4399] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  308.981967][ T4399] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  309.124312][ T4399] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 142ms
[  309.151160][ T4399] gfs2: fsid=syz:syz.0: jid=0: Done
[  309.176593][ T9670] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  309.237125][ T9670] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[  309.276234][ T9670] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  309.276234][ T9670]   inode = 12 2341
[  309.276234][ T9670]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[  309.392423][ T9670] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  309.412713][ T9670] gfs2: fsid=syz:syz.0:  H: s:SH f:H e:0 p:9670 [syz.4.2002] __gfs2_lookup+0x8c/0x260
[  309.430398][ T9670] gfs2: fsid=syz:syz.0:  I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[  309.446731][ T9670] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  309.465709][ T9670] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  309.485833][ T9695] loop2: detected capacity change from 0 to 32768
[  309.503900][ T9670] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  309.557011][ T9670] gfs2: fsid=syz:syz.0: File system withdrawn
[  309.563159][ T9670] CPU: 1 PID: 9670 Comm: syz.4.2002 Not tainted syzkaller #0
[  309.570575][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  309.580681][ T9670] Call Trace:
[  309.584000][ T9670]  <TASK>
[  309.586967][ T9670]  dump_stack_lvl+0x168/0x22e
[  309.591705][ T9670]  ? kobject_uevent_env+0x35f/0x8a0
[  309.596979][ T9670]  ? show_regs_print_info+0x12/0x12
[  309.602235][ T9670]  ? load_image+0x3b0/0x3b0
[  309.606802][ T9670]  ? kobject_uevent_env+0x35f/0x8a0
[  309.612072][ T9670]  gfs2_withdraw+0x143f/0x1780
[  309.616914][ T9670]  ? gfs2_lm+0x220/0x220
[  309.621212][ T9670]  ? load_image+0x3b0/0x3b0
[  309.625781][ T9670]  ? gfs2_consist_inode_i+0xf1/0x110
[  309.631124][ T9670]  gfs2_dirent_scan+0x525/0x650
[  309.636033][ T9670]  ? gfs2_dirent_search+0x7e0/0x7e0
[  309.641291][ T9670]  ? gfs2_dirent_search+0x7e0/0x7e0
[  309.646549][ T9670]  gfs2_dirent_search+0x2dd/0x7e0
[  309.651632][ T9670]  ? gfs2_permission+0x3f1/0x4c0
[  309.656624][ T9670]  ? gfs2_dir_search+0x220/0x220
[  309.661661][ T9670]  ? gfs2_lookupi+0x640/0x640
[  309.666511][ T9670]  gfs2_dir_search+0x49/0x220
[  309.671246][ T9670]  gfs2_lookupi+0x45f/0x640
[  309.675806][ T9670]  ? gfs2_lookup_simple+0xf0/0xf0
[  309.680867][ T9670]  ? __gfs2_lookup+0x8c/0x260
[  309.685569][ T9670]  __gfs2_lookup+0x8c/0x260
[  309.690092][ T9670]  ? __lock_acquire+0x7c50/0x7c50
[  309.695139][ T9670]  ? gfs2_atomic_open+0x210/0x210
[  309.700175][ T9670]  ? d_set_d_op+0x25b/0x370
[  309.704712][ T9670]  ? do_raw_spin_unlock+0x11d/0x230
[  309.709934][ T9670]  ? _raw_spin_unlock+0x24/0x40
[  309.714823][ T9670]  ? d_alloc+0x16f/0x1a0
[  309.719092][ T9670]  lookup_one_qstr_excl+0x10e/0x240
[  309.724333][ T9670]  filename_create+0x21e/0x450
[  309.729117][ T9670]  ? kern_path_create+0x50/0x50
[  309.733984][ T9670]  ? __virt_addr_valid+0x188/0x540
[  309.739116][ T9670]  ? __virt_addr_valid+0x465/0x540
[  309.744261][ T9670]  ? __phys_addr_symbol+0x2b/0x70
[  309.749484][ T9670]  do_mkdirat+0x9d/0x430
[  309.753745][ T9670]  ? vfs_mkdir+0x570/0x570
[  309.758199][ T9670]  __x64_sys_mkdirat+0x85/0x90
[  309.762980][ T9670]  do_syscall_64+0x4c/0xa0
[  309.767416][ T9670]  ? clear_bhb_loop+0x60/0xb0
[  309.772119][ T9670]  ? clear_bhb_loop+0x60/0xb0
[  309.776985][ T9670]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  309.782894][ T9670] RIP: 0033:0x7f953318eec9
[  309.787325][ T9670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.806958][ T9670] RSP: 002b:00007f9533fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  309.815491][ T9670] RAX: ffffffffffffffda RBX: 00007f95333e5fa0 RCX: 00007f953318eec9
[  309.823481][ T9670] RDX: 000000000000017d RSI: 0000200000000000 RDI: ffffffffffffff9c
[  309.831487][ T9670] RBP: 00007f9533211f91 R08: 0000000000000000 R09: 0000000000000000
[  309.839474][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.847460][ T9670] R13: 00007f95333e6038 R14: 00007f95333e5fa0 R15: 00007ffc20cc8378
[  309.855461][ T9670]  </TASK>
[  309.921843][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  309.921861][   T26] audit: type=1800 audit(1760356936.535:69): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2013" name="file1" dev="loop2" ino=4 res=0 errno=0
[  310.115235][ T9715] loop3: detected capacity change from 0 to 512
[  310.150868][ T9715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  310.275800][ T9715] fs-verity: sha256 using implementation "sha256-avx2"
[  310.340325][ T9715] EXT4-fs warning (device loop3): ext4_begin_enable_verity:137: inode #15: comm syz.3.2022: verity is only allowed on extent-based files
[  310.522378][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  311.009350][ T9740] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2032'.
[  311.057699][ T9740] netlink: 'syz.2.2032': attribute type 1 has an invalid length.
[  311.348065][ T9749] loop4: detected capacity change from 0 to 2048
[  311.445810][ T9750] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  311.897489][ T9755] loop4: detected capacity change from 0 to 2048
[  311.904014][ T9756] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2039'.
[  311.946243][ T9755] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362
[  311.962067][ T9746] loop2: detected capacity change from 0 to 40427
[  311.964744][ T9755] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  312.004246][ T9755] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  312.040038][ T9746] F2FS-fs (loop2): Found nat_bits in checkpoint
[  312.117991][ T9755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.163046][ T9746] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  312.218937][ T9746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  312.304573][ T9746] F2FS-fs (loop2): Found FS corruption, run fsck to fix.
[  312.627440][ T9769] loop4: detected capacity change from 0 to 4096
[  312.652175][ T9772] loop3: detected capacity change from 0 to 4096
[  312.705577][ T9772] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  312.725027][ T9776] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  312.733801][ T9777] loop1: detected capacity change from 0 to 1024
[  312.794495][ T9772] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  312.935952][ T9777] hfsplus: bad catalog entry type
[  312.951885][ T9772] overlayfs: upper fs does not support tmpfile.
[  313.051260][ T9772] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  313.111422][ T4361] hfsplus: b-tree write err: -5, ino 4
[  313.417939][ T9786] loop4: detected capacity change from 0 to 256
[  313.442264][ T9786] FAT-fs (loop4): bogus logical sector size 58182
[  313.480583][ T9786] FAT-fs (loop4): Can't find a valid FAT filesystem
[  314.032735][ T9799] loop3: detected capacity change from 0 to 256
[  314.041357][ T9796] loop2: detected capacity change from 0 to 2048
[  314.178735][ T9796] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  314.196705][ T9796] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.265152][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  314.477142][ T9784] loop1: detected capacity change from 0 to 40427
[  314.536112][ T9784] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[  314.612623][ T9784] F2FS-fs (loop1): invalid crc value
[  314.641935][ T9784] F2FS-fs (loop1): Found nat_bits in checkpoint
[  314.787852][ T9784] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  314.858436][ T9784] F2FS-fs (loop1): Encrypt feature is off
[  315.056849][ T9819] program syz.4.2065 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  315.120506][ T9802] loop0: detected capacity change from 0 to 32768
[  315.157595][ T9821] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  315.202719][ T9802] JBD2: Ignoring recovery information on journal
[  315.232724][ T9809] loop2: detected capacity change from 0 to 32768
[  315.242495][ T4399] kernel write not supported for file task/885/attr/keycreate (pid: 4399 comm: kworker/1:8)
[  315.254453][ T9809] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2061 (9809)
[  315.300835][ T9809] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  315.322305][ T9809] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  315.342061][ T9809] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  315.363745][ T9809] BTRFS info (device loop2): use zstd compression, level 3
[  315.377080][ T9809] BTRFS info (device loop2): using free space tree
[  315.473169][ T9802] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  315.519506][ T9834] loop3: detected capacity change from 0 to 164
[  315.671048][ T4279] ocfs2: Unmounting device (7,0) on (node local)
[  315.744836][ T9809] BTRFS info (device loop2): enabling ssd optimizations
[  315.849009][   T26] audit: type=1326 audit(1760356942.465:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44378eec9 code=0x7ffc0000
[  315.936741][   T26] audit: type=1326 audit(1760356942.465:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44378eec9 code=0x7ffc0000
[  315.983937][ T4276] VFS: Busy inodes after unmount of loop3 (iso9660)
[  315.984254][ T4276] ------------[ cut here ]------------
[  315.997687][ T4276] kernel BUG at fs/super.c:505!
[  316.046710][ T4276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  316.048699][   T26] audit: type=1326 audit(1760356942.465:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa44378eec9 code=0x7ffc0000
[  316.052837][ T4276] CPU: 1 PID: 4276 Comm: syz-executor Not tainted syzkaller #0
[  316.052859][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  316.052872][ T4276] RIP: 0010:generic_shutdown_super+0x334/0x340
[  316.099346][ T4276] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 e5 92 f1 ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 60 4f 99 8a 48 89 de e8 6c 1c 2d 08 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 53 48 89 fb 49
[  316.105981][   T26] audit: type=1326 audit(1760356942.465:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44378eec9 code=0x7ffc0000
[  316.119065][ T4276] RSP: 0018:ffffc900041d7d18 EFLAGS: 00010246
[  316.119091][ T4276] RAX: 0000000000000031 RBX: ffff8880554026a8 RCX: b1a61c425dc16000
[  316.119106][ T4276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  316.119119][ T4276] RBP: 1ffff1100aa804fb R08: dffffc0000000000 R09: fffff5200083af45
[  316.171493][ T4276] R10: fffff5200083af45 R11: 1ffff9200083af44 R12: 0000000000000000
[  316.179492][ T4276] R13: dffffc0000000000 R14: ffffffff8cd13aa0 R15: ffff8880554027d8
[  316.187557][ T4276] FS:  0000555561b82500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  316.196619][ T4276] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  316.203244][ T4276] CR2: 00007f5f7b8802f6 CR3: 000000005aafb000 CR4: 00000000003506e0
[  316.211277][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  316.219283][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  316.227294][ T4276] Call Trace:
[  316.230593][ T4276]  <TASK>
[  316.233557][ T4276]  kill_block_super+0x7c/0xe0
[  316.238267][ T4276]  deactivate_locked_super+0x93/0xf0
[  316.243684][ T4276]  cleanup_mnt+0x463/0x4f0
[  316.248139][ T4276]  ? lockdep_hardirqs_on+0x94/0x140
[  316.253378][ T4276]  task_work_run+0x1ca/0x250
[  316.258025][ T4276]  ? task_work_cancel+0x230/0x230
[  316.263089][ T4276]  ? exit_to_user_mode_loop+0x3b/0x110
[  316.268595][ T4276]  exit_to_user_mode_loop+0xe6/0x110
[  316.274004][ T4276]  exit_to_user_mode_prepare+0xee/0x180
[  316.279667][ T4276]  syscall_exit_to_user_mode+0x16/0x40
[  316.285242][ T4276]  do_syscall_64+0x58/0xa0
[  316.289697][ T4276]  ? clear_bhb_loop+0x60/0xb0
[  316.294421][ T4276]  ? clear_bhb_loop+0x60/0xb0
[  316.299205][ T4276]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  316.305119][ T4276] RIP: 0033:0x7fbe5f9901f7
[  316.309899][ T4276] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  316.329705][ T4276] RSP: 002b:00007ffe7ffa8a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  316.338144][ T4276] RAX: 0000000000000000 RBX: 00007fbe5fa11d7d RCX: 00007fbe5f9901f7
[  316.346145][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7ffa8ae0
[  316.354237][ T4276] RBP: 00007ffe7ffa8ae0 R08: 0000000000000000 R09: 0000000000000000
[  316.362245][ T4276] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7ffa9b70
[  316.370249][ T4276] R13: 00007fbe5fa11d7d R14: 000000000004d1a7 R15: 00007ffe7ffa9bb0
[  316.378251][ T4276]  </TASK>
[  316.381298][ T4276] Modules linked in:
[  316.409693][ T4270] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  316.458028][   T26] audit: type=1326 audit(1760356942.465:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44378eec9 code=0x7ffc0000
[  316.471467][ T4276] ---[ end trace 0000000000000000 ]---
[  316.490506][ T4276] RIP: 0010:generic_shutdown_super+0x334/0x340
[  316.500039][ T4276] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 e5 92 f1 ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 60 4f 99 8a 48 89 de e8 6c 1c 2d 08 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 53 48 89 fb 49
[  316.523957][ T4276] RSP: 0018:ffffc900041d7d18 EFLAGS: 00010246
[  316.530435][ T4276] RAX: 0000000000000031 RBX: ffff8880554026a8 RCX: b1a61c425dc16000
[  316.540188][ T4276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  316.551289][ T4276] RBP: 1ffff1100aa804fb R08: dffffc0000000000 R09: fffff5200083af45
[  316.560147][ T4276] R10: fffff5200083af45 R11: 1ffff9200083af44 R12: 0000000000000000
[  316.571553][ T4276] R13: dffffc0000000000 R14: ffffffff8cd13aa0 R15: ffff8880554027d8
[  316.581177][ T4276] FS:  0000555561b82500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  316.592402][ T4276] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  316.599666][ T4276] CR2: 00007fa4439b12f8 CR3: 000000005aafb000 CR4: 00000000003506f0
[  316.613227][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  316.621608][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  316.630177][ T4276] Kernel panic - not syncing: Fatal exception
[  316.637132][ T4276] Kernel Offset: disabled
[  316.641490][ T4276] Rebooting in 86400 seconds..