last executing test programs:

1.387739597s ago: executing program 2 (id=1016):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
fanotify_init(0x0, 0x400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffa, 0x8001, 0x400000000, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

716.42332ms ago: executing program 2 (id=1018):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000102ff0c00000000000000000a0000003c0001800c000280040001003a0000002c0001801400030020010000000000000000000000000001040004"], 0x50}}, 0x0)

716.199308ms ago: executing program 0 (id=1019):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000852}, 0x0)

716.080725ms ago: executing program 2 (id=1020):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x7e, 0xc, 0x4, 0x5, 0x100000001, 0x2, 0x6, 0x1, 0x40000dd, 0x38, 0x345, 0x4, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}]}, 0x58)
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

640.257444ms ago: executing program 0 (id=1021):
openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000240)='./binderfs/binder-control\x00', 0x800, 0x0)

640.071266ms ago: executing program 2 (id=1022):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3})
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88)

627.089992ms ago: executing program 0 (id=1023):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x1, 0x84d, 0x9, 0x1, 0x3}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x3, 0xb}, 0x5, 0x80000034, 0x91f}}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc78a96afdb3f3285}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x88c1}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffe0, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x5, 0x7fffffff, 0x6, 0x4, 0x7fffffff, 0x6752, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4)

520.800232ms ago: executing program 2 (id=1025):
r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0)

422.828777ms ago: executing program 2 (id=1026):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0x40186f02, &(0x7f0000000040)={0x2, 0x7, 0x100000001})

422.493149ms ago: executing program 1 (id=1027):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/130, 0x82}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
landlock_restrict_self(r0, 0xa)

409.926423ms ago: executing program 0 (id=1028):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
fanotify_init(0x40, 0x40000)
mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0xc)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)

275.405361ms ago: executing program 0 (id=1029):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x54, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="8e"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800)

275.090548ms ago: executing program 1 (id=1030):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @local, 0x5}, 0x1c)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x34, [{}, {}, {}, {}]}, 0x68)

170.783303ms ago: executing program 1 (id=1031):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc)

170.305066ms ago: executing program 0 (id=1032):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x1b)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})

121.147799ms ago: executing program 1 (id=1033):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400))

283.012µs ago: executing program 1 (id=1034):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})

0s ago: executing program 1 (id=1035):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000244100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x2000)

kernel console output (not intermixed with test programs):

ode: writeback.
[   80.635463][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.737460][ T6079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.441724][ T6124] xt_hashlimit: size too large, truncated to 1048576
[   81.849532][ T6130] loop0: detected capacity change from 0 to 128
[   82.211745][ T6134] loop1: detected capacity change from 0 to 32768
[   82.221921][ T6134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.144 (6134)
[   82.249213][ T6134] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.256405][ T6134] BTRFS info (device loop1): using crc32c checksum algorithm
[   82.300819][ T6134] BTRFS info (device loop1): enabling ssd optimizations
[   82.305508][ T6134] BTRFS info (device loop1): turning on flush-on-commit
[   82.311141][ T6134] BTRFS info (device loop1): enabling free space tree
[   82.314621][ T6134] BTRFS info (device loop1): enabling auto defrag
[   82.321604][ T6134] BTRFS info (device loop1): use lzo compression, level 1
[   82.325491][ T6134] BTRFS info (device loop1): max_inline set to 4096
[   82.390477][ T5623] Bluetooth: hci2: Unknown advertising packet type: 0x18
[   82.390506][ T5623] Bluetooth: hci2: Unknown advertising packet type: 0x1e
[   82.393927][ T5623] Bluetooth: hci2: Unknown advertising packet type: 0x30
[   82.396408][ T5623] Bluetooth: hci2: Malformed LE Event: 0x0d
[   82.473080][ T6146] loop0: detected capacity change from 0 to 32768
[   82.479114][ T5617] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.535990][ T6146]  loop0: p1 p2 p3 < p5 >
[   82.542622][ T6146] loop0: p1 size 242222080 extends beyond EOD, truncated
[   82.569676][ T6146] loop0: p2 start 16777215 is beyond EOD, truncated
[   82.732117][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[   82.773674][ T5877] udevd[5877]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   82.776663][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[   82.778280][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   82.781218][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   83.122491][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.125585][   T24] usb 3-1: config 0 has no interfaces?
[   83.127184][   T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   83.129777][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.136075][   T24] usb 3-1: config 0 descriptor??
[   83.353433][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.362351][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.368373][ T5683] usb 3-1: USB disconnect, device number 4
[   83.620386][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.627258][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.630591][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.633997][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.810852][ T5683] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   83.962540][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   83.969227][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   83.978273][ T5683] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.00
[   83.982349][ T5683] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[   83.985857][ T5683] usb 3-1: Manufacturer: syz
[   83.996997][ T5683] usb 3-1: config 0 descriptor??
[   84.028225][ T5683] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4
[   84.045875][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.049113][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.052125][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.054913][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.057723][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.060605][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.063462][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.066544][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.069744][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.072970][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.076050][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.080146][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.083218][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.086205][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.089101][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.091978][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.094819][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.097714][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.100655][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.103737][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.106631][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.109494][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.112404][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.115249][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.118112][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.122279][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.126141][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.128942][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.132145][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.135112][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.138073][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.140917][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.143798][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.146709][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.149655][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.152615][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.155578][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.158523][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.161530][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.164494][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.167474][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.171226][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.174166][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.177121][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.180048][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.184017][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.186848][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.189752][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.192704][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.198365][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.201357][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.204270][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.207986][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.211006][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.215486][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.216239][ T5043] usb 3-1: control msg error: -71
[   84.218522][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.222347][    C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1
[   84.229000][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.231962][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.234786][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   84.236837][ T5683] usb 3-1: USB disconnect, device number 5
[   84.237368][    C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -19
[   84.237419][ T5043] usb 3-1: control msg error: -71
[   84.353774][ T5620] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   84.503528][ T5620] usb 1-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=e5.59
[   84.506785][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.521449][ T5620] quatech2 1-1:8.0: Quatech 2nd gen USB to Serial Driver converter detected
[   84.723561][ T5620] usb 1-1: qt2_attach - failed to power on unit: -71
[   84.727076][ T5620] quatech2 1-1:8.0: probe with driver quatech2 failed with error -71
[   84.736702][ T5620] usb 1-1: USB disconnect, device number 4
[   84.770081][ T6196] syz.2.165 uses obsolete (PF_INET,SOCK_PACKET)
[   84.779521][ T6196] loop2: detected capacity change from 0 to 256
[   84.798353][ T6196] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdcbff31a, utbl_chksum : 0xe619d30d)
[   84.805928][ T6196] exFAT-fs (loop2): failed to load alloc-bitmap
[   84.808279][ T6196] exFAT-fs (loop2): failed to recognize exfat type
[   85.357455][ T6211] usb usb8: usbfs: process 6211 (syz.0.172) did not claim interface 4 before use
[   85.584312][ T6224] loop0: detected capacity change from 0 to 16
[   85.610609][ T6224] erofs (device loop0): mounted with root inode @ nid 36.
[   85.629025][   T57] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[   85.643653][ T6224] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[   85.647688][ T6224] erofs (device loop0): read error -117 @ 2 of nid 89
[   85.650651][   T33] kauditd_printk_skb: 443 callbacks suppressed
[   85.650667][   T33] audit: type=1800 audit(1778298024.889:455): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="file2" dev="loop0" ino=89 res=0 errno=0
[   85.652003][ T6224] syz.0.178 (6224) used greatest stack depth: 19928 bytes left
[   86.099378][ T6245] netlink: 'syz.0.188': attribute type 6 has an invalid length.
[   86.155357][ T6247] loop0: detected capacity change from 0 to 512
[   86.173417][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   86.192294][ T6247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.196162][ T6247] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   86.221477][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.294207][ T6254] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.191'.
[   86.321831][    T9] usb 3-1: Using ep0 maxpacket: 16
[   86.328478][ T6256] Unsupported ieee802154 address type: 0
[   86.328521][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   86.337147][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[   86.341520][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[   86.345239][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[   86.363384][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   86.366791][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.369725][    T9] usb 3-1: Product: syz
[   86.371585][    T9] usb 3-1: Manufacturer: syz
[   86.373368][    T9] usb 3-1: SerialNumber: syz
[   86.449371][ T6260] loop0: detected capacity change from 0 to 22
[   86.459816][ T6260] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   86.482777][ T6260] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   86.586056][    T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[   86.588644][    T9] cdc_ncm 3-1:1.0: bind() failure
[   86.593697][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   86.596300][    T9] cdc_ncm 3-1:1.1: bind() failure
[   86.604310][    T9] usb 3-1: USB disconnect, device number 6
[   87.183061][  T797] cfg80211: failed to load regulatory.db
[   87.186686][   T33] audit: type=1800 audit(1778298026.329:456): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.197" name="file0" dev="overlay" ino=345 res=0 errno=0
[   87.385067][ T6274] loop2: detected capacity change from 0 to 512
[   87.424271][ T6274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.437529][ T6274] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.484280][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.571923][ T6282] loop2: detected capacity change from 0 to 1024
[   87.574470][ T6282] EXT4-fs: Ignoring removed orlov option
[   87.584818][ T6282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.613124][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.953648][ T6300] qnx4: no qnx4 filesystem (no root dir).
[   89.184796][ T6335] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   89.425522][ T6347] loop1: detected capacity change from 0 to 4096
[   89.429783][ T6347] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   89.450391][ T6347] ntfs3(loop1): ino=1a, mi_enum_attr
[   89.455721][ T6347] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   89.472396][ T6347] ntfs3(loop1): ino=1a, mi_enum_attr
[   89.479892][ T6347] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   89.705685][ T6360] loop0: detected capacity change from 0 to 512
[   89.740983][ T6360] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.234: inode has both inline data and extents flags
[   89.751866][ T6360] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   89.758589][ T6360] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.234: couldn't read orphan inode 15 (err -117)
[   89.762071][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   89.762091][    C0] EXT4-fs (loop0): initial error at time 1778298028: ext4_orphan_get:1397: inode 15
[   89.762117][    C0] EXT4-fs (loop0): last error at time 1778298028: ext4_orphan_get:1397: inode 15
[   89.787922][ T6366] loop2: detected capacity change from 0 to 8192
[   89.802157][ T6360] loop0: lost filesystem error report for type 5 error -117
[   89.807890][ T6360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.858852][ T6368] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.899340][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.344971][ T6397] loop2: detected capacity change from 0 to 8
[   90.372111][ T5623] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   90.376892][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: kworker/u11:3 Not tainted syzkaller #0 PREEMPT(full) 
[   90.376906][ T5623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.376914][ T5623] Workqueue: hci0 hci_rx_work
[   90.376933][ T5623] Call Trace:
[   90.376938][ T5623]  <TASK>
[   90.376943][ T5623]  dump_stack_lvl+0xe8/0x150
[   90.376956][ T5623]  sysfs_create_dir_ns+0x271/0x2a0
[   90.376970][ T5623]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   90.376983][ T5623]  ? do_raw_spin_unlock+0x4d/0x210
[   90.376997][ T5623]  kobject_add_internal+0x62b/0xd00
[   90.377014][ T5623]  kobject_add+0x163/0x240
[   90.377027][ T5623]  ? __pfx_kobject_add+0x10/0x10
[   90.377039][ T5623]  ? _raw_spin_unlock+0x28/0x50
[   90.377050][ T5623]  ? get_device_parent+0x366/0x3a0
[   90.377062][ T5623]  device_add+0x408/0xbb0
[   90.377074][ T5623]  hci_conn_add_sysfs+0xd5/0x210
[   90.377087][ T5623]  le_conn_complete_evt+0x10e6/0x16b0
[   90.377101][ T5623]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   90.377109][ T5623]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[   90.377120][ T5623]  ? __asan_memcpy+0x40/0x70
[   90.377149][ T5623]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   90.377194][ T5623]  ? skb_pull_data+0xfb/0x200
[   90.377218][ T5623]  hci_le_conn_complete_evt+0x187/0x470
[   90.377239][ T5623]  hci_event_packet+0x659/0xef0
[   90.377255][ T5623]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   90.377267][ T5623]  ? __pfx_hci_event_packet+0x10/0x10
[   90.377282][ T5623]  ? kcov_remote_start+0x49a/0x7a0
[   90.377295][ T5623]  ? hci_send_to_monitor+0xe2/0x590
[   90.377306][ T5623]  hci_rx_work+0x3ee/0x1040
[   90.377321][ T5623]  ? process_scheduled_works+0xa70/0x1860
[   90.377330][ T5623]  process_scheduled_works+0xb5d/0x1860
[   90.377353][ T5623]  ? __pfx_process_scheduled_works+0x10/0x10
[   90.377364][ T5623]  ? assign_work+0x3d5/0x5e0
[   90.377374][ T5623]  worker_thread+0xa53/0xfc0
[   90.377396][ T5623]  kthread+0x388/0x470
[   90.377410][ T5623]  ? __pfx_worker_thread+0x10/0x10
[   90.377418][ T5623]  ? __pfx_kthread+0x10/0x10
[   90.377429][ T5623]  ret_from_fork+0x514/0xb70
[   90.377439][ T5623]  ? __pfx_ret_from_fork+0x10/0x10
[   90.377448][ T5623]  ? __switch_to+0xc79/0x1410
[   90.377463][ T5623]  ? __pfx_kthread+0x10/0x10
[   90.377474][ T5623]  ret_from_fork_asm+0x1a/0x30
[   90.377492][ T5623]  </TASK>
[   90.377511][ T5623] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   90.421110][ T6397] SQUASHFS error: lzo decompression failed, data probably corrupt
[   90.421291][ T6397] SQUASHFS error: Failed to read block 0x62b: -5
[   90.421306][ T6397] SQUASHFS error: Unable to read metadata cache entry [629]
[   90.421317][ T6397] SQUASHFS error: Unable to read inode 0x11f
[   90.459492][ T5623] Bluetooth: hci0: failed to register connection device
[   90.505474][ T6399] loop1: detected capacity change from 0 to 512
[   90.508556][ T6399] EXT4-fs (loop1): Unsupported encryption level 158
[   90.664452][ T6407] loop2: detected capacity change from 0 to 2048
[   90.675931][ T6407] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   90.709832][ T6411] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.713907][ T6407] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[   90.722774][ T6407] Remounting filesystem read-only
[   90.980524][ T6412] loop1: detected capacity change from 0 to 32768
[   90.981424][ T6412] btrfs: Deprecated parameter 'usebackuproot'
[   90.985221][ T6412] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   90.988740][ T6412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.252 (6412)
[   91.008248][ T6412] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.008284][ T6412] BTRFS info (device loop1): using sha256 checksum algorithm
[   91.035928][ T5739] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x450151d1aecb73749cfed9d165120c1fe7a1c51cc5a70e9b2cc7e46821c22032 level 0
[   91.056276][ T6412] BTRFS warning (device loop1): couldn't read tree root
[   91.059136][ T6412] BTRFS warning (device loop1): try to load backup roots slot 1
[   91.074287][  T495] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0xa2419993f80f64f6a47a72c25133d64e4d4693b6b1bd23a4b4f4a7270f60f55f found 0x0708f5338b6972e5c7e8a0b2ef13f3a90b50f999fddddf1b0bae442db4652d93 level 0
[   91.083082][ T6412] BTRFS warning (device loop1): couldn't read tree root
[   91.085585][ T6412] BTRFS warning (device loop1): try to load backup roots slot 2
[   91.088824][ T5739] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   91.092685][ T6412] BTRFS warning (device loop1): couldn't read tree root
[   91.095925][ T6412] BTRFS warning (device loop1): try to load backup roots slot 3
[   91.100033][ T5739] BTRFS warning (device loop1): checksum verify failed on logical 5263360 mirror 1 wanted 0xffbab50ab2ffe3e4017d627739090fa19eeb80634a4e42a8485af3190424ce02 found 0x1444ece36dccee3b97862f4128673f3d9548e47958b25b71259dae2e09ba46b0 level 0
[   91.108626][ T6412] BTRFS error (device loop1): failed to load root free space
[   91.243660][ T6412] BTRFS error (device loop1): open_ctree failed: -5
[   91.462652][   T24] bridge0: entered promiscuous mode
[   92.090843][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   92.243217][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.247573][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   92.252975][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   92.256823][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   92.263089][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   92.266507][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.273598][   T24] usb 2-1: config 0 descriptor??
[   92.353529][ T5620] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   92.520947][ T5620] usb 3-1: Using ep0 maxpacket: 8
[   92.527563][ T5620] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[   92.535816][ T5620] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   92.539845][ T5620] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   92.543557][ T5620] usb 3-1: Product: syz
[   92.545276][ T5620] usb 3-1: Manufacturer: syz
[   92.547050][ T5620] usb 3-1: SerialNumber: syz
[   92.707996][ T6463] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   92.769431][   T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   92.777906][ T5620] usb 3-1: Invalid connection information received from device
[   92.808228][ T5620] IPVS: starting estimator thread 0...
[   92.902763][ T6466] IPVS: using max 37 ests per chain, 88800 per kthread
[   92.975493][ T6472] loop0: detected capacity change from 0 to 128
[   92.986496][    T9] usb 3-1: USB disconnect, device number 7
[   93.028191][ T6472] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   93.032351][ T6472] hpfs: filesystem error: improperly stopped
[   93.035450][ T6472] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   93.038304][ T6472] hpfs: You really don't want any checks? You are crazy...
[   93.044499][ T6472] hpfs: hpfs_map_sector(): read error
[   93.046570][ T6472] hpfs: code page support is disabled
[   93.049701][ T6472] hpfs: hpfs_map_4sectors(): unaligned read
[   93.054167][ T6472] hpfs: hpfs_map_4sectors(): unaligned read
[   93.057859][ T6472] hpfs: filesystem error: unable to find root dir
[   93.734800][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.275'.
[   93.739005][ T6482] gre0: entered promiscuous mode
[   94.080128][ T6488] netlink: 'syz.0.278': attribute type 3 has an invalid length.
[   94.108788][ T6484] loop2: detected capacity change from 0 to 32768
[   94.165107][ T6484] lbmIODone: I/O error in JFS log
[   94.168083][ T6484] *** Log Format Error ! ***
[   94.175330][ T6484] lmLogInit: exit(-22)
[   94.177203][ T6484] lmLogOpen: exit(-22)
[   94.555927][ T6516] tmpfs: Bad value for 'mpol'
[   94.800939][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   94.951041][   T24] usb 1-1: Using ep0 maxpacket: 8
[   94.956463][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   94.963662][   T24] usb 1-1: config 117 has an invalid interface number: 163 but max is 0
[   94.970578][   T24] usb 1-1: config 117 has no interface number 0
[   94.978300][   T24] usb 1-1: config 117 interface 163 has no altsetting 0
[   94.987085][   T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24
[   94.994417][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.001979][   T24] usb 1-1: Product: syz
[   95.008599][   T24] usb 1-1: Manufacturer: syz
[   95.014093][   T24] usb 1-1: SerialNumber: syz
[   95.189432][ T6537] loop2: detected capacity change from 0 to 8192
[   95.421563][ T5620] usb 2-1: reset high-speed USB device number 3 using dummy_hcd
[   95.677325][ T6543] loop2: detected capacity change from 0 to 32768
[   95.777479][ T5620] usb 2-1: device firmware changed
[   95.793097][ T3161] usb 2-1: USB disconnect, device number 3
[   96.069273][   T24] usb 1-1: USB disconnect, device number 5
[   96.071393][ T3161] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.090141][   T24] f81534a_ctrl 1-1:117.163: failed to enable ports: -19
[   96.267395][ T3161] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   96.275534][ T3161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.279307][ T3161] usb 2-1: Product: syz
[   96.281362][ T3161] usb 2-1: Manufacturer: syz
[   96.283801][ T3161] usb 2-1: SerialNumber: syz
[   96.321542][ T3161] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   96.402503][   T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   96.741287][ T6547] netlink: 'syz.0.305': attribute type 8 has an invalid length.
[   97.215054][ T6553] netlink: 'syz.0.307': attribute type 23 has an invalid length.
[   97.484406][   T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[   97.490470][   T24] ath9k_htc: Failed to initialize the device
[   97.577033][   T24] usb 2-1: ath9k_htc: USB layer deinitialized
[   97.812370][ T6576] loop0: detected capacity change from 0 to 128
[   97.844187][ T6576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   97.854323][ T6576] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   97.861979][ T6576] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   97.864914][ T6576] UDF-fs: Scanning with blocksize 512 failed
[   97.870168][ T6576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   97.876519][ T6576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   97.882761][ T6576] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   97.889752][ T6576] UDF-fs: Scanning with blocksize 1024 failed
[   97.904679][ T6576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   97.908705][ T6576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   97.912145][ T6576] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   97.914628][ T6576] UDF-fs: Scanning with blocksize 2048 failed
[   97.917487][ T6576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   97.924354][ T6576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   97.927463][ T6576] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   97.929783][ T6576] UDF-fs: Scanning with blocksize 4096 failed
[   97.933410][ T6576] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[   98.107406][ T6586] loop0: detected capacity change from 0 to 4096
[   98.115360][ T6586] EXT4-fs (loop0): Test dummy encryption mode enabled
[   98.125882][ T6586] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[   98.131910][ T6586] System zones: 0-5
[   98.142967][ T6586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.168046][ T6586] EXT4-fs (loop0): shut down requested (0)
[   98.214854][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.333781][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   98.675826][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   98.693518][    T9] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   98.697162][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.700575][    T9] usb 3-1: Product: syz
[   98.705731][    T9] usb 3-1: Manufacturer: syz
[   98.707709][    T9] usb 3-1: SerialNumber: syz
[   98.934864][ T6594] loop0: detected capacity change from 0 to 131072
[   98.949285][ T6594] F2FS-fs (loop0): invalid crc value
[   99.029512][    T9] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1
[   99.041873][ T5683] usb 2-1: USB disconnect, device number 4
[   99.055069][ T6594] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   99.060419][ T6594] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   99.249274][ T6603] loop1: detected capacity change from 0 to 32768
[   99.276714][ T6603] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   99.287849][ T6603] JBD2: Ignoring recovery information on journal
[   99.334627][ T6603] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   99.373686][    T9] usb 3-1: USB disconnect, device number 8
[   99.511870][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.594058][ T5617] ocfs2: Unmounting device (7,1) on (node local)
[   99.840917][ T6621] process 'syz.1.333' launched '/dev/fd/7' with NULL argv: empty string added
[   99.970482][ T6614] loop0: detected capacity change from 0 to 32768
[  100.021339][ T6625] loop2: detected capacity change from 0 to 32768
[  100.035498][ T6614] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  100.167410][ T6614] XFS (loop0): Ending clean mount
[  100.362354][ T5609] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  100.576101][ T6642] loop1: detected capacity change from 0 to 4096
[  101.062470][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'.
[  101.317529][ T6658] loop1: detected capacity change from 0 to 4096
[  101.506060][ T6663] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.554859][   T33] audit: type=1800 audit(1778298040.799:457): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.343" name="file1" dev="loop1" ino=15 res=0 errno=0
[  101.730150][ T6672] loop0: detected capacity change from 0 to 256
[  101.733129][    T9] IPVS: starting estimator thread 0...
[  101.830864][ T6673] IPVS: using max 62 ests per chain, 148800 per kthread
[  101.865700][ T6675] loop1: detected capacity change from 0 to 65
[  101.902225][ T6675] BFS-fs: bfs_iget(): Bad inode number loop1:00000002
[  102.337860][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.340421][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.531045][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.564883][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.581611][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.681079][   T24] usb 1-1: Using ep0 maxpacket: 16
[  102.689528][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  102.699559][   T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 201, changing to 7
[  102.706688][   T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 25337, setting to 1024
[  102.716023][   T24] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40
[  102.719906][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.723640][   T24] usb 1-1: Product: syz
[  102.724953][   T24] usb 1-1: Manufacturer: syz
[  102.726800][   T24] usb 1-1: SerialNumber: syz
[  102.832289][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.837472][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.848887][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.860005][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.863179][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.866403][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.870355][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.876673][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.980530][   T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  102.993450][   T24] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71
[  103.000353][   T24] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71
[  103.036927][   T24] usb 1-1: USB disconnect, device number 6
[  103.704113][ T6700] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[  104.143533][ T6713] loop0: detected capacity change from 0 to 2048
[  104.177917][ T6713] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  104.191697][ T6713] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  104.198216][ T6713] UDF-fs: Scanning with blocksize 512 failed
[  104.226476][ T6713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.283188][   T33] audit: type=1800 audit(1778298043.529:458): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.368" name="file1" dev="loop0" ino=838 res=0 errno=0
[  104.499383][ T6733] loop2: detected capacity change from 0 to 128
[  104.526629][ T6733] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  104.578319][ T6733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.604332][ T6737] loop0: detected capacity change from 0 to 128
[  104.638238][ T6737] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  104.655722][ T6737] hpfs: filesystem error: improperly stopped
[  104.658087][ T6737] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  104.662126][ T6737] hpfs: You really don't want any checks? You are crazy...
[  104.665200][ T6737] hpfs: Code page index out of array
[  104.680434][ T6737] hpfs: code page support is disabled
[  104.689661][ T6737] hpfs: hpfs_map_4sectors(): unaligned read
[  104.700304][ T6737] hpfs: hpfs_map_4sectors(): unaligned read
[  104.703911][ T6737] hpfs: filesystem error: unable to find root dir
[  105.785952][ T6761] loop2: detected capacity change from 0 to 1024
[  105.792499][ T6761] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  106.246146][ T5611] Bluetooth: latency 257 > max_latency 127
[  106.257580][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'.
[  106.323467][ T6797] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  106.336764][ T6797] team0 (unregistering): Port device team_slave_0 removed
[  106.341241][ T6802] loop1: detected capacity change from 0 to 512
[  106.346262][ T6802] EXT4-fs: Ignoring removed bh option
[  106.357759][ T6797] team0 (unregistering): Failed to send options change via netlink (err -105)
[  106.382936][ T6797] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  106.395175][ T6797] team0 (unregistering): Port device team_slave_1 removed
[  106.397943][ T6802] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.404: iget: bad extra_isize 90 (inode size 256)
[  106.404478][ T6802] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  106.408023][ T6802] EXT4-fs (loop1): Remounting filesystem read-only
[  106.411089][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  106.411109][    C1] EXT4-fs (loop1): initial error at time 1778298045: ext4_xattr_inode_iget:441: inode 11
[  106.411134][    C1] EXT4-fs (loop1): last error at time 1778298045: ext4_xattr_inode_iget:441: inode 11
[  106.423522][ T6802] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  106.427470][ T6802] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  106.430718][ T6802] EXT4-fs (loop1): 1 orphan inode deleted
[  106.434115][ T6802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.452144][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.498738][ T6808] loop1: detected capacity change from 0 to 1764
[  106.528307][ T6808] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  106.543977][ T6810] loop0: detected capacity change from 0 to 8
[  106.846451][ T6824] loop2: detected capacity change from 0 to 136
[  106.947363][ T6830] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[  107.157999][ T6818] loop0: detected capacity change from 0 to 32768
[  107.170943][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  107.188356][ T6818] read_mapping_page failed!
[  107.190265][ T6818] ERROR: (device loop0): txCommit: 
[  107.190265][ T6818] 
[  107.198836][ T6818] jfs_unlink: dtDelete returned -2
[  107.314549][ T6839] loop1: detected capacity change from 0 to 32768
[  107.321007][   T24] usb 3-1: Using ep0 maxpacket: 16
[  107.322547][ T6841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.422'.
[  107.327365][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  107.332954][ T6839] 
[  107.332954][ T6839]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.332954][ T6839] 
[  107.334866][ T6841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  107.340653][   T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  107.349783][ T6839] read_mapping_page failed!
[  107.352023][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.354876][ T6839] diRead: read_metapage failed
[  107.357532][   T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  107.362526][   T24] usb 3-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30
[  107.368697][   T24] usb 3-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  107.383008][   T24] usb 3-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235
[  107.390921][   T24] usb 3-1: config 1 interface 1 has no altsetting 1
[  107.405787][   T24] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  107.410947][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.423053][   T24] usb 3-1: Product: syz
[  107.424975][   T24] usb 3-1: Manufacturer: syz
[  107.426891][   T24] usb 3-1: SerialNumber: syz
[  107.664301][   T24] usb 3-1: 1:151 : invalid UAC_AS_GENERAL desc
[  107.669097][   T24] usb 3-1: 0:2 : does not exist
[  107.751288][ T6852] warning: `syz.1.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.848313][   T24] usb 3-1: USB disconnect, device number 9
[  107.975954][ T6858] lo speed is unknown, defaulting to 1000
[  107.978429][ T6858] lo speed is unknown, defaulting to 1000
[  107.993594][ T6858] lo speed is unknown, defaulting to 1000
[  108.003586][ T6858] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  108.009666][ T6858] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  108.014999][ T6858] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  108.043883][ T6858] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  108.145468][ T6858] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  108.212885][ T6858] lo speed is unknown, defaulting to 1000
[  108.215517][ T6858] lo speed is unknown, defaulting to 1000
[  108.226112][ T6858] lo speed is unknown, defaulting to 1000
[  108.230629][ T6605] udevd[6605]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.281054][ T5611] Bluetooth: hci2: command tx timeout
[  108.610944][ T6538] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  108.761883][ T6538] usb 2-1: Using ep0 maxpacket: 32
[  108.768041][ T6538] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  108.772677][ T6538] usb 2-1: config 0 has no interface number 0
[  108.779205][ T6538] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  108.782786][ T6538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.785555][ T6538] usb 2-1: Product: syz
[  108.786924][ T6538] usb 2-1: Manufacturer: syz
[  108.788489][ T6538] usb 2-1: SerialNumber: syz
[  108.792680][ T6538] usb 2-1: config 0 descriptor??
[  108.796698][ T6538] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  109.014231][ T6538] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  109.030501][ T6538] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  109.047231][ T6886] loop2: detected capacity change from 0 to 32768
[  109.050569][ T6886] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.442 (6886)
[  109.059230][ T6886] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  109.062406][ T6886] BTRFS info (device loop2): using sha256 checksum algorithm
[  109.159065][ T6886] BTRFS info (device loop2): enabling ssd optimizations
[  109.162370][ T6886] BTRFS info (device loop2): turning on async discard
[  109.164916][ T6886] BTRFS info (device loop2): enabling free space tree
[  109.211130][ T5620] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  109.288168][ T6906] vivid-007: disconnect
[  109.361088][ T5620] usb 1-1: Using ep0 maxpacket: 16
[  109.366953][ T5620] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.381155][ T5620] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.392230][ T5620] usb 1-1: config 0 interface 0 has no altsetting 0
[  109.403933][ T5620] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00
[  109.415812][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.432933][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  109.437540][ T5620] usb 1-1: config 0 descriptor??
[  109.441702][   T24] usb 2-1: USB disconnect, device number 5
[  109.488877][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  109.581606][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  109.634854][   T24] quatech2 2-1:0.51: device disconnected
[  109.707488][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.736461][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.777023][ T6885] vivid-007: reconnect
[  109.860236][ T5618] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  109.968365][ T5620] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x0
[  109.991210][ T5620] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x1
[  110.023493][ T5620] hid-corsair-void 0003:1B1C:1B25.0002: item fetching failed at offset 4/5
[  110.036726][ T5620] hid-corsair-void 0003:1B1C:1B25.0002: parse failed (reason: -22)
[  110.047663][ T5620] hid-corsair-void 0003:1B1C:1B25.0002: probe with driver hid-corsair-void failed with error -22
[  110.088966][   T33] audit: type=1326 audit(1778298049.329:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.133106][   T33] audit: type=1326 audit(1778298049.329:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.154812][   T33] audit: type=1326 audit(1778298049.329:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.166775][   T33] audit: type=1326 audit(1778298049.329:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.181213][   T24] usb 1-1: USB disconnect, device number 7
[  110.200956][   T33] audit: type=1326 audit(1778298049.349:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.218469][ T6915] loop1: detected capacity change from 0 to 512
[  110.224030][   T33] audit: type=1326 audit(1778298049.349:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.236754][   T33] audit: type=1326 audit(1778298049.349:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.256656][   T33] audit: type=1326 audit(1778298049.349:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.267966][ T6915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.268070][   T33] audit: type=1326 audit(1778298049.349:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.277561][ T6915] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.280068][   T33] audit: type=1326 audit(1778298049.349:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7ff508d9cdd9 code=0x7ffc0000
[  110.334295][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.674772][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[  110.971737][  T797] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  111.110926][ T5620] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  111.141025][  T797] usb 3-1: Using ep0 maxpacket: 32
[  111.145588][  T797] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  111.148400][  T797] usb 3-1: config 0 has no interface number 0
[  111.154407][  T797] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  111.158730][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.161587][  T797] usb 3-1: Product: syz
[  111.162872][  T797] usb 3-1: Manufacturer: syz
[  111.164306][  T797] usb 3-1: SerialNumber: syz
[  111.170513][  T797] usb 3-1: config 0 descriptor??
[  111.178166][  T797] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  111.223158][ T6926] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  111.276440][ T5620] usb 1-1: config 0 has no interfaces?
[  111.281209][ T5620] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  111.284827][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.350483][ T5620] usb 1-1: config 0 descriptor??
[  111.433125][  T797] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  111.506885][  T797] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  111.807854][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  112.063925][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  112.064510][   T31] usb 3-1: USB disconnect, device number 10
[  112.130712][   T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  112.133969][  T797] usb 1-1: USB disconnect, device number 8
[  112.160455][   T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  112.165816][   T31] quatech2 3-1:0.51: device disconnected
[  112.419123][ T6960] loop1: detected capacity change from 0 to 256
[  112.429226][ T6960] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  112.501793][ T6962] loop1: detected capacity change from 0 to 1764
[  112.678474][ T6972] loop2: detected capacity change from 0 to 128
[  112.927076][ T6977] block nbd2: shutting down sockets
[  112.995959][ T6974] loop0: detected capacity change from 0 to 32768
[  113.003072][ T6974] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.472 (6974)
[  113.021330][ T6974] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  113.025148][ T6974] BTRFS info (device loop0): using blake2b checksum algorithm
[  113.084068][ T6974] BTRFS info (device loop0): enabling ssd optimizations
[  113.086833][ T6974] BTRFS info (device loop0): turning on async discard
[  113.089333][ T6974] BTRFS info (device loop0): enabling free space tree
[  113.168635][ T5609] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  113.230887][   T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  113.391219][   T31] usb 3-1: Using ep0 maxpacket: 32
[  113.394038][ T7007] loop0: detected capacity change from 0 to 256
[  113.397678][   T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.406321][ T7007] FAT-fs (loop0): Directory bread(block 64) failed
[  113.408580][ T7007] FAT-fs (loop0): Directory bread(block 65) failed
[  113.411562][ T7007] FAT-fs (loop0): Directory bread(block 66) failed
[  113.413844][ T7007] FAT-fs (loop0): Directory bread(block 67) failed
[  113.414591][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  113.416272][ T7007] FAT-fs (loop0): Directory bread(block 68) failed
[  113.426939][ T7007] FAT-fs (loop0): Directory bread(block 69) failed
[  113.429569][ T7007] FAT-fs (loop0): Directory bread(block 70) failed
[  113.433190][ T7007] FAT-fs (loop0): Directory bread(block 71) failed
[  113.435346][ T7007] FAT-fs (loop0): Directory bread(block 72) failed
[  113.437529][ T7007] FAT-fs (loop0): Directory bread(block 73) failed
[  113.442139][   T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  113.452069][   T31] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  113.459472][   T31] usb 3-1: Product: syz
[  113.463199][   T31] usb 3-1: Manufacturer: syz
[  113.464557][   T31] usb 3-1: SerialNumber: syz
[  113.486161][   T31] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7
[  113.583678][ T7009] binder: 7008:7009 ioctl c0306201 0 returned -14
[  113.685704][   T31] usb 3-1: USB disconnect, device number 11
[  113.729793][   T31] appletouch 3-1:1.0: input: appletouch disconnected
[  113.827653][ T7019] loop0: detected capacity change from 0 to 256
[  113.832846][ T7019] exfat: Deprecated parameter 'utf8'
[  113.839001][ T7019] exFAT-fs (loop0): bogus number of FAT structure
[  113.851532][ T7019] exFAT-fs (loop0): failed to read boot sector
[  113.854510][ T7019] exFAT-fs (loop0): failed to recognize exfat type
[  113.913835][  T797] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[  113.921967][  T797] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[  113.931712][  T797] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[  113.934365][  T797] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[  113.936509][  T797] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[  113.938913][  T797] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[  113.945247][  T797] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[  113.947428][  T797] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0
[  113.959786][  T797] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  114.193190][ T7035] loop0: detected capacity change from 0 to 512
[  114.228187][ T7035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.237457][ T7035] ext4 filesystem being mounted at /201/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.267811][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.291924][  T797] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  114.793925][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.802458][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.811249][  T797] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  114.818160][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.825701][  T797] usb 2-1: config 0 descriptor??
[  114.853718][ T7047] loop0: detected capacity change from 0 to 2048
[  114.862237][ T7047] NILFS (loop0): invalid segment: Inconsistency found
[  114.864905][ T7047] NILFS (loop0): trying rollback from an earlier position
[  114.868946][ T7047] NILFS (loop0): invalid segment: Checksum error in segment payload
[  114.872873][ T7047] NILFS (loop0): error -22 while searching super root
[  115.251863][  T797] hid_parser_main: 10 callbacks suppressed
[  115.251883][  T797] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  115.256517][  T797] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  115.259269][  T797] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  115.262860][  T797] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  115.266144][  T797] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  115.269144][  T797] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  115.272476][  T797] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  115.283195][  T797] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  115.287871][  T797] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints?
[  115.440160][    C0] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71
[  115.443868][ T5683] usb 2-1: USB disconnect, device number 6
[  115.480210][ T7063] loop0: detected capacity change from 0 to 256
[  115.518937][ T7058] loop2: detected capacity change from 0 to 32768
[  115.522709][ T7058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.503 (7058)
[  115.535753][ T7058] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.542592][ T7058] BTRFS info (device loop2): using sha256 checksum algorithm
[  115.599211][ T7058] BTRFS info (device loop2): enabling ssd optimizations
[  115.608215][ T7058] BTRFS info (device loop2): turning on async discard
[  115.613928][ T7058] BTRFS info (device loop2): enabling free space tree
[  115.641677][ T7058] BTRFS error (device loop2): balance: invalid convert system profile raid0
[  115.675830][ T5618] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.805763][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'.
[  116.606607][ T7113] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  116.683996][ T7113] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  116.708025][ T7113] EXT4-fs (loop0): orphan cleanup on readonly fs
[  116.764218][ T7113] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.520: Invalid inode table block 0 in block_group 0
[  116.772105][ T7113] loop0: lost filesystem error report for type 5 error -117
[  116.781252][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  116.787768][    C1] EXT4-fs (loop0): initial error at time 1778298056: __ext4_get_inode_loc:4885
[  116.791414][    C1] EXT4-fs (loop0): last error at time 1778298056: __ext4_get_inode_loc:4885
[  116.809662][ T7113] EXT4-fs (loop0): Remounting filesystem read-only
[  116.820669][ T7113] __quota_error: 18 callbacks suppressed
[  116.827521][ T7113] Quota error (device loop0): write_blk: dquota write failed
[  116.842150][ T7113] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  116.869125][ T7113] EXT4-fs (loop0): 1 truncate cleaned up
[  117.047169][ T7113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  117.072718][ T7116] netlink: 72 bytes leftover after parsing attributes in process `syz.2.521'.
[  117.079368][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'.
[  117.093997][ T7116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'.
[  117.146041][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.334428][ T7120] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.339038][ T7120] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.389374][ T5618] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.963409][ T7136] set_capacity_and_notify: 2 callbacks suppressed
[  117.963421][ T7136] loop0: detected capacity change from 0 to 128
[  118.381555][ T5683] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  118.530991][ T5683] usb 1-1: Using ep0 maxpacket: 8
[  118.535580][ T5683] usb 1-1: config 2 has an invalid interface number: 138 but max is 0
[  118.539400][ T5683] usb 1-1: config 2 has no interface number 0
[  118.540620][ T7144] loop1: detected capacity change from 0 to 4096
[  118.556384][ T5683] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a
[  118.567939][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.576079][ T7144] ntfs3(loop1): ino=19, mi_enum_attr
[  118.581885][ T7144] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  118.794856][ T5683] usb 1-1: USB disconnect, device number 9
[  118.954007][ T7159] loop2: detected capacity change from 0 to 32768
[  118.957326][ T7159] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.540 (7159)
[  118.966103][ T7159] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.969166][ T7159] BTRFS info (device loop2): using sha256 checksum algorithm
[  119.013452][ T7159] BTRFS info (device loop2): enabling ssd optimizations
[  119.020913][ T7159] BTRFS info (device loop2): turning on async discard
[  119.023685][ T7159] BTRFS info (device loop2): enabling free space tree
[  119.061560][ T5618] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.227858][ T7179] loop2: detected capacity change from 0 to 736
[  119.254436][ T7179] rock: directory entry would overflow storage
[  119.257547][ T7179] rock: sig=0x3b10, size=4, remaining=3
[  119.335090][   T33] audit: type=1804 audit(1778298058.579:487): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.543" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=10987 res=1 errno=0
[  119.356049][   T33] audit: type=1804 audit(1778298058.579:488): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.543" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=10987 res=1 errno=0
[  119.710974][ T5683] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  119.860899][ T5683] usb 3-1: Using ep0 maxpacket: 8
[  119.871175][ T5683] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  119.876659][ T5683] usb 3-1: config 0 has no interface number 0
[  119.884288][ T5683] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  119.889561][ T5683] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  119.893547][ T5683] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  119.896906][ T5683] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  119.901219][ T5683] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  119.904528][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.919648][ T5683] usb 3-1: config 0 descriptor??
[  119.937093][ T5683] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  120.256152][ T5683] usb 3-1: USB disconnect, device number 12
[  120.257238][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  120.262335][ T7201] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19
[  120.278435][ T5683] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  120.959151][ T7230] loop1: detected capacity change from 0 to 512
[  120.996972][ T7230] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  121.003928][ T7230] EXT4-fs (loop1): mount failed
[  121.091316][   T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  121.285968][ T7237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.565'.
[  121.291625][ T7237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'.
[  121.306650][ T7220] xt_hashlimit: size too large, truncated to 1048576
[  121.412213][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[  121.416151][   T31] usb 1-1: unable to read config index 0 descriptor/start: -71
[  121.419083][   T31] usb 1-1: can't read configurations, error -71
[  121.711182][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  121.861084][    T9] usb 2-1: Using ep0 maxpacket: 16
[  121.869411][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  121.876942][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.887929][    T9] usb 2-1: language id specifier not provided by device, defaulting to English
[  121.899336][    T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40
[  121.903105][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.906200][    T9] usb 2-1: Product: syz
[  121.907835][    T9] usb 2-1: SerialNumber: syz
[  122.137102][    T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  122.150388][    T9] usb 2-1: USB disconnect, device number 7
[  122.174010][ T7270] loop2: detected capacity change from 0 to 512
[  122.203807][ T7270] EXT4-fs (loop2): 1 truncate cleaned up
[  122.206898][ T7270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.241051][   T27] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u10:0: bg 0: block 465: padding at end of block bitmap is not set
[  122.249693][   T27] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117
[  122.265895][   T27] EXT4-fs (loop2): This should not happen!! Data will be lost
[  122.265895][   T27] 
[  122.274632][ T5618] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost
[  122.279695][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.507247][ T7284] block device autoloading is deprecated and will be removed.
[  122.908753][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'.
[  123.724109][ T7324] loop1: detected capacity change from 0 to 1024
[  124.033098][ T7336] loop2: detected capacity change from 0 to 2048
[  124.059743][ T7336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.095316][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.162601][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'.
[  124.273762][ T7356] capability: warning: `syz.2.614' uses 32-bit capabilities (legacy support in use)
[  124.278640][ T7356] program syz.2.614 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.459996][ T7372] loop0: detected capacity change from 0 to 2048
[  124.475365][ T7372] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  124.485101][ T7372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.516352][   T33] audit: type=1800 audit(1778298063.759:489): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.621" name=".log" dev="loop0" ino=1368 res=0 errno=0
[  124.633645][ T7389] loop1: detected capacity change from 0 to 2048
[  124.664230][ T7393] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.773720][ T7399] program syz.2.634 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.817239][ T7403] bridge0: port 3(veth1_vlan) entered blocking state
[  124.819793][ T7403] bridge0: port 3(veth1_vlan) entered disabled state
[  124.824030][ T7403] veth1_vlan: entered allmulticast mode
[  124.829196][ T7403] veth1_vlan: left allmulticast mode
[  124.846088][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.636'.
[  124.944327][ T7413] loop1: detected capacity change from 0 to 512
[  124.948757][ T7413] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  124.961181][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  124.972513][ T7413] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  125.115310][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.121341][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  125.127636][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  125.136883][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.143319][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.146833][   T24] usb 1-1: Product: syz
[  125.148124][   T24] usb 1-1: Manufacturer: syz
[  125.153014][   T24] usb 1-1: SerialNumber: syz
[  125.163553][   T24] cdc_mbim 1-1:1.0: skipping garbage
[  125.166041][   T24] usb 1-1: selecting invalid altsetting 1
[  125.179955][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[  125.368951][ T7429] netlink: 'syz.1.647': attribute type 33 has an invalid length.
[  125.371459][ T7429] netlink: 152 bytes leftover after parsing attributes in process `syz.1.647'.
[  125.374167][ T7429] `: renamed from macvtap0
[  125.380060][ T7429] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  125.590075][ T7421] loop2: detected capacity change from 0 to 131072
[  125.613950][ T7421] F2FS-fs (loop2): invalid crc value
[  125.697967][ T7421] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.706841][ T7421] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  125.762173][   T24] usb 1-1: selecting invalid altsetting 1
[  125.766138][   T24] cdc_mbim 1-1:1.0: bind() failure
[  125.770244][ T7421] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  125.788564][   T33] audit: type=1800 audit(1778298065.029:490): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.643" name="file1" dev="loop2" ino=7 res=0 errno=0
[  125.913500][  T797] usb 1-1: USB disconnect, device number 12
[  126.571028][  T797] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  126.573894][ T7443] loop2: detected capacity change from 0 to 40427
[  126.588778][ T7453] loop0: detected capacity change from 0 to 4096
[  126.592455][ T7443] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  126.601311][ T7453] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  126.607589][ T7443] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  126.609711][ T7453] UDF-fs: Scanning with blocksize 512 failed
[  126.614819][ T7443] F2FS-fs (loop2): invalid crc value
[  126.625202][ T7453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.690668][ T7443] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.709349][ T7443] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  126.712923][ T7458] loop0: detected capacity change from 0 to 2048
[  126.716681][ T7443] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  126.719224][ T7458] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.722325][  T797] usb 2-1: Using ep0 maxpacket: 32
[  126.726365][  T797] usb 2-1: unable to get BOS descriptor or descriptor too short
[  126.733522][ T7443] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  127.222381][  T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.235482][ T7464] Failed to get privilege flags for destination (handle=0x2:0x8)
[  127.357154][ T7468] loop2: detected capacity change from 0 to 1024
[  127.534582][  T797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.539718][  T797] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  127.544187][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.546578][  T797] usb 2-1: Product: syz
[  127.547806][  T797] usb 2-1: Manufacturer: syz
[  127.549308][  T797] usb 2-1: SerialNumber: syz
[  127.714262][ T7483] EXT4-fs: Ignoring removed orlov option
[  127.765609][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.777079][  T797] usb 2-1: unit 4 not found!
[  127.786819][  T797] usb 2-1: unit 0 not found!
[  127.832174][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.927662][  T797] usb 2-1: USB disconnect, device number 8
[  128.163910][ T7501] EXT4-fs: Ignoring removed mblk_io_submit option
[  128.172695][ T7501] EXT4-fs: inline encryption not supported
[  128.195613][ T7501] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  128.209672][ T7501] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.675: bad orphan inode 11
[  128.214117][ T7501] loop2: lost filesystem error report for type 5 error -117
[  128.214453][ T7501] EXT4-fs (loop2): Remounting filesystem read-only
[  128.219755][ T7501] ext4_test_bit(bit=10, block=4) = 1
[  128.221849][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  128.221865][    C0] EXT4-fs (loop2): initial error at time 1778298067: ext4_orphan_get:1423
[  128.221883][    C0] EXT4-fs (loop2): last error at time 1778298067: ext4_orphan_get:1423
[  128.232119][ T7501] is_bad_inode(inode)=0
[  128.233783][ T7501] NEXT_ORPHAN(inode)=3254779904
[  128.235610][ T7501] max_ino=32
[  128.236897][ T7501] i_nlink=0
[  128.239692][ T7501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.276711][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.951417][   T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0)
[  129.497446][ T7564] nbd: must specify a size in bytes for the device
[  129.556843][ T7571] set_capacity_and_notify: 3 callbacks suppressed
[  129.556853][ T7571] loop2: detected capacity change from 0 to 256
[  129.633275][ T7575] loop0: detected capacity change from 0 to 512
[  129.673005][ T7575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.679222][ T7575] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.702647][ T7581] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  129.720570][ T7581] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  129.763155][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.569415][   T33] audit: type=1326 audit(1778298069.809:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.0.721" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4419cdd9 code=0x7fc00000
[  131.157259][   T33] audit: type=1326 audit(1778298070.399:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.0.721" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb4419cdd9 code=0x7fc00000
[  131.316236][ T7622] loop0: detected capacity change from 0 to 8192
[  131.394123][ T7622]  loop0: p1 p2 < > p4 < p5 >
[  131.395927][ T7622] loop0: partition table partially beyond EOD, truncated
[  131.400426][ T7622] loop0: p1 start 16777216 is beyond EOD, truncated
[  131.403147][ T7628] loop2: detected capacity change from 0 to 2048
[  131.409659][ T7628] EXT4-fs warning (device loop2): read_mmp_block:111: Error -74 while reading MMP block 80
[  131.413124][ T7622] loop0: p5 start 16777216 is beyond EOD, truncated
[  131.646371][ T7636] loop1: detected capacity change from 0 to 2048
[  131.657332][ T7636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.676534][   T33] audit: type=1800 audit(1778298070.919:493): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.735" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  131.837847][ T7648] netlink: 104 bytes leftover after parsing attributes in process `syz.2.739'.
[  132.091008][ T5620] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  132.343014][ T5620] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  132.352940][ T5620] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  132.357626][ T5620] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config
[  132.368899][ T5620] usb 1-1: config 220 has no interface number 2
[  132.373615][ T5620] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  132.389436][ T5620] usb 1-1: config 220 interface 0 has no altsetting 0
[  132.397432][ T5620] usb 1-1: config 220 interface 76 has no altsetting 0
[  132.403988][ T5620] usb 1-1: config 220 interface 1 has no altsetting 0
[  132.410682][ T5620] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  132.416858][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.422007][ T5620] usb 1-1: Product: syz
[  132.425292][ T5620] usb 1-1: Manufacturer: syz
[  132.428302][ T5620] usb 1-1: SerialNumber: syz
[  132.649499][ T5620] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  132.651908][ T5620] uvcvideo 1-1:220.0: No valid video chain found.
[  132.653961][ T5620] usb 1-1: selecting invalid altsetting 0
[  132.661522][ T5620] usb 1-1: selecting invalid altsetting 0
[  132.663405][ T5620] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  132.667591][ T5620] usb 1-1: USB disconnect, device number 13
[  133.026181][ T7682] loop1: detected capacity change from 0 to 4096
[  133.060090][ T7682] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  133.169198][ T7689] loop2: detected capacity change from 0 to 256
[  133.176240][ T7689] exfat: Deprecated parameter 'namecase'
[  133.179679][ T7689] exfat: Deprecated parameter 'namecase'
[  133.198515][ T7689] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  133.329627][ T7692] loop1: detected capacity change from 0 to 32768
[  133.332065][ T7692] btrfs: Deprecated parameter 'usebackuproot'
[  133.333892][ T7692] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  133.337233][ T7695] loop0: detected capacity change from 0 to 256
[  133.337535][ T7692] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.757 (7692)
[  133.361440][ T7692] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.364668][ T7692] BTRFS info (device loop1): using crc32c checksum algorithm
[  133.368739][ T7697] loop2: detected capacity change from 0 to 64
[  133.452960][ T6549] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  133.483262][ T7692] BTRFS error (device loop1): failed to load root extent
[  133.485475][ T7692] BTRFS warning (device loop1): try to load backup roots slot 1
[  133.488756][ T5928] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  133.498988][ T7692] BTRFS warning (device loop1): couldn't read tree root
[  133.501857][ T7692] BTRFS warning (device loop1): try to load backup roots slot 2
[  133.505247][ T6549] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  133.518221][ T7692] BTRFS warning (device loop1): couldn't read tree root
[  133.523794][ T7692] BTRFS warning (device loop1): try to load backup roots slot 3
[  133.547937][ T7692] BTRFS info (device loop1): rebuilding free space tree
[  133.583482][ T7692] BTRFS info (device loop1): checking UUID tree
[  133.586417][ T7692] BTRFS info (device loop1): enabling ssd optimizations
[  133.589174][ T7692] BTRFS info (device loop1): turning on async discard
[  133.591979][ T7692] BTRFS info (device loop1): enabling free space tree
[  133.594463][ T7692] BTRFS info (device loop1): force clearing of disk cache
[  133.597001][ T7692] BTRFS info (device loop1): enabling auto defrag
[  133.599302][ T7692] BTRFS info (device loop1): trying to use backup root at mount time
[  133.602828][ T7692] BTRFS info (device loop1): use zstd compression, level 3
[  133.697759][ T5617] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.714998][ T7724] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  133.733103][ T7724] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  133.772730][ T7724] EXT4-fs (loop0): invalid journal inode
[  133.775036][ T7724] EXT4-fs (loop0): can't get journal size
[  133.795245][ T7724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  133.833893][  T797] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  133.875796][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.033290][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  134.036865][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  134.050826][  T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  134.057885][  T797] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  134.066317][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.077813][  T797] usb 3-1: config 0 descriptor??
[  134.089220][ T7718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  134.094425][ T7732] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  134.167874][ T7732] hfsplus: size 32, res 24, name_len 12
[  134.413183][ T7750] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  134.424583][ T7750] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  134.588004][  T797] kye 0003:0458:5010.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  134.592297][  T797] kye 0003:0458:5010.0005: unknown main item tag 0x0
[  134.595330][  T797] kye 0003:0458:5010.0005: unknown main item tag 0x0
[  134.597215][  T797] kye 0003:0458:5010.0005: unknown main item tag 0x0
[  134.599105][  T797] kye 0003:0458:5010.0005: unknown main item tag 0x0
[  134.601227][  T797] kye 0003:0458:5010.0005: collection stack underflow
[  134.603178][  T797] kye 0003:0458:5010.0005: item 0 4 0 12 parsing failed
[  134.605575][  T797] kye 0003:0458:5010.0005: parse failed
[  134.607173][  T797] kye 0003:0458:5010.0005: probe with driver kye failed with error -22
[  134.974905][  T797] usb 3-1: USB disconnect, device number 13
[  135.041686][ T7766] lo speed is unknown, defaulting to 1000
[  135.317108][ T5617] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.370914][ T5620] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  135.522261][ T5620] usb 1-1: Using ep0 maxpacket: 32
[  135.525486][ T5620] usb 1-1: config 0 has no interfaces?
[  135.528474][ T5620] usb 1-1: New USB device found, idVendor=0080, idProduct=0000, bcdDevice= 0.00
[  135.532533][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.536075][ T5620] usb 1-1: SerialNumber: syz
[  135.540342][ T5620] usb 1-1: config 0 descriptor??
[  135.590922][ T5683] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  135.740973][ T5683] usb 2-1: Using ep0 maxpacket: 16
[  135.746294][ T5683] usb 2-1: config index 0 descriptor too short (expected 1810, got 18)
[  135.749248][ T5683] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  135.757817][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.761817][ T5620] usb 1-1: USB disconnect, device number 14
[  135.779819][ T5683] usb 2-1: config 0 descriptor??
[  135.788966][ T5683] gspca_main: etoms-2.14.0 probing 102c:6151
[  136.042216][ T5683] usb 2-1: USB disconnect, device number 9
[  136.691118][ T5620] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  136.812816][ T7791] set_capacity_and_notify: 3 callbacks suppressed
[  136.812831][ T7791] loop1: detected capacity change from 0 to 1024
[  136.818743][ T7791] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.841006][ T5620] usb 3-1: Using ep0 maxpacket: 8
[  136.846241][ T5620] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  136.878900][ T5620] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  136.892227][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.901903][ T5620] usb 3-1: Product: syz
[  136.905176][ T5620] usb 3-1: Manufacturer: syz
[  136.910710][ T5620] usb 3-1: SerialNumber: syz
[  136.915303][ T7791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.921198][ T5620] usb 3-1: config 0 descriptor??
[  136.931666][ T5620] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  136.938679][ T5620] usb 3-1: setting power ON
[  137.077823][ T5620] dvb-usb: bulk message failed: -22 (2/0)
[  137.104095][ T5620] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  137.108848][ T5620] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  137.114717][ T5620] usb 3-1: media controller created
[  137.421075][ T5620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  137.447915][ T5620] usb 3-1: selecting invalid altsetting 6
[  137.450391][ T5620] usb 3-1: digital interface selection failed (-22)
[  137.453084][ T5620] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  137.459092][ T5620] usb 3-1: setting power OFF
[  137.462990][ T5620] dvb-usb: bulk message failed: -22 (2/0)
[  137.467055][ T5620] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  137.470655][ T5620] (NULL device *): no alternate interface
[  137.515365][ T5620] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  137.531714][ T5620] usb 3-1: USB disconnect, device number 14
[  137.764483][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.851146][ T5683] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  138.003271][ T5683] usb 1-1: LPM exit latency is zeroed, disabling LPM.
[  138.007624][ T5683] usb 1-1: config 8 has no interfaces?
[  138.017076][ T5683] usb 1-1: string descriptor 0 read error: -22
[  138.023829][ T5683] usb 1-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[  138.031382][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.418779][ T5620] usb 1-1: USB disconnect, device number 15
[  138.442730][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  138.445115][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  139.120133][ T7824] loop0: detected capacity change from 0 to 8
[  139.126653][ T7824] SQUASHFS error: xz decompression failed, data probably corrupt
[  139.130566][ T7824] SQUASHFS error: Failed to read block 0x108: -5
[  139.136226][ T7824] SQUASHFS error: Unable to read metadata cache entry [106]
[  139.141794][ T7825] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  139.150234][ T7824] SQUASHFS error: Unable to read inode 0x11f
[  139.450628][ T7830] loop0: detected capacity change from 0 to 32768
[  139.470445][ T7830] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  139.580427][  T797] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  139.588573][ T5609] ocfs2: Unmounting device (7,0) on (node local)
[  139.733383][  T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.737449][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  139.744571][  T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.753972][  T797] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  139.763753][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.774812][  T797] usb 3-1: config 0 descriptor??
[  139.939905][ T7845] loop0: detected capacity change from 0 to 256
[  139.978762][ T7845] FAT-fs (loop0): Directory bread(block 64) failed
[  139.981538][ T7845] FAT-fs (loop0): Directory bread(block 65) failed
[  139.984616][ T7845] FAT-fs (loop0): Directory bread(block 66) failed
[  139.988336][  T797] ath6kl: Failed to submit usb control message: -71
[  139.988712][ T7845] FAT-fs (loop0): Directory bread(block 67) failed
[  139.992536][  T797] ath6kl: unable to send the bmi data to the device: -71
[  139.995031][ T7845] FAT-fs (loop0): Directory bread(block 68) failed
[  139.996956][  T797] ath6kl: Unable to send get target info: -71
[  139.998519][ T7845] FAT-fs (loop0): Directory bread(block 69) failed
[  139.999908][  T797] ath6kl: Failed to init ath6kl core: -71
[  140.009193][  T797] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  140.010317][ T7845] FAT-fs (loop0): Directory bread(block 70) failed
[  140.015849][ T7845] FAT-fs (loop0): Directory bread(block 71) failed
[  140.019504][ T7845] FAT-fs (loop0): Directory bread(block 72) failed
[  140.022836][  T797] usb 3-1: USB disconnect, device number 15
[  140.028012][ T7845] FAT-fs (loop0): Directory bread(block 73) failed
[  141.355638][ T7861] cgroup: noprefix used incorrectly
[  141.746441][ T7859] loop0: detected capacity change from 0 to 32768
[  141.795120][ T7859] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.816664][ T7859] XFS (loop0): Ending clean mount
[  141.861144][ T5620] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  141.878997][ T5609] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  142.020874][ T5620] usb 2-1: Using ep0 maxpacket: 32
[  142.026890][ T5620] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  142.029378][ T5620] usb 2-1: config 2 has no interface number 0
[  142.031602][ T5620] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  142.037398][ T5620] usb 2-1: config 2 interface 88 has no altsetting 0
[  142.043564][ T5620] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  142.050938][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.053510][ T5620] usb 2-1: Product: syz
[  142.054814][ T5620] usb 2-1: Manufacturer: syz
[  142.060863][ T5620] usb 2-1: SerialNumber: syz
[  142.067501][ T7865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  142.274424][ T7865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  142.371923][ T5683] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  142.488409][ T7865] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  142.522959][ T5683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  142.526762][ T5683] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  142.530346][ T5683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  142.534938][ T5683] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  142.541287][ T5683] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  142.544681][ T5683] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3
[  142.547708][ T5683] usb 1-1: Product: syz
[  142.549267][ T5683] usb 1-1: Manufacturer: syz
[  142.551053][ T5683] usb 1-1: SerialNumber: syz
[  142.556050][ T5683] usb 1-1: config 0 descriptor??
[  142.562328][ T5683] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  142.564760][ T5683] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card
[  142.567679][ T5683] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90
[  142.776275][   T31] usb 1-1: USB disconnect, device number 16
[  142.900226][ T7883] loop2: detected capacity change from 0 to 32768
[  142.915009][ T5620] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  142.925447][ T5620] asix 2-1:2.88: probe with driver asix failed with error -71
[  142.942897][ T5620] usb 2-1: USB disconnect, device number 10
[  142.957564][ T7883] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  142.968965][ T7883] XFS (loop2): Metadata corruption detected at __xfs_buf_ioend+0x332/0x6f0, xfs_inode block 0x3000 xfs_inode_buf_verify
[  142.973200][ T7883] XFS (loop2): Unmount and run xfs_repair
[  142.975169][ T7883] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  142.977798][ T7883] 00000000: 01 00 00 00 03 02 00 00 00 00 00 00 00 00 00 00  ................
[  142.980403][ T7883] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  142.983320][ T7883] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  142.985949][ T7883] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 23 28  4.Xh...=......#(
[  142.988489][ T7883] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01  ................
[  142.991122][ T7883] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 d5 40 98 51  .............@.Q
[  142.993685][ T7883] 00000060: ff ff ff ff 99 07 52 a9 00 00 00 00 00 00 00 06  ......R.........
[  142.996388][ T7883] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  142.999151][ T7883] XFS (loop2): metadata I/O error in "xfs_imap_to_bp+0x12a/0x2d0" at daddr 0x3000 len 64 error 117
[  143.002380][ T7883] loop2: lost filesystem error report for type 5 error -117
[  143.002422][ T7883] XFS (loop2): Failed to read root inode 0x1800, error 117
[  143.007567][ T7883] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  143.329968][ T7895] loop0: detected capacity change from 0 to 1024
[  143.358915][ T7895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  143.365450][ T7895] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.411243][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  143.605941][ T7909] loop1: detected capacity change from 0 to 256
[  143.609380][ T7909] exfat: Deprecated parameter 'utf8'
[  143.623022][ T7909] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  143.640320][   T33] audit: type=1800 audit(1778298338.877:494): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.835" name="file1" dev="loop1" ino=1048613 res=0 errno=0
[  143.688941][ T7913] loop1: detected capacity change from 0 to 256
[  143.699463][ T7913] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  144.505319][ T7915] loop1: detected capacity change from 0 to 131072
[  144.509801][ T7915] F2FS-fs (loop1): Test dummy encryption mode enabled
[  144.513333][ T7915] F2FS-fs (loop1): invalid crc value
[  144.562181][ T7915] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.573237][ T7915] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  144.632311][ T7933] loop0: detected capacity change from 0 to 2048
[  144.657773][ T7938] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.699121][ T7915] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  144.868667][ T7938] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  144.875222][ T7938] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  144.901368][ T7938] Remounting filesystem read-only
[  144.956109][ T5609] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  145.096808][ T7944] loop0: detected capacity change from 0 to 2048
[  145.117280][ T7944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.406686][ T7960] loop1: detected capacity change from 0 to 1024
[  145.418265][ T7960] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  145.546671][ T7965] loop1: detected capacity change from 0 to 128
[  145.600666][ T7965] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  145.605853][ T7965] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.655504][ T5617] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.735550][ T7979] loop0: detected capacity change from 0 to 512
[  145.767730][ T7979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.773982][ T7980] FAT-fs (loop1): error, clusters badly computed (1 != 129)
[  145.779539][ T7979] ext4 filesystem being mounted at /336/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.783714][ T7980] FAT-fs (loop1): Filesystem has been set read-only
[  145.818793][ T7979] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #12: comm syz.0.860: invalid size
[  145.829066][ T7979] EXT4-fs (loop0): Remounting filesystem read-only
[  145.857241][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.864788][   T53] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  145.875998][   T53] Quota error (device loop0): write_blk: dquota write failed
[  145.878891][   T53] Quota error (device loop0): free_dqentry: Can't write quota data block 5
[  145.895660][   T53] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  145.905475][   T53] Quota error (device loop0): write_blk: dquota write failed
[  145.908247][   T53] Quota error (device loop0): free_dqentry: Can't write quota data block 5
[  146.083610][ T7980] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 196)
[  146.306170][ T8003] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.869'.
[  146.418831][ T8011] tipc: Started in network mode
[  146.420605][ T8011] tipc: Node identity -, cluster identity 4711
[  146.750882][  T797] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  146.845982][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'.
[  146.911213][  T797] usb 2-1: Using ep0 maxpacket: 8
[  146.915270][  T797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  146.923133][  T797] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  146.929673][  T797] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  146.933203][  T797] usb 2-1: Product: syz
[  146.935067][  T797] usb 2-1: Manufacturer: syz
[  146.937436][  T797] usb 2-1: SerialNumber: syz
[  147.161499][  T797] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  147.167863][  T797] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  147.174307][  T797] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  147.367677][  T797] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  147.379125][  T797] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  147.404058][  T797] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  147.434933][  T797] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  147.446711][  T797] usb 2-1: USB disconnect, device number 11
[  147.473037][ T8023] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  147.476258][  T797] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  147.487981][  T797] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  147.497578][  T797] visor 2-1:1.0: device disconnected
[  147.504235][ T8023] XFS (loop0): Ending clean mount
[  147.884630][ T5609] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.132444][ T8049] set_capacity_and_notify: 4 callbacks suppressed
[  148.132455][ T8049] loop0: detected capacity change from 0 to 2048
[  148.220092][ T8049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.224865][ T8049] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.261266][ T8049] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz.0.884: path /341/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0
[  148.279453][ T8049] EXT4-fs (loop0): Remounting filesystem read-only
[  148.303120][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.365194][ T8062] loop0: detected capacity change from 0 to 512
[  148.369095][ T8062] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  148.375105][ T8062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  148.386868][ T8062] EXT4-fs (loop0): 1 truncate cleaned up
[  148.390055][ T8062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.470140][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.523061][ T8069] loop0: detected capacity change from 0 to 256
[  148.548776][ T8069] FAT-fs (loop0): Directory bread(block 64) failed
[  148.554382][ T8069] FAT-fs (loop0): Directory bread(block 65) failed
[  148.562533][ T8069] FAT-fs (loop0): Directory bread(block 66) failed
[  148.566055][ T8069] FAT-fs (loop0): Directory bread(block 67) failed
[  148.568672][ T8069] FAT-fs (loop0): Directory bread(block 68) failed
[  148.571395][ T8069] FAT-fs (loop0): Directory bread(block 69) failed
[  148.574067][ T8069] FAT-fs (loop0): Directory bread(block 70) failed
[  148.576016][ T8069] FAT-fs (loop0): Directory bread(block 71) failed
[  148.578000][ T8069] FAT-fs (loop0): Directory bread(block 72) failed
[  148.580138][ T8069] FAT-fs (loop0): Directory bread(block 73) failed
[  148.607546][   T33] audit: type=1800 audit(1778298343.847:495): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.893" name="file1" dev="loop0" ino=1048619 res=0 errno=0
[  148.932661][ T8091] netlink: 1508 bytes leftover after parsing attributes in process `syz.1.904'.
[  148.940040][ T8091] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.041733][  T797] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  149.095616][ T8101] loop1: detected capacity change from 0 to 256
[  149.146251][ T8101] FAT-fs (loop1): Directory bread(block 64) failed
[  149.150271][ T8101] FAT-fs (loop1): Directory bread(block 65) failed
[  149.155411][ T8101] FAT-fs (loop1): Directory bread(block 66) failed
[  149.165367][ T8101] FAT-fs (loop1): Directory bread(block 67) failed
[  149.168020][ T8101] FAT-fs (loop1): Directory bread(block 68) failed
[  149.170506][ T8101] FAT-fs (loop1): Directory bread(block 69) failed
[  149.173460][ T8101] FAT-fs (loop1): Directory bread(block 70) failed
[  149.176104][ T8101] FAT-fs (loop1): Directory bread(block 71) failed
[  149.178702][ T8101] FAT-fs (loop1): Directory bread(block 72) failed
[  149.181434][ T8101] FAT-fs (loop1): Directory bread(block 73) failed
[  149.201570][  T797] usb 1-1: unable to get BOS descriptor or descriptor too short
[  149.208138][  T797] usb 1-1: not running at top speed; connect to a high speed hub
[  149.216543][  T797] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  149.231682][  T797] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00
[  149.235982][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.241589][  T797] usb 1-1: Product: syz
[  149.243190][  T797] usb 1-1: Manufacturer: syz
[  149.244699][  T797] usb 1-1: SerialNumber: syz
[  149.400577][ T8111] loop2: detected capacity change from 0 to 256
[  149.407900][ T8111] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.483670][  T797] qmi_wwan 1-1:251.0: probe with driver qmi_wwan failed with error -22
[  149.497284][  T797] usb 1-1: USB disconnect, device number 17
[  150.279394][ T8120] loop0: detected capacity change from 0 to 4096
[  150.292300][  T797] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  150.298150][ T8122] loop1: detected capacity change from 0 to 512
[  150.418942][ T8123] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  150.425017][ T8123] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  150.454399][  T797] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  150.461141][  T797] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  150.469202][  T797] usb 3-1: config 220 has no interface number 2
[  150.476059][  T797] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56
[  150.483096][  T797] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  150.493768][  T797] usb 3-1: config 220 interface 0 has no altsetting 0
[  150.501213][  T797] usb 3-1: config 220 interface 76 has no altsetting 0
[  150.506259][  T797] usb 3-1: config 220 interface 1 has no altsetting 0
[  150.513372][  T797] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  150.516639][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.519387][  T797] usb 3-1: Product: syz
[  150.521579][  T797] usb 3-1: Manufacturer: syz
[  150.523282][  T797] usb 3-1: SerialNumber: syz
[  150.661012][ T5620] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  150.749665][  T797] usb 3-1: selecting invalid altsetting 0
[  150.765034][  T797] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  150.768217][  T797] uvcvideo 3-1:220.0: No valid video chain found.
[  150.775257][  T797] usb 3-1: selecting invalid altsetting 0
[  150.780898][  T797] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  150.794861][  T797] usb 3-1: USB disconnect, device number 16
[  150.813425][ T5620] usb 2-1: unable to get BOS descriptor or descriptor too short
[  150.819511][ T5620] usb 2-1: not running at top speed; connect to a high speed hub
[  150.827027][ T5620] usb 2-1: language id specifier not provided by device, defaulting to English
[  150.833570][ T5620] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  150.837070][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.839887][ T5620] usb 2-1: Product: syz
[  150.841964][ T5620] usb 2-1: Manufacturer: 殂랔ṥ褤崉犚㖲ໂ邚⚲挚䘀Ⲫꇼ㕎靱蔻䍆໘腬䘤帋됲
[  150.845542][ T5620] usb 2-1: SerialNumber: syz
[  151.050958][   T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  151.069114][ T5620] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  151.073554][ T5620] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  151.106313][ T5620] usb 2-1: USB disconnect, device number 12
[  151.137194][ T6605] udevd[6605]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.201741][   T31] usb 1-1: Using ep0 maxpacket: 32
[  151.205692][   T31] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  151.208879][   T31] usb 1-1: config 0 has no interface number 0
[  151.211882][   T31] usb 1-1: config 0 interface 12 has no altsetting 0
[  151.216615][   T31] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  151.220194][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.223530][   T31] usb 1-1: Product: syz
[  151.225181][   T31] usb 1-1: Manufacturer: syz
[  151.226907][   T31] usb 1-1: SerialNumber: syz
[  151.231537][   T31] usb 1-1: config 0 descriptor??
[  151.419117][ T8141] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in;
[  151.419117][ T8141]    program syz.2.926 not setting count and/or reply_len properly
[  151.611512][ T8149] loop1: detected capacity change from 0 to 128
[  151.633517][ T8149] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  151.638458][ T8149] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  151.655988][ T8149] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.1.930: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0
[  151.663990][ T8149] EXT4-fs (loop1): Remounting filesystem read-only
[  151.691735][ T5617] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  151.770073][ T8154] loop2: detected capacity change from 0 to 512
[  151.804163][ T8154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.808860][ T8154] ext4 filesystem being mounted at /317/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.833340][ T8154] EXT4-fs (loop2): shut down requested (2)
[  151.862144][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.870464][   T32] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  151.875182][   T32] Quota error (device loop2): write_blk: dquota write failed
[  151.877873][   T32] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  151.881218][   T32] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  151.884505][   T32] Quota error (device loop2): write_blk: dquota write failed
[  151.887358][   T32] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  151.894562][   T32] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  151.898170][   T32] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  153.051320][ T5683] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  153.063876][   T31] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 98 failed: -71
[  153.070265][   T31] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  153.073366][   T31] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  153.076404][   T31] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  153.090611][   T31] usb 1-1: USB disconnect, device number 18
[  153.226326][ T5683] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  153.232419][ T5683] usb 2-1: config 1 has no interface number 0
[  153.236408][ T5683] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  153.242815][ T5683] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  153.250482][ T5683] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.257850][ T5683] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  153.265221][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.270062][ T5683] usb 2-1: Product: syz
[  153.275387][ T5683] usb 2-1: Manufacturer: syz
[  153.278449][ T5683] usb 2-1: SerialNumber: syz
[  153.291921][ T8168] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  153.301944][ T8181] loop2: detected capacity change from 0 to 2048
[  153.314017][ T8181] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  153.320227][ T5877] udevd[5877]: incorrect nilfs2 checksum on /dev/loop2
[  153.328697][ T5877] udevd[5877]: incorrect nilfs2 checksum on /dev/loop2
[  153.334852][ T8182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.343637][ T8181] NILFS (loop2): corrupt root inode
[  153.705427][ T8168] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  153.817415][ T8188] loop2: detected capacity change from 0 to 32768
[  153.851572][ T8188] find_entry called with index = 0
[  153.854607][ T8188] read_mapping_page failed!
[  153.859121][ T8188] ERROR: (device loop2): txCommit: 
[  153.859121][ T8188] 
[  153.916778][ T5683] usb 2-1: Incompatible driver and firmware versions
[  153.937089][ T5683] usb 2-1: USB disconnect, device number 13
[  153.973118][   T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  154.121463][   T31] usb 1-1: Using ep0 maxpacket: 32
[  154.125501][   T31] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  154.133537][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.139066][   T31] usb 1-1: config 0 descriptor??
[  154.161597][   T31] as10x_usb: device has been detected
[  154.163895][   T31] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  154.192213][   T31] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  154.243175][   T31] as10x_usb: error during firmware upload part1
[  154.245715][   T31] Registered device nBox DVB-T Dongle
[  154.355130][   T31] usb 1-1: USB disconnect, device number 19
[  154.385553][   T31] Unregistered device nBox DVB-T Dongle
[  154.386544][   T31] as10x_usb: device has been disconnected
[  154.396024][ T8208] loop2: detected capacity change from 0 to 40427
[  154.399611][ T8208] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(3072)
[  154.402422][ T8208] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  154.405161][ T8208] F2FS-fs (loop2): build fault injection type: 0x1
[  154.407744][ T8208] F2FS-fs (loop2): invalid crc value
[  154.469487][ T8208] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  154.482729][ T8208] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  154.485158][ T8208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  154.838178][ T8218] loop2: detected capacity change from 0 to 256
[  154.914689][ T8218] FAT-fs (loop2): Directory bread(block 64) failed
[  154.916757][ T8218] FAT-fs (loop2): Directory bread(block 65) failed
[  154.919088][ T8218] FAT-fs (loop2): Directory bread(block 66) failed
[  154.921598][ T8218] FAT-fs (loop2): Directory bread(block 67) failed
[  154.924183][ T8218] FAT-fs (loop2): Directory bread(block 68) failed
[  154.926638][ T8218] FAT-fs (loop2): Directory bread(block 69) failed
[  154.929417][ T8218] FAT-fs (loop2): Directory bread(block 70) failed
[  154.932807][ T8218] FAT-fs (loop2): Directory bread(block 71) failed
[  154.935011][ T8218] FAT-fs (loop2): Directory bread(block 72) failed
[  154.937118][ T8218] FAT-fs (loop2): Directory bread(block 73) failed
[  155.242242][ T8224] loop0: detected capacity change from 0 to 4096
[  155.250402][ T8224] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  155.296291][ T8224] ntfs3(loop0): $Secure::$SII is corrupted.
[  155.298248][ T8224] ntfs3(loop0): Failed to initialize $Secure (-22).
[  155.374738][  T797] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  155.551371][  T797] usb 3-1: Using ep0 maxpacket: 8
[  155.559383][  T797] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  155.563633][  T797] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  155.567014][  T797] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  155.570948][  T797] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.575535][  T797] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  155.578650][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.652413][ T5683] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  155.793162][  T797] usb 3-1: GET_CAPABILITIES returned 0
[  155.795444][  T797] usbtmc 3-1:16.0: can't read capabilities
[  155.805827][ T5683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.813115][ T5683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.816629][ T5683] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  155.820630][ T5683] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  155.824289][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.829265][ T5683] usb 1-1: config 0 descriptor??
[  156.004342][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.007425][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.015993][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  156.025722][  T797] usb 3-1: USB disconnect, device number 17
[  156.263210][ T5683] steelseries 0003:1038:1410.0006: not enough values in HID_OUTPUT_REPORT 0 field 0
[  156.390887][    T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  156.465283][ T5683] usb 1-1: USB disconnect, device number 20
[  156.543071][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  156.550392][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  156.559156][    T9] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  156.569413][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.572698][    T9] usb 2-1: Product: syz
[  156.574305][    T9] usb 2-1: Manufacturer: syz
[  156.576098][    T9] usb 2-1: SerialNumber: syz
[  156.580178][    T9] usb 2-1: config 0 descriptor??
[  156.587502][ T8237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  156.650979][    T9] rc_core: IR keymap rc-streamzap not found
[  156.653245][    T9] Registered IR keymap rc-empty
[  156.657349][    T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  156.663947][    T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  156.809121][   T31] usb 2-1: USB disconnect, device number 14
[  156.821103][  T797] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  156.974061][  T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.978472][  T797] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  156.982039][  T797] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  156.985453][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.991887][  T797] usb 3-1: config 0 descriptor??
[  157.108014][ T8247] netlink: 'syz.0.970': attribute type 21 has an invalid length.
[  157.124153][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.128650][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.136131][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.139439][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.208779][  T797] Bluetooth: Can't get state to change to load ram patch err
[  157.214266][  T797] Bluetooth: Loading patch file failed
[  157.216013][  T797] ath3k 3-1:0.0: probe with driver ath3k failed with error -71
[  157.224958][  T797] usb 3-1: USB disconnect, device number 18
[  157.602154][ T5620] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  157.783935][ T5620] usb 2-1: config 150 has an invalid interface number: 204 but max is 2
[  157.786216][ T5620] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  157.788774][ T5620] usb 2-1: config 150 has no interface number 0
[  157.790600][ T5620] usb 2-1: config 150 interface 204 has no altsetting 0
[  157.796182][ T5620] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  157.798791][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.802088][ T5620] usb 2-1: Product: syz
[  157.803403][ T5620] usb 2-1: Manufacturer: syz
[  157.805051][ T5620] usb 2-1: SerialNumber: syz
[  158.093368][ T5620] xr_serial 2-1:150.204: skipping garbage
[  158.095686][ T5620] xr_serial 2-1:150.204: xr_serial converter detected
[  158.937688][ T5620] usb 2-1: xr_serial converter now attached to ttyUSB0
[  159.169743][ T5683] usb 2-1: USB disconnect, device number 15
[  159.179319][ T5683] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  159.185418][ T5683] xr_serial 2-1:150.204: device disconnected
[  160.185001][ T8307] netlink: 'syz.0.996': attribute type 5 has an invalid length.
[  160.262232][ T5683] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  160.414112][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  160.418582][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  160.423848][ T5683] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  160.427491][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.432732][ T5683] usb 3-1: config 0 descriptor??
[  160.460867][ T5620] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  160.610882][ T5620] usb 1-1: Using ep0 maxpacket: 8
[  160.854714][ T5683] hid-alps 0003:044E:120C.0007: unknown main item tag 0x0
[  160.856981][ T5683] hid-alps 0003:044E:120C.0007: unexpected long global item
[  160.859507][ T5683] hid-alps 0003:044E:120C.0007: parse failed
[  160.861952][ T5683] hid-alps 0003:044E:120C.0007: probe with driver hid-alps failed with error -22
[  160.917777][ T8311] loop0: detected capacity change from 0 to 32768
[  160.921607][ T8311] btrfs: Deprecated parameter 'usebackuproot'
[  160.924003][ T8311] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  160.928999][ T8311] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.997 (8311)
[  160.941262][ T8311] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  160.945102][ T8311] BTRFS info (device loop0): using crc32c checksum algorithm
[  160.995188][ T5739] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  161.001878][ T8311] BTRFS error (device loop0): failed to load root extent
[  161.004598][ T8311] BTRFS warning (device loop0): try to load backup roots slot 1
[  161.007956][   T40] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  161.017205][ T8311] BTRFS warning (device loop0): couldn't read tree root
[  161.019956][ T8311] BTRFS warning (device loop0): try to load backup roots slot 2
[  161.023410][ T5739] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  161.031008][ T8311] BTRFS warning (device loop0): couldn't read tree root
[  161.033728][ T8311] BTRFS warning (device loop0): try to load backup roots slot 3
[  161.052593][ T5683] usb 3-1: USB disconnect, device number 19
[  161.053689][ T8311] BTRFS info (device loop0): rebuilding free space tree
[  161.077384][ T8311] BTRFS info (device loop0): checking UUID tree
[  161.083908][ T8311] BTRFS info (device loop0): enabling ssd optimizations
[  161.086689][ T8311] BTRFS info (device loop0): turning on async discard
[  161.089327][ T8311] BTRFS info (device loop0): enabling free space tree
[  161.092003][ T8311] BTRFS info (device loop0): force clearing of disk cache
[  161.094916][ T8311] BTRFS info (device loop0): enabling auto defrag
[  161.097403][ T8311] BTRFS info (device loop0): trying to use backup root at mount time
[  161.100530][ T8311] BTRFS info (device loop0): use zstd compression, level 3
[  161.212134][ T5620] usb 1-1: unable to get BOS descriptor or descriptor too short
[  161.216127][ T5620] usb 1-1: unable to read config index 0 descriptor/start: -71
[  161.218985][ T5620] usb 1-1: can't read configurations, error -71
[  161.938259][ T5609] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  161.955953][ T8344] loop2: detected capacity change from 0 to 32768
[  161.996826][ T8344] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  162.573980][ T8349] syz.2.1004 (8349) used greatest stack depth: 17704 bytes left
[  163.047569][ T8355] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1007'.
[  163.141408][ T8359] loop1: detected capacity change from 0 to 128
[  163.173539][ T8359] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  163.200276][ T8359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.472046][ T5618] ocfs2: Unmounting device (7,2) on (node local)
[  163.854936][ T8378] loop1: detected capacity change from 0 to 8
[  164.623724][ T8394] syzkaller0: entered promiscuous mode
[  164.626003][ T8394] syzkaller0: entered allmulticast mode
[  165.007770][ T8413] loop0: detected capacity change from 0 to 512
[  165.058376][ T8413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.064496][ T8413] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.092398][ T8400] loop2: detected capacity change from 0 to 32768
[  165.100707][ T8400] (syz.2.1026,8400,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  165.111519][ T8400] (syz.2.1026,8400,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  165.186360][ T8413] 
[  165.187338][ T8413] ======================================================
[  165.189585][ T8413] WARNING: possible circular locking dependency detected
[  165.191729][ T8413] syzkaller #0 Not tainted
[  165.193146][ T8413] ------------------------------------------------------
[  165.195240][ T8413] syz.0.1032/8413 is trying to acquire lock:
[  165.196990][ T8413] ffff8881ad63c600 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[  165.199709][ T8413] 
[  165.199709][ T8413] but task is already holding lock:
[  165.202125][ T8413] ffff8881ad63ac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130
[  165.205152][ T8413] 
[  165.205152][ T8413] which lock already depends on the new lock.
[  165.205152][ T8413] 
[  165.208546][ T8413] 
[  165.208546][ T8413] the existing dependency chain (in reverse order) is:
[  165.211191][ T8413] 
[  165.211191][ T8413] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  165.214352][ T8413]        percpu_down_read_internal+0x48/0x1c0
[  165.216570][ T8413]        ext4_writepages+0x205/0x3b0
[  165.218511][ T8413]        do_writepages+0x32e/0x550
[  165.220074][ T8413]        __writeback_single_inode+0x133/0x10e0
[  165.222060][ T8413]        writeback_single_inode+0x4ac/0xdc0
[  165.224085][ T8413]        write_inode_now+0x1c2/0x290
[  165.226035][ T8413]        iput+0x8c1/0xe80
[  165.227278][ T8413]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  165.229337][ T8413]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  165.231523][ T8413]        __ext4_expand_extra_isize+0x30d/0x400
[  165.233596][ T8413]        __ext4_mark_inode_dirty+0x45c/0x710
[  165.235343][ T8413]        ext4_evict_inode+0x986/0x10e0
[  165.237177][ T8413]        evict+0x61e/0xb10
[  165.238791][ T8413]        ext4_orphan_cleanup+0xc38/0x1470
[  165.240609][ T8413]        ext4_fill_super+0x5a19/0x6330
[  165.242527][ T8413]        get_tree_bdev_flags+0x431/0x4f0
[  165.244157][ T8413]        vfs_get_tree+0x92/0x2a0
[  165.245604][ T8413]        do_new_mount+0x341/0xd30
[  165.247107][ T8413]        __se_sys_mount+0x31d/0x420
[  165.248630][ T8413]        do_syscall_64+0x15f/0xf80
[  165.250192][ T8413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.252402][ T8413] 
[  165.252402][ T8413] -> #0 (sb_internal){++++}-{0:0}:
[  165.255110][ T8413]        __lock_acquire+0x15a5/0x2cf0
[  165.257267][ T8413]        lock_acquire+0x106/0x350
[  165.259179][ T8413]        percpu_down_read_internal+0x48/0x1c0
[  165.261496][ T8413]        ext4_evict_inode+0x426/0x10e0
[  165.263551][ T8413]        evict+0x61e/0xb10
[  165.265228][ T8413]        ext4_ext_migrate+0xe11/0x1130
[  165.267340][ T8413]        ext4_fileattr_set+0xf33/0x16d0
[  165.269458][ T8413]        vfs_fileattr_set+0x9f6/0xc90
[  165.271485][ T8413]        ioctl_setflags+0x189/0x1f0
[  165.273458][ T8413]        do_vfs_ioctl+0x9f1/0x1530
[  165.275391][ T8413]        __se_sys_ioctl+0x82/0x170
[  165.277310][ T8413]        do_syscall_64+0x15f/0xf80
[  165.279227][ T8413]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.281518][ T8413] 
[  165.281518][ T8413] other info that might help us debug this:
[  165.281518][ T8413] 
[  165.285178][ T8413]  Possible unsafe locking scenario:
[  165.285178][ T8413] 
[  165.287619][ T8413]        CPU0                    CPU1
[  165.289193][ T8413]        ----                    ----
[  165.290925][ T8413]   lock(&sbi->s_writepages_rwsem);
[  165.292834][ T8413]                                lock(sb_internal);
[  165.295355][ T8413]                                lock(&sbi->s_writepages_rwsem);
[  165.298226][ T8413]   rlock(sb_internal);
[  165.299768][ T8413] 
[  165.299768][ T8413]  *** DEADLOCK ***
[  165.299768][ T8413] 
[  165.302658][ T8413] 3 locks held by syz.0.1032/8413:
[  165.304486][ T8413]  #0: ffff8881ad63c410 (sb_writers#4){++++}-{0:0}, at: mnt_want_write_file+0x60/0x200
[  165.308040][ T8413]  #1: ffff8881ba6bce38 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x161/0xc90
[  165.311861][ T8413]  #2: ffff8881ad63ac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130
[  165.315911][ T8413] 
[  165.315911][ T8413] stack backtrace:
[  165.318225][ T8413] CPU: 0 UID: 0 PID: 8413 Comm: syz.0.1032 Not tainted syzkaller #0 PREEMPT(full) 
[  165.318249][ T8413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.318264][ T8413] Call Trace:
[  165.318273][ T8413]  <TASK>
[  165.318281][ T8413]  dump_stack_lvl+0xe8/0x150
[  165.318308][ T8413]  print_circular_bug+0x2e1/0x300
[  165.318331][ T8413]  check_noncircular+0x12e/0x150
[  165.318352][ T8413]  __lock_acquire+0x15a5/0x2cf0
[  165.318370][ T8413]  ? kernel_text_address+0xa5/0xe0
[  165.318391][ T8413]  ? __kernel_text_address+0xd/0x30
[  165.318412][ T8413]  ? unwind_get_return_address+0x4d/0x90
[  165.318434][ T8413]  ? ext4_evict_inode+0x426/0x10e0
[  165.318456][ T8413]  lock_acquire+0x106/0x350
[  165.318470][ T8413]  ? ext4_evict_inode+0x426/0x10e0
[  165.318496][ T8413]  percpu_down_read_internal+0x48/0x1c0
[  165.318514][ T8413]  ? ext4_evict_inode+0x426/0x10e0
[  165.318535][ T8413]  ext4_evict_inode+0x426/0x10e0
[  165.318554][ T8413]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  165.318568][ T8413]  ? do_raw_spin_lock+0x12b/0x2f0
[  165.318589][ T8413]  ? __pfx_ext4_evict_inode+0x10/0x10
[  165.318612][ T8413]  ? do_raw_spin_unlock+0x4d/0x210
[  165.318633][ T8413]  ? __pfx_ext4_evict_inode+0x10/0x10
[  165.318655][ T8413]  evict+0x61e/0xb10
[  165.318673][ T8413]  ? __pfx_evict+0x10/0x10
[  165.318689][ T8413]  ? _raw_spin_unlock+0x28/0x50
[  165.318704][ T8413]  ? iput+0xb25/0xe80
[  165.318725][ T8413]  ext4_ext_migrate+0xe11/0x1130
[  165.318749][ T8413]  ? __pfx_ext4_ext_migrate+0x10/0x10
[  165.318771][ T8413]  ? ext4_change_inode_journal_flag+0x20f/0xaa0
[  165.318800][ T8413]  ? ext4_set_inode_flags+0x249/0x5b0
[  165.318816][ T8413]  ? __ext4_journal_stop+0x34/0x1a0
[  165.318836][ T8413]  ext4_fileattr_set+0xf33/0x16d0
[  165.318861][ T8413]  ? __pfx_ext4_fileattr_set+0x10/0x10
[  165.318917][ T8413]  ? __asan_memset+0x22/0x50
[  165.318937][ T8413]  ? fileattr_fill_flags+0x229/0x380
[  165.318956][ T8413]  ? fscrypt_prepare_setflags+0x62/0x3c0
[  165.318971][ T8413]  vfs_fileattr_set+0x9f6/0xc90
[  165.318990][ T8413]  ? mnt_get_write_access+0x66/0x280
[  165.319017][ T8413]  ? __pfx_vfs_fileattr_set+0x10/0x10
[  165.319039][ T8413]  ? __asan_memset+0x22/0x50
[  165.319058][ T8413]  ioctl_setflags+0x189/0x1f0
[  165.319080][ T8413]  ? __pfx_ioctl_setflags+0x10/0x10
[  165.319100][ T8413]  ? tomoyo_path_number_perm+0x219/0x630
[  165.319119][ T8413]  ? tomoyo_path_number_perm+0x219/0x630
[  165.319138][ T8413]  do_vfs_ioctl+0x9f1/0x1530
[  165.319154][ T8413]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  165.319172][ T8413]  ? do_futex+0x333/0x420
[  165.319195][ T8413]  ? __fget_files+0x2a/0x420
[  165.319215][ T8413]  ? __fget_files+0x2a/0x420
[  165.319232][ T8413]  ? __fget_files+0x3a0/0x420
[  165.319250][ T8413]  ? __fget_files+0x2a/0x420
[  165.319269][ T8413]  ? bpf_lsm_file_ioctl+0x9/0x20
[  165.319299][ T8413]  __se_sys_ioctl+0x82/0x170
[  165.319314][ T8413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.319330][ T8413]  do_syscall_64+0x15f/0xf80
[  165.319350][ T8413]  ? trace_irq_disable+0x3b/0x140
[  165.319373][ T8413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.319389][ T8413] RIP: 0033:0x7ffb4419cdd9
[  165.319405][ T8413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.319418][ T8413] RSP: 002b:00007ffb450f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  165.319435][ T8413] RAX: ffffffffffffffda RBX: 00007ffb44415fa0 RCX: 00007ffb4419cdd9
[  165.319447][ T8413] RDX: 0000200000000080 RSI: 0000000040086602 RDI: 0000000000000005
[  165.319456][ T8413] RBP: 00007ffb44232d69 R08: 0000000000000000 R09: 0000000000000000
[  165.319465][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.319473][ T8413] R13: 00007ffb44416038 R14: 00007ffb44415fa0 R15: 00007ffe8f6ff828
[  165.319488][ T8413]  </TASK>
[  165.449946][ T8400] JBD2: Ignoring recovery information on journal
[  165.471473][ T8400] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  165.480574][ T8400] (syz.2.1026,8400,1):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume.
[  165.488675][ T8400] (syz.2.1026,8400,1):ocfs2_group_add:513 ERROR: status = -22
[  165.496069][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.578409][ T5618] ocfs2: Unmounting device (7,2) on (node local)
