last executing test programs:

2m28.690918398s ago: executing program 0 (id=223):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x78, 0x0, 0x10, {0x100000000008, 0xffefff00, 0x0, {0x0, 0x1, 0xfffffffffffffc03, 0x8000, 0x7e, 0x1, 0x9e9, 0xb, 0xb877, 0x4000, 0x7893b06f, 0x0, 0xee01, 0x5, 0x8000006}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2m28.623585516s ago: executing program 0 (id=226):
mkdir(0x0, 0x0)

2m28.623371577s ago: executing program 0 (id=227):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/25, 0x19}], 0x1}, 0x40010163)

2m28.562171698s ago: executing program 0 (id=228):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES64=0x0, @ANYBLOB="2d97b8cd51b292dd7cd3520ec196a9221855bda050abeecccfbaa4753396893a03601b28e7df0713049a99f702315ddc2b4637b16b8810832104d6c3d4ac17a93d589a6cf8947698da701cb7f69b20446a385bee5e026dc9e486c20f1c19814fe5751044b37cbd95d2ba9a6c744b3f720aff3db7d02a9173c40769f22dd44d93b1e9103262a984b978309fc385235178def90d2cbee0e68d5f9bda45f36270088cd14ad8a72adab9e79b797c123dcda49189a1cbe272799e8337f070e88361f3375dc19f1b0053e7c8426fc3075e65f54e25371afcce94313f2235a2b58fc902a3112fb4e29d8e82dc4d011fccf6f9ab00"], 0x1, 0x1ad, &(0x7f00000006c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

2m28.5619335s ago: executing program 0 (id=229):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800b976", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m27.98632977s ago: executing program 0 (id=235):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @broadcast}})

2m27.929836199s ago: executing program 32 (id=235):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @broadcast}})

2m26.588183189s ago: executing program 1 (id=247):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20)

2m26.5355734s ago: executing program 1 (id=249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000020900020073797a3200e8ffff080001"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

2m26.471252307s ago: executing program 1 (id=251):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000780)="e6660000001f009e", 0x8}], 0x1}}], 0x2, 0x44044)

2m26.412090963s ago: executing program 1 (id=252):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m26.08518928s ago: executing program 1 (id=256):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0)

2m25.477548081s ago: executing program 1 (id=259):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f)

2m25.272099866s ago: executing program 33 (id=259):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f)

40.5938257s ago: executing program 2 (id=1718):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9f223785b5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

40.524728366s ago: executing program 2 (id=1719):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020)

40.524533616s ago: executing program 2 (id=1720):
syz_usb_connect(0x5, 0x3f, &(0x7f0000002680)={{0x12, 0x1, 0x250, 0x34, 0xe7, 0x5d, 0x20, 0x12d1, 0x1c23, 0x2bc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x10, 0x2, 0x30, 0xcb, "", [{{0x9, 0x4, 0x77, 0xf8, 0x0, 0x2, 0x2, 0xff, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x401, 0x1, 0x5}, [@acm={0x4}]}]}}]}}]}}, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0})

39.974190516s ago: executing program 2 (id=1732):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

39.854501554s ago: executing program 2 (id=1735):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@block_validity}, {@journal_async_commit}]}, 0x3a, 0x527, &(0x7f0000000f80)="$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")

39.343573458s ago: executing program 2 (id=1738):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="693fbc00e378859e7fff250c403c4200", 0x10)

39.287174997s ago: executing program 34 (id=1738):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="693fbc00e378859e7fff250c403c4200", 0x10)

1.781626871s ago: executing program 5 (id=2165):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1.721991101s ago: executing program 3 (id=2168):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

1.671881202s ago: executing program 3 (id=2170):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0)

1.565904659s ago: executing program 5 (id=2171):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]})
write$ppp(r0, &(0x7f0000000280)='R\r', 0x2)

1.261661189s ago: executing program 5 (id=2174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00)

1.147733631s ago: executing program 4 (id=2177):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@security={'security\x00', 0x3a, 0x4, 0x2d8, 0xffffffff, 0x1b0, 0x0, 0x1b0, 0x90, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x0, 0x5}, {0x4, 0x0, 0x2}, 0x9, 0x4}}}, {{@ip={@empty, @private, 0x0, 0xffffff00, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x45}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)

1.147466806s ago: executing program 4 (id=2178):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)

887.228901ms ago: executing program 3 (id=2179):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000}, {0x4, 0x7ffffffffffffffd, 0x407ffffffffffe, 0x800000000000002}, 0x3, 0x1, 0x1, 0x0, 0x2, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x2b}, 0x0, @in6=@private2, 0x3503, 0x4, 0x3, 0x0, 0x0, 0x0, 0x113b}]}]}, 0xfc}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff2f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

787.310261ms ago: executing program 4 (id=2180):
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x808000, &(0x7f0000000240)=ANY=[@ANYBLOB="00cd067ca5fe94f358a97d3799d10d6a0f0d49553970899fa347aa76be1b2509f63779954a38f01042f578e036051ee7d6d1fb7e07c209e650464433ce970000000900000014c931bb00000000"], 0xfd, 0xa0, &(0x7f0000000000)="$eJzs17GJAlEUBdC7s8vuGjgNGNiBNdiKGGpmpAhWZCuWIIgVmInJyDgziHagngP/Py43fcnbXbaDlEm1Saoni+VqNpk3f/p5MA7voEjyl+Q/ybBs8u+tObRbkOxP62n36ubr3DUAAMArKTKqx3cbj/fmJ0mvvQOaBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJrgEAAP//sjg1uA==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

640.968751ms ago: executing program 4 (id=2181):
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
eventfd(0x7)

640.752914ms ago: executing program 4 (id=2182):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x43)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

542.024162ms ago: executing program 4 (id=2183):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507"], 0x0)

380.823169ms ago: executing program 5 (id=2184):
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3fd, &(0x7f0000000500)=<r2=>0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1}])
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

171.0182ms ago: executing program 5 (id=2185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x48}}, 0x0)

170.827482ms ago: executing program 3 (id=2186):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

512.491µs ago: executing program 3 (id=2187):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r1, 0x40047457, 0x0)

245.883µs ago: executing program 3 (id=2188):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})
munmap(&(0x7f00006c1000/0x2000)=nil, 0x2000)

0s ago: executing program 5 (id=2189):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
chdir(0x0)
r0 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
flock(r0, 0x1)
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

kernel console output (not intermixed with test programs):

7407] netlink: 'syz.2.512': attribute type 2 has an invalid length.
[  118.364577][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'.
[  118.412108][ T7427] loop3: detected capacity change from 0 to 8
[  118.422611][ T7427] SQUASHFS error: xz decompression failed, data probably corrupt
[  118.425925][ T7427] SQUASHFS error: Failed to read block 0x108: -5
[  118.428343][ T7427] SQUASHFS error: Unable to read metadata cache entry [106]
[  118.431090][ T7427] SQUASHFS error: Unable to read inode 0x11f
[  118.580066][ T7435] loop3: detected capacity change from 0 to 764
[  118.594532][ T7435] Symlink component flag not implemented
[  118.597228][ T7435] Symlink component flag not implemented
[  118.599199][ T7435] Symlink component flag not implemented (128)
[  118.601073][ T7435] Symlink component flag not implemented (105)
[  118.654301][ T7437] kAFS: unable to lookup cell 'syz0'
[  119.015467][ T7457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'.
[  119.021690][  T894] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  119.181910][  T894] usb 5-1: Using ep0 maxpacket: 8
[  119.188967][  T894] usb 5-1: unable to get BOS descriptor or descriptor too short
[  119.195992][  T894] usb 5-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  119.200728][  T894] usb 5-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0
[  119.213230][  T894] usb 5-1: config 12 interface 0 has no altsetting 0
[  119.219941][  T894] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  119.223890][  T894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.226906][  T894] usb 5-1: Product: syz
[  119.228507][  T894] usb 5-1: Manufacturer: syz
[  119.230220][  T894] usb 5-1: SerialNumber: syz
[  119.456519][  T894] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  119.458972][  T894] usb 5-1: selecting invalid altsetting 0
[  119.539755][  T894] snd-usb-audio 5-1:12.0: probe with driver snd-usb-audio failed with error -12
[  119.550378][  T894] usb 5-1: USB disconnect, device number 4
[  119.573191][ T6353] udevd[6353]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.401624][  T795] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  120.561827][  T795] usb 4-1: Using ep0 maxpacket: 32
[  120.567419][  T795] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  120.570950][  T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.577434][  T795] usb 4-1: config 0 descriptor??
[  120.787021][  T795] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  120.798805][  T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  120.803830][  T795] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  120.809987][  T795] usb 4-1: media controller created
[  120.838772][  T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  121.010738][  T795] az6027: usb out operation failed. (-71)
[  121.018940][  T795] az6027: usb out operation failed. (-71)
[  121.027347][  T795] stb0899_attach: Driver disabled by Kconfig
[  121.032695][  T795] az6027: no front-end attached
[  121.032695][  T795] 
[  121.040804][  T795] az6027: usb out operation failed. (-71)
[  121.044488][  T795] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  121.049963][  T795] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  121.125595][  T795] dvb-usb: schedule remote query interval to 400 msecs.
[  121.129347][  T795] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  121.140096][  T795] usb 4-1: USB disconnect, device number 8
[  121.294783][  T795] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  121.657613][ T7513] syz.3.557 uses old SIOCAX25GETINFO
[  121.788585][ T7518] loop4: detected capacity change from 0 to 128
[  122.702306][  T894] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  122.729928][ T7528] fuse: Bad value for 'fd'
[  122.864667][  T894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.875992][  T894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  122.881435][ T7532] netlink: 'syz.2.564': attribute type 21 has an invalid length.
[  122.887340][  T894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.900334][  T894] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  122.927554][  T894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.948372][  T894] usb 4-1: config 0 descriptor??
[  123.178790][  T894] usb 4-1: USB disconnect, device number 9
[  123.246803][ T7541] netlink: 'syz.4.568': attribute type 3 has an invalid length.
[  123.296858][ T7545] loop4: detected capacity change from 0 to 8
[  124.484014][  T894] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  124.641780][  T894] usb 4-1: Using ep0 maxpacket: 32
[  124.645258][ T7584] loop4: detected capacity change from 0 to 64
[  124.651039][  T894] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  124.655031][ T7585] mmap: syz.2.585 (7585) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  124.658153][  T894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.669778][ T7584] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  124.673868][  T894] usb 4-1: Product: syz
[  124.675396][  T894] usb 4-1: Manufacturer: syz
[  124.677413][  T894] usb 4-1: SerialNumber: syz
[  124.687642][  T894] usb 4-1: config 0 descriptor??
[  124.708902][  T894] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  124.717605][  T894] dvb-usb: bulk message failed: -22 (2/0)
[  124.755255][  T894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  124.761791][  T894] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  124.767469][  T894] usb 4-1: media controller created
[  124.787763][  T894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  124.803957][  T894] usb 4-1: selecting invalid altsetting 7
[  124.806337][  T894] cxusb: set interface failed
[  124.808115][  T894] dvb-usb: bulk message failed: -22 (1/0)
[  124.867520][  T894] DVB: Unable to find symbol lgdt330x_attach()
[  124.876388][  T894] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  124.973580][  T894] rc_core: IR keymap rc-dvico-portable not found
[  124.979452][  T795] hid_parser_main: 218 callbacks suppressed
[  124.979472][  T795] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.982595][  T894] Registered IR keymap rc-empty
[  125.009870][  T894] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  125.010289][  T795] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  125.025462][  T894] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6
[  125.046707][  T894] dvb-usb: schedule remote query interval to 100 msecs.
[  125.049416][  T894] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  125.058428][  T894] usb 4-1: USB disconnect, device number 10
[  125.119574][  T894] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  125.436129][   T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  125.583598][   T31] usb 5-1: config 0 has no interfaces?
[  125.586856][ T7610] loop3: detected capacity change from 0 to 4096
[  125.587099][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.595793][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  125.598990][   T31] usb 5-1: SerialNumber: syz
[  125.627613][   T31] usb 5-1: config 0 descriptor??
[  125.648565][ T7612] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.915941][ T6343] usb 5-1: USB disconnect, device number 5
[  126.009299][ T7622] loop3: detected capacity change from 0 to 512
[  126.030083][ T7622] FAT-fs (loop3): bogus logical sector size 0
[  126.038515][ T7622] FAT-fs (loop3): Can't find a valid FAT filesystem
[  126.455746][ T7636] loop3: detected capacity change from 0 to 2048
[  126.474906][ T7636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.667788][ T7645] loop3: detected capacity change from 0 to 4096
[  127.676392][   T33] audit: type=1326 audit(1776957383.802:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.2.623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  127.687078][   T33] audit: type=1326 audit(1776957383.802:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.2.623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  127.713957][   T33] audit: type=1326 audit(1776957383.812:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.2.623" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  127.732565][   T33] audit: type=1326 audit(1776957383.812:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.2.623" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  127.821072][ T7685] loop4: detected capacity change from 0 to 2048
[  127.828895][ T7685] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.996243][ T7692] loop3: detected capacity change from 0 to 8192
[  128.297324][ T7702] loop4: detected capacity change from 0 to 32768
[  128.349459][ T7702] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.362500][ T7702] XFS (loop4): Ending clean mount
[  128.365851][ T7702] XFS (loop4): Quotacheck needed: Please wait.
[  128.434658][ T7702] XFS (loop4): Quotacheck: Done.
[  128.438687][ T7720] loop3: detected capacity change from 0 to 256
[  128.454327][   T33] audit: type=1800 audit(1776957384.582:106): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.636" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  128.473525][   T33] audit: type=1800 audit(1776957384.592:107): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.636" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  128.526577][ T6624] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.225469][ T7761] loop3: detected capacity change from 0 to 32768
[  129.365853][ T7742] loop4: detected capacity change from 0 to 40427
[  129.396589][ T7742] F2FS-fs (loop4): Invalid segment count (0)
[  129.399055][ T7742] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  129.403713][ T7742] F2FS-fs (loop4): build fault injection rate: 690
[  129.407080][ T7742] F2FS-fs (loop4): invalid crc value
[  129.410983][ T7742] F2FS-fs (loop4): Mismatch valid blocks 5 vs. 7
[  129.423392][ T7742] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  129.707518][ T5836] Bluetooth: hci1: Malformed LE Event: 0x1d
[  129.801300][ T7785] loop4: detected capacity change from 0 to 256
[  129.822071][ T7785] FAT-fs (loop4): Directory bread(block 64) failed
[  129.824396][ T7785] FAT-fs (loop4): Directory bread(block 65) failed
[  129.826568][ T7785] FAT-fs (loop4): Directory bread(block 66) failed
[  129.829086][ T7785] FAT-fs (loop4): Directory bread(block 67) failed
[  129.831292][ T7785] FAT-fs (loop4): Directory bread(block 68) failed
[  129.833888][ T7785] FAT-fs (loop4): Directory bread(block 69) failed
[  129.836533][ T7785] FAT-fs (loop4): Directory bread(block 70) failed
[  129.838799][ T7785] FAT-fs (loop4): Directory bread(block 71) failed
[  129.840841][ T7785] FAT-fs (loop4): Directory bread(block 72) failed
[  129.843942][ T7785] FAT-fs (loop4): Directory bread(block 73) failed
[  129.991633][  T894] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  130.141659][  T894] usb 4-1: Using ep0 maxpacket: 32
[  130.145774][  T894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  130.149035][  T894] usb 4-1: config 0 interface 0 has no altsetting 1
[  130.153560][  T894] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  130.161292][  T894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  130.168454][  T894] usb 4-1: SerialNumber: syz
[  130.180973][  T894] usb 4-1: config 0 descriptor??
[  130.192851][  T894] usb-storage 4-1:0.0: USB Mass Storage device detected
[  130.232144][  T894] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  130.401552][  T795] usb 4-1: USB disconnect, device number 11
[  130.491755][ T7814] loop4: detected capacity change from 0 to 512
[  130.512193][ T7814] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  130.533150][ T6624] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  131.272812][ T7847] vivid-002: disconnect
[  131.277532][ T7845] vivid-002: reconnect
[  131.355308][ T7854] loop3: detected capacity change from 0 to 8
[  131.794732][ T7886] xt_connbytes: Forcing CT accounting to be enabled
[  132.378124][  T894] libceph: connect (1)[c::]:6789 error -101
[  132.395069][  T894] libceph: mon0 (1)[c::]:6789 connect error
[  132.665012][  T894] libceph: connect (1)[c::]:6789 error -101
[  132.671436][  T894] libceph: mon0 (1)[c::]:6789 connect error
[  132.938040][ T7913] ceph: No mds server is up or the cluster is laggy
[  133.702153][   T33] audit: type=1326 audit(1776957389.832:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.711599][   T33] audit: type=1326 audit(1776957389.832:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.727032][   T33] audit: type=1326 audit(1776957389.842:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.744741][   T33] audit: type=1326 audit(1776957389.842:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.755124][   T33] audit: type=1326 audit(1776957389.852:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.764283][   T33] audit: type=1326 audit(1776957389.852:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.779090][   T33] audit: type=1326 audit(1776957389.852:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.786614][   T33] audit: type=1326 audit(1776957389.852:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.797112][   T33] audit: type=1326 audit(1776957389.852:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  133.804022][   T33] audit: type=1326 audit(1776957389.852:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.728" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe15579c819 code=0x7ffc0000
[  134.061574][  T795] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  134.213835][  T795] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  134.217864][  T795] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  134.222045][  T795] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10
[  134.229115][  T795] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  134.233011][  T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.236045][  T795] usb 5-1: Product: syz
[  134.237704][  T795] usb 5-1: Manufacturer: syz
[  134.239581][  T795] usb 5-1: SerialNumber: syz
[  134.375195][ T7960] netlink: 'syz.3.734': attribute type 10 has an invalid length.
[  134.398206][ T7960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.403943][ T7960] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  134.458997][  T795] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  134.465981][  T795] usb 5-1: MIDIStreaming interface descriptor not found
[  134.474814][ T7967] fuse: Bad value for 'fd'
[  134.553520][  T795] usb 5-1: USB disconnect, device number 6
[  134.610256][ T6353] udevd[6353]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.761602][ T5832] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  136.042432][ T5832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.086692][ T5832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.174367][ T5832] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  136.192484][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.211181][ T5832] usb 5-1: Product: syz
[  136.230658][ T5832] usb 5-1: Manufacturer: syz
[  136.241030][ T5832] usb 5-1: SerialNumber: syz
[  136.321077][ T5832] usb 5-1: unit 3 not found!
[  136.326225][ T5832] usb 5-1: unit 7 not found!
[  136.524541][ T5832] usb 5-1: unit 5 not found!
[  136.526165][ T5832] usb 5-1: unit 59 not found!
[  136.556194][ T5832] usb 5-1: USB disconnect, device number 7
[  136.574932][ T6867] udevd[6867]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory
[  136.581740][ T6867] udevd[6867]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory
[  136.590829][ T6867] udevd[6867]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.224265][ T8038] fuse: fd is not a fuse device
[  137.390271][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.397760][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.404475][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.410207][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.691918][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  137.841603][    T9] usb 5-1: Using ep0 maxpacket: 16
[  137.846611][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  137.850866][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  137.858628][    T9] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  137.863037][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.866237][    T9] usb 5-1: Product: syz
[  137.867907][    T9] usb 5-1: Manufacturer: syz
[  137.869767][    T9] usb 5-1: SerialNumber: syz
[  137.875978][    T9] usb 5-1: config 0 descriptor??
[  137.881702][ T8053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  137.888931][    T9] hub 5-1:0.0: bad descriptor, ignoring hub
[  137.895088][    T9] hub 5-1:0.0: probe with driver hub failed with error -5
[  137.902152][    T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7
[  138.169984][ T8080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'.
[  138.360720][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  138.363491][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  138.599573][ T8100] netlink: 'syz.2.798': attribute type 1 has an invalid length.
[  138.626484][ T5836] Bluetooth: hci2: unexpected event 0x01 length: 7 > 1
[  138.976066][ T5259] usb 5-1: reset high-speed USB device number 8 using dummy_hcd
[  138.989095][ T5259] usb 5-1: device reset changed ep0 maxpacket size!
[  138.999058][    T9] usb 5-1: USB disconnect, device number 8
[  139.181699][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  139.331715][    T9] usb 5-1: Using ep0 maxpacket: 32
[  139.335703][    T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  139.338655][    T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  139.344831][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  139.348891][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  139.352522][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  139.356315][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  139.360915][    T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  139.364336][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.370047][    T9] usb 5-1: config 0 descriptor??
[  139.582468][    T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  139.613979][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'.
[  139.617140][ T8135] netlink: 108 bytes leftover after parsing attributes in process `syz.2.815'.
[  139.620582][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'.
[  139.875787][    C1] usblp0: nonzero read bulk status received: -71
[  139.878588][ T5832] usb 5-1: USB disconnect, device number 9
[  139.882989][ T8108] usblp0: error -71 reading from printer
[  139.898450][ T5832] usblp0: removed
[  140.074270][ T8148] netlink: zone id is out of range
[  140.077619][ T8148] netlink: zone id is out of range
[  140.079271][ T8148] netlink: zone id is out of range
[  140.080860][ T8148] netlink: zone id is out of range
[  140.084340][ T8148] netlink: zone id is out of range
[  140.086005][ T8148] netlink: zone id is out of range
[  140.087698][ T8148] netlink: zone id is out of range
[  140.089287][ T8148] netlink: zone id is out of range
[  140.091169][ T8148] netlink: zone id is out of range
[  140.094140][ T8148] netlink: zone id is out of range
[  140.508223][ T8184] Cannot find add_set index 0 as target
[  140.590057][ T8186] loop4: detected capacity change from 0 to 4096
[  140.595408][ T8186] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  140.634274][ T8186] ntfs3(loop4): Failed to load $Extend (-22).
[  140.641933][ T8186] ntfs3(loop4): Failed to initialize $Extend.
[  140.657507][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[  140.661385][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[  140.665214][ T8192] netlink: 4260 bytes leftover after parsing attributes in process `syz.2.842'.
[  141.027039][ T8211] loop4: detected capacity change from 0 to 64
[  141.091141][ T8211] Trying to free block not in datazone
[  141.531668][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  141.681594][    T9] usb 5-1: Using ep0 maxpacket: 32
[  141.686960][    T9] usb 5-1: config 247 has an invalid interface number: 177 but max is 0
[  141.691572][    T9] usb 5-1: config 247 has no interface number 0
[  141.696564][    T9] usb 5-1: config 247 interface 177 altsetting 246 bulk endpoint 0x8 has invalid maxpacket 511
[  141.703570][    T9] usb 5-1: config 247 interface 177 altsetting 246 bulk endpoint 0xC has invalid maxpacket 1023
[  141.711586][    T9] usb 5-1: config 247 interface 177 has no altsetting 0
[  141.720266][    T9] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=58.f4
[  141.731630][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.734515][    T9] usb 5-1: Product: syz
[  141.736014][    T9] usb 5-1: Manufacturer: syz
[  141.737695][    T9] usb 5-1: SerialNumber: syz
[  141.756055][ T8229] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  141.759971][ T8229] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  141.984959][    T9] kvaser_usb 5-1:247.177: error -ENODEV: Cannot get usb endpoint(s)
[  142.008575][    T9] usb 5-1: USB disconnect, device number 10
[  142.473016][ T8286] netlink: 'syz.2.887': attribute type 63 has an invalid length.
[  142.476076][ T8286] netlink: 5 bytes leftover after parsing attributes in process `syz.2.887'.
[  142.759240][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.847042][ T8310] loop4: detected capacity change from 0 to 512
[  142.896225][ T8310] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.899: inode has both inline data and extents flags
[  142.909686][ T8310] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  142.912128][    C1] EXT4-fs (loop4): initial error at time 1776957399: ext4_orphan_get:1397: inode 15
[  142.919069][    C1] EXT4-fs (loop4): last error at time 1776957399: ext4_orphan_get:1397: inode 15
[  142.934213][ T8310] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.899: couldn't read orphan inode 15 (err -117)
[  142.941674][ T8310] loop4: lost filesystem error report for type 5 error -117
[  142.943781][ T8310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.962917][ T8310] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  142.988105][   T33] kauditd_printk_skb: 13 callbacks suppressed
[  142.988120][   T33] audit: type=1800 audit(1776957399.112:131): pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.902" name="file1" dev="tmpfs" ino=1975 res=0 errno=0
[  143.030016][ T6624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.101348][ T8331] loop4: detected capacity change from 0 to 8
[  143.106151][ T8331] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  143.133127][ T8331] cramfs: Error -3 while decompressing!
[  143.137154][ T8331] cramfs: ffffffff9a5f63c8(26)->ffff8881aa9c3000(4096)
[  143.139765][ T8331] cramfs: Error -5 while decompressing!
[  143.144874][ T8331] cramfs: ffffffff9a5f63e2(26)->ffff8881aa9e1000(4096)
[  143.147136][ T8331] cramfs: Error 2 while decompressing!
[  143.148855][ T8331] cramfs: ffffffff9a5f63fc(16)->ffff8881aa9e0000(4096)
[  143.150932][ T8331] cramfs: Error -3 while decompressing!
[  143.153857][ T8331] cramfs: ffffffff9a5f63c8(26)->ffff8881aa9c3000(4096)
[  143.156098][   T33] audit: type=1800 audit(1776957399.282:132): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.905" name="file2" dev="loop4" ino=348 res=0 errno=0
[  143.219052][ T8337] loop4: detected capacity change from 0 to 256
[  143.432771][ T8343] process 'syz.2.911' launched './file0' with NULL argv: empty string added
[  144.108623][ T8360] fuse: fd is not a fuse device
[  144.361815][ T8376] loop4: detected capacity change from 0 to 4096
[  144.381155][ T8376] ntfs3(loop4): Failed to load $MFT (-22).
[  144.499317][ T8388] loop4: detected capacity change from 0 to 512
[  145.149059][ T8426] netlink: 292 bytes leftover after parsing attributes in process `syz.2.949'.
[  145.687205][ T8447] loop4: detected capacity change from 0 to 32768
[  145.705053][ T8447] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.726952][ T8447] XFS (loop4): Ending clean mount
[  145.743437][ T8447] XFS (loop4): Quotacheck needed: Please wait.
[  145.778498][ T8447] XFS (loop4): Quotacheck: Done.
[  145.805132][ T6624] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.974805][ T8457] loop4: detected capacity change from 0 to 8192
[  146.131248][ T8463] vlan2: entered promiscuous mode
[  146.134951][ T8463] macvlan1: entered promiscuous mode
[  147.281925][ T6732] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  147.344787][ T8509] netlink: 'syz.3.985': attribute type 29 has an invalid length.
[  147.348662][ T8509] netlink: 'syz.3.985': attribute type 29 has an invalid length.
[  147.389630][ T8511] 9p: Bad value for 'wfdno'
[  147.434097][ T6732] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  147.440510][ T6732] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  147.445794][ T6732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.448922][ T6732] usb 5-1: Product: syz
[  147.450642][ T6732] usb 5-1: Manufacturer: syz
[  147.454799][ T6732] usb 5-1: SerialNumber: syz
[  147.472827][ T6732] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  147.896001][ T6732] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  147.902490][ T6732] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  147.906577][ T6732] usb 5-1: media controller created
[  147.920069][ T6732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  148.054475][   T31] usb 5-1: USB disconnect, device number 11
[  148.067086][ T8531] 9p: Bad value for 'rfdno'
[  148.738254][ T8552] use of bytesused == 0 is deprecated and will be removed in the future,
[  148.748409][ T8552] use the actual size instead.
[  149.215351][ T8583] 9p: Bad value for 'wfdno'
[  150.421623][ T6732] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  150.571648][ T6732] usb 5-1: Using ep0 maxpacket: 8
[  150.578223][ T6732] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  150.582238][ T6732] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  150.585318][ T6732] usb 5-1: Product: syz
[  150.587121][ T6732] usb 5-1: Manufacturer: syz
[  150.589812][ T6732] usb 5-1: SerialNumber: syz
[  150.595970][ T6732] usb 5-1: config 0 descriptor??
[  150.605004][ T6732] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  151.212011][ T6732] gspca_zc3xx: reg_w_i err -71
[  151.215107][ T6732] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  151.219634][ T6732] usb 5-1: USB disconnect, device number 12
[  152.267031][ T8698] loop4: detected capacity change from 0 to 32768
[  152.544245][ T8698] JBD2: Ignoring recovery information on journal
[  152.577603][ T8698] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  152.621635][   T33] audit: type=1800 audit(1776957408.742:133): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1067" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  152.748370][ T6624] ocfs2: Unmounting device (7,4) on (node local)
[  153.350451][ T8725] vivid-007: disconnect
[  153.843860][ T8737] netlink: 'syz.2.1082': attribute type 21 has an invalid length.
[  153.846445][ T8737] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1082'.
[  154.206533][ T8722] vivid-007: reconnect
[  156.040626][ T8817] batadv0: entered promiscuous mode
[  156.047230][ T8817] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  156.051137][ T8817] batadv0: left promiscuous mode
[  156.164152][ T8819] overlayfs: unescaped trailing colons in lowerdir mount option.
[  156.447991][ T8831] netlink: 'syz.4.1123': attribute type 12 has an invalid length.
[  156.829899][ T8848] loop4: detected capacity change from 0 to 736
[  157.299568][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'.
[  157.348434][ T8877] capability: warning: `syz.2.1146' uses 32-bit capabilities (legacy support in use)
[  157.411233][ T8879] 9p: Bad value for 'wfdno'
[  157.571904][   T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  157.682503][ T8900] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1155'.
[  157.721825][   T31] usb 5-1: Using ep0 maxpacket: 16
[  157.727418][   T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.733727][   T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.737712][   T31] usb 5-1: config 0 interface 0 has no altsetting 0
[  157.740431][   T31] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  157.746156][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.754365][   T31] usb 5-1: config 0 descriptor??
[  158.182498][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.184795][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.186853][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.188983][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.191053][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.194162][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.196406][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.198460][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.200497][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.203273][   T31] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  158.208760][   T31] cougar 0003:060B:500A.0003: unexpected long global item
[  158.211973][   T31] cougar 0003:060B:500A.0003: parse failed
[  158.214147][   T31] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22
[  158.367317][ T6732] usb 5-1: USB disconnect, device number 13
[  158.668626][   T33] audit: type=1326 audit(1776957414.792:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.2.1163" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d10b9c819 code=0x0
[  159.251937][ T5832] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  159.411584][ T5832] usb 5-1: Using ep0 maxpacket: 16
[  159.417143][ T5832] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  159.421049][ T5832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.425114][ T5832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  159.430948][ T5832] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  159.434010][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.436487][ T5832] usb 5-1: Product: syz
[  159.437788][ T5832] usb 5-1: Manufacturer: syz
[  159.439224][ T5832] usb 5-1: SerialNumber: syz
[  159.449805][ T5832] usb 5-1: 0:2 : does not exist
[  160.611004][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'.
[  160.617682][ T8949] bridge_slave_0: default FDB implementation only supports local addresses
[  160.625956][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'.
[  160.629509][ T8949] bridge_slave_0: default FDB implementation only supports local addresses
[  161.618175][ T5832] usb 5-1: USB disconnect, device number 14
[  162.150063][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1202'.
[  162.156812][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1202'.
[  163.904789][   T33] audit: type=1326 audit(1776957420.032:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.2.1222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  163.915112][   T33] audit: type=1326 audit(1776957420.032:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.2.1222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  163.930912][   T33] audit: type=1326 audit(1776957420.042:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.2.1222" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  163.987913][   T33] audit: type=1326 audit(1776957420.042:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.2.1222" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d10b9c582 code=0x7ffc0000
[  163.995519][   T33] audit: type=1326 audit(1776957420.042:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.2.1222" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d10b9c582 code=0x7ffc0000
[  164.004332][   T33] audit: type=1326 audit(1776957420.042:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.2.1222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  164.012319][   T33] audit: type=1326 audit(1776957420.042:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.2.1222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  164.058795][ T9059] fuse: Bad value for 'fd'
[  164.207457][ T9071] pim6reg: entered allmulticast mode
[  164.211341][ T9071] pim6reg: left allmulticast mode
[  164.371613][ T6732] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  164.525803][ T6732] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  164.530264][ T6732] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.534718][ T6732] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.540056][ T6732] usb 5-1: config 0 interface 0 has no altsetting 0
[  164.546469][ T6732] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  164.549973][ T6732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.555946][ T6732] usb 5-1: config 0 descriptor??
[  164.988160][ T6732] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0
[  164.993449][ T6732] holtek 0003:1241:5015.0004: no inputs found
[  165.175538][ T6732] usb 5-1: USB disconnect, device number 15
[  165.582076][   T33] audit: type=1326 audit(1776957421.712:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  165.589336][   T33] audit: type=1326 audit(1776957421.712:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  165.598878][   T33] audit: type=1326 audit(1776957421.712:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  166.078640][ T9131] loop4: detected capacity change from 0 to 1024
[  167.659588][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'.
[  167.941885][ T6732] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  168.094930][ T6732] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  168.103393][ T6732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.114239][ T6732] usb 5-1: config 0 descriptor??
[  168.135168][ T6732] cp210x 5-1:0.0: cp210x converter detected
[  168.347934][ T6732] usb 5-1: cp210x converter now attached to ttyUSB0
[  168.505694][ T9218] overlayfs: failed to clone upperpath
[  168.529825][    T9] usb 5-1: USB disconnect, device number 16
[  168.558042][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  168.570110][    T9] cp210x 5-1:0.0: device disconnected
[  169.120089][ T9250] loop4: detected capacity change from 0 to 1024
[  169.128956][ T9250] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  169.287167][ T9252] loop4: detected capacity change from 0 to 2048
[  169.314692][ T9255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.383421][ T9255] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  169.394351][ T9255] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  169.403704][ T9255] Remounting filesystem read-only
[  169.408973][ T6624] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  169.856567][ T9269] loop4: detected capacity change from 0 to 40427
[  169.861953][ T9269] F2FS-fs (loop4): invalid crc value
[  169.917731][ T9269] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.922241][ T9269] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  170.390635][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'.
[  170.394253][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'.
[  170.397518][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'.
[  170.549952][ T6624] syz-executor: attempt to access beyond end of device
[  170.549952][ T6624] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  170.558553][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  170.558600][ T6624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.558608][ T6624] Call Trace:
[  170.558612][ T6624]  <TASK>
[  170.558618][ T6624]  dump_stack_lvl+0xe8/0x150
[  170.558641][ T6624]  f2fs_handle_critical_error+0x37c/0x540
[  170.558658][ T6624]  f2fs_write_end_io+0x1273/0x1740
[  170.558675][ T6624]  __submit_merged_bio+0x256/0x6a0
[  170.558690][ T6624]  __submit_merged_write_cond+0x3c9/0x4e0
[  170.558705][ T6624]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  170.558726][ T6624]  f2fs_write_data_pages+0x287e/0x34f0
[  170.558738][ T6624]  ? is_bpf_text_address+0x26/0x2b0
[  170.558765][ T6624]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.558783][ T6624]  ? do_raw_spin_lock+0x12b/0x2f0
[  170.558807][ T6624]  ? __lock_acquire+0x6b5/0x2cf0
[  170.558826][ T6624]  ? __lock_acquire+0x6b5/0x2cf0
[  170.558841][ T6624]  ? do_raw_spin_lock+0x12b/0x2f0
[  170.558854][ T6624]  ? do_raw_spin_unlock+0x4d/0x210
[  170.558864][ T6624]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.558876][ T6624]  do_writepages+0x32e/0x550
[  170.558893][ T6624]  ? do_raw_spin_unlock+0x4d/0x210
[  170.558904][ T6624]  filemap_fdatawrite+0x1e9/0x2f0
[  170.558918][ T6624]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  170.558947][ T6624]  ? do_raw_spin_unlock+0x4d/0x210
[  170.558965][ T6624]  f2fs_sync_dirty_inodes+0x30e/0x830
[  170.558979][ T6624]  f2fs_write_checkpoint+0x9df/0x26a0
[  170.558987][ T6624]  ? __lock_acquire+0x6b5/0x2cf0
[  170.559028][ T6624]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  170.559059][ T6624]  kill_f2fs_super+0x314/0x720
[  170.559070][ T6624]  ? __pfx_kill_f2fs_super+0x10/0x10
[  170.559084][ T6624]  ? lockdep_hardirqs_on+0x7a/0x110
[  170.559099][ T6624]  deactivate_locked_super+0xbc/0x130
[  170.559110][ T6624]  cleanup_mnt+0x437/0x4d0
[  170.559120][ T6624]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.559136][ T6624]  task_work_run+0x1d9/0x270
[  170.559148][ T6624]  ? __pfx_task_work_run+0x10/0x10
[  170.559160][ T6624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.559169][ T6624]  exit_to_user_mode_loop+0xed/0x480
[  170.559180][ T6624]  ? rcu_is_watching+0x15/0xb0
[  170.559193][ T6624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.559206][ T6624]  do_syscall_64+0x33e/0xf80
[  170.559219][ T6624]  ? trace_irq_disable+0x3b/0x140
[  170.559236][ T6624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.559247][ T6624] RIP: 0033:0x7fc2eb19da57
[  170.559260][ T6624] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  170.559268][ T6624] RSP: 002b:00007fff2dc04e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  170.559278][ T6624] RAX: 0000000000000000 RBX: 00007fc2eb232048 RCX: 00007fc2eb19da57
[  170.559283][ T6624] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2dc04ee0
[  170.559288][ T6624] RBP: 00007fff2dc04ee0 R08: 00007fff2dc05ee0 R09: 00000000ffffffff
[  170.559294][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2dc05f70
[  170.559299][ T6624] R13: 00007fc2eb232048 R14: 000000000002996e R15: 00007fff2dc05fb0
[  170.559312][ T6624]  </TASK>
[  170.561227][ T6624] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  170.597182][ T5836] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  170.688416][ T5836] Bluetooth: hci0: Injecting HCI hardware error event
[  170.699366][   T54] Bluetooth: hci0: hardware error 0x00
[  170.932445][ T9315] loop4: detected capacity change from 0 to 164
[  171.225497][ T9331] loop4: detected capacity change from 0 to 256
[  171.230157][ T9331] exfat: Deprecated parameter 'utf8'
[  171.233859][ T9331] exfat: Deprecated parameter 'namecase'
[  171.236401][ T9331] exfat: Deprecated parameter 'utf8'
[  171.238172][ T9331] exfat: Deprecated parameter 'utf8'
[  171.251258][ T9331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36332e94, utbl_chksum : 0xe619d30d)
[  171.363413][ T9337] loop4: detected capacity change from 0 to 4096
[  171.367364][ T9337] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  171.370341][ T9337] NILFS (loop4): mounting unchecked fs
[  171.381306][ T9337] NILFS (loop4): recovery complete
[  171.386797][ T9339] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.555822][ T9347] netlink: 'syz.3.1352': attribute type 66 has an invalid length.
[  172.540050][ T9356] loop4: detected capacity change from 0 to 2048
[  172.561257][ T9356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.579377][ T9356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.832379][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  173.016806][ T9375] syz.4.1363 (9375) used greatest stack depth: 18848 bytes left
[  173.074275][ T9381] loop4: detected capacity change from 0 to 1024
[  173.110468][ T9381] hfsplus: failed to load catalog file
[  173.314800][ T9392] loop4: detected capacity change from 0 to 512
[  173.326969][ T9392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002]
[  173.333661][ T9392] System zones: 1-12
[  173.338394][ T9392] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1372: missing EA_INODE flag
[  173.347417][ T9392] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  173.352125][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  173.358005][    C1] EXT4-fs (loop4): initial error at time 1776957429: ext4_xattr_inode_iget:441: inode 12
[  173.361775][    C1] EXT4-fs (loop4): last error at time 1776957429: ext4_xattr_inode_iget:441: inode 12
[  173.367912][ T9392] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1372: error while reading EA inode 12 err=-117
[  173.372561][ T9392] loop4: lost filesystem error report for type 5 error -117
[  173.372897][ T9392] EXT4-fs (loop4): 1 orphan inode deleted
[  173.379797][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.513663][ T9398] fuse: fd is not a fuse device
[  173.755138][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  173.755317][   T33] audit: type=1800 audit(1776957429.812:151): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1372" name="file1" dev="loop4" ino=19 res=0 errno=0
[  174.173797][ T6624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.174643][ T9427] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1387'.
[  174.197281][ T9427] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1387'.
[  175.381107][ T9460] net_ratelimit: 38 callbacks suppressed
[  175.381120][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.385800][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.388911][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.391952][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.394323][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.396631][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.398989][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.401767][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.404427][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.406980][ T9460] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  175.417478][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'.
[  175.432864][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1403'.
[  175.475069][ T9464] fuse: fd is not a fuse device
[  175.651908][ T9466] loop4: detected capacity change from 0 to 32768
[  175.655053][ T9466] btrfs: Deprecated parameter 'usebackuproot'
[  175.657483][ T9466] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  175.662937][ T9466] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1405 (9466)
[  175.670464][ T9466] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.674392][ T9466] BTRFS info (device loop4): using crc32c checksum algorithm
[  175.757151][   T36] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  175.784270][ T9466] BTRFS error (device loop4): failed to load root extent
[  175.786715][ T9466] BTRFS warning (device loop4): try to load backup roots slot 1
[  175.789358][   T36] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  175.801347][ T9466] BTRFS warning (device loop4): couldn't read tree root
[  175.803621][ T9466] BTRFS warning (device loop4): try to load backup roots slot 2
[  175.806183][ T7746] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  175.813105][ T9466] BTRFS warning (device loop4): couldn't read tree root
[  175.815368][ T9466] BTRFS warning (device loop4): try to load backup roots slot 3
[  175.827960][ T9466] BTRFS info (device loop4): rebuilding free space tree
[  175.858795][ T9466] BTRFS info (device loop4): checking UUID tree
[  175.861029][ T9466] BTRFS info (device loop4): enabling ssd optimizations
[  175.863318][ T9466] BTRFS info (device loop4): using spread ssd allocation scheme
[  175.865772][ T9466] BTRFS info (device loop4): turning on async discard
[  175.867933][ T9466] BTRFS info (device loop4): enabling free space tree
[  175.869834][ T9466] BTRFS info (device loop4): force clearing of disk cache
[  175.872007][ T9466] BTRFS info (device loop4): enabling auto defrag
[  175.874420][ T9466] BTRFS info (device loop4): trying to use backup root at mount time
[  175.877154][ T9466] BTRFS info (device loop4): force zlib compression, level 3
[  175.986061][ T6624] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.326071][ T9502] loop4: detected capacity change from 0 to 32768
[  176.329050][ T9502] btrfs: Deprecated parameter 'usebackuproot'
[  176.331073][ T9502] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  176.334600][ T9502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1415 (9502)
[  176.340743][ T9502] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.343818][ T9502] BTRFS info (device loop4): using crc32c checksum algorithm
[  176.418819][   T32] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  176.444516][ T9502] BTRFS error (device loop4): failed to load root extent
[  176.447193][ T9502] BTRFS warning (device loop4): try to load backup roots slot 1
[  176.450312][ T1108] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  176.463612][ T9502] BTRFS warning (device loop4): couldn't read tree root
[  176.466319][ T9502] BTRFS warning (device loop4): try to load backup roots slot 2
[  176.469414][   T32] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  176.478269][ T9502] BTRFS warning (device loop4): couldn't read tree root
[  176.480870][ T9502] BTRFS warning (device loop4): try to load backup roots slot 3
[  176.490071][ T9502] BTRFS info (device loop4): rebuilding free space tree
[  176.501566][ T9502] BTRFS info (device loop4): checking UUID tree
[  176.508133][ T9502] BTRFS info (device loop4): enabling ssd optimizations
[  176.510180][ T9502] BTRFS info (device loop4): using spread ssd allocation scheme
[  176.512993][ T9502] BTRFS info (device loop4): turning on async discard
[  176.515028][ T9502] BTRFS info (device loop4): enabling free space tree
[  176.516963][ T9502] BTRFS info (device loop4): force clearing of disk cache
[  176.518999][ T9502] BTRFS info (device loop4): enabling auto defrag
[  176.520835][ T9502] BTRFS info (device loop4): trying to use backup root at mount time
[  176.523217][ T9502] BTRFS info (device loop4): force zlib compression, level 3
[  176.536190][   T33] audit: type=1800 audit(1776957432.662:152): pid=9502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1415" name="bus" dev="loop4" ino=257 res=0 errno=0
[  176.556080][ T9502] Invalid ELF header magic: != ELF
[  176.624578][ T6624] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.971069][ T9535] 1Ie5n: entered promiscuous mode
[  177.139907][ T9545] loop4: detected capacity change from 0 to 512
[  177.164219][ T9545] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  177.170834][ T9545] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1428: invalid indirect mapped block 2683928664 (level 1)
[  177.179536][ T9545] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  177.181554][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  177.186742][    C0] EXT4-fs (loop4): initial error at time 1776957433: ext4_free_branches:1023: inode 13
[  177.189957][    C0] EXT4-fs (loop4): last error at time 1776957433: ext4_free_branches:1023: inode 13
[  177.197963][ T9545] EXT4-fs (loop4): Remounting filesystem read-only
[  177.201216][ T9545] EXT4-fs (loop4): 1 truncate cleaned up
[  177.205166][ T9545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.256759][ T6624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.338224][ T9559] 9p: Bad value for 'rfdno'
[  178.007148][ T9571] netlink: 'syz.3.1438': attribute type 1 has an invalid length.
[  178.210928][ T9578] netlink: 'syz.4.1441': attribute type 49 has an invalid length.
[  178.838715][ T9604] ip6tnl1: entered allmulticast mode
[  179.130510][ T9621] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  179.133357][ T9621] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  179.323045][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  179.328862][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  179.352860][  T795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  179.902085][  T795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  180.035147][  T795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  180.394085][ T9641] loop4: detected capacity change from 0 to 2048
[  180.414860][ T9641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.755409][ T9675] fuse: fd is not a fuse device
[  180.973875][ T6624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.138978][ T9691] trusted_key: syz.2.1490 sent an empty control message without MSG_MORE.
[  181.291124][ T9700] loop4: detected capacity change from 0 to 128
[  181.331433][ T9700] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.341663][ T9700] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  181.366319][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1497'.
[  181.416359][ T6624] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.054577][ T9730] tmpfs: Bad value for 'mpol'
[  183.046195][ T9741] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1511'.
[  183.391869][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.716240][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'.
[  183.755785][ T9761] loop4: detected capacity change from 0 to 8
[  183.854578][ T9764] loop4: detected capacity change from 0 to 512
[  183.876933][ T9764] FAT-fs (loop4): Invalid FSINFO signature: 0x41615231, 0x61417272 (sector = 1)
[  183.880946][ T9764] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.148052][   T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615231, 0x61417272 (sector = 1)
[  184.250415][ T9769] Bluetooth: hci3: Frame reassembly failed (-84)
[  184.267581][   T32] Bluetooth: hci3: Frame reassembly failed (-84)
[  185.748167][ T9788] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1532'.
[  186.273500][ T5836] Bluetooth: hci3: command 0x1003 tx timeout
[  186.281750][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  186.511778][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  187.985260][ T9847] loop4: detected capacity change from 0 to 128
[  188.092909][ T9852] binder: Bad value for 'max'
[  188.099840][   T33] audit: type=1326 audit(1776957444.222:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.123232][   T33] audit: type=1326 audit(1776957444.222:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.146619][   T33] audit: type=1326 audit(1776957444.222:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.171386][   T33] audit: type=1326 audit(1776957444.222:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.192914][   T33] audit: type=1326 audit(1776957444.222:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.202834][   T33] audit: type=1326 audit(1776957444.222:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.214143][   T33] audit: type=1326 audit(1776957444.222:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.223701][   T33] audit: type=1326 audit(1776957444.222:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.232921][   T33] audit: type=1326 audit(1776957444.222:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.2.1561" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  188.322219][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'.
[  188.440142][ T9872] loop4: detected capacity change from 0 to 256
[  188.465426][ T9872] FAT-fs (loop4): Directory bread(block 64) failed
[  188.471452][ T9872] FAT-fs (loop4): Directory bread(block 65) failed
[  188.477467][ T9872] FAT-fs (loop4): Directory bread(block 66) failed
[  188.482456][ T9872] FAT-fs (loop4): Directory bread(block 67) failed
[  188.484515][ T9872] FAT-fs (loop4): Directory bread(block 68) failed
[  188.486425][ T9872] FAT-fs (loop4): Directory bread(block 69) failed
[  188.489001][ T9872] FAT-fs (loop4): Directory bread(block 70) failed
[  188.491067][ T9872] FAT-fs (loop4): Directory bread(block 71) failed
[  188.501666][ T9872] FAT-fs (loop4): Directory bread(block 72) failed
[  188.505822][ T9872] FAT-fs (loop4): Directory bread(block 73) failed
[  188.632333][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1578'.
[  188.636100][ T9885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1578'.
[  189.191853][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  189.298861][ T9925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1597'.
[  189.351668][    T9] usb 5-1: Using ep0 maxpacket: 32
[  189.355375][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  189.358729][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  189.364964][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  189.367795][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.370706][    T9] usb 5-1: Product: syz
[  189.374680][    T9] usb 5-1: Manufacturer: syz
[  189.376115][    T9] usb 5-1: SerialNumber: syz
[  189.602102][    T9] usb 5-1: interface 1 not found
[  189.610382][    T9] usb 5-1: USB disconnect, device number 17
[  190.084535][ T9941] 9p: Bad value for 'rfdno'
[  190.157297][ T9946] comedi comedi3: dt2817: I/O port conflict (0x4e24,5)
[  190.484781][ T9955] loop4: detected capacity change from 0 to 32768
[  190.578523][ T9955] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  190.607565][ T9955] XFS (loop4): Ending clean mount
[  190.721308][ T9980] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1613'.
[  190.844870][ T7731] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  190.849020][ T7731] XFS (loop4): Unmount and run xfs_repair
[  190.851259][ T7731] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  190.857433][ T7731] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  190.860281][ T7731] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10  ................
[  190.864527][ T7731] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  190.867175][ T7731] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01  ....lK..........
[  190.869716][ T7731] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00  ................
[  190.875376][ T7731] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  190.878249][ T7731] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  190.880866][ T7731] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  190.885459][ T7731] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x14 len 4 error 74
[  190.898623][ T7731] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  190.903333][ T7731] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  190.918581][ T6624] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.431872][ T6732] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  191.471910][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  191.585634][ T6732] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.601624][ T6732] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.606860][ T6732] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.609787][ T6732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.613348][ T6732] usb 5-1: Product: syz
[  191.614892][ T6732] usb 5-1: Manufacturer: syz
[  191.616354][ T6732] usb 5-1: SerialNumber: syz
[  191.623706][ T6732] usb 5-1: 0:2 : does not exist
[  191.625716][ T6732] usb 5-1: unit 9 not found!
[  191.830139][ T6732] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4)
[  191.868566][ T6732] usb 5-1: USB disconnect, device number 18
[  191.898578][ T6867] udevd[6867]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.032562][ T6732] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  193.098932][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811005d800: rx timeout, send abort
[  193.184546][ T6732] usb 5-1: config 150 has an invalid interface number: 204 but max is 2
[  193.189421][ T6732] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  193.198844][ T6732] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3
[  193.202920][ T6732] usb 5-1: config 150 has no interface number 0
[  193.205440][ T6732] usb 5-1: config 150 interface 204 has no altsetting 0
[  193.210758][ T6732] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  193.215079][ T6732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.218235][ T6732] usb 5-1: Product: syz
[  193.220044][ T6732] usb 5-1: Manufacturer: syz
[  193.222443][ T6732] usb 5-1: SerialNumber: syz
[  193.432771][ T6732] xr_serial 5-1:150.204: skipping garbage
[  193.435064][ T6732] xr_serial 5-1:150.204: invalid descriptor buffer length
[  193.440501][ T6732] usb 5-1: USB disconnect, device number 19
[  193.605910][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811005d800: abort rx timeout. Force session deactivation
[  194.662940][  T795] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  194.813900][  T795] usb 5-1: unable to get BOS descriptor or descriptor too short
[  194.824716][  T795] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  194.830020][  T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.834516][  T795] usb 5-1: Product: syz
[  194.835804][  T795] usb 5-1: Manufacturer: syz
[  194.837626][  T795] usb 5-1: SerialNumber: syz
[  195.185007][  T795] usb 5-1: unit 5 not found!
[  195.187122][  T795] usb 5-1: unit 3 not found!
[  196.010197][T10139] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1691'.
[  196.084540][   T33] audit: type=1326 audit(1776957452.212:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.099517][   T33] audit: type=1326 audit(1776957452.222:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.116894][   T33] audit: type=1326 audit(1776957452.222:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.128011][   T33] audit: type=1326 audit(1776957452.222:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.138831][  T795] usb 5-1: us122l: couldn't allocate write buffer
[  196.140398][   T33] audit: type=1326 audit(1776957452.222:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.147799][  T795] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22
[  196.153714][   T33] audit: type=1326 audit(1776957452.222:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.221862][   T33] audit: type=1326 audit(1776957452.222:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.343627][  T795] usb 5-1: USB disconnect, device number 20
[  196.450806][   T33] audit: type=1326 audit(1776957452.222:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.457337][   T33] audit: type=1326 audit(1776957452.222:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.464762][   T33] audit: type=1326 audit(1776957452.222:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10b9c819 code=0x7ffc0000
[  196.504216][ T6867] udevd[6867]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.623903][T10165] netlink: 'syz.4.1699': attribute type 6 has an invalid length.
[  197.627072][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'.
[  197.785715][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'.
[  197.788364][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'.
[  198.131669][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  198.281599][    T9] usb 5-1: Using ep0 maxpacket: 32
[  198.286170][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.290472][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.297169][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  198.299952][    T9] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  198.302877][    T9] usb 5-1: Product: syz
[  198.304572][    T9] usb 5-1: Manufacturer: syz
[  198.306556][    T9] usb 5-1: SerialNumber: syz
[  198.325238][    T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8
[  198.523530][  T795] usb 5-1: USB disconnect, device number 21
[  198.545389][  T795] appletouch 5-1:1.0: input: appletouch disconnected
[  198.740232][T10217] 9p: Bad value for 'rfdno'
[  199.483509][  T795] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  199.817244][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  199.822664][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.823129][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  199.856168][  T795] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  199.859207][  T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.867637][  T795] usb 5-1: Product: syz
[  199.869409][  T795] usb 5-1: Manufacturer: syz
[  199.872908][  T795] usb 5-1: SerialNumber: syz
[  199.881437][  T795] usb 5-1: config 0 descriptor??
[  199.936620][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.027992][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  200.045937][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  200.054182][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  200.080743][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  200.090052][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  200.094186][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.102766][  T795] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  200.258536][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.504039][T10250] chnl_net:caif_netlink_parms(): no params data found
[  200.718855][T10263] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  201.157464][   T12] bond0 (unregistering): Released all slaves
[  201.172756][ T5570] 8021q: adding VLAN 0 to HW filter on device eth9
[  201.208053][T10250] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.213913][T10250] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.219849][T10250] bridge_slave_0: entered allmulticast mode
[  201.227330][T10250] bridge_slave_0: entered promiscuous mode
[  201.267442][T10250] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.288222][T10250] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.291435][T10250] bridge_slave_1: entered allmulticast mode
[  201.308926][T10250] bridge_slave_1: entered promiscuous mode
[  201.478805][T10250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.498561][T10250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.567759][  T795] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  201.586517][  T795] usb 5-1: USB disconnect, device number 22
[  201.636200][ T5570] 8021q: adding VLAN 0 to HW filter on device eth10
[  201.645018][T10250] team0: Port device team_slave_0 added
[  201.649415][T10250] team0: Port device team_slave_1 added
[  201.680255][T10250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.683037][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.693975][T10250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.703968][   T12] hsr_slave_0: left promiscuous mode
[  201.706610][   T12] hsr_slave_1: left promiscuous mode
[  201.714560][   T12] veth1_macvtap: left promiscuous mode
[  201.716427][   T12] veth0_macvtap: left promiscuous mode
[  201.718556][   T12] veth1_vlan: left promiscuous mode
[  201.720173][   T12] veth0_vlan: left promiscuous mode
[  202.029554][T10250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.034082][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  202.044718][T10250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.095239][T10250] hsr_slave_0: entered promiscuous mode
[  202.112315][T10250] hsr_slave_1: entered promiscuous mode
[  202.191709][ T5215] Bluetooth: hci2: command tx timeout
[  202.230058][T10291] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1749'.
[  202.260169][T10291] netlink: 'syz.4.1749': attribute type 4 has an invalid length.
[  202.395552][   T12] IPVS: stop unused estimator thread 0...
[  202.520024][ T5570] 8021q: adding VLAN 0 to HW filter on device eth11
[  202.647539][T10250] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  202.700722][T10250] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  202.718251][T10250] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  202.738038][T10250] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  202.756195][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1756'.
[  202.759603][T10250] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  202.802415][T10250] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  202.809031][T10250] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  202.829878][T10250] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  202.873044][ T5570] 8021q: adding VLAN 0 to HW filter on device eth12
[  203.049519][T10250] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.090548][T10250] 8021q: adding VLAN 0 to HW filter on device team0
[  203.106747][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.109611][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.133835][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.136623][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.154027][T10342] loop4: detected capacity change from 0 to 1024
[  203.173453][T10342] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  203.380444][T10250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.650272][T10372] team0: No ports can be present during mode change
[  203.725269][T10250] veth0_vlan: entered promiscuous mode
[  203.758899][T10250] veth1_vlan: entered promiscuous mode
[  203.786139][T10250] veth0_macvtap: entered promiscuous mode
[  203.790371][T10250] veth1_macvtap: entered promiscuous mode
[  203.818406][T10250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.827947][T10250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.838950][ T5882] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.845034][ T5882] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.855652][ T5882] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.872753][ T5882] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.964066][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  204.055982][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.062493][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.100645][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.104840][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.135646][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.141562][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  204.152499][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  204.157771][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  204.161334][    T9] usb 5-1: SerialNumber: syz
[  204.271849][ T5215] Bluetooth: hci2: command tx timeout
[  204.386518][    T9] usb 5-1: 0:2 : does not exist
[  204.462465][    T9] usb 5-1: USB disconnect, device number 23
[  204.539497][ T6867] udevd[6867]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.960581][T10421] loop4: detected capacity change from 0 to 256
[  204.977845][T10421] exFAT-fs (loop4): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d)
[  205.158629][T10432] vivid-000: disconnect
[  205.160377][T10431] vivid-000: reconnect
[  205.325022][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  205.378011][T10445] xt_l2tp: v2 sid > 0xffff: 4294967293
[  205.553610][    T9] usb 5-1: Using ep0 maxpacket: 16
[  205.836455][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.839291][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  205.844110][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  205.846772][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.849222][    T9] usb 5-1: Product: syz
[  205.850624][    T9] usb 5-1: Manufacturer: syz
[  205.852256][    T9] usb 5-1: SerialNumber: syz
[  205.855390][    T9] usb 5-1: config 0 descriptor??
[  205.895038][    T9] mcba_usb 5-1:0.0 can0: couldn't setup read URBs
[  205.897101][    T9] mcba_usb 5-1:0.0 can0: couldn't start device: -90
[  205.952549][    T9] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90
[  206.105857][    T9] usb 5-1: USB disconnect, device number 24
[  206.352183][ T5215] Bluetooth: hci2: command tx timeout
[  207.030682][T10501] loop5: detected capacity change from 0 to 16
[  207.083637][T10501] erofs (device loop5): mounted with root inode @ nid 36.
[  207.132249][   T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  207.281908][   T31] usb 5-1: Using ep0 maxpacket: 32
[  207.289095][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.296841][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.305304][   T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  207.314435][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.347503][   T31] usb 5-1: config 0 descriptor??
[  207.372108][   T31] hub 5-1:0.0: USB hub found
[  207.419057][T10507] loop5: detected capacity change from 0 to 4096
[  207.473869][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  207.489058][T10507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.528438][T10250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.557609][   T31] hub 5-1:0.0: 4 ports detected
[  207.564785][   T31] hub 5-1:0.0: insufficient power available to use all downstream ports
[  207.882478][T10517] loop5: detected capacity change from 0 to 32768
[  207.933702][T10517] JBD2: Ignoring recovery information on journal
[  207.980075][   T31] usb 5-1: USB disconnect, device number 25
[  208.001769][T10517] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  208.089473][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  208.089492][   T33] audit: type=1800 audit(1776957464.212:181): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1833" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  208.247641][T10250] ocfs2: Unmounting device (7,5) on (node local)
[  208.366344][    C1] hpet: Lost 1 RTC interrupts
[  208.531740][ T5215] Bluetooth: hci2: command tx timeout
[  208.725383][T10537] loop4: detected capacity change from 0 to 128
[  208.789839][T10537] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  208.794500][T10537] hpfs: filesystem error: improperly stopped
[  208.797759][T10537] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  208.800110][T10537] hpfs: You really don't want any checks? You are crazy...
[  208.803362][T10537] hpfs: hpfs_map_sector(): read error
[  208.805964][T10537] hpfs: code page support is disabled
[  208.812277][T10537] hpfs: hpfs_map_4sectors(): unaligned read
[  208.814454][T10537] hpfs: hpfs_map_4sectors(): unaligned read
[  208.816751][T10537] hpfs: filesystem error: unable to find root dir
[  208.966514][T10549] netlink: 'syz.4.1845': attribute type 23 has an invalid length.
[  209.259720][T10559] 9p: Bad value for 'wfdno'
[  209.270453][T10547] loop5: detected capacity change from 0 to 40427
[  209.278137][T10547] F2FS-fs (loop5): invalid crc value
[  209.293994][T10547] F2FS-fs (loop5): invalid journal entries nats 0 sits 44
[  209.297267][T10547] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-22)
[  209.372116][T10571] loop5: detected capacity change from 0 to 64
[  210.074991][   T31] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  210.243280][   T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[  210.251795][   T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  210.255917][   T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.260138][   T31] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  210.268082][   T31] usb 5-1: config 0 interface 0 has no altsetting 0
[  210.276258][   T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  210.280847][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.298873][   T31] usb 5-1: config 0 descriptor??
[  210.626230][T10611] loop5: detected capacity change from 0 to 16
[  210.631195][T10611] erofs (device loop5): mounted with root inode @ nid 36.
[  210.643363][T10611] erofs (device loop5): readahead error at folio 2 @ nid 89
[  210.646472][T10611] erofs (device loop5): too much compressed data @ la 512 of nid 89
[  210.650177][T10611] erofs (device loop5): readahead error at folio 1 @ nid 89
[  210.654290][T10611] erofs (device loop5): bogus lookback distance 1 @ lcn 0 of nid 89
[  210.657323][T10611] erofs (device loop5): readahead error at folio 0 @ nid 89
[  210.666641][T10611] syz.5.1872: attempt to access beyond end of device
[  210.666641][T10611] loop5: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  210.682965][T10611] erofs (device loop5): bogus lookback distance 1 @ lcn 0 of nid 89
[  210.686070][T10611] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 3584
[  210.690292][T10611] erofs (device loop5): read error -117 @ 0 of nid 89
[  210.695325][   T33] audit: type=1800 audit(1776957466.822:182): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1872" name="file2" dev="loop5" ino=89 res=0 errno=0
[  210.735418][   T31] ryos 0003:1E7D:3138.0005: collection stack underflow
[  210.745549][   T31] ryos 0003:1E7D:3138.0005: item 0 4 0 12 parsing failed
[  210.752478][   T31] ryos 0003:1E7D:3138.0005: parse failed
[  210.761887][   T31] ryos 0003:1E7D:3138.0005: probe with driver ryos failed with error -22
[  210.936819][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'.
[  210.949074][   T31] usb 5-1: USB disconnect, device number 26
[  212.192945][T10643] fuse: fd is not a fuse device
[  212.499500][T10650] loop5: detected capacity change from 0 to 4096
[  212.504206][T10650] EXT4-fs (loop5): Test dummy encryption mode enabled
[  212.520103][T10650] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  212.532501][T10650] System zones: 0-5
[  212.561398][T10650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.692985][T10250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.802501][T10658] loop5: detected capacity change from 0 to 128
[  213.026769][T10668] binder: 10667:10668 ioctl 80089418 2000000000c0 returned -22
[  213.047966][T10668] loop5: detected capacity change from 0 to 1024
[  213.057036][T10668] hfsplus: failed to load extents file
[  213.997568][T10708] loop5: detected capacity change from 0 to 1024
[  214.002313][T10708] EXT4-fs: Ignoring removed oldalloc option
[  214.042092][T10708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.082823][T10250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.085912][   T33] audit: type=1326 audit(1776957470.212:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.092988][   T33] audit: type=1326 audit(1776957470.212:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.103349][   T33] audit: type=1326 audit(1776957470.222:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.109905][   T33] audit: type=1326 audit(1776957470.232:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.135223][   T33] audit: type=1326 audit(1776957470.232:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.152237][   T33] audit: type=1326 audit(1776957470.232:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.169914][   T33] audit: type=1326 audit(1776957470.232:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.176881][   T33] audit: type=1326 audit(1776957470.232:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.197242][   T33] audit: type=1326 audit(1776957470.232:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  214.206819][   T33] audit: type=1326 audit(1776957470.232:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  215.006046][T10742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1924'.
[  215.013649][T10742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1924'.
[  215.156203][ T5869] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  215.311987][ T5869] usb 5-1: Using ep0 maxpacket: 8
[  215.318942][ T5869] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  215.326632][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.340792][ T5869] usb 5-1: Product: syz
[  215.344081][ T5869] usb 5-1: Manufacturer: syz
[  215.347072][ T5869] usb 5-1: SerialNumber: syz
[  215.357624][ T5869] usb 5-1: config 0 descriptor??
[  215.365967][ T5869] gspca_main: se401-2.14.0 probing 047d:5003
[  215.495929][T10755] loop5: detected capacity change from 0 to 128
[  215.559999][T10755] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  215.587427][T10755] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  215.983787][ T5869] gspca_se401: read req failed req 0x06 error -19
[  215.991046][ T5869] usb 5-1: USB disconnect, device number 27
[  216.174179][ T5869] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[  216.373226][ T5869] usb 5-1: string descriptor 0 read error: -22
[  216.375252][ T5869] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  216.386039][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.408983][ T5869] usb 5-1: config 0 descriptor??
[  216.749646][ T5869] gspca_main: se401-2.14.0 probing 047d:5003
[  216.850446][T10781] overlayfs: failed to clone upperpath
[  217.231741][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  217.540008][T10250] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.836641][T10800] loop5: detected capacity change from 0 to 64
[  217.882283][ T5869] gspca_se401: read req failed req 0x06 error -19
[  217.894815][ T5869] usb 5-1: USB disconnect, device number 28
[  217.925096][T10802] netlink: 'syz.4.1938': attribute type 1 has an invalid length.
[  218.257474][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'.
[  218.626395][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'.
[  219.213366][ T5869] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  219.238330][T10840] loop5: detected capacity change from 0 to 128
[  219.246872][T10840] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  219.252391][T10840] FAT-fs (loop5): Filesystem has been set read-only
[  219.394755][ T5869] usb 5-1: Using ep0 maxpacket: 8
[  219.399689][ T5869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  219.405984][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  219.416487][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  219.419802][ T5869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  219.423899][ T5869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  219.431101][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.660683][ T5869] usb 5-1: usb_control_msg returned -32
[  219.670500][ T5869] usbtmc 5-1:16.0: can't read capabilities
[  221.887262][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'.
[  221.889898][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'.
[  221.930465][ T6343] usb 5-1: USB disconnect, device number 29
[  222.211819][   T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  222.361856][   T31] usb 6-1: Using ep0 maxpacket: 16
[  222.376658][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  222.381283][   T31] usb 6-1: config 211 has an invalid interface number: 254 but max is 0
[  222.386141][   T31] usb 6-1: config 211 has no interface number 0
[  222.392034][   T31] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d7.f8
[  222.395853][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.399621][   T31] usb 6-1: Product: syz
[  222.401216][   T31] usb 6-1: Manufacturer: syz
[  222.407630][   T31] usb 6-1: SerialNumber: syz
[  222.441711][ T6343] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  222.452670][T10934] overlayfs: failed to clone upperpath
[  222.591990][ T6343] usb 5-1: Using ep0 maxpacket: 8
[  222.603019][ T6343] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  222.606461][ T6343] usb 5-1: config 0 has no interface number 0
[  222.612419][ T6343] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  222.616722][ T6343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.619779][ T6343] usb 5-1: Product: syz
[  222.621435][ T6343] usb 5-1: Manufacturer: syz
[  222.623427][ T6343] usb 5-1: SerialNumber: syz
[  222.636211][   T31] kl5kusb105 6-1:211.254: KL5KUSB105D / PalmConnect converter detected
[  222.641109][ T6343] usb 5-1: config 0 descriptor??
[  222.650804][   T31] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  222.661035][   T31] usb 6-1: USB disconnect, device number 2
[  222.680379][   T31] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  222.685282][   T31] kl5kusb105 6-1:211.254: device disconnected
[  222.848047][ T6343] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  222.853482][ T6343] uvcvideo 5-1:0.31: No streaming interface found for terminal 32774.
[  222.861373][ T6343] usb 5-1: USB disconnect, device number 30
[  223.246089][T10949] loop5: detected capacity change from 0 to 256
[  223.253109][T10949] exfat: Deprecated parameter 'utf8'
[  223.265762][T10949] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d)
[  223.489939][T10953] loop4: detected capacity change from 0 to 2048
[  223.517751][T10953] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  223.535395][T10953] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  223.542473][T10953] UDF-fs: Scanning with blocksize 512 failed
[  223.575267][T10953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.599212][T10951] loop5: detected capacity change from 0 to 40427
[  223.604694][T10951] F2FS-fs (loop5): invalid crc value
[  223.733009][T10951] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  223.746164][T10951] F2FS-fs (loop5): Start checkpoint disabled!
[  223.746292][T10959] loop4: detected capacity change from 0 to 256
[  223.753012][T10951] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  223.762993][T10951] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  223.777133][T10959] FAT-fs (loop4): Directory bread(block 64) failed
[  223.779128][T10959] FAT-fs (loop4): Directory bread(block 65) failed
[  223.781051][T10959] FAT-fs (loop4): Directory bread(block 66) failed
[  223.787051][T10959] FAT-fs (loop4): Directory bread(block 67) failed
[  223.791243][T10959] FAT-fs (loop4): Directory bread(block 68) failed
[  223.794282][T10959] FAT-fs (loop4): Directory bread(block 69) failed
[  223.796313][T10959] FAT-fs (loop4): Directory bread(block 70) failed
[  223.798288][T10959] FAT-fs (loop4): Directory bread(block 71) failed
[  223.800250][T10959] FAT-fs (loop4): Directory bread(block 72) failed
[  223.802409][T10959] FAT-fs (loop4): Directory bread(block 73) failed
[  224.040817][T10963] syz.5.2002: attempt to access beyond end of device
[  224.040817][T10963] loop5: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[  224.098954][T10963] syz.5.2002: attempt to access beyond end of device
[  224.098954][T10963] loop5: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[  224.206642][T10963] syz.5.2002: attempt to access beyond end of device
[  224.206642][T10963] loop5: rw=2049, sector=57344, nr_sectors = 3160 limit=40427
[  224.336614][   T32] kworker/u9:1: attempt to access beyond end of device
[  224.336614][   T32] loop5: rw=1, sector=60504, nr_sectors = 13224 limit=40427
[  224.364688][   T32] kworker/u9:1: attempt to access beyond end of device
[  224.364688][   T32] loop5: rw=1, sector=73728, nr_sectors = 8 limit=40427
[  224.373053][   T32] kworker/u9:1: attempt to access beyond end of device
[  224.373053][   T32] loop5: rw=1, sector=73736, nr_sectors = 8 limit=40427
[  224.379155][   T32] kworker/u9:1: attempt to access beyond end of device
[  224.379155][   T32] loop5: rw=1, sector=73744, nr_sectors = 8 limit=40427
[  224.393166][   T32] kworker/u9:1: attempt to access beyond end of device
[  224.393166][   T32] loop5: rw=1, sector=73752, nr_sectors = 8 limit=40427
[  224.402130][   T32] kworker/u9:1: attempt to access beyond end of device
[  224.402130][   T32] loop5: rw=1, sector=73760, nr_sectors = 8 limit=40427
[  224.408239][   T32] kworker/u9:1: attempt to access beyond end of device
[  224.408239][   T32] loop5: rw=1, sector=73768, nr_sectors = 8 limit=40427
[  224.619633][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  224.619651][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.619658][   T32] Workqueue: writeback wb_workfn (flush-7:5)
[  224.619681][   T32] Call Trace:
[  224.619686][   T32]  <TASK>
[  224.619691][   T32]  dump_stack_lvl+0xe8/0x150
[  224.619707][   T32]  f2fs_handle_critical_error+0x37c/0x540
[  224.619723][   T32]  f2fs_write_end_io+0x1273/0x1740
[  224.619776][   T32]  __submit_merged_bio+0x256/0x6a0
[  224.619789][   T32]  ? _raw_spin_unlock+0x28/0x50
[  224.619805][   T32]  f2fs_submit_page_write+0x2354/0x24f0
[  224.619823][   T32]  ? f2fs_allocate_data_block+0x2c90/0x4130
[  224.619839][   T32]  ? __pfx_f2fs_submit_page_write+0x10/0x10
[  224.619852][   T32]  ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0
[  224.619870][   T32]  do_write_page+0x40f/0xac0
[  224.619882][   T32]  f2fs_outplace_write_data+0x11a/0x220
[  224.619893][   T32]  f2fs_do_write_data_page+0x123b/0x16f0
[  224.619905][   T32]  ? mod_memcg_lruvec_state+0xe3/0x220
[  224.619918][   T32]  ? lock_acquire+0x106/0x350
[  224.619936][   T32]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  224.619950][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  224.619971][   T32]  f2fs_write_single_data_page+0x976/0x1880
[  224.619990][   T32]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  224.620014][   T32]  ? folio_clear_dirty_for_io+0x570/0x710
[  224.620027][   T32]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  224.620040][   T32]  f2fs_write_data_pages+0x1a42/0x34f0
[  224.620083][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.620127][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  224.620149][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.620161][   T32]  do_writepages+0x32e/0x550
[  224.620175][   T32]  ? reacquire_held_locks+0x104/0x190
[  224.620184][   T32]  ? writeback_sb_inodes+0x463/0x19d0
[  224.620199][   T32]  __writeback_single_inode+0x133/0x10e0
[  224.620207][   T32]  ? do_raw_spin_unlock+0x4d/0x210
[  224.620227][   T32]  writeback_sb_inodes+0x979/0x19d0
[  224.620240][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  224.620265][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  224.620277][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  224.620306][   T32]  ? rcu_is_watching+0x15/0xb0
[  224.620321][   T32]  wb_writeback+0x445/0xb00
[  224.620335][   T32]  ? queue_io+0x291/0x470
[  224.620351][   T32]  ? __pfx_wb_writeback+0x10/0x10
[  224.620362][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  224.620380][   T32]  wb_workfn+0x3f8/0xf10
[  224.620389][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  224.620401][   T32]  ? look_up_lock_class+0x57/0x110
[  224.620418][   T32]  ? __pfx_wb_workfn+0x10/0x10
[  224.620430][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  224.620440][   T32]  ? lock_acquire+0x106/0x350
[  224.620452][   T32]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  224.620464][   T32]  ? process_scheduled_works+0xa70/0x1860
[  224.620478][   T32]  ? process_scheduled_works+0xa70/0x1860
[  224.620493][   T32]  ? process_scheduled_works+0xa70/0x1860
[  224.620503][   T32]  ? process_scheduled_works+0xa70/0x1860
[  224.620515][   T32]  process_scheduled_works+0xb5d/0x1860
[  224.620540][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  224.620554][   T32]  ? assign_work+0x3d5/0x5e0
[  224.620567][   T32]  worker_thread+0xa53/0xfc0
[  224.620592][   T32]  kthread+0x388/0x470
[  224.620602][   T32]  ? __pfx_worker_thread+0x10/0x10
[  224.620612][   T32]  ? __pfx_kthread+0x10/0x10
[  224.620621][   T32]  ret_from_fork+0x514/0xb70
[  224.620635][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  224.620647][   T32]  ? __switch_to+0xc79/0x1410
[  224.620659][   T32]  ? __pfx_kthread+0x10/0x10
[  224.620668][   T32]  ret_from_fork_asm+0x1a/0x30
[  224.620685][   T32]  </TASK>
[  224.644024][   T32] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  224.816911][T10977] loop4: detected capacity change from 0 to 256
[  225.283048][T11003] loop4: detected capacity change from 0 to 16384
[  225.327748][T11005] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.351762][ T6343] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  225.504378][ T6343] usb 6-1: unable to get BOS descriptor or descriptor too short
[  225.508559][ T6343] usb 6-1: not running at top speed; connect to a high speed hub
[  225.513902][ T6343] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.517725][ T6343] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  225.524541][ T6343] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice=14.40
[  225.528164][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.531235][ T6343] usb 6-1: Product: syz
[  225.533018][ T6343] usb 6-1: Manufacturer: syz
[  225.534871][ T6343] usb 6-1: SerialNumber: syz
[  225.651631][ T5869] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  225.746640][ T6343] usb 6-1: unit 0 not found!
[  225.775597][ T6343] usb 6-1: USB disconnect, device number 3
[  225.796775][ T6867] udevd[6867]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  225.801916][ T5869] usb 5-1: Using ep0 maxpacket: 32
[  225.806158][ T5869] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  225.810808][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.818026][ T5869] usb 5-1: config 0 descriptor??
[  226.035328][ T5869] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  226.057362][ T5869] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  226.061337][ T5869] dib0700: firmware download failed at 7 with -22
[  226.067781][ T5869] usb 5-1: USB disconnect, device number 31
[  226.555217][T11015] loop5: detected capacity change from 0 to 2048
[  226.561303][T11015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.588954][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  226.588972][   T33] audit: type=1800 audit(1776957482.712:195): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2031" name="file1" dev="loop5" ino=1367 res=0 errno=0
[  226.901845][ T5869] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  227.021547][  T894] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  227.071661][ T5869] usb 6-1: Using ep0 maxpacket: 8
[  227.076104][ T5869] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  227.082077][ T5869] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  227.087709][ T5869] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  227.096411][ T5869] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  227.099841][ T5869] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  227.104893][ T5869] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.109996][ T5869] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  227.114689][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.201546][  T894] usb 5-1: Using ep0 maxpacket: 8
[  227.208234][  T894] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00
[  227.211293][  T894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.216838][  T894] usb 5-1: Product: syz
[  227.218130][  T894] usb 5-1: Manufacturer: syz
[  227.219584][  T894] usb 5-1: SerialNumber: syz
[  227.327729][ T5869] usb 6-1: usb_control_msg returned -32
[  227.329809][ T5869] usbtmc 6-1:16.0: can't read capabilities
[  227.428968][  T894] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71
[  227.434701][  T894] kalmia 5-1:1.0: probe with driver kalmia failed with error -71
[  227.440448][  T894] usb 5-1: USB disconnect, device number 32
[  228.255211][T11045] loop4: detected capacity change from 0 to 32768
[  228.276538][T11045] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.287139][T11045] XFS (loop4): Ending clean mount
[  228.330387][ T6624] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.691679][  T894] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  228.866398][  T894] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  228.871123][  T894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.878119][  T894] usb 5-1: config 0 descriptor??
[  228.885420][  T894] usb 5-1: selecting invalid altsetting 1
[  228.887831][  T894] flexcop_usb: set interface failed.
[  228.890025][  T894] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  229.105848][  T894] usb 5-1: USB disconnect, device number 33
[  229.703550][  T894] usb 6-1: USB disconnect, device number 4
[  229.909795][T11082] loop5: detected capacity change from 0 to 256
[  229.920224][T11082] exfat: Deprecated parameter 'utf8'
[  229.929038][T11082] exfat: Deprecated parameter 'utf8'
[  229.954718][T11082] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  230.316516][ T6624] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  230.332860][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  230.332875][ T6624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.332881][ T6624] Call Trace:
[  230.332886][ T6624]  <TASK>
[  230.332891][ T6624]  dump_stack_lvl+0xe8/0x150
[  230.332911][ T6624]  dump_header+0xd3/0x4c0
[  230.332924][ T6624]  oom_kill_process+0x3ab/0x970
[  230.332937][ T6624]  out_of_memory+0x106c/0x1410
[  230.332946][ T6624]  ? try_charge_memcg+0xbb9/0x1570
[  230.332959][ T6624]  ? __pfx___mutex_lock+0x10/0x10
[  230.332974][ T6624]  ? __pfx_out_of_memory+0x10/0x10
[  230.332982][ T6624]  ? do_raw_spin_unlock+0x4d/0x210
[  230.332998][ T6624]  try_charge_memcg+0xc77/0x1570
[  230.333016][ T6624]  ? __pfx_try_charge_memcg+0x10/0x10
[  230.333024][ T6624]  ? percpu_ref_tryget+0x15/0x180
[  230.333043][ T6624]  ? charge_memcg+0x23/0x2b0
[  230.333057][ T6624]  charge_memcg+0x1a2/0x2b0
[  230.333072][ T6624]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  230.333085][ T6624]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  230.333102][ T6624]  __swap_cache_prepare_and_add+0xdc/0x700
[  230.333116][ T6624]  ? page_rmappable_folio+0x9a/0x170
[  230.333149][ T6624]  swap_cache_alloc_folio+0xf1/0x240
[  230.333159][ T6624]  swap_cluster_readahead+0x355/0x670
[  230.333170][ T6624]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  230.333184][ T6624]  ? get_vma_policy+0x27b/0x3c0
[  230.333195][ T6624]  swapin_readahead+0x196/0xc50
[  230.333204][ T6624]  ? swap_table_get+0x1e/0x260
[  230.333218][ T6624]  ? __pfx_swapin_readahead+0x10/0x10
[  230.333227][ T6624]  ? swap_table_get+0x1e/0x260
[  230.333237][ T6624]  ? swap_table_get+0x1e/0x260
[  230.333247][ T6624]  ? swap_table_get+0x1e/0x260
[  230.333259][ T6624]  ? swap_table_get+0x216/0x260
[  230.333270][ T6624]  ? swap_cache_get_folio+0x2e4/0x2f0
[  230.333284][ T6624]  do_swap_page+0x555/0x5120
[  230.333298][ T6624]  ? __pte_offset_map+0x29/0x240
[  230.333307][ T6624]  ? __pte_offset_map+0x29/0x240
[  230.333318][ T6624]  ? do_swap_page+0x128/0x5120
[  230.333329][ T6624]  ? __pfx_do_swap_page+0x10/0x10
[  230.333369][ T6624]  ? __pte_offset_map+0x1ae/0x240
[  230.333379][ T6624]  ? pte_offset_map_rw_nolock+0xea/0x160
[  230.333389][ T6624]  handle_mm_fault+0x12d2/0x3170
[  230.333404][ T6624]  ? handle_mm_fault+0xee/0x3170
[  230.333414][ T6624]  ? __pfx_handle_mm_fault+0x10/0x10
[  230.333422][ T6624]  ? lock_vma_under_rcu+0x45a/0x500
[  230.333441][ T6624]  do_user_addr_fault+0xa73/0x1340
[  230.333457][ T6624]  ? rcu_is_watching+0x15/0xb0
[  230.333466][ T6624]  ? trace_page_fault_user+0x84/0x1e0
[  230.333478][ T6624]  exc_page_fault+0x6a/0xc0
[  230.333487][ T6624]  asm_exc_page_fault+0x26/0x30
[  230.333495][ T6624] RIP: 0033:0x7fc2eb15d04e
[  230.333504][ T6624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  230.333512][ T6624] RSP: 002b:00007fff2dc05e98 EFLAGS: 00010246
[  230.333520][ T6624] RAX: 0000000000000000 RBX: 000055555b1bb500 RCX: 00007fc2eb15d04e
[  230.333526][ T6624] RDX: 00007fff2dc05ef0 RSI: 0000000000000000 RDI: 0000000000000000
[  230.333531][ T6624] RBP: 00007fff2dc05f5c R08: 0000000000000000 R09: 0000000000000000
[  230.333536][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  230.333541][ T6624] R13: 00000000000927c0 R14: 00000000000380da R15: 00007fff2dc05fb0
[  230.333554][ T6624]  </TASK>
[  230.333624][ T6624] memory: usage 307200kB, limit 307200kB, failcnt 175
[  230.466150][ T6624] memory+swap: usage 298316kB, limit 9007199254740988kB, failcnt 0
[  230.469350][ T6624] kmem: usage 297924kB, limit 9007199254740988kB, failcnt 0
[  230.472303][ T6624] Memory cgroup stats for /syz4:
[  230.472782][ T6624] cache 0
[  230.476125][ T6624] rss 0
[  230.477247][ T6624] rss_huge 0
[  230.478605][ T6624] shmem 0
[  230.479773][ T6624] mapped_file 0
[  230.481143][ T6624] dirty 0
[  230.482419][ T6624] writeback 0
[  230.483754][ T6624] workingset_refault_anon 2
[  230.485530][ T6624] workingset_refault_file 0
[  230.487447][ T6624] swap 221184
[  230.488788][ T6624] swapcached 245760
[  230.490440][ T6624] pgpgin 135283
[  230.491941][ T6624] pgpgout 136813
[  230.493379][ T6624] pgfault 168136
[  230.494781][ T6624] pgmajfault 4
[  230.496135][ T6624] inactive_anon 0
[  230.497723][ T6624] active_anon 8192
[  230.499412][ T6624] inactive_file 0
[  230.500924][ T6624] active_file 4096
[  230.502549][ T6624] unevictable 0
[  230.503942][ T6624] hierarchical_memory_limit 314572800
[  230.506141][ T6624] hierarchical_memsw_limit 9223372036854771712
[  230.508709][ T6624] total_cache 0
[  230.510149][ T6624] total_rss 0
[  230.516590][ T6624] total_rss_huge 0
[  230.518201][ T6624] total_shmem 0
[  230.519744][ T6624] total_mapped_file 0
[  230.521664][ T6624] total_dirty 0
[  230.523057][ T6624] total_writeback 0
[  230.524550][ T6624] total_workingset_refault_anon 2
[  230.526491][ T6624] total_workingset_refault_file 0
[  230.528459][ T6624] total_swap 221184
[  230.530113][ T6624] total_swapcached 245760
[  230.532308][ T6624] total_pgpgin 135283
[  230.533974][ T6624] total_pgpgout 136813
[  230.535555][ T6624] total_pgfault 168136
[  230.537220][ T6624] total_pgmajfault 4
[  230.538723][ T6624] total_inactive_anon 0
[  230.540499][ T6624] total_active_anon 8192
[  230.542629][ T6624] total_inactive_file 0
[  230.544426][ T6624] total_active_file 4096
[  230.546063][ T6624] total_unevictable 0
[  230.547618][ T6624] anon_cost 0
[  230.548855][ T6624] file_cost 0
[  230.550134][ T6624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2055,pid=11075,uid=0
[  230.560107][ T6624] Memory cgroup out of memory: Killed process 11075 (syz.4.2055) total-vm:104276kB, anon-rss:1240kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  230.784521][T11108] loop4: detected capacity change from 0 to 1024
[  230.817935][T11108] EXT4-fs: Mount option(s) incompatible with ext3
[  231.425034][T11140] loop4: detected capacity change from 0 to 512
[  231.454295][T11140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.473190][T11140] EXT4-fs (loop4): shut down requested (1)
[  231.498589][ T6624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.525462][  T795] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  231.633186][T11146] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.2086'.
[  231.691607][  T795] usb 6-1: Using ep0 maxpacket: 32
[  231.695095][  T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.703604][  T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.712023][  T795] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  231.721026][  T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.732035][  T795] usb 6-1: config 0 descriptor??
[  231.738742][  T795] hub 6-1:0.0: USB hub found
[  231.946098][  T795] hub 6-1:0.0: 1 port detected
[  232.010400][T11158] fuse: fd is not a fuse device
[  232.056946][ T5215] Bluetooth: hci1: SCO packet for unknown connection handle 4041
[  232.551441][ T6732] hub 6-1:0.0: activate --> -90
[  232.957941][  T795] usb 6-1: USB disconnect, device number 5
[  233.005126][T11185] loop4: detected capacity change from 0 to 1764
[  233.465105][   T33] audit: type=1326 audit(1776957489.592:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.483541][   T33] audit: type=1326 audit(1776957489.602:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.501885][   T33] audit: type=1326 audit(1776957489.602:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.519773][   T33] audit: type=1326 audit(1776957489.602:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.529247][   T33] audit: type=1326 audit(1776957489.602:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.539931][   T33] audit: type=1326 audit(1776957489.602:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.548446][   T33] audit: type=1326 audit(1776957489.602:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.557437][   T33] audit: type=1326 audit(1776957489.602:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.578199][   T33] audit: type=1326 audit(1776957489.602:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.592544][   T33] audit: type=1326 audit(1776957489.602:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb19c819 code=0x7ffc0000
[  233.907394][T11232] syz.3.2125 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  234.277095][T11249] net_ratelimit: 45 callbacks suppressed
[  234.277114][T11249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.403998][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'.
[  234.610429][T11253] netlink: 'syz.3.2132': attribute type 1 has an invalid length.
[  234.613128][T11253] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2132'.
[  234.615885][T11253] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2132'.
[  235.029132][T11265] CIFS: VFS: UNC: path must begin with // or \\
[  235.032104][T11265] Malformed UNC in devname
[  235.032104][T11265] 
[  235.037401][T11265] CIFS: VFS: Malformed UNC in devname
[  235.442916][  T795] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  235.501652][   T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  235.593205][  T795] usb 5-1: Using ep0 maxpacket: 32
[  235.597323][  T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  235.602560][  T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  235.608572][  T795] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  235.612813][  T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.616710][  T795] usb 5-1: Product: syz
[  235.619355][  T795] usb 5-1: Manufacturer: syz
[  235.621326][  T795] usb 5-1: SerialNumber: syz
[  235.626742][  T795] usb 5-1: config 0 descriptor??
[  235.651628][   T31] usb 6-1: Using ep0 maxpacket: 32
[  235.658523][   T31] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  235.669436][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.681583][   T31] usb 6-1: config 0 has no interface number 0
[  235.689187][   T31] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  235.698412][   T31] usb 6-1: config 0 interface 184 has no altsetting 0
[  235.711717][   T31] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  235.716006][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.721607][   T31] usb 6-1: Product: syz
[  235.725176][   T31] usb 6-1: Manufacturer: syz
[  235.730274][   T31] usb 6-1: SerialNumber: syz
[  235.740490][   T31] usb 6-1: config 0 descriptor??
[  235.749708][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  235.754484][   T31] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22
[  235.774853][ T6867] udevd[6867]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.840404][ T5897] usb 5-1: USB disconnect, device number 34
[  235.954218][  T894] usb 6-1: USB disconnect, device number 6
[  236.516746][T11293] loop5: detected capacity change from 0 to 512
[  236.536470][T11293] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  236.541776][T11295] loop4: detected capacity change from 0 to 1024
[  236.567729][T11295] hfsplus: failed to load catalog file
[  236.580524][T11293] EXT4-fs (loop5): 1 truncate cleaned up
[  236.587393][T11293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.784920][T10250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.447733][T11331] loop5: detected capacity change from 0 to 512
[  237.454331][T11334] overlayfs: workdir and upperdir must reside under the same mount
[  237.498823][T11331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.515001][T11331] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.544148][T11342] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  237.646987][T10250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.740506][T11349] loop4: detected capacity change from 0 to 512
[  237.745557][T11349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  237.750528][T11349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  237.768377][T11349] EXT4-fs (loop4): 1 truncate cleaned up
[  237.773863][T11349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.808137][ T6624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.898757][T11356] loop4: detected capacity change from 0 to 1024
[  238.160409][T11370] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  238.468508][T11379] loop4: detected capacity change from 0 to 64
[  238.481133][T11379] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  238.490180][T11379] overlayfs: failed to look up (492) for ino (-13)
[  238.831658][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  238.901616][   T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  239.057840][   T31] usb 5-1: Using ep0 maxpacket: 32
[  239.060976][   T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  239.065339][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  239.069208][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  239.072965][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  239.083785][   T31] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  239.086616][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.088945][   T31] usb 5-1: Product: syz
[  239.090190][   T31] usb 5-1: Manufacturer: syz
[  239.093438][T11431] macvtap0: entered promiscuous mode
[  239.095106][   T31] usb 5-1: SerialNumber: syz
[  239.102949][   T31] usb 5-1: config 0 descriptor??
[  239.103149][T11431] macvtap0: left promiscuous mode
[  239.315141][ T5897] usb 5-1: USB disconnect, device number 35
[  239.409998][T11439] loop5: detected capacity change from 0 to 32768
[  239.434647][T11439] JBD2: Ignoring recovery information on journal
[  239.484197][T11439] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  239.566732][T11439] 
[  239.567869][T11439] ======================================================
[  239.570323][T11439] WARNING: possible circular locking dependency detected
[  239.572829][T11439] syzkaller #0 Not tainted
[  239.574520][T11439] ------------------------------------------------------
[  239.577091][T11439] syz.5.2189/11439 is trying to acquire lock:
[  239.579337][T11439] ffff8881b1c4a5a0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_evict_inode+0x1539/0x43b0
[  239.583974][T11439] 
[  239.583974][T11439] but task is already holding lock:
[  239.586640][T11439] ffff8881b1c4b3a0 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_evict_inode+0xe97/0x43b0
[  239.591132][T11439] 
[  239.591132][T11439] which lock already depends on the new lock.
[  239.591132][T11439] 
[  239.594938][T11439] 
[  239.594938][T11439] the existing dependency chain (in reverse order) is:
[  239.598303][T11439] 
[  239.598303][T11439] -> #2 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}:
[  239.602225][T11439]        down_write+0x96/0x200
[  239.604004][T11439]        ocfs2_del_inode_from_orphan+0x12e/0x7a0
[  239.606394][T11439]        ocfs2_dio_end_io+0xf9c/0x1370
[  239.608453][T11439]        dio_complete+0x25b/0x790
[  239.610371][T11439]        __blockdev_direct_IO+0x2e5d/0x34e0
[  239.612577][T11439]        ocfs2_direct_IO+0x251/0x2c0
[  239.614642][T11439]        generic_file_direct_write+0x1db/0x3e0
[  239.616860][T11439]        __generic_file_write_iter+0x11d/0x230
[  239.619109][T11439]        ocfs2_file_write_iter+0x1663/0x1e70
[  239.621263][T11439]        do_iter_readv_writev+0x619/0x8c0
[  239.623379][T11439]        vfs_writev+0x33c/0x990
[  239.625204][T11439]        do_writev+0x154/0x2e0
[  239.627027][T11439]        do_syscall_64+0x15f/0xf80
[  239.628986][T11439]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.631420][T11439] 
[  239.631420][T11439] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  239.635259][T11439]        down_write+0x96/0x200
[  239.637038][T11439]        ocfs2_reserve_suballoc_bits+0x16d/0x4840
[  239.639429][T11439]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  239.641948][T11439]        ocfs2_mknod+0x10f3/0x2260
[  239.643827][T11439]        ocfs2_create+0x195/0x460
[  239.645733][T11439]        path_openat+0x1395/0x3860
[  239.647616][T11439]        do_file_open+0x23e/0x4a0
[  239.649518][T11439]        do_sys_openat2+0x113/0x200
[  239.651551][T11439]        __x64_sys_openat+0x138/0x170
[  239.653518][T11439]        do_syscall_64+0x15f/0xf80
[  239.655426][T11439]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.657797][T11439] 
[  239.657797][T11439] -> #0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  239.661673][T11439]        __lock_acquire+0x15a5/0x2cf0
[  239.663708][T11439]        lock_acquire+0x106/0x350
[  239.665561][T11439]        down_write+0x96/0x200
[  239.667339][T11439]        ocfs2_evict_inode+0x1539/0x43b0
[  239.669443][T11439]        evict+0x61e/0xb10
[  239.671140][T11439]        vfs_rmdir+0x42a/0x6e0
[  239.672978][T11439]        filename_rmdir+0x292/0x520
[  239.674958][T11439]        __se_sys_rmdir+0x2e/0x140
[  239.677143][T11439]        do_syscall_64+0x15f/0xf80
[  239.679071][T11439]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.681460][T11439] 
[  239.681460][T11439] other info that might help us debug this:
[  239.681460][T11439] 
[  239.685195][T11439] Chain exists of:
[  239.685195][T11439]   &ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE] --> &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]
[  239.685195][T11439] 
[  239.693028][T11439]  Possible unsafe locking scenario:
[  239.693028][T11439] 
[  239.695747][T11439]        CPU0                    CPU1
[  239.697792][T11439]        ----                    ----
[  239.699722][T11439]   lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);
[  239.702388][T11439]                                lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  239.705991][T11439]                                lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);
[  239.709539][T11439]   lock(&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]);
[  239.712218][T11439] 
[  239.712218][T11439]  *** DEADLOCK ***
[  239.712218][T11439] 
[  239.715236][T11439] 4 locks held by syz.5.2189/11439:
[  239.717237][T11439]  #0: ffff8881741c2410 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  239.720754][T11439]  #1: ffff8881bbef09a0 (&type->i_mutex_dir_key#23/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520
[  239.724731][T11439]  #2: ffff88816cfc4bc0 (&osb->nfs_sync_rwlock){.+.+}-{4:4}, at: ocfs2_nfs_sync_lock+0x106/0x270
[  239.728641][T11439]  #3: ffff8881b1c4b3a0 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_evict_inode+0xe97/0x43b0
[  239.733399][T11439] 
[  239.733399][T11439] stack backtrace:
[  239.735610][T11439] CPU: 0 UID: 0 PID: 11439 Comm: syz.5.2189 Not tainted syzkaller #0 PREEMPT(full) 
[  239.735628][T11439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.735639][T11439] Call Trace:
[  239.735647][T11439]  <TASK>
[  239.735653][T11439]  dump_stack_lvl+0xe8/0x150
[  239.735702][T11439]  print_circular_bug+0x2e1/0x300
[  239.735724][T11439]  check_noncircular+0x12e/0x150
[  239.735743][T11439]  __lock_acquire+0x15a5/0x2cf0
[  239.735765][T11439]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  239.735785][T11439]  ? _raw_spin_unlock+0x28/0x50
[  239.735807][T11439]  ? ocfs2_evict_inode+0x1539/0x43b0
[  239.735822][T11439]  lock_acquire+0x106/0x350
[  239.735840][T11439]  ? ocfs2_evict_inode+0x1539/0x43b0
[  239.735855][T11439]  down_write+0x96/0x200
[  239.735870][T11439]  ? ocfs2_evict_inode+0x1539/0x43b0
[  239.735884][T11439]  ? __pfx_down_write+0x10/0x10
[  239.735901][T11439]  ? do_raw_spin_unlock+0x4d/0x210
[  239.735920][T11439]  ocfs2_evict_inode+0x1539/0x43b0
[  239.735939][T11439]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  239.735952][T11439]  ? __lock_acquire+0x6b5/0x2cf0
[  239.735972][T11439]  ? __lock_acquire+0x6b5/0x2cf0
[  239.735994][T11439]  ? is_bpf_text_address+0x292/0x2b0
[  239.736015][T11439]  ? unwind_next_frame+0xa6/0x2550
[  239.736033][T11439]  ? unwind_next_frame+0xa6/0x2550
[  239.736046][T11439]  ? rcu_is_watching+0x15/0xb0
[  239.736060][T11439]  ? __kasan_check_byte+0x12/0x40
[  239.736085][T11439]  ? unwind_next_frame+0xa6/0x2550
[  239.736100][T11439]  ? rcu_is_watching+0x15/0xb0
[  239.736115][T11439]  ? unwind_next_frame+0xa6/0x2550
[  239.736128][T11439]  ? rcu_is_watching+0x15/0xb0
[  239.736140][T11439]  ? __kasan_check_byte+0x12/0x40
[  239.736157][T11439]  ? is_bpf_text_address+0x26/0x2b0
[  239.736176][T11439]  ? rcu_is_watching+0x15/0xb0
[  239.736189][T11439]  ? __kasan_check_byte+0x12/0x40
[  239.736207][T11439]  ? rcu_is_watching+0x15/0xb0
[  239.736219][T11439]  ? lock_release+0x4b/0x3c0
[  239.736240][T11439]  ? lock_release+0x4b/0x3c0
[  239.736262][T11439]  ? is_bpf_text_address+0x292/0x2b0
[  239.736281][T11439]  ? is_bpf_text_address+0x26/0x2b0
[  239.736299][T11439]  ? kernel_text_address+0xa5/0xe0
[  239.736317][T11439]  ? __kernel_text_address+0xd/0x30
[  239.736333][T11439]  ? unwind_get_return_address+0x4d/0x90
[  239.736346][T11439]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  239.736363][T11439]  ? arch_stack_walk+0xfb/0x150
[  239.736381][T11439]  ? stack_trace_save+0xa9/0x100
[  239.736400][T11439]  ? __pfx_stack_trace_save+0x10/0x10
[  239.736420][T11439]  ? check_path+0x21/0x40
[  239.736434][T11439]  ? check_noncircular+0xda/0x150
[  239.736449][T11439]  ? add_lock_to_list+0xc7/0x100
[  239.736464][T11439]  ? __lock_acquire+0x6b5/0x2cf0
[  239.736491][T11439]  ? inode_wait_for_writeback+0x16d/0x3b0
[  239.736511][T11439]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  239.736529][T11439]  ? do_raw_spin_lock+0x12b/0x2f0
[  239.736548][T11439]  ? do_raw_spin_unlock+0x4d/0x210
[  239.736565][T11439]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  239.736580][T11439]  evict+0x61e/0xb10
[  239.736602][T11439]  ? __pfx_evict+0x10/0x10
[  239.736618][T11439]  ? do_raw_spin_unlock+0x4d/0x210
[  239.736636][T11439]  ? _raw_spin_unlock+0x28/0x50
[  239.736655][T11439]  ? iput+0xb25/0xe80
[  239.736740][T11439]  vfs_rmdir+0x42a/0x6e0
[  239.736763][T11439]  filename_rmdir+0x292/0x520
[  239.736784][T11439]  ? __pfx_filename_rmdir+0x10/0x10
[  239.736805][T11439]  ? do_getname+0x151/0x250
[  239.736825][T11439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.736839][T11439]  __se_sys_rmdir+0x2e/0x140
[  239.736856][T11439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.736870][T11439]  do_syscall_64+0x15f/0xf80
[  239.736884][T11439]  ? trace_irq_disable+0x3b/0x140
[  239.736905][T11439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.736922][T11439] RIP: 0033:0x7f0c8719c819
[  239.736939][T11439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.736953][T11439] RSP: 002b:00007f0c853f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  239.736968][T11439] RAX: ffffffffffffffda RBX: 00007f0c87415fa0 RCX: 00007f0c8719c819
[  239.736979][T11439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  239.736988][T11439] RBP: 00007f0c87232c91 R08: 0000000000000000 R09: 0000000000000000
[  239.736998][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.737006][T11439] R13: 00007f0c87416038 R14: 00007f0c87415fa0 R15: 00007ffe5883bf78
[  239.737021][T11439]  </TASK>
[  239.937039][T10250] ocfs2: Unmounting device (7,5) on (node local)
