last executing test programs:

48.634679602s ago: executing program 1 (id=2597):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3, 0x2}})

48.418993947s ago: executing program 1 (id=2600):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0)

48.153232473s ago: executing program 1 (id=2603):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a01010003000000000000000000000900020073797a32000000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x400c0c0)

48.013522297s ago: executing program 1 (id=2606):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000080)={[{}, {@dmask={'dmask', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0xea}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@fmask={'fmask', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0x9}}, {@keep_last_dots}, {@namecase}, {@discard}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000008c0)="$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")
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

47.47335288s ago: executing program 1 (id=2611):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r0, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20)

46.898720654s ago: executing program 1 (id=2618):
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x309, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0xfd)

46.580018761s ago: executing program 32 (id=2618):
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x309, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0xfd)

3.27106133s ago: executing program 2 (id=2965):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000009580)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1100000000000000c4bc0e"], 0x14)

3.233782071s ago: executing program 4 (id=2966):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48)
fchown(r0, 0xee00, 0xee01)
fchown(r0, 0x0, 0x0)

3.115922814s ago: executing program 2 (id=2967):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x1d9, 0x0, 0x1}]})

2.652762616s ago: executing program 2 (id=2970):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2c3, &(0x7f0000000180)="$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")
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2.620458446s ago: executing program 4 (id=2971):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)

2.306212164s ago: executing program 2 (id=2973):
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0xffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0xba, 0xfffffffffffffffc, 0x4, 0x4, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfdc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]})
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000780)=[{0x3, 0xfffffffffffffff8, 0x400, {0x7, 0x9}, 0x7ff, 0xbd98, 0x200}, {0xa, 0x1, 0xd07, {0x4, 0x2}, 0x6, 0x7, 0x7}, {0x7, 0x9, 0x10001, {0x7fffffffffffffff, 0xe}, 0x4, 0x1, 0x9e0}], 0x15, 0x40, 0xd, 0xe2}, {&(0x7f0000000300)=[{0x1}], 0x1, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000340)=[0x6], 0x1, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x400, 0x6, 0x1, 0x7f, 0xd}], 0x1, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x9, 0xffff}})

2.305695194s ago: executing program 3 (id=2974):
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$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")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x2, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

1.772372547s ago: executing program 4 (id=2975):
socket$key(0xf, 0x3, 0x2)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0xffff)
setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4)

1.772009507s ago: executing program 2 (id=2976):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {}, {@gid}, {@keep_last_dots}, {}, {@dmask={'dmask', 0x3d, 0x10000}}, {@keep_last_dots}, {@namecase}, {@discard}, {@utf8}, {@sys_tz}]}, 0x1, 0x1548, &(0x7f0000000680)="$eJzs3AuYTlXbOPD7XmvtMTTxNMlhWGvdmyeJZZIkhyQ5JEklSXJKSEzySkJiCEkakpAchiSGkBwmJjmfz6eEJGmSJKeckvW/Jnze3nq/3r76571y/65rX9Zt7bX2vZ/7eWavvZnnm44Dq9WvXrkuEcEfguf+SAaAWADoCwC5ACAAgNLxpeOz+rNLTP5jB2F/rgfTLnUG7FLi+l/euP6XN67/5Y3rf3nj+l/euP6XN67/5Y3rz9jlbP2k/Ffxdvlu/Pz/csbX/7+RzBIjv1hZ4ppOADG/7Iz71SFc/7+dbL9nZ67/39GVcP7C+5u4/pc3rv/lKvZSJ8D+C/Dn/2/pX9b//35JyPW/vHH9GbucXernz5d6g8if8Boo+PNyOpj9XGH+qvNnjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcb+Aif9RQoALrQvdV6MMcYYY4wxxhj78/hslzoDxhhjjDHGGGOM/f+HIECCggBiIBvEQnbIAQIAroSckAsicBXEw9WQG66BPJAX8kF+SIACUBA0GLBAEEIhKAxRuBaKwHU/PU0oBsXBQQlIhBugJNwIpeAmKA03Qxm4BcpCOSgPFeBWqAi3QSW4HSrDHVAFAAiqw51QA+6CmnA31IJ7oDbcC/fB/VAHHoC68CDUg4egPjwMDeARaAiNoDE0gabnx1eFar9j/HPQFZ6HbtAdkqEH9IQXoBf0hj7wIvSFl6AfvAz94RVIgQEwEF6FQfAaDIbXYQgMhWHwBgyHN2EEjIRRMBpSYQyMhbdgHLwN4+EdmAATIQ0mwWR4F6bAVJgG78F0eB9mwEyYBbMhHT6AOTAXMuBDmAcfwXxYAAthESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBU+hm3wCWyHHbATPoVd8NnvHH/iX8Z3QkBAgQIVKozBGIzFWMyBOTAO4zAn5sQIRjAe4zE35sY8mAfzYT5MwAQsiAXRoEFCwkJYCKMYxSJYBItiUSyGxdChw0RMxJJ4I5bCUlgaS2MZLINlsRyWwwpYAStiRayElbAyVsYqWAWrYTW8E+/EHlgTa2ItrIW1sfaFx1NYF+tiPayH9bE+NsAG2BAbYmNsjE2xKTbDZtgcm2NLbImtsBW2xtaYhEnYFttiO2yH7bE9dsAO2BE7YifsjJ0zn8sG+Dw+j92xiuiBPbEn9sKUbH3wRXwRX8J++DK+jK9gCg7Agfgqvoqv4WA8jkNwKA7DYVhRvIkjcCSSGI2pmIpjcSyOw3GYleg7OBHTcBJOxsk4BafiVHwPp+P7+D7OxJk4G9MxHefgXMzADJyHJ3A+LsCFuAgX4xJcjMtwOS7DlbgKV+IaXIPrcB1uwA24CTfhFtyCH6MCwE9wB+7AFNyFu3A37sY9uAf34l7MxEzch/twP+7HA3gAD+JBPISH8QgexmN4DI/jCTyJJ/E0nsYz+EzCV/U+vn5FCogsSigRI2JErIgVOUQOESfiRE6RU0RERMSLeJFb5BZ5RB6RT+QTCSJBFBQFhRFGkAhjAEBERVQUEUVEUVFUFBPFhBNOJIpEUVKUFKVEKVFa3CzKiFtEWVFOtHAVRAVRUbR0lcTtorKoLKqIqqKaqC6qixqihqgpaopaopaoLWqL+8T9oo7ogX3wQZFVmfpiADYQA7GhaCTk+Z9gzcRgbC5aiJbicTEUh2Br0cwliSdFWzEC24l/iJH4tOggRmNH8azoJDqLLuI50VU0d91EdzEee4ieYiL2Er1FH/GimIJVxXs4PXs18YpIEQPEQPGqmI2vicHidTFEDBXDxBtiuHhTjBAjxSgxWqSKMWKseEuME2+L8eIdMUFMFGlikpgs3hVTxFQxTbwnpov3xQwxU8wSs0W6+EDMEXNFhvhQzBMfifligVgoFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKGJhs9gitoqPxTbxidgudoid4lOxS3wmdovPxR7xhdgrvhSZ4iuxT3wt9otvxAHxrTgovhOHxGFxRBwVx8T34rg4IU6KU+K0+EGcET+Ks8ILkCiFlFLJQMbIbDJWZpc55BUyTgbnX92rZLy8WuaW18g8Mq/MJ/PLBFlAFpRaGmklyVAWkoVlVF4ri8jrZFF5vSwmi0snS8hEeYMsKW+UpeRNsrS8WZaRt8iyspwsLyvIW2VFeZuEyLljVJFVZTVZXd4pk+EuWVPeLWvJe2Rtea+8T94v68gHZF35oKwnH5L15cOygXxENpSNZGPZRDaVj8pm8jHZXLaQLeXjspV8QraWbWSSfFK2lf78W+Rp2UE+IzvKZ2Un2Vl2kT/Ks9LLbrK7hB4ge8oXZC/ZW/aJBQD5kuwnX5b95SsyRQ6QA+WrcpB8TQ6Wr8shcqgcJt+Qw+WbcoQcKUfJ0TJVjpFj5VtynHxbjpfvyAlyokyTk2Qf2fenmaZJ+Zvj3/qV8f1/Ovo6uV5ukBvlJrlZbpFb5cdym9wmt8vtcqfcKXfJXXK33C33yD1yr9wrM2Wm3Cf3yf1yvzwgD8iD8qA8JA/LU/KoPCa/l8flCXlCnpKn5Wl55vxrAAqVUFIpFagYlU3Fquwqh7pCxakrVU6VS0XUVSpeXa1yq2tUHpVX5VP5VYIqoAoqrYyyilSoCqnCKqquxfNvGFVMFVdOlVCJ6obfM14VUdepour6n42/kF/yv8mvqWqqmqlmqrlqrlqqlqqVaqVaq9YqSSWptqqtaqfaqfaqveqgOqiOqmPW+0F1UV1UV9VVdVPdVLJKVj3VC6qX6q36qBdVX/WS6qf6qf6qv0pRKWqgGqgGqUFqsBqshqghapgapoar4WqEGqFGqVEqVaWqsWqsGqfGqfFqvJqgJqg0laYmq8lqipqipqlparqarmaoGWqWmqXSVbqao+aoDJWh5ql5ar5aoBaoRWqRWqKWqGVqmVqhVqhVapVao9ao+Wq9Wq82qo1qs9qstqqtapvapraL7Wqn2ql2qV1qt9qt9qg9aq/aqzJVptqn9qn9ar86oA6og+qgOqQOqSPqiDqmjqnj6rg6qU6q0+q0OqPOqLPqbNayLxCBCFSggpggJogNYoMcQY4gLogLcgY5g0gQCeKD+CB3cE2QJ8gb5AvyBwlBgaBgoAMT2ECcL3o0uDYoElwXFA2uD4oFxQMXlAgSgxuCksGNQangpqB0cHNQJrglKBuUC8oHFYJbg4rBbUGl4PagcnBHUCWoGlQLqgd3BjWCu4Kawd1BreCeoHZwb3BfcH9QJ3ggqBs8GNQLHgrqBw8HDYJHgoZBo6Bx0CRo+qfO7/3xvI+5brq7TtY9dE/9gu6le+s++kXdV7+k++mXdX/9ik7RA/RA/aoepF/Tg/XreogeqnPBG3q4flOP0CP1KD1ap+oxeqx+S4/Tb+vx+h09QU/UaXqSnqzf1VP0VD0N39PT9ft6hp6pZ+nZOl1/oOfouTpDf6jn6Y/0fL1AL9SL9GK9RC/Vy/RyvUKv1Kv0ar1Gr9Xr9Hq9QW/Um/RmvUVv1R/rbfoTvV3v0Dv1p3qX/kzv1p/rPfoLvVd/qTP1V3qf/lrv19/oA/pbfVB/pw/pw/qIPqqP6e/1cX1Cn9Sn9Gn9gz6jf9Rntc9a3Gdd3o0yysSYGBNrYk0Ok8PEmTiT0+Q0ERMx8Sbe5Da5TR6Tx+Qz+UyCSTAFTUGThQyZQqaQiZqoKWKKmKKmqClmihlnnEk0iaakKWlKmVKmtCltypgypqwpa8qb8uZWc6u5zdxmbje3mzvMHaaqqWqqm+qmhqlhapqappapZWqb2uY+c5+pY+qYuqauqWfqmfqmvmlgGpiGpqFpbBqbpqapaWaameamuWlpWppWppVpbVqbJJNk2pq2pp1pZ9qb9qaD6WA6mo6mk+lkupgupqvparqZbibZJJuepqfpZXqZPqaP6Wv6mn6mn+lv+psUk2IGmoFmkBlkBpvBZogZaoZlLVTNm2aEGWlGmdEm1aSasWasGWfGmfFmvJlgJpg0k2Ymm8lmiplipplpZrqZbmaYGWaWmWXSTbqZY+aYDJNh5pl5Zr6ZbxaahWaxWWyWmqVmuVluVpqVZjWsNmvNWrPerDcbzUaz2Ww2W81Ws81sM9vNdrPT7DS7zC6z2+w2e8wes9fsNZkm0+wz+8x+s98cMAfMQXPQHDKHzBFzxBwzx8xxc9ycNCfNaZP3/PXSm1ib3eawV9g4e6XNaXPZf43z2fw2wRawBa22eWzen8XGWlvUXm+L2eLW2RI20d7wi7isLWfL2wr2VlvR3mYr/SKuYe+yNe3dtpa9x1a3d/4srm3vtVmrkzqIALaRrWeb2Pr2YdvAPmIb2ka2sW1iW9knbGvbxibZJ21b+9Qv4jl2rl1uV9iVdpXdbnfYk/aU3W+/saftD7ab7W772pdsP/uy7W9fsSl2wC/iYfYNO9y+aUfYkXaUHf2LeIKdaNPsJDvZvmun2Km/iNPtB3a6zbAz7Ew7y87+Kc7KKcN+aOfZj+x8G8BCu8gutkvsUrvsQq4+l11j19p1dpv9xG60m+xmu8VuvbAQtjvsTvup3WU/s/vs13aP/cLutQdspv3qpzjr/A7Yb+1B+509ZA/bI/aoPWa/VxdGZ537UfujPWu9BUICkqQooBjKRrGUnXLQFRRHV1JOykURuori6WrKTddQHspL+Sg/JVABKkiaDFkiCqkQFaYoXUsX0itGxclRCUqkG6gk3Uil6CYqTTdTGbqFylI5Kk8V6FaqSLdRJbqdKlNWYlWpGlWnO6kG3UU16W6qRfdQbbqX7qP7qQ49QHXpQapHD1F9epga0CPUkBpRY2pCTelRakaPUXNqQS3pcWpFT1BrakNJ9CS1paeoHf2D2tPT1IGeoY70LHWiztSFnqOu9Dx1o+6UTD2oJ71Avag39aEXqS+9RP3oZepPr1AKDaCB9CoNotdoML1OQ2goDaM3aDi9SSNoJI2i0ZRKY2gsvUXj6G0aT+/QBJpIaTSJJtO7NIWm0jR6j6bT+zSDZtIsmk3p9AHNobmUQR/SPPqI5tMCWkiLaDEtoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrfQxbaNPaDvtoJ30Ke2izwjpc9pDX9Be+pIy6SvaR1/TfvqGDtC3vjt9R4foMB2ho3SMvqfjdIJO0ik6TT/QGfqRzpInCDEUoQxVGIQxYbYwNswe5givCOPCK8OcYa4wEl4VxodXh7nDa8I8Yd4wX5g/TAgLhAVDHZrQhhSGYaGwcBgNrw2LhNeFRcPrw2Jh8dCFJcLE8IawZHhjWCq8KSwd3hyWCW8Jy4blwofvqRDeGlYMbwsrhbeHlcM7wiph1bBaWD28M6wR3hXWDO8Oa4X3hKXCe8P7wvvDOuEDYd3wwbBe+FBYP3w4bBA+EjYMG4WNwyZh0/DRsFn4WNg8bBG2DB8PW4VPhK3DNmFS+GTYNnzqp/575/77/uSwR9gzfCF8IfT+bjkrOjuaHv0gOic6N5oR/TA6L/pRdH50QXRhdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF3U++rZwKETTjrlAhfjsrlYl93lcFe4OHely+lyuYi7ysW7q11ud43L4/K6fC6/S3AFXEGnnXHWkQtdIVfYRd21roi7zhV117tirrhzroRLdE1cU9fUNXOPueauhWvpHnePuyfcE66Na+OedG3dU66d+4dr7552Hdwz7hn3rOvkOrsu7jnX1Y3Jee4zmex6up6ul+vl+rg+rq/r6/q5fq6/6+9SXIob6Aa6QW6QG+wGuyFuiBvmhrnhbrgb4Ua4UW6US3Wpbqwb68a5cW68G+8muAkuzaW5yW6ym+KmuIpTzx1lhpvhZrlZLt2luzkua82Y4ea5eW6+m+8WuoVusVvslrqlbrlb7la6lW61W+3WurVuvVvvNrqNbrPb7La6rW6b2+a2+1znJnW73G632+1xe9xe96XLdF+5fe5rt9994w64b91B95075A67I+6oO+a+d8fdCXfSnXKn3Q/ujPvRnXXepUbGRMZG3oqMi7wdGR95J2vWSFpkUmRy5N3IlMjUyLTIe5HpkfcjMyIzI7MisyPpkQ8icyJzIxmRDyPzIh9F5kcWRBZGFkUWR5ZEvC+wMfSFfGEf9df6Iv46X9Rf74v54t75Ej7R3+BL+ht9KX+TL+1v9mX8Lb6sL+fL+0d8Q9/IN/ZNfFP/qG/mH/PNfQvf0j/uW/knfGvfxif5J31b/5Rv5//h2/unfQf/jO/on/WdfGffxT/nu/rnfTff3Sf7Hr6nf8H38r19H/+i7+tf8v38y76/f8Wn+AF+oH/VD/Kv+cH+dT/ED/XDYt7wwy/cIsNon+rH+LH+LT/Ov+3H+3f8BD/Rp/lJfrJ/10/xU/00/56f7t/3M/xMP8vP9un+Az/Hz/UZ/kME/NlDZb/UL/PL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1X/st/lP/Ha/w+/0n/pd/jO/23/u9/gv/F7/pc/0X/l9/mu/33/jD/hv/UH/nT/kD/sj/qg/5r/3x/0Jf9Kf8qf9D/6M/9GfPfc7a+oPPw5njDHGGPubG3OxKX7ec25B1+NXxoh/2rknAFy5KX/mP/dnrShX5znX7i0SWkUA4MnuHR+8sFWpkpycfH7f+RKCwjOz1t0Xx8fAxXgBtIQnIAlaQMlfzb+36HyafmP+6M0AOf5pTCxcjC/O/zkAJv/K/I8+PmxOmfBk/P8y/0yAooUvjskOF+MF0PKnNWkLKPVv8s/b7Dfyz/5FKkDzfxoTBxfji/knwmPwFCT9bE/GGGOMMcYYY+yc3qJ8+wv3nxf+x+ev3Z8n/M+/rMRBNrgY/9b9OWOMMcYYY4wxxi69pzt3afNoUlKL9r+/Uem391H/2YQxv9bVAP6viXHj/9TwHuB/CgcAf3BCgKyG/CvPYsNfcqyU8x+df+1afMoH0KUN/BeU8s9oXOIfTIwxxhhjjLE/3cVF/8//nn+RkjHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYY++v8b18Ddvt/8B1v8B98S9+lPkfGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsUvt/AQAA///aYOzL")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000480)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)

1.709202488s ago: executing program 3 (id=2978):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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")
r0 = syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3b4a468, &(0x7f0000007400)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES8=r0, @ANYRESHEX, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRESDEC, @ANYRES32, @ANYRES8=r0], 0xb, 0x0, &(0x7f0000000000))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.568392112s ago: executing program 4 (id=2979):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet(0x2, 0x3, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/122, 0x7a}], 0x2, 0x6, 0xfffeeffa)

1.425022115s ago: executing program 0 (id=2980):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0xfffff, 0x0)

1.344444447s ago: executing program 4 (id=2981):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='base=0x20000000 size=0x20000 type=write-back', 0x2c)

1.234000679s ago: executing program 2 (id=2982):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000200)=ANY=[], 0x2d, 0x2)

1.1983409s ago: executing program 4 (id=2983):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000)={[{@noalign}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000100)='.\x00', 0x1b1a4e3, &(0x7f0000002180)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))

1.109009773s ago: executing program 3 (id=2984):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r1 = syz_open_pts(r0, 0xa0200)
ioctl$TIOCSBRK(r1, 0x5427)

953.429366ms ago: executing program 0 (id=2985):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x5, <r2=>r0, 0x1})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, 0x0)

881.019908ms ago: executing program 3 (id=2986):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000580)="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", 0x5c1}], 0x1}}], 0x1, 0x0)

740.427371ms ago: executing program 0 (id=2987):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

682.924363ms ago: executing program 3 (id=2988):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90)

573.132996ms ago: executing program 0 (id=2989):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000100)=""/145, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

510.946067ms ago: executing program 3 (id=2990):
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000300)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_force}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000))

326.753102ms ago: executing program 0 (id=2991):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xf5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000002a00000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

0s ago: executing program 0 (id=2992):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xda0, 0x0, 0x4000005}]})

kernel console output (not intermixed with test programs):

p1: detected capacity change from 0 to 164
[  317.167746][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  317.167781][    C1] lec:lec_tx_timeout: lec0
[  317.176229][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  317.341270][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  317.347867][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  317.512776][T10931] loop3: detected capacity change from 0 to 4096
[  317.663708][T10941] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  317.725212][T10938] loop2: detected capacity change from 0 to 4096
[  317.757773][T10931] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=7, cno=549755813893, offset=7, blocknr=0, vblocknr=2251799813685263
[  317.774444][T10938] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  317.822314][T10944] loop0: detected capacity change from 0 to 256
[  317.830458][T10931] NILFS (loop3): error -2 preparing GC: cannot read source blocks
[  317.854651][T10944] exfat: Deprecated parameter 'utf8'
[  317.876080][T10945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  317.888121][T10944] exfat: Deprecated parameter 'namecase'
[  317.901694][T10944] exfat: Deprecated parameter 'namecase'
[  317.923595][T10945] EXT4-fs (loop1): Test dummy encryption mode enabled
[  317.930706][T10944] exfat: Deprecated parameter 'utf8'
[  317.978695][T10945] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.037197][T10938] ntfs: volume version 3.1.
[  318.048239][T10944] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  318.196404][T10945] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.2033: Directory hole found for htree leaf block 0
[  318.264422][T10945] EXT4-fs (loop1): Remounting filesystem read-only
[  318.291236][T10938] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-14.  You might want to try to use the mount option nls=utf8.
[  318.387299][T10938] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  318.461410][ T5788] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  318.826722][T10960] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.048168][T10948] set_capacity_and_notify: 2 callbacks suppressed
[  319.048186][T10948] loop3: detected capacity change from 0 to 32768
[  319.148953][T10948] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  319.253150][T10948] XFS (loop3): Ending clean mount
[  319.366832][T10980] loop2: detected capacity change from 0 to 512
[  319.412059][   T28] audit: type=1800 audit(2000000061.793:88): pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2046" name="file1" dev="loop2" ino=1048687 res=0 errno=0
[  319.434844][T10980] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 50)
[  319.453605][ T5824] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  319.559091][ T5780] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  319.578512][ T5841] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 
[  319.600163][ T5841] XFS (loop3): Unmount and run xfs_repair
[  319.606958][ T5841] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  319.625184][ T5841] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  319.650988][ T5841] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  319.663371][ T5824] usb 2-1: Using ep0 maxpacket: 16
[  319.680135][ T5841] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  319.690447][ T5824] usb 2-1: unable to get BOS descriptor or descriptor too short
[  319.720066][ T5841] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  319.733861][ T5824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.750398][ T5824] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  319.761441][ T5841] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  319.781745][ T5824] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  319.792576][ T5841] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  319.811740][ T5841] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  319.820976][ T5824] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  319.849702][ T5841] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  319.873524][ T5841] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74
[  319.894920][ T5824] usb 2-1: string descriptor 0 read error: -22
[  319.902440][ T5824] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  319.923386][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.968016][ T5841] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598).  Shutting down filesystem.
[  320.000004][ T5824] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  320.007758][ T5824] usb 2-1: MIDIStreaming interface descriptor not found
[  320.018394][ T5841] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  320.580803][T10997] loop0: detected capacity change from 0 to 128
[  320.595035][T10997] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  320.703457][T10997] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  321.082596][T10991] loop2: detected capacity change from 0 to 32768
[  321.164109][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'.
[  321.179326][T10991] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  321.213748][T11008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2058'.
[  321.234902][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'.
[  321.281701][T10991] XFS (loop2): Ending clean mount
[  321.359528][T11018] loop0: detected capacity change from 0 to 512
[  321.381354][T11018] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  321.465279][T11018] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[  321.496933][ T5784] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  321.513024][T11018] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  321.566282][T11018] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2060: Failed to acquire dquot type 1
[  321.664749][T11018] EXT4-fs (loop0): 1 truncate cleaned up
[  321.710660][T11018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  321.857255][T11018] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[  321.902936][T11018] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  321.968183][T11018] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2060: Failed to acquire dquot type 1
[  322.112443][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  322.183215][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  322.191307][    C1] lec:lec_tx_timeout: lec0
[  322.195942][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  322.243489][ T5789] usb 2-1: USB disconnect, device number 10
[  322.975699][T11053] netlink: 'syz.0.2075': attribute type 27 has an invalid length.
[  323.274354][T11057] loop0: detected capacity change from 0 to 4096
[  323.291168][T11037] loop2: detected capacity change from 0 to 32768
[  323.298146][T11057] EXT4-fs: Ignoring removed nobh option
[  323.323887][T11057] EXT4-fs: Ignoring removed bh option
[  323.357320][T11057] EXT4-fs (loop0): Test dummy encryption mode enabled
[  323.425666][T11057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.448771][T11043] loop3: detected capacity change from 0 to 32768
[  323.507019][T11043] ERROR: (device loop3): dbDiscardAG: -EIO
[  323.507019][T11043] 
[  323.519325][T11043] ERROR: (device loop3): remounting filesystem as read-only
[  323.824583][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.230664][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2085'.
[  324.316376][T11075] veth1: entered promiscuous mode
[  324.385681][T11075] veth1: left promiscuous mode
[  324.421832][T11077] loop3: detected capacity change from 0 to 128
[  324.465529][T11077] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  324.515614][T11077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  324.953559][T11079] loop0: detected capacity change from 0 to 4096
[  324.969568][T11068] loop1: detected capacity change from 0 to 32768
[  324.999243][T11068] (syz.1.2084,11068,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  325.017663][T11079] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  325.053487][T11079] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  325.066943][T11068] (syz.1.2084,11068,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  325.083617][T11079] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  325.113475][T11068] JBD2: Ignoring recovery information on journal
[  325.131514][T11079] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  325.187263][T11079] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  325.251411][T11079] ntfs: volume version 3.1.
[  325.257788][T11068] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  325.284289][T11079] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  325.313358][T11079] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  325.326981][T11068] (syz.1.2084,11068,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  325.391767][T11079] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  325.427598][T11079] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  325.480918][T11079] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  325.637658][T11086] (syz.1.2084,11086,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  325.824154][T11086] (syz.1.2084,11086,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  325.867283][T11089] loop2: detected capacity change from 0 to 4096
[  325.881568][T11086] (syz.1.2084,11086,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  325.910069][T11089] EXT4-fs: Ignoring removed mblk_io_submit option
[  325.922211][T11086] (syz.1.2084,11086,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  325.934718][T11086] (syz.1.2084,11086,1):ocfs2_quota_read:201 ERROR: status = -5
[  325.952832][T11086] (syz.1.2084,11086,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  325.971649][T11089] EXT4-fs (loop2): Test dummy encryption mode enabled
[  325.983621][T11089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.996480][T11086] (syz.1.2084,11086,1):ocfs2_mknod:314 ERROR: status = -5
[  326.013235][T11086] (syz.1.2084,11086,1):ocfs2_mknod:502 ERROR: status = -5
[  326.020893][T11086] (syz.1.2084,11086,1):ocfs2_mkdir:659 ERROR: status = -5
[  326.127886][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.183195][T11081] loop3: detected capacity change from 0 to 32768
[  326.265186][ T5788] ocfs2: Unmounting device (7,1) on (node local)
[  326.328740][T11081] ERROR: (device loop3): dbAllocAG: unable to allocate blocks
[  326.328740][T11081] 
[  326.383377][T11081] ERROR: (device loop3): dbDiscardAG: -EIO
[  326.383377][T11081] 
[  327.102352][T11095] loop0: detected capacity change from 0 to 32768
[  327.202941][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  327.211031][    C1] lec:lec_tx_timeout: lec0
[  327.215790][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  327.282739][T11112] ERROR: (device loop0): diAllocAG: free inode not found in summary map
[  327.282739][T11112] 
[  327.341060][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2102'.
[  327.373162][T11112] ERROR: (device loop0): remounting filesystem as read-only
[  327.433195][T11112] ialloc: diAlloc returned -5!
[  327.566011][T11120] syz.1.2105: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  327.622807][T11120] CPU: 1 PID: 11120 Comm: syz.1.2105 Not tainted syzkaller #0
[  327.630349][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  327.640494][T11120] Call Trace:
[  327.643838][T11120]  <TASK>
[  327.646824][T11120]  dump_stack_lvl+0x18c/0x250
[  327.651574][T11120]  ? show_regs_print_info+0x20/0x20
[  327.656847][T11120]  ? load_image+0x420/0x420
[  327.661438][T11120]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  327.667934][T11120]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  327.674603][T11120]  warn_alloc+0x246/0x340
[  327.679008][T11120]  ? _end+0x67dda14a/0x0
[  327.683331][T11120]  ? zone_watermark_ok_safe+0x230/0x230
[  327.688957][T11120]  ? _end+0x67dda14a/0x0
[  327.693271][T11120]  __vmalloc_node_range+0x129/0x1320
[  327.698636][T11120]  ? __mutex_trylock_common+0x160/0x270
[  327.704252][T11120]  ? trace_raw_output_contention_end+0xd0/0xd0
[  327.710475][T11120]  ? rcu_is_watching+0x15/0xb0
[  327.715481][T11120]  ? trace_contention_end+0x39/0xe0
[  327.720907][T11120]  ? __mutex_lock+0x30d/0xc80
[  327.725642][T11120]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  327.731334][T11120]  ? free_vm_area+0x50/0x50
[  327.735897][T11120]  ? dvb_demux_do_ioctl+0x317/0x530
[  327.741155][T11120]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  327.746671][T11120]  ? mutex_lock_nested+0x20/0x20
[  327.751665][T11120]  ? _end+0x67dda14a/0x0
[  327.755960][T11120]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  327.761831][T11120]  vmalloc+0x79/0x90
[  327.765792][T11120]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  327.771668][T11120]  ? _end+0x67dda14a/0x0
[  327.775970][T11120]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  327.781667][T11120]  dvb_demux_do_ioctl+0x454/0x530
[  327.786749][T11120]  ? _end+0x67dda14a/0x0
[  327.791050][T11120]  ? _end+0x67dda14a/0x0
[  327.795350][T11120]  dvb_usercopy+0x195/0x2b0
[  327.799915][T11120]  ? _end+0x67dda14a/0x0
[  327.804246][T11120]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  327.809854][T11120]  ? dvb_generic_ioctl+0xb0/0xb0
[  327.814875][T11120]  ? _end+0x67dda14a/0x0
[  327.819174][T11120]  ? _end+0x67dda14a/0x0
[  327.823476][T11120]  ? dvb_demux_poll+0x210/0x210
[  327.828390][T11120]  ? _end+0x67dda14a/0x0
[  327.832697][T11120]  dvb_demux_ioctl+0x29/0x30
[  327.837355][T11120]  __se_sys_ioctl+0xfd/0x170
[  327.842020][T11120]  do_syscall_64+0x55/0xb0
[  327.846492][T11120]  ? clear_bhb_loop+0x40/0x90
[  327.851218][T11120]  ? clear_bhb_loop+0x40/0x90
[  327.855955][T11120]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  327.861907][T11120] RIP: 0033:0x7f88a639de99
[  327.866390][T11120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.886061][T11120] RSP: 002b:00007f88a71a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  327.894534][T11120] RAX: ffffffffffffffda RBX: 00007f88a6625fa0 RCX: 00007f88a639de99
[  327.902583][T11120] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003
[  327.910604][T11120] RBP: 00007f88a6433eaf R08: 0000000000000000 R09: 0000000000000000
[  327.918636][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.926662][T11120] R13: 00007f88a6626038 R14: 00007f88a6625fa0 R15: 00007ffe6955f6b8
[  327.934704][T11120]  ? _end+0x67dda14a/0x0
[  327.939111][T11120]  </TASK>
[  328.002973][T11120] Mem-Info:
[  328.006176][T11120] active_anon:15025 inactive_anon:0 isolated_anon:0
[  328.006176][T11120]  active_file:11132 inactive_file:40731 isolated_file:0
[  328.006176][T11120]  unevictable:768 dirty:459 writeback:0
[  328.006176][T11120]  slab_reclaimable:10796 slab_unreclaimable:95364
[  328.006176][T11120]  mapped:25108 shmem:9320 pagetables:691
[  328.006176][T11120]  sec_pagetables:0 bounce:0
[  328.006176][T11120]  kernel_misc_reclaimable:0
[  328.006176][T11120]  free:1338459 free_pcp:10706 free_cma:0
[  328.058963][    C0] vkms_vblank_simulate: vblank timer overrun
[  328.093068][T11120] Node 0 active_anon:56824kB inactive_anon:0kB active_file:44492kB inactive_file:162732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100416kB dirty:1836kB writeback:0kB shmem:32412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11312kB pagetables:2840kB sec_pagetables:0kB all_unreclaimable? no
[  328.153088][T11120] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  328.213147][T11120] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  328.244222][T11105] loop3: detected capacity change from 0 to 32768
[  328.262995][T11120] lowmem_reserve[]: 0 2521 2522 2522 2522
[  328.282947][T11120] Node 0 DMA32 free:1466612kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:50584kB inactive_anon:0kB active_file:44492kB inactive_file:161904kB unevictable:1536kB writepending:1836kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:8448kB local_pcp:1268kB free_cma:0kB
[  328.327384][T11120] lowmem_reserve[]: 0 0 0 0 0
[  328.358321][T11120] Node 0 
[  328.358505][T11105] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  328.370650][T11120] Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  328.397903][T11120] lowmem_reserve[]: 0 0 0 0 0
[  328.402860][T11120] Node 1 Normal free:3897692kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:10944kB free_cma:0kB
[  328.433140][    C0] vkms_vblank_simulate: vblank timer overrun
[  328.439603][T11120] lowmem_reserve[]: 0 0 0 0 0
[  328.444822][T11120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  328.458103][T11120] Node 0 DMA32: 160*4kB (UME) 455*8kB (UME) 360*16kB (UME) 356*32kB (UME) 195*64kB (UME) 65*128kB (UM) 25*256kB (UME) 21*512kB (UME) 10*1024kB (UM) 6*2048kB (UM) 338*4096kB (UM) = 1466360kB
[  328.477369][T11120] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  328.489999][T11120] Node 1 Normal: 235*4kB (UME) 72*8kB (UME) 41*16kB (UME) 141*32kB (UE) 51*64kB (UME) 15*128kB (UME) 1*256kB (M) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3897692kB
[  328.508481][T11120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  328.521507][T11120] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  328.531368][T11120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  328.561515][T11120] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  328.574621][T11120] 59604 total pagecache pages
[  328.583034][T11105] XFS (loop3): Ending clean mount
[  328.585020][T11120] 0 pages in swap cache
[  328.602936][T11120] Free swap  = 124424kB
[  328.610531][T11105] XFS (loop3): Quotacheck needed: Please wait.
[  328.613464][T11120] Total swap = 124996kB
[  328.631493][T11120] 2097051 pages RAM
[  328.641662][T11120] 0 pages HighMem/MovableOnly
[  328.651779][T11120] 416955 pages reserved
[  328.668133][T11120] 0 pages cma reserved
[  328.761182][T11105] XFS (loop3): Quotacheck: Done.
[  328.817442][T11118] loop2: detected capacity change from 0 to 32768
[  328.980781][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  329.456882][T11136] loop0: detected capacity change from 0 to 40427
[  329.502856][T11136] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  329.511370][T11136] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  329.543228][T11136] F2FS-fs (loop0): Image doesn't support compression
[  329.550002][T11136] F2FS-fs (loop0): Image doesn't support compression
[  329.570744][T11136] F2FS-fs (loop0): invalid crc value
[  329.788526][T11136] F2FS-fs (loop0): Start checkpoint disabled!
[  329.842965][T11136] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  329.850088][T11136] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  329.973169][T11136] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SIT and SSA
[  329.992777][T11136] F2FS-fs (loop0): Stopped filesystem due to reason: 4
[  330.648179][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'.
[  330.981848][T11160] input: syz1 as /devices/virtual/input/input20
[  331.164455][T11167] loop1: detected capacity change from 0 to 512
[  331.241762][T11167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.529934][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.778411][T11177] batadv0: entered promiscuous mode
[  331.812156][T11177] bond0: entered promiscuous mode
[  331.823126][T11177] bond_slave_0: entered promiscuous mode
[  331.845532][T11177] bond_slave_1: entered promiscuous mode
[  331.866665][T11177] hsr1: entered allmulticast mode
[  331.871767][T11177] batadv0: entered allmulticast mode
[  331.907751][T11177] bond0: entered allmulticast mode
[  331.927993][T11177] bond_slave_0: entered allmulticast mode
[  331.942799][T11177] bond_slave_1: entered allmulticast mode
[  331.952538][T11174] loop2: detected capacity change from 0 to 32768
[  331.960134][T11177] 8021q: adding VLAN 0 to HW filter on device hsr1
[  331.977944][T11177] batadv0: left promiscuous mode
[  331.984626][T11174] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  331.995471][T11177] bond0: left promiscuous mode
[  332.000314][T11177] bond_slave_0: left promiscuous mode
[  332.011950][T11174] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  332.021545][T11177] bond_slave_1: left promiscuous mode
[  332.027466][T11174] BTRFS info (device loop2): setting nodatasum
[  332.052345][T11174] BTRFS info (device loop2): force zlib compression, level 3
[  332.088447][T11174] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  332.115065][T11172] loop0: detected capacity change from 0 to 32768
[  332.126153][T11174] BTRFS info (device loop2): use lzo compression, level 0
[  332.139463][T11172] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2120 (11172)
[  332.159153][T11174] BTRFS info (device loop2): turning on flush-on-commit
[  332.186156][T11174] BTRFS info (device loop2): enabling auto defrag
[  332.208071][T11172] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  332.222751][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  332.225298][T11174] BTRFS info (device loop2): max_inline at 4096
[  332.231009][    C1] lec:lec_tx_timeout: lec0
[  332.242090][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  332.265564][T11172] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  332.303652][T11174] BTRFS info (device loop2): using free space tree
[  332.315617][T11172] BTRFS info (device loop0): turning off barriers
[  332.322136][T11172] BTRFS info (device loop0): enabling auto defrag
[  332.352782][T11172] BTRFS info (device loop0): force zlib compression, level 3
[  332.376353][T11172] BTRFS info (device loop0): enabling ssd optimizations
[  332.410658][T11172] BTRFS info (device loop0): using spread ssd allocation scheme
[  332.463633][T11172] BTRFS info (device loop0): using free space tree
[  332.591317][T11174] BTRFS info (device loop2): enabling ssd optimizations
[  333.022877][T11172] BTRFS error (device loop0: state M): unrecognized mount option ''
[  333.183641][ T5776] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  333.336196][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  333.431596][ T5784] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  333.452769][T11041] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (11041)
[  333.549907][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  333.592579][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.650993][    T9] usb 2-1: config 0 descriptor??
[  333.664023][    T9] cp210x 2-1:0.0: cp210x converter detected
[  334.321667][    T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  334.350609][    T9] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  334.395300][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  334.436689][    T9] usb 2-1: USB disconnect, device number 11
[  334.478205][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  334.496311][ T5872] udevd[5872]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory
[  334.535626][    T9] cp210x 2-1:0.0: device disconnected
[  334.546398][ T5872] udevd[5872]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory
[  334.600207][T11245] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2138'.
[  335.357591][ T5841] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  335.542568][ T5841] usb 2-1: Using ep0 maxpacket: 32
[  335.557066][ T5841] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  335.571491][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.590819][ T5841] usb 2-1: Product: syz
[  335.595543][ T5841] usb 2-1: Manufacturer: syz
[  335.600307][ T5841] usb 2-1: SerialNumber: syz
[  335.614232][ T5841] usb 2-1: config 0 descriptor??
[  335.851437][ T5841] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 012
[  336.039843][T11255] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read)
[  336.071950][ T5841] usb 2-1: USB disconnect, device number 12
[  336.082742][ T5824] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  336.309592][ T5824] usb 4-1: Using ep0 maxpacket: 16
[  336.334956][ T5824] usb 4-1: unable to get BOS descriptor or descriptor too short
[  336.353805][ T5824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  336.368247][ T5824] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  336.395493][ T5824] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  336.405145][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.416912][ T5824] usb 4-1: Product: syz
[  336.421148][ T5824] usb 4-1: Manufacturer: syz
[  336.432380][ T5824] usb 4-1: SerialNumber: syz
[  336.613661][T11300] netlink: 'syz.2.2162': attribute type 3 has an invalid length.
[  336.678178][ T5824] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  336.709771][ T5824] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  336.903119][T11308] loop2: detected capacity change from 0 to 256
[  337.093943][ T5824] usb 4-1: 2:1 : can't get Cluster Descriptor
[  337.382258][    T9] usb 4-1: USB disconnect, device number 16
[  337.732493][T11326] loop0: detected capacity change from 0 to 16
[  337.746310][T11326] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  338.052292][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms
[  338.060390][    C1] lec:lec_tx_timeout: lec0
[  338.065283][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  339.570726][T11354] loop1: detected capacity change from 0 to 32768
[  339.627393][T11354] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  339.811851][T11333] loop2: detected capacity change from 0 to 32768
[  339.873903][T11333] (syz.2.2177,11333,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  339.896856][T11354] XFS (loop1): Ending clean mount
[  339.920784][T11354] XFS (loop1): Quotacheck needed: Please wait.
[  339.977720][T11333] (syz.2.2177,11333,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  340.074312][T11354] XFS (loop1): Quotacheck: Done.
[  340.355899][T11333] JBD2: Ignoring recovery information on journal
[  340.375977][ T5788] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  340.510562][T11333] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  340.600615][T11333] (syz.2.2177,11333,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  340.856647][T11390] (syz.2.2177,11390,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  340.931335][T11390] (syz.2.2177,11390,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  341.003208][T11390] (syz.2.2177,11390,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  341.035965][T11390] (syz.2.2177,11390,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  341.081192][T11390] (syz.2.2177,11390,1):ocfs2_quota_read:201 ERROR: status = -5
[  341.109398][T11390] __quota_error: 28 callbacks suppressed
[  341.109418][T11390] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6
[  341.162505][T11390] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  341.175806][T11390] (syz.2.2177,11390,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  341.187271][T11390] (syz.2.2177,11390,1):ocfs2_mknod:314 ERROR: status = -5
[  341.202999][T11390] (syz.2.2177,11390,1):ocfs2_mknod:502 ERROR: status = -5
[  341.210184][T11390] (syz.2.2177,11390,1):ocfs2_mkdir:659 ERROR: status = -5
[  341.447914][ T5784] ocfs2: Unmounting device (7,2) on (node local)
[  341.554877][T11402] loop0: detected capacity change from 0 to 512
[  341.623912][T11402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.691628][T11404] loop3: detected capacity change from 0 to 1024
[  341.704010][T11402] ext4 filesystem being mounted at /529/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  341.791078][T11402] EXT4-fs (loop0): shut down requested (1)
[  341.889378][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.249328][T11417] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2208'.
[  342.370763][T11419] loop2: detected capacity change from 0 to 1024
[  342.371187][T11421] loop1: detected capacity change from 0 to 256
[  342.483501][T11421] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  342.504504][T11423] loop0: detected capacity change from 0 to 256
[  342.536920][T11423] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  342.898225][T11427] loop0: detected capacity change from 0 to 256
[  342.949257][   T28] audit: type=1800 audit(2000000085.314:111): pid=11427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2213" name="file1" dev="loop0" ino=1048695 res=0 errno=0
[  342.962684][T11427] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  343.034988][T11427] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  343.072000][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  343.080072][    C1] lec:lec_tx_timeout: lec0
[  343.084872][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  343.163155][T11436] loop3: detected capacity change from 0 to 16
[  343.180547][T11432] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  343.206235][T11436] erofs: (device loop3): mounted with root inode @ nid 36.
[  343.321855][T11436] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  343.621466][T11440] loop0: detected capacity change from 0 to 2048
[  343.716856][T11440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.770255][T11440] ext4 filesystem being mounted at /534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  343.874512][T11440] fs-verity (loop0, inode 18): Unknown hash algorithm number: 29
[  343.999584][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.429494][T11468] loop0: detected capacity change from 0 to 1024
[  344.451411][T11468] EXT4-fs: Ignoring removed orlov option
[  344.504748][T11468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.642156][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  344.750755][T11478] loop1: detected capacity change from 0 to 64
[  344.786149][T11480] loop3: detected capacity change from 0 to 512
[  344.844349][    T9] usb 3-1: Using ep0 maxpacket: 32
[  344.855090][    T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  344.888325][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.960008][    T9] usb 3-1: config 0 descriptor??
[  345.095844][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.153464][T11482] loop3: detected capacity change from 0 to 128
[  345.180248][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  345.193787][T11482] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  345.243032][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  345.256405][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  345.256444][    T9] usb 3-1: media controller created
[  345.280657][T11482] ext4 filesystem being mounted at /569/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  345.361296][T11482] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes
[  345.380612][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  345.479043][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  345.512081][    T9] az6027: usb out operation failed. (-71)
[  345.544830][    T9] az6027: usb out operation failed. (-71)
[  345.566891][    T9] stb0899_attach: Driver disabled by Kconfig
[  345.602924][    T9] az6027: no front-end attached
[  345.602924][    T9] 
[  345.620825][    T9] az6027: usb out operation failed. (-71)
[  345.648107][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  345.674567][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21
[  345.699389][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  345.709351][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  345.755723][    T9] usb 3-1: USB disconnect, device number 15
[  345.912136][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  346.295836][T11503] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  346.341743][T11503] EXT4-fs (loop0): orphan cleanup on readonly fs
[  346.384353][T11503] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated!
[  346.422532][T11503] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  346.476434][T11503] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2244: Failed to acquire dquot type 1
[  346.515130][T11503] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2244: bg 0: block 40: padding at end of block bitmap is not set
[  346.569716][T11503] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  346.587013][T11503] EXT4-fs (loop0): 1 truncate cleaned up
[  346.613942][T11503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  346.733529][T11503] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  346.872458][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.399446][T11529] set_capacity_and_notify: 2 callbacks suppressed
[  347.399464][T11529] loop1: detected capacity change from 0 to 1024
[  347.445473][T11532] futex_wake_op: syz.0.2256 tries to shift op by 144; fix this program
[  347.452021][T11529] EXT4-fs: Ignoring removed orlov option
[  347.516804][T11529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.631296][T11542] loop0: detected capacity change from 0 to 128
[  347.717314][T11544] loop3: detected capacity change from 0 to 16
[  347.764014][T11544] erofs: (device loop3): mounted with root inode @ nid 36.
[  347.785689][   T28] audit: type=1800 audit(2000000090.165:112): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2259" name="file1" dev="loop3" ino=86 res=0 errno=0
[  348.039315][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.091738][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  348.099909][    C1] lec:lec_tx_timeout: lec0
[  348.104610][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  348.226901][T11553] loop2: detected capacity change from 0 to 64
[  348.263663][T11553] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  348.710871][ T5841] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  348.821517][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'.
[  348.902503][ T5841] usb 4-1: Using ep0 maxpacket: 16
[  348.922506][T11559] loop0: detected capacity change from 0 to 32768
[  348.966330][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.985304][T11559] JBD2: Ignoring recovery information on journal
[  349.020343][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.089941][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  349.118367][T11559] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  349.161741][ T5841] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  349.192748][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.246739][ T5841] usb 4-1: config 0 descriptor??
[  349.331823][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  349.441191][T11559] syz.0.2267 (11559) used greatest stack depth: 17784 bytes left
[  349.511120][T11585] loop1: detected capacity change from 0 to 1024
[  349.520706][ T5776] ocfs2: Unmounting device (7,0) on (node local)
[  349.531434][T11585] EXT4-fs: Ignoring removed orlov option
[  349.550245][T11585] EXT4-fs: Ignoring removed oldalloc option
[  349.556509][    T9] usb 3-1: Using ep0 maxpacket: 16
[  349.562670][T11585] EXT4-fs: Ignoring removed orlov option
[  349.572931][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  349.602511][    T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.631795][    T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.655311][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  349.665418][T11585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  349.675613][    T9] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  349.688501][T11585] System zones: 0-1, 3-12
[  349.701404][T11585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.715335][ T5841] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  349.723517][ T5841] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max
[  349.726902][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.742417][ T5841] microsoft 0003:045E:07DA.000F: No inputs registered, leaving
[  349.752622][ T5841] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  349.764173][ T5841] microsoft 0003:045E:07DA.000F: no inputs found
[  349.770553][ T5841] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway
[  349.795545][    T9] usb 3-1: config 0 descriptor??
[  349.817801][T11585] EXT4-fs error (device loop1): __ext4_new_inode:1290: comm syz.1.2279: failed to insert inode 12: doubly allocated?
[  349.966714][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.050031][ T5823] usb 4-1: USB disconnect, device number 17
[  350.103917][T11588] fido_id[11588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  350.213812][T11594] loop0: detected capacity change from 0 to 256
[  350.286432][    T9] glorious 0003:258A:0033.0010: unknown main item tag 0x0
[  350.300798][    T9] glorious 0003:258A:0033.0010: unknown main item tag 0x0
[  350.310905][    T9] glorious 0003:258A:0033.0010: unknown main item tag 0x2
[  350.320374][    T9] glorious 0003:258A:0033.0010: unknown main item tag 0x0
[  350.328205][    T9] glorious 0003:258A:0033.0010: unknown main item tag 0x0
[  350.336013][    T9] glorious 0003:258A:0033.0010: unknown main item tag 0x0
[  350.352789][    T9] glorious 0003:258A:0033.0010: unknown main item tag 0x0
[  350.370498][    T9] glorious 0003:258A:0033.0010: item fetching failed at offset 10/40
[  350.391285][    T9] glorious: probe of 0003:258A:0033.0010 failed with error -22
[  350.521408][ T3066] usb 3-1: USB disconnect, device number 16
[  350.550182][T11596] loop1: detected capacity change from 0 to 4096
[  351.459942][T11604] loop0: detected capacity change from 0 to 32768
[  351.694211][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2295'.
[  352.538092][T11650] loop3: detected capacity change from 0 to 128
[  352.578453][T11650] hpfs: hpfs_map_sector(): read error
[  352.949153][T11661] loop3: detected capacity change from 0 to 16
[  352.974525][T11661] erofs: (device loop3): mounted with root inode @ nid 36.
[  352.994791][T11661] erofs: (device loop3): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000
[  353.111578][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  353.119692][    C1] lec:lec_tx_timeout: lec0
[  353.124489][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  353.768828][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2319'.
[  353.850806][T11674] loop2: detected capacity change from 0 to 256
[  353.900212][T11674] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  354.009819][   T28] audit: type=1800 audit(2000000096.385:113): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2320" name="file1" dev="loop2" ino=1048697 res=0 errno=0
[  354.183201][T11678] loop1: detected capacity change from 0 to 512
[  354.218626][T11678] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2322: iget: bad i_size value: 38620345925642
[  354.269081][T11678] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2322: couldn't read orphan inode 15 (err -117)
[  354.300022][T11678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.369109][T11684] loop2: detected capacity change from 0 to 256
[  354.400817][T11684] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  354.437961][T11684] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  354.489211][T11678] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2322: bg 0: block 5: invalid block bitmap
[  354.565060][T11678] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  354.629401][T11678] EXT4-fs (loop1): This should not happen!! Data will be lost
[  354.629401][T11678] 
[  354.664265][T11678] EXT4-fs (loop1): Total free blocks count 0
[  354.701468][T11678] EXT4-fs (loop1): Free/Dirty block details
[  354.712048][T11678] EXT4-fs (loop1): free_blocks=0
[  354.726214][T11678] EXT4-fs (loop1): dirty_blocks=4
[  354.736297][T11678] EXT4-fs (loop1): Block reservation details
[  354.752036][T11678] EXT4-fs (loop1): i_reserved_data_blocks=4
[  354.892845][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.973483][T11692] loop3: detected capacity change from 0 to 4096
[  355.022821][T11692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  355.061670][T11694] pimreg0: tun_chr_ioctl cmd 35111
[  355.236927][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.360858][T11683] loop0: detected capacity change from 0 to 32768
[  355.478894][T11683] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  355.568635][T11710] nbd0: detected capacity change from 0 to 63
[  355.630600][   T51] block nbd0: Receive control failed (result -32)
[  355.659357][   T55] block nbd0: Dead connection, failed to find a fallback
[  355.668192][   T55] block nbd0: shutting down sockets
[  355.675601][   T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.686699][   T55] Buffer I/O error on dev nbd0, logical block 0, async page read
[  355.713112][   T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  355.723804][   T55] Buffer I/O error on dev nbd0, logical block 1, async page read
[  355.731879][   T55] Buffer I/O error on dev nbd0, logical block 2, async page read
[  355.740462][   T55] Buffer I/O error on dev nbd0, logical block 3, async page read
[  355.754182][   T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  355.763502][   T55] Buffer I/O error on dev nbd0, logical block 0, async page read
[  355.772373][   T55] Buffer I/O error on dev nbd0, logical block 1, async page read
[  355.780246][   T55] Buffer I/O error on dev nbd0, logical block 2, async page read
[  355.788157][   T55] Buffer I/O error on dev nbd0, logical block 3, async page read
[  355.796302][   T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  355.805955][   T55] Buffer I/O error on dev nbd0, logical block 0, async page read
[  355.813990][   T55] Buffer I/O error on dev nbd0, logical block 1, async page read
[  355.822317][   T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  355.832999][   T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  355.842478][   T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  355.852327][   T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.861632][   T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.870931][   T55] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  355.880460][T10989] ldm_validate_partition_table(): Disk read failed.
[  355.889213][T10989] Dev nbd0: unable to read RDB block 0
[  355.896968][T10989]  nbd0: unable to read partition table
[  355.914543][T10989] ldm_validate_partition_table(): Disk read failed.
[  355.923272][T10989] Dev nbd0: unable to read RDB block 0
[  355.933934][T10989]  nbd0: unable to read partition table
[  356.072318][T11683] XFS (loop0): Ending clean mount
[  356.107111][T11721] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2337'.
[  356.136764][T11683] XFS (loop0): Quotacheck needed: Please wait.
[  356.194489][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'.
[  356.255301][T11725] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[  356.257856][T11683] XFS (loop0): Quotacheck: Done.
[  356.492705][ T5776] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  357.284757][T11733] loop3: detected capacity change from 0 to 32768
[  357.313369][T11733] JBD2: Ignoring recovery information on journal
[  357.460726][T11733] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  357.994023][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  358.131264][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  358.139344][    C1] lec:lec_tx_timeout: lec0
[  358.197185][T11764] retu-mfd 0-0001: could not read Retu revision: -5
[  358.229431][T11764] retu-mfd: probe of 0-0001 failed with error -5
[  358.262170][T11764] i2c i2c-0: new_device: Instantiated device retu at 0x01
[  358.627490][T11779] loop2: detected capacity change from 0 to 1024
[  358.675804][T11779] EXT4-fs: Ignoring removed nomblk_io_submit option
[  358.749781][T11779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.953232][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.113744][T11791] loop1: detected capacity change from 0 to 1024
[  359.140129][T11793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2366'.
[  359.236482][T11791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  359.260562][T11791] ext4 filesystem being mounted at /609/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  359.416036][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  359.627146][T11804] loop2: detected capacity change from 0 to 1024
[  359.658586][T11804] EXT4-fs error (device loop2): __ext4_fill_super:5517: comm syz.2.2370: inode #2: comm syz.2.2370: iget: illegal inode #
[  359.681601][T11804] EXT4-fs (loop2): get root inode failed
[  359.687553][T11804] EXT4-fs (loop2): mount failed
[  360.441498][T11823] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.449522][T11823] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.665829][T11830] syzkaller1: tun_chr_ioctl cmd 1074025673
[  360.701331][ T5823] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  360.893449][ T5823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  360.921163][ T5823] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  360.974161][ T5823] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  360.991034][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.999271][ T5823] usb 4-1: Product: syz
[  361.021063][ T5823] usb 4-1: Manufacturer: syz
[  361.025729][ T5823] usb 4-1: SerialNumber: syz
[  361.094741][T11836] loop2: detected capacity change from 0 to 16
[  361.125194][T11836] erofs: (device loop2): mounted with root inode @ nid 36.
[  361.180008][T11836] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  361.285207][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.310625][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.361151][ T5823] cdc_ether: probe of 4-1:1.0 failed with error -22
[  361.394598][ T5823] usb 4-1: USB disconnect, device number 18
[  362.041451][ T5823] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  362.220531][T11857] loop1: detected capacity change from 0 to 512
[  362.241428][ T5823] usb 4-1: Using ep0 maxpacket: 8
[  362.255225][ T5823] usb 4-1: config index 0 descriptor too short (expected 301, got 72)
[  362.273423][T11857] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  362.289899][ T5823] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  362.323643][ T5823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.336353][T11857] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  362.361551][ T5823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  362.391360][T11857] EXT4-fs (loop1): orphan cleanup on readonly fs
[  362.425244][ T5823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  362.435881][T11857] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.2393: Allocating blocks 41-42 which overlap fs metadata
[  362.465895][ T5823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.485496][T11857] EXT4-fs (loop1): Remounting filesystem read-only
[  362.492440][T11857] Quota error (device loop1): write_blk: dquota write failed
[  362.500061][T11857] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  362.511292][T11857] EXT4-fs (loop1): 1 truncate cleaned up
[  362.517206][ T5823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  362.517848][T11857] EXT4-fs (loop1): pa ffff888078acf488: logic 1, phys. 41, len 23
[  362.536331][T11857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  362.554490][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.710751][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.795912][ T5823] usb 4-1: usb_control_msg returned -71
[  362.811245][ T5823] usbtmc 4-1:16.0: can't read capabilities
[  362.863475][ T5823] usb 4-1: USB disconnect, device number 19
[  362.974357][T11874] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  363.267134][T11884] loop2: detected capacity change from 0 to 512
[  363.313215][T11884] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.2404: bad orphan inode 15
[  363.361031][T11890] team0: No ports can be present during mode change
[  363.382355][T11884] ext4_test_bit(bit=14, block=5) = 0
[  363.418627][T11884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.449897][T11892] loop0: detected capacity change from 0 to 1024
[  363.480115][T11892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  363.535703][T11896] block nbd3: not configured, cannot reconfigure
[  363.613938][T11892] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.651707][T11884] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.2404: reserved inode found cleared - inode=1
[  363.764605][T11892] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.2408: lblock 3 mapped to illegal pblock 3 (length 2)
[  363.796512][T11892] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.2408: lblock 0 mapped to illegal pblock 0 (length 3)
[  363.829708][T11892] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  363.842440][T11892] EXT4-fs (loop0): This should not happen!! Data will be lost
[  363.842440][T11892] 
[  363.888741][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.901594][   T49] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:3: lblock 4 mapped to illegal pblock 4 (length 1)
[  363.927090][   T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117
[  363.940166][   T49] EXT4-fs (loop0): This should not happen!! Data will be lost
[  363.940166][   T49] 
[  364.011531][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  364.455771][T11914] loop0: detected capacity change from 0 to 512
[  364.507057][T11914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.575340][T11914] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.814834][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.227271][T11910] loop2: detected capacity change from 0 to 32768
[  365.287284][T11910] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  365.436304][T11910] XFS (loop2): Ending clean mount
[  365.454080][T11944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2426'.
[  365.589914][ T5784] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  365.615107][T11948] loop1: detected capacity change from 0 to 8
[  365.837452][    T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  366.053241][    T9] usb 4-1: config 0 has no interfaces?
[  366.066569][    T9] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  366.097899][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.110468][    T9] usb 4-1: Product: syz
[  366.126007][    T9] usb 4-1: Manufacturer: syz
[  366.136815][    T9] usb 4-1: SerialNumber: syz
[  366.154657][    T9] usb 4-1: config 0 descriptor??
[  366.368525][T11962] netlink: 'syz.2.2435': attribute type 11 has an invalid length.
[  366.378265][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2435'.
[  366.398842][ T5824] usb 4-1: USB disconnect, device number 20
[  366.458059][T11954] loop1: detected capacity change from 0 to 32768
[  366.495945][T11954] JBD2: Ignoring recovery information on journal
[  366.559058][T11954] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  366.629292][T11968] team_slave_0: entered promiscuous mode
[  366.835034][T11972] loop2: detected capacity change from 0 to 128
[  366.863130][T11972] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  366.875332][ T5788] ocfs2: Unmounting device (7,1) on (node local)
[  366.892236][T11972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  367.249870][T11981] loop1: detected capacity change from 0 to 2048
[  367.288649][T11981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.310466][T11981] ext4 filesystem being mounted at /630/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  367.405999][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.734256][T11996] loop2: detected capacity change from 0 to 1024
[  368.229513][T12010] loop3: detected capacity change from 0 to 1024
[  368.337582][ T6906] hfsplus: b-tree write err: -5, ino 25
[  368.357138][ T6906] hfsplus: b-tree write err: -5, ino 4
[  368.366402][ T6906] hfsplus: b-tree write err: -5, ino 2
[  368.466160][T12014] loop3: detected capacity change from 0 to 1024
[  368.628132][T12016] loop1: detected capacity change from 0 to 128
[  368.804810][T12002] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  368.892038][T12002] XFS (loop2): Ending clean mount
[  368.977592][T12028] overlayfs: upper fs does not support tmpfile.
[  369.158392][ T5784] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  369.475193][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.521987][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.543207][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.570361][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.598272][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.620723][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.639897][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.659666][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.679425][T12035] batman_adv: batadv0: Adding interface: vlan2
[  369.686042][T12035] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.727365][T12035] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  369.770261][T12037] set_capacity_and_notify: 2 callbacks suppressed
[  369.770280][T12037] loop1: detected capacity change from 0 to 4096
[  369.876498][T12040] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  370.446402][T12055] mmap: syz.3.2471 (12055) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  370.551214][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'.
[  370.586899][T12061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.763306][T12061] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.149929][T12071] loop2: detected capacity change from 0 to 4096
[  371.275829][T12078] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  371.420455][T12071] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 1882 already freed
[  371.438143][T12063] loop0: detected capacity change from 0 to 32768
[  371.457304][T12071] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean
[  371.504026][T12063] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  371.645954][T12063] XFS (loop0): Ending clean mount
[  371.827817][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  372.327932][T12102] loop0: detected capacity change from 0 to 512
[  372.348937][T12104] program syz.3.2492 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  372.492453][T12102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.544198][T12102] ext4 filesystem being mounted at /587/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  372.558645][T12111] loop1: detected capacity change from 0 to 128
[  372.609320][T12111] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  372.648036][T12102] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2488: corrupted inode contents
[  372.684259][T12102] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #2: comm syz.0.2488: mark_inode_dirty error
[  372.696232][T12111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  372.716857][T12102] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2488: corrupted inode contents
[  372.766322][T12113] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.2488: corrupted inode contents
[  372.784886][ T3066] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  372.905109][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.978532][ T3066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.023226][ T3066] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  373.043926][ T3066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.071330][ T3066] usb 4-1: Product: syz
[  373.075581][ T3066] usb 4-1: Manufacturer: syz
[  373.080217][ T3066] usb 4-1: SerialNumber: syz
[  373.119520][ T3066] usb 4-1: config 0 descriptor??
[  373.149580][ T3066] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  373.199648][T12121] loop1: detected capacity change from 0 to 128
[  373.334514][T12125] loop2: detected capacity change from 0 to 128
[  373.770526][T12136] tun0: tun_chr_ioctl cmd 2147767511
[  373.984684][ T3066] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  373.994420][ T3066] gspca_pac7302: probe of 4-1:0.0 failed with error -71
[  374.018279][ T3066] usb 4-1: USB disconnect, device number 21
[  374.270350][ T5841] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  374.450403][ T5841] usb 2-1: Using ep0 maxpacket: 8
[  374.458367][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  374.469943][ T5841] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  374.479133][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.490132][ T5841] usb 2-1: config 0 descriptor??
[  374.503210][ T5841] gspca_main: vc032x-2.14.0 probing 046d:0892
[  374.609143][T12151] loop3: detected capacity change from 0 to 1024
[  374.850787][ T3066] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  374.991694][T12159] loop0: detected capacity change from 0 to 1024
[  375.002121][T12159] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  375.048907][T12159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.051192][ T3066] usb 3-1: Using ep0 maxpacket: 16
[  375.062170][T12159] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.089656][T12159] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2514: bg 0: block 112: padding at end of block bitmap is not set
[  375.144352][ T3066] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  375.177147][ T3066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  375.215675][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  375.253777][ T3066] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  375.276742][ T3066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.317828][ T3066] usb 3-1: config 0 descriptor??
[  375.351575][ T5841] gspca_vc032x: reg_w err -71
[  375.356488][ T5841] vc032x: probe of 2-1:0.0 failed with error -71
[  375.403271][ T5841] usb 2-1: USB disconnect, device number 13
[  375.523982][T12167] bond1: option ad_user_port_key: invalid value (65535)
[  375.535337][T12167] bond1: option ad_user_port_key: allowed values 0 - 1023
[  375.558108][T12167] bond1 (unregistering): Released all slaves
[  375.783320][ T3066] logitech-hidpp-device 0003:046D:C262.0011: unknown main item tag 0x5
[  375.801906][ T3066] logitech-hidpp-device 0003:046D:C262.0011: unknown main item tag 0x5
[  375.818816][ T3066] logitech-hidpp-device 0003:046D:C262.0011: item fetching failed at offset 38/40
[  375.839931][ T3066] logitech-hidpp-device 0003:046D:C262.0011: hidpp_probe:parse failed
[  375.848848][ T3066] logitech-hidpp-device: probe of 0003:046D:C262.0011 failed with error -22
[  376.024802][T12176] loop3: detected capacity change from 0 to 256
[  376.053192][    T9] usb 3-1: USB disconnect, device number 17
[  376.614936][T12174] loop0: detected capacity change from 0 to 32768
[  376.694507][T12174] JFS: Invalid stbl[0] = -1 for inode 2, block = 0
[  376.905603][T12194] loop3: detected capacity change from 0 to 4096
[  376.986968][T12197] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  377.095608][T12194] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 1882 already freed
[  377.118656][T12194] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  377.428069][ T6537] lec:lec_start_xmit: lec0:No lecd attached
[  377.871684][T12190] loop1: detected capacity change from 0 to 40427
[  377.889379][T12190] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff
[  377.929546][T12190] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4
[  377.959259][T12190] F2FS-fs (loop1): invalid crc value
[  378.012867][T12190] F2FS-fs (loop1): Found nat_bits in checkpoint
[  378.022763][T12196] loop0: detected capacity change from 0 to 40427
[  378.072615][T12196] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  378.079660][T12196] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  378.137603][T12196] F2FS-fs (loop0): invalid crc value
[  378.171890][T12190] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  378.183462][T12196] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  378.264462][T12196] F2FS-fs (loop0): Found nat_bits in checkpoint
[  378.288777][T12190] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  378.435631][T12190] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  378.510181][T12199] loop2: detected capacity change from 0 to 40427
[  378.525372][T12199] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  378.535972][T12190] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x634/0x7f0
[  378.585878][T12199] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  378.624903][T12196] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  378.632538][T12199] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  378.641893][T12196] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  378.668595][T12199] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  378.685501][ T5788] syz-executor: attempt to access beyond end of device
[  378.685501][ T5788] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  378.720452][T12199] F2FS-fs (loop2): Image doesn't support compression
[  378.732286][T12199] F2FS-fs (loop2): invalid crc value
[  378.756021][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  378.772202][T12199] F2FS-fs (loop2): Found nat_bits in checkpoint
[  378.783048][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  378.789397][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  378.883293][ T5776] syz-executor: attempt to access beyond end of device
[  378.883293][ T5776] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  378.921471][ T5776] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  379.000746][T12199] F2FS-fs (loop2): Start checkpoint disabled!
[  379.072204][T12199] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  379.089629][T12199] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  379.129700][T12206] loop3: detected capacity change from 0 to 32768
[  379.239020][T12206] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  379.283215][T12199] F2FS-fs (loop2): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0
[  379.378270][T12199] syz.2.2533: attempt to access beyond end of device
[  379.378270][T12199] loop2: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  379.574004][T12206] XFS (loop3): Ending clean mount
[  379.760882][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  379.783488][ T6919] kworker/u4:19: attempt to access beyond end of device
[  379.783488][ T6919] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  379.830537][ T6919] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  379.837725][ T6919] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  380.632131][T12239] loop3: detected capacity change from 0 to 128
[  380.859932][ T5841] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  380.977518][ T6906] Bluetooth: hci4: Frame reassembly failed (-84)
[  380.998358][T12247] Bluetooth: hci4: Frame reassembly failed (-84)
[  381.021907][ T6906] Bluetooth: hci4: Frame reassembly failed (-84)
[  381.064046][ T5841] usb 2-1: Using ep0 maxpacket: 16
[  381.086608][ T5841] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.099988][ T5841] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.134727][ T5841] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  381.158191][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0
[  381.180307][ T5841] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  381.196827][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.226015][ T5841] usb 2-1: config 0 descriptor??
[  381.312233][T12251] loop0: detected capacity change from 0 to 4096
[  381.371445][T12252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  381.478444][T12251] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 1882 already freed
[  381.498122][T12251] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[  381.624113][T12244] loop2: detected capacity change from 0 to 40427
[  381.651268][T12244] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  381.657759][T12244] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  381.695389][T12244] F2FS-fs (loop2): invalid crc_offset: 1
[  381.921969][T12244] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  381.929147][T12244] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  381.944371][ T5841] usb 2-1: USB disconnect, device number 14
[  382.065316][T12244] syz.2.2543: attempt to access beyond end of device
[  382.065316][T12244] loop2: rw=2049, sector=53248, nr_sectors = 32 limit=40427
[  382.200703][T12257] loop0: detected capacity change from 0 to 32768
[  382.231742][ T5784] syz-executor: attempt to access beyond end of device
[  382.231742][ T5784] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  382.262722][T12257] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  382.273173][ T5784] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  382.315342][T12257] XFS (loop0): Ending clean mount
[  382.442539][ T5776] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  382.899959][ T5823] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  383.009978][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms
[  383.010665][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  383.018033][    C1] lec:lec_tx_timeout: lec0
[  383.020274][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  383.100493][ T5823] usb 2-1: Using ep0 maxpacket: 32
[  383.111470][ T5823] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  383.129483][ T5823] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  383.138849][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  383.147104][ T5823] usb 2-1: Product: syz
[  383.151420][ T5823] usb 2-1: Manufacturer: syz
[  383.156062][ T5823] usb 2-1: SerialNumber: syz
[  383.163978][ T5823] usb 2-1: config 0 descriptor??
[  383.170106][T12269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  383.178753][ T5823] hub 2-1:0.0: bad descriptor, ignoring hub
[  383.184843][ T5823] hub: probe of 2-1:0.0 failed with error -5
[  383.305842][   T28] audit: type=1107 audit(2000000125.687:114): pid=12278 uid=0 auid=0 ses=1 subj=unconfined msg=''
[  383.391126][T12283] loop2: detected capacity change from 0 to 128
[  383.570781][ T5823] usb 2-1: USB disconnect, device number 15
[  383.928407][T12297] loop2: detected capacity change from 0 to 4096
[  383.947630][T12297] EXT4-fs: Ignoring removed nomblk_io_submit option
[  383.955669][T12297] EXT4-fs (loop2): Test dummy encryption mode enabled
[  383.989154][T12297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.272107][T12297] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  384.359465][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.734851][T12319] loop1: detected capacity change from 0 to 4096
[  384.785286][T12323] loop2: detected capacity change from 0 to 4096
[  384.818012][T12319] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  384.840975][T12324] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  384.942018][T12319] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  385.096779][   T28] audit: type=1800 audit(2000000127.477:115): pid=12319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2569" name="file1" dev="loop1" ino=30 res=0 errno=0
[  385.183304][T12319] ntfs3: loop1: ino=1e, "file1" attr_set_size
[  385.399396][T12321] loop3: detected capacity change from 0 to 32768
[  385.454959][T12321] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  385.617283][T12321] XFS (loop3): Ending clean mount
[  385.785732][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  386.189356][T12349] program syz.0.2579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  386.309865][T12352] program syz.1.2580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  386.648153][T12358] loop2: detected capacity change from 0 to 2048
[  386.732819][T12358]  loop2: p1 < > p4
[  386.732819][T12358]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[  386.761260][T12358] loop2: p4 size 722688 extends beyond EOD, truncated
[  386.782000][T12358] loop2: p6 start 262464109 is beyond EOD, truncated
[  386.788769][T12358] loop2: p7 size 2304 extends beyond EOD, truncated
[  387.157125][T12356] loop1: detected capacity change from 0 to 32768
[  387.212980][T12356] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  387.433104][T12356] XFS (loop1): Ending clean mount
[  387.460693][T12356] XFS (loop1): Quotacheck needed: Please wait.
[  387.533153][T12356] XFS (loop1): Quotacheck: Done.
[  387.622338][T12356] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  387.671075][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  388.049507][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  388.057640][    C1] lec:lec_tx_timeout: lec0
[  388.631369][T12391] loop1: detected capacity change from 0 to 1024
[  388.727719][T12394] loop3: detected capacity change from 0 to 256
[  388.750941][T12394] exfat: Deprecated parameter 'namecase'
[  388.756713][T12394] exfat: Deprecated parameter 'utf8'
[  388.817238][T12394] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24d8a7, utbl_chksum : 0xe619d30d)
[  389.159683][T12403] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  389.167148][T12403] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  389.184218][T12405] loop2: detected capacity change from 0 to 2048
[  389.225218][T12408] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  389.538225][T12416] loop1: detected capacity change from 0 to 256
[  389.591374][T12416] exfat: Deprecated parameter 'namecase'
[  389.620429][T12418] loop2: detected capacity change from 0 to 512
[  389.638910][T12416] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[  389.663714][T12418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  389.702855][T12418] EXT4-fs (loop2): 1 truncate cleaned up
[  389.710779][T12418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.035385][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.085735][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2614'.
[  390.976464][T12442] loop3: detected capacity change from 0 to 40427
[  390.992223][T12442] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  391.014173][T12442] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  391.043689][T12442] F2FS-fs (loop3): invalid crc value
[  391.113715][T12442] F2FS-fs (loop3): Found nat_bits in checkpoint
[  391.321225][T12442] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  391.328353][T12442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  391.435754][T12452] loop2: detected capacity change from 0 to 8192
[  391.548961][T12442] F2FS-fs (loop3): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  391.620525][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  391.639138][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  391.650826][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  391.681332][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  391.694435][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  391.709648][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  392.115418][T12458] loop0: detected capacity change from 0 to 40427
[  392.165265][T12458] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  392.181147][T12458] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  392.226079][T12466] loop2: detected capacity change from 0 to 64
[  392.234854][T12458] F2FS-fs (loop0): invalid crc_offset: 1
[  392.394175][T12456] chnl_net:caif_netlink_parms(): no params data found
[  392.679488][T12458] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  392.711733][T12458] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  392.816456][T12456] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.837701][T12456] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.851029][T12456] bridge_slave_0: entered allmulticast mode
[  392.858913][T12456] bridge_slave_0: entered promiscuous mode
[  392.882620][T12456] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.899363][T12456] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.919821][T12456] bridge_slave_1: entered allmulticast mode
[  392.926051][T12458] syz.0.2624: attempt to access beyond end of device
[  392.926051][T12458] loop0: rw=2049, sector=53248, nr_sectors = 32 limit=40427
[  392.954438][T12456] bridge_slave_1: entered promiscuous mode
[  393.048885][T12456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.067372][T12456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.078428][ T5776] syz-executor: attempt to access beyond end of device
[  393.078428][ T5776] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  393.101753][ T5776] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  393.167636][T12456] team0: Port device team_slave_0 added
[  393.185524][T12456] team0: Port device team_slave_1 added
[  393.233810][T12456] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.246547][T12456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.282298][T12456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.313317][T12456] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.323728][T12456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.357803][T12456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.447890][T12456] hsr_slave_0: entered promiscuous mode
[  393.484064][T12456] hsr_slave_1: entered promiscuous mode
[  393.539901][T12456] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  393.548066][T12456] Cannot create hsr debugfs directory
[  393.601336][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2631'.
[  393.809325][   T51] Bluetooth: hci3: command tx timeout
[  393.829650][T12485] loop2: detected capacity change from 0 to 16
[  393.845232][T12481] loop3: detected capacity change from 0 to 40427
[  393.859562][T12485] erofs: (device loop2): mounted with root inode @ nid 36.
[  393.886116][   T28] audit: type=1800 audit(2000000136.267:116): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2632" name="file1" dev="loop2" ino=86 res=0 errno=0
[  393.938407][T12481] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  393.978796][T12481] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  393.998005][T12481] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  394.051112][T12481] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  394.078216][T12481] F2FS-fs (loop3): Image doesn't support compression
[  394.108006][T12481] F2FS-fs (loop3): invalid crc value
[  394.124123][T12487] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  394.166721][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2633'.
[  394.181893][T12481] F2FS-fs (loop3): Found nat_bits in checkpoint
[  394.205880][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2633'.
[  394.249580][T12489] netlink: 'syz.2.2633': attribute type 6 has an invalid length.
[  394.380201][T12481] F2FS-fs (loop3): Start checkpoint disabled!
[  394.476519][T12481] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  394.487526][T12456] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  394.499161][T12481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  394.555703][T12456] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  394.580774][T12496] loop2: detected capacity change from 0 to 512
[  394.593223][T12456] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  394.632791][T12481] F2FS-fs (loop3): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0
[  394.660795][T12456] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  394.667311][T12481] syz.3.2629: attempt to access beyond end of device
[  394.667311][T12481] loop3: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  394.687174][T12496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.756092][T12496] ext4 filesystem being mounted at /671/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  395.021183][T12456] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.030175][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.087135][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'.
[  395.113447][T12456] 8021q: adding VLAN 0 to HW filter on device team0
[  395.121274][ T6919] kworker/u4:19: attempt to access beyond end of device
[  395.121274][ T6919] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  395.127329][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2640'.
[  395.181089][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.188252][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.199241][ T6919] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  395.206212][ T6919] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  395.298052][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.305294][ T6921] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.488953][T12456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  395.556064][T12510] loop0: detected capacity change from 0 to 64
[  395.703377][T12510] syz.0.2641: attempt to access beyond end of device
[  395.703377][T12510] loop0: rw=34817, sector=39, nr_sectors = 30 limit=64
[  395.740264][T12510] syz.0.2641: attempt to access beyond end of device
[  395.740264][T12510] loop0: rw=34817, sector=72, nr_sectors = 2 limit=64
[  395.890551][   T51] Bluetooth: hci3: command tx timeout
[  395.975697][T12510] syz.0.2641: attempt to access beyond end of device
[  395.975697][T12510] loop0: rw=34817, sector=76, nr_sectors = 2041 limit=64
[  396.111318][T12456] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.222666][T12510] syz.0.2641: attempt to access beyond end of device
[  396.222666][T12510] loop0: rw=34817, sector=2117, nr_sectors = 2048 limit=64
[  396.248435][T12510] syz.0.2641: attempt to access beyond end of device
[  396.248435][T12510] loop0: rw=34817, sector=4165, nr_sectors = 6 limit=64
[  396.264037][T12510] syz.0.2641: attempt to access beyond end of device
[  396.264037][T12510] loop0: rw=34817, sector=4172, nr_sectors = 22 limit=64
[  396.602299][T12534] net_ratelimit: 44 callbacks suppressed
[  396.602317][T12534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  396.800322][T12456] veth0_vlan: entered promiscuous mode
[  396.833881][T12456] veth1_vlan: entered promiscuous mode
[  396.958962][T12456] veth0_macvtap: entered promiscuous mode
[  396.994762][T12456] veth1_macvtap: entered promiscuous mode
[  397.046270][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.063593][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.075313][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.102700][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.122507][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.133553][T12544] loop2: detected capacity change from 0 to 256
[  397.140275][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.155140][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.166941][T12544] exfat: Deprecated parameter 'utf8'
[  397.178138][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.199659][T12544] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  397.240463][T12456] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.286419][T12544] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  397.286456][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.347860][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.361049][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.376973][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.387526][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.406201][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.422931][T12456] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.443964][T12456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.461682][T12456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.476041][T12456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.486581][T12456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.782945][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.814238][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.861383][T12537] loop0: detected capacity change from 0 to 40427
[  397.894257][T12548] loop2: detected capacity change from 0 to 64
[  397.904071][T12537] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  397.919796][T12537] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  397.950323][T12537] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  397.969117][   T51] Bluetooth: hci3: command tx timeout
[  397.992309][T12537] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  398.001600][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.035740][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.044720][T12537] F2FS-fs (loop0): Image doesn't support compression
[  398.062245][T12537] F2FS-fs (loop0): invalid crc value
[  398.098940][T12537] F2FS-fs (loop0): Found nat_bits in checkpoint
[  398.399602][T12537] F2FS-fs (loop0): Start checkpoint disabled!
[  398.475932][T12542] loop3: detected capacity change from 0 to 40427
[  398.508558][T12537] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  398.529878][T12542] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff
[  398.538276][T12542] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4
[  398.549057][T12537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  398.600052][T12542] F2FS-fs (loop3): invalid crc value
[  398.652098][T12542] F2FS-fs (loop3): Found nat_bits in checkpoint
[  398.781896][T12537] F2FS-fs (loop0): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0
[  398.794604][T12559] loop2: detected capacity change from 0 to 4096
[  398.824232][T12537] bio_check_eod: 9 callbacks suppressed
[  398.824249][T12537] syz.0.2646: attempt to access beyond end of device
[  398.824249][T12537] loop0: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  398.828078][T12542] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  398.913204][T12559] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  399.016331][T12542] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  399.225124][   T49] kworker/u4:3: attempt to access beyond end of device
[  399.225124][   T49] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  399.249961][T12542] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  399.264530][   T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  399.297342][T12542] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10d/0x1030
[  399.334955][   T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  399.467053][ T5780] syz-executor: attempt to access beyond end of device
[  399.467053][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  399.522039][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  399.655998][T12573] netlink: 4596 bytes leftover after parsing attributes in process `syz.4.2663'.
[  399.699880][T12575] loop2: detected capacity change from 0 to 8
[  399.803460][T12575] SQUASHFS error: Failed to read block 0x26067d: -5
[  399.839644][T12575] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  399.847271][T12575] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  400.059079][   T51] Bluetooth: hci3: command tx timeout
[  400.319288][T12585] loop2: detected capacity change from 0 to 64
[  400.692912][T12589] loop3: detected capacity change from 0 to 4096
[  400.722720][T12589] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  400.796985][T12594] loop0: detected capacity change from 0 to 4096
[  400.813996][T12594] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  400.921267][T12594] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  400.956665][T12594] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  401.055330][   T28] audit: type=1800 audit(2000000143.438:117): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2671" name="file1" dev="loop0" ino=24 res=0 errno=0
[  401.087560][T12594] ntfs3: loop0: ino=5, "/" directory corrupted
[  401.202815][ T5776] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22.
[  401.739069][   T51] block nbd1: Receive control failed (result -32)
[  401.996658][T12613] trusted_key: syz.2.2679 sent an empty control message without MSG_MORE.
[  402.189163][T12597] loop3: detected capacity change from 0 to 32768
[  402.235729][T12597] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  402.262215][T12625] loop4: detected capacity change from 0 to 128
[  402.324008][T12597] XFS (loop3): Ending clean mount
[  402.339364][T12625] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  402.398165][T12625] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  402.459580][   T28] audit: type=1800 audit(2000000144.838:118): pid=12597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2673" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  402.480300][    C0] vkms_vblank_simulate: vblank timer overrun
[  402.647927][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  402.808835][ T3000] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  403.166961][T12637] loop4: detected capacity change from 0 to 512
[  403.217241][T12637] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  403.432704][T12644] Bluetooth: MGMT ver 1.22
[  403.439590][T12637] EXT4-fs error (device loop4): ext4_quota_enable:7140: comm syz.4.2688: Bad quota inum: 2, type: 1
[  403.489369][T12637] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  403.713784][T12653] input: syz1 as /devices/virtual/input/input24
[  403.790056][T12456] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  403.888083][T12659] erspan0: entered promiscuous mode
[  403.895608][   T51] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  403.906387][   T51] Bluetooth: hci2: unexpected event for opcode 0x2062
[  403.986340][T12661] loop0: detected capacity change from 0 to 256
[  404.046946][T12661] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  404.399785][T12671] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2700'.
[  404.429997][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'.
[  405.004978][T12691] loop2: detected capacity change from 0 to 1024
[  405.027937][T12691] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  405.048547][   T51] block nbd2: Receive control failed (result -32)
[  405.138614][T12698] loop4: detected capacity change from 0 to 128
[  405.342335][T12703] loop3: detected capacity change from 0 to 8
[  405.401592][T12703] SQUASHFS error: Failed to read block 0x26067d: -5
[  405.442000][T12703] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  405.467536][T12703] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  405.497299][T12705] loop2: detected capacity change from 0 to 1024
[  405.556880][T12705] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  407.969282][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  407.980185][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  407.990347][ T5783] Bluetooth: hci2: hardware error 0x00
[  408.077302][T12772] loop3: detected capacity change from 0 to 4096
[  408.204483][T12756] loop2: detected capacity change from 0 to 32768
[  408.238590][T12776] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  408.677679][T12780] loop0: detected capacity change from 0 to 2048
[  408.805362][T12780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  408.926952][   T28] audit: type=1800 audit(2000000151.308:119): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2749" name="file1" dev="loop0" ino=1367 res=0 errno=0
[  409.476400][T12805] loop0: detected capacity change from 0 to 1024
[  409.483748][    T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  409.551662][T12805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  409.594716][T12805] ext4 filesystem being mounted at /643/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.627809][T12805] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2760: bg 0: block 112: padding at end of block bitmap is not set
[  409.658470][ T5841] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  409.678739][T12805] EXT4-fs (loop0): Remounting filesystem read-only
[  409.690660][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  409.705602][    T9] usb 5-1: config 0 has no interface number 0
[  409.712630][    T9] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  409.724044][    T9] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.734314][    T9] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  409.747614][    T9] usb 5-1: config 0 interface 1 has no altsetting 0
[  409.754555][    T9] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  409.763923][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.780539][    T9] usb 5-1: config 0 descriptor??
[  409.810040][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  409.870571][ T5841] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  409.892175][ T5841] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  409.909429][ T5841] usb 3-1: config 220 contains an unexpected descriptor of type 0x1, skipping
[  409.923906][ T5841] usb 3-1: config 220 has an invalid descriptor of length 25, skipping remainder of the config
[  409.945471][ T5841] usb 3-1: config 220 has no interface number 2
[  409.952313][ T5841] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  409.976161][ T5841] usb 3-1: config 220 interface 0 has no altsetting 0
[  410.000332][ T5841] usb 3-1: config 220 interface 76 has no altsetting 0
[  410.022983][ T5841] usb 3-1: config 220 interface 1 has no altsetting 0
[  410.048939][ T5783] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  410.059089][ T5841] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  410.068409][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.076445][ T5841] usb 3-1: Product: syz
[  410.081381][ T5841] usb 3-1: Manufacturer: syz
[  410.086031][ T5841] usb 3-1: SerialNumber: syz
[  410.341469][ T5841] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  410.351046][ T5841] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  410.357524][ T5841] usb 3-1: No valid video chain found.
[  410.364467][ T5841] usb 3-1: selecting invalid altsetting 0
[  410.393907][ T5841] usb 3-1: selecting invalid altsetting 0
[  410.412152][ T5841] usbtest: probe of 3-1:220.1 failed with error -22
[  410.428641][ T5841] usb 3-1: USB disconnect, device number 18
[  410.455218][    T9] input: HID 145f:0212 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.0013/input/input27
[  410.653927][    T9] input: HID 145f:0212 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.0013/input/input28
[  410.677463][T12816] loop3: detected capacity change from 0 to 32768
[  410.737383][T12816] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  410.753618][    T9] uclogic 0003:145F:0212.0013: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.4-1/input1
[  410.792383][    T9] usb 5-1: USB disconnect, device number 2
[  410.923343][T12825] fido_id[12825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  411.023682][T12816] XFS (loop3): Ending clean mount
[  411.160116][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  411.834725][T12844] netem: incorrect ge model size
[  411.851679][T12844] netem: change failed
[  412.015520][T12847] loop4: detected capacity change from 0 to 256
[  412.330516][T12858] loop2: detected capacity change from 0 to 128
[  412.359152][T12858] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  412.547182][ T6906] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  412.673152][T12866] loop2: detected capacity change from 0 to 2048
[  412.681071][T12869] vivid-000: disconnect
[  412.735370][T12863] vivid-000: reconnect
[  412.742493][T12866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.862808][T12875] loop3: detected capacity change from 0 to 1024
[  412.881471][T12866] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  412.899359][T12866] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  412.911948][T12866] EXT4-fs (loop2): This should not happen!! Data will be lost
[  412.911948][T12866] 
[  412.924614][T12866] EXT4-fs (loop2): Total free blocks count 0
[  412.936878][T12866] EXT4-fs (loop2): Free/Dirty block details
[  412.954806][T12866] EXT4-fs (loop2): free_blocks=4096
[  412.979850][T12866] EXT4-fs (loop2): dirty_blocks=48
[  412.990888][T12866] EXT4-fs (loop2): Block reservation details
[  413.028187][T12866] EXT4-fs (loop2): i_reserved_data_blocks=3
[  413.243859][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.352531][T12886] overlayfs: upper fs does not support file handles, falling back to index=off.
[  413.372382][T12886] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  413.979833][T12904] loop3: detected capacity change from 0 to 256
[  414.156873][T12907] loop0: detected capacity change from 0 to 256
[  414.772040][T12923] loop3: detected capacity change from 0 to 2048
[  414.821719][T12923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  414.882034][ T5841] kernel write not supported for file /amidi2 (pid: 5841 comm: kworker/1:5)
[  415.605463][T12929] loop2: detected capacity change from 0 to 32768
[  415.735265][T12929] ERROR: (device loop2): dbAllocBits: leaf page corrupt
[  415.735265][T12929] 
[  415.804403][T12929] ERROR: (device loop2): remounting filesystem as read-only
[  415.847575][T12929] ERROR: (device loop2): dbAllocBits: leaf page corrupt
[  415.847575][T12929] 
[  415.875874][ T5789] kernel read not supported for file /swradio8 (pid: 5789 comm: kworker/1:3)
[  415.881441][T12929] ERROR: (device loop2): dbAllocBits: leaf page corrupt
[  415.881441][T12929] 
[  415.948133][T12929] ERROR: (device loop2): dbAllocBits: leaf page corrupt
[  415.948133][T12929] 
[  416.097816][T12929] blkno = b00, nblocks = 400
[  416.106969][T12929] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  416.106969][T12929] 
[  416.131970][T12929] blkno = b00, nblocks = 400
[  416.145814][T12929] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  416.145814][T12929] 
[  416.176975][T12929] blkno = b00, nblocks = 400
[  416.185342][T12929] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  416.185342][T12929] 
[  416.313916][T12958] loop3: detected capacity change from 0 to 64
[  416.947946][ T5789] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  416.958029][    T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  417.021183][T12943] loop0: detected capacity change from 0 to 40427
[  417.035043][T12943] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  417.105959][T12943] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  417.161929][ T5789] usb 5-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00
[  417.179808][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  417.183922][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.217445][    T9] usb 4-1: config 6 has an invalid interface number: 44 but max is 0
[  417.229601][    T9] usb 4-1: config 6 has no interface number 0
[  417.236293][    T9] usb 4-1: config 6 interface 44 has no altsetting 0
[  417.248870][ T5789] usb-storage 5-1:1.0: USB Mass Storage device detected
[  417.275218][    T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=be.71
[  417.296362][ T5789] usb-storage 5-1:1.0: Quirks match for vid 0451 pid 5416: 2
[  417.297990][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.313185][ T5789] scsi host1: usb-storage 5-1:1.0
[  417.376738][T12943] F2FS-fs (loop0): Found nat_bits in checkpoint
[  417.385755][    T9] usb 4-1: Product: syz
[  417.403559][    T9] usb 4-1: Manufacturer: syz
[  417.427838][    T9] usb 4-1: SerialNumber: syz
[  417.488804][ T5766] usb 5-1: USB disconnect, device number 3
[  417.629930][T12943] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  417.655963][T12943] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  417.881129][    T9] usb 4-1: ignoring: probably an ADSL modem
[  418.124854][T12986] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.132120][T12986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.211578][T12988] loop4: detected capacity change from 0 to 512
[  418.233575][T12988] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  418.283583][    T9] cxacru 4-1:6.44: usbatm_usb_probe: bind failed: -19!
[  418.320449][T12988] EXT4-fs (loop4): 1 truncate cleaned up
[  418.345660][    T9] usb 4-1: USB disconnect, device number 22
[  418.373959][T12988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.399904][T12992] overlayfs: invalid origin (0000)
[  418.583685][T12456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.628847][T12994] tun0: tun_chr_ioctl cmd 1074025675
[  418.634992][T12994] tun0: persist disabled
[  418.764545][T12996] loop4: detected capacity change from 0 to 256
[  419.653696][T13015] loop4: detected capacity change from 0 to 4096
[  419.680819][T13015] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  420.035951][T13022] loop0: detected capacity change from 0 to 128
[  420.756120][T13020] loop3: detected capacity change from 0 to 40427
[  420.782435][T13020] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  420.800683][T13020] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  420.845149][T13020] F2FS-fs (loop3): invalid crc value
[  420.892175][T13020] F2FS-fs (loop3): Found nat_bits in checkpoint
[  421.101730][T13020] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  421.120922][T13020] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  421.177531][ T5789] hid-generic 0005:0C45:1010.0014: unknown main item tag 0x0
[  421.202719][T13046] bridge0: port 3(vlan3) entered blocking state
[  421.271818][ T5789] hid-generic 0005:0C45:1010.0014: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  421.290586][T13046] bridge0: port 3(vlan3) entered disabled state
[  421.297113][T13046] vlan3: entered allmulticast mode
[  421.376598][T13046] macvtap0: entered allmulticast mode
[  421.441953][T13046] veth0_macvtap: entered allmulticast mode
[  421.452915][T13051] loop4: detected capacity change from 0 to 2048
[  421.485907][ T5780] syz-executor: attempt to access beyond end of device
[  421.485907][ T5780] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  421.486233][T13046] vlan3: entered promiscuous mode
[  421.534472][T13051] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  421.557847][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  421.569391][T13046] macvtap0: entered promiscuous mode
[  421.609071][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  421.611343][T13051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  421.678952][T13054] loop2: detected capacity change from 0 to 2048
[  421.687261][T13054] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362
[  421.705914][T13054] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  421.725601][T13054] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  421.755747][T13054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  423.910248][T13112] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  423.942524][T13112] tipc: Disabling bearer <udp:syz0>
[  424.265996][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'.
[  424.438851][T13132] loop0: detected capacity change from 0 to 2048
[  424.507516][T13132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  424.948870][T13125] loop3: detected capacity change from 0 to 32768
[  424.996219][T13125] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.2892 (13125)
[  425.051184][T13125] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  425.075438][T13125] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  425.097736][T13125] BTRFS info (device loop3): enabling ssd optimizations
[  425.127576][T13125] BTRFS info (device loop3): not using ssd optimizations
[  425.135093][T13125] BTRFS info (device loop3): turning off barriers
[  425.157460][T13125] BTRFS info (device loop3): using free space tree
[  425.566086][T13145] loop0: detected capacity change from 0 to 32768
[  425.702293][ T5780] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  426.282941][T13147] loop4: detected capacity change from 0 to 32768
[  426.749044][T13177] loop0: detected capacity change from 0 to 8
[  426.881091][T13177] SQUASHFS error: zstd decompression error: 10
[  426.936865][T13177] SQUASHFS error: zstd decompression failed, data probably corrupt
[  426.972696][T13177] SQUASHFS error: Failed to read block 0x60: -5
[  427.038826][T13177] SQUASHFS error: zstd decompression error: 10
[  427.045067][T13177] SQUASHFS error: zstd decompression failed, data probably corrupt
[  427.137379][ T5824] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  427.146065][T13177] SQUASHFS error: Failed to read block 0x60: -5
[  427.168534][   T28] audit: type=1800 audit(2000000169.559:120): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2909" name="/" dev="loop0" ino=1 res=0 errno=0
[  427.352112][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.390156][T13184] loop4: detected capacity change from 0 to 1024
[  427.399861][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.419663][ T5824] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  427.431279][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.453044][ T5824] usb 4-1: config 0 descriptor??
[  427.881842][ T5824] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  427.897753][ T5824] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  427.907623][ T5824] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  427.917630][ T5824] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  427.925523][ T5824] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  427.937509][ T5824] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  427.945505][ T5824] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  427.991042][ T5824] hid-thrustmaster 0003:044F:B65D.0015: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  428.023466][ T5824] hid-thrustmaster 0003:044F:B65D.0015: Wrong number of endpoints?
[  428.095579][    C1] hid-thrustmaster 0003:044F:B65D.0015: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[  428.311373][ T5824] usb 4-1: USB disconnect, device number 23
[  429.054537][T13223] loop3: detected capacity change from 0 to 128
[  429.070406][T13214] loop2: detected capacity change from 0 to 32768
[  429.507060][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2934'.
[  429.752950][T13227] loop3: detected capacity change from 0 to 32768
[  429.789699][T13227] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  429.941108][T13227] XFS (loop3): Ending clean mount
[  430.334034][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  430.964158][T13255] loop0: detected capacity change from 0 to 512
[  431.039780][T13255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.113446][T13255] ext4 filesystem being mounted at /673/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.342644][T13255] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.2940: casefold flag without casefold feature
[  431.532910][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.996057][T13286] loop3: detected capacity change from 0 to 1024
[  432.024344][T13286] EXT4-fs: Ignoring removed bh option
[  432.057550][T13286] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  432.142973][T13286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  432.237417][T13286] ext4 filesystem being mounted at /740/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.380335][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  432.527356][ T5824] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  432.729048][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  432.739583][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  432.750170][T13287] loop4: detected capacity change from 0 to 32768
[  432.761453][ T5824] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  432.779728][T13287] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.2953 (13287)
[  432.795573][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  432.813909][ T5824] usb 3-1: SerialNumber: syz
[  432.831816][T13287] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  432.886113][T13287] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  432.913630][T13287] BTRFS info (device loop4): enabling ssd optimizations
[  432.935629][T13287] BTRFS info (device loop4): not using ssd optimizations
[  432.952391][T13287] BTRFS info (device loop4): turning off barriers
[  432.961021][T13287] BTRFS info (device loop4): using free space tree
[  432.992650][T13303] netem: change failed
[  433.081868][ T5824] usb 3-1: 0:2 : does not exist
[  433.144327][T13321] loop0: detected capacity change from 0 to 512
[  433.237443][ T5824] usb 3-1: USB disconnect, device number 19
[  433.254749][T13321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  433.288748][T13321] ext4 filesystem being mounted at /678/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  433.433204][T11041] udevd[11041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  433.517646][T12456] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  433.545574][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  433.807023][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  434.301067][T13336] loop4: detected capacity change from 0 to 512
[  434.327086][T13311] loop3: detected capacity change from 0 to 32768
[  434.382970][T13336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.411753][T13336] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  434.539253][T13340] kvm_intel: kvm [13339]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1
[  434.832524][T12456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.865062][T13349] loop2: detected capacity change from 0 to 128
[  434.881040][T13349] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  434.924239][T13349] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  435.089321][ T6913] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  435.234486][T13359] loop3: detected capacity change from 0 to 64
[  435.310807][T13359] hfs: request for non-existent node 237 in B*Tree
[  435.320529][T13357] loop2: detected capacity change from 0 to 4096
[  435.335758][T13359] hfs: request for non-existent node 237 in B*Tree
[  435.372106][T13359] hfs: request for non-existent node 237 in B*Tree
[  435.380814][T13360] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  435.396433][T13359] hfs: request for non-existent node 237 in B*Tree
[  435.415951][T13359] hfs: request for non-existent node 237 in B*Tree
[  435.431460][T13357] syz.2.2973: attempt to access beyond end of device
[  435.431460][T13357] loop2: rw=0, sector=67108864, nr_sectors = 2 limit=4096
[  435.451314][T13359] hfs: request for non-existent node 237 in B*Tree
[  435.466159][T13357] syz.2.2973: attempt to access beyond end of device
[  435.466159][T13357] loop2: rw=0, sector=131070, nr_sectors = 2 limit=4096
[  435.487085][T13357] syz.2.2973: attempt to access beyond end of device
[  435.487085][T13357] loop2: rw=0, sector=65536, nr_sectors = 2 limit=4096
[  435.512022][T13357] NILFS (loop2): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=0, cno=0, offset=2, blocknr=0, vblocknr=0
[  435.525882][T13357] NILFS (loop2): error -2 preparing GC: cannot read source blocks
[  435.773277][T13364] loop2: detected capacity change from 0 to 256
[  435.827776][T13364] exfat: Deprecated parameter 'namecase'
[  435.876963][T13364] exfat: Deprecated parameter 'utf8'
[  435.916027][T13368] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  435.952377][T13368] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  435.963894][T13364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d)
[  435.994973][T13368] UDF-fs: Scanning with blocksize 512 failed
[  436.071428][T13368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  437.015050][T13376] set_capacity_and_notify: 1 callbacks suppressed
[  437.015067][T13376] loop2: detected capacity change from 0 to 32768
[  437.091666][T13376] JBD2: Ignoring recovery information on journal
[  437.150625][T13378] loop4: detected capacity change from 0 to 32768
[  437.192958][T13378] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  437.264962][T13376] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  437.298446][T13378] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  437.387023][   T28] audit: type=1800 audit(2000000180.766:121): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2982" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  437.424453][T13376] 
[  437.426844][T13376] ======================================================
[  437.433900][T13376] WARNING: possible circular locking dependency detected
[  437.440970][T13376] syzkaller #0 Not tainted
[  437.445420][T13376] ------------------------------------------------------
[  437.452473][T13376] syz.2.2982/13376 is trying to acquire lock:
[  437.458598][T13376] ffff88805bd989d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_xattr_set+0xbe8/0x13a0
[  437.470876][T13376] 
[  437.470876][T13376] but task is already holding lock:
[  437.476087][T13378] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30
[  437.478263][T13376] ffff88805bd9eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0
[  437.478325][T13376] 
[  437.478325][T13376] which lock already depends on the new lock.
[  437.478325][T13376] 
[  437.478332][T13376] 
[  437.478332][T13376] the existing dependency chain (in reverse order) is:
[  437.515435][T13376] 
[  437.515435][T13376] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  437.523308][T13376]        down_read+0x46/0x2e0
[  437.528130][T13376]        ocfs2_init_acl+0x30a/0x770
[  437.533383][T13376]        ocfs2_mknod+0x1427/0x2310
[  437.538564][T13376]        ocfs2_mkdir+0x196/0x430
[  437.543542][T13376]        vfs_mkdir+0x2a5/0x470
[  437.548397][T13376]        do_mkdirat+0x1dc/0x450
[  437.553288][T13376]        __x64_sys_mkdirat+0x89/0xa0
[  437.558813][T13376]        do_syscall_64+0x55/0xb0
[  437.564322][T13376]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  437.571878][T13376] 
[  437.571878][T13376] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  437.585559][T13376]        down_read+0x46/0x2e0
[  437.591280][T13376]        ocfs2_start_trans+0x3a8/0x6f0
[  437.596903][T13376]        ocfs2_reserve_local_alloc_bits+0xb39/0x2620
[  437.603630][T13376]        ocfs2_reserve_clusters_with_limit+0x1ba/0xc20
[  437.610960][T13376]        ocfs2_symlink+0x1132/0x2730
[  437.616315][T13376]        vfs_symlink+0x138/0x2b0
[  437.621286][T13376]        do_symlinkat+0x1ba/0x400
[  437.626360][T13376]        __x64_sys_symlinkat+0x99/0xb0
[  437.632056][T13376]        do_syscall_64+0x55/0xb0
[  437.637029][T13376]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  437.643484][T13376] 
[  437.643484][T13376] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  437.650998][T13376]        ocfs2_start_trans+0x2a9/0x6f0
[  437.656513][T13376]        ocfs2_reserve_local_alloc_bits+0xb39/0x2620
[  437.663261][T13376]        ocfs2_reserve_clusters_with_limit+0x1ba/0xc20
[  437.670179][T13376]        ocfs2_symlink+0x1132/0x2730
[  437.675502][T13376]        vfs_symlink+0x138/0x2b0
[  437.680504][T13376]        do_symlinkat+0x1ba/0x400
[  437.685562][T13376]        __x64_sys_symlinkat+0x99/0xb0
[  437.691052][T13376]        do_syscall_64+0x55/0xb0
[  437.696018][T13376]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  437.702463][T13376] 
[  437.702463][T13376] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  437.713009][T13376]        down_write+0x97/0x200
[  437.717808][T13376]        __ocfs2_flush_truncate_log+0x352/0x1130
[  437.724179][T13376]        ocfs2_flush_truncate_log+0x4f/0x60
[  437.730108][T13376]        ocfs2_sync_fs+0x11d/0x330
[  437.735262][T13376]        sync_filesystem+0x1c2/0x220
[  437.740600][T13376]        ocfs2_remount+0x119/0xb40
[  437.745756][T13376]        reconfigure_super+0x229/0x8e0
[  437.751257][T13376]        path_mount+0xcfe/0xfa0
[  437.756144][T13376]        __se_sys_mount+0x2e7/0x3d0
[  437.761385][T13376]        do_syscall_64+0x55/0xb0
[  437.766363][T13376]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  437.772820][T13376] 
[  437.772820][T13376] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  437.783387][T13376]        __lock_acquire+0x37ef/0x7d80
[  437.788802][T13376]        lock_acquire+0x19e/0x420
[  437.793863][T13376]        down_write+0x97/0x200
[  437.798674][T13376]        ocfs2_xattr_set+0xbe8/0x13a0
[  437.804079][T13376]        __vfs_setxattr+0x437/0x470
[  437.809317][T13376]        __vfs_setxattr_noperm+0x12a/0x5e0
[  437.815168][T13376]        vfs_setxattr+0x16b/0x2f0
[  437.820233][T13376]        path_setxattr+0x33a/0x590
[  437.825390][T13376]        __x64_sys_setxattr+0xbb/0xd0
[  437.830810][T13376]        do_syscall_64+0x55/0xb0
[  437.835789][T13376]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  437.842242][T13376] 
[  437.842242][T13376] other info that might help us debug this:
[  437.842242][T13376] 
[  437.852514][T13376] Chain exists of:
[  437.852514][T13376]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  437.852514][T13376] 
[  437.869544][T13376]  Possible unsafe locking scenario:
[  437.869544][T13376] 
[  437.877017][T13376]        CPU0                    CPU1
[  437.882399][T13376]        ----                    ----
[  437.887786][T13376]   lock(&oi->ip_xattr_sem);
[  437.892404][T13376]                                lock(&journal->j_trans_barrier);
[  437.900407][T13376]                                lock(&oi->ip_xattr_sem);
[  437.907544][T13376]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  437.914871][T13376] 
[  437.914871][T13376]  *** DEADLOCK ***
[  437.914871][T13376] 
[  437.923034][T13376] 3 locks held by syz.2.2982/13376:
[  437.928248][T13376]  #0: ffff88802e6c4418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  437.937535][T13376]  #1: ffff88805bd9ed98 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0
[  437.948022][T13376]  #2: ffff88805bd9eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0
[  437.957981][T13376] 
[  437.957981][T13376] stack backtrace:
[  437.963894][T13376] CPU: 0 PID: 13376 Comm: syz.2.2982 Not tainted syzkaller #0
[  437.971376][T13376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  437.981575][T13376] Call Trace:
[  437.984883][T13376]  <TASK>
[  437.987865][T13376]  dump_stack_lvl+0x18c/0x250
[  437.992572][T13376]  ? load_image+0x420/0x420
[  437.997128][T13376]  ? show_regs_print_info+0x20/0x20
[  438.002360][T13376]  ? print_circular_bug+0x12b/0x1a0
[  438.007680][T13376]  check_noncircular+0x2fc/0x400
[  438.012650][T13376]  ? look_up_lock_class+0x75/0x140
[  438.017799][T13376]  ? print_deadlock_bug+0x5d0/0x5d0
[  438.023053][T13376]  ? lockdep_lock+0xf5/0x230
[  438.027685][T13376]  ? lockdep_unlock+0x146/0x2e0
[  438.032566][T13376]  ? _find_first_zero_bit+0xd6/0x100
[  438.037937][T13376]  __lock_acquire+0x37ef/0x7d80
[  438.042828][T13376]  ? _raw_spin_unlock+0x40/0x40
[  438.047722][T13376]  ? verify_lock_unused+0x140/0x140
[  438.052966][T13376]  lock_acquire+0x19e/0x420
[  438.057494][T13376]  ? ocfs2_xattr_set+0xbe8/0x13a0
[  438.062549][T13376]  ? __rwlock_init+0x150/0x150
[  438.067346][T13376]  ? __might_sleep+0xe0/0xe0
[  438.071994][T13376]  ? read_lock_is_recursive+0x20/0x20
[  438.077396][T13376]  ? _raw_spin_unlock+0x28/0x40
[  438.082290][T13376]  ? ocfs2_inode_lock_tracker+0x437/0x700
[  438.088036][T13376]  ? ocfs2_xattr_block_find+0x15b/0x4e0
[  438.093615][T13376]  down_write+0x97/0x200
[  438.097891][T13376]  ? ocfs2_xattr_set+0xbe8/0x13a0
[  438.102943][T13376]  ? down_read_killable+0x340/0x340
[  438.108186][T13376]  ocfs2_xattr_set+0xbe8/0x13a0
[  438.113072][T13376]  ? __ocfs2_xattr_set_handle+0xf30/0xf30
[  438.118827][T13376]  ? __lock_acquire+0x1336/0x7d80
[  438.123888][T13376]  ? verify_lock_unused+0x140/0x140
[  438.129123][T13376]  ? ____kasan_slab_free+0x126/0x1f0
[  438.134444][T13376]  ? aa_get_newest_label+0xfd/0x5c0
[  438.139697][T13376]  ? end_current_label_crit_section+0x170/0x170
[  438.145995][T13376]  ? posix_xattr_acl+0x93/0xb0
[  438.150795][T13376]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  438.156292][T13376]  __vfs_setxattr+0x437/0x470
[  438.161099][T13376]  __vfs_setxattr_noperm+0x12a/0x5e0
[  438.166416][T13376]  vfs_setxattr+0x16b/0x2f0
[  438.170950][T13376]  ? xattr_permission+0x460/0x460
[  438.176003][T13376]  ? __mnt_want_write+0x223/0x2a0
[  438.181080][T13376]  ? path_setxattr+0x2ec/0x590
[  438.185882][T13376]  path_setxattr+0x33a/0x590
[  438.190505][T13376]  ? simple_xattrs_free+0x150/0x150
[  438.195761][T13376]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  438.201772][T13376]  ? lock_chain_count+0x20/0x20
[  438.206658][T13376]  __x64_sys_setxattr+0xbb/0xd0
[  438.211549][T13376]  do_syscall_64+0x55/0xb0
[  438.216013][T13376]  ? clear_bhb_loop+0x40/0x90
[  438.220717][T13376]  ? clear_bhb_loop+0x40/0x90
[  438.225426][T13376]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  438.231350][T13376] RIP: 0033:0x7f34fb19de99
[  438.235793][T13376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.255429][T13376] RSP: 002b:00007f34fc154028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  438.263901][T13376] RAX: ffffffffffffffda RBX: 00007f34fb425fa0 RCX: 00007f34fb19de99
[  438.271899][T13376] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000
[  438.279900][T13376] RBP: 00007f34fb233eaf R08: 0000000000000000 R09: 0000000000000000
[  438.287922][T13376] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[  438.295916][T13376] R13: 00007f34fb426038 R14: 00007f34fb425fa0 R15: 00007fffbfc4bf48
[  438.303917][T13376]  </TASK>
[  438.449131][T13378] XFS (loop4): Ending clean mount
[  438.472120][T13392] loop3: detected capacity change from 0 to 32768
[  438.494328][T13392] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2990 (13392)
[  438.573441][ T5784] ocfs2: Unmounting device (7,2) on (node local)
[  438.599120][T13392] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  438.631879][T13392] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  438.656704][T13392] BTRFS info (device loop3): setting nodatasum
[  438.674539][T13392] BTRFS info (device loop3): force zlib compression, level 3
[  438.687051][T13392] BTRFS info (device loop3): turning on flush-on-commit
[  438.694100][T13392] BTRFS info (device loop3): max_inline at 4096
[  438.732240][T12456] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  438.743869][T13392] BTRFS info (device loop3): using free space tree
[  438.872125][T13392] BTRFS info (device loop3): enabling ssd optimizations
[  438.981189][T13392] BTRFS error (device loop3: state M): unrecognized mount option '/dev/btrfs-control'
[  439.028758][ T5780] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  440.210510][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.216914][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  440.225285][ T1291] lec:lec_start_xmit: lec0:No lecd attached
[  446.046243][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  446.054314][    C1] lec:lec_tx_timeout: lec0
[  446.058974][    C1] lec:lec_start_xmit: lec0:No lecd attached