last executing test programs:

6.661156653s ago: executing program 4 (id=1510):
r0 = gettid()
sigaltstack(&(0x7f0000001040)={&(0x7f0000001580)=""/4110, 0x80000001, 0xfffffffffffffefd}, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0))

6.521496431s ago: executing program 4 (id=1511):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

6.234560718s ago: executing program 4 (id=1515):
semget$private(0x0, 0x4000, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)

6.121694974s ago: executing program 4 (id=1516):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB='8\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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")
creat(&(0x7f0000001740)='./bus\x00', 0xa1)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2013000, 0x0)

5.691211139s ago: executing program 4 (id=1519):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64], 0x20000600}}, 0x0)

4.851247908s ago: executing program 4 (id=1529):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000180)={0x1, 0x3})

4.599673713s ago: executing program 32 (id=1529):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000180)={0x1, 0x3})

3.391629843s ago: executing program 3 (id=1545):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x2, 0x0, 0x1, {0x8}}]}]}, 0x30}}, 0x0)

3.204606364s ago: executing program 3 (id=1546):
r0 = msgget$private(0x0, 0x1f3)
msgrcv(r0, 0x0, 0x0, 0x3, 0x2000)
msgrcv(r0, 0x0, 0x0, 0x3, 0x0)
msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300"], 0x68, 0x0)

3.149068457s ago: executing program 1 (id=1547):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000000000f000100000e00"}}}]}, 0x48}}, 0x0)

2.889447992s ago: executing program 1 (id=1550):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000001c0))

2.75789601s ago: executing program 1 (id=1551):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000040)={[{@usebackuproot}, {@nodatacow}]}, 0x1, 0x55c7, &(0x7f000000abc0)="$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")

2.354610443s ago: executing program 0 (id=1553):
unshare(0x20000400)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2}, 0xe)

2.255510739s ago: executing program 3 (id=1554):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)

2.153871895s ago: executing program 0 (id=1555):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700000000a000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a000fa09000008002600b409"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

1.946390247s ago: executing program 0 (id=1557):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0xffff, 0x3, 0x1, 0xe1a4}, 'syz1\x00', 0x12})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

1.761365987s ago: executing program 3 (id=1558):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x1, 0x4, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.683619242s ago: executing program 2 (id=1559):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002640)=ANY=[@ANYBLOB="38000000550001002abd7000fedbff2507000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

1.555487479s ago: executing program 3 (id=1560):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000380)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e", @ANYRES32=0x0], 0x11, 0x4459, &(0x7f0000008900)="$eJzs3U9vG2kZAPB3JtndpGx3k2UPi4SEJVYCAYqSnoBUIk3TpkkbigqtEBfXSdw24MRV4iAOlQi3SpyQOKAeKpC45VTlC5SPwIVjOVeiBy5IlSqCPB4nnomHmNROCfx+B4/n/fs4z8z4nYMzcarxYG2rtLZVqmyU6iv3ti6Ufl6vba9XQ3wKxormf+905qd33fL0er+lS/Owc8IxT+vY+3938/LVH965EMKfVv/yMslhKDbVfDnfev+Pvz9a6dy25fs3x/03Q/bBT0IInx7sdcYzFEL4cRrQpbRsNt2Oph8lCiHcefTru6U+RfPsRfVi+c3S473pzxd3n+4Vf/YohCe1L33r/vrfvjo0/ddv9Gl6AAAAAAAAAAAAAAAAAADOuPlbN2//YHIqPI/C8G509Pe68+m26Pex+33zlcF/WAAAAAAAAAAAAAAAAAAAAPgvdfj7/1L0SZff/8+l25mC/vvfK6j4oL9xMhgL3785d2VyKn3+e3Sk/ttp0atLQ2G8y3Pf889/v5Tr3/357+mgQ28ffzu+9rxjIYon9n95UD8W4nhiIoQ/pA9+/yw6F9fqW41v3qtvb6y+/fxnXTb/rYflZ46C9Pn5veZ/Njf+4J///8WQP2qb+3ePHsp0kc1/8Qn5x19FPeX/cq7faeSfk8vmfzgpG+1sMNO6ADTz/5vh4/M/lxt/UPn/KIRQipqxljJXgOYaplletF4hK5v/95KyzKUz/UMWnf+vc/m/khu/KP8f9+0TdL/+7+S/iOgqm//3k7KRTIvD8388Pv78v5ob/118/zfj3/H935Ns/tObtuFMk+Qv2ev1fz43/lvm//2iittxGudHUeYI2I1a5UX/r46sbP5HjtQf3v/FPa3/ruX6J/k/ci727+Rsx9eeN7n/67gP+XrUuv8rUHnSt0jOpmz+Rwvb9Xr+L+T6Dfr6P5Os/zipbP7PJWXZtfNY8tpr/hdz4w8q/8mqZKSd/8PryT8/aJX/3vqvJ9n8f6FVGHe22Elek/VfdPz6/3pu/Hex/mvGvxMPdtb/Fdn8f1jYrpn/P/fw/X8j12/w+Q9h0lr/xLL5P1/YLjn/R47P/1Ku36Dz/7VBDg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwBsym27EQxROZ/TiemAjhcrr/WTgXLVdWy8u1+srPtkKYS8tL4ZPofq2+XKmV1zbqq9VypVarr4RwJa3/NIxEW7V6o7xeeXj1YKzR6EG1stlYrlYaIYT5tPzL4Xx7rOW1xnrlYQjh2kHdx3F98+GDykZ5dW3zu5OTk5Nh4SCG8aj6i0Z1o9GavVUbwuJB37GoI7ik+vpBLB9GP61vb25Uakn5jY4+tfpKpdbRZymt+20Yjxqb2xsrlUa1XKvfb8/3Ls2k27mFWz+6dWPqSP3dqLWdPd2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgPPZ/+zu9CCMOtvTiEMNN+EzXfvMq1f/aierH8Zunx3vTni7tP91622wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyLHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSMUrFQBAG4Nm1UDuPYRWSzjZBES2MCJ5Aj+Fh4lG8hHewsLC1EMHsgkaF8OC96vuagfxM5ocEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM2c34y3120XkeLgYz/i6f755Xt+WeY0zDMv9vd21JPtuLgaT8/arnz39Cs/KY9e+/yVvr893MUfs3ocfu4v/6dZvXP4b69pWNe/9qt3jyLlJiL6kh+nnJtm3bsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhkBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVwAAAP//g/ko2Q==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)

1.509964992s ago: executing program 2 (id=1561):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5)
setsockopt(r1, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4)

1.149233463s ago: executing program 0 (id=1562):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x14000, 0x8001}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

1.073076078s ago: executing program 1 (id=1563):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

953.788704ms ago: executing program 1 (id=1564):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=@bridge_dellink={0x44, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_MAP={0x24, 0x1a, {0x4, 0xfffffffffffffff9, 0x8, 0xfeff, 0x5, 0x3}}]}, 0x44}}, 0x0)

952.994844ms ago: executing program 2 (id=1565):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000080)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@fat=@discard}, {}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@nfs_stale_rw}, {@dots}, {@fat=@sys_immutable}, {}, {@fat=@nocase}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x1a8)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

868.954929ms ago: executing program 0 (id=1566):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0000102, 0x0, 0x1000000000006}]})

786.031084ms ago: executing program 1 (id=1567):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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")
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus\x00')

635.692953ms ago: executing program 0 (id=1568):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

523.739459ms ago: executing program 2 (id=1569):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0001b420a1a93c5a40f45f819e01177d3d45220e992861ec00", "90be8b1c55126540a0f4bd0000000000abf31e4000"}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x5, 0x15, "6bf125058e2ca444e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c909cda49a11ff76e906b13a0c26ef2f2b18d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd010a5736c16ff404a7f7893b300", [0xa2, 0x3560]})

358.569989ms ago: executing program 3 (id=1570):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

115.852313ms ago: executing program 2 (id=1571):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000303", @ANYRES8=r0, @ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8884)

0s ago: executing program 2 (id=1572):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

ys_mount+0x2e3/0x3d0
[  101.377406][ T5960]  ? __x64_sys_mount+0xc0/0xc0
[  101.382187][ T5960]  ? lockdep_hardirqs_on+0x94/0x140
[  101.382863][ T5977] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.387383][ T5960]  ? __x64_sys_mount+0x1c/0xc0
[  101.387406][ T5960]  do_syscall_64+0x4c/0xa0
[  101.387426][ T5960]  ? clear_bhb_loop+0x30/0x80
[  101.387443][ T5960]  ? clear_bhb_loop+0x30/0x80
[  101.387459][ T5960]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  101.387474][ T5960] RIP: 0033:0x7f2ffa279f4a
[  101.387489][ T5960] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.387503][ T5960] RSP: 002b:00007f2ff84d3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  101.387522][ T5960] RAX: ffffffffffffffda RBX: 00007f2ff84d3ee0 RCX: 00007f2ffa279f4a
[  101.387534][ T5960] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007f2ff84d3ea0
[  101.387546][ T5960] RBP: 000020000001f680 R08: 00007f2ff84d3ee0 R09: 0000000000000084
[  101.387557][ T5960] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0
[  101.387569][ T5960] R13: 00007f2ff84d3ea0 R14: 000000000001f707 R15: 00002000000000c0
[  101.387595][ T5960]  </TASK>
[  101.388864][ T5960] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount.
[  101.580988][ T5980] loop0: detected capacity change from 0 to 8192
[  101.710269][ T5841] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  101.744781][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.748608][ T5986] loop2: detected capacity change from 0 to 256
[  101.760634][ T5841] usb 2-1: config 0 descriptor??
[  101.802415][ T5841] cp210x 2-1:0.0: cp210x converter detected
[  102.022548][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/298.tmp-b7:2' failed: Read-only file system
[  102.077154][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/298.tmp-b7:2' failed: Read-only file system
[  102.112688][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-diskseq/281.tmp-b7:4' failed: Read-only file system
[  102.153687][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/299.tmp-b7:0' failed: Read-only file system
[  102.184112][ T6002] loop0: detected capacity change from 0 to 512
[  102.203687][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/297.tmp-b7:3' failed: Read-only file system
[  102.220224][ T6006] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: value out of range 0 (89/830110067) at count 0
[  102.245383][ T6006] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: access overflow
[  102.306166][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system
[  102.359405][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/301.tmp-b7:0' failed: Read-only file system
[  102.420497][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-diskseq/281.tmp-b7:4' failed: Read-only file system
[  102.440038][ T6019] loop2: detected capacity change from 0 to 512
[  102.446927][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-diskseq/281.tmp-b7:4' failed: Read-only file system
[  102.471574][ T5841] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71
[  102.479199][ T5841] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  102.495093][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/301.tmp-b7:0' failed: Read-only file system
[  102.514430][ T6019] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  102.552799][ T5841] usb 2-1: cp210x converter now attached to ttyUSB0
[  102.563591][ T6019] EXT4-fs (loop2): orphan cleanup on readonly fs
[  102.587139][ T5841] usb 2-1: USB disconnect, device number 7
[  102.595472][ T5841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  102.611785][ T5841] cp210x 2-1:0.0: device disconnected
[  102.643179][ T6019] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.670: Allocating blocks 41-42 which overlap fs metadata
[  102.671841][ T6019] Quota error (device loop2): write_blk: dquota write failed
[  102.692280][ T6019] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  102.725709][ T6019] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  102.770688][ T6019] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.670: Failed to acquire dquot type 1
[  102.799669][ T6019] EXT4-fs error (device loop2): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  102.832441][ T6019] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.670: corrupted inode contents
[  102.853709][ T6019] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #12: comm syz.2.670: mark_inode_dirty error
[  102.872544][ T6019] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.670: corrupted inode contents
[  102.893683][ T6019] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.670: mark_inode_dirty error
[  102.907612][ T6019] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.670: corrupted inode contents
[  102.938318][ T6019] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  102.949502][ T6019] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.670: corrupted inode contents
[  102.963253][ T6019] EXT4-fs error (device loop2): ext4_truncate:4279: inode #12: comm syz.2.670: mark_inode_dirty error
[  102.974986][ T6019] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  102.975612][ T6019] EXT4-fs (loop2): 1 truncate cleaned up
[  102.976209][ T6019] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  103.014284][ T6019] capability: warning: `syz.2.670' uses 32-bit capabilities (legacy support in use)
[  103.243096][ T6057] loop1: detected capacity change from 0 to 8
[  103.292292][ T6057] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  103.485228][ T6067] loop4: detected capacity change from 0 to 1024
[  103.497244][ T6066] loop0: detected capacity change from 0 to 4096
[  103.500029][ T6061] loop2: detected capacity change from 0 to 8192
[  103.525676][ T6067] EXT4-fs (loop4): Ignoring removed oldalloc option
[  103.548488][ T6067] EXT4-fs (loop4): Ignoring removed bh option
[  103.559025][ T6061] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  103.565421][ T6066] ntfs: volume version 3.1.
[  103.573487][ T6067] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  103.606678][ T6067] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  103.640982][ T6061] REISERFS (device loop2): using ordered data mode
[  103.671462][ T6061] reiserfs: using flush barriers
[  103.704788][ T6061] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  103.721838][ T6061] REISERFS (device loop2): checking transaction log (loop2)
[  103.733754][ T6061] REISERFS (device loop2): Using tea hash to sort names
[  103.762110][ T6061] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  103.899172][ T6081] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  103.957330][ T6081] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.168894][ T6081] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.696: directory missing '..'
[  104.170213][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'.
[  104.748067][ T6134] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  104.778779][ T6134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.134138][ T6154] misc userio: Invalid payload size
[  105.160947][ T6154] misc userio: The device must be registered before sending interrupts
[  105.228628][ T6157] syz.1.731 uses obsolete (PF_INET,SOCK_PACKET)
[  106.241601][ T5841] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  106.528113][ T6241] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.773'.
[  106.534972][ T6239] set_capacity_and_notify: 4 callbacks suppressed
[  106.534987][ T6239] loop4: detected capacity change from 0 to 4096
[  106.569808][ T6241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.582269][ T6245] netlink: 'syz.1.775': attribute type 10 has an invalid length.
[  106.611498][ T5841] usb 1-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00
[  106.630819][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.650481][ T6239] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  106.661840][ T6245] team0: Port device dummy0 added
[  106.668225][ T6250] netlink: 'syz.1.775': attribute type 10 has an invalid length.
[  106.677939][ T5841] usb 1-1: config 0 descriptor??
[  106.763516][ T6239] ntfs3: loop4: ntfs_set_state r=3 failed, -22.
[  106.773883][ T6250] team0: Port device dummy0 removed
[  106.784866][ T6250] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  106.794504][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'.
[  106.810191][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'.
[  106.841847][ T6239] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported
[  106.885146][ T6245] syz.1.775 (6245) used greatest stack depth: 19856 bytes left
[  106.902678][ T4281] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22.
[  106.909306][ T4193] ntfs3: loop4: ntfs_set_state r=3 failed, -22.
[  106.919810][ T6259] loop1: detected capacity change from 0 to 128
[  106.931503][ T4193] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  106.945943][ T4193] ntfs3: loop4: ntfs_set_state r=3 failed, -22.
[  106.971093][  T363] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22.
[  107.003579][ T4193] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22.
[  107.053356][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/317.tmp-b7:2' failed: Read-only file system
[  107.078947][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-diskseq/321.tmp-b7:4' failed: Read-only file system
[  107.084873][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/322.tmp-b7:1' failed: Read-only file system
[  107.138797][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/322.tmp-b7:1' failed: Read-only file system
[  107.148994][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-diskseq/321.tmp-b7:4' failed: Read-only file system
[  107.177234][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/322.tmp-b7:1' failed: Read-only file system
[  107.181711][ T5841] chicony 0003:04F2:1123.000B: hidraw0: USB HID v1.01 Device [HID 04f2:1123] on usb-dummy_hcd.0-1/input0
[  107.376945][ T5841] usb 1-1: USB disconnect, device number 6
[  107.381307][ T4785] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  107.523498][ T6273] loop4: detected capacity change from 0 to 40427
[  107.539674][ T6273] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  107.550642][ T6273] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  107.553000][ T6267] loop1: detected capacity change from 0 to 40427
[  107.577393][ T6273] F2FS-fs (loop4): Found nat_bits in checkpoint
[  107.620596][ T6267] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff
[  107.640102][ T6273] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  107.648479][ T6273] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  107.656596][ T6267] F2FS-fs (loop1): invalid crc value
[  107.674954][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-diskseq/325.tmp-b7:4' failed: Read-only file system
[  107.675618][ T6267] F2FS-fs (loop1): Found nat_bits in checkpoint
[  107.694470][ T6273] fscrypt (loop4, inode 3): Error -61 getting encryption context
[  107.713877][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  107.747590][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-diskseq/326.tmp-b7:1' failed: Read-only file system
[  107.782191][ T4785] usb 3-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00
[  107.784338][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  107.808153][ T4785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.821533][ T6267] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  107.841154][ T4785] usb 3-1: config 0 descriptor??
[  107.999139][ T6286] loop3: detected capacity change from 0 to 1024
[  108.016717][ T6287] loop0: detected capacity change from 0 to 64
[  108.109412][ T6286] attempt to access beyond end of device
[  108.109412][ T6286] loop3: rw=0, want=5780, limit=1024
[  108.332857][ T4785] ortek 0003:05A4:2000.000C: unknown main item tag 0x0
[  108.344868][ T4785] ortek 0003:05A4:2000.000C: unknown main item tag 0x0
[  108.359402][ T6298] loop3: detected capacity change from 0 to 1024
[  108.391828][ T4785] ortek 0003:05A4:2000.000C: unknown main item tag 0x0
[  108.409053][ T4785] ortek 0003:05A4:2000.000C: unknown main item tag 0x0
[  108.424247][ T4785] ortek 0003:05A4:2000.000C: hidraw0: USB HID vff.fb Device [HID 05a4:2000] on usb-dummy_hcd.2-1/input0
[  108.448530][ T6302] sctp: [Deprecated]: syz.0.799 (pid 6302) Use of int in maxseg socket option.
[  108.448530][ T6302] Use struct sctp_assoc_value instead
[  108.491591][ T6298] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  108.579447][ T6298] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #11: comm syz.3.795: directory missing '..'
[  108.605118][ T4785] usb 3-1: USB disconnect, device number 5
[  108.691771][ T4249] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  108.734711][ T6314] loop3: detected capacity change from 0 to 764
[  108.921576][ T4781] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  109.027482][ T6312] loop1: detected capacity change from 0 to 32768
[  109.064225][ T4249] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  109.091771][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.137568][ T6312] XFS (loop1): Mounting V5 Filesystem
[  109.156675][ T4249] usb 5-1: config 0 descriptor??
[  109.299242][ T6312] XFS (loop1): Starting recovery (logdev: internal)
[  109.316757][ T6341] netlink: 9 bytes leftover after parsing attributes in process `syz.2.811'.
[  109.350136][ T6341] device gretap0 entered promiscuous mode
[  109.378881][ T6312] XFS (loop1): Ending recovery (logdev: internal)
[  109.385805][ T4781] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.386548][ T6343] netlink: 5 bytes leftover after parsing attributes in process `syz.2.811'.
[  109.399796][ T4781] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.466817][ T6343] 0ªX¹¦D: renamed from gretap0
[  109.498046][ T6343] device 
30ªX¹¦D left promiscuous mode
[  109.511581][ T4781] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  109.516576][ T6343] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  109.529109][ T4781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  109.546711][ T4781] usb 1-1: SerialNumber: syz
[  109.588794][ T4183] XFS (loop1): Unmounting Filesystem
[  109.664640][ T4249] waltop 0003:172F:0038.000D: unknown main item tag 0x0
[  109.668972][ T6352] loop2: detected capacity change from 0 to 1024
[  109.679731][ T4249] waltop 0003:172F:0038.000D: unknown main item tag 0x0
[  109.701361][ T4249] waltop 0003:172F:0038.000D: unknown main item tag 0x0
[  109.708369][ T4249] waltop 0003:172F:0038.000D: unknown main item tag 0x0
[  109.735941][ T6352] hfsplus: bad catalog entry type
[  109.751307][ T4249] waltop 0003:172F:0038.000D: unknown main item tag 0x0
[  109.790097][ T4249] waltop 0003:172F:0038.000D: hidraw0: USB HID v0.05 Device [HID 172f:0038] on usb-dummy_hcd.4-1/input0
[  109.818773][ T6288] hfsplus: b-tree write err: -5, ino 4
[  109.854442][ T4781] usb 1-1: 0:2 : does not exist
[  109.935426][ T4781] usb 1-1: USB disconnect, device number 7
[  109.953412][ T4785] usb 5-1: USB disconnect, device number 6
[  109.976026][ T6355] fido_id[6355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  110.470182][ T6354] XFS (loop3): Mounting V5 Filesystem
[  110.682251][ T6354] XFS (loop3): Ending clean mount
[  110.698454][ T6354] XFS (loop3): Quotacheck needed: Please wait.
[  110.731709][ T6398] isofs: isofs_export_get_parent(): child directory not normalized!
[  110.855713][ T6354] XFS (loop3): Quotacheck: Done.
[  110.989384][ T4191] XFS (loop3): Unmounting Filesystem
[  111.353165][ T6417] hfsplus: bad catalog entry type
[  111.617215][ T6429] set_capacity_and_notify: 3 callbacks suppressed
[  111.617230][ T6429] loop3: detected capacity change from 0 to 256
[  111.644713][ T6423] loop4: detected capacity change from 0 to 8192
[  111.710258][ T6423] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  111.735803][ T6429] FAT-fs (loop3): Directory bread(block 64) failed
[  111.744015][ T6429] FAT-fs (loop3): Directory bread(block 65) failed
[  111.750609][ T6429] FAT-fs (loop3): Directory bread(block 66) failed
[  111.751433][ T6423] REISERFS (device loop4): using ordered data mode
[  111.758187][ T6429] FAT-fs (loop3): Directory bread(block 67) failed
[  111.770752][ T6429] FAT-fs (loop3): Directory bread(block 68) failed
[  111.777948][ T6429] FAT-fs (loop3): Directory bread(block 69) failed
[  111.785599][ T6429] FAT-fs (loop3): Directory bread(block 70) failed
[  111.792435][ T6429] FAT-fs (loop3): Directory bread(block 71) failed
[  111.799404][ T6429] FAT-fs (loop3): Directory bread(block 72) failed
[  111.806293][ T6429] FAT-fs (loop3): Directory bread(block 73) failed
[  111.845281][ T6423] reiserfs: using flush barriers
[  111.897591][ T6403] loop0: detected capacity change from 0 to 40427
[  111.910848][ T6423] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  111.928282][ T6434] loop2: detected capacity change from 0 to 4096
[  111.938572][ T6423] REISERFS (device loop4): checking transaction log (loop4)
[  111.958461][ T6423] REISERFS (device loop4): Using tea hash to sort names
[  111.970732][ T6423] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  111.989038][ T6403] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  112.039729][ T6403] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  112.073765][ T6434] ntfs: volume version 3.1.
[  112.093519][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/347.tmp-b7:3' failed: Read-only file system
[  112.131880][ T6403] F2FS-fs (loop0): invalid crc value
[  112.160246][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/347.tmp-b7:3' failed: Read-only file system
[  112.170892][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/349.tmp-b7:0' failed: Read-only file system
[  112.198648][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/350.tmp-b7:2' failed: Read-only file system
[  112.216949][ T6434] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because this attribute type is not defined on the NTFS volume.  Possible corruption!  You should run chkdsk!
[  112.254198][ T6403] F2FS-fs (loop0): Found nat_bits in checkpoint
[  112.273507][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/351.tmp-b7:3' failed: Read-only file system
[  112.279305][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  112.317043][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-diskseq/348.tmp-b7:4' failed: Read-only file system
[  112.341379][ T6434] ntfs: (device loop2): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5).
[  112.369746][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:2' failed: Read-only file system
[  112.384216][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  112.424808][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0033-1233-1231-1234134124cd.tmp-b7:4' failed: Read-only file system
[  112.468386][ T6403] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  112.481827][ T6403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  112.619287][ T6425] loop1: detected capacity change from 0 to 32768
[  112.735403][ T6457] loop4: detected capacity change from 0 to 256
[  112.834269][ T6457] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  112.970132][ T6457] [syz.4.861/6457] FS: loop4 File: /file1 would truncate fibmap result
[  113.031703][ T5496] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  113.080273][   T26] audit: type=1326 audit(1769062862.853:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76778cb9 code=0x7ffc0000
[  113.102295][    C1] vkms_vblank_simulate: vblank timer overrun
[  113.134575][   T26] audit: type=1326 audit(1769062862.893:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbe76778cb9 code=0x7ffc0000
[  113.276256][   T26] audit: type=1326 audit(1769062862.893:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76778cb9 code=0x7ffc0000
[  113.348706][   T26] audit: type=1326 audit(1769062862.893:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76778cb9 code=0x7ffc0000
[  113.350278][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'.
[  113.417610][   T26] audit: type=1326 audit(1769062862.893:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe7673958e code=0x7ffc0000
[  113.423945][ T6482] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  113.446247][ T5496] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  113.454129][ T6486] loop1: detected capacity change from 0 to 1024
[  113.461703][ T5496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.463141][ T6482] team0: Device ipvlan2 is already an upper device of the team interface
[  113.484280][ T5496] usb 4-1: config 0 descriptor??
[  113.488079][   T26] audit: type=1326 audit(1769062862.893:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe7673958e code=0x7ffc0000
[  113.516506][   T26] audit: type=1326 audit(1769062862.893:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76778cb9 code=0x7ffc0000
[  113.544005][   T26] audit: type=1326 audit(1769062862.893:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76778cb9 code=0x7ffc0000
[  113.647024][ T6489] program syz.2.876 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  113.668479][  T144] hfsplus: b-tree write err: -5, ino 4
[  113.762527][ T5496] [drm] vendor descriptor length:6 data:06 5f 01 00 04 00 00 00 00 00 00
[  113.929583][ T6499] netlink: 100 bytes leftover after parsing attributes in process `syz.0.881'.
[  113.934466][ T6497] loop1: detected capacity change from 0 to 4096
[  113.965666][ T6497] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  113.981880][ T5496] [drm:udl_init] *ERROR* Selecting channel failed
[  114.047947][ T5496] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  114.056459][ T5496] [drm] Initialized udl on minor 2
[  114.093471][ T6497] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  114.101549][ T5496] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  114.136768][ T5496] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  114.169369][ T6501] loop4: detected capacity change from 0 to 1024
[  114.204122][ T5496] usb 4-1: USB disconnect, device number 9
[  114.240880][ T4785] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  114.242869][ T6501] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.882: lblock 2 mapped to illegal pblock 2 (length 1)
[  114.272207][ T6501] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.882: lblock 0 mapped to illegal pblock 48 (length 1)
[  114.303415][ T6501] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.882: Failed to acquire dquot type 0
[  114.305003][ T4785] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  114.317556][ T6501] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  114.336537][ T6501] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.882: mark_inode_dirty error
[  114.352710][ T6501] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  114.363329][ T6501] EXT4-fs (loop4): 1 orphan inode deleted
[  114.369143][ T6501] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  114.435413][ T4785] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  114.476527][ T6501] EXT4-fs (loop4): Ignoring removed orlov option
[  114.483175][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  114.495904][ T4283] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  114.502431][ T6501] EXT4-fs (loop4): can't enable nombcache during remount
[  114.579829][ T4283] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0
[  114.670331][ T4193] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0
[  114.701656][ T4193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  114.725716][ T4193] EXT4-fs error (device loop4): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error
[  114.906043][ T6522] netlink: 180 bytes leftover after parsing attributes in process `syz.4.886'.
[  114.941927][ T6521] netlink: 180 bytes leftover after parsing attributes in process `syz.4.886'.
[  115.011718][ T5496] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  115.074776][ T6507] loop0: detected capacity change from 0 to 40427
[  115.115310][ T6507] F2FS-fs (loop0): invalid crc value
[  115.228885][ T6518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.889 (6518)
[  115.244303][ T6507] F2FS-fs (loop0): Found nat_bits in checkpoint
[  115.311568][ T6518] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  115.329133][ T6531] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  115.357148][ T6518] BTRFS info (device loop2): metadata ratio 2
[  115.396046][ T6507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  115.403878][ T6533] ntfs: volume version 3.1.
[  115.404273][ T6518] BTRFS info (device loop2): allowing degraded mounts
[  115.431521][ T5496] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.441451][ T6518] BTRFS info (device loop2): force zlib compression, level 3
[  115.448887][ T6518] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  115.480256][ T5496] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  115.511829][ T5496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.526302][ T6527] attempt to access beyond end of device
[  115.526302][ T6527] loop0: rw=2049, want=45104, limit=40427
[  115.531275][ T6518] BTRFS info (device loop2): use zstd compression, level 3
[  115.557313][ T5496] usb 4-1: config 0 descriptor??
[  115.615472][ T6518] BTRFS info (device loop2): force clearing of disk cache
[  115.623925][ T6518] BTRFS info (device loop2): turning on flush-on-commit
[  115.630894][ T6518] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  115.641978][ T6518] BTRFS info (device loop2): trying to use backup root at mount time
[  115.650079][ T6518] BTRFS info (device loop2): using free space tree
[  115.743665][ T6518] BTRFS info (device loop2): has skinny extents
[  116.058247][ T6549] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none.
[  116.095886][ T6518] BTRFS info (device loop2): enabling ssd optimizations
[  116.099151][ T6549] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.117666][ T5496] uclogic 0003:5543:0064.000E: item fetching failed at offset 2/5
[  116.129654][ T5496] uclogic 0003:5543:0064.000E: parse failed
[  116.136773][ T5496] uclogic: probe of 0003:5543:0064.000E failed with error -22
[  116.151652][ T6518] BTRFS info (device loop2): clearing free space tree
[  116.165749][ T6518] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  116.189706][ T6570] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  116.211687][ T6570] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  116.215016][ T6518] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.240425][ T6570] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.903: Corrupt directory, running e2fsck is recommended
[  116.275598][ T6518] BTRFS info (device loop2): creating free space tree
[  116.285737][ T6518] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  116.295967][ T6518] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.314222][ T6570] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  116.322989][ T6570] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.903: corrupted in-inode xattr
[  116.351590][ T6570] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.903: couldn't read orphan inode 15 (err -117)
[  116.407302][ T4781] usb 4-1: USB disconnect, device number 10
[  116.419546][ T6570] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  116.509223][ T6576] tipc: Started in network mode
[  116.547743][ T6576] tipc: Node identity , cluster identity 4711
[  116.638642][ T6570] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  116.719800][ T6570] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  116.771823][ T6570] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.903: Corrupt directory, running e2fsck is recommended
[  116.795066][ T6570] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.903: path /169/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  116.814780][    C1] vkms_vblank_simulate: vblank timer overrun
[  116.840847][ T6570] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 8: comm syz.1.903: path /169/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  117.101498][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/375.tmp-b7:0' failed: Read-only file system
[  117.136752][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/374.tmp-b7:1' failed: Read-only file system
[  117.163236][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/374.tmp-b7:1' failed: Read-only file system
[  117.184073][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  117.238524][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/366.tmp-b7:2' failed: Read-only file system
[  117.265502][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/366.tmp-b7:2' failed: Read-only file system
[  117.304692][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/377.tmp-b7:2' failed: Read-only file system
[  117.363387][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  117.381363][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.396934][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'.
[  117.417604][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/351.tmp-b7:3' failed: Read-only file system
[  117.454370][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/377.tmp-b7:2' failed: Read-only file system
[  117.532254][ T6608] set_capacity_and_notify: 6 callbacks suppressed
[  117.532268][ T6608] loop2: detected capacity change from 0 to 1024
[  117.567318][ T6608] hfsplus: uid requires an argument
[  117.576067][ T6608] hfsplus: unable to parse mount options
[  117.765891][ T6618] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  117.809904][ T6618] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: value out of range 0 (89/830110067) at count 0
[  117.871387][ T6618] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: access overflow
[  117.956206][ T6620] loop1: detected capacity change from 0 to 8192
[  118.187835][ T6635] loop0: detected capacity change from 0 to 2048
[  118.291424][ T5496] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  118.305962][ T6637] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.347891][ T6635] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  118.391461][ T6635] Remounting filesystem read-only
[  118.414130][ T6616] loop2: detected capacity change from 0 to 32768
[  118.452280][ T4184] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  118.494879][ T6616] XFS: noikeep mount option is deprecated.
[  118.516339][ T6616] XFS (loop2): Mounting V5 Filesystem
[  118.594370][ T6651] loop0: detected capacity change from 0 to 1024
[  118.656124][ T6616] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  118.687451][ T6616] XFS (loop2): Starting recovery (logdev: internal)
[  118.702339][ T5496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.708389][ T6646] loop1: detected capacity change from 0 to 4096
[  118.718658][ T5496] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  118.728455][ T5496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.738622][ T5496] usb 5-1: config 0 descriptor??
[  118.752653][ T6288] hfsplus: b-tree write err: -5, ino 4
[  118.807394][ T6646] ntfs3: Invalid value for uid.
[  118.868809][ T6616] XFS (loop2): Ending recovery (logdev: internal)
[  118.886364][ T6616] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[  118.906365][ T6616] XFS (loop2): Failed to initialize disk quotas.
[  118.960107][ T6628] loop3: detected capacity change from 0 to 32768
[  119.081097][ T6628] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  119.115995][ T4781] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[  119.136827][ T6628] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  119.151717][ T4781] XFS (loop2): xfs_inactive_ifree: xfs_ifree returned error -117
[  119.189782][ T4781] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x1cc/0x3a0 (fs/xfs/xfs_inode.c:1639).  Shutting down filesystem.
[  119.215926][ T4781] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  119.228029][ T5496] smartjoyplus 0003:0925:8866.000F: item fetching failed at offset 3/7
[  119.244380][ T5496] smartjoyplus 0003:0925:8866.000F: parse failed
[  119.253109][ T5496] smartjoyplus: probe of 0003:0925:8866.000F failed with error -22
[  119.283930][ T6628] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  119.309995][ T4185] XFS (loop2): Unmounting Filesystem
[  119.449625][ T4445] usb 5-1: USB disconnect, device number 7
[  119.498750][ T6628] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  119.499699][ T6668] loop1: detected capacity change from 0 to 4096
[  119.662013][ T6671] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.690548][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  119.690569][   T26] audit: type=1800 audit(1769062869.463:16): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.945" name="file1" dev="loop1" ino=15 res=0 errno=0
[  119.931753][ T5496] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  119.950673][ T4785] kernel write not supported for file /input/mouse0 (pid: 4785 comm: kworker/1:13)
[  120.071885][ T6683] loop1: detected capacity change from 0 to 2048
[  120.204289][ T6683] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none.
[  120.247635][ T6702] netlink: 'syz.3.959': attribute type 1 has an invalid length.
[  120.502364][ T5496] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  120.519214][ T5496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.540317][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'.
[  120.551578][ T5496] usb 1-1: Product: syz
[  120.555761][ T5496] usb 1-1: Manufacturer: syz
[  120.574432][ T6720] netlink: 763 bytes leftover after parsing attributes in process `syz.4.968'.
[  120.585567][ T4785] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  120.594437][ T5496] usb 1-1: SerialNumber: syz
[  120.600715][ T5496] usb 1-1: config 0 descriptor??
[  120.658026][ T5496] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  120.659553][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'.
[  120.688297][ T5496] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  120.709988][ T4250] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  120.727080][ T5496] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  120.746280][ T5496] usb 1-1: media controller created
[  120.753632][ T4250] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  120.765220][ T5496] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.927008][ T5496] DVB: Unable to find symbol mt352_attach()
[  120.936440][ T6731] fido_id[6731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  120.972662][ T4785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.992284][ T6739] loop1: detected capacity change from 0 to 256
[  121.000305][ T4785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.027247][ T5496] DVB: Unable to find symbol nxt6000_attach()
[  121.034806][ T5496] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  121.045940][ T6739] exfat: Deprecated parameter 'utf8'
[  121.076575][ T6734] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  121.076721][ T6739] exfat: Deprecated parameter 'namecase'
[  121.092855][ T5496] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  121.113145][ T5496] dvb-usb: schedule remote query interval to 1000 msecs.
[  121.128169][ T5496] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  121.158778][ T6739] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  121.187077][ T5496] dvb-usb: bulk message failed: -22 (7/0)
[  121.195396][ T6744] ntfs3: loop3: ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[  121.200179][ T4785] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  121.229920][ T5496] dvb-usb: bulk message failed: -22 (7/0)
[  121.243837][ T4785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.282033][ T5496] usb 1-1: USB disconnect, device number 8
[  121.296664][ T4785] usb 3-1: Product: syz
[  121.327090][ T4785] usb 3-1: Manufacturer: syz
[  121.336579][ T4785] usb 3-1: SerialNumber: syz
[  121.442937][ T5496] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  121.678936][ T6770] tipc: Invalid UDP bearer configuration
[  121.678958][ T6770] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  121.704730][ T6766] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  121.784083][ T6773] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.796407][ T6766] EXT4-fs (loop1): orphan cleanup on readonly fs
[  121.831679][ T4785] usb 3-1: cannot find UAC_HEADER
[  121.839875][ T6766] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.988: inode #15: comm syz.1.988: iget: illegal inode #
[  121.877101][ T6766] EXT4-fs (loop1): Remounting filesystem read-only
[  121.897560][ T4785] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  121.906094][ T6766] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.988: couldn't read orphan inode 15 (err -117)
[  121.956020][ T6766] EXT4-fs (loop1): Remounting filesystem read-only
[  121.964224][ T6766] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none.
[  122.037131][ T4785] usb 3-1: USB disconnect, device number 6
[  122.100967][ T6779] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  122.123637][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/401.tmp-b7:1' failed: Read-only file system
[  122.141985][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/402.tmp-b7:3' failed: Read-only file system
[  122.183037][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-diskseq/403.tmp-b7:4' failed: Read-only file system
[  122.186740][ T4534] udevd[4534]: symlink '../../loop0' '/dev/disk/by-diskseq/406.tmp-b7:0' failed: Read-only file system
[  122.219439][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/401.tmp-b7:1' failed: Read-only file system
[  122.221051][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/404.tmp-b7:3' failed: Read-only file system
[  122.239518][ T4534] udevd[4534]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  122.252550][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system
[  122.318534][ T4177] udevd[4177]: symlink '../../loop1' '/dev/disk/by-diskseq/405.tmp-b7:1' failed: Read-only file system
[  122.365956][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/406.tmp-b7:0' failed: Read-only file system
[  122.386455][ T6781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  122.431443][ T6781] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.514548][ T6781] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.996: directory missing '..'
[  122.549870][ T6799] Zero length message leads to an empty skb
[  122.663052][ T6803] set_capacity_and_notify: 5 callbacks suppressed
[  122.663074][ T6803] loop4: detected capacity change from 0 to 128
[  122.720080][ T6790] loop3: detected capacity change from 0 to 32768
[  122.844509][ T6803] VFS: Found a Xenix FS (block size = 512) on device loop4
[  122.857503][ T6790] JBD2: Ignoring recovery information on journal
[  122.907639][ T6803] sysv_count_free_blocks: free block count was -2041545935, correcting to 3
[  122.989012][ T6790] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  123.066069][ T6803] sysv_count_free_inodes: unable to read inode table
[  123.171701][ T4193] sysv_free_block: trying to free block not in datazone
[  123.180106][ T4193] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  123.225708][ T6816] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  123.285439][ T6816] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  123.319645][ T6816] OCFS2: File system is now read-only.
[  123.333023][ T6822] netlink: 'syz.0.1013': attribute type 3 has an invalid length.
[  123.335212][ T6816] (syz.3.999,6816,0):ocfs2_search_one_group:1684 ERROR: status = -30
[  123.340949][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'.
[  123.369342][ T6816] (syz.3.999,6816,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30
[  123.404543][ T6816] (syz.3.999,6816,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  123.448938][ T6816] (syz.3.999,6816,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  123.488396][ T6816] (syz.3.999,6816,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  123.501503][ T6816] (syz.3.999,6816,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  123.509209][ T6816] (syz.3.999,6816,1):ocfs2_mknod:385 ERROR: status = -30
[  123.560570][ T6816] (syz.3.999,6816,0):ocfs2_mknod:502 ERROR: status = -30
[  123.572981][ T6816] (syz.3.999,6816,0):ocfs2_mkdir:659 ERROR: status = -30
[  123.674301][ T6839] loop1: detected capacity change from 0 to 256
[  123.751376][ T4191] ocfs2: Unmounting device (7,3) on (node local)
[  124.199193][ T6864] loop1: detected capacity change from 0 to 128
[  124.338746][ T6864] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.370403][ T6864] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.535727][ T6864] EXT4-fs (loop1): Ignoring removed orlov option
[  124.563462][ T6864] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option
[  124.611375][ T6864] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,sysvgroups,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: none.
[  124.902636][ T6862] loop2: detected capacity change from 0 to 40427
[  124.945080][ T6862] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(1024)
[  124.956085][ T6847] loop0: detected capacity change from 0 to 40427
[  124.984707][ T6862] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  125.031448][ T6862] F2FS-fs (loop2): invalid crc value
[  125.056033][ T6847] F2FS-fs (loop0): invalid crc value
[  125.066856][ T6859] loop4: detected capacity change from 0 to 32768
[  125.081911][ T6862] F2FS-fs (loop2): Found nat_bits in checkpoint
[  125.115003][ T6868] loop3: detected capacity change from 0 to 32768
[  125.182341][ T6847] F2FS-fs (loop0): Found nat_bits in checkpoint
[  125.368245][ T6862] F2FS-fs (loop2): Start checkpoint disabled!
[  125.406667][ T6847] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  125.426616][ T6862] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  125.452308][ T6847] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  125.472500][ T6862] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  125.573027][   T26] audit: type=1800 audit(1769062875.353:17): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1025" name="bus" dev="loop0" ino=10 res=0 errno=0
[  125.668858][ T4184] attempt to access beyond end of device
[  125.668858][ T4184] loop0: rw=2049, want=45104, limit=40427
[  125.756369][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'.
[  125.791328][ T4445] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  125.828200][  T144] attempt to access beyond end of device
[  125.828200][  T144] loop2: rw=2049, want=40976, limit=40427
[  125.831823][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'.
[  126.041331][ T4445] usb 5-1: Using ep0 maxpacket: 32
[  126.161597][ T4445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.223826][ T4445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.308420][ T6896] loop1: detected capacity change from 0 to 32768
[  126.381660][ T4445] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  126.401010][ T4445] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[  126.459187][ T4445] usb 5-1: Manufacturer: syz
[  126.491761][ T6920] loop3: detected capacity change from 0 to 65536
[  126.507591][ T4445] usb 5-1: config 0 descriptor??
[  126.558030][ T6896] XFS (loop1): Mounting V5 Filesystem
[  126.613488][ T6920] XFS (loop3): Mounting V5 Filesystem
[  126.703156][ T6920] XFS (loop3): totally zeroed log
[  126.709917][ T6920] XFS (loop3): Internal error hlen <= 0 || hlen > bufsize at line 2956 of file fs/xfs/xfs_log_recover.c.  Caller xlog_valid_rec_header+0x22a/0x360
[  126.725380][ T6920] CPU: 1 PID: 6920 Comm: syz.3.1045 Not tainted syzkaller #0
[  126.732770][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  126.742845][ T6920] Call Trace:
[  126.746126][ T6920]  <TASK>
[  126.749062][ T6920]  dump_stack_lvl+0x188/0x250
[  126.753749][ T6920]  ? show_regs_print_info+0x20/0x20
[  126.758978][ T6920]  xfs_corruption_error+0x117/0x170
[  126.760010][ T6944] mkiss: ax0: crc mode is auto.
[  126.764199][ T6920]  ? xlog_valid_rec_header+0x22a/0x360
[  126.764231][ T6920]  xlog_valid_rec_header+0x2b1/0x360
[  126.764248][ T6920]  ? xlog_valid_rec_header+0x22a/0x360
[  126.764267][ T6920]  xlog_do_recovery_pass+0x8ba/0xd50
[  126.764297][ T6920]  ? xlog_do_io+0x340/0x340
[  126.764311][ T6920]  ? kasan_quarantine_put+0xd4/0x220
[  126.764347][ T6920]  xlog_verify_head+0x137/0x430
[  126.778544][ T6896] XFS (loop1): Ending clean mount
[  126.780357][ T6920]  xlog_find_tail+0x6b6/0x9f0
[  126.780397][ T6920]  xlog_recover+0x48/0x410
[  126.816981][ T6896] XFS (loop1): Quotacheck needed: Please wait.
[  126.819759][ T6920]  xfs_log_mount+0x393/0x6b0
[  126.819790][ T6920]  xfs_mountfs+0xb37/0x1b30
[  126.835018][ T6920]  ? xfs_default_resblks+0x70/0x70
[  126.840153][ T6920]  ? rcu_is_watching+0x11/0xa0
[  126.844927][ T6920]  ? trace_xfs_inode_timestamp_range+0x84/0x1d0
[  126.851178][ T6920]  xfs_fs_fill_super+0x11a4/0x13f0
[  126.856303][ T6920]  get_tree_bdev+0x3f1/0x610
[  126.860911][ T6920]  ? xfs_mount_set_dax_mode+0x100/0x100
[  126.866469][ T6920]  vfs_get_tree+0x88/0x270
[  126.870898][ T6920]  do_new_mount+0x24a/0xa40
[  126.875418][ T6920]  __se_sys_mount+0x2e3/0x3d0
[  126.880109][ T6920]  ? __x64_sys_mount+0xc0/0xc0
[  126.884991][ T6920]  ? lockdep_hardirqs_on+0x94/0x140
[  126.890202][ T6920]  ? __x64_sys_mount+0x1c/0xc0
[  126.894989][ T6920]  do_syscall_64+0x4c/0xa0
[  126.899416][ T6920]  ? clear_bhb_loop+0x30/0x80
[  126.904099][ T6920]  ? clear_bhb_loop+0x30/0x80
[  126.908802][ T6920]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  126.914711][ T6920] RIP: 0033:0x7f2ffa279f4a
[  126.919151][ T6920] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.938767][ T6920] RSP: 002b:00007f2ff84d3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  126.947210][ T6920] RAX: ffffffffffffffda RBX: 00007f2ff84d3ee0 RCX: 00007f2ffa279f4a
[  126.955195][ T6920] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f2ff84d3ea0
[  126.963184][ T6920] RBP: 0000200000000000 R08: 00007f2ff84d3ee0 R09: 0000000000000000
[  126.971167][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040
[  126.979149][ T6920] R13: 00007f2ff84d3ea0 R14: 000000000000b911 R15: 00002000000000c0
[  126.987152][ T6920]  </TASK>
[  126.990253][    C1] vkms_vblank_simulate: vblank timer overrun
[  126.996673][ T6896] XFS (loop1): Quotacheck: Done.
[  126.998674][ T6920] XFS (loop3): Corruption detected. Unmount and run xfs_repair
[  127.010318][ T6920] XFS (loop3): Torn write (CRC failure) detected at log block 0x928. Truncating head block from 0x0.
[  127.025156][ T6920] XFS (loop3): failed to locate log tail
[  127.030829][ T6920] XFS (loop3): log mount/recovery failed: error -74
[  127.033685][ T4445] ft260 0003:0403:6030.0011: unknown main item tag 0x7
[  127.049340][ T6948] netlink: 'syz.2.1049': attribute type 298 has an invalid length.
[  127.097854][ T4445] ft260 0003:0403:6030.0011: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  127.109586][ T6920] XFS (loop3): log mount failed
[  127.210096][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/423.tmp-b7:2' failed: Read-only file system
[  127.235202][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system
[  127.252288][ T4445] ft260 0003:0403:6030.0011: failed to retrieve chip version
[  127.272796][ T4183] XFS (loop1): Unmounting Filesystem
[  127.279047][ T4445] ft260: probe of 0003:0403:6030.0011 failed with error -71
[  127.299612][ T4445] usb 5-1: USB disconnect, device number 8
[  127.346697][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system
[  127.403186][ T6953] fido_id[6953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  127.440879][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/426.tmp-b7:3' failed: Read-only file system
[  127.511459][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system
[  127.554966][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/426.tmp-b7:3' failed: Read-only file system
[  127.640972][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/427.tmp-b7:3' failed: Read-only file system
[  127.690762][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system
[  127.766567][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system
[  127.795455][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/425.tmp-b7:1' failed: Read-only file system
[  127.910600][ T6969] usb usb8: usbfs: process 6969 (syz.0.1060) did not claim interface 0 before use
[  128.134198][ T6977] loop0: detected capacity change from 0 to 512
[  128.167266][ T6951] loop2: detected capacity change from 0 to 32768
[  128.247116][ T6988] tipc: Started in network mode
[  128.265865][ T6988] tipc: Node identity 0000000000002d210000000000000001, cluster identity 6
[  128.286778][ T6977] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  128.326477][ T6992] loop4: detected capacity change from 0 to 512
[  128.334321][ T6988] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  128.343217][ T6977] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.407598][ T6994] loop3: detected capacity change from 0 to 512
[  128.417481][ T6992] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  128.451106][ T6992] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  128.464428][ T4250] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  128.466170][ T6992] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1069: Corrupt directory, running e2fsck is recommended
[  128.503936][ T6992] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  128.556816][ T6992] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1069: corrupted in-inode xattr
[  128.577877][ T6992] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1069: couldn't read orphan inode 15 (err -117)
[  128.627123][ T6999] sp0: Synchronizing with TNC
[  128.634803][ T6994] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  128.657024][ T6992] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  128.663389][ T6994] System zones: 
[  128.704230][ T6992] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  128.732111][ T6992] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  128.750410][ T6994] 0-2, 18-18, 34-34
[  128.761454][ T4250] usb 2-1: Using ep0 maxpacket: 32
[  128.798312][ T6994] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1071: bg 0: block 248: padding at end of block bitmap is not set
[  128.825463][ T6992] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1069: Corrupt directory, running e2fsck is recommended
[  128.843522][ T6994] Quota error (device loop3): write_blk: dquota write failed
[  128.850988][ T6994] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  128.862922][ T6992] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1069: path /220/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  128.883510][ T6994] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.1071: Failed to acquire dquot type 1
[  128.885376][ T4250] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  128.907767][ T6992] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 8: comm syz.4.1069: path /220/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  128.930227][ T4250] usb 2-1: config 0 has no interface number 0
[  128.938185][ T6994] EXT4-fs (loop3): 1 truncate cleaned up
[  128.951551][ T6994] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback.
[  128.971376][ T4250] usb 2-1: config 0 interface 12 has no altsetting 0
[  128.972268][ T6994] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.131716][ T4250] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  129.185837][ T7003] loop0: detected capacity change from 0 to 32768
[  129.194835][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.216783][ T4250] usb 2-1: Product: syz
[  129.220986][ T4250] usb 2-1: Manufacturer: syz
[  129.246236][ T7003] attempt to access beyond end of device
[  129.246236][ T7003] loop0: rw=0, want=34359738368, limit=32768
[  129.258384][ T7003] metapage_read_end_io: I/O error
[  129.264454][ T7003] read_mapping_page failed!
[  129.269004][ T7003] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  129.275437][ T7003] Mount JFS Failure: -5
[  129.279602][ T7003] jfs_mount failed w/return code = -5
[  129.327950][ T4250] usb 2-1: SerialNumber: syz
[  129.384310][ T4250] usb 2-1: config 0 descriptor??
[  129.455017][ T7017] loop4: detected capacity change from 0 to 2048
[  129.527456][ T7017] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  129.640161][ T7025] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.834746][ T7037] loop2: detected capacity change from 0 to 512
[  129.927853][ T5496] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  129.960703][ T7037] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2756: inode #11: comm syz.2.1090: corrupted xattr block 95
[  130.015008][ T7037] EXT4-fs (loop2): Remounting filesystem read-only
[  130.024529][ T7037] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  130.061119][ T7037] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1090: bg 0: block 7: invalid block bitmap
[  130.096472][ T7037] EXT4-fs (loop2): Remounting filesystem read-only
[  130.116485][ T7037] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  130.182378][ T7037] EXT4-fs (loop2): Remounting filesystem read-only
[  130.189686][ T7037] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2922: inode #11: comm syz.2.1090: corrupted xattr block 95
[  130.222255][ T7037] EXT4-fs (loop2): Remounting filesystem read-only
[  130.234079][ T7042] loop4: detected capacity change from 0 to 32768
[  130.239057][ T7037] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117)
[  130.251720][ T7037] EXT4-fs (loop2): 1 orphan inode deleted
[  130.257480][ T7037] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,. Quota mode: none.
[  130.301403][ T4250] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  130.312199][ T4250] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  130.318683][ T7042] XFS (loop4): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  130.323666][ T4250] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  130.341562][ T5496] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  130.356876][ T5496] usb 4-1: config 0 has no interface number 0
[  130.356962][ T4250] f81534: probe of 2-1:0.12 failed with error -71
[  130.371326][ T5496] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  130.390587][ T5496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.421888][ T4250] usb 2-1: USB disconnect, device number 8
[  130.428501][ T5496] usb 4-1: config 0 descriptor??
[  130.493787][ T5496] usb 4-1: selecting invalid altsetting 1
[  130.500960][ T5496] dvb_ttusb_budget: ttusb_init_controller: error
[  130.539340][ T7053] loop2: detected capacity change from 0 to 256
[  130.545627][ T5496] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  130.619522][ T5496] DVB: Unable to find symbol cx22700_attach()
[  130.742925][ T7051] loop0: detected capacity change from 0 to 32768
[  130.798426][ T5496] DVB: Unable to find symbol tda10046_attach()
[  130.805846][ T5496] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  130.824115][ T5496] usb 4-1: USB disconnect, device number 11
[  130.900904][ T7051] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  131.007633][ T7066] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  131.056003][ T4184] ocfs2: Unmounting device (7,0) on (node local)
[  131.070346][ T7068] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  131.112161][ T7066] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrquota,errors=remount-ro,dioread_lock,noquota,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none.
[  131.204550][ T7066] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1101: bg 0: block 234: padding at end of block bitmap is not set
[  131.240780][ T7068] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  131.276116][ T7066] EXT4-fs (loop1): Remounting filesystem read-only
[  131.637026][ T7091] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  131.761441][ T4445] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  131.832701][ T5496] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  132.121466][ T4445] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  132.140767][ T4445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.165501][ T4445] usb 5-1: config 0 descriptor??
[  132.217242][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/455.tmp-b7:1' failed: Read-only file system
[  132.226272][ T5496] usb 4-1: config 0 has an invalid interface number: 49 but max is 0
[  132.240332][ T5496] usb 4-1: config 0 has no interface number 0
[  132.263928][   T26] audit: type=1326 audit(1769062882.043:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.0.1117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca9ca8ecb9 code=0x0
[  132.265011][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/455.tmp-b7:1' failed: Read-only file system
[  132.285775][ T5496] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad
[  132.320558][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/447.tmp-b7:2' failed: Read-only file system
[  132.322432][ T5496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.339315][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/455.tmp-b7:1' failed: Read-only file system
[  132.360212][ T5496] usb 4-1: config 0 descriptor??
[  132.377370][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/456.tmp-b7:1' failed: Read-only file system
[  132.411524][ T4445] [drm] vendor descriptor length:6 data:06 5f 01 00 04 00 00 00 00 00 00
[  132.430194][ T4177] udevd[4177]: symlink '../../loop2' '/dev/disk/by-diskseq/447.tmp-b7:2' failed: Read-only file system
[  132.441768][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/456.tmp-b7:1' failed: Read-only file system
[  132.499886][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/456.tmp-b7:1' failed: Read-only file system
[  132.537203][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/447.tmp-b7:2' failed: Read-only file system
[  132.583502][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/456.tmp-b7:1' failed: Read-only file system
[  132.641527][ T4445] [drm:udl_init] *ERROR* Selecting channel failed
[  132.649605][ T4781] usb 4-1: USB disconnect, device number 12
[  132.668641][ T4445] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  132.706454][ T4445] [drm] Initialized udl on minor 2
[  132.733846][ T4445] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  132.748281][ T4445] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  132.753610][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.760569][ T4445] usb 5-1: USB disconnect, device number 9
[  132.761136][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.781811][ T4250] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  132.791843][ T4250] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  132.800720][ T4250] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  132.998034][ T5496] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  133.120827][ T7139] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.188754][ T7138] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  133.235163][ T7138] Remounting filesystem read-only
[  133.240319][ T7138] NILFS error (device loop1): nilfs_readdir: bad page in #2
[  133.514955][ T7155] syz.3.1142 (7155): /proc/7154/oom_adj is deprecated, please use /proc/7154/oom_score_adj instead.
[  133.544580][ T5496] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17
[  133.564254][ T5496] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[  133.584700][ T5496] usb 3-1: Product: syz
[  133.601535][ T5496] usb 3-1: Manufacturer: syz
[  133.608644][ T5496] usb 3-1: SerialNumber: syz
[  133.645738][ T5496] usb 3-1: config 0 descriptor??
[  133.652801][ T7164] set_capacity_and_notify: 5 callbacks suppressed
[  133.652815][ T7164] loop3: detected capacity change from 0 to 16
[  133.690018][ T5496] ch341 3-1:0.0: ch341-uart converter detected
[  133.723012][ T7168] loop1: detected capacity change from 0 to 512
[  133.774432][ T7164] erofs: (device loop3): mounted with root inode @ nid 36.
[  133.813011][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.856070][ T7168] EXT4-fs (loop1): 1 truncate cleaned up
[  133.873901][ T7164] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.889782][ T7168] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback.
[  133.994697][ T7164] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  134.070378][ T7173] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1150'.
[  134.093342][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'.
[  134.179807][ T7160] loop4: detected capacity change from 0 to 32768
[  134.209559][ T7175] sp0: Synchronizing with TNC
[  134.386406][ T5496] usb 3-1: failed to send control message: -71
[  134.406480][ T5496] ch341-uart: probe of ttyUSB0 failed with error -71
[  134.437073][ T5496] usb 3-1: USB disconnect, device number 7
[  134.459923][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'.
[  134.482278][ T5496] ch341 3-1:0.0: device disconnected
[  134.565215][ T7195] loop3: detected capacity change from 0 to 4096
[  134.657944][ T7195] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  134.708567][ T7195] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  134.725645][ T7195] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  134.738360][ T7195] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  134.754661][ T7195] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  134.767514][ T7195] ntfs: volume version 3.1.
[  134.776999][ T7195] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  134.790375][ T7195] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  134.804649][ T7195] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  134.816066][ T7195] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  135.286755][ T7227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1176'.
[  135.432591][ T7234] loop0: detected capacity change from 0 to 2048
[  135.447803][ T7237] loop2: detected capacity change from 0 to 2048
[  135.500401][ T7234] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  135.521449][ T7237] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  135.562988][ T7237] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  135.584205][ T7248] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.622277][ T7237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.060593][ T7266] loop1: detected capacity change from 0 to 256
[  136.217691][ T7266] FAT-fs (loop1): Directory bread(block 64) failed
[  136.236121][ T7266] FAT-fs (loop1): Directory bread(block 65) failed
[  136.281610][ T7266] FAT-fs (loop1): Directory bread(block 66) failed
[  136.304103][ T7266] FAT-fs (loop1): Directory bread(block 67) failed
[  136.347095][ T7266] FAT-fs (loop1): Directory bread(block 68) failed
[  136.370435][ T7266] FAT-fs (loop1): Directory bread(block 69) failed
[  136.400896][ T7266] FAT-fs (loop1): Directory bread(block 70) failed
[  136.423749][ T7266] FAT-fs (loop1): Directory bread(block 71) failed
[  136.430376][ T7266] FAT-fs (loop1): Directory bread(block 72) failed
[  136.483251][ T7266] FAT-fs (loop1): Directory bread(block 73) failed
[  136.716982][ T7243] loop4: detected capacity change from 0 to 32768
[  136.831395][ T7243] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  136.870123][ T7243] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  136.930711][ T7243] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  137.042687][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'.
[  137.074266][ T7243] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  137.084441][ T7303] block nbd0: Unsupported socket: shutdown callout must be supported.
[  137.238830][ T7305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1213'.
[  137.278911][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-diskseq/472.tmp-b7:4' failed: Read-only file system
[  137.349145][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-diskseq/472.tmp-b7:4' failed: Read-only file system
[  137.387602][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-diskseq/473.tmp-b7:1' failed: Read-only file system
[  137.407458][ T7286] loop3: detected capacity change from 0 to 32768
[  137.463982][ T7297] loop0: detected capacity change from 0 to 32768
[  137.476870][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-diskseq/473.tmp-b7:1' failed: Read-only file system
[  137.557375][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-diskseq/474.tmp-b7:4' failed: Read-only file system
[  137.594503][ T7286] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  137.619504][ T7297] ialloc: diAlloc returned -5!
[  137.661860][ T7299] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1210 (7299)
[  137.662965][ T4177] udevd[4177]: symlink '../../loop1' '/dev/disk/by-diskseq/473.tmp-b7:1' failed: Read-only file system
[  137.777615][ T7299] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  137.780264][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/476.tmp-b7:0' failed: Read-only file system
[  137.790693][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/477.tmp-b7:2' failed: Read-only file system
[  137.818661][ T4191] ocfs2: Unmounting device (7,3) on (node local)
[  137.818973][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/475.tmp-b7:3' failed: Read-only file system
[  137.842494][ T7299] BTRFS info (device loop2): force zlib compression, level 3
[  137.859903][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:2' failed: Read-only file system
[  137.880002][ T7299] BTRFS info (device loop2): force clearing of disk cache
[  137.899328][ T7299] BTRFS info (device loop2): setting nodatasum
[  137.908276][ T7299] BTRFS info (device loop2): enabling disk space caching
[  137.925771][ T7299] BTRFS info (device loop2): disk space caching is enabled
[  137.965529][ T7299] BTRFS info (device loop2): has skinny extents
[  138.331634][ T7299] BTRFS info (device loop2): clearing free space tree
[  138.338531][ T7299] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.439800][ T7299] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.634920][ T7347] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  138.672186][ T7347] UDF-fs: Scanning with blocksize 512 failed
[  138.688614][ T7317] ERROR: (device loop1): diWrite: ixpxd invalid
[  138.688614][ T7317] 
[  138.756349][ T7317] ERROR: (device loop1): remounting filesystem as read-only
[  138.774907][ T7347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.813610][ T7317] ERROR: (device loop1): txCommit: 
[  138.813610][ T7317] 
[  138.902104][ T7348] set_capacity_and_notify: 4 callbacks suppressed
[  138.902119][ T7348] loop4: detected capacity change from 0 to 8192
[  139.152687][ T7348] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  139.241940][ T7348] REISERFS (device loop4): using ordered data mode
[  139.248506][ T7348] reiserfs: using flush barriers
[  139.341082][ T7348] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  139.421063][ T7348] REISERFS (device loop4): checking transaction log (loop4)
[  139.459036][ T7348] REISERFS (device loop4): Using rupasov hash to sort names
[  139.496747][ T7348] REISERFS (device loop4): using 3.5.x disk format
[  139.530149][ T7348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.568260][ T7348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.596780][ T7348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.646476][ T7348] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  139.702589][ T7348] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  139.754781][ T7348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.798422][ T7348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.838828][ T7381] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.969186][ T7364] loop2: detected capacity change from 0 to 32768
[  140.140013][ T7364] XFS (loop2): Mounting V5 Filesystem
[  140.202829][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1249'.
[  140.249354][ T7364] XFS (loop2): Ending clean mount
[  140.280913][ T7364] XFS (loop2): Quotacheck needed: Please wait.
[  140.417304][ T7364] XFS (loop2): Quotacheck: Done.
[  140.475258][ T4185] XFS (loop2): Unmounting Filesystem
[  140.541698][   T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  140.741662][ T7417] loop3: detected capacity change from 0 to 32768
[  140.811514][   T23] usb 5-1: Using ep0 maxpacket: 16
[  140.849508][ T7417] XFS (loop3): Mounting V5 Filesystem
[  140.951624][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  140.961180][   T23] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  140.976752][   T23] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  140.987827][   T23] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  140.997849][ T7417] XFS (loop3): Ending clean mount
[  140.998598][   T23] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  141.014227][   T23] usb 5-1: config 1 interface 0 has no altsetting 0
[  141.022020][   T23] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  141.031320][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.113057][   T23] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  141.136261][ T7421] loop1: detected capacity change from 0 to 40427
[  141.158091][ T4191] XFS (loop3): Unmounting Filesystem
[  141.200997][ T7421] F2FS-fs (loop1): Found nat_bits in checkpoint
[  141.297543][ T7421] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  141.313908][ T7421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  141.352898][   T23] scsi host1: usb-storage 5-1:1.0
[  141.405833][ T4183] attempt to access beyond end of device
[  141.405833][ T4183] loop1: rw=2049, want=45104, limit=40427
[  141.529849][ T7446] wireguard: wg0: Could not create IPv4 socket
[  141.547017][   T23] usb 5-1: USB disconnect, device number 10
[  141.597727][ T7448] loop2: detected capacity change from 0 to 512
[  141.716594][ T7448] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1261: inode has both inline data and extents flags
[  141.748910][ T7448] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1261: couldn't read orphan inode 15 (err -117)
[  141.794981][ T7456] loop1: detected capacity change from 0 to 64
[  141.814985][ T7448] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,prjquota,auto_da_alloc,nobarrier,noblock_validity,,errors=continue. Quota mode: writeback.
[  142.150531][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'.
[  142.283079][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/493.tmp-b7:3' failed: Read-only file system
[  142.305181][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/497.tmp-b7:1' failed: Read-only file system
[  142.340228][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'.
[  142.346499][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/493.tmp-b7:3' failed: Read-only file system
[  142.370172][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/486.tmp-b7:0' failed: Read-only file system
[  142.378212][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/493.tmp-b7:3' failed: Read-only file system
[  142.528656][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'.
[  142.599468][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-diskseq/489.tmp-b7:4' failed: Read-only file system
[  142.681999][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-diskseq/489.tmp-b7:4' failed: Read-only file system
[  142.769368][ T7495] loop4: detected capacity change from 0 to 1024
[  142.869351][ T7487] loop3: detected capacity change from 0 to 32768
[  142.895044][ T7489] loop0: detected capacity change from 0 to 32768
[  142.908395][ T7485] loop1: detected capacity change from 0 to 32768
[  142.980800][ T7489] JBD2: Ignoring recovery information on journal
[  143.011612][ T4534] udevd[4534]: symlink '../../loop2' '/dev/disk/by-diskseq/498.tmp-b7:2' failed: Read-only file system
[  143.034924][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-diskseq/499.tmp-b7:4' failed: Read-only file system
[  143.089264][ T4281] hfsplus: b-tree write err: -5, ino 4
[  143.111816][ T7487] XFS (loop3): Mounting V5 Filesystem
[  143.123593][ T7485] XFS (loop1): Mounting V5 Filesystem
[  143.141132][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  143.153404][ T7489] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  143.191033][ T7517] sp0: Synchronizing with TNC
[  143.199982][ T7512] [U] è
[  143.325116][ T7487] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  143.448492][ T7487] XFS (loop3): Starting recovery (logdev: internal)
[  143.449234][ T4184] ocfs2: Unmounting device (7,0) on (node local)
[  143.470044][ T7485] XFS (loop1): Ending clean mount
[  143.501567][ T7485] XFS (loop1): Quotacheck needed: Please wait.
[  143.553879][ T7487] XFS (loop3): Ending recovery (logdev: internal)
[  143.651061][ T7485] XFS (loop1): Quotacheck: Done.
[  143.765196][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  143.765209][   T26] audit: type=1800 audit(1769062893.543:19): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1278" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  143.796661][ T4183] XFS (loop1): Unmounting Filesystem
[  143.816125][ T4191] XFS (loop3): Unmounting Filesystem
[  144.057455][ T7515] loop2: detected capacity change from 0 to 40427
[  144.057912][ T7532] sp0: Synchronizing with TNC
[  144.108251][ T7515] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff
[  144.136167][ T7515] F2FS-fs (loop2): invalid crc value
[  144.282980][ T7515] F2FS-fs (loop2): Found nat_bits in checkpoint
[  144.327959][ T7536] loop4: detected capacity change from 0 to 1024
[  144.361551][ T7515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.482192][ T7536] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,minixdf,noinit_itable,nogrpid,block_validity,jqfmt=vfsv0,nojournal_checksum,errors=remount-ro,jqfmt=vfsold,jqfmt=vfsv0,data_err=ignore,. Quota mode: none.
[  144.577770][ T7536] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.1292: inode #12: comm syz.4.1292: iget: illegal inode #
[  144.618632][ T7536] EXT4-fs (loop4): Remounting filesystem read-only
[  144.627538][ T7536] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.1292: inode #12: comm syz.4.1292: iget: illegal inode #
[  144.661510][ T7536] EXT4-fs (loop4): Remounting filesystem read-only
[  144.881629][ T4445] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  145.146698][ T7581] loop0: detected capacity change from 0 to 256
[  145.230070][ T7581] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  145.245979][ T4445] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.265648][ T4445] usb 2-1: config 0 interface 0 has no altsetting 0
[  145.291040][ T7581] FAT-fs (loop0): Filesystem has been set read-only
[  145.298021][ T4445] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  145.298048][ T4445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.316934][ T4445] usb 2-1: config 0 descriptor??
[  145.358441][ T7581] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  145.391413][ T7581] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  145.433513][   T26] audit: type=1800 audit(1769062895.203:20): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1310" name="file1" dev="loop0" ino=1048661 res=0 errno=0
[  145.464937][ T7594] loop3: detected capacity change from 0 to 1024
[  145.507718][ T7598] netlink: 'syz.4.1319': attribute type 4 has an invalid length.
[  145.651356][ T7574] loop2: detected capacity change from 0 to 32768
[  145.740079][ T7574] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1307 (7574)
[  145.803643][ T4445] uclogic 0003:145F:0212.0012: interface is invalid, ignoring
[  145.821704][ T7611] netlink: 'syz.3.1323': attribute type 3 has an invalid length.
[  145.869020][ T7574] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  145.891772][   T23] kernel write not supported for file /sg0 (pid: 23 comm: kworker/1:1)
[  145.919642][ T7574] BTRFS info (device loop2): using free space tree
[  145.944206][ T7574] BTRFS info (device loop2): has skinny extents
[  146.018085][ T4445] usb 2-1: USB disconnect, device number 9
[  146.084338][ T7639] loop3: detected capacity change from 0 to 64
[  146.095538][ T7630] loop0: detected capacity change from 0 to 2048
[  146.124337][ T7574] BTRFS info (device loop2): enabling ssd optimizations
[  146.211011][ T7630] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  146.255311][ T7630] NILFS (loop0): mounting unchecked fs
[  146.372050][ T7630] NILFS (loop0): recovery complete
[  146.411136][ T4551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4551)
[  146.431969][ T7649] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.519936][ T7651] loop3: detected capacity change from 0 to 2048
[  146.705600][ T7651] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  146.767825][ T7651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.036753][ T7669] loop0: detected capacity change from 0 to 64
[  147.053500][ T7666] loop3: detected capacity change from 0 to 1024
[  147.105518][ T7666] overlayfs: unrecognized mount option "\fsplus" or missing value
[  147.186702][ T7669] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  147.298245][ T7673] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1344'.
[  147.320870][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/524.tmp-b7:3' failed: Read-only file system
[  147.344678][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/522.tmp-b7:0' failed: Read-only file system
[  147.407934][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/524.tmp-b7:3' failed: Read-only file system
[  147.458171][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/510.tmp-b7:4' failed: Read-only file system
[  147.478706][ T7679] FAT-fs (loop3): Directory bread(block 64) failed
[  147.511389][ T7679] FAT-fs (loop3): Directory bread(block 65) failed
[  147.515538][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/522.tmp-b7:0' failed: Read-only file system
[  147.537799][ T7679] FAT-fs (loop3): Directory bread(block 66) failed
[  147.555588][ T7684] openvswitch: netlink: Actions may not be safe on all matching packets
[  147.571913][ T7679] FAT-fs (loop3): Directory bread(block 67) failed
[  147.573364][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/525.tmp-b7:3' failed: Read-only file system
[  147.578573][ T7679] FAT-fs (loop3): Directory bread(block 68) failed
[  147.604728][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/510.tmp-b7:4' failed: Read-only file system
[  147.628180][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/522.tmp-b7:0' failed: Read-only file system
[  147.696287][ T7679] FAT-fs (loop3): Directory bread(block 69) failed
[  147.699192][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/527.tmp-b7:0' failed: Read-only file system
[  147.725550][ T7679] FAT-fs (loop3): Directory bread(block 70) failed
[  147.743777][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/510.tmp-b7:4' failed: Read-only file system
[  147.771639][ T7679] FAT-fs (loop3): Directory bread(block 71) failed
[  147.796541][ T7679] FAT-fs (loop3): Directory bread(block 72) failed
[  147.818367][ T7679] FAT-fs (loop3): Directory bread(block 73) failed
[  147.910744][ T7691] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  147.981660][ T7691] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1352: inode has both inline data and extents flags
[  148.073956][ T7691] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1352: couldn't read orphan inode 15 (err -117)
[  148.108451][ T7691] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,block_validity,debug_want_extra_isize=0x0000000000000068,usrjquota=,resuid=0x0000000000000000,lazytime,noblock_validity,usrquota,,errors=continue. Quota mode: writeback.
[  148.133828][    C0] vkms_vblank_simulate: vblank timer overrun
[  148.210378][ T7708] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.538093][ T7693] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.1353 (7693)
[  148.559922][ T7716] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  148.584460][ T7716] REISERFS (device loop2): using ordered data mode
[  148.591084][ T7716] reiserfs: using flush barriers
[  148.655235][ T7716] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  148.672758][ T7716] REISERFS (device loop2): checking transaction log (loop2)
[  148.683443][ T4783] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  148.700494][ T7716] REISERFS (device loop2): Using rupasov hash to sort names
[  148.719401][ T7716] REISERFS (device loop2): using 3.5.x disk format
[  148.740653][ T7693] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  148.749018][ T7716] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  148.794174][ T7693] BTRFS info (device loop1): enabling ssd optimizations
[  148.831301][ T7693] BTRFS info (device loop1): not using ssd optimizations
[  148.838434][ T7693] BTRFS info (device loop1): turning off barriers
[  148.839149][ T7716] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  148.865758][ T7693] BTRFS info (device loop1): using free space tree
[  148.886120][ T7693] BTRFS info (device loop1): has skinny extents
[  148.898401][ T7716] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  148.946516][ T7716] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  148.961449][ T4783] usb 4-1: Using ep0 maxpacket: 16
[  149.013433][ T7716] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  149.045881][ T7740] hpfs: bad mount options.
[  149.100802][ T7716] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.112831][ T7716] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.123148][ T4783] usb 4-1: config 1 has an invalid interface number: 214 but max is 0
[  149.129709][ T7716] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.171531][ T4783] usb 4-1: config 1 has no interface number 0
[  149.206289][ T4783] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  149.233823][ T4783] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64
[  149.254537][ T4783] usb 4-1: config 1 interface 214 has no altsetting 0
[  149.451792][ T4783] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  149.479042][ T4783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.500609][ T4783] usb 4-1: Product: syz
[  149.504889][ T4783] usb 4-1: Manufacturer: syz
[  149.512328][ T4783] usb 4-1: SerialNumber: syz
[  149.558777][ T7726] set_capacity_and_notify: 7 callbacks suppressed
[  149.558790][ T7726] loop4: detected capacity change from 0 to 32768
[  149.571536][ T7718] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  149.599142][ T7718] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  149.653653][ T4783] ums-alauda 4-1:1.214: USB Mass Storage device detected
[  149.683622][ T7726] non-latin1 character 0xffff found in JFS file name
[  149.690877][ T7726] mount with iocharset=utf8 to access
[  149.731474][ T4783] scsi host1: usb-storage 4-1:1.214
[  149.952978][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'.
[  149.972872][ T4788] usb 4-1: USB disconnect, device number 13
[  150.117310][ T7777] loop1: detected capacity change from 0 to 4096
[  150.265172][ T7777] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  150.286303][ T7777] ntfs3: loop1: Failed to load $Extend.
[  150.797667][ T7781] loop0: detected capacity change from 0 to 32768
[  150.987971][ T7821] loop4: detected capacity change from 0 to 512
[  151.074890][ T7821] EXT4-fs (loop4): Ignoring removed bh option
[  151.112116][ T7824] comedi comedi3: dt2817: I/O port conflict (0xcf7,5)
[  151.135208][ T7821] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  151.178390][ T7826] loop0: detected capacity change from 0 to 128
[  151.249820][ T7821] EXT4-fs (loop4): 1 truncate cleaned up
[  151.275221][ T7821] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  151.333145][ T7802] loop1: detected capacity change from 0 to 32768
[  151.354373][ T7826] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.377971][ T7802] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  151.390550][ T7826] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  151.391571][ T7802] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  151.472392][ T7802] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  151.597351][ T7802] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  151.773796][ T7845] loop0: detected capacity change from 0 to 512
[  151.820638][ T7845] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.856652][ T7845] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.295596][ T7869] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  152.307676][ T7869] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  152.352471][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/553.tmp-b7:1' failed: Read-only file system
[  152.400653][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/539.tmp-b7:2' failed: Read-only file system
[  152.456481][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/539.tmp-b7:2' failed: Read-only file system
[  152.481579][ T4445] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  152.519829][ T4551] udevd[4551]: symlink '../../loop1' '/dev/disk/by-diskseq/553.tmp-b7:1' failed: Read-only file system
[  152.537175][ T4173] udevd[4173]: symlink '../../loop4' '/dev/disk/by-diskseq/551.tmp-b7:4' failed: Read-only file system
[  152.567599][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/539.tmp-b7:2' failed: Read-only file system
[  152.602427][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'.
[  152.616371][ T7858] loop0: detected capacity change from 0 to 32768
[  152.625223][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/539.tmp-b7:2' failed: Read-only file system
[  152.686730][ T7888] loop4: detected capacity change from 0 to 1024
[  152.781535][ T4173] udevd[4173]: symlink '../../loop0' '/dev/disk/by-diskseq/555.tmp-b7:0' failed: Read-only file system
[  152.801396][ T4259] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  152.820037][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/539.tmp-b7:2' failed: Read-only file system
[  152.847670][ T4551] udevd[4551]: symlink '../../loop4' '/dev/disk/by-diskseq/556.tmp-b7:4' failed: Read-only file system
[  152.859398][ T4281] hfsplus: b-tree write err: -5, ino 4
[  152.859931][ T4445] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.859963][ T4445] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  152.859985][ T4445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.862089][ T4445] usb 4-1: config 0 descriptor??
[  153.076620][ T7903] loop2: detected capacity change from 0 to 1764
[  153.146205][ T7907] device team_slave_0 entered promiscuous mode
[  153.153032][ T7907] device team_slave_1 entered promiscuous mode
[  153.162078][ T7907] team0: Device vlan2 is already an upper device of the team interface
[  153.177531][ T7907] device team_slave_0 left promiscuous mode
[  153.183589][ T7907] device team_slave_1 left promiscuous mode
[  153.202147][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  153.225215][ T4259] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  153.238847][ T4259] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  153.254745][ T7909] EXT4-fs (loop4): Ignoring removed nobh option
[  153.265608][ T7909] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  153.281469][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.342908][ T4445] acrux 0003:1A34:0802.0013: item fetching failed at offset 1/5
[  153.357608][ T4259] usb 2-1: config 0 descriptor??
[  153.376700][ T4445] acrux 0003:1A34:0802.0013: parse failed
[  153.401666][ T7880] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  153.419243][ T4445] acrux: probe of 0003:1A34:0802.0013 failed with error -22
[  153.518034][ T7909] EXT4-fs (loop4): Test dummy encryption mode enabled
[  153.535519][ T7909] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1442: iget: bad i_size value: 38620345925642
[  153.554346][ T7909] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1442: couldn't read orphan inode 15 (err -117)
[  153.558049][ T4250] usb 4-1: USB disconnect, device number 14
[  153.568989][ T7909] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,nomblk_io_submit,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  153.785721][ T4788] Process accounting resumed
[  153.805654][ T7931] Process accounting resumed
[  153.858563][ T7929] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  153.872662][ T4259] logitech 0003:046D:C298.0014: unbalanced collection at end of report description
[  153.898432][ T4259] logitech 0003:046D:C298.0014: parse failed
[  153.934407][ T4259] logitech: probe of 0003:046D:C298.0014 failed with error -22
[  154.075696][ T4788] usb 2-1: USB disconnect, device number 10
[  154.106670][ T7918] XFS (loop2): Mounting V5 Filesystem
[  154.432508][ T7918] XFS (loop2): Ending clean mount
[  154.476852][ T7918] XFS (loop2): Quotacheck needed: Please wait.
[  154.527762][ T7956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.780338][ T7918] XFS (loop2): Quotacheck: Done.
[  155.131213][    C0] sched: RT throttling activated
[  155.159446][ T7964] set_capacity_and_notify: 4 callbacks suppressed
[  155.159461][ T7964] loop1: detected capacity change from 0 to 1024
[  155.179796][ T4185] XFS (loop2): Unmounting Filesystem
[  155.289109][ T7949] loop4: detected capacity change from 0 to 32768
[  155.471378][ T7949] XFS (loop4): Mounting V5 Filesystem
[  155.640833][ T7953] loop0: detected capacity change from 0 to 262144
[  155.666272][ T7949] XFS (loop4): Ending clean mount
[  155.723884][ T7953] F2FS-fs (loop0): invalid crc value
[  155.733664][ T7949] XFS (loop4): Quotacheck needed: Please wait.
[  155.789333][ T7953] F2FS-fs (loop0): Found nat_bits in checkpoint
[  155.853528][ T7953] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  155.877975][ T7984] loop3: detected capacity change from 0 to 512
[  155.911544][ T7949] XFS (loop4): Quotacheck: Done.
[  155.973549][ T7984] EXT4-fs (loop3): inline encryption not supported
[  156.066626][ T7984] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1463: inode has both inline data and extents flags
[  156.172403][ T7984] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1463: couldn't read orphan inode 15 (err -117)
[  156.202626][ T4193] XFS (loop4): Unmounting Filesystem
[  156.252138][ T7999] loop1: detected capacity change from 0 to 128
[  156.252858][ T7984] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,acl,i_version,grpquota,nombcache,noinit_itable,,errors=continue. Quota mode: writeback.
[  156.365560][ T7999] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  156.403784][ T7999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.618903][ T8016] netlink: 'syz.2.1477': attribute type 1 has an invalid length.
[  156.653850][ T8016] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1477'.
[  156.667526][ T8020] netlink: 'syz.1.1479': attribute type 3 has an invalid length.
[  156.694844][ T8016] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1477'.
[  156.714768][ T8020] netlink: 'syz.1.1479': attribute type 1 has an invalid length.
[  156.775916][ T8020] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1479'.
[  157.078176][ T8048] loop2: detected capacity change from 0 to 512
[  157.125969][ T8054] loop3: detected capacity change from 0 to 64
[  157.236200][ T8053] loop1: detected capacity change from 0 to 4096
[  157.260809][ T8048] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 3: comm syz.2.1491: lblock 0 mapped to illegal pblock 3 (length 1)
[  157.322243][ T8048] EXT4-fs (loop2): Remounting filesystem read-only
[  157.328791][ T8048] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1491: error -117 reading directory block
[  157.354379][ T8048] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  157.363475][ T8048] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,discard,abort,nodelalloc,dax=inode,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[  157.366798][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/576.tmp-b7:3' failed: Read-only file system
[  157.448473][ T8065] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.496686][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/573.tmp-b7:2' failed: Read-only file system
[  157.670995][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/573.tmp-b7:2' failed: Read-only file system
[  157.683985][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-diskseq/568.tmp-b7:4' failed: Read-only file system
[  157.685610][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/574.tmp-b7:1' failed: Read-only file system
[  157.739044][ T4534] udevd[4534]: symlink '../../loop3' '/dev/disk/by-diskseq/576.tmp-b7:3' failed: Read-only file system
[  157.777309][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-diskseq/568.tmp-b7:4' failed: Read-only file system
[  157.777408][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/573.tmp-b7:2' failed: Read-only file system
[  157.811300][ T4788] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  157.828116][ T4534] udevd[4534]: symlink '../../loop3' '/dev/disk/by-diskseq/576.tmp-b7:3' failed: Read-only file system
[  157.850839][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/574.tmp-b7:1' failed: Read-only file system
[  157.877043][ T8079] loop1: detected capacity change from 0 to 16
[  157.988045][ T8079] erofs: (device loop1): mounted with root inode @ nid 36.
[  158.249045][ T8087] loop1: detected capacity change from 0 to 1024
[  158.351503][ T4788] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  158.360891][ T4788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.401766][ T4788] usb 3-1: Product: syz
[  158.401788][ T4788] usb 3-1: Manufacturer: syz
[  158.401802][ T4788] usb 3-1: SerialNumber: syz
[  158.442864][ T4788] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  158.632301][ T8094] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  158.657368][ T8073] XFS (loop0): Mounting V5 Filesystem
[  158.849279][ T8073] XFS (loop0): Ending clean mount
[  158.871141][ T8073] XFS (loop0): Quotacheck needed: Please wait.
[  158.923057][ T8109] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  158.966148][ T8073] XFS (loop0): Quotacheck: Done.
[  159.015382][ T8111] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  159.045506][ T8111] REISERFS (device loop3): using ordered data mode
[  159.052656][ T8111] reiserfs: using flush barriers
[  159.063441][ T8111] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  159.101496][ T4788] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  159.181841][ T8111] REISERFS (device loop3): checking transaction log (loop3)
[  159.192742][ T4184] XFS (loop0): Unmounting Filesystem
[  159.449121][ T8111] REISERFS (device loop3): Using tea hash to sort names
[  159.493872][ T8111] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  159.566177][ T4445] usb 3-1: USB disconnect, device number 8
[  160.160680][ T8137] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1531'.
[  160.201470][ T8132] set_capacity_and_notify: 4 callbacks suppressed
[  160.201485][ T8132] loop0: detected capacity change from 0 to 8192
[  160.259935][ T8132] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  160.271813][ T8132] REISERFS (device loop0): using journaled data mode
[  160.279267][ T8132] reiserfs: using flush barriers
[  160.301946][ T8138] loop1: detected capacity change from 0 to 4096
[  160.307948][ T8132] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  160.351535][ T4788] usb 3-1: Service connection timeout for: 256
[  160.357739][ T4788] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  160.377861][ T4788] ath9k_htc: Failed to initialize the device
[  160.386194][ T4445] usb 3-1: ath9k_htc: USB layer deinitialized
[  160.390315][ T8132] REISERFS (device loop0): checking transaction log (loop0)
[  160.393905][ T8138] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  160.405275][ T8132] REISERFS (device loop0): Using r5 hash to sort names
[  160.418926][ T8132] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  160.481315][ T8138] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  160.488847][ T8132] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  160.520134][ T8138] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  160.576454][ T8138] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  160.618056][ T8138] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  160.653893][ T8138] ntfs: volume version 3.1.
[  160.683274][ T8138] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  160.710270][ T8153] loop3: detected capacity change from 0 to 64
[  160.745160][ T8138] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  160.823395][   T26] audit: type=1800 audit(1769062910.603:21): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1537" name="file1" dev="loop3" ino=21 res=0 errno=0
[  160.868210][ T8138] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  160.889650][ T8138] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  160.949262][ T8150] chnl_net:caif_netlink_parms(): no params data found
[  161.071391][ T4447] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  161.102346][ T8162] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1541'.
[  161.190773][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.218968][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.227252][ T8150] device bridge_slave_0 entered promiscuous mode
[  161.236686][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.243897][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.252117][ T8150] device bridge_slave_1 entered promiscuous mode
[  161.277167][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.311168][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.321405][ T4447] usb 3-1: Using ep0 maxpacket: 16
[  161.364775][ T8174] loop1: detected capacity change from 0 to 128
[  161.385644][ T8150] team0: Port device team_slave_0 added
[  161.417960][ T8150] team0: Port device team_slave_1 added
[  161.421139][ T8174] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.438103][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.444799][ T4447] usb 3-1: config 1 has an invalid interface number: 214 but max is 0
[  161.445474][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.479732][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.487245][ T4447] usb 3-1: config 1 has no interface number 0
[  161.493059][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.504233][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.507619][ T8174] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.530176][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.565133][ T8150] device hsr_slave_0 entered promiscuous mode
[  161.565421][ T8178] nbd: socks must be embedded in a SOCK_ITEM attr
[  161.578003][ T4447] usb 3-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  161.588644][ T8150] device hsr_slave_1 entered promiscuous mode
[  161.594818][ T4447] usb 3-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64
[  161.594848][ T4447] usb 3-1: config 1 interface 214 has no altsetting 0
[  161.635827][ T8150] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.651585][ T8150] Cannot create hsr debugfs directory
[  161.660199][ T8161] loop0: detected capacity change from 0 to 32768
[  161.754488][ T4447] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  161.764495][ T4447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.774112][ T4447] usb 3-1: Product: syz
[  161.778379][ T4447] usb 3-1: Manufacturer: syz
[  161.790795][ T8182] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  161.794547][ T4447] usb 3-1: SerialNumber: syz
[  161.869180][ T8155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.880544][ T8155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.892294][ T4447] ums-alauda 3-1:1.214: USB Mass Storage device detected
[  161.918109][ T4447] scsi host1: usb-storage 3-1:1.214
[  162.026463][ T8191] sp0: Synchronizing with TNC
[  162.201811][ T8150] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  162.266056][ T8150] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  162.278684][ T4788] usb 3-1: USB disconnect, device number 9
[  162.324889][ T8195] loop1: detected capacity change from 0 to 32768
[  162.366977][ T8150] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  162.384612][ T8195] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1551 (8195)
[  162.406878][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/606.tmp-b7:0' failed: Read-only file system
[  162.432700][ T8150] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  162.476984][ T8195] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  162.486142][ T8195] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  162.496828][ T8195] BTRFS info (device loop1): trying to use backup root at mount time
[  162.504952][ T8195] BTRFS info (device loop1): setting nodatacow, compression disabled
[  162.513120][ T8195] BTRFS info (device loop1): using free space tree
[  162.520519][ T8195] BTRFS info (device loop1): has skinny extents
[  162.570604][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/606.tmp-b7:0' failed: Read-only file system
[  162.577694][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.593206][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-diskseq/607.tmp-b7:1' failed: Read-only file system
[  162.598223][ T8150] 8021q: adding VLAN 0 to HW filter on device team0
[  162.612844][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.640214][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/601.tmp-b7:3' failed: Read-only file system
[  162.660787][ T4173] udevd[4173]: symlink '../../loop1' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:1' failed: Read-only file system
[  162.675732][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.689260][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.703576][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.713319][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.720420][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.732588][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.740144][ T4551] udevd[4551]: symlink '../../loop0' '/dev/disk/by-diskseq/606.tmp-b7:0' failed: Read-only file system
[  162.754456][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.766099][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.781733][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.788876][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.827097][ T4447] Bluetooth: hci4: command 0x0409 tx timeout
[  162.864670][ T4551] udevd[4551]: symlink '../../loop2' '/dev/disk/by-diskseq/583.tmp-b7:2' failed: Read-only file system
[  162.899043][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.938755][  T144] BTRFS warning (device loop1): checksum verify failed on 5312512 wanted 0xa4099a8a031703f7fa0600c3c20f056c685165851acde21331649996c26097e7 found 0xa4099a8a031703f7fa3c85c3c20f056c685165851acde21331649996c26097e7 level 0
[  162.948125][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/606.tmp-b7:0' failed: Read-only file system
[  162.962014][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.980964][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.994308][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  163.013381][ T8195] BTRFS warning (device loop1): failed to read root (objectid=7): -5
[  163.017072][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  163.033765][ T7056] BTRFS warning (device loop1): checksum verify failed on 5312512 wanted 0xa4099a8a031703f7fa0600c3c20f056c685165851acde21331649996c26097e7 found 0xa4099a8a031703f7fa3c85c3c20f056c685165851acde21331649996c26097e7 level 0
[  163.038536][ T8234] input: syz1 as /devices/virtual/input/input9
[  163.063681][ T8195] BTRFS warning (device loop1): failed to read root (objectid=7): -5
[  163.073666][ T8195] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[  163.083732][ T8195] BTRFS warning (device loop1): couldn't read tree root
[  163.091065][ T4281] BTRFS warning (device loop1): checksum verify failed on 5242880 wanted 0x8d90b910ec13d95ec17ddbe87d1d5dca5d3dff1259e90cf51f7cd4ff39170caa found 0x2c6f33dc4a1b8241cbc053946ef24b7ff492958e8750b32b0a34987f52d1e2e7 level 0
[  163.132490][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.161589][ T8195] BTRFS warning (device loop1): couldn't read tree root
[  163.184818][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/601.tmp-b7:3' failed: Read-only file system
[  163.209281][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.223368][ T8195] BTRFS error (device loop1): open_ctree failed: -22
[  163.232038][ T4177] udevd[4177]: symlink '../../loop2' '/dev/disk/by-diskseq/583.tmp-b7:2' failed: Read-only file system
[  163.269605][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.271537][ T4173] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4173)
[  163.289741][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.312252][ T8150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.372068][ T8150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.398174][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.417280][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.799767][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.811596][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.897061][ T8250] netlink: 'syz.0.1562': attribute type 1 has an invalid length.
[  163.931495][ T8250] netlink: 'syz.0.1562': attribute type 2 has an invalid length.
[  163.944195][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.997330][ T8257] loop2: detected capacity change from 0 to 512
[  164.086801][ T8242] loop3: detected capacity change from 0 to 32768
[  164.101521][ T8257] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  164.217164][ T8242] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  164.264223][ T8242] (syz.3.1560,8242,0):ocfs2_clear_journal_error:1085 ERROR: File system error -318767104 recorded in journal 0.
[  164.291276][ T8242] (syz.3.1560,8242,1):ocfs2_clear_journal_error:1087 ERROR: File system on device loop3 needs checking.
[  164.348685][ T8242] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  164.369801][  T363] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  164.523718][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.558587][ T4191] ocfs2: Unmounting device (7,3) on (node local)
[  164.575834][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.614370][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.626517][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.645857][ T8150] device veth0_vlan entered promiscuous mode
[  164.658111][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.676221][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.699995][ T8150] device veth1_vlan entered promiscuous mode
[  164.783274][ T8262] loop1: detected capacity change from 0 to 32768
[  164.790394][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.799369][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.819808][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'.
[  164.827713][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.838017][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.861055][ T8262] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  164.877723][ T8150] device veth0_macvtap entered promiscuous mode
[  164.893636][ T8150] device veth1_macvtap entered promiscuous mode
[  164.901891][ T4227] Bluetooth: hci4: command 0x041b tx timeout
[  164.908829][ T8262] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  164.921404][ T4952] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  164.937939][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.949239][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.960167][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.970788][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.981633][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.994920][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.005520][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.016163][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.024803][ T8262] 
[  165.026111][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.028283][ T8262] ======================================================
[  165.028289][ T8262] WARNING: possible circular locking dependency detected
[  165.028303][ T8262] syzkaller #0 Not tainted
[  165.028312][ T8262] ------------------------------------------------------
[  165.028317][ T8262] syz.1.1567/8262 is trying to acquire lock:
[  165.039679][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.046058][ T8262] ffff888063614da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_read_virt_blocks+0x237/0x8d0
[  165.046108][ T8262] 
[  165.046108][ T8262] but task is already holding lock:
[  165.046112][ T8262] ffff88806291dce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  165.055147][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.057538][ T8262] 
[  165.057538][ T8262] which lock already depends on the new lock.
[  165.057538][ T8262] 
[  165.057545][ T8262] 
[  165.057545][ T8262] the existing dependency chain (in reverse order) is:
[  165.057550][ T8262] 
[  165.057550][ T8262] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}
[  165.067314][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.070523][ T8262] :
[  165.070529][ T8262]        down_read+0x44/0x2e0
[  165.070551][ T8262]        ocfs2_start_trans+0x3a6/0x6f0
[  165.081531][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.091234][ T8262]        ocfs2_shutdown_local_alloc+0x1f8/0xaa0
[  165.091260][ T8262]        ocfs2_dismount_volume+0x1e1/0x8a0
[  165.091277][ T8262]        generic_shutdown_super+0x130/0x300
[  165.091292][ T8262]        kill_block_super+0x7c/0xe0
[  165.091305][ T8262]        deactivate_locked_super+0x93/0xf0
[  165.091316][ T8262]        cleanup_mnt+0x42d/0x4e0
[  165.091330][ T8262]        task_work_run+0x125/0x1a0
[  165.091345][ T8262]        exit_to_user_mode_loop+0x10f/0x130
[  165.099470][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.108932][ T8262]        exit_to_user_mode_prepare+0xee/0x180
[  165.108964][ T8262]        syscall_exit_to_user_mode+0x16/0x40
[  165.108980][ T8262]        do_syscall_64+0x58/0xa0
[  165.108991][ T8262]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.109005][ T8262] 
[  165.109005][ T8262] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  165.109033][ T8262]        ocfs2_start_trans+0x2a7/0x6f0
[  165.109051][ T8262]        ocfs2_setattr+0x1006/0x1ad0
[  165.109065][ T8262]        notify_change+0xbcd/0xee0
[  165.109080][ T8262]        chown_common+0x4a7/0x660
[  165.109095][ T8262]        ksys_fchown+0xe2/0x150
[  165.109110][ T8262]        __x64_sys_fchown+0x76/0x80
[  165.109125][ T8262]        do_syscall_64+0x4c/0xa0
[  165.118641][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.126823][ T8262]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.126852][ T8262] 
[  165.126852][ T8262] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  165.126876][ T8262]        __lock_acquire+0x2c42/0x7d10
[  165.126894][ T8262]        lock_acquire+0x19e/0x400
[  165.126907][ T8262]        down_read+0x44/0x2e0
[  165.126919][ T8262]        ocfs2_read_virt_blocks+0x237/0x8d0
[  165.126935][ T8262]        ocfs2_read_dir_block+0xd1/0x4f0
[  165.126948][ T8262]        ocfs2_dir_foreach_blk+0x264/0x19d0
[  165.126970][ T8262]        ocfs2_empty_dir+0x1a8/0x730
[  165.136816][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.144378][ T8262]        ocfs2_rename+0x21c0/0x3960
[  165.144410][ T8262]        vfs_rename+0xbe1/0x1100
[  165.144425][ T8262]        do_renameat2+0x8b7/0xf60
[  165.144437][ T8262]        __x64_sys_rename+0x82/0x90
[  165.144450][ T8262]        do_syscall_64+0x4c/0xa0
[  165.144463][ T8262]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.144477][ T8262] 
[  165.144477][ T8262] other info that might help us debug this:
[  165.144477][ T8262] 
[  165.144481][ T8262] Chain exists of:
[  165.144481][ T8262]   &ocfs2_file_ip_alloc_sem_key --> sb_internal#3 --> &journal->j_trans_barrier
[  165.144481][ T8262] 
[  165.144515][ T8262]  Possible unsafe locking scenario:
[  165.144515][ T8262] 
[  165.144520][ T8262]        CPU0                    CPU1
[  165.144524][ T8262]        ----                    ----
[  165.144528][ T8262]   lock(&journal->j_trans_barrier);
[  165.144539][ T8262]                                lock(sb_internal#3);
[  165.144560][ T8262]                                lock(&journal->j_trans_barrier);
[  165.144571][ T8262]   lock(&ocfs2_file_ip_alloc_sem_key);
[  165.144580][ T8262] 
[  165.144580][ T8262]  *** DEADLOCK ***
[  165.144580][ T8262] 
[  165.144583][ T8262] 7 locks held by syz.1.1567/8262:
[  165.144593][ T8262]  #0: ffff888062f3e460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  165.144633][ T8262]  #1: ffff88805f72a648 (&type->i_mutex_dir_key#23/1){+.+.}-{3:3}, at: do_renameat2+0x43d/0xf60
[  165.168838][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.177345][ T8262]  #2: ffff888063615108 (&sb->s_type->i_mutex_key#39){+.+.}-{3:3}, at: vfs_rename+0x839/0x1100
[  165.177403][ T8262]  #3: ffff88806363d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]
[  165.201501][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.206252][ T8262] ){+.+.}-{3:3}, at: ocfs2_lookup_lock_orphan_dir+0xe9/0x2d0
[  165.212058][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.216285][ T8262]  #4: ffff888062f3e650
[  165.224127][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.232577][ T8262]  (sb_internal#3){.+.+}-{0:0}, at: ocfs2_rename+0x1a51/0x3960
[  165.232621][ T8262]  #5: ffff88806291dce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  165.232657][ T8262]  #6: ffff88801f6e6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x134c/0x15c0
[  165.239242][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.244680][ T8262] 
[  165.244680][ T8262] stack backtrace:
[  165.244687][ T8262] CPU: 1 PID: 8262 Comm: syz.1.1567 Not tainted syzkaller #0
[  165.244702][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  165.244710][ T8262] Call Trace:
[  165.244716][ T8262]  <TASK>
[  165.244722][ T8262]  dump_stack_lvl+0x188/0x250
[  165.244742][ T8262]  ? load_image+0x400/0x400
[  165.244759][ T8262]  ? show_regs_print_info+0x20/0x20
[  165.252301][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.256070][ T8262]  ? print_circular_bug+0x12b/0x1a0
[  165.267063][ T8150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.268946][ T8262]  check_noncircular+0x296/0x330
[  165.291563][ T8150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.294327][ T8262]  ? add_chain_block+0x940/0x940
[  165.302858][ T8150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.309030][ T8262]  ? _find_first_zero_bit+0xce/0xf0
[  165.316151][ T8150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.324163][ T8262]  ? add_lock_to_list+0x18d/0x280
[  165.324184][ T8262]  __lock_acquire+0x2c42/0x7d10
[  165.324209][ T8262]  ? __bfs+0x2a3/0x5c0
[  165.324222][ T8262]  ? verify_lock_unused+0x140/0x140
[  165.324239][ T8262]  ? check_noncircular+0x189/0x330
[  165.324255][ T8262]  ? lockdep_lock+0xf1/0x1f0
[  165.747190][ T8262]  lock_acquire+0x19e/0x400
[  165.751682][ T8262]  ? ocfs2_read_virt_blocks+0x237/0x8d0
[  165.757356][ T8262]  ? __lock_acquire+0x12e8/0x7d10
[  165.762370][ T8262]  ? __might_sleep+0xf0/0xf0
[  165.766944][ T8262]  ? read_lock_is_recursive+0x10/0x10
[  165.772308][ T8262]  down_read+0x44/0x2e0
[  165.776472][ T8262]  ? ocfs2_read_virt_blocks+0x237/0x8d0
[  165.782000][ T8262]  ocfs2_read_virt_blocks+0x237/0x8d0
[  165.787375][ T8262]  ? ocfs2_validate_dx_leaf+0x210/0x210
[  165.792904][ T8262]  ? ocfs2_seek_data_hole_offset+0x9a0/0x9a0
[  165.798879][ T8262]  ocfs2_read_dir_block+0xd1/0x4f0
[  165.803973][ T8262]  ? ocfs2_check_dir_trailer+0x220/0x220
[  165.809583][ T8262]  ? __lock_acquire+0x7d10/0x7d10
[  165.814585][ T8262]  ? read_lock_is_recursive+0x10/0x10
[  165.819935][ T8262]  ? slab_post_alloc_hook+0x4c/0x380
[  165.825203][ T8262]  ? jbd2__journal_start+0x13c/0x5a0
[  165.830466][ T8262]  ? jbd2_journal_start+0x26/0x30
[  165.835465][ T8262]  ? ocfs2_start_trans+0x3b2/0x6f0
[  165.840554][ T8262]  ? vfs_rename+0xbe1/0x1100
[  165.845141][ T8262]  ? do_renameat2+0x8b7/0xf60
[  165.849795][ T8262]  ? __x64_sys_rename+0x82/0x90
[  165.854677][ T8262]  ocfs2_dir_foreach_blk+0x264/0x19d0
[  165.860029][ T8262]  ? start_this_handle+0x1495/0x15c0
[  165.865302][ T8262]  ? ocfs2_dir_foreach+0xf0/0xf0
[  165.870226][ T8262]  ? jbd2__journal_start+0x5a0/0x5a0
[  165.875493][ T8262]  ? slab_post_alloc_hook+0x68/0x380
[  165.880757][ T8262]  ? ocfs2_empty_dir+0xc1/0x730
[  165.885592][ T8262]  ocfs2_empty_dir+0x1a8/0x730
[  165.890340][ T8262]  ? trace_jbd2_handle_start+0x8a/0x1f0
[  165.895865][ T8262]  ? ocfs2_check_dir_for_entry+0x3d0/0x3d0
[  165.901657][ T8262]  ? jbd2__journal_start+0x38e/0x5a0
[  165.906929][ T8262]  ? jbd2_journal_start+0x26/0x30
[  165.911931][ T8262]  ? ocfs2_start_trans+0x4db/0x6f0
[  165.917019][ T8262]  ? ocfs2_empty_dir+0x730/0x730
[  165.921935][ T8262]  ? ocfs2_recovery_exit+0x50/0x50
[  165.927035][ T8262]  ? trace_ocfs2_rename_over_existing+0x84/0x1d0
[  165.933340][ T8262]  ocfs2_rename+0x21c0/0x3960
[  165.938002][ T8262]  ? ocfs2_mknod+0x2510/0x2510
[  165.942744][ T8262]  ? is_bpf_text_address+0x254/0x270
[  165.948005][ T8262]  ? __kernel_text_address+0x9a/0x100
[  165.953354][ T8262]  ? stack_trace_save+0xf0/0xf0
[  165.958188][ T8262]  ? check_noncircular+0x189/0x330
[  165.963277][ T8262]  ? add_lock_to_list+0x18d/0x280
[  165.968281][ T8262]  ? __lock_acquire+0x28ac/0x7d10
[  165.973285][ T8262]  ? verify_lock_unused+0x140/0x140
[  165.978462][ T8262]  ? verify_lock_unused+0x140/0x140
[  165.983643][ T8262]  ? do_raw_spin_unlock+0x11d/0x230
[  165.988826][ T8262]  ? rwsem_write_trylock+0x135/0x1c0
[  165.994092][ T8262]  ? clear_nonspinnable+0x60/0x60
[  165.999098][ T8262]  ? take_dentry_name_snapshot+0x8e/0xf0
[  166.004795][ T8262]  ? ocfs2_mknod+0x2510/0x2510
[  166.009544][ T8262]  vfs_rename+0xbe1/0x1100
[  166.013948][ T8262]  ? __ia32_sys_link+0x90/0x90
[  166.018698][ T8262]  ? hook_path_rename+0x100/0x310
[  166.023706][ T8262]  ? bpf_lsm_path_rename+0x5/0x10
[  166.028727][ T8262]  ? security_path_rename+0x1ec/0x280
[  166.034090][ T8262]  do_renameat2+0x8b7/0xf60
[  166.038584][ T8262]  ? fsnotify_move+0x4e0/0x4e0
[  166.043326][ T8262]  ? __phys_addr_symbol+0x2b/0x70
[  166.048336][ T8262]  ? getname_flags+0x1fe/0x500
[  166.053077][ T8262]  __x64_sys_rename+0x82/0x90
[  166.057735][ T8262]  do_syscall_64+0x4c/0xa0
[  166.062125][ T8262]  ? clear_bhb_loop+0x30/0x80
[  166.066783][ T8262]  ? clear_bhb_loop+0x30/0x80
[  166.071440][ T8262]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  166.077327][ T8262] RIP: 0033:0x7fbe76778cb9
[  166.081719][ T8262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.101310][ T8262] RSP: 002b:00007fbe749d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  166.109732][ T8262] RAX: ffffffffffffffda RBX: 00007fbe769f3fa0 RCX: 00007fbe76778cb9
[  166.117815][ T8262] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000200000000180
[  166.125779][ T8262] RBP: 00007fbe767e6bf7 R08: 0000000000000000 R09: 0000000000000000
[  166.133741][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.141696][ T8262] R13: 00007fbe769f4038 R14: 00007fbe769f3fa0 R15: 00007fff63b644a8
[  166.149664][ T8262]  </TASK>
[  166.176911][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  166.179694][ T8287] loop0: detected capacity change from 0 to 1024
[  166.194825][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  166.203464][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  166.207920][ T4183] ocfs2: Unmounting device (7,1) on (node local)
[  166.213978][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.227196][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  166.236084][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  166.253289][ T8287] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  166.267315][ T8150] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
[  166.285543][ T4952] usb 4-1: Using ep0 maxpacket: 16
[  166.326006][ T8287] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  166.330999][  T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.362921][ T8150] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht'
[  166.381375][  T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.391673][ T8287] EXT4-fs error (device loop0): __ext4_new_inode:1076: comm syz.0.1573: reserved inode found cleared - inode=18
[  166.406174][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.423655][ T4952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.437796][ T4952] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  166.449025][ T4952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.453125][  T363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.458886][ T4952] usb 4-1: config 0 descriptor??
[  166.470151][  T363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.479104][  T363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.943086][ T4952] elan 0003:04F3:0755.0015: hidraw0: USB HID v0.05 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  166.981297][ T4447] Bluetooth: hci4: command 0x040f tx timeout
[  167.345463][   T23] usb 4-1: USB disconnect, device number 15
[  167.857742][ T4551] udevd[4551]: symlink '../../loop3' '/dev/disk/by-diskseq/613.tmp-b7:3' failed: Read-only file system
[  169.061282][ T4445] Bluetooth: hci4: command 0x0419 tx timeout
[  170.671572][ T4952] Bluetooth: hci0: command 0x0406 tx timeout
[  170.677645][ T4952] Bluetooth: hci2: command 0x0406 tx timeout
[  170.683810][ T4952] Bluetooth: hci1: command 0x0406 tx timeout
[  170.689817][ T4952] Bluetooth: hci3: command 0x0406 tx timeout