last executing test programs:

4.321628881s ago: executing program 5 (id=1251):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0xa, @pix={0x3, 0xfff, 0x30383653, 0xb, 0x10, 0xffff, 0x1, 0xe261, 0x0, 0x8, 0x0, 0x4}})

3.902110283s ago: executing program 5 (id=1257):
r0 = syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e23, &(0x7f0000013e80)="$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")
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8], 0x9, 0x0, &(0x7f0000000180))
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x3080a0, 0x0)

3.170295924s ago: executing program 5 (id=1263):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="030325bd7000fcdb6e682f"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x840)

2.964554825s ago: executing program 2 (id=1265):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x380000, @empty}, 0x1c)

2.894858996s ago: executing program 2 (id=1266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff00001400200000000000000000000000ffffe000000008000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0)

2.817950329s ago: executing program 1 (id=1269):
unshare(0x4040480)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0)

2.747180315s ago: executing program 5 (id=1270):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x28, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x6e1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, 0x0)

2.580018185s ago: executing program 2 (id=1271):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000008040)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5fbf, &(0x7f0000002080)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)

2.544826114s ago: executing program 1 (id=1273):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
ioctl$sock_inet6_SIOCADDRT(r0, 0x8919, 0x0)

2.490523412s ago: executing program 4 (id=1274):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.254250364s ago: executing program 1 (id=1276):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x0)
unshare(0x20000)
open_tree(r0, &(0x7f0000000640)='\x00', 0x9902)

2.24585953s ago: executing program 0 (id=1277):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup(r0)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e1a, @loopback}, 0x10)

2.239773597s ago: executing program 3 (id=1278):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="040000000000", 0x6)

2.151017776s ago: executing program 4 (id=1279):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
unshare(0x2040600)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20)

1.996688148s ago: executing program 3 (id=1280):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x400009}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x4d5, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0xfffffffc, 0x3c}, 0x0, @in6=@empty, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7}]}]}, 0x13c}}, 0x4080010)
syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0)

1.992367927s ago: executing program 1 (id=1281):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0)

1.968336878s ago: executing program 0 (id=1282):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0)

1.944939779s ago: executing program 4 (id=1283):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd2f, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0)

1.797383468s ago: executing program 5 (id=1284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x7fffffff, 0x400, 0x4}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x80000000, 0x3, 0x6}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xe7, 0x1000, 0xfffff9c4, 0xffffffff, 0xde, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.765623948s ago: executing program 0 (id=1285):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/187, 0xbb)
pread64(r0, &(0x7f0000001cc0)=""/4096, 0x52, 0x2fe)

1.684394613s ago: executing program 3 (id=1286):
sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xfffffffffffffda6}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)

1.68293334s ago: executing program 4 (id=1287):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'wlc\x00', 0x5, 0x8, 0x10}, {@remote, 0x4e20, 0x0, 0xd0, 0x48, 0x7fffffff}}, 0x44)

1.555608875s ago: executing program 2 (id=1288):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@flush}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@nfs_nostale_ro}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@utf8no}, {@numtail}, {@utf8no}, {@shortname_win95}, {@shortname_win95}]}, 0xfd, 0x2c3, &(0x7f0000000d00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x18a)
getdents64(r0, &(0x7f0000004440)=""/4096, 0x1000)

1.444263541s ago: executing program 2 (id=1289):
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)

1.389013725s ago: executing program 0 (id=1290):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close(r0)

1.37157632s ago: executing program 3 (id=1291):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="d22208d9c2978888ca8d8b0088a8", 0x0, 0xc000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.360292944s ago: executing program 5 (id=1292):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.263309727s ago: executing program 0 (id=1293):
setns(0xc9, 0x0)
r0 = socket(0x8, 0x6, 0x5)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000006c0))

1.262979724s ago: executing program 4 (id=1294):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)

1.233462198s ago: executing program 1 (id=1295):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c740f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000000e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000440)=[{0xf, 0x38b, 0x3, {0x100000000002000, 0xfb}, 0x4}], 0x1, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0x6bcd}, {0x0, 0x0, 0x8, 0x5, 0x3}, {0x0, 0x0, 0x28, 0x6, 0x11}, {0x0, 0x0, 0x8, 0x990, 0x80000000}})

1.118114893s ago: executing program 0 (id=1296):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x442, 0x1)
fallocate(r0, 0x0, 0xa20, 0x8000c65)

962.241605ms ago: executing program 2 (id=1297):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x28, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x6e1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, 0x0)

677.132786ms ago: executing program 3 (id=1298):
unshare(0x22020600)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x5, 0x9)

587.678116ms ago: executing program 1 (id=1299):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)

366.368936ms ago: executing program 3 (id=1300):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000040)=[0x1000], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})

0s ago: executing program 4 (id=1301):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000008040)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5fbf, &(0x7f0000002080)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)

kernel console output (not intermixed with test programs):

sing sha256 checksum algorithm
[  128.383732][ T6762] BTRFS info (device loop1): enabling ssd optimizations
[  128.383764][ T6762] BTRFS info (device loop1): turning on async discard
[  128.383782][ T6762] BTRFS info (device loop1): enabling free space tree
[  128.443548][ T5743] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  128.608416][ T5743] usb 3-1: Using ep0 maxpacket: 16
[  128.611629][ T5743] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  128.615877][ T5743] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.615911][ T5743] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.615941][ T5743] usb 3-1: config 0 interface 0 has no altsetting 0
[  128.615976][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.682500][ T5609] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.718540][ T5743] usb 3-1: config 0 descriptor??
[  128.808215][ T6809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'.
[  129.080829][   T31] kauditd_printk_skb: 2 callbacks suppressed
[  129.080887][   T31] audit: type=1326 audit(1790198957.830:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.0.397" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b6c39e159 code=0x0
[  129.083073][ T6815] jffs2: notice: (6815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  129.249287][ T5743] uclogic 0003:2179:0053.0008: interface is invalid, ignoring
[  129.357808][ T6803] loop4: detected capacity change from 0 to 32768
[  129.435581][ T5615] usb 3-1: USB disconnect, device number 5
[  129.521559][ T6804] loop3: detected capacity change from 0 to 32768
[  129.555011][ T6820] loop1: detected capacity change from 0 to 1024
[  129.556287][ T6820] EXT4-fs: Ignoring removed mblk_io_submit option
[  129.578900][ T6804] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  129.599369][ T6804] JBD2: Ignoring recovery information on journal
[  129.661374][ T6820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.707194][ T6804] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  129.769025][ T6820] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.398: bg 0: block 511: invalid block bitmap
[  129.793031][ T6820] EXT4-fs (loop1): Remounting filesystem read-only
[  129.903216][ T6826] loop4: detected capacity change from 0 to 256
[  129.937653][ T6826] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  129.959509][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.417934][ T5614] ocfs2: Unmounting device (7,3) on (node local)
[  130.433968][ T4928] Bluetooth: hci6: command 0x1003 tx timeout
[  130.437917][ T5616] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  130.470181][ T6837] loop1: detected capacity change from 0 to 256
[  130.471188][ T6837] exfat: Deprecated parameter 'utf8'
[  130.471297][ T6837] exfat: Deprecated parameter 'namecase'
[  130.471362][ T6837] exfat: Deprecated parameter 'utf8'
[  130.551931][ T6837] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  130.783285][ T5743] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  130.936328][ T5743] usb 1-1: New USB device found, idVendor=10c4, idProduct=81b9, bcdDevice= 0.00
[  130.937645][ T5743] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  130.937685][ T5743] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  130.937721][ T5743] usb 1-1: config 0 interface 0 has no altsetting 0
[  130.937759][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.002739][ T5743] usb 1-1: config 0 descriptor??
[  131.079177][ T6851] jffs2: notice: (6851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  131.410195][ T6861] loop5: detected capacity change from 0 to 128
[  131.422655][ T6861] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  131.438723][ T6861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.510981][ T5743] hid-generic 0003:10C4:81B9.0009: hidraw0: USB HID v0.00 Device [HID 10c4:81b9] on usb-dummy_hcd.0-1/input0
[  131.575639][ T6864] fuse: Unexpected value for 'default_permissions'
[  131.705224][ T5905] usb 1-1: USB disconnect, device number 4
[  131.841316][ T6871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  131.841423][ T6871] System zones: 1-3, 19-19, 35-36
[  131.915718][ T6871] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  131.931723][ T6871] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  131.965097][ T6841] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.406 (6841)
[  132.008736][ T6841] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.008774][ T6841] BTRFS info (device loop2): using sha256 checksum algorithm
[  132.036153][ T6871] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full
[  132.122120][ T5609] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.199231][ T6841] BTRFS info (device loop2): enabling ssd optimizations
[  132.199263][ T6841] BTRFS info (device loop2): turning on async discard
[  132.199282][ T6841] BTRFS info (device loop2): enabling free space tree
[  132.286038][ T6867] set_capacity_and_notify: 3 callbacks suppressed
[  132.286061][ T6867] loop4: detected capacity change from 0 to 32768
[  132.290550][ T6867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.418 (6867)
[  132.383502][ T6867] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.383540][ T6867] BTRFS info (device loop4): using crc32c checksum algorithm
[  132.469228][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  132.469299][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  132.539112][ T6909] loop0: detected capacity change from 0 to 256
[  132.591910][ T6867] BTRFS info (device loop4): enabling ssd optimizations
[  132.591943][ T6867] BTRFS info (device loop4): turning on flush-on-commit
[  132.591962][ T6867] BTRFS info (device loop4): enabling free space tree
[  132.591980][ T6867] BTRFS info (device loop4): enabling auto defrag
[  132.592000][ T6867] BTRFS info (device loop4): use lzo compression, level 1
[  132.592022][ T6867] BTRFS info (device loop4): max_inline set to 4096
[  132.592130][ T5613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.612524][   T31] audit: type=1800 audit(1790198961.317:44): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.427" name="file1" dev="loop0" ino=1048626 res=0 errno=0
[  132.958109][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.280270][ T6921] loop5: detected capacity change from 0 to 4096
[  133.497857][ T6921] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  133.516583][ T6932] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.599560][ T6921] NILFS (loop5): mounting fs with errors
[  134.345020][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'.
[  134.644022][   T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  134.680207][ T6960] usb usb8: check_ctrlrecip: process 6960 (syz.3.448) requesting ep 01 but needs 81
[  134.680244][ T6960] usb usb8: usbfs: process 6960 (syz.3.448) did not claim interface 0 before use
[  134.780712][ T6963] loop5: detected capacity change from 0 to 256
[  134.810022][   T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  134.813091][   T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  134.813136][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  134.813165][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  134.813211][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.845447][   T10] usb 2-1: config 0 descriptor??
[  134.847846][ T6952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  134.943290][ T6963] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[  134.977434][ T5743] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  135.006577][ T6963] exFAT-fs (loop5): error, in sector 160, dentry 5 should be unused, but 0xc1
[  135.006603][ T6963] exFAT-fs (loop5): Filesystem has been set read-only
[  135.096267][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  135.096388][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  135.111944][   T10] usb 2-1: USB disconnect, device number 4
[  135.141841][ T5743] usb 5-1: Using ep0 maxpacket: 32
[  135.148435][ T5743] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  135.152632][ T5743] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  135.152658][ T5743] usb 5-1: config 0 has no interface number 0
[  135.156256][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.156284][ T5743] usb 5-1: Product: syz
[  135.156308][ T5743] usb 5-1: Manufacturer: syz
[  135.156325][ T5743] usb 5-1: SerialNumber: syz
[  135.230157][ T5743] usb 5-1: config 0 descriptor??
[  135.248649][ T5743] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  135.248679][ T5743] usb 5-1: selecting invalid altsetting 1
[  135.248697][ T5743] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  135.311561][ T5743] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  135.311890][ T5743] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  135.311938][ T5743] usb 5-1: media controller created
[  135.381820][ T5743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  135.484008][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'.
[  135.839755][ T6987] loop5: detected capacity change from 0 to 512
[  135.844150][ T6987] EXT4-fs: Ignoring removed oldalloc option
[  135.844972][ T6987] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  135.911790][ T6987] EXT4-fs (loop5): 1 truncate cleaned up
[  135.946116][ T6987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.992862][ T6987] EXT4-fs warning (device loop5): ext4_group_extend:1890: can't read last block, resize aborted
[  136.184865][ T5611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.219565][ T7000] netlink: 58 bytes leftover after parsing attributes in process `syz.2.466'.
[  136.219591][ T7000] netlink: 128 bytes leftover after parsing attributes in process `syz.2.466'.
[  136.288963][ T7002] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  136.368285][ T7004] netlink: 56 bytes leftover after parsing attributes in process `syz.5.469'.
[  136.517061][ T6961] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  136.535407][ T5743] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  136.535466][ T5743] zl10353_read_register: readreg error (reg=127, ret==-71)
[  136.560263][ T5743] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  136.622071][ T7014] xt_hashlimit: size too large, truncated to 1048576
[  136.842801][ T5743] usb 5-1: USB disconnect, device number 4
[  136.954863][ T7020] loop2: detected capacity change from 0 to 128
[  137.050401][ T7020] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  137.050475][ T7020] hpfs: filesystem error: improperly stopped
[  137.050492][ T7020] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  137.050510][ T7020] hpfs: You really don't want any checks? You are crazy...
[  137.051249][ T7020] hpfs: hpfs_map_sector(): read error
[  137.051262][ T7020] hpfs: code page support is disabled
[  137.051384][ T7020] hpfs: hpfs_map_4sectors(): unaligned read
[  137.051457][ T7020] hpfs: hpfs_map_4sectors(): unaligned read
[  137.051469][ T7020] hpfs: filesystem error: unable to find root dir
[  137.188640][ T7018] loop1: detected capacity change from 0 to 32768
[  137.283653][   T10] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  137.359167][ T7018] JBD2: Ignoring recovery information on journal
[  137.444468][   T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  137.445986][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  137.446038][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  137.446077][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  137.446125][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.496579][ T7018] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  137.502564][   T10] usb 6-1: config 0 descriptor??
[  137.525989][ T7022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  137.787963][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  137.788081][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  137.812298][   T10] usb 6-1: USB disconnect, device number 3
[  137.881666][ T5609] ocfs2: Unmounting device (7,1) on (node local)
[  139.026502][ T7074] loop4: detected capacity change from 0 to 256
[  139.064750][   T31] audit: type=1800 audit(1790198967.687:45): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.500" name="file1" dev="loop4" ino=1048627 res=0 errno=0
[  139.474089][ T7083] loop5: detected capacity change from 0 to 164
[  140.479064][ T7110] loop2: detected capacity change from 0 to 512
[  140.539457][ T7110] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.516: iget: bad i_size value: 38620345925642
[  140.539499][ T7110] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  140.540582][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  140.540606][    C0] EXT4-fs (loop2): initial error at time 1790198969: ext4_orphan_get:1403: inode 15
[  140.540642][    C0] EXT4-fs (loop2): last error at time 1790198969: ext4_orphan_get:1403: inode 15
[  140.544562][ T7110] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.516: couldn't read orphan inode 15 (err -117)
[  140.544594][ T7110] loop2: lost filesystem error report for type 5 error -117
[  140.600741][ T7110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.839699][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.027404][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  141.183156][ T5839] usb 4-1: New USB device found, idVendor=10c4, idProduct=81b9, bcdDevice= 0.00
[  141.196846][ T5839] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  141.196894][ T5839] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.196928][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0
[  141.196969][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.243348][ T5839] usb 4-1: config 0 descriptor??
[  141.424256][ T7120] loop5: detected capacity change from 0 to 32768
[  141.474904][   T31] audit: type=1800 audit(1790198970.077:46): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.521" name="file1" dev="loop5" ino=7 res=0 errno=0
[  141.489900][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  141.592827][ T7144] loop0: detected capacity change from 0 to 128
[  141.740729][ T5839] hid-generic 0003:10C4:81B9.000A: hidraw0: USB HID v0.00 Device [HID 10c4:81b9] on usb-dummy_hcd.3-1/input0
[  141.747595][   T10] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  141.766048][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.766080][   T10] usb 3-1: Product: syz
[  141.766097][   T10] usb 3-1: Manufacturer: syz
[  141.766114][   T10] usb 3-1: SerialNumber: syz
[  141.806369][   T10] usb 3-1: config 0 descriptor??
[  141.815772][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  141.844626][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  141.855125][   T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  141.855185][   T10] usb 3-1: media controller created
[  141.904249][ T5839] usb 4-1: USB disconnect, device number 2
[  141.925828][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  142.008664][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'.
[  142.151747][ T7155] loop0: detected capacity change from 0 to 2048
[  142.224757][ T7155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.336675][   T10] DVB: Unable to find symbol mt352_attach()
[  142.374135][ T7155] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  142.431174][   T10] DVB: Unable to find symbol nxt6000_attach()
[  142.431195][   T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  142.460365][ T7166] loop1: detected capacity change from 0 to 1024
[  142.462443][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  142.624262][   T10] dvb-usb: schedule remote query interval to 1000 msecs.
[  142.624290][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  142.624609][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  142.624629][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  142.643414][   T10] usb 3-1: USB disconnect, device number 6
[  142.675317][ T7168] hfsplus: size 41, res 24, name_len 23
[  142.879714][ T5616] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  142.879786][ T5616] Bluetooth: hci4: Injecting HCI hardware error event
[  142.881266][ T4928] Bluetooth: hci4: hardware error 0x00
[  143.234895][ T7177] fido_id[7177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  143.349729][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.546'.
[  143.761262][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  144.015568][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  144.118289][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  144.131237][ T7198] loop0: detected capacity change from 0 to 4096
[  144.168278][ T5839] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  144.169484][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.169516][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.170579][ T5839] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  144.170603][ T5839] usb 4-1: Manufacturer: syz
[  144.208630][ T5839] usb 4-1: config 0 descriptor??
[  144.279066][   T10] usb 3-1: Using ep0 maxpacket: 16
[  144.280765][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  144.284539][   T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.284574][   T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.284604][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  144.284640][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.307162][   T10] usb 3-1: config 0 descriptor??
[  144.349736][ T5774] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  144.500584][ T5774] usb 6-1: New USB device found, idVendor=10c4, idProduct=81b9, bcdDevice= 0.00
[  144.501985][ T5774] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  144.502019][ T5774] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.502075][ T5774] usb 6-1: config 0 interface 0 has no altsetting 0
[  144.502113][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.562953][ T5774] usb 6-1: config 0 descriptor??
[  144.835742][   T10] hid_parser_main: 8 callbacks suppressed
[  144.835771][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.835800][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.835824][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.835876][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.835900][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.835923][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.835947][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.835971][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.836022][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.836047][   T10] konepure 0003:1E7D:2DBE.000C: unknown main item tag 0x0
[  144.836093][   T10] konepure 0003:1E7D:2DBE.000C: unbalanced collection at end of report description
[  144.842247][   T10] konepure 0003:1E7D:2DBE.000C: parse failed
[  144.842359][   T10] konepure 0003:1E7D:2DBE.000C: probe with driver konepure failed with error -22
[  144.939718][ T5839] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71
[  144.939787][ T5839] uclogic 0003:256C:006D.000B: failed probing parameters: -71
[  144.939910][ T5839] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71
[  144.979391][ T5839] usb 4-1: USB disconnect, device number 3
[  145.101399][ T7219] loop0: detected capacity change from 0 to 1024
[  145.142172][ T7219] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  145.142210][ T7219] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  145.142305][ T7219] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  145.157301][   T10] usb 3-1: USB disconnect, device number 7
[  145.158591][ T7219] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: inode #32: comm syz.0.565: iget: special inode unallocated
[  145.158621][ T7219] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  145.159603][ T7219] EXT4-fs (loop0): no journal found
[  145.159621][ T7219] EXT4-fs (loop0): can't get journal size
[  145.172648][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  145.172676][    C0] EXT4-fs (loop0): initial error at time 1790198973: ext4_get_journal_inode:5927: inode 32
[  145.172719][    C0] EXT4-fs (loop0): last error at time 1790198973: ext4_get_journal_inode:5927: inode 32
[  145.203780][ T7219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  145.229094][ T5774] hid-generic 0003:10C4:81B9.000D: hidraw0: USB HID v0.00 Device [HID 10c4:81b9] on usb-dummy_hcd.5-1/input0
[  145.338111][ T5774] usb 6-1: USB disconnect, device number 4
[  145.347816][ T7219] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1341: inode #12: block 16: comm syz.0.565: path /103/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[  145.598549][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.621658][ T4928] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  145.663461][ T7223] fido_id[7223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  145.715342][ T7221] loop1: detected capacity change from 0 to 32768
[  145.728972][ T7221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.563 (7221)
[  145.780756][ T7221] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.780798][ T7221] BTRFS info (device loop1): using crc32c checksum algorithm
[  145.808549][ T7210] loop4: detected capacity change from 0 to 32768
[  145.813883][ T7210] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.560 (7210)
[  145.856359][ T7210] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.856399][ T7210] BTRFS info (device loop4): using sha256 checksum algorithm
[  146.001920][ T7221] BTRFS info (device loop1): enabling ssd optimizations
[  146.001953][ T7221] BTRFS info (device loop1): turning on flush-on-commit
[  146.001973][ T7221] BTRFS info (device loop1): enabling free space tree
[  146.001992][ T7221] BTRFS info (device loop1): enabling auto defrag
[  146.002014][ T7221] BTRFS info (device loop1): use lzo compression, level 1
[  146.002037][ T7221] BTRFS info (device loop1): max_inline set to 4096
[  146.163455][ T7210] BTRFS info (device loop4): enabling ssd optimizations
[  146.163487][ T7210] BTRFS info (device loop4): turning on async discard
[  146.163506][ T7210] BTRFS info (device loop4): enabling free space tree
[  146.248008][ T5609] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.458394][ T7268] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  146.474040][ T7268] cramfs: block size(16384) > page size(4096) not supported by filesystem
[  146.474628][ T7268] cramfs: wrong magic
[  146.507679][ T5610] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.560953][   T31] audit: type=1326 audit(1790198975.124:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.561016][   T31] audit: type=1326 audit(1790198975.134:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.583913][   T31] audit: type=1326 audit(1790198975.144:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.583974][   T31] audit: type=1326 audit(1790198975.144:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.588021][   T31] audit: type=1326 audit(1790198975.144:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.588075][   T31] audit: type=1326 audit(1790198975.144:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.588124][   T31] audit: type=1326 audit(1790198975.144:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.588700][   T31] audit: type=1326 audit(1790198975.144:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.588943][   T31] audit: type=1326 audit(1790198975.144:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.590182][   T31] audit: type=1326 audit(1790198975.144:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.575" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f1f56f9e159 code=0x7ffc0000
[  146.833696][ T7273] program syz.0.578 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.106882][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[  147.126108][ T7274] lo speed is unknown, defaulting to 1000
[  147.568329][ T5905] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  147.716699][ T5905] usb 6-1: Using ep0 maxpacket: 32
[  147.717563][ T5905] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  147.718730][ T5905] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  147.718754][ T5905] usb 6-1: config 0 has no interface number 0
[  147.721140][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.721167][ T5905] usb 6-1: Product: syz
[  147.721185][ T5905] usb 6-1: Manufacturer: syz
[  147.721203][ T5905] usb 6-1: SerialNumber: syz
[  147.728463][ T5905] usb 6-1: config 0 descriptor??
[  147.735799][ T5905] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  147.735832][ T5905] usb 6-1: selecting invalid altsetting 1
[  147.735851][ T5905] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  147.772403][ T5905] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  147.772852][ T5905] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  147.772900][ T5905] usb 6-1: media controller created
[  147.894352][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  148.021585][ T7290] loop4: detected capacity change from 0 to 4096
[  148.059633][ T7290] NILFS (loop4): invalid segment: Checksum error in segment payload
[  148.059664][ T7290] NILFS (loop4): trying rollback from an earlier position
[  148.127849][ T7290] NILFS (loop4): recovery complete
[  148.140072][ T7300] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.153250][ T7269] loop3: detected capacity change from 0 to 32768
[  148.776225][ T7286] loop2: detected capacity change from 0 to 40427
[  148.845013][ T7286] F2FS-fs (loop2): build fault injection rate: 14
[  148.845043][ T7286] F2FS-fs (loop2): build fault injection type: 0xe4
[  148.863781][ T7286] F2FS-fs (loop2): invalid crc value
[  148.943024][ T7286] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  149.076556][ T7282] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  149.094735][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  149.095907][ T5905] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  149.095961][ T5905] zl10353_read_register: readreg error (reg=127, ret==-32)
[  149.096252][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  149.145559][ T7286] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.184191][ T7286] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  149.247355][ T7286] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[  149.251393][ T7286] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x110/0xab0
[  149.403901][ T5905] usb 6-1: USB disconnect, device number 5
[  149.458638][ T7318] loop4: detected capacity change from 0 to 2048
[  149.471952][ T7318] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  149.555008][ T7325] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.063959][ T7330] loop0: detected capacity change from 0 to 4096
[  150.083978][ T7334] team0: entered allmulticast mode
[  150.084002][ T7334] team_slave_0: entered allmulticast mode
[  150.084023][ T7334] team_slave_1: entered allmulticast mode
[  150.084677][ T7334] team0: Cannot enslave team device to itself
[  150.165059][ T7330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.500493][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.630176][ T1855] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  150.792187][ T1855] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  150.794811][ T1855] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[  150.794837][ T1855] usb 4-1: config 1 has no interface number 0
[  150.797018][ T1855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.797045][ T1855] usb 4-1: Product: syz
[  150.797062][ T1855] usb 4-1: Manufacturer: syz
[  150.797079][ T1855] usb 4-1: SerialNumber: syz
[  150.868931][ T1855] usb 4-1: 3:0 : does not exist
[  150.868960][ T1855] usb 4-1: 3:0 : does not exist
[  150.931913][ T7354] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  151.032830][ T5774] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  151.184299][ T5774] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  151.186174][ T5774] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.186224][ T5774] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  151.186250][ T5774] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  151.186276][ T5774] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.186328][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.353090][   T30] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  151.516632][   T30] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  151.518023][   T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.518057][   T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.518082][   T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.518126][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.579424][   T30] usb 3-1: config 0 descriptor??
[  151.598163][ T7352] loop4: detected capacity change from 0 to 40427
[  151.600471][ T1855] usb 4-1: USB disconnect, device number 4
[  151.623637][ T7352] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64)
[  151.623671][ T7352] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  151.642865][ T7352] F2FS-fs (loop4): invalid crc value
[  151.908542][ T5774] gud 6-1:1.0: Failed to add properties (error=-71)
[  151.908579][ T5774] gud 6-1:1.0: probe with driver gud failed with error -71
[  151.954195][ T5774] usb 6-1: USB disconnect, device number 6
[  151.982977][ T7352] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  151.998019][ T5905] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  152.012788][ T7352] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30
[  152.012817][ T7352] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  152.038502][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.050882][ T7352] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[  152.142399][   T30] wacom 0003:056A:002A.000E: ignoring exceeding usage max
[  152.156828][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  152.159784][ T5905] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  152.160889][ T5905] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  152.160913][ T5905] usb 1-1: config 0 has no interface number 0
[  152.163015][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.163039][ T5905] usb 1-1: Product: syz
[  152.163056][ T5905] usb 1-1: Manufacturer: syz
[  152.163073][ T5905] usb 1-1: SerialNumber: syz
[  152.227349][ T5905] usb 1-1: config 0 descriptor??
[  152.248002][   T30] usb 3-1: USB disconnect, device number 8
[  152.265256][ T5905] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  152.265288][ T5905] usb 1-1: selecting invalid altsetting 1
[  152.265307][ T5905] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  152.318349][ T5905] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  152.318735][ T5905] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  152.318783][ T5905] usb 1-1: media controller created
[  152.372294][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  152.911289][ T7382] loop5: detected capacity change from 0 to 128
[  152.948085][ T7382] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  152.988045][ T7382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.420065][ T7398] program syz.1.629 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  153.574637][ T5905] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  153.574728][ T5905] zl10353_read_register: readreg error (reg=127, ret==-110)
[  153.616885][ T7367] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  153.712311][ T5905] usb 1-1: USB disconnect, device number 5
[  153.790315][ T7410] loop2: detected capacity change from 0 to 256
[  153.812783][ T7410] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  153.847066][ T7399] lo speed is unknown, defaulting to 1000
[  154.403220][ T7420] loop2: detected capacity change from 0 to 4096
[  154.414932][ T7420] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  154.552162][ T7420] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  155.123658][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'.
[  155.213582][ T7445] netlink: 252 bytes leftover after parsing attributes in process `syz.5.651'.
[  155.213611][ T7445] netlink: 32 bytes leftover after parsing attributes in process `syz.5.651'.
[  155.700301][ T7455] netlink: 'syz.4.657': attribute type 1 has an invalid length.
[  155.700330][ T7455] netlink: 248 bytes leftover after parsing attributes in process `syz.4.657'.
[  155.825162][ T7458] loop2: detected capacity change from 0 to 4096
[  155.853308][ T7458] NILFS (loop2): invalid segment: Checksum error in segment payload
[  155.853341][ T7458] NILFS (loop2): trying rollback from an earlier position
[  155.908189][ T7465] usb usb8: usbfs: process 7465 (syz.5.660) did not claim interface 0 before use
[  155.920336][ T7458] NILFS (loop2): recovery complete
[  155.926285][ T7466] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.059298][ T5774] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  156.210007][ T5774] usb 2-1: Using ep0 maxpacket: 32
[  156.210785][ T5774] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  156.217482][ T5774] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  156.217515][ T5774] usb 2-1: config 0 has no interface number 0
[  156.226391][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.226421][ T5774] usb 2-1: Product: syz
[  156.226439][ T5774] usb 2-1: Manufacturer: syz
[  156.226457][ T5774] usb 2-1: SerialNumber: syz
[  156.283073][ T5774] usb 2-1: config 0 descriptor??
[  156.307567][ T5774] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  156.308033][ T5774] usb 2-1: selecting invalid altsetting 1
[  156.308054][ T5774] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  156.322912][ T5774] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  156.323234][ T5774] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  156.323281][ T5774] usb 2-1: media controller created
[  156.378279][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  156.408498][ T7485] netlink: 44 bytes leftover after parsing attributes in process `syz.0.669'.
[  156.408523][ T7485] tipc: Enabling of bearer <udg:s> rejected, media not registered
[  157.220375][ T7509] loop5: detected capacity change from 0 to 4096
[  157.241309][ T7509] NILFS (loop5): invalid segment: Checksum error in segment payload
[  157.241368][ T7509] NILFS (loop5): trying rollback from an earlier position
[  157.340818][ T7509] NILFS (loop5): recovery complete
[  157.350622][ T7515] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.505559][ T5774] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  157.505637][ T5774] zl10353_read_register: readreg error (reg=127, ret==-110)
[  157.665915][ T7463] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  157.707676][ T5774] usb 2-1: USB disconnect, device number 5
[  157.797156][ T7521] loop3: detected capacity change from 0 to 4096
[  157.818123][ T7521] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  157.818154][ T7521] NILFS (loop3): mounting unchecked fs
[  157.913119][ T7521] NILFS (loop3): recovery complete
[  157.961054][ T7528] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.321523][ T7530] loop5: detected capacity change from 0 to 4096
[  158.324626][ T7530] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  158.457592][ T7530] ntfs3(loop5): Inode r=19 is not in use!
[  158.457694][ T7530] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  158.516038][ T5774] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  158.668368][ T5774] usb 3-1: Using ep0 maxpacket: 16
[  158.669553][ T5774] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  158.674811][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.674843][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.674869][ T5774] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  158.674913][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.747959][ T5774] usb 3-1: config 0 descriptor??
[  159.029243][ T7547] tipc: Started in network mode
[  159.029314][ T7547] tipc: Node identity 00000000000000000000000b, cluster identity 4711
[  159.029372][ T7547] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  159.187607][ T5774] hid_parser_main: 4 callbacks suppressed
[  159.187636][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x2
[  159.187780][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.187805][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.187829][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.187854][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.187879][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.187902][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.187926][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.187959][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.187983][ T5774] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0
[  159.301175][ T5774] hid-multitouch 0003:045E:9994.000F: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.2-1/input0
[  159.375358][   T31] kauditd_printk_skb: 4 callbacks suppressed
[  159.375404][   T31] audit: type=1326 audit(1790198987.896:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.5.700" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be79e159 code=0x7ffc0000
[  159.375651][   T31] audit: type=1326 audit(1790198987.896:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.5.700" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be79e159 code=0x7ffc0000
[  159.376450][   T31] audit: type=1326 audit(1790198987.896:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.5.700" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fe2be79e159 code=0x7ffc0000
[  159.376808][   T31] audit: type=1326 audit(1790198987.896:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.5.700" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be79e159 code=0x7ffc0000
[  159.377043][   T31] audit: type=1326 audit(1790198987.896:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.5.700" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be79e159 code=0x7ffc0000
[  159.476501][ T5905] usb 3-1: USB disconnect, device number 9
[  159.786586][ T7557] fido_id[7557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  160.232218][ T7573] Bluetooth: hci0: invalid length 0, exp 2 for type 25
[  160.309690][ T7575] tipc: Started in network mode
[  160.309729][ T7575] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  160.309785][ T7575] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  160.446517][ T7561] loop4: detected capacity change from 0 to 32768
[  160.476330][ T7561] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.601409][ T7561] XFS (loop4): Ending clean mount
[  160.936269][ T5610] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.102740][ T5905] hid-generic 0006:79D90A04:10000.0010: hidraw0: VIRTUAL HID v7f.ff Device [syz0] on syz1
[  161.349852][ T7604] fido_id[7604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  161.573723][ T7569] loop5: detected capacity change from 0 to 40427
[  161.610321][ T7569] F2FS-fs (loop5): invalid crc value
[  161.676732][ T4928] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  161.676791][ T4928] Bluetooth: hci1: Injecting HCI hardware error event
[  161.678478][ T5616] Bluetooth: hci1: hardware error 0x00
[  161.813321][ T7569] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  161.823216][ T7569] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  161.823254][ T7569] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  161.823330][ T7569] F2FS-fs (loop5): Start checkpoint disabled!
[  161.871284][ T7569] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  161.871839][ T7569] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  162.084520][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  162.719422][ T7620] loop4: detected capacity change from 0 to 32768
[  162.743370][ T7620] (syz.4.725,7620,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  162.744893][ T7620] (syz.4.725,7620,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  162.777802][ T7620] (syz.4.725,7620,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  162.872987][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.731'.
[  162.900454][ T7634] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  162.924570][ T7620] JBD2: Ignoring recovery information on journal
[  162.938419][ T7616] loop0: detected capacity change from 0 to 32768
[  162.965564][ T7616] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.724 (7616)
[  163.021551][ T7616] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.021598][ T7616] BTRFS info (device loop0): using sha256 checksum algorithm
[  163.169742][ T7620] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  163.255617][ T7616] BTRFS info (device loop0): enabling ssd optimizations
[  163.255649][ T7616] BTRFS info (device loop0): turning on async discard
[  163.255668][ T7616] BTRFS info (device loop0): enabling free space tree
[  163.262900][ T7653] loop2: detected capacity change from 0 to 8
[  163.531200][ T5612] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.733674][ T5610] ocfs2: Unmounting device (7,4) on (node local)
[  163.867397][   T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  164.029449][   T30] usb 4-1: Using ep0 maxpacket: 32
[  164.048988][   T30] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  164.052982][   T30] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  164.053006][   T30] usb 4-1: config 0 has no interface number 0
[  164.060241][ T7670] macsec1: entered promiscuous mode
[  164.060263][ T7670] macsec1: entered allmulticast mode
[  164.094789][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.094822][   T30] usb 4-1: Product: syz
[  164.094843][   T30] usb 4-1: Manufacturer: syz
[  164.094868][   T30] usb 4-1: SerialNumber: syz
[  164.124730][   T30] usb 4-1: config 0 descriptor??
[  164.139371][   T30] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  164.139400][   T30] usb 4-1: selecting invalid altsetting 1
[  164.139420][   T30] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  164.203320][   T30] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  164.216180][   T30] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  164.216234][   T30] usb 4-1: media controller created
[  164.260885][   T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  164.323030][ T5616] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  164.379797][ T7678] loop1: detected capacity change from 0 to 128
[  164.718881][ T5616] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  164.718942][ T5616] Bluetooth: hci3: Injecting HCI hardware error event
[  164.722924][ T5616] Bluetooth: hci3: hardware error 0x00
[  165.241605][ T7666] loop2: detected capacity change from 0 to 32768
[  165.248134][ T7697] loop5: detected capacity change from 0 to 2048
[  165.249195][ T7666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.750 (7666)
[  165.294691][ T7697] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  165.294721][ T7697] UDF-fs: Scanning with blocksize 512 failed
[  165.321610][ T7666] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.321651][ T7666] BTRFS info (device loop2): using sha256 checksum algorithm
[  165.360756][   T30] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  165.360850][   T30] zl10353_read_register: readreg error (reg=127, ret==-110)
[  165.369742][ T7697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.401633][ T7663] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  165.489478][ T7666] BTRFS info (device loop2): enabling ssd optimizations
[  165.489509][ T7666] BTRFS info (device loop2): turning on async discard
[  165.489529][ T7666] BTRFS info (device loop2): enabling free space tree
[  165.626942][   T30] usb 4-1: USB disconnect, device number 5
[  165.705308][ T5613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.817411][ T7727] loop0: detected capacity change from 0 to 512
[  166.040152][ T7727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.046666][ T7727] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.211843][ T7746] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  166.367957][ T7743] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz.0.762: invalid size
[  166.661419][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.814916][ T5616] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  166.819981][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.775'.
[  166.911729][ T7762] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  167.162472][ T7770] netlink: 60 bytes leftover after parsing attributes in process `syz.4.778'.
[  167.375879][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.783'.
[  167.450567][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.784'.
[  167.683758][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'.
[  167.683785][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'.
[  167.683813][ T7790] netlink: 'syz.2.789': attribute type 14 has an invalid length.
[  167.683830][ T7790] netlink: 'syz.2.789': attribute type 13 has an invalid length.
[  167.970015][ T7806] loop3: detected capacity change from 0 to 16
[  167.994829][ T7806] erofs (device loop3): mounted with root inode @ nid 36.
[  167.999916][   T31] audit: type=1800 audit(1790198996.511:66): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.795" name="file1" dev="loop3" ino=86 res=0 errno=0
[  168.682517][   T31] audit: type=1326 audit(1790198997.190:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x7ffc0000
[  168.682690][   T31] audit: type=1326 audit(1790198997.190:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x7ffc0000
[  168.722068][   T31] audit: type=1326 audit(1790198997.220:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x7ffc0000
[  168.740155][   T31] audit: type=1326 audit(1790198997.250:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f9715e98e code=0x7ffc0000
[  168.740255][   T31] audit: type=1326 audit(1790198997.250:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x7ffc0000
[  168.740305][   T31] audit: type=1326 audit(1790198997.250:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x7ffc0000
[  168.758634][   T31] audit: type=1326 audit(1790198997.220:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x7ffc0000
[  168.758708][   T31] audit: type=1326 audit(1790198997.250:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x7ffc0000
[  168.758760][   T31] audit: type=1326 audit(1790198997.250:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.4.811" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x7ffc0000
[  168.792225][ T7840] netlink: 76 bytes leftover after parsing attributes in process `syz.0.814'.
[  168.933322][ T7845] loop2: detected capacity change from 0 to 512
[  168.992243][ T7845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.992355][ T7845] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.099023][ T7845] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz.2.816: invalid size
[  169.334820][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.357284][ T7858] ip_tables: iptables: counters copy to user failed while replacing table
[  169.608115][ T7867] netlink: 'syz.2.823': attribute type 83 has an invalid length.
[  169.656052][ T5743] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  169.833736][ T5743] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  169.838284][ T5743] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  169.838313][ T5743] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  169.844489][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.844516][ T5743] usb 6-1: Product: syz
[  169.844533][ T5743] usb 6-1: Manufacturer: syz
[  169.844550][ T5743] usb 6-1: SerialNumber: syz
[  169.851937][ T5743] usb 6-1: config 0 descriptor??
[  169.873925][ T5743] gspca_main: sunplus-2.14.0 probing 055f:c630
[  169.976125][ T7876] loop3: detected capacity change from 0 to 2048
[  170.025951][ T7876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.177812][ T7882] loop4: detected capacity change from 0 to 4096
[  170.238797][ T5905] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  170.283354][ T7889] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.397730][ T5905] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  170.398938][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.398990][ T5905] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  170.399016][ T5905] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  170.399043][ T5905] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  170.399089][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.510097][ T5743] gspca_sunplus: reg_r err -71
[  170.510185][ T5743] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  170.580919][ T5743] usb 6-1: USB disconnect, device number 7
[  170.909059][ T7903] usb usb8: usbfs: process 7903 (syz.1.842) did not claim interface 0 before use
[  171.050138][ T7905] loop4: detected capacity change from 0 to 1024
[  171.120111][ T5905] gud 1-1:1.0: Failed to add properties (error=-71)
[  171.120151][ T5905] gud 1-1:1.0: probe with driver gud failed with error -71
[  171.150924][ T5905] usb 1-1: USB disconnect, device number 6
[  171.329329][ T7911] loop5: detected capacity change from 0 to 256
[  171.387997][ T5743] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  171.549656][ T5743] usb 2-1: New USB device found, idVendor=04e6, idProduct=000c, bcdDevice= 1.00
[  171.552572][ T5743] usb 2-1: config 127 has an invalid interface number: 107 but max is 0
[  171.552600][ T5743] usb 2-1: config 127 has no interface number 0
[  171.552644][ T5743] usb 2-1: config 127 interface 107 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  171.552676][ T5743] usb 2-1: config 127 interface 107 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  171.558409][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.558437][ T5743] usb 2-1: Product: syz
[  171.558456][ T5743] usb 2-1: Manufacturer: syz
[  171.558473][ T5743] usb 2-1: SerialNumber: syz
[  171.574377][ T7907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  171.574530][ T7907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  171.861944][ T5743] usb-storage 2-1:127.107: USB Mass Storage device detected
[  171.899721][ T5743] usb-storage 2-1:127.107: Quirks match for vid 04e6 pid 000c: 4
[  171.937522][ T7902] loop2: detected capacity change from 0 to 40427
[  171.956030][ T7902] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64)
[  171.956155][ T7902] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  171.985642][ T7902] F2FS-fs (loop2): invalid crc value
[  172.017458][ T7925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'.
[  172.052689][ T5743] scsi host1: usb-storage 2-1:127.107
[  172.223420][   T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  172.265837][ T5743] usb 2-1: USB disconnect, device number 6
[  172.287942][ T7902] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.307459][ T7902] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30
[  172.307494][ T7902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  172.389054][   T30] usb 4-1: Using ep0 maxpacket: 16
[  172.389956][   T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  172.392538][   T30] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  172.392565][   T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.392587][   T30] usb 4-1: config 0 has no interface number 0
[  172.395732][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.395758][   T30] usb 4-1: Product: syz
[  172.395775][   T30] usb 4-1: Manufacturer: syz
[  172.395791][   T30] usb 4-1: SerialNumber: syz
[  172.478402][   T30] usb 4-1: config 0 descriptor??
[  172.491604][   T30] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  172.491643][   T30] uvcvideo 4-1:0.105: No valid video chain found.
[  172.496031][ T7902] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[  172.712628][ T1179] usb 4-1: USB disconnect, device number 6
[  172.860391][ T7944] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  172.932188][ T7945] Bluetooth: hci0: unsupported parameter 5135
[  172.932215][ T7945] Bluetooth: hci0: unsupported parameter 8192
[  172.932231][ T7945] Bluetooth: hci0: unsupported parameter 5135
[  172.932247][ T7945] Bluetooth: hci0: unsupported parameter 8192
[  173.133225][ T7952] loop1: detected capacity change from 0 to 512
[  173.134364][ T7952] EXT4-fs: Ignoring removed orlov option
[  173.188325][ T7952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.204007][ T7952] ext4 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.376672][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.220979][ T7981] loop4: detected capacity change from 0 to 4096
[  174.228291][ T7981] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  174.335187][ T7981] ntfs3(loop4): ino=19, mi_enum_attr
[  174.335226][ T7981] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  174.363799][ T7981] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  174.482414][ T7981] ntfs3(loop4): failed to convert "c46c" to macturkish
[  174.484558][ T7981] ntfs3(loop4): ino=20, mi_enum_attr
[  174.673263][ T7962] loop0: detected capacity change from 0 to 32768
[  174.682288][ T7962] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  174.692251][ T7962] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.867 (7962)
[  174.730023][ T7962] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  174.730060][ T7962] BTRFS info (device loop0): using crc32c checksum algorithm
[  174.765317][ T7965] loop3: detected capacity change from 0 to 40427
[  174.771153][ T7965] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64)
[  174.786037][ T7965] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  174.808488][ T7965] F2FS-fs (loop3): invalid crc value
[  174.861446][ T5743] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  174.876744][ T7962] BTRFS info (device loop0): rebuilding free space tree
[  175.024939][ T5743] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  175.029646][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.029675][ T5743] usb 6-1: Product: syz
[  175.029693][ T5743] usb 6-1: Manufacturer: syz
[  175.029709][ T5743] usb 6-1: SerialNumber: syz
[  175.077240][ T7965] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.082415][ T5743] usb 6-1: config 0 descriptor??
[  175.111451][ T5743] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  175.114662][ T5743] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  175.115726][ T5743] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  175.115772][ T5743] usb 6-1: media controller created
[  175.151825][ T7965] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30
[  175.151856][ T7965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  175.178403][ T5743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  175.321104][ T5743] DVB: Unable to find symbol mt352_attach()
[  175.354425][ T7965] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[  175.391406][ T7962] BTRFS info (device loop0): disabling free space tree
[  175.391493][ T7962] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  175.391519][ T7962] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  175.425180][ T8024] loop4: detected capacity change from 0 to 64
[  175.630791][ T8030] loop4: detected capacity change from 0 to 2048
[  175.644300][ T7962] BTRFS info (device loop0): enabling ssd optimizations
[  175.644338][ T7962] BTRFS info (device loop0): turning on async discard
[  175.644358][ T7962] BTRFS info (device loop0): force clearing of disk cache
[  175.644395][ T7962] BTRFS info (device loop0): use zstd compression, level 3
[  175.660639][ T5743] DVB: Unable to find symbol nxt6000_attach()
[  175.660658][ T5743] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  175.704004][ T5743] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7
[  175.725850][ T8030] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  175.725876][ T8030] UDF-fs: Scanning with blocksize 512 failed
[  175.781183][ T5743] dvb-usb: schedule remote query interval to 1000 msecs.
[  175.781208][ T5743] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  175.781224][ T5743] dvb-usb: bulk message failed: -22 (7/0)
[  175.781239][ T5743] dvb-usb: bulk message failed: -22 (7/0)
[  175.812583][ T5743] usb 6-1: USB disconnect, device number 8
[  175.857561][ T8030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.955227][ T5612] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  176.051696][ T8032] loop1: detected capacity change from 0 to 16
[  176.080801][ T5743] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  176.203316][ T8032] erofs (device loop1): mounted with root inode @ nid 36.
[  177.053804][ T8056] netlink: 'syz.1.900': attribute type 1 has an invalid length.
[  177.117161][ T8057] loop4: detected capacity change from 0 to 512
[  177.118197][ T8057] EXT4-fs: Ignoring removed nobh option
[  177.141856][ T8057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  177.188655][ T8057] EXT4-fs (loop4): 1 truncate cleaned up
[  177.200146][ T8057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.364352][ T8057] EXT4-fs (loop4): can't enable nombcache during remount
[  177.456139][ T1855] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  177.472740][ T8067] loop1: detected capacity change from 0 to 4096
[  177.515086][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.626198][ T1855] usb 6-1: Using ep0 maxpacket: 16
[  177.626963][ T1855] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  177.628533][ T1855] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.628567][ T1855] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  177.628599][ T1855] usb 6-1: config 0 interface 0 has no altsetting 0
[  177.628636][ T1855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.676771][ T1855] usb 6-1: config 0 descriptor??
[  178.148295][ T1855] hid_parser_main: 2 callbacks suppressed
[  178.148322][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148349][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148373][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148397][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148421][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148445][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148468][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148493][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148516][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148540][ T1855] konepure 0003:1E7D:2DBE.0011: unknown main item tag 0x0
[  178.148588][ T1855] konepure 0003:1E7D:2DBE.0011: unbalanced collection at end of report description
[  178.192135][ T1855] konepure 0003:1E7D:2DBE.0011: parse failed
[  178.192218][ T1855] konepure 0003:1E7D:2DBE.0011: probe with driver konepure failed with error -22
[  178.359636][ T5774] usb 6-1: USB disconnect, device number 9
[  178.531480][ T1855] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  178.647202][ T5905] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  178.675189][ T1855] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  178.676393][ T1855] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  178.676422][ T1855] usb 3-1: config 0 has no interface number 0
[  178.676468][ T1855] usb 3-1: config 0 interface 41 has no altsetting 0
[  178.678984][ T1855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.679013][ T1855] usb 3-1: Product: syz
[  178.679031][ T1855] usb 3-1: Manufacturer: syz
[  178.679048][ T1855] usb 3-1: SerialNumber: syz
[  178.757340][ T1855] usb 3-1: config 0 descriptor??
[  178.799994][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short
[  178.800055][ T5905] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  178.801441][ T5905] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  178.801488][ T5905] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  178.804002][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.804030][ T5905] usb 5-1: Product: syz
[  178.804049][ T5905] usb 5-1: Manufacturer: syz
[  178.804066][ T5905] usb 5-1: SerialNumber: syz
[  179.075201][ T8101] loop3: detected capacity change from 0 to 32768
[  179.077229][ T8101] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.920 (8101)
[  179.115778][ T5905] usb 5-1: unit 4 not found!
[  179.184403][ T8101] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.184443][ T8101] BTRFS info (device loop3): using sha256 checksum algorithm
[  179.401209][ T1855] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  179.420217][ T1855] usb 3-1: USB disconnect, device number 10
[  179.424201][ T8101] BTRFS info (device loop3): enabling ssd optimizations
[  179.424228][ T8101] BTRFS info (device loop3): turning on async discard
[  179.424248][ T8101] BTRFS info (device loop3): enabling free space tree
[  179.588394][ T5905] usb 5-1: USB disconnect, device number 5
[  179.593131][ T8103] loop0: detected capacity change from 0 to 40427
[  179.628119][ T8103] F2FS-fs (loop0): build fault injection rate: 14
[  179.628149][ T8103] F2FS-fs (loop0): build fault injection type: 0xe4
[  179.653480][ T8103] F2FS-fs (loop0): invalid crc value
[  179.753930][ T8103] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  179.757827][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.060111][ T8140] loop4: detected capacity change from 0 to 128
[  180.117453][ T5614] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.240814][ T8140] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  180.344396][ T8103] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.387706][ T8144] loop1: detected capacity change from 0 to 64
[  180.418106][ T8103] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  180.481588][ T8103] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[  180.523403][ T8103] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x110/0xab0
[  180.574967][   T31] kauditd_printk_skb: 6 callbacks suppressed
[  180.574991][   T31] audit: type=1800 audit(1790199009.069:82): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.932" name="file1" dev="loop1" ino=21 res=0 errno=0
[  180.666216][ T8137] loop5: detected capacity change from 0 to 40427
[  180.704226][ T8137] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  180.704255][ T8137] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  180.733261][ T8137] F2FS-fs (loop5): invalid crc value
[  180.889476][ T8137] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.926274][ T1855] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  180.949628][ T8137] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  180.949664][ T8137] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  181.100389][ T1855] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  181.101381][ T1855] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  181.101407][ T1855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  181.101427][ T1855] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  181.101461][ T1855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.137962][ T5611] syz-executor: attempt to access beyond end of device
[  181.137962][ T5611] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  181.144073][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  181.144112][ T5611] Tainted: [L]=SOFTLOCKUP
[  181.144122][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  181.144138][ T5611] Call Trace:
[  181.144148][ T5611]  <TASK>
[  181.144158][ T5611]  dump_stack_lvl+0xe8/0x150
[  181.144202][ T5611]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  181.144244][ T5611]  f2fs_write_end_bio+0x1211/0x16e0
[  181.144275][ T5611]  ? blkg_put+0x22/0x240
[  181.144327][ T5611]  __submit_merged_bio+0x258/0x6a0
[  181.144368][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.144398][ T5611]  ? rcu_is_watching+0x16/0xb0
[  181.144436][ T5611]  __submit_merged_write_cond+0x3c9/0x4e0
[  181.144485][ T5611]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  181.144537][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.144575][ T5611]  f2fs_write_data_pages+0x2a27/0x36f0
[  181.144611][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.144639][ T5611]  ? __lock_acquire+0x747/0x2de0
[  181.144704][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  181.144742][ T5611]  ? is_bpf_text_address+0x26/0x2b0
[  181.144789][ T5611]  ? arch_stack_walk+0xfb/0x150
[  181.144853][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.144883][ T5611]  ? add_lock_to_list+0xc7/0x100
[  181.144917][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.144946][ T5611]  ? __lock_acquire+0x1511/0x2de0
[  181.145002][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145031][ T5611]  ? do_raw_spin_lock+0x12b/0x2f0
[  181.145073][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145107][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145135][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  181.145172][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  181.145213][ T5611]  do_writepages+0x338/0x560
[  181.145242][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145274][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145308][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145342][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  181.145384][ T5611]  filemap_fdatawrite+0x1e9/0x2f0
[  181.145416][ T5611]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  181.145486][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145518][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145553][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  181.145594][ T5611]  f2fs_sync_dirty_inodes+0x30e/0x830
[  181.145638][ T5611]  f2fs_write_checkpoint+0xa3d/0x2710
[  181.145663][ T5611]  ? __lock_acquire+0x747/0x2de0
[  181.145730][ T5611]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  181.145755][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145845][ T5611]  kill_f2fs_super+0x2dd/0x700
[  181.145881][ T5611]  ? __pfx_kill_f2fs_super+0x10/0x10
[  181.145935][ T5611]  ? call_rcu+0x64d/0x8b0
[  181.145964][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.145993][ T5611]  ? lockdep_hardirqs_on+0x7b/0x110
[  181.146023][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.146068][ T5611]  deactivate_locked_super+0xbc/0x110
[  181.146107][ T5611]  cleanup_mnt+0x3d3/0x460
[  181.146138][ T5611]  task_work_run+0x1d9/0x270
[  181.146171][ T5611]  ? __pfx_task_work_run+0x10/0x10
[  181.146211][ T5611]  exit_to_user_mode_loop+0x204/0x770
[  181.146237][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.146266][ T5611]  ? rcu_is_watching+0x16/0xb0
[  181.146303][ T5611]  do_syscall_64+0x328/0x520
[  181.146332][ T5611]  ? trace_irq_disable+0x3b/0x140
[  181.146364][ T5611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.146397][ T5611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.146462][ T5611] RIP: 0033:0x7fe2be79f397
[  181.146487][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  181.146508][ T5611] RSP: 002b:00007ffe7e45d3c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  181.146534][ T5611] RAX: 0000000000000000 RBX: 00007fe2be8344bb RCX: 00007fe2be79f397
[  181.146551][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7e45d480
[  181.146567][ T5611] RBP: 00007ffe7e45d480 R08: 00007ffe7e45e480 R09: 00000000ffffffff
[  181.146585][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7e45e510
[  181.146602][ T5611] R13: 00007fe2be8344bb R14: 000000000002c12a R15: 00007ffe7e45e550
[  181.146641][ T5611]  </TASK>
[  181.163603][ T5611] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  181.660200][ T8147] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  181.986877][ T5616] Bluetooth: hci6: Reading Intel version command failed (-71)
[  181.988997][ T5743] usb 4-1: USB disconnect, device number 7
[  182.036598][ T8174] usb usb8: usbfs: process 8174 (syz.2.945) did not claim interface 0 before use
[  182.400062][ T8182] netlink: 252 bytes leftover after parsing attributes in process `syz.2.949'.
[  182.400092][ T8182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.949'.
[  182.787600][ T8193] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  183.066452][ T8201] loop4: detected capacity change from 0 to 256
[  183.109227][ T8201] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d)
[  183.270786][ T8203] loop0: detected capacity change from 0 to 4096
[  183.313004][ T8208] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.619561][ T8195] loop3: detected capacity change from 0 to 32768
[  183.765684][ T8195] lbmIODone: I/O error in JFS log
[  183.765706][ T8195] *** Log Format Error ! ***
[  183.772632][ T8195] lmLogInit: exit(-22)
[  183.772682][ T8195] lmLogOpen: exit(-22)
[  183.821033][ T8221] loop2: detected capacity change from 0 to 2048
[  183.826783][ T8221] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  183.850714][ T8218] loop4: detected capacity change from 0 to 8192
[  183.878801][ T8223] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.960450][ T8195] read_mapping_page failed!
[  183.960469][ T8195] diRead: read_metapage failed
[  183.960564][ T8195] jfs_lookup: iget failed on inum 4
[  184.655804][ T4928] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1
[  184.743392][ T8245] netlink: 'syz.0.975': attribute type 2 has an invalid length.
[  184.856266][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'.
[  185.027124][ T8252] netlink: 40 bytes leftover after parsing attributes in process `syz.5.978'.
[  185.141489][ T8257] loop0: detected capacity change from 0 to 2048
[  185.163958][ T8213] loop1: detected capacity change from 0 to 32768
[  185.237621][ T8213] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.268167][ T8257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.353750][ T1179] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  185.369746][ T8257] EXT4-fs error (device loop0): ext4_find_extent:904: inode #2: comm syz.0.980: inode has invalid extent depth: 8
[  185.431121][ T8213] XFS (loop1): Ending clean mount
[  185.437823][ T8257] EXT4-fs (loop0): Remounting filesystem read-only
[  185.494056][ T5609] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.496978][ T8249] loop3: detected capacity change from 0 to 32768
[  185.539110][ T1179] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  185.567159][ T1179] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  185.567193][ T1179] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.567217][ T1179] usb 3-1: config 0 has no interface number 0
[  185.567264][ T1179] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  185.567294][ T1179] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  185.567327][ T1179] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.593114][ T8249] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  185.605279][ T8249] JBD2: Ignoring recovery information on journal
[  185.647130][ T1179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.647160][ T1179] usb 3-1: Product: syz
[  185.647174][ T1179] usb 3-1: Manufacturer: syz
[  185.647188][ T1179] usb 3-1: SerialNumber: syz
[  185.673766][ T1179] usb 3-1: config 0 descriptor??
[  185.717491][ T8272] loop5: detected capacity change from 0 to 4096
[  185.746139][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.901880][ T8277] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.941448][ T8249] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  186.301603][ T5614] ocfs2: Unmounting device (7,3) on (node local)
[  186.363598][ T1179] usb 3-1: USB disconnect, device number 11
[  186.425293][ T8286] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  186.560773][ T8294] loop1: detected capacity change from 0 to 512
[  186.577037][ T8294] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.639754][ T8294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.665276][ T8294] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  186.727002][ T8294] EXT4-fs error (device loop1): ext4_resize_begin:60: comm syz.1.993: resize_inode disabled but reserved GDT blocks non-zero
[  186.871196][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.919092][ T1179] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  186.981507][ T8308] loop3: detected capacity change from 0 to 17
[  187.069557][ T1179] usb 6-1: Using ep0 maxpacket: 8
[  187.070411][ T1179] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  187.071459][ T1179] usb 6-1: config 0 interface 0 has no altsetting 0
[  187.071498][ T1179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.077074][ T8308] affs: No valid root block on device loop3
[  187.118283][ T1179] usb 6-1: config 0 descriptor??
[  187.505576][ T8321] loop3: detected capacity change from 0 to 2048
[  187.584160][ T8328] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.606465][ T1179] hid_parser_main: 4 callbacks suppressed
[  187.606499][ T1179] logitech 0003:046D:CA04.0012: unknown main item tag 0x2
[  187.606530][ T1179] logitech 0003:046D:CA04.0012: unknown main item tag 0x3
[  187.606555][ T1179] logitech 0003:046D:CA04.0012: unknown main item tag 0x1
[  187.606581][ T1179] logitech 0003:046D:CA04.0012: unknown main item tag 0x2
[  187.646987][ T1179] logitech 0003:046D:CA04.0012: hidraw0: USB HID vff.fd Device [HID 046d:ca04] on usb-dummy_hcd.5-1/input0
[  187.647031][ T1179] logitech 0003:046D:CA04.0012: no inputs found
[  187.694475][ T8321] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5
[  187.741774][ T8321] Remounting filesystem read-only
[  187.741793][ T8321] NILFS error (device loop3): nilfs_readdir: bad page in #2
[  187.785495][ T5905] usb 6-1: USB disconnect, device number 10
[  188.103414][ T8338] fido_id[8338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  188.141599][ T5905] hid-generic 0006:79D90A04:10000.0013: unknown main item tag 0x0
[  188.167583][ T5905] hid-generic 0006:79D90A04:10000.0013: hidraw0: VIRTUAL HID v7f.ff Device [syz0] on syz1
[  188.179876][ T1179] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  188.286922][ T8343] fido_id[8343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  188.329666][ T5743] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  188.329934][ T1179] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00
[  188.331193][ T1179] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.331228][ T1179] usb 2-1: config 0 interface 0 has no altsetting 0
[  188.331264][ T1179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.401914][ T1179] usb 2-1: config 0 descriptor??
[  188.470307][ T8348] macvlan0: entered promiscuous mode
[  188.482680][ T5743] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  188.485869][ T5743] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  188.485896][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  188.494740][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.494770][ T5743] usb 1-1: Product: syz
[  188.494788][ T5743] usb 1-1: Manufacturer: syz
[  188.494805][ T5743] usb 1-1: SerialNumber: syz
[  188.541038][ T8350] loop5: detected capacity change from 0 to 128
[  188.717396][ T8350] syz.5.1018: attempt to access beyond end of device
[  188.717396][ T8350] loop5: rw=8390659, sector=128, nr_sectors = 26 limit=128
[  188.784067][ T5743] usb 1-1: Limiting number of CPorts to U8_MAX
[  188.832814][ T1179] chicony 0003:04F2:0418.0014: hidraw0: USB HID vf.ff Joystick [HID 04f2:0418] on usb-dummy_hcd.1-1/input0
[  189.004621][    C0] usb 1-1: invalid arpc response id received: 0
[  189.025947][ T5905] usb 2-1: USB disconnect, device number 7
[  189.210610][ T5743] usb 1-1: failed to set cport flags for port 0
[  189.210842][ T5743] greybus greybus1: 0/0:0: failed to enable host cport: -71
[  189.299026][ T5743] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71
[  189.317626][ T8365] fido_id[8365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  189.327146][ T5743] usb 1-1: USB disconnect, device number 7
[  189.439651][ T1179] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  189.485242][ T8382] loop3: detected capacity change from 0 to 128
[  189.551623][ T5615] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  189.590553][ T1179] usb 3-1: Using ep0 maxpacket: 32
[  189.591449][ T1179] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.00
[  189.592527][ T1179] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  189.592575][ T1179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.597363][ T1179] usb 3-1: config 0 descriptor??
[  189.723478][ T5615] usb 5-1: Using ep0 maxpacket: 32
[  189.725423][ T5615] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  189.746221][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.746252][ T5615] usb 5-1: Product: syz
[  189.746271][ T5615] usb 5-1: Manufacturer: syz
[  189.746291][ T5615] usb 5-1: SerialNumber: syz
[  189.785329][ T5615] usb 5-1: config 0 descriptor??
[  189.808682][ T5615] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  189.808816][ T5615] dvb-usb: bulk message failed: -22 (4/0)
[  189.808836][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  189.808988][ T5615] dvb-usb: bulk message failed: -22 (5/0)
[  189.809030][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  189.907304][ T5615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  189.909415][ T5615] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  189.909470][ T5615] usb 5-1: media controller created
[  189.993904][ T5615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  190.037205][ T8377] ttusb2: i2c wr len=58 too high
[  190.070228][ T5615] usb 5-1: selecting invalid altsetting 3
[  190.070279][ T5615] ttusb2: set interface to alts=3 failed
[  190.154278][ T1179] hid-corsair-void 0003:1B1C:0A1A.0015: unbalanced delimiter at end of report description
[  190.155943][ T1179] hid-corsair-void 0003:1B1C:0A1A.0015: parse failed (reason: -22)
[  190.156056][ T1179] hid-corsair-void 0003:1B1C:0A1A.0015: probe with driver hid-corsair-void failed with error -22
[  190.229703][ T5615] DVB: Unable to find symbol tda10086_attach()
[  190.229725][ T5615] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  190.245144][ T5615] dvb-usb: bulk message failed: -22 (4/0)
[  190.245174][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  190.245389][ T5615] dvb-usb: bulk message failed: -22 (5/0)
[  190.245406][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  190.245478][ T5615] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  190.306185][ T5615] usb 5-1: USB disconnect, device number 6
[  190.371147][   T30] usb 3-1: USB disconnect, device number 12
[  190.402089][ T5615] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  191.350793][ T8441] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1058'.
[  191.585306][ T8451] loop2: detected capacity change from 0 to 512
[  191.605535][ T8451] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  191.648205][ T8450] macsec1: entered promiscuous mode
[  191.648235][ T8450] macsec1: entered allmulticast mode
[  191.691807][ T8451] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.1061: Allocating blocks 41-42 which overlap fs metadata
[  191.691857][ T8451] loop2: lost filesystem error report for type 5 error -117
[  191.700517][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  191.700545][    C1] EXT4-fs (loop2): initial error at time 1790199020: ext4_mb_mark_diskspace_used:4223
[  191.700573][    C1] EXT4-fs (loop2): last error at time 1790199020: ext4_mb_mark_diskspace_used:4223
[  191.742651][ T8451] EXT4-fs (loop2): Remounting filesystem read-only
[  191.743462][ T8451] Quota error (device loop2): write_blk: dquota write failed
[  191.743481][ T8451] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  191.745745][ T8451] Quota error (device loop2): write_blk: dquota write failed
[  191.745860][ T8451] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  191.746102][ T8451] EXT4-fs (loop2): 1 truncate cleaned up
[  191.749698][ T8451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.851558][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.046509][ T8462] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  192.112990][ T8465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'.
[  192.421527][ T8477] loop2: detected capacity change from 0 to 128
[  192.436970][ T8477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  192.437084][ T8477] System zones: 1-3, 19-19, 35-36
[  192.480606][ T8477] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  192.509300][ T8477] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  192.773160][ T5613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.887918][ T8497] loop0: detected capacity change from 0 to 256
[  192.970727][   T30] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  193.127317][   T30] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  193.140994][   T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  193.141033][   T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  193.141058][   T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  193.141100][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.183815][ T8491] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  193.184257][ T8505] loop2: detected capacity change from 0 to 64
[  193.227002][ T8507] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  193.499133][ T5774] usb 6-1: USB disconnect, device number 11
[  193.504403][ T4928] Bluetooth: hci6: Reading Intel version command failed (-71)
[  193.981538][   T31] audit: type=1326 audit(1790199022.483:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f9719e159 code=0x0
[  194.107097][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  194.107164][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  194.311167][ T8540] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1105'.
[  194.493263][ T8524] loop3: detected capacity change from 0 to 40427
[  194.517369][ T8524] F2FS-fs (loop3): invalid crc value
[  194.653884][ T8524] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.690073][ T8524] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  194.690107][ T8524] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  194.690136][ T8524] F2FS-fs (loop3): Start checkpoint disabled!
[  194.730252][ T8524] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  194.738634][ T8524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  194.828328][ T8556] loop1: detected capacity change from 0 to 256
[  195.004512][ T1103] kworker/u8:9: attempt to access beyond end of device
[  195.004512][ T1103] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  195.013249][ T1103] CPU: 1 UID: 0 PID: 1103 Comm: kworker/u8:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  195.013287][ T1103] Tainted: [L]=SOFTLOCKUP
[  195.013297][ T1103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  195.013313][ T1103] Workqueue: writeback wb_workfn (flush-7:3)
[  195.013363][ T1103] Call Trace:
[  195.013373][ T1103]  <TASK>
[  195.013384][ T1103]  dump_stack_lvl+0xe8/0x150
[  195.013424][ T1103]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  195.013470][ T1103]  f2fs_write_end_bio+0x1211/0x16e0
[  195.013500][ T1103]  ? blkg_put+0x22/0x240
[  195.013554][ T1103]  __submit_merged_bio+0x258/0x6a0
[  195.013588][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.013618][ T1103]  ? rcu_is_watching+0x16/0xb0
[  195.013656][ T1103]  __submit_merged_write_cond+0x3c9/0x4e0
[  195.013703][ T1103]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  195.013755][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.013795][ T1103]  f2fs_write_data_pages+0x2a27/0x36f0
[  195.013834][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.013906][ T1103]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  195.013960][ T1103]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  195.014029][ T1103]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  195.014088][ T1103]  ? __lock_acquire+0x747/0x2de0
[  195.014124][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.014170][ T1103]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  195.014212][ T1103]  do_writepages+0x338/0x560
[  195.014247][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.014277][ T1103]  ? reacquire_held_locks+0x117/0x1a0
[  195.014307][ T1103]  ? writeback_sb_inodes+0x450/0x1b00
[  195.014354][ T1103]  __writeback_single_inode+0x136/0x1220
[  195.014392][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.014421][ T1103]  ? do_raw_spin_unlock+0xf5/0x200
[  195.014463][ T1103]  writeback_sb_inodes+0x9de/0x1b00
[  195.014495][ T1103]  ? __lock_acquire+0x747/0x2de0
[  195.014540][ T1103]  ? lock_acquire+0x115/0x350
[  195.014574][ T1103]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  195.014659][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.014687][ T1103]  ? rcu_is_watching+0x16/0xb0
[  195.014718][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.014747][ T1103]  ? queue_io+0x2d3/0x470
[  195.014785][ T1103]  wb_writeback+0x41c/0xad0
[  195.014821][ T1103]  ? queue_io+0x281/0x470
[  195.014861][ T1103]  ? __pfx_wb_writeback+0x10/0x10
[  195.014892][ T1103]  ? do_raw_spin_lock+0x12b/0x2f0
[  195.014948][ T1103]  wb_workfn+0x431/0x10f0
[  195.014981][ T1103]  ? update_se+0x90/0xff0
[  195.015032][ T1103]  ? __pfx_wb_workfn+0x10/0x10
[  195.015068][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015096][ T1103]  ? update_protect_slice+0x128/0x210
[  195.015143][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015182][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015211][ T1103]  ? lock_acquire+0x115/0x350
[  195.015239][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015277][ T1103]  ? rcu_is_watching+0x16/0xb0
[  195.015306][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015343][ T1103]  ? process_scheduled_works+0x97a/0x1630
[  195.015379][ T1103]  process_scheduled_works+0xc3d/0x1630
[  195.015436][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015504][ T1103]  ? __pfx_process_scheduled_works+0x10/0x10
[  195.015546][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015575][ T1103]  ? assign_work+0x3cf/0x5d0
[  195.015615][ T1103]  worker_thread+0xa47/0xfb0
[  195.015653][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015695][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015724][ T1103]  ? __kthread_parkme+0x71/0x1f0
[  195.015773][ T1103]  kthread+0x38b/0x480
[  195.015796][ T1103]  ? __pfx_worker_thread+0x10/0x10
[  195.015832][ T1103]  ? __pfx_kthread+0x10/0x10
[  195.015860][ T1103]  ret_from_fork+0x514/0xb70
[  195.015890][ T1103]  ? __pfx_ret_from_fork+0x10/0x10
[  195.015914][ T1103]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.015942][ T1103]  ? __switch_to+0xc89/0x1420
[  195.015982][ T1103]  ? __pfx_kthread+0x10/0x10
[  195.016010][ T1103]  ret_from_fork_asm+0x1a/0x30
[  195.016070][ T1103]  </TASK>
[  195.039506][ T1103] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  195.523197][ T8563] loop1: detected capacity change from 0 to 2048
[  195.559440][ T8563] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  195.566922][ T8563] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  195.566943][ T8563] UDF-fs: Scanning with blocksize 512 failed
[  195.577543][ T8569] loop2: detected capacity change from 0 to 2048
[  195.614540][ T8563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.646339][ T8569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.228978][ T8587] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  196.798307][ T8607] loop3: detected capacity change from 0 to 2048
[  196.880191][ T8609] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.079477][ T8617] usb usb8: usbfs: process 8617 (syz.5.1135) did not claim interface 0 before use
[  197.370590][ T8629] loop2: detected capacity change from 0 to 17
[  197.394511][ T8626] loop5: detected capacity change from 0 to 2048
[  197.400751][ T8629] affs: No valid root block on device loop2
[  197.426223][ T8626] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  197.433075][ T8626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.513525][ T8634] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0
[  198.037768][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'.
[  198.331985][ T5743] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  198.412500][ T8632] loop3: detected capacity change from 0 to 32768
[  198.417532][ T8632] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1143 (8632)
[  198.454760][ T8632] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  198.454800][ T8632] BTRFS info (device loop3): using sha256 checksum algorithm
[  198.521803][ T5743] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  198.534981][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  198.535009][ T5743] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  198.535027][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  198.535059][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.576286][ T8664] loop2: detected capacity change from 0 to 4096
[  198.607032][ T8632] BTRFS info (device loop3): turning off barriers
[  198.607066][ T8632] BTRFS info (device loop3): enabling free space tree
[  198.613239][ T8654] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  198.675123][ T8683] loop1: detected capacity change from 0 to 2048
[  198.680634][ T8685] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.701763][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1162'.
[  198.747377][ T8683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.785419][ T5614] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  198.929102][ T5615] usb 1-1: USB disconnect, device number 8
[  198.937617][ T5616] Bluetooth: hci6: Reading Intel version command failed (-71)
[  198.951754][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.004076][ T8692] loop5: detected capacity change from 0 to 128
[  199.036568][ T8692] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  199.036629][ T8692] hpfs: filesystem error: improperly stopped
[  199.036647][ T8692] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  199.036666][ T8692] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  199.036679][ T8692] hpfs: You really don't want any checks? You are crazy...
[  199.037015][ T8692] hpfs: hpfs_map_sector(): read error
[  199.037027][ T8692] hpfs: code page support is disabled
[  199.039084][ T8692] hpfs: hpfs_map_4sectors(): unaligned read
[  199.039158][ T8692] hpfs: hpfs_map_4sectors(): unaligned read
[  199.039169][ T8692] hpfs: filesystem error: unable to find root dir
[  199.169524][ T8694] loop2: detected capacity change from 0 to 2048
[  199.251501][ T8694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.251627][ T8694] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.514484][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.808199][ T8714] IPVS: ip_vs_edit_dest(): server weight less than zero
[  199.840430][   T50] IPVS: starting estimator thread 0...
[  199.862262][ T5615] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  199.936416][ T8719] IPVS: using max 25 ests per chain, 60000 per kthread
[  200.017720][ T5615] usb 2-1: unable to get BOS descriptor or descriptor too short
[  200.017777][ T5615] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  200.018869][ T5615] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  200.018915][ T5615] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  200.020966][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.020993][ T5615] usb 2-1: Product: syz
[  200.021009][ T5615] usb 2-1: Manufacturer: syz
[  200.021027][ T5615] usb 2-1: SerialNumber: syz
[  200.042407][   T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  200.110634][ T8724] loop2: detected capacity change from 0 to 256
[  200.192560][   T30] usb 1-1: Using ep0 maxpacket: 32
[  200.193909][   T30] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  200.195238][   T30] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  200.195264][   T30] usb 1-1: config 0 has no interface number 0
[  200.195306][   T30] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  200.195366][   T30] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  200.195410][   T30] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  200.195441][   T30] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  200.200466][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.200493][   T30] usb 1-1: Product: syz
[  200.200511][   T30] usb 1-1: Manufacturer: syz
[  200.200556][   T30] usb 1-1: SerialNumber: syz
[  200.230724][   T30] usb 1-1: config 0 descriptor??
[  200.370606][   T30] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input10
[  200.417526][ T5615] usb 2-1: unit 4 not found!
[  200.511339][ T8729] loop5: detected capacity change from 0 to 64
[  200.559596][   T30] usb 1-1: USB disconnect, device number 9
[  200.559757][    C0] bcm5974 1-1:0.119: trackpad urb failed: -19
[  200.651602][   T31] audit: type=1800 audit(1790199029.142:84): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1173" name="file1" dev="loop4" ino=7 res=0 errno=0
[  200.962541][ T5615] usb 2-1: USB disconnect, device number 8
[  201.245138][ T8736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.280700][ T8743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  201.280824][ T8743] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.387371][   T31] audit: type=1800 audit(1790199029.882:85): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1188" name="file1" dev="loop1" ino=15 res=0 errno=0
[  201.426124][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.586051][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  202.136487][ T8769] geneve1: entered promiscuous mode
[  202.692851][ T5905] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  202.765141][ T1855] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  202.842734][ T5905] usb 6-1: Using ep0 maxpacket: 16
[  202.847177][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short
[  202.847240][ T5905] usb 6-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=a9.de
[  202.848552][ T5905] usb 6-1: config 0 has an invalid interface number: 191 but max is 0
[  202.848582][ T5905] usb 6-1: config 0 has no interface number 0
[  202.848615][ T5905] usb 6-1: config 0 interface 191 has no altsetting 0
[  202.870984][ T5905] usb 6-1: string descriptor 0 read error: -22
[  202.871137][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.890400][ T5905] usb 6-1: config 0 descriptor??
[  202.911664][ T5905] rndis_host 6-1:0.191: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  202.940092][ T1855] usb 4-1: unable to get BOS descriptor or descriptor too short
[  202.940157][ T1855] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  202.941326][ T1855] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  202.941381][ T1855] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  202.987448][ T1855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.987484][ T1855] usb 4-1: Product: syz
[  202.987503][ T1855] usb 4-1: Manufacturer: syz
[  202.987524][ T1855] usb 4-1: SerialNumber: syz
[  203.151090][ T5905] usb 6-1: USB disconnect, device number 12
[  203.163867][ T8796] set_capacity_and_notify: 4 callbacks suppressed
[  203.163889][ T8796] loop1: detected capacity change from 0 to 256
[  203.165251][ T8796] exfat: Deprecated parameter 'utf8'
[  203.165307][ T8796] exfat: Deprecated parameter 'namecase'
[  203.165447][ T8796] exfat: Deprecated parameter 'namecase'
[  203.165474][ T8796] exfat: Deprecated parameter 'utf8'
[  203.267693][ T1855] usb 4-1: unit 4 not found!
[  203.268925][ T8796] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  203.269310][ T8796] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  203.438471][ T1855] usb 4-1: USB disconnect, device number 8
[  203.541424][ T8728] udevd[8728]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.774663][ T8771] loop0: detected capacity change from 0 to 32768
[  203.841548][ T8771] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  203.976889][ T8771] XFS (loop0): Ending clean mount
[  204.179255][ T8800] loop4: detected capacity change from 0 to 32768
[  204.216334][ T5612] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  204.261408][ T8800] 
[  204.261408][ T8800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.261408][ T8800] 
[  204.378492][ T8800] ERROR: (device loop4): diWrite: ixpxd invalid
[  204.378492][ T8800] 
[  204.383767][ T8800] ERROR: (device loop4): txCommit: 
[  204.383767][ T8800] 
[  204.403652][ T8829] jfs_create: dtSearch returned -17
[  204.575251][ T8834] loop3: detected capacity change from 0 to 256
[  204.607093][ T8834] exfat: Deprecated parameter 'namecase'
[  204.607154][ T8834] exfat: Deprecated parameter 'utf8'
[  204.658729][ T8834] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  204.677564][ T5610] 
[  204.677564][ T5610]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.677564][ T5610] 
[  204.680220][ T5610] 
[  204.680220][ T5610]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.680220][ T5610] 
[  204.928071][   T31] audit: type=1800 audit(1790199033.422:86): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1218" name="file1" dev="loop3" ino=1048643 res=0 errno=0
[  205.051858][ T8841] loop4: detected capacity change from 0 to 256
[  205.078889][ T8841] exfat: Deprecated parameter 'namecase'
[  205.078958][ T8841] exfat: Deprecated parameter 'namecase'
[  205.150132][ T8841] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  205.216168][ T8807] loop1: detected capacity change from 0 to 32768
[  205.219219][ T8807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1211 (8807)
[  205.288320][ T8843] loop0: detected capacity change from 0 to 64
[  205.298447][ T8807] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  205.298480][ T8807] BTRFS info (device loop1): using crc32c checksum algorithm
[  205.349931][ T8843] hfs: small file entry
[  205.666061][ T8807] BTRFS info (device loop1): enabling ssd optimizations
[  205.666096][ T8807] BTRFS info (device loop1): turning on flush-on-commit
[  205.666115][ T8807] BTRFS info (device loop1): enabling free space tree
[  205.666151][ T8807] BTRFS info (device loop1): enabling auto defrag
[  205.666172][ T8807] BTRFS info (device loop1): use lzo compression, level 1
[  205.666196][ T8807] BTRFS info (device loop1): max_inline set to 4096
[  205.873634][   T31] audit: type=1800 audit(1790199034.371:87): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1211" name="file1" dev="loop1" ino=260 res=0 errno=0
[  205.914813][ T5743] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  206.074966][ T5743] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  206.076779][ T5743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.076804][ T5743] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  206.076830][ T5743] usb 4-1: config 1 has no interface number 0
[  206.076873][ T5743] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  206.082199][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.082227][ T5743] usb 4-1: Product: syz
[  206.082245][ T5743] usb 4-1: Manufacturer: syz
[  206.082262][ T5743] usb 4-1: SerialNumber: syz
[  206.177185][ T5743] usb 4-1: selecting invalid altsetting 1
[  206.253244][ T5609] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.436670][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  206.436717][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  206.649097][ T5743] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS
[  206.649155][ T5743] cdc_ncm 4-1:1.1: bind() failure
[  206.737069][ T5743] usb 4-1: USB disconnect, device number 9
[  206.888715][ T8864] loop5: detected capacity change from 0 to 32768
[  206.970139][ T8864] 
[  206.970139][ T8864]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.970139][ T8864] 
[  207.049513][ T8864] read_mapping_page failed!
[  207.049534][ T8864] ERROR: (device loop5): txCommit: 
[  207.049534][ T8864] 
[  207.128683][ T8897] smc: net device ip6_vti0 applied user defined pnetid SYZ2
[  207.345261][  T152] ERROR: (device loop5): diWrite: ixpxd invalid
[  207.345261][  T152] 
[  207.345303][  T152] ERROR: (device loop5): txCommit: 
[  207.345303][  T152] 
[  207.345364][  T152] jfs_write_inode: jfs_commit_inode failed!
[  207.348885][ T5611] 
[  207.348885][ T5611]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.348885][ T5611] 
[  207.350197][ T5611] 
[  207.350197][ T5611]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.350197][ T5611] 
[  207.714241][ T8906] loop2: detected capacity change from 0 to 4096
[  207.734997][ T8906] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  207.944682][ T8906] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  208.015985][ T8924] netlink: 'syz.4.1248': attribute type 1 has an invalid length.
[  208.059887][ T8923] loop3: detected capacity change from 0 to 64
[  208.138056][   T30] kernel read not supported for file /input/mice (pid: 30 comm: kworker/1:1)
[  208.173333][ T1855] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  208.334104][ T1855] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  208.335330][ T1855] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  208.335366][ T1855] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.335425][ T1855] usb 2-1: config 0 interface 0 has no altsetting 0
[  208.335462][ T1855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.419808][ T1855] usb 2-1: config 0 descriptor??
[  208.420582][ T8918] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  208.556200][ T5614] hfs: node 4:3 still has 1 user(s)!
[  208.766764][ T8945] loop5: detected capacity change from 0 to 128
[  208.829323][   T30] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  208.864795][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x2
[  208.864835][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x5
[  208.864905][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x0
[  208.864930][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x0
[  208.864954][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x0
[  208.864977][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x0
[  208.865001][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x0
[  208.865025][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x0
[  208.865049][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x0
[  208.865073][ T1855] asus 0003:0B05:19B6.0016: unknown main item tag 0x0
[  208.953847][ T1855] asus 0003:0B05:19B6.0016: hidraw0: USB HID v0.0c Device [HID 0b05:19b6] on usb-dummy_hcd.1-1/input0
[  208.965251][ T8945] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  208.965286][ T8945] hpfs: filesystem error: improperly stopped
[  208.965303][ T8945] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  208.965321][ T8945] hpfs: You really don't want any checks? You are crazy...
[  208.965335][ T8945] hpfs: Code page index out of array
[  208.965344][ T8945] hpfs: code page support is disabled
[  208.968255][ T8945] hpfs: hpfs_map_4sectors(): unaligned read
[  208.968331][ T8945] hpfs: hpfs_map_4sectors(): unaligned read
[  208.968343][ T8945] hpfs: filesystem error: unable to find root dir
[  208.994327][   T30] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  208.998349][   T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.998424][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.139956][   T30] usb 5-1: selecting invalid altsetting 1
[  209.177238][ T8950] ip_tables: iptables: counters copy to user failed while replacing table
[  209.224327][   T30] dvb_ttusb_budget: ttusb_init_controller: error
[  209.224352][   T30] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  209.227619][ T5615] usb 2-1: USB disconnect, device number 9
[  209.342446][   T30] DVB: Unable to find symbol stv0299_attach()
[  209.446819][   T30] DVB: Unable to find symbol tda8083_attach()
[  209.446841][   T30] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  209.487444][   T30] usb 5-1: USB disconnect, device number 7
[  209.526834][ T1179] hid-generic 0000:0000:0001.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  209.871699][ T8976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.255476][ T8978] fido_id[8978]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  210.932532][ T8981] loop2: detected capacity change from 0 to 32768
[  210.965618][ T8981] lbmIODone: I/O error in JFS log
[  210.965637][ T8981] *** Log Format Error ! ***
[  210.966340][ T8981] lmLogInit: exit(-22)
[  210.966384][ T8981] lmLogOpen: exit(-22)
[  211.079401][ T9014] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  211.084645][ T1094] IPVS: starting estimator thread 0...
[  211.175934][ T9017] IPVS: using max 24 ests per chain, 57600 per kthread
[  211.626428][ T9032] loop1: detected capacity change from 0 to 4096
[  211.664406][ T1179] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  211.708764][ T9035] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.816852][ T1179] usb 6-1: Using ep0 maxpacket: 16
[  211.819214][ T1179] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  211.820817][ T1179] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  211.820843][ T1179] usb 6-1: config 0 has no interface number 0
[  211.820889][ T1179] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  211.830546][ T1179] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  211.830579][ T1179] usb 6-1: Product: syz
[  211.830596][ T1179] usb 6-1: SerialNumber: syz
[  211.854323][ T1179] usb 6-1: config 0 descriptor??
[  211.879444][ T1179] cm109 6-1:0.8: invalid payload size 208, expected 4
[  211.997862][ T9030] loop4: detected capacity change from 0 to 32768
[  212.020055][ T9030] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1294 (9030)
[  212.077187][ T1179] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input11
[  212.089742][ T9030] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  212.089778][ T9030] BTRFS info (device loop4): using sha256 checksum algorithm
[  212.304122][ T9030] BTRFS info (device loop4): turning off barriers
[  212.304154][ T9030] BTRFS info (device loop4): enabling free space tree
[  212.413860][ T9057] loop1: detected capacity change from 0 to 512
[  212.525227][ T9057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.525378][ T9057] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.531948][ T9034] loop0: detected capacity change from 0 to 40427
[  212.577607][ T5610] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  212.578627][ T9034] F2FS-fs (loop0): invalid crc value
[  212.629808][    C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71
[  212.629855][    C1] ------------[ cut here ]------------
[  212.629866][    C1] URB ffff888035562400 submitted while active
[  212.629881][    C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: syz.5.1292/9027
[  212.658409][    C1] Modules linked in:
[  212.662315][    C1] CPU: 1 UID: 0 PID: 9027 Comm: syz.5.1292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  212.673175][    C1] Tainted: [L]=SOFTLOCKUP
[  212.677494][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  212.687549][    C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[  212.693023][    C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 b9 31 c9 fa 49 83 3e 00 74 40 e8 ce 29 59 fa 48 8d 3d 37 4b 19 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 29 59 fa eb 05 e8 ac 29
[  212.713071][    C1] RSP: 0018:ffffc90000a189f8 EFLAGS: 00010083
[  212.719155][    C1] RAX: ffffffff876ea8b2 RBX: ffff888035562400 RCX: 0000000000040000
[  212.727130][    C1] RDX: ffffc900020a1000 RSI: ffff888035562400 RDI: ffffffff9087f3f0
[  212.735108][    C1] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004
[  212.743089][    C1] R10: dffffc0000000000 R11: fffff5200014313c R12: ffff888025947048
[  212.751068][    C1] R13: ffff888025947030 R14: ffff888035562408 R15: 0000000000000820
[  212.759046][    C1] FS:  0000555574d46500(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000
[  212.767980][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  212.774569][    C1] CR2: 0000001b33a14ffc CR3: 00000000347da000 CR4: 0000000000350ef0
[  212.782543][    C1] Call Trace:
[  212.785821][    C1]  <IRQ>
[  212.788658][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  212.794326][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  212.800153][    C1]  cm109_urb_irq_callback+0x6fb/0xca0
[  212.805540][    C1]  __usb_hcd_giveback_urb+0x378/0x540
[  212.810923][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  212.816564][    C1]  dummy_timer+0xa91/0x4cf0
[  212.821098][    C1]  ? __lock_acquire+0x747/0x2de0
[  212.826054][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  212.831794][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  212.837191][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  212.842151][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  212.847957][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  212.852906][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  212.858129][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  212.863255][    C1]  handle_softirqs+0x226/0x860
[  212.868027][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  212.872800][    C1]  __irq_exit_rcu+0xcb/0x220
[  212.877431][    C1]  irq_exit_rcu+0x9/0x30
[  212.881677][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  212.887314][    C1]  </IRQ>
[  212.890240][    C1]  <TASK>
[  212.893160][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  212.899141][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  212.905562][    C1] Code: f7 e8 2d c8 bb f5 f7 c3 00 02 00 00 74 05 e8 90 12 e8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 94 d5 ac f5 65 48 8b 05 0c e1 ac 07 48 85 c0 74 18 5b 41 5e e9
[  212.925175][    C1] RSP: 0018:ffffc9000579fb78 EFLAGS: 00000206
[  212.932034][    C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[  212.940000][    C1] RDX: 0000000000000006 RSI: ffffffff8e41399c RDI: 0000000000000001
[  212.947974][    C1] RBP: 0000000000000000 R08: ffffffff907a3f7f R09: 1ffffffff20f47ef
[  212.955972][    C1] R10: dffffc0000000000 R11: fffffbfff20f47f0 R12: 0000000000000246
[  212.963942][    C1] R13: dffffc0000000000 R14: ffff88802a180000 R15: ffff88802a44a400
[  212.971932][    C1]  dummy_pullup+0xcf/0x120
[  212.976362][    C1]  ? __pfx_dummy_pullup+0x10/0x10
[  212.981391][    C1]  usb_gadget_disconnect_locked+0x126/0x480
[  212.987299][    C1]  gadget_unbind_driver+0xc2/0x410
[  212.992498][    C1]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  212.998213][    C1]  device_release_driver_internal+0x48b/0x880
[  213.004295][    C1]  driver_detach+0x1f3/0x2d0
[  213.008910][    C1]  bus_remove_driver+0x226/0x320
[  213.013867][    C1]  usb_gadget_unregister_driver+0x4e/0x70
[  213.019622][    C1]  raw_release+0xd7/0x260
[  213.023985][    C1]  ? __pfx_raw_release+0x10/0x10
[  213.028932][    C1]  __fput+0x418/0xa50
[  213.032924][    C1]  task_work_run+0x1d9/0x270
[  213.037515][    C1]  ? __pfx_task_work_run+0x10/0x10
[  213.042636][    C1]  exit_to_user_mode_loop+0x204/0x770
[  213.048003][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  213.054067][    C1]  ? rcu_is_watching+0x16/0xb0
[  213.058839][    C1]  do_syscall_64+0x328/0x520
[  213.063431][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.069498][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.075412][    C1] RIP: 0033:0x7fe2be79e159
[  213.079825][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.099521][    C1] RSP: 002b:00007ffe7e45e2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  213.107951][    C1] RAX: 0000000000000000 RBX: 00007ffe7e45e3a0 RCX: 00007fe2be79e159
[  213.115927][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  213.123891][    C1] RBP: 00000000000337b1 R08: 0000000000000001 R09: 0000000000000000
[  213.131856][    C1] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffe7e45e3e0
[  213.139824][    C1] R13: 00007fe2bea25fac R14: 0000000000033d05 R15: 00007fe2bea25fa0
[  213.148340][    C1]  </TASK>
[  213.151351][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  213.158624][    C1] CPU: 1 UID: 0 PID: 9027 Comm: syz.5.1292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.169468][    C1] Tainted: [L]=SOFTLOCKUP
[  213.173779][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  213.183825][    C1] Call Trace:
[  213.187098][    C1]  <IRQ>
[  213.189935][    C1]  vpanic+0x56d/0xa60
[  213.193929][    C1]  ? __pfx__printk+0x10/0x10
[  213.198519][    C1]  ? __pfx_vpanic+0x10/0x10
[  213.203068][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  213.208358][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  213.213573][    C1]  panic+0xc5/0xd0
[  213.217342][    C1]  ? __pfx_panic+0x10/0x10
[  213.221788][    C1]  __warn+0x315/0x4c0
[  213.225775][    C1]  ? usb_submit_urb+0x79/0x18b0
[  213.230631][    C1]  ? usb_submit_urb+0x79/0x18b0
[  213.235485][    C1]  __report_bug+0x276/0x570
[  213.239997][    C1]  ? usb_submit_urb+0x79/0x18b0
[  213.244844][    C1]  ? __pfx___report_bug+0x10/0x10
[  213.249876][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  213.255509][    C1]  ? __lock_acquire+0x747/0x2de0
[  213.260454][    C1]  report_bug_entry+0x19b/0x290
[  213.265312][    C1]  ? usb_submit_urb+0x7c/0x18b0
[  213.270161][    C1]  ? usb_submit_urb+0x81/0x18b0
[  213.275004][    C1]  handle_bug+0xce/0x200
[  213.279258][    C1]  exc_invalid_op+0x1a/0x50
[  213.283767][    C1]  asm_exc_invalid_op+0x1a/0x20
[  213.288616][    C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[  213.294069][    C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 b9 31 c9 fa 49 83 3e 00 74 40 e8 ce 29 59 fa 48 8d 3d 37 4b 19 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 29 59 fa eb 05 e8 ac 29
[  213.313671][    C1] RSP: 0018:ffffc90000a189f8 EFLAGS: 00010083
[  213.319744][    C1] RAX: ffffffff876ea8b2 RBX: ffff888035562400 RCX: 0000000000040000
[  213.327712][    C1] RDX: ffffc900020a1000 RSI: ffff888035562400 RDI: ffffffff9087f3f0
[  213.335677][    C1] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004
[  213.343642][    C1] R10: dffffc0000000000 R11: fffff5200014313c R12: ffff888025947048
[  213.351613][    C1] R13: ffff888025947030 R14: ffff888035562408 R15: 0000000000000820
[  213.359594][    C1]  ? usb_submit_urb+0x72/0x18b0
[  213.364552][    C1]  ? usb_submit_urb+0x72/0x18b0
[  213.369403][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  213.375044][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  213.380864][    C1]  cm109_urb_irq_callback+0x6fb/0xca0
[  213.386246][    C1]  __usb_hcd_giveback_urb+0x378/0x540
[  213.391629][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  213.397266][    C1]  dummy_timer+0xa91/0x4cf0
[  213.401806][    C1]  ? __lock_acquire+0x747/0x2de0
[  213.406756][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  213.412406][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  213.417796][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  213.422753][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  213.428560][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  213.433510][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  213.438736][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  213.443861][    C1]  handle_softirqs+0x226/0x860
[  213.448634][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  213.453412][    C1]  __irq_exit_rcu+0xcb/0x220
[  213.458007][    C1]  irq_exit_rcu+0x9/0x30
[  213.462250][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  213.467885][    C1]  </IRQ>
[  213.470805][    C1]  <TASK>
[  213.473729][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.479708][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  213.486125][    C1] Code: f7 e8 2d c8 bb f5 f7 c3 00 02 00 00 74 05 e8 90 12 e8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 94 d5 ac f5 65 48 8b 05 0c e1 ac 07 48 85 c0 74 18 5b 41 5e e9
[  213.505730][    C1] RSP: 0018:ffffc9000579fb78 EFLAGS: 00000206
[  213.511802][    C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[  213.519767][    C1] RDX: 0000000000000006 RSI: ffffffff8e41399c RDI: 0000000000000001
[  213.527737][    C1] RBP: 0000000000000000 R08: ffffffff907a3f7f R09: 1ffffffff20f47ef
[  213.535706][    C1] R10: dffffc0000000000 R11: fffffbfff20f47f0 R12: 0000000000000246
[  213.543679][    C1] R13: dffffc0000000000 R14: ffff88802a180000 R15: ffff88802a44a400
[  213.551684][    C1]  dummy_pullup+0xcf/0x120
[  213.556111][    C1]  ? __pfx_dummy_pullup+0x10/0x10
[  213.561145][    C1]  usb_gadget_disconnect_locked+0x126/0x480
[  213.567051][    C1]  gadget_unbind_driver+0xc2/0x410
[  213.572165][    C1]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  213.577884][    C1]  device_release_driver_internal+0x48b/0x880
[  213.583967][    C1]  driver_detach+0x1f3/0x2d0
[  213.588568][    C1]  bus_remove_driver+0x226/0x320
[  213.593525][    C1]  usb_gadget_unregister_driver+0x4e/0x70
[  213.599258][    C1]  raw_release+0xd7/0x260
[  213.603601][    C1]  ? __pfx_raw_release+0x10/0x10
[  213.608538][    C1]  __fput+0x418/0xa50
[  213.612538][    C1]  task_work_run+0x1d9/0x270
[  213.617311][    C1]  ? __pfx_task_work_run+0x10/0x10
[  213.622442][    C1]  exit_to_user_mode_loop+0x204/0x770
[  213.627818][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  213.633457][    C1]  ? rcu_is_watching+0x16/0xb0
[  213.638229][    C1]  do_syscall_64+0x328/0x520
[  213.642827][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.648901][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.654802][    C1] RIP: 0033:0x7fe2be79e159
[  213.659219][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.678828][    C1] RSP: 002b:00007ffe7e45e2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  213.687303][    C1] RAX: 0000000000000000 RBX: 00007ffe7e45e3a0 RCX: 00007fe2be79e159
[  213.695324][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  213.703299][    C1] RBP: 00000000000337b1 R08: 0000000000000001 R09: 0000000000000000
[  213.711273][    C1] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffe7e45e3e0
[  213.719250][    C1] R13: 00007fe2bea25fac R14: 0000000000033d05 R15: 00007fe2bea25fa0
[  213.727244][    C1]  </TASK>
[  213.730575][    C1] Kernel Offset: disabled
[  213.734888][    C1] Rebooting in 86400 seconds..